@miaixz/sdk 0.5.0

package/LICENSE

@@ -0,0 +1,202 @@
+
+                                 Apache License
+                           Version 2.0, January 2004
+                        https://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright [yyyy] [name of copyright owner]
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.

package/NOTICE

@@ -0,0 +1,7 @@
+Miaixz SDK
+
+Copyright (c) 2015-2026 miaixz.org and other contributors.
+
+This product includes software developed by
+The Miaixz Team (https://www.miaixz.org).
+

package/README.md

@@ -0,0 +1,412 @@
+# @miaixz/sdk
+
+`@miaixz/sdk` 是仅支持 ESM 的 npm 包，不提供 CommonJS `require` 入口。消费端必须使用标准 ESM `import`。
+
+Miaixz 官方浏览器 SDK。用于不同部署位置的首页、空间、设置等前端服务，共享统一的 API 协议、认证、运行上下文、配置、权限、事件、文件、外观和国际化能力。
+
+SDK 不包含运行时第三方依赖，可使用 npm 独立构建和发布。
+
+当前 `0.5.x` 建设阶段使用 Host Bridge 协议 `1.0.0`。完整的版本、浏览器与废弃策略见 [SUPPORT.md](./SUPPORT.md)。
+
+## 安装
+
+```bash
+npm install @miaixz/sdk
+```
+
+## 一次性初始化
+
+```ts
+import { createMiaixzSdk } from "@miaixz/sdk";
+
+const sdk = createMiaixzSdk({
+  appId: "portal",
+  config: {
+    apiBaseUrl: "https://api.miaixz.example",
+    environment: "production",
+    services: { space: "https://space-api.miaixz.example" },
+  },
+  csrfTokenProvider: () =>
+    document.querySelector<HTMLMetaElement>('meta[name="csrf-token"]')?.content,
+  locale: "zh-CN",
+});
+
+await sdk.ready;
+sdk.context.set({
+  tenantId: "tenant-1",
+  spaceId: "space-1",
+  locale: "zh-CN",
+});
+```
+
+租户是数据与安全隔离边界，SDK 通过 `X-Miaixz-Tenant-Id` 请求头传递 `tenantId`。空间等运行上下文同样通过请求头传递，不要求使用 `/spaces/:spaceId` 一类路径参数。
+
+`organizationId` 仅表示当前租户内部选中的组织实体，不得代替 `tenantId` 承担租户隔离。部门、岗位与职称等组织架构仍属于 organization 领域。
+
+`context.set()` 会替换完整上下文，局部更新请使用 `context.patch()`。即使完整替换时未传入 `locale`，组合式 SDK 仍会把当前国际化语言写入请求头。
+
+认证默认使用 Cookie/BFF 模式：请求会传递 `credentials: "include"`，SDK 不读取 HttpOnly Cookie、不创建 Token Session，也不附加 `Authorization` Header。`POST`、`PUT`、`PATCH`、`DELETE` 还必须由 `csrfTokenProvider` 提供非空 Token；SDK 会忽略消费方和请求拦截器写入的同名值，只把 Provider 返回值写入 `X-CSRF-Token`。`GET`、`HEAD`、`OPTIONS` 不读取 Provider，也不会附加该 Header。
+
+需要 Bearer 模式时必须显式声明 `authMode: "bearer"`。认证会话默认只保存在当前 SDK 实例内存中，刷新页面后不会保留：
+
+```ts
+const sdk = createMiaixzSdk({
+  appId: "portal",
+  authMode: "bearer",
+  config,
+});
+
+sdk.auth.setSession({
+  accessToken: "token",
+  tokenType: "DP-Token",
+});
+```
+
+仅在明确接受 Web Storage 可能受脚本注入窃取的风险时，才可通过唯一工厂启用持久化。优先使用默认内存模式或 HttpOnly Cookie/BFF：
+
+```ts
+import { createMiaixzPersistentAuthStorage, createMiaixzSdk } from "@miaixz/sdk";
+
+const authPersistence = createMiaixzPersistentAuthStorage(window.sessionStorage, {
+  acknowledgeWebStorageRisk: true,
+});
+
+const sdk = createMiaixzSdk({
+  appId: "portal",
+  authMode: "bearer",
+  authPersistence,
