@pactor-app/module-pack 1.55.0 → 1.56.0

package/dist/index.cjs

@@ -21,18 +21,28 @@ var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: tru
 var index_exports = {};
 __export(index_exports, {
   CLIENT_EXTERNALS: () => CLIENT_EXTERNALS,
+  CLIENT_STYLES_ENTRY: () => CLIENT_STYLES_ENTRY,
   CONFIG_DEFAULTS: () => CONFIG_DEFAULTS,
   CONFIG_FILE: () => CONFIG_FILE,
   ConfigError: () => ConfigError,
   DEFAULT_TARGET: () => DEFAULT_TARGET,
   INCLUDE_KEY: () => INCLUDE_KEY,
   IncludeError: () => IncludeError,
+  MODULE_ID_PREFIX: () => MODULE_ID_PREFIX,
   ModuleBuildError: () => ModuleBuildError,
   ProfileError: () => ProfileError,
+  SERVER_BUNDLE_FILE: () => SERVER_BUNDLE_FILE,
+  SERVER_ENTRY: () => SERVER_ENTRY,
+  SERVER_EXTERNALS: () => SERVER_EXTERNALS,
+  ServerBundleError: () => ServerBundleError,
   buildModule: () => buildModule,
+  bumpPackageVersion: () => bumpPackageVersion,
+  bumpVersion: () => bumpVersion,
   bundleClient: () => bundleClient,
+  bundleServer: () => bundleServer,
   collectModuleSource: () => collectModuleSource,
   compileTailwind: () => compileTailwind,
+  deriveApiPrefix: () => deriveApiPrefix,
   deriveModuleId: () => deriveModuleId,
   discoverActions: () => discoverActions,
   discoverComponents: () => discoverComponents,
@@ -43,6 +53,7 @@ __export(index_exports, {
   initModule: () => initModule,
   innospotsWebShellV1: () => innospotsWebShellV1,
   innospotsWebShellV2: () => innospotsWebShellV2,
+  innospotsWebShellV3: () => innospotsWebShellV3,
   listProfiles: () => listProfiles,
   loadModuleConfig: () => loadModuleConfig,
   loadYamlExpanded: () => loadYamlExpanded,
@@ -51,6 +62,8 @@ __export(index_exports, {
   parseYamlFile: () => parseYamlFile,
   readProjectVersion: () => readProjectVersion,
   renderClientEntry: () => renderClientEntry,
+  renderModuleStyles: () => renderModuleStyles,
+  renderServerEntry: () => renderServerEntry,
   resolvePactorVersionRange: () => resolvePactorVersionRange,
   rewriteDslUrls: () => rewriteDslUrls,
   rewriteNavigationTo: () => rewriteNavigationTo,
@@ -62,8 +75,8 @@ __export(index_exports, {
 module.exports = __toCommonJS(index_exports);
 
 // src/build.ts
-var import_node_fs9 = require("fs");
-var import_node_path9 = require("path");
+var import_node_fs10 = require("fs");
+var import_node_path10 = require("path");
 
 // src/bundle-client.ts
 var import_node_fs = require("fs");
@@ -180,17 +193,68 @@ function parseJsonc(text) {
   return JSON.parse(out.replace(/,(\s*[}\]])/g, "$1"));
 }
 
-// src/collect.ts
+// src/bundle-server.ts
 var import_node_fs2 = require("fs");
 var import_node_path2 = require("path");
+var import_esbuild2 = require("esbuild");
+var SERVER_EXTERNALS = [
+  "react",
+  "react-dom",
+  "react-dom/*",
+  "next",
+  "next/*",
+  "pactor-app",
+  "pactor-app/*",
+  "@pactor-app/*"
+];
+var SERVER_BUNDLE_FILE = "index.mjs";
+var ServerBundleError = class extends Error {
+};
+function bundleServer(options) {
+  const projectRoot = (0, import_node_path2.resolve)(options.projectDir);
+  const entry = (0, import_node_path2.resolve)(projectRoot, options.serverEntry);
+  if (!entry.startsWith(`${projectRoot}${import_node_path2.sep}`)) {
+    throw new ServerBundleError(
+      `server \u5165\u53E3\u5FC5\u987B\u4F4D\u4E8E\u5DE5\u7A0B\u6839\u5185: ${options.serverEntry}`
+    );
+  }
+  if (!(0, import_node_fs2.existsSync)(entry)) {
+    throw new ServerBundleError(`server \u5165\u53E3\u4E0D\u5B58\u5728: ${options.serverEntry}`);
+  }
+  (0, import_node_fs2.mkdirSync)(options.outDir, { recursive: true });
+  (0, import_esbuild2.buildSync)({
+    entryPoints: [entry],
+    bundle: true,
+    format: "esm",
+    platform: "node",
+    target: "node20",
+    outdir: options.outDir,
+    entryNames: "index",
+    outExtension: { ".js": ".mjs" },
+    sourcemap: true,
+    alias: tsconfigAliases(projectRoot),
+    external: [...SERVER_EXTERNALS],
+    logLevel: "silent"
+  });
+  if (!(0, import_node_fs2.existsSync)((0, import_node_path2.join)(options.outDir, SERVER_BUNDLE_FILE))) {
+    throw new ServerBundleError(
+      `server \u6253\u5305\u672A\u4EA7\u51FA ${SERVER_BUNDLE_FILE}\uFF08\u8BF7\u68C0\u67E5 serverEntry \u4E0E esbuild \u914D\u7F6E\uFF09`
+    );
+  }
+  return { bundled: true, entry: SERVER_BUNDLE_FILE };
+}
+
+// src/collect.ts
+var import_node_fs3 = require("fs");
+var import_node_path3 = require("path");
 function collectModuleSource(yamlRoot) {
   const pages = /* @__PURE__ */ new Map();
   const layouts = [];
   const fragments = [];
   const warnings = [];
   const walk = (dir) => {
-    for (const entry of (0, import_node_fs2.readdirSync)(dir, { withFileTypes: true })) {
-      const full = (0, import_node_path2.join)(dir, entry.name);
+    for (const entry of (0, import_node_fs3.readdirSync)(dir, { withFileTypes: true })) {
+      const full = (0, import_node_path3.join)(dir, entry.name);
       if (entry.isDirectory()) {
         walk(full);
         continue;
@@ -198,7 +262,7 @@ function collectModuleSource(yamlRoot) {
       if (!entry.name.endsWith(".yaml") || entry.name === "sitemap.yaml") {
         continue;
       }
-      const rel = (0, import_node_path2.relative)(yamlRoot, full);
+      const rel = (0, import_node_path3.relative)(yamlRoot, full);
       if (entry.name.endsWith(".layout.yaml")) {
         layouts.push(rel);
         continue;
@@ -225,20 +289,20 @@ function collectModuleSource(yamlRoot) {
 
 // src/compile-styles.ts
 var import_node_child_process = require("child_process");
-var import_node_fs3 = require("fs");
+var import_node_fs4 = require("fs");
 var import_node_os = require("os");
-var import_node_path3 = require("path");
+var import_node_path4 = require("path");
 function compileTailwind(options) {
   const warnings = [];
   if (!options.tailwind.enabled) {
     return { compiled: false, warnings };
   }
-  const work = (0, import_node_fs3.mkdtempSync)((0, import_node_path3.join)((0, import_node_os.tmpdir)(), "pactor-tailwind-"));
+  const work = (0, import_node_fs4.mkdtempSync)((0, import_node_path4.join)((0, import_node_os.tmpdir)(), "pactor-tailwind-"));
   try {
     let input;
     if (options.tailwind.input !== void 0) {
-      input = (0, import_node_path3.join)(options.projectDir, options.tailwind.input);
-      if (!(0, import_node_fs3.existsSync)(input)) {
+      input = (0, import_node_path4.join)(options.projectDir, options.tailwind.input);
+      if (!(0, import_node_fs4.existsSync)(input)) {
         warnings.push(`tailwind.input \u4E0D\u5B58\u5728: ${options.tailwind.input}\uFF0C\u8DF3\u8FC7\u9884\u7F16\u8BD1`);
         return { compiled: false, warnings };
       }
@@ -246,22 +310,22 @@ function compileTailwind(options) {
       const scan = (options.tailwind.scan ?? options.scanDirs).map(
         (dir) => `@source "${dir.replace(/\\/g, "/")}";`
       );
-      input = (0, import_node_path3.join)(work, "input.css");
-      (0, import_node_fs3.writeFileSync)(input, `@import "tailwindcss";
+      input = (0, import_node_path4.join)(work, "input.css");
+      (0, import_node_fs4.writeFileSync)(input, `@import "tailwindcss";
 ${scan.join("\n")}
 `, "utf8");
     }
-    const out = (0, import_node_path3.join)(work, "tailwind.css");
+    const out = (0, import_node_path4.join)(work, "tailwind.css");
     (0, import_node_child_process.execFileSync)(
       "npx",
       ["--no-install", "tailwindcss", "--input", input, "--output", out],
       { cwd: options.projectDir, stdio: "pipe" }
     );
-    if ((0, import_node_fs3.existsSync)(out)) {
-      const css = (0, import_node_fs3.readFileSync)(out, "utf8");
+    if ((0, import_node_fs4.existsSync)(out)) {
+      const css = (0, import_node_fs4.readFileSync)(out, "utf8");
       if (css.trim().length > 0) {
-        (0, import_node_fs3.mkdirSync)((0, import_node_path3.dirname)(options.cssFile), { recursive: true });
-        (0, import_node_fs3.appendFileSync)(
+        (0, import_node_fs4.mkdirSync)((0, import_node_path4.dirname)(options.cssFile), { recursive: true });
+        (0, import_node_fs4.appendFileSync)(
           options.cssFile,
           `
 /* tailwind utilities\uFF08pactor module build \u9884\u7F16\u8BD1\uFF09 */
@@ -278,13 +342,13 @@ ${css}`,
     warnings.push(`tailwind \u4E0D\u53EF\u7528\u6216\u7F16\u8BD1\u5931\u8D25\uFF0C\u5DF2\u964D\u7EA7\u8DF3\u8FC7\u9884\u7F16\u8BD1\uFF08${firstLine}\uFF09`);
     return { compiled: false, warnings };
   } finally {
-    (0, import_node_fs3.rmSync)(work, { recursive: true, force: true });
+    (0, import_node_fs4.rmSync)(work, { recursive: true, force: true });
   }
 }
 
