@tbox.cn/app-template-agent 0.1.0 → 0.7.4

package/pnpm-workspace.template.yaml

@@ -1,6 +1,10 @@
 # 应用 workspace 模板：tbox-app create 用它生成应用的 pnpm-workspace.yaml。
 # 本文件不触发 workspace root（非 pnpm-workspace.yaml 文件名）。
-# 同步规则：catalog 与根 pnpm-workspace.yaml 保持并集一致（单向复制，未引用条目无害）。
+# 同步规则（guard-workspace 恒等式校验）：
+# - catalog 键集 = agent 三模板成员 catalog: 引用并集 ∪ 平台三键（@tbox.cn/app-{sdk,contracts*}——
+#   codegen 展开恒改写为 catalog: 的完备键）；键随成员引用增删，不镜像根全量。
+# - catalog 值与根 pnpm-workspace.yaml 同键全等（scripts/release.mjs sync-catalog 维护）。
+# - 非 catalog 顶层键与根镜像（packages/overrides 除外——发布态不带 overrides）。
 packages:
   - apps/*
   - packages/*
@@ -10,51 +14,47 @@ onlyBuiltDependencies:
 
 allowBuilds:
   esbuild: true
+  lefthook: false
+
+resolvePeersFromWorkspaceRoot: true
+
+# 递归脚本并发上限（pnpm -r 默认 4）：全速并行时多包 vitest worker 独立 transform
+# 同一源码树，CI 峰值内存曾致 V8 fatal（SIGABRT）。本地提速可 CLI 旗标覆盖。
+workspaceConcurrency: 2
 
 catalog:
-  typescript: ^5.7.0
-  tsx: ^4.19.0
-  zod: ^3.24.0
-  vite: ^6.4.3
-  vitest: ^4.1.4
-  react: ^18.3.1
-  react-dom: ^18.3.1
-  "@types/react": ^18.3.12
-  "@types/react-dom": ^18.3.1
-  "@types/node": ^24.0.0
-  express: ^4.21.0
-  "@types/express": ^4.17.21
-  ws: ^8.18.0
-  "@types/ws": ^8.5.0
-  "@mastra/core": ^1.33.0
-  "@mastra/observability": 1.12.0
-  "@ag-ui/core": ^0.0.47
-  ai: ^6.0.0
-  "@ai-sdk/openai": ^3.0.0
-  "@ai-sdk/provider": ^3.0.10
+  typescript: 5.9.3
+  tsx: 4.23.11
+  zod: 3.25.76
+  vite: 6.4.3
+  vitest: 4.1.10
+  react: 18.3.1
+  react-dom: 18.3.1
+  "@types/react": 18.3.31
+  "@types/react-dom": 18.3.7
+  "@types/node": 24.13.3
+  express: 4.22.2
+  "@types/express": 4.17.25
+  ws: 8.21.3
+  "@types/ws": 8.18.1
   "@tbox.cn/agent-plugin": 0.1.0
-  "@tbox.cn/app-sdk": ^0.1.0
-  "@tbox.cn/app-contracts": ^0.1.0
-  "@tbox.cn/app-contracts-mall": ^0.1.0
-  zustand: ^4.5.5
-  commander: ^12.1.0
-  diff: ^7.0.0
-  "@types/diff": ^7.0.0
-  eslint: ^9.0.0
-  typescript-eslint: ^8.57.2
-  eslint-plugin-react-hooks: ^5.2.0
-  tsup: ^8.0.0
-  cors: ^2.8.5
-  jose: ^6.2.2
-  "@types/cors": ^2.8.17
+  "@tbox.cn/app-sdk": 0.17.0
+  "@tbox.cn/app-contracts": 0.9.0
+  "@tbox.cn/app-contracts-mall": 0.9.0
+  zustand: 4.5.7
+  eslint: 9.39.5
+  typescript-eslint: 8.67.0
+  eslint-plugin-react-hooks: 5.2.0
+  tsup: 8.5.1
+  cors: 2.8.6
+  jose: 6.2.8
+  "@types/cors": 2.8.19
   "@tbox-dev-js/sdk": 0.1.18
-  "@vitejs/plugin-react": ^4.3.3
-  less: ^4.2.0
-  "@phosphor-icons/react": ^2.1.10
-  antd-mobile: ^5.42.3
-  react-markdown: ^9.1.0
-  remark-gfm: ^4.0.1
-  "@types/supertest": ^7.2.0
-  supertest: ^7.2.2
-  happy-dom: ^20.9.0
-  postcss-pxtorem: ^6.1.0
+  "@vitejs/plugin-react": 4.7.0
+  less: 4.8.1
+  "@phosphor-icons/react": 2.1.10
+  antd-mobile: 5.42.3
+  react-markdown: 9.1.0
+  remark-gfm: 4.0.1
+  happy-dom: 20.11.2
+  postcss-pxtorem: 6.1.0

package/scripts/build.sh

@@ -9,7 +9,7 @@ cd "$PROJECT_DIR"
 echo "Project directory: $PROJECT_DIR"
 
 export NODE_ENV=production
-echo "APP_API_URL: $APP_API_URL"
+echo "APP_API_URL: ${APP_API_URL:-<unset>}"
 