+  config,
+});
+```
+
+## API 返回协议
+
+所有 JSON API 默认必须返回统一结构：
+
+```json
+{
+  "errcode": "0",
+  "errmsg": "success",
+  "data": {}
+}
+```
+
+- `String(errcode) === "0"`：请求成功，SDK 自动返回内部 `data`。
+- `errcode !== "0"`：即使 HTTP 状态是 `200`，也会抛出 `MiaixzApiError`。
+- JSON 响应缺少 `errcode`、`errmsg` 或 `data`：抛出代码为 `API_ENVELOPE_INVALID` 的错误。
+- 文本、Blob、ArrayBuffer 和空响应不要求使用该结构。
+
+```ts
+interface Space {
+  id: string;
+  name: string;
+}
+
+const response = await sdk.api.get<Space>("/space/current");
+
+// 已经是 data，不需要 response.data.data
+console.log(response.data.name);
+```
+
+特殊接口可显式设置 `envelope: "optional"`，兼容有无返回包的 JSON；设置 `envelope: "none"` 时保留原始 JSON。业务 API 应保持默认的 `required`。
+
+## 项目多语言文件
+
+SDK 内只保留基础错误文案。各项目或微服务通过自己的语言文件扩展和覆盖文案，并可按语言懒加载。
+
+```ts
+// src/locales/zh-CN.ts
+import type { MiaixzMessages } from "@miaixz/sdk/i18n";
+
+export default {
+  "space.error.notFound": "未找到空间",
+  "sdk.error.network": "当前网络不可用，请稍后重试",
+} satisfies MiaixzMessages;
+```
+
+```ts
+import { createMiaixzMessageLoader, createMiaixzSdk } from "@miaixz/sdk";
+
+const loadMessages = createMiaixzMessageLoader({
+  space: {
+    "zh-CN": () => import("./locales/zh-CN.js"),
+    "en-US": () => import("./locales/en-US.js"),
+  },
+});
+
+const sdk = createMiaixzSdk({
+  appId: "portal",
+  config,
+  locale: "zh-CN",
+  fallbackLocale: "en-US",
+  loadMessages,
+  onI18nLoadError(error) {
+    // 交由项目自己的日志或错误界面处理
+    reportError(error);
+  },
+});
+
+await sdk.ready;
+console.log(sdk.i18n.t("space.error.notFound"));
+
+// 切换前自动加载并缓存对应项目语言文件
+await sdk.i18n.changeLocale("en-US");
+```
+
+也可在初始化时通过 `messages` 直接传入已静态导入的语言目录。项目文案优先级高于 SDK 内置文案；当前语言缺失时回退到 `fallbackLocale`，仍缺失时返回消息键。
+
+后端业务错误可使用 `api.error.<errcode>` 作为项目语言键，例如 `api.error.SPACE_FORBIDDEN`。存在该键时 SDK 使用项目译文；不存在时回退到接口返回的 `errmsg`。
+
+## 外观、主题与密度
+
+SDK 是跨服务外观状态的唯一权威来源，负责校验、按应用和租户隔离持久化并发布变化；DOM 写入由 `@miaixz/ui` 完成：
+
+```ts
+import { createMiaixzSdk } from "@miaixz/sdk";
+import { applyMiaixzAppearance } from "@miaixz/ui/appearance";
+
+const sdk = createMiaixzSdk({ appId: "portal", config });
+
+applyMiaixzAppearance(sdk.appearance.getSnapshot());
+const stopAppearance = sdk.appearance.subscribe((appearance) => {
+  applyMiaixzAppearance(appearance);
+});
+
+sdk.appearance.patch({
+  colorMode: "dark",
+  density: "compact",
+  colors: { brand: "#55b52d" },
+});
+
+stopAppearance();
+sdk.destroy();
+```
+
+支持 `light`、`dark`、`system` 三种颜色偏好和 `compact`、`standard`、`comfortable` 三档密度。所有自定义语义颜色会在提交前完成格式与对比度校验；无效设置不会部分写入。
+
+## 独立服务 API
+
+```ts
+const spaceApi = sdk.createServiceClient("space");
+const spaces = await spaceApi.get<readonly Space[]>("/spaces");
+```
+
+服务端点由配置统一下发，各前端服务无需硬编码部署地址。
+