 // src/config.ts
-var import_node_fs4 = require("fs");
-var import_node_path4 = require("path");
+var import_node_fs5 = require("fs");
+var import_node_path5 = require("path");
 
 // src/profiles/innospots-web-shell.ts
 var base = {
@@ -293,7 +357,8 @@ var base = {
   stripMenuPaths: true,
   rewriteNavigation: { basePath: true, excludeApiUrls: true },
   rewriteAssetUrls: (id, version) => `/modules/${id}/${version}/`,
-  forbidRootBasePath: true
+  forbidRootBasePath: true,
+  moduleServerApi: false
 };
 var innospotsWebShellV1 = {
   ...base,
@@ -305,15 +370,22 @@ var innospotsWebShellV2 = {
   version: 2,
   forceInlinePages: false
 };
+var innospotsWebShellV3 = {
+  ...base,
+  version: 3,
+  forceInlinePages: false,
+  moduleServerApi: true
+};
 
 // src/profiles/index.ts
 var ProfileError = class extends Error {
 };
 var registry = /* @__PURE__ */ new Map([
   [`${innospotsWebShellV1.name}@${innospotsWebShellV1.version}`, innospotsWebShellV1],
-  [`${innospotsWebShellV2.name}@${innospotsWebShellV2.version}`, innospotsWebShellV2]
+  [`${innospotsWebShellV2.name}@${innospotsWebShellV2.version}`, innospotsWebShellV2],
+  [`${innospotsWebShellV3.name}@${innospotsWebShellV3.version}`, innospotsWebShellV3]
 ]);
-var DEFAULT_TARGET = `${innospotsWebShellV2.name}@${innospotsWebShellV2.version}`;
+var DEFAULT_TARGET = `${innospotsWebShellV3.name}@${innospotsWebShellV3.version}`;
 function listProfiles() {
   return [...registry.keys()];
 }
@@ -337,13 +409,13 @@ var CONFIG_DEFAULTS = {
   outDir: "dist-module"
 };
 function loadModuleConfig(projectDir, configPath) {
-  const file = configPath ? (0, import_node_path4.resolve)(projectDir, configPath) : (0, import_node_path4.join)(projectDir, CONFIG_FILE);
-  if (!(0, import_node_fs4.existsSync)(file)) {
+  const file = configPath ? (0, import_node_path5.resolve)(projectDir, configPath) : (0, import_node_path5.join)(projectDir, CONFIG_FILE);
+  if (!(0, import_node_fs5.existsSync)(file)) {
     throw new ConfigError(`\u7F3A\u5C11\u914D\u7F6E\u6587\u4EF6: ${file}\uFF08\u53EF\u5148\u6267\u884C pactor module init \u751F\u6210\uFF09`);
   }
   let raw;
   try {
-    raw = JSON.parse((0, import_node_fs4.readFileSync)(file, "utf8"));
+    raw = JSON.parse((0, import_node_fs5.readFileSync)(file, "utf8"));
   } catch (error) {
     throw new ConfigError(`\u914D\u7F6E\u89E3\u6790\u5931\u8D25: ${file}: ${error.message}`);
   }
@@ -359,19 +431,32 @@ function loadModuleConfig(projectDir, configPath) {
   if (!basePath.startsWith("/")) basePath = `/${basePath}`;
   if (basePath.length > 1 && basePath.endsWith("/")) basePath = basePath.slice(0, -1);
   const actions = raw.actions === void 0 ? [] : readStringArray(raw.actions, "actions", file);
-  const demo = isRecord(raw.demo) ? raw.demo : {};
+  if (raw.demo !== void 0) {
+    throw new ConfigError(
+      `${file}: demo.public \u5DF2\u79FB\u9664\uFF0C\u8BF7\u6539\u7528 "access": { "default": "public" }\uFF08\u7F3A\u7701\u586B\u5145\u8BED\u4E49\uFF0C\u4E0D\u8986\u76D6\u663E\u5F0F permission\uFF09`
+    );
+  }
+  const access = isRecord(raw.access) ? raw.access : {};
+  const accessDefault = readString(access, "default", file, "access") ?? "authenticated";
+  if (accessDefault !== "public" && accessDefault !== "authenticated") {
+    throw new ConfigError(`${file}: access.default \u53EA\u652F\u6301 "public" | "authenticated"`);
+  }
   const tailwind = isRecord(raw.tailwind) ? raw.tailwind : {};
   const rewrite = isRecord(raw.rewrite) ? raw.rewrite : {};
+  const serverEntry = readString(raw, "serverEntry", file);
+  const apiPrefixes = raw.apiPrefixes === void 0 ? void 0 : readStringArray(raw.apiPrefixes, "apiPrefixes", file);
+  validateServerConfig({ id, serverEntry, apiPrefixes, file });
   return {
     id,
     name,
     basePath,
     yamlRoot: readString(raw, "yamlRoot", file) ?? CONFIG_DEFAULTS.yamlRoot,
     clientEntry: readString(raw, "clientEntry", file) ?? CONFIG_DEFAULTS.clientEntry,
+    ...serverEntry !== void 0 ? { serverEntry, apiPrefixes } : {},
     actions,
     publicDir: readString(raw, "publicDir", file) ?? CONFIG_DEFAULTS.publicDir,
     target: readString(raw, "target", file) ?? CONFIG_DEFAULTS.target,
-    demo: { public: readBoolean(demo, "public", file, "demo") ?? false },
+    access: { default: accessDefault },
     tailwind: {
       enabled: readBoolean(tailwind, "enabled", file, "tailwind") ?? false,
       input: readString(tailwind, "input", file, "tailwind"),
@@ -409,12 +494,59 @@ function readStringArray(value, label, file) {
   }
   return value;
 }
+var URL_SAFE_MODULE_ID_RE = /^[A-Za-z0-9._~-]+$/;
+var API_PREFIX_RE = /^\/api\/[A-Za-z0-9._~-]+(?:\/[A-Za-z0-9._~-]+)*$/;
+var RESERVED_API_PREFIXES = ["/api/modules", "/api/runtime"];
+function validateServerConfig(input) {
+  const { id, serverEntry, apiPrefixes, file } = input;
+  if (serverEntry === void 0 && apiPrefixes === void 0) return;
+  if (serverEntry === void 0 || apiPrefixes === void 0) {
+    throw new ConfigError(`${file}: serverEntry \u4E0E apiPrefixes \u5FC5\u987B\u540C\u65F6\u914D\u7F6E\uFF08\u7F3A\u4E00\u4E0D\u53EF\uFF09`);
+  }
+  if (apiPrefixes.length === 0) {
+    throw new ConfigError(`${file}: \u914D\u7F6E serverEntry \u65F6 apiPrefixes \u5FC5\u987B\u662F\u975E\u7A7A\u6570\u7EC4`);
+  }
+  if (!URL_SAFE_MODULE_ID_RE.test(id)) {
+    throw new ConfigError(
+      `${file}: \u542F\u7528 serverEntry \u65F6 id \u53EA\u80FD\u5305\u542B\u5B57\u6BCD\u3001\u6570\u5B57\u3001. _ ~ -\uFF08\u5F53\u524D: ${JSON.stringify(id)}\uFF09`
+    );
+  }
+  for (const prefix of apiPrefixes) {
+    if (!API_PREFIX_RE.test(prefix)) {
+      throw new ConfigError(
+        `${file}: apiPrefixes \u542B\u975E\u6CD5\u524D\u7F00 ${JSON.stringify(prefix)}\uFF08\u8981\u6C42\u5F62\u5982 /api/risk-analysis\uFF0C\u4E0D\u80FD\u542B query / hash / \u5C3E\u659C\u6760 / \u901A\u914D / :param\uFF09`
+      );
+    }
+    const reserved = RESERVED_API_PREFIXES.find(
+      (item) => prefix === item || prefix.startsWith(`${item}/`)
+    );
+    if (reserved) {
+      throw new ConfigError(
+        `${file}: apiPrefixes \u4E0D\u80FD\u4F7F\u7528\u4FDD\u7559\u524D\u7F00 ${reserved}\uFF08Shell \u81EA\u5E26\u8DEF\u7531\uFF09: ${prefix}`
+      );
+    }
+  }
+  for (let i = 0; i < apiPrefixes.length; i += 1) {
+    for (let j = i + 1; j < apiPrefixes.length; j += 1) {
+      const a = apiPrefixes[i];
+      const b = apiPrefixes[j];
+      if (a === b) {
+        throw new ConfigError(`${file}: apiPrefixes \u5B58\u5728\u91CD\u590D\u524D\u7F00: ${a}`);
+      }
+      if (a.startsWith(`${b}/`) || b.startsWith(`${a}/`)) {
+        throw new ConfigError(
+          `${file}: apiPrefixes \u524D\u7F00\u4E92\u76F8\u5305\u542B\uFF08\u540C\u4E00\u6A21\u5757\u5185\u65E0\u6CD5\u786E\u5B9A\u5F52\u5C5E\uFF09: ${a} / ${b}`
+        );
+      }
+    }
+  }
+}
 