+主端点和服务端点必须是绝对 URL。production、staging 只允许 HTTPS；development、test 仅额外允许 `localhost`、`127.0.0.1`、`[::1]` 的 HTTP 地址。端点不能包含用户信息、查询参数或片段。
+
+单次请求只接受相对路径或以 `/` 开头的同源路径，禁止传入绝对 URL 或 `//host`。跨服务调用必须先创建对应服务客户端；认证、Cookie、CSRF 或运行上下文请求固定使用 `redirect: "error"`，请求拦截器不能改写该安全策略或把请求转发到其他来源。
+
+```ts
+import { createApiClient } from "@miaixz/sdk/api";
+
+const publicApi = createApiClient({
+  baseUrl: "https://public-api.miaixz.example",
+  environment: "production",
+});
+
+await publicApi.get("/health", {
+  authenticate: false,
+  includeContext: false,
+});
+```
+
+调用 `sdk.config.set(nextConfig)` 后，主 API 客户端与文件客户端会自动切换到新地址和超时配置；后续创建的服务客户端也会读取最新配置。
+
+## 错误处理
+
+SDK 不抛出裸字符串。请求失败会保留稳定类型、机器码和安全诊断字段，消费项目应先处理可恢复分支，再把消息键交给国际化运行时：
+
+```ts
+import {
+  isMiaixzApiError,
+  MiaixzAbortError,
+  MiaixzNetworkError,
+  MiaixzTimeoutError,
+} from "@miaixz/sdk/errors";
+
+try {
+  await sdk.api.get("/spaces");
+} catch (error) {
+  if (error instanceof MiaixzAbortError) return;
+  if (error instanceof MiaixzTimeoutError || error instanceof MiaixzNetworkError) {
+    showRetryMessage(error.message);
+    return;
+  }
+  if (isMiaixzApiError(error)) {
+    showApiMessage({ code: error.code, message: error.message, retryable: error.retryable });
+    return;
+  }
+  throw error;
+}
+```
+
+日志与遥测中禁止记录 Token、Cookie、授权头、CSRF、个人信息、请求正文或文件内容。前端错误只辅助交互，服务端仍须执行鉴权和输入校验。
+
+## 权限
+
+```ts
+sdk.setPermissions({
+  allowed: ["space:*", "organization:read"],
+  denied: ["space:delete"],
+  roles: ["member"],
+});
+
+sdk.permissions.can("space:read");
+sdk.permissions.canAll(["space:read", "organization:read"]);
+```
+
+前端权限只用于界面和交互控制，不能替代后端鉴权。
+
+## 本地与跨标签事件
+
+SDK 事件默认只在当前实例内同步分发，不会创建 `BroadcastChannel`。需要同源跨标签同步时，由组合入口根据 `appId` 生成唯一的版本化频道名：
+
+```ts
+const sdk = createMiaixzSdk({
+  appId: "portal",
+  config,
+  eventChannel: true,
+});
+
+const stop = sdk.events.on("locale:changed", ({ locale }) => {
+  console.log(locale);
+});
+
+stop();
+```
+
+内置的认证、上下文、外观、语言和配置事件均具有不可覆盖的运行时校验器。认证事件只传递 `authenticated` 或 `anonymous` 状态，禁止传递 Session、Token、Cookie 或授权头。
+
+应用自定义事件默认也可在本实例内使用；跨标签发送前必须提供对应运行时校验器。直接创建事件总线时，频道名必须采用 `miaixz:v1:<appId>:events`：
+
+```ts
+import { createMiaixzEventBus } from "@miaixz/sdk/events";
+
+interface PortalEvents {
+  "portal:ready": Readonly<{ ready: boolean }>;
+}
+
+const events = createMiaixzEventBus<PortalEvents>({
+  channelName: "miaixz:v1:portal:events",
+  validators: {
+    "portal:ready": (payload) =>
+      typeof payload === "object" &&
+      payload !== null &&
+      "ready" in payload &&
+      typeof payload.ready === "boolean",
+  },
+});
+```
+
+## 稳定子路径
+
+```ts
+import { createApiClient } from "@miaixz/sdk/api";
+import { createMiaixzI18n } from "@miaixz/sdk/i18n";
+import type { MiaixzSpace } from "@miaixz/sdk/types";