 // src/emit-manifest.ts
 var import_node_crypto = require("crypto");
-var import_node_fs5 = require("fs");
+var import_node_fs6 = require("fs");
 var import_node_module = require("module");
-var import_node_path5 = require("path");
+var import_node_path6 = require("path");
 var import_yaml = require("yaml");
 function emitModule(input) {
   const dslResult = emitDsl(input);
@@ -423,22 +555,22 @@ function emitModule(input) {
 }
 function emitDsl(input) {
   const { config, projectDir, outDir, site, pages } = input;
-  const dslDir = (0, import_node_path5.join)(outDir, "dsl");
-  (0, import_node_fs5.mkdirSync)(dslDir, { recursive: true });
-  (0, import_node_fs5.writeFileSync)((0, import_node_path5.join)(dslDir, "sitemap.yaml"), (0, import_yaml.stringify)(site, { lineWidth: 0 }), "utf8");
+  const dslDir = (0, import_node_path6.join)(outDir, "dsl");
+  (0, import_node_fs6.mkdirSync)(dslDir, { recursive: true });
+  (0, import_node_fs6.writeFileSync)((0, import_node_path6.join)(dslDir, "sitemap.yaml"), (0, import_yaml.stringify)(site, { lineWidth: 0 }), "utf8");
   for (const [id, dsl] of pages) {
-    (0, import_node_fs5.writeFileSync)((0, import_node_path5.join)(dslDir, `${id}.yaml`), (0, import_yaml.stringify)(dsl, { lineWidth: 0 }), "utf8");
+    (0, import_node_fs6.writeFileSync)((0, import_node_path6.join)(dslDir, `${id}.yaml`), (0, import_yaml.stringify)(dsl, { lineWidth: 0 }), "utf8");
   }
-  const publicDir = (0, import_node_path5.join)(projectDir, config.publicDir);
-  const assetsDir = (0, import_node_path5.join)(outDir, "assets");
-  if ((0, import_node_fs5.existsSync)(publicDir)) {
-    (0, import_node_fs5.cpSync)(publicDir, assetsDir, { recursive: true });
+  const publicDir = (0, import_node_path6.join)(projectDir, config.publicDir);
+  const assetsDir = (0, import_node_path6.join)(outDir, "assets");
+  if ((0, import_node_fs6.existsSync)(publicDir)) {
+    (0, import_node_fs6.cpSync)(publicDir, assetsDir, { recursive: true });
   } else {
-    (0, import_node_fs5.mkdirSync)(assetsDir, { recursive: true });
+    (0, import_node_fs6.mkdirSync)(assetsDir, { recursive: true });
   }
   const assets = hashAssets(assetsDir, assetsDir);
-  (0, import_node_fs5.writeFileSync)(
-    (0, import_node_path5.join)(outDir, "module-assets.json"),
+  (0, import_node_fs6.writeFileSync)(
+    (0, import_node_path6.join)(outDir, "module-assets.json"),
     `${JSON.stringify({ module: config.id, assets }, null, 2)}
 `,
     "utf8"
@@ -459,10 +591,12 @@ function writeManifest(input) {
     dslRoot: "dsl",
     assetsRoot: "assets",
     ...input.clientEntry ? { clientEntry: input.clientEntry } : {},
-    ...input.styles ? { styles: input.styles } : {}
+    ...input.styles ? { styles: input.styles } : {},
+    ...input.serverEntry ? { serverEntry: input.serverEntry } : {},
+    ...input.apiPrefixes && input.apiPrefixes.length > 0 ? { apiPrefixes: input.apiPrefixes } : {}
   };
-  (0, import_node_fs5.writeFileSync)(
-    (0, import_node_path5.join)(outDir, "manifest.json"),
+  (0, import_node_fs6.writeFileSync)(
+    (0, import_node_path6.join)(outDir, "manifest.json"),
     `${JSON.stringify(manifest, null, 2)}
 `,
     "utf8"
@@ -470,10 +604,10 @@ function writeManifest(input) {
   return manifest;
 }
 function readProjectVersion(projectDir) {
-  const pkgFile = (0, import_node_path5.join)(projectDir, "package.json");
-  if (!(0, import_node_fs5.existsSync)(pkgFile)) return "0.0.0";
+  const pkgFile = (0, import_node_path6.join)(projectDir, "package.json");
+  if (!(0, import_node_fs6.existsSync)(pkgFile)) return "0.0.0";
   try {
-    const pkg = JSON.parse((0, import_node_fs5.readFileSync)(pkgFile, "utf8"));
+    const pkg = JSON.parse((0, import_node_fs6.readFileSync)(pkgFile, "utf8"));
     return typeof pkg.version === "string" && pkg.version.length > 0 ? pkg.version : "0.0.0";
   } catch {
     return "0.0.0";
@@ -481,18 +615,18 @@ function readProjectVersion(projectDir) {
 }
 function resolvePactorVersionRange(projectDir, warnings) {
   try {
-    const require2 = (0, import_node_module.createRequire)((0, import_node_path5.join)(projectDir, "package.json"));
+    const require2 = (0, import_node_module.createRequire)((0, import_node_path6.join)(projectDir, "package.json"));
     for (const name of ["pactor-app/package.json", "@pactor-app/app/package.json"]) {
       try {
         const pkgFile = require2.resolve(name);
-        const pkg2 = JSON.parse((0, import_node_fs5.readFileSync)(pkgFile, "utf8"));
+        const pkg2 = JSON.parse((0, import_node_fs6.readFileSync)(pkgFile, "utf8"));
         if (typeof pkg2.version === "string" && pkg2.version.length > 0) {
           return `^${pkg2.version}`;
         }
       } catch {
       }
     }
-    const pkg = JSON.parse((0, import_node_fs5.readFileSync)((0, import_node_path5.join)(projectDir, "package.json"), "utf8"));
+    const pkg = JSON.parse((0, import_node_fs6.readFileSync)((0, import_node_path6.join)(projectDir, "package.json"), "utf8"));
     for (const section of ["dependencies", "peerDependencies", "devDependencies"]) {
       const range = pkg[section]?.["pactor-app"];
       if (typeof range === "string" && range.length > 0) {
@@ -506,35 +640,35 @@ function resolvePactorVersionRange(projectDir, warnings) {
 }
 function hashAssets(dir, root) {
   const entries = [];
-  if (!(0, import_node_fs5.existsSync)(dir)) return entries;
-  for (const entry of (0, import_node_fs5.readdirSync)(dir, { withFileTypes: true }).sort(
+  if (!(0, import_node_fs6.existsSync)(dir)) return entries;
+  for (const entry of (0, import_node_fs6.readdirSync)(dir, { withFileTypes: true }).sort(
     (a, b) => a.name.localeCompare(b.name)
   )) {
-    const full = (0, import_node_path5.join)(dir, entry.name);
+    const full = (0, import_node_path6.join)(dir, entry.name);
     if (entry.isDirectory()) {
       entries.push(...hashAssets(full, root));
       continue;
     }
     if (!entry.isFile()) continue;
-    const content = (0, import_node_fs5.readFileSync)(full);
+    const content = (0, import_node_fs6.readFileSync)(full);
     entries.push({
       path: full.slice(root.length + 1).split("\\").join("/"),
       sha256: (0, import_node_crypto.createHash)("sha256").update(content).digest("hex"),
-      size: (0, import_node_fs5.statSync)(full).size
+      size: (0, import_node_fs6.statSync)(full).size
     });
   }
   return entries;
 }
 
 // src/expand-include.ts
-var import_node_fs6 = require("fs");
-var import_node_path6 = require("path");
+var import_node_fs7 = require("fs");
+var import_node_path7 = require("path");
 var import_yaml2 = require("yaml");
 var INCLUDE_KEY = "$include";
 var IncludeError = class extends Error {
 };
 function parseYamlFile(file) {
-  const doc = (0, import_yaml2.parseDocument)((0, import_node_fs6.readFileSync)(file, "utf8"));
+  const doc = (0, import_yaml2.parseDocument)((0, import_node_fs7.readFileSync)(file, "utf8"));
   if (doc.errors.length > 0) {
     throw new IncludeError(
       `${file}: ${doc.errors.map((error) => error.message).join("; ")}`
@@ -546,7 +680,7 @@ function loadYamlExpanded(yamlRoot, relPath, stack = []) {
   if (stack.includes(relPath)) {
     throw new IncludeError(`\u5FAA\u73AF\u5F15\u7528: ${[...stack, relPath].join(" -> ")}`);
   }
-  const value = parseYamlFile((0, import_node_path6.join)(yamlRoot, relPath));
+  const value = parseYamlFile((0, import_node_path7.join)(yamlRoot, relPath));
   return expandIncludes(value, { yamlRoot, current: relPath, stack: [...stack, relPath] });
 }
 function expandIncludes(value, ctx) {
@@ -573,8 +707,8 @@ function expandIncludes(value, ctx) {
 }
 