+import { formatMiaixzBytes } from "@miaixz/sdk/formatters";
+```
+
+已发布子路径包括 `api`、`auth`、`context`、`config`、`contracts`、`permissions`、`events`、`storage`、`appearance`、`files`、`i18n`、`sdk`、`consts`、`errors`、`formatters`、`models`、`types`、`utils` 和 `validators`。
+
+## 微前端模块清单
+
+独立部署的模块只需依赖 `@miaixz/sdk`，即可声明和校验纯 JSON 清单：
+
+```ts
+import {
+  MIAIXZ_MODULE_PROTOCOL_VERSION,
+  parseMiaixzModuleManifest,
+  type MiaixzIntegratedModule,
+  type MiaixzModuleManifest,
+} from "@miaixz/sdk/contracts";
+
+const manifest = {
+  protocolVersion: MIAIXZ_MODULE_PROTOCOL_VERSION,
+  id: "spaces-console",
+  version: "1.2.0",
+  hostVersion: "^1.0.0",
+  kind: "integrated",
+  basePath: "/spaces",
+  entry: "@miaixz/spaces",
+  routes: [
+    {
+      id: "spaces-home",
+      path: "/",
+      titleKey: "spaces.route.home",
+      requiredPermissions: ["spaces:workspace:read"],
+    },
+  ],
+  navigation: [
+    {
+      id: "spaces-navigation",
+      routeId: "spaces-home",
+      labelKey: "spaces.navigation.home",
+      order: 10,
+    },
+  ],
+  requiredPermissions: ["spaces:workspace:read"],
+  requiredCapabilities: ["context", "navigation", "permissions"],
+} satisfies MiaixzModuleManifest;
+
+const verifiedManifest = parseMiaixzModuleManifest(manifest, {
+  environment: "production",
+  hostVersion: "1.3.0",
+});
+
+export const module: MiaixzIntegratedModule = {
+  mount({ container }) {
+    container.textContent = verifiedManifest.id;
+    return {
+      unmount() {
+        container.replaceChildren();
+      },
+    };
+  },
+};
+```
+
+同运行时模块使用 `createMiaixzDirectHostBridge()`。跨域 iframe 必须在两端使用精确 origin，并分别创建 Host 与 Child Bridge；禁止使用 `"*"`：
+
+```ts
+import { createMiaixzDirectHostBridge } from "@miaixz/sdk/runtime";
+
+const bridge = createMiaixzDirectHostBridge({
+  moduleId: "spaces-console",
+  adapter: {
+    getContext: async () => sdk.context.getSnapshot(),
+    hasPermissions: async (permissions) => sdk.permissions.canAll(permissions),
+  },
+});
+
+const context = await bridge.getContext();
+bridge.dispose();
+```
+
+模块不得通过共享全局变量或直接读取宿主 DOM 获取上下文。完整可编译示例见 [仓库测试示例目录](https://github.com/818000/miaixz.js/tree/main/sdk/tests/examples)。
+
+## 本地开发
+
+```bash
+npm install
+npm run check
+npm test
+npm run test:consumer
+npm run test:size
+npm run api:check
+npm run pack:check
+```
+
+发布由仓库的 `Release Vendor Package` 工作流统一执行。默认 `dry-run` 只生成可审计构件，不发布到 npm；`next` 和 `latest` 必须从对应受保护 Tag 启动，并通过 `npm-production` 环境人工批准。正式发布使用 npm Trusted Publishing/OIDC，不配置长期 npm Token。
+
+## 治理文档
+
+- [CHANGELOG.md](./CHANGELOG.md)：版本变化。
+- [MIGRATION.md](./MIGRATION.md)：迁移步骤。
+- [SECURITY.md](./SECURITY.md)：漏洞报告与安全边界。
+- [SUPPORT.md](./SUPPORT.md)：兼容、浏览器与废弃周期。
+
+## License
+
+Apache-2.0