 // src/rewrite-urls.ts
-var import_node_fs7 = require("fs");
-var import_node_path7 = require("path");
+var import_node_fs8 = require("fs");
+var import_node_path8 = require("path");
 var NAVIGATION_ACTIONS = /* @__PURE__ */ new Set(["navigate", "app.reload"]);
 var ABSOLUTE_API_RE = /^https?:\/\/[^/]+(\/api\/.+)$/;
 function rewriteDslUrls(value, ctx) {
@@ -629,11 +763,14 @@ function matchPathPattern(pattern, value) {
 function rewriteString(value, ctx, warnings) {
   const absoluteApi = ABSOLUTE_API_RE.exec(value);
   if (absoluteApi) {
-    warnings.push(
-      `\u7EDD\u5BF9 API \u5730\u5740: ${value}${ctx.absoluteApiToRelative ? "\uFF08\u5DF2\u91CD\u5199\u4E3A\u76F8\u5BF9\u8DEF\u5F84\uFF0C\u9700\u5E95\u5EA7 BFF/\u4EE3\u7406\u627F\u63A5\uFF09" : ""}`
-    );
-    return ctx.absoluteApiToRelative ? absoluteApi[1] : value;
+    const relative3 = absoluteApi[1];
+    const namespaced2 = ctx.absoluteApiToRelative ? namespaceModuleApi(relative3, ctx) : void 0;
+    const action = ctx.absoluteApiToRelative ? namespaced2 !== void 0 ? "\uFF08\u5DF2\u91CD\u5199\u4E3A\u6A21\u5757 API \u76F8\u5BF9\u8DEF\u5F84\uFF09" : "\uFF08\u5DF2\u91CD\u5199\u4E3A\u76F8\u5BF9\u8DEF\u5F84\uFF0C\u9700\u5E95\u5EA7 BFF/\u4EE3\u7406\u627F\u63A5\uFF09" : "\uFF08absoluteApiToRelative=false\uFF0C\u4FDD\u6301\u7EDD\u5BF9\u5730\u5740\uFF0C\u4E0D\u4F1A\u8D70\u6A21\u5757 API \u8DEF\u7531\uFF09";
+    warnings.push(`\u7EDD\u5BF9 API \u5730\u5740: ${value}${action}`);
+    return ctx.absoluteApiToRelative ? namespaced2 ?? relative3 : value;
   }
+  const namespaced = namespaceModuleApi(value, ctx);
+  if (namespaced !== void 0) return namespaced;
   if (!ctx.rewriteAssets) return value;
   if (!value.startsWith("/") || value.startsWith("//")) return value;
   if (value.startsWith("/api/")) return value;
@@ -645,10 +782,18 @@ function rewriteString(value, ctx, warnings) {
   if (!isPublicFile(ctx.publicDir, value)) return value;
   return `${ctx.assetPrefix}${value}`;
 }
+function namespaceModuleApi(value, ctx) {
+  const { moduleId, apiPrefixes } = ctx;
+  if (!moduleId || !apiPrefixes || apiPrefixes.length === 0) return void 0;
+  const pathOnly = value.split(/[?#]/, 1)[0];
+  const hit = [...apiPrefixes].sort((a, b) => b.length - a.length).some((prefix) => pathOnly === prefix || pathOnly.startsWith(`${prefix}/`));
+  if (!hit) return void 0;
+  return `/api/modules/${encodeURIComponent(moduleId)}${value.slice("/api".length)}`;
+}
 function isPublicFile(publicDir, urlPath) {
-  const file = (0, import_node_path7.join)(publicDir, urlPath);
+  const file = (0, import_node_path8.join)(publicDir, urlPath);
   try {
-    return (0, import_node_fs7.existsSync)(file) && (0, import_node_fs7.statSync)(file).isFile();
+    return (0, import_node_fs8.existsSync)(file) && (0, import_node_fs8.statSync)(file).isFile();
   } catch {
     return false;
   }
@@ -659,7 +804,8 @@ function isRecord2(value) {
 
 // src/transform-sitemap.ts
 function transformSitemap(site, options) {
-  const { profile, demoPublic, loadLayout } = options;
+  const { profile, accessDefault, loadLayout } = options;
+  const fillPublic = accessDefault === "public";
   const next = { ...site };
   const rawLayouts = isRecord3(site.layouts) ? site.layouts : {};
   const layouts = {};
@@ -673,7 +819,7 @@ function transformSitemap(site, options) {
     if (profile.forceInlinePages) {
       delete nextPage.lazy;
     }
-    if (demoPublic) {
+    if (fillPublic && isAccessUndeclared(nextPage)) {
       nextPage.public = true;
     }
     return nextPage;
@@ -684,7 +830,7 @@ function transformSitemap(site, options) {
     if (profile.stripMenuPaths) {
       delete nextMenu.path;
     }
-    if (demoPublic) {
+    if (fillPublic && isAccessUndeclared(nextMenu)) {
       nextMenu.public = true;
     }
     if (Array.isArray(nextMenu.children)) {
@@ -705,10 +851,13 @@ function transformSitemap(site, options) {
 function isRecord3(value) {
   return value !== null && typeof value === "object" && !Array.isArray(value);
 }
+function isAccessUndeclared(entry) {
+  return entry.public === void 0 && entry.permission === void 0;
+}
 
 // src/validate.ts
-var import_node_fs8 = require("fs");
-var import_node_path8 = require("path");
+var import_node_fs9 = require("fs");
+var import_node_path9 = require("path");
 var import_yaml3 = require("yaml");
 var REQUIRED_MANIFEST_FIELDS = [
   "schemaVersion",
@@ -722,7 +871,7 @@ var REQUIRED_MANIFEST_FIELDS = [
   "assetsRoot"
 ];
 function validateModule(options = {}) {
-  const projectDir = (0, import_node_path8.resolve)(options.dir ?? process.cwd());
+  const projectDir = (0, import_node_path9.resolve)(options.dir ?? process.cwd());
   const errors = [];
   const warnings = [];
   let config;
@@ -740,15 +889,15 @@ function validateModule(options = {}) {
       config = void 0;
     }
   }
-  const moduleDir = options.moduleDir ?? (0, import_node_path8.join)(projectDir, config?.outDir ?? CONFIG_DEFAULTS.outDir);
-  const manifestFile = (0, import_node_path8.join)(moduleDir, "manifest.json");
-  if (!(0, import_node_fs8.existsSync)(manifestFile)) {
+  const moduleDir = options.moduleDir ?? (0, import_node_path9.join)(projectDir, config?.outDir ?? CONFIG_DEFAULTS.outDir);
+  const manifestFile = (0, import_node_path9.join)(moduleDir, "manifest.json");
+  if (!(0, import_node_fs9.existsSync)(manifestFile)) {
     errors.push(`\u4EA7\u7269\u4E0D\u5B58\u5728: ${manifestFile}\uFF08\u5148\u6267\u884C pactor module build\uFF09`);
     return { ok: false, errors, warnings };
   }
   let manifest;
   try {
-    manifest = JSON.parse((0, import_node_fs8.readFileSync)(manifestFile, "utf8"));
+    manifest = JSON.parse((0, import_node_fs9.readFileSync)(manifestFile, "utf8"));
   } catch (error) {
     errors.push(`manifest.json \u89E3\u6790\u5931\u8D25: ${error.message}`);
     return { ok: false, errors, warnings };
@@ -763,11 +912,11 @@ function validateModule(options = {}) {
   }
   const dslRoot = typeof manifest.dslRoot === "string" ? manifest.dslRoot : "dsl";
   const sitemapRel = typeof manifest.sitemap === "string" ? manifest.sitemap : "dsl/sitemap.yaml";
-  const sitemapFile = (0, import_node_path8.join)(moduleDir, sitemapRel);
-  if (!(0, import_node_fs8.existsSync)(sitemapFile)) {
+  const sitemapFile = (0, import_node_path9.join)(moduleDir, sitemapRel);
+  if (!(0, import_node_fs9.existsSync)(sitemapFile)) {
     errors.push(`sitemap \u4E0D\u5B58\u5728: ${sitemapRel}`);
   } else {
-    const doc = (0, import_yaml3.parseDocument)((0, import_node_fs8.readFileSync)(sitemapFile, "utf8"));
+    const doc = (0, import_yaml3.parseDocument)((0, import_node_fs9.readFileSync)(sitemapFile, "utf8"));
     if (doc.errors.length > 0) {
       errors.push(`sitemap YAML \u89E3\u6790\u5931\u8D25: ${doc.errors.map((e) => e.message).join("; ")}`);
     } else {
@@ -779,7 +928,7 @@ function validateModule(options = {}) {
           errors.push("sitemap.pages \u5B58\u5728\u7F3A\u5C11 id \u7684\u9875\u9762\u9879");
           continue;
         }
-        if (findPageDslFile((0, import_node_path8.join)(moduleDir, dslRoot), id) === null) {
+        if (findPageDslFile((0, import_node_path9.join)(moduleDir, dslRoot), id) === null) {
           errors.push(`\u9875\u9762 ${id} \u7F3A\u5C11 DSL \u6587\u4EF6\uFF08${dslRoot}/ \u4E0B\u672A\u627E\u5230 ${id}.yaml\uFF09`);
         }
       }
@@ -793,34 +942,60 @@ function validateModule(options = {}) {
       }
     }
   }
-  const dslDir = (0, import_node_path8.join)(moduleDir, dslRoot);
+  const dslDir = (0, import_node_path9.join)(moduleDir, dslRoot);
   for (const file of listFiles(dslDir)) {
-    if ((0, import_node_fs8.readFileSync)(file, "utf8").includes(INCLUDE_KEY)) {
-      errors.push(`$include \u6B8B\u7559: ${(0, import_node_path8.relative)(moduleDir, file)}`);
+    if ((0, import_node_fs9.readFileSync)(file, "utf8").includes(INCLUDE_KEY)) {
+      errors.push(`$include \u6B8B\u7559: ${(0, import_node_path9.relative)(moduleDir, file)}`);
     }
   }
   if (typeof manifest.clientEntry === "string") {
-    const clientFile = (0, import_node_path8.join)(moduleDir, manifest.clientEntry);
-    if (!(0, import_node_fs8.existsSync)(clientFile)) {
+    const clientFile = (0, import_node_path9.join)(moduleDir, manifest.clientEntry);
+    if (!(0, import_node_fs9.existsSync)(clientFile)) {
       errors.push(`client bundle \u4E0D\u5B58\u5728: ${manifest.clientEntry}`);
     } else {
-      const text = (0, import_node_fs8.readFileSync)(clientFile, "utf8");
+      const text = (0, import_node_fs9.readFileSync)(clientFile, "utf8");
       if (/\bvar React\b|react\.production\.min|__REACT_DEVTOOLS_GLOBAL_HOOK__/.test(text)) {
         errors.push("client bundle \u7591\u4F3C\u5185\u5D4C react\uFF08react \u5FC5\u987B\u4FDD\u6301 external\uFF0C\u907F\u514D\u53CC\u5B9E\u4F8B\uFF09");
       }
       if (/node_modules\/@pactor-app\//.test(text) || /node_modules\/pactor-app\//.test(text)) {
         errors.push("client bundle \u7591\u4F3C\u5185\u5D4C pactor \u8FD0\u884C\u65F6\u4EE3\u7801\uFF08@pactor-app/* \u5FC5\u987B\u4FDD\u6301 external\uFF09");
       }
-      const sizeKb = Math.round((0, import_node_fs8.statSync)(clientFile).size / 1024);
+      const sizeKb = Math.round((0, import_node_fs9.statSync)(clientFile).size / 1024);
       if (sizeKb > 512) {
         warnings.push(`client bundle \u4F53\u79EF\u8F83\u5927\uFF08${sizeKb}KB\uFF09\uFF0C\u8BF7\u786E\u8BA4 react / pactor \u5DF2 external`);
       }
     }
   }
-  const pkgFile = (0, import_node_path8.join)(projectDir, "package.json");
-  if ((0, import_node_fs8.existsSync)(pkgFile)) {
+  const hasServerEntry = typeof manifest.serverEntry === "string";
+  const hasApiPrefixes = Array.isArray(manifest.apiPrefixes);
+  if (hasServerEntry !== hasApiPrefixes) {
+    errors.push("manifest.serverEntry \u4E0E apiPrefixes \u5FC5\u987B\u6210\u5BF9\u51FA\u73B0");
+  }
+  if (hasServerEntry) {
+    const serverRel = manifest.serverEntry;
+    const serverFile = (0, import_node_path9.resolve)(moduleDir, serverRel);
+    if (!isInsideDir(moduleDir, serverFile)) {
+      errors.push(`server bundle \u8DEF\u5F84\u8D8A\u754C: ${serverRel}`);
+    } else if (!(0, import_node_fs9.existsSync)(serverFile)) {
+      errors.push(`server bundle \u4E0D\u5B58\u5728: ${serverRel}`);
+    } else {
+      const text = (0, import_node_fs9.readFileSync)(serverFile, "utf8");
+      if (/node_modules\/(?:next|react|react-dom|@pactor-app|pactor-app)\//.test(text)) {
+        warnings.push(
+          "server bundle \u7591\u4F3C\u5185\u5D4C next / react / pactor\uFF08\u5E94\u4FDD\u6301 external\uFF0C\u7531\u5BBF\u4E3B\u63D0\u4F9B\uFF09"
+        );
+      }
+    }
+    if (!Array.isArray(manifest.apiPrefixes) || manifest.apiPrefixes.length === 0) {
+      errors.push("manifest.apiPrefixes \u5FC5\u987B\u662F\u975E\u7A7A\u6570\u7EC4");
+    } else if (manifest.apiPrefixes.some((prefix) => typeof prefix !== "string")) {
+      errors.push("manifest.apiPrefixes \u5FC5\u987B\u662F\u5B57\u7B26\u4E32\u6570\u7EC4");
+    }
+  }
+  const pkgFile = (0, import_node_path9.join)(projectDir, "package.json");
+  if ((0, import_node_fs9.existsSync)(pkgFile)) {
     try {
-      const pkg = JSON.parse((0, import_node_fs8.readFileSync)(pkgFile, "utf8"));
+      const pkg = JSON.parse((0, import_node_fs9.readFileSync)(pkgFile, "utf8"));
       const exportsMap = pkg.exports ?? {};
       if (exportsMap["./manifest"] === void 0) {
         errors.push('package.json exports \u7F3A\u5C11 "./manifest"\uFF08Shell \u88C5\u914D\u5668\u7ECF require.resolve("<pkg>/manifest") \u5B9A\u4F4D\uFF09');
@@ -828,6 +1003,9 @@ function validateModule(options = {}) {
       if (typeof manifest.clientEntry === "string" && exportsMap["./client"] === void 0) {
         errors.push('package.json exports \u7F3A\u5C11 "./client"\uFF08client-registry \u9759\u6001 import "<pkg>/client"\uFF09');
       }
+      if (typeof manifest.serverEntry === "string" && exportsMap["./server"] === void 0) {
+        errors.push('package.json exports \u7F3A\u5C11 "./server"\uFF08Shell \u88C5\u914D\u5668\u7ECF require.resolve("<pkg>/server") \u5B9A\u4F4D\uFF09');
+      }
       if (typeof pkg.version === "string" && typeof manifest.version === "string" && pkg.version !== manifest.version) {
         warnings.push(
           `manifest.version (${manifest.version}) \u4E0E package.json version (${pkg.version}) \u4E0D\u4E00\u81F4\uFF0C\u8BF7\u91CD\u65B0 build`
@@ -841,13 +1019,17 @@ function validateModule(options = {}) {
   }
   return { ok: errors.length === 0, errors, warnings };
 }
+function isInsideDir(dir, file) {
+  const root = (0, import_node_path9.resolve)(dir);
+  return file.startsWith(`${root}${import_node_path9.sep}`);
+}
 function findPageDslFile(dslRootDir, pageId) {
-  if (!(0, import_node_fs8.existsSync)(dslRootDir)) return null;
+  if (!(0, import_node_fs9.existsSync)(dslRootDir)) return null;
   const queue = [dslRootDir];
   while (queue.length > 0) {
     const dir = queue.pop();
-    for (const entry of (0, import_node_fs8.readdirSync)(dir, { withFileTypes: true })) {
-      const full = (0, import_node_path8.join)(dir, entry.name);
+    for (const entry of (0, import_node_fs9.readdirSync)(dir, { withFileTypes: true })) {
+      const full = (0, import_node_path9.join)(dir, entry.name);
       if (entry.isDirectory()) {
         queue.push(full);
         continue;
@@ -858,11 +1040,11 @@ function findPageDslFile(dslRootDir, pageId) {
   return null;
 }
 function listFiles(dir) {
-  if (!(0, import_node_fs8.existsSync)(dir)) return [];
+  if (!(0, import_node_fs9.existsSync)(dir)) return [];
   const files = [];
   const walk = (target) => {
-    for (const entry of (0, import_node_fs8.readdirSync)(target, { withFileTypes: true })) {
-      const full = (0, import_node_path8.join)(target, entry.name);
+    for (const entry of (0, import_node_fs9.readdirSync)(target, { withFileTypes: true })) {
+      const full = (0, import_node_path9.join)(target, entry.name);
       if (entry.isDirectory()) {
         walk(full);
       } else if (entry.isFile()) {
@@ -882,7 +1064,7 @@ var ModuleBuildError = class extends Error {
   }
 };
 function buildModule(options = {}) {
-  const projectDir = (0, import_node_path9.resolve)(options.dir ?? process.cwd());
+  const projectDir = (0, import_node_path10.resolve)(options.dir ?? process.cwd());
   const config = loadModuleConfig(projectDir, options.config);
   const profile = getProfile(config.target);
   if (profile.forbidRootBasePath && config.basePath === "/") {
@@ -891,8 +1073,17 @@ function buildModule(options = {}) {
       [`basePath: "/" \u4E0E profile ${config.target} \u7684 forbidRootBasePath \u51B2\u7A81\uFF0C\u8BF7\u6539\u7528\u5982 /${config.id} \u7684\u524D\u7F00`]
     );
   }
-  const yamlRoot = (0, import_node_path9.join)(projectDir, config.yamlRoot);
-  if (!(0, import_node_fs9.existsSync)(yamlRoot)) {
+  if (config.serverEntry !== void 0 && !profile.moduleServerApi) {
+    throw new ModuleBuildError(
+      `target ${config.target} \u4E0D\u652F\u6301\u6A21\u5757 server entry\uFF08\u9700\u8981 innospots-web-shell@3\uFF09`,
+      [
+        `\u914D\u7F6E\u4E86 serverEntry / apiPrefixes\uFF0C\u4F46 profile ${config.target} \u7684 moduleServerApi=false`,
+        '\u8BF7\u628A pactor.module.json \u7684 target \u5347\u5230 "innospots-web-shell@3" \u540E\u91CD\u65B0\u6784\u5EFA'
+      ]
+    );
+  }
+  const yamlRoot = (0, import_node_path10.join)(projectDir, config.yamlRoot);
+  if (!(0, import_node_fs10.existsSync)(yamlRoot)) {
     throw new ModuleBuildError(`yamlRoot \u4E0D\u5B58\u5728: ${config.yamlRoot}`, [
       `yamlRoot \u4E0D\u5B58\u5728: ${yamlRoot}`
     ]);
@@ -932,7 +1123,7 @@ function buildModule(options = {}) {
   }
   const transformed = transformSitemap(site, {
     profile,
-    demoPublic: config.demo.public,
+    accessDefault: config.access.default,
     loadLayout: (rel) => loadYamlExpanded(yamlRoot, rel)
   });
   const version = readProjectVersion(projectDir);
@@ -941,11 +1132,13 @@ function buildModule(options = {}) {
     basePath: config.basePath,
     pagePaths: sitePages.map((page) => page.path).filter((path) => typeof path === "string"),
     loginPath: typeof siteAuth.loginPath === "string" ? siteAuth.loginPath : "/login",
-    publicDir: (0, import_node_path9.join)(projectDir, config.publicDir),
+    publicDir: (0, import_node_path10.join)(projectDir, config.publicDir),
     rewriteNavigation: profile.rewriteNavigation.basePath,
     rewriteAssets: true,
     assetPrefix: profile.rewriteAssetUrls(config.id, version).replace(/\/+$/, ""),
-    absoluteApiToRelative: config.rewrite.absoluteApiToRelative
+    absoluteApiToRelative: config.rewrite.absoluteApiToRelative,
+    moduleId: config.id,
+    apiPrefixes: config.apiPrefixes
   };
   const sitemapRewrite = rewriteDslUrls(transformed.site, rewriteCtx);
   warnings.push(...sitemapRewrite.warnings);
@@ -955,17 +1148,22 @@ function buildModule(options = {}) {
     warnings.push(...result.warnings.map((warning) => `${id}: ${warning}`));
     rewrittenPages.set(id, result.value);
   }
-  const outDir = (0, import_node_path9.join)(projectDir, config.outDir);
-  const temp = (0, import_node_fs9.mkdtempSync)((0, import_node_path9.join)(projectDir, ".module-pack-"));
+  const outDir = (0, import_node_path10.join)(projectDir, config.outDir);
+  const temp = (0, import_node_fs10.mkdtempSync)((0, import_node_path10.join)(projectDir, ".module-pack-"));
   try {
     const bundle = bundleClient({
       projectDir,
       clientEntry: config.clientEntry,
-      outDir: (0, import_node_path9.join)(temp, "client")
+      outDir: (0, import_node_path10.join)(temp, "client")
     });
     if (bundle.message !== void 0) {
       warnings.push(bundle.message);
     }
+    const server = config.serverEntry ? bundleServer({
+      projectDir,
+      serverEntry: config.serverEntry,
+      outDir: (0, import_node_path10.join)(temp, "server")
+    }) : void 0;
     const emitted = emitDsl({
       config,
       projectDir,
@@ -977,18 +1175,20 @@ function buildModule(options = {}) {
       const tailwind = compileTailwind({
         projectDir,
         tailwind: config.tailwind,
-        scanDirs: [(0, import_node_path9.join)(temp, "dsl"), (0, import_node_path9.dirname)((0, import_node_path9.join)(projectDir, config.clientEntry))],
-        cssFile: (0, import_node_path9.join)(temp, "client", "index.css")
+        scanDirs: [(0, import_node_path10.join)(temp, "dsl"), (0, import_node_path10.dirname)((0, import_node_path10.join)(projectDir, config.clientEntry))],
+        cssFile: (0, import_node_path10.join)(temp, "client", "index.css")
       });
       warnings.push(...tailwind.warnings);
     }
-    const hasCss = (0, import_node_fs9.existsSync)((0, import_node_path9.join)(temp, "client", "index.css"));
+    const hasCss = (0, import_node_fs10.existsSync)((0, import_node_path10.join)(temp, "client", "index.css"));
     writeManifest({
       config,
       projectDir,
       outDir: temp,
       clientEntry: bundle.bundled ? "client/index.js" : void 0,
       styles: bundle.bundled && hasCss ? ["client/index.css"] : void 0,
+      serverEntry: server ? "server/index.mjs" : void 0,
+      apiPrefixes: server ? config.apiPrefixes : void 0,
       warnings
     });
     const validation = validateModule({ dir: projectDir, config: options.config, moduleDir: temp });
@@ -999,9 +1199,9 @@ function buildModule(options = {}) {
         validation.errors
       );
     }
-    (0, import_node_fs9.rmSync)(outDir, { recursive: true, force: true });
-    (0, import_node_fs9.mkdirSync)((0, import_node_path9.dirname)(outDir), { recursive: true });
-    (0, import_node_fs9.renameSync)(temp, outDir);
+    (0, import_node_fs10.rmSync)(outDir, { recursive: true, force: true });
+    (0, import_node_fs10.mkdirSync)((0, import_node_path10.dirname)(outDir), { recursive: true });
+    (0, import_node_fs10.renameSync)(temp, outDir);
     return {
       outDir,
       stats: {
@@ -1011,77 +1211,142 @@ function buildModule(options = {}) {
         assets: emitted.assetCount
       },
       clientBundled: bundle.bundled,
+      serverBundled: server !== void 0,
       warnings
     };
   } catch (error) {
-    (0, import_node_fs9.rmSync)(temp, { recursive: true, force: true });
+    (0, import_node_fs10.rmSync)(temp, { recursive: true, force: true });
     throw error;
   }
 }
 
 // src/init.ts
-var import_node_fs10 = require("fs");
-var import_node_path10 = require("path");
+var import_node_fs11 = require("fs");
+var import_node_path11 = require("path");
+var CLIENT_STYLES_ENTRY = "module/module.css";
+var SERVER_ENTRY = "module/server.ts";
 function initModule(options = {}) {
-  const projectDir = (0, import_node_path10.resolve)(options.dir ?? process.cwd());
-  const result = { created: [], skipped: [], warnings: [] };
-  const pkgFile = (0, import_node_path10.join)(projectDir, "package.json");
-  if (!(0, import_node_fs10.existsSync)(pkgFile)) {
+  const projectDir = (0, import_node_path11.resolve)(options.dir ?? process.cwd());
+  const overwrite = options.overwrite ?? false;
+  const server = options.server ?? false;
+  const result = { created: [], overwritten: [], skipped: [], warnings: [] };
+  const pkgFile = (0, import_node_path11.join)(projectDir, "package.json");
+  if (!(0, import_node_fs11.existsSync)(pkgFile)) {
     throw new Error(`\u672A\u627E\u5230 package.json: ${projectDir}\uFF08\u8BF7\u5728\u76EE\u6807\u5DE5\u7A0B\u6839\u6267\u884C\uFF09`);
   }
-  const pkg = JSON.parse((0, import_node_fs10.readFileSync)(pkgFile, "utf8"));
+  const pkg = JSON.parse((0, import_node_fs11.readFileSync)(pkgFile, "utf8"));
   const id = deriveModuleId(pkg.name);
   const actions = discoverActions(projectDir);
   const hasComponents = discoverComponents(projectDir);
-  const configFile = (0, import_node_path10.join)(projectDir, CONFIG_FILE);
-  if ((0, import_node_fs10.existsSync)(configFile)) {
+  const configFile = (0, import_node_path11.join)(projectDir, CONFIG_FILE);
+  const renderConfig = () => ({
+    id,
+    name: typeof pkg.name === "string" ? pkg.name : id,
+    basePath: `/${id}`,
+    yamlRoot: CONFIG_DEFAULTS.yamlRoot,
+    clientEntry: CONFIG_DEFAULTS.clientEntry,
+    // 只有显式 --server 才写入，避免纯 DSL 模块被迫启用 server entry
+    ...server ? { serverEntry: SERVER_ENTRY, apiPrefixes: [deriveApiPrefix(id)] } : {},
+    actions: actions.map((action) => action.specifier.replace(/^\.\.\//, "")),
+    publicDir: CONFIG_DEFAULTS.publicDir,
+    target: DEFAULT_TARGET
+  });
+  const configExisted = (0, import_node_fs11.existsSync)(configFile);
+  if (configExisted && !overwrite) {
     result.skipped.push(`${CONFIG_FILE}\uFF08\u5DF2\u5B58\u5728\uFF09`);
   } else {
-    const config = {
-      id,
-      name: typeof pkg.name === "string" ? pkg.name : id,
-      basePath: `/${id}`,
-      yamlRoot: CONFIG_DEFAULTS.yamlRoot,
-      clientEntry: CONFIG_DEFAULTS.clientEntry,
-      actions: actions.map((action) => action.specifier.replace(/^\.\.\//, "")),
-      publicDir: CONFIG_DEFAULTS.publicDir,
-      target: DEFAULT_TARGET,
-      demo: { public: false }
-    };
-    (0, import_node_fs10.writeFileSync)(configFile, `${JSON.stringify(config, null, 2)}
+    (0, import_node_fs11.writeFileSync)(configFile, `${JSON.stringify(renderConfig(), null, 2)}
 `, "utf8");
-    result.created.push(CONFIG_FILE);
+    if (configExisted) {
+      result.overwritten.push(CONFIG_FILE);
+    } else {
+      result.created.push(CONFIG_FILE);
+    }
   }
-  const clientFile = (0, import_node_path10.join)(projectDir, CONFIG_DEFAULTS.clientEntry);
-  if ((0, import_node_fs10.existsSync)(clientFile)) {
+  const clientFile = (0, import_node_path11.join)(projectDir, CONFIG_DEFAULTS.clientEntry);
+  if ((0, import_node_fs11.existsSync)(clientFile) && !overwrite) {
     result.skipped.push(`${CONFIG_DEFAULTS.clientEntry}\uFF08\u5DF2\u5B58\u5728\uFF09`);
   } else {
-    (0, import_node_fs10.mkdirSync)((0, import_node_path10.join)(projectDir, "module"), { recursive: true });
-    (0, import_node_fs10.writeFileSync)(clientFile, renderClientEntry(hasComponents, actions), "utf8");
-    result.created.push(CONFIG_DEFAULTS.clientEntry);
+    const clientExisted = (0, import_node_fs11.existsSync)(clientFile);
+    (0, import_node_fs11.mkdirSync)((0, import_node_path11.dirname)(clientFile), { recursive: true });
+    (0, import_node_fs11.writeFileSync)(clientFile, renderClientEntry(hasComponents, actions), "utf8");
+    if (clientExisted) {
+      result.overwritten.push(CONFIG_DEFAULTS.clientEntry);
+    } else {
+      result.created.push(CONFIG_DEFAULTS.clientEntry);
+    }
+  }
+  const stylesFile = (0, import_node_path11.join)(projectDir, CLIENT_STYLES_ENTRY);
+  if ((0, import_node_fs11.existsSync)(stylesFile) && !overwrite) {
+    result.skipped.push(`${CLIENT_STYLES_ENTRY}\uFF08\u5DF2\u5B58\u5728\uFF09`);
+  } else {
+    const stylesExisted = (0, import_node_fs11.existsSync)(stylesFile);
+    (0, import_node_fs11.mkdirSync)((0, import_node_path11.dirname)(stylesFile), { recursive: true });
+    (0, import_node_fs11.writeFileSync)(stylesFile, renderModuleStyles(), "utf8");
+    if (stylesExisted) {
+      result.overwritten.push(CLIENT_STYLES_ENTRY);
+    } else {
+      result.created.push(CLIENT_STYLES_ENTRY);
+    }
+  }
+  if (server) {
+    const serverFile = (0, import_node_path11.join)(projectDir, SERVER_ENTRY);
+    if ((0, import_node_fs11.existsSync)(serverFile) && !overwrite) {
+      result.skipped.push(`${SERVER_ENTRY}\uFF08\u5DF2\u5B58\u5728\uFF09`);
+    } else {
+      const serverExisted = (0, import_node_fs11.existsSync)(serverFile);
+      (0, import_node_fs11.mkdirSync)((0, import_node_path11.dirname)(serverFile), { recursive: true });
+      (0, import_node_fs11.writeFileSync)(serverFile, renderServerEntry(id), "utf8");
+      if (serverExisted) {
+        result.overwritten.push(SERVER_ENTRY);
+      } else {
+        result.created.push(SERVER_ENTRY);
+      }
+    }
   }
-  injectPackageJson(pkg, result);
-  (0, import_node_fs10.writeFileSync)(pkgFile, `${JSON.stringify(pkg, null, 2)}
+  const hasServerEntry = (0, import_node_fs11.existsSync)((0, import_node_path11.join)(projectDir, SERVER_ENTRY));
+  injectPackageJson(pkg, result, hasServerEntry);
+  if (hasServerEntry && !configDeclaresServerEntry(configFile)) {
+    result.warnings.push(
+      '\u68C0\u6D4B\u5230 module/server.ts\uFF1A\u5DF2\u6CE8\u5165 "./server" export\uFF1B\u8BF7\u5728 pactor.module.json \u4E2D\u540C\u65F6\u914D\u7F6E serverEntry \u4E0E apiPrefixes \u540E\u518D\u6784\u5EFA\uFF08\u7F3A\u4E00\u6784\u5EFA\u4F1A\u5931\u8D25\uFF09'
+    );
+  }
+  (0, import_node_fs11.writeFileSync)(pkgFile, `${JSON.stringify(pkg, null, 2)}
 `, "utf8");
   result.created.push("package.json\uFF08\u6CE8\u5165 files / exports / scripts / peerDependencies\uFF09");
   return result;
 }
+function configDeclaresServerEntry(configFile) {
+  if (!(0, import_node_fs11.existsSync)(configFile)) return false;
+  try {
+    const raw = JSON.parse((0, import_node_fs11.readFileSync)(configFile, "utf8"));
+    return raw.serverEntry === SERVER_ENTRY;
+  } catch {
+    return false;
+  }
+}
+var MODULE_ID_PREFIX = "pactor-app-";
 function deriveModuleId(name) {
   const base2 = typeof name === "string" && name.length > 0 ? name : "module";
   const withoutScope = base2.startsWith("@") ? base2.slice(base2.indexOf("/") + 1) : base2;
   const kebab = withoutScope.replace(/([a-z0-9])([A-Z])/g, "$1-$2").toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "");
-  return kebab.length > 0 ? kebab : "module";
+  const id = kebab.length > 0 ? kebab : "module";
+  return id.startsWith(MODULE_ID_PREFIX) ? id : `${MODULE_ID_PREFIX}${id}`;
+}
+function deriveApiPrefix(moduleId) {
+  const slug = moduleId.startsWith(MODULE_ID_PREFIX) ? moduleId.slice(MODULE_ID_PREFIX.length) : moduleId;
+  return `/api/${slug.length > 0 ? slug : "module"}`;
 }
 function discoverActions(projectDir) {
-  const dir = (0, import_node_path10.join)(projectDir, "src/pactor");
-  if (!(0, import_node_fs10.existsSync)(dir)) return [];
+  const dir = (0, import_node_path11.join)(projectDir, "src/pactor");
+  if (!(0, import_node_fs11.existsSync)(dir)) return [];
   const sources = [];
-  for (const entry of (0, import_node_fs10.readdirSync)(dir, { withFileTypes: true }).sort(
+  for (const entry of (0, import_node_fs11.readdirSync)(dir, { withFileTypes: true }).sort(
     (a, b) => a.name.localeCompare(b.name)
   )) {
     if (!entry.isFile() || !entry.name.endsWith("-actions.ts")) continue;
-    const file = (0, import_node_path10.join)(dir, entry.name);
-    const content = (0, import_node_fs10.readFileSync)(file, "utf8");
+    const file = (0, import_node_path11.join)(dir, entry.name);
+    const content = (0, import_node_fs11.readFileSync)(file, "utf8");
     const exports2 = [...content.matchAll(/export\s+const\s+([A-Za-z_$][\w$]*)/g)].map(
       (match) => match[1]
     );
@@ -1094,9 +1359,9 @@ function discoverActions(projectDir) {
   return sources;
 }
 function discoverComponents(projectDir) {
-  const file = (0, import_node_path10.join)(projectDir, "src/pactor/components/index.ts");
-  if (!(0, import_node_fs10.existsSync)(file)) return false;
-  return /export\s+(const|\{[^}]*)\s*pactorComponents/.test((0, import_node_fs10.readFileSync)(file, "utf8"));
+  const file = (0, import_node_path11.join)(projectDir, "src/pactor/components/index.ts");
+  if (!(0, import_node_fs11.existsSync)(file)) return false;
+  return /export\s+(const|\{[^}]*)\s*pactorComponents/.test((0, import_node_fs11.readFileSync)(file, "utf8"));
 }
 function renderClientEntry(hasComponents, actions) {
   const imports = [];
@@ -1112,18 +1377,48 @@ function renderClientEntry(hasComponents, actions) {
   }
   const components = hasComponents ? "pactorComponents" : "{}";
   const actionsExpr = spreads.length > 0 ? `{ ${spreads.join(", ")} }` : "{}";
+  const importsBlock = imports.length > 0 ? `${imports.join("\n")}
+` : "";
   return `// \u7531 \`pactor module init\` \u751F\u6210\uFF1A\u6A21\u5757 client \u5165\u53E3\u3002
 // Shell \u88C5\u914D\u5668\u751F\u6210 client-registry.ts \u65F6\u9759\u6001 import "<pkg>/client"\uFF0C
 // \u8981\u6C42\u6B64\u5904\u5177\u540D\u5BFC\u51FA extensions\uFF08components / actions \u6CE8\u518C\u8868\uFF09\u3002
-${imports.join("\n")}
-
+// module.css \u7531 esbuild \u62BD\u6210 client/index.css\uFF0CShell \u6309 manifest.styles \u52A0\u8F7D\u3002
+import './module.css';
+${importsBlock}
 export const extensions = {
   components: ${components},
   actions: ${actionsExpr},
 };
 `;
 }
-function injectPackageJson(pkg, result) {
+function renderModuleStyles() {
+  return `/**
+ * \u6A21\u5757\u81EA\u5E26\u6837\u5F0F\uFF08\u7531 \`pactor module init\` \u751F\u6210\uFF09\u3002
+ *
+ * \u672C\u6587\u4EF6\u7531 module/client.ts import\uFF1Aesbuild \u6253\u5305\u65F6\u4F1A\u62BD\u53D6\u4E3A
+ * dist-module/client/index.css \u5E76\u5199\u5165 manifest.styles\uFF0CShell \u636E\u6B64\u81EA\u52A8\u52A0\u8F7D\u3002
+ * Tailwind \u57FA\u7840\u6837\u5F0F\u3001pactor-app \u805A\u5408\u6837\u5F0F\u4E0E\u4E3B\u9898\u53D8\u91CF\u7531 Shell \u7EDF\u4E00\u63D0\u4F9B\uFF0C
+ * \u6A21\u5757\u5185\u4E0D\u8981\u91CD\u590D\u5F15\u5165\uFF0C\u907F\u514D\u4EA7\u751F\u7B2C\u4E8C\u4EFD reset / \u4EE4\u724C\u3002
+ */
+
+/* \u6A21\u5757\u7EA7\u6837\u5F0F\u5199\u5728\u8FD9\u91CC\uFF1A\u5EFA\u8BAE\u4F7F\u7528\u5E26\u6A21\u5757\u524D\u7F00\u7684\u7C7B\u540D\uFF0C\u907F\u514D\u4E0E Shell \u5168\u5C40\u6837\u5F0F\u51B2\u7A81\u3002 */
+`;
+}
+function renderServerEntry(moduleId) {
+  const prefix = deriveApiPrefix(moduleId);
+  return `// \u7531 \`pactor module init --server\` \u751F\u6210\uFF1A\u6A21\u5757\u670D\u52A1\u7AEF\u5165\u53E3\u3002
+// \u5BFC\u51FA\u300C\u903B\u8F91\u8DEF\u5F84 \u2192 \u65B9\u6CD5\u5904\u7406\u51FD\u6570\u300D\u6620\u5C04\uFF1A\u8DEF\u5F84\u952E\u4F7F\u7528\u539F\u59CB /api/... \u903B\u8F91\u8DEF\u5F84\uFF0C
+// Shell \u901A\u8FC7 /api/modules/<moduleId>/* \u7EDF\u4E00\u5206\u53D1\uFF08\u89C1 pactor.module.json \u7684 apiPrefixes\uFF09\u3002
+// handler \u53EA\u4F9D\u8D56 Web \u6807\u51C6 Request / Response\uFF0Ccontext.url \u4E3A\u903B\u8F91 URL\uFF08\u542B query\uFF09\u3002
+
+export const handlers = {
+  // '${prefix}/hello': {
+  //   GET: () => Response.json({ code: 0, data: { ok: true }, message: 'ok' }),
+  // },
+};
+`;
+}
+function injectPackageJson(pkg, result, hasServerEntry) {
   const outDir = CONFIG_DEFAULTS.outDir;
   const files = Array.isArray(pkg.files) ? pkg.files : [];
   if (!files.includes(outDir)) {
@@ -1133,7 +1428,8 @@ function injectPackageJson(pkg, result) {
   const wantedExports = {
     "./manifest": `./${outDir}/manifest.json`,
     "./client": `./${outDir}/client/index.js`,
-    "./styles.css": `./${outDir}/client/index.css`
+    "./styles.css": `./${outDir}/client/index.css`,
+    ...hasServerEntry ? { "./server": `./${outDir}/server/index.mjs` } : {}
   };
   for (const [key, value] of Object.entries(wantedExports)) {
     if (exportsMap[key] === void 0) {
@@ -1146,7 +1442,8 @@ function injectPackageJson(pkg, result) {
   const scripts = isRecord4(pkg.scripts) ? { ...pkg.scripts } : {};
   const wantedScripts = {
     "build:module": "pactor module build",
-    "pack:module": "pactor module pack"
+    "pack:module": "pactor module pack",
+    "publish:module": "pactor module publish"
   };
   for (const [key, value] of Object.entries(wantedScripts)) {
     if (scripts[key] === void 0) {
@@ -1174,21 +1471,72 @@ function injectPackageJson(pkg, result) {
 function isRecord4(value) {
   return value !== null && typeof value === "object" && !Array.isArray(value);
 }
+
+// src/version.ts
+var import_node_fs12 = require("fs");
+var import_node_path12 = require("path");
+var SEMVER_RE = /^(\d+)\.(\d+)\.(\d+)(-[0-9A-Za-z.-]+)?$/;
+function bumpVersion(current, release) {
+  if (release === "major" || release === "minor" || release === "patch") {
+    const match = SEMVER_RE.exec(current);
+    if (!match) {
+      throw new ConfigError(`package.json \u7248\u672C\u53F7\u975E\u6CD5: ${current}\uFF08\u671F\u671B x.y.z\uFF09`);
+    }
+    const [, major, minor, patch] = match;
+    if (release === "major") return `${Number(major) + 1}.0.0`;
+    if (release === "minor") return `${major}.${Number(minor) + 1}.0`;
+    return `${major}.${minor}.${Number(patch) + 1}`;
+  }
+  if (!SEMVER_RE.test(release)) {
+    throw new ConfigError(
+      `--bump \u53D6\u503C\u975E\u6CD5: ${release}\uFF08\u652F\u6301 patch | minor | major | \u663E\u5F0F\u7248\u672C\u53F7 x.y.z\uFF09`
+    );
+  }
+  return release;
+}
+function bumpPackageVersion(options) {
+  const dir = (0, import_node_path12.resolve)(options.dir ?? process.cwd());
+  const pkgFile = (0, import_node_path12.resolve)(dir, "package.json");
+  if (!(0, import_node_fs12.existsSync)(pkgFile)) {
+    throw new ConfigError(`\u672A\u627E\u5230 package.json: ${dir}\uFF08\u8BF7\u5728\u76EE\u6807\u5DE5\u7A0B\u6839\u6267\u884C\uFF09`);
+  }
+  const pkg = JSON.parse((0, import_node_fs12.readFileSync)(pkgFile, "utf8"));
+  const name = typeof pkg.name === "string" ? pkg.name : "(\u672A\u547D\u540D)";
+  if (typeof pkg.version !== "string" || pkg.version === "") {
+    throw new ConfigError(`package.json \u7F3A\u5C11 version \u5B57\u6BB5: ${pkgFile}`);
+  }
+  const from = pkg.version;
+  const to = bumpVersion(from, options.release);
+  pkg.version = to;
+  (0, import_node_fs12.writeFileSync)(pkgFile, `${JSON.stringify(pkg, null, 2)}
+`, "utf8");
+  return { name, from, to };
+}
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
   CLIENT_EXTERNALS,
+  CLIENT_STYLES_ENTRY,
   CONFIG_DEFAULTS,
   CONFIG_FILE,
   ConfigError,
   DEFAULT_TARGET,
   INCLUDE_KEY,
   IncludeError,
+  MODULE_ID_PREFIX,
   ModuleBuildError,
   ProfileError,
+  SERVER_BUNDLE_FILE,
+  SERVER_ENTRY,
+  SERVER_EXTERNALS,
+  ServerBundleError,
   buildModule,
+  bumpPackageVersion,
+  bumpVersion,
   bundleClient,
+  bundleServer,
   collectModuleSource,
   compileTailwind,
+  deriveApiPrefix,
   deriveModuleId,
   discoverActions,
   discoverComponents,
@@ -1199,6 +1547,7 @@ function isRecord4(value) {
   initModule,
   innospotsWebShellV1,
   innospotsWebShellV2,
+  innospotsWebShellV3,
   listProfiles,
   loadModuleConfig,
   loadYamlExpanded,
@@ -1207,6 +1556,8 @@ function isRecord4(value) {
   parseYamlFile,
   readProjectVersion,
   renderClientEntry,
+  renderModuleStyles,
+  renderServerEntry,
   resolvePactorVersionRange,
   rewriteDslUrls,
   rewriteNavigationTo,