 SKIP_SERVER=false
 for arg in "$@"; do
@@ -17,23 +17,17 @@ for arg in "$@"; do
 done
 echo "Skip server: $SKIP_SERVER"
 
-# 工程边界守卫
-node "$SCRIPT_DIR/check-workspace.mjs"
-
-# 平台基础设施守卫
-bash "$SCRIPT_DIR/check-inspector.sh"
+# 零依赖守卫 install 前 fail-fast（幂等毫秒级；check:inspector 依赖 node_modules，经 check 组合随构建序列执行）
+pnpm check:workspace
 
 echo "Installing dependencies..."
 CI=true pnpm install
 
-echo "Building client (H5)..."
-pnpm --filter @app/client build
-
+# 构建序列单源 = package.json build / build:client（守卫经 check 组合注入）；本脚本只管环境与 install
 if [ "$SKIP_SERVER" = false ]; then
-  echo "Building server..."
-  pnpm --filter @app/server build
+  pnpm build
 else
-  echo "Skipping server build (--skip-server)"
+  pnpm build:client
 fi
 
 echo "All builds completed successfully!"

package/scripts/check-workspace.mjs

@@ -25,6 +25,7 @@ const nestedLockfiles = new Set([
   'bun.lockb',
   'package-lock.json',
   'pnpm-lock.yaml',
+  'pnpm-lock.template.yaml',
   'yarn.lock',
 ]);
 const viteConfigPattern = /^vite\.config\.(?:js|mjs|cjs|ts|mts|cts)$/;
@@ -90,22 +91,22 @@ function printFailure(findings) {
     console.error('\n检测到 apps/client/ 之外的 Vite 项目配置：');
     for (const file of findings.detachedViteConfigs) console.error(`  - ${file}`);
   }
-  if (findings.missingComponentDescriptors.length > 0) {
-    console.error('\npackages/* 缺少 tbox.component.json（contracts / app-sdk / shared 除外）：');
-    for (const file of findings.missingComponentDescriptors) console.error(`  - ${file}`);
+  if (findings.missingModuleDescriptors.length > 0) {
+    console.error('\npackages/* 缺少 tbox.module.json（contracts / app-sdk / shared 除外）：');
+    for (const file of findings.missingModuleDescriptors) console.error(`  - ${file}`);
   }
 
   console.error('');
   process.exitCode = 1;
 }
 
-/** 豁免：SDK/契约包无 tbox.component.json（002 §2.3 / 003 §4.1） */
+/** 豁免：SDK/契约包无 tbox.module.json（002 §2.3 / 003 §4.1） */
 function isExemptPackage(dirName) {
   return dirName === 'app-sdk' || dirName === 'shared' || dirName.startsWith('contracts');
 }
 
-/** 校验 packages/* 每个业务包必须有 tbox.component.json（002 §2.3 / 003 §4.1） */
-async function checkComponentDescriptors(projectDir, findings) {
+/** 校验 packages/* 每个业务包必须有 tbox.module.json（002 §2.3 / 003 §4.1） */
+async function checkModuleDescriptors(projectDir, findings) {
   const packagesDir = path.join(projectDir, 'packages');
   if (!existsSync(packagesDir)) return;
   const entries = await readdir(packagesDir, { withFileTypes: true });
@@ -114,8 +115,8 @@ async function checkComponentDescriptors(projectDir, findings) {
     if (isExemptPackage(entry.name)) continue;
     const pkgDir = path.join(packagesDir, entry.name);
     if (!existsSync(path.join(pkgDir, 'package.json'))) continue;
-    if (!existsSync(path.join(pkgDir, 'tbox.component.json'))) {
-      findings.missingComponentDescriptors.push(`packages/${entry.name}/`);
+    if (!existsSync(path.join(pkgDir, 'tbox.module.json'))) {
+      findings.missingModuleDescriptors.push(`packages/${entry.name}/`);
     }
   }
 }
@@ -144,11 +145,11 @@ async function main() {
   const findings = {
     nestedLockfiles: [],
     detachedViteConfigs: [],
-    missingComponentDescriptors: [],
+    missingModuleDescriptors: [],
   };
 
   await walk(projectDir, findings);
-  await checkComponentDescriptors(projectDir, findings);
+  await checkModuleDescriptors(projectDir, findings);
 
   if (Object.values(findings).some((items) => items.length > 0)) {
     printFailure(findings);

package/scripts/stop.sh

@@ -1,26 +1,60 @@
 #!/bin/bash
+# 停止本应用全部进程。杀面收敛原则（docs/postmortem/0001）：
+# 1) cmdline 匹配：锚定本项目路径，逐字符 ERE 字面量化（BSD/GNU 无歧义），[^ ]* 锁单参数
+# 2) 端口定位：只取 LISTEN 态——持有连接的客户端（编排探活/代理父进程）不入杀面
+# PORT 契约：须与启动环境一致（生产形态 cmdline 不含路径，端口是唯一定位手段）
+# 边界：根级浅层 <P>/node_modules/.bin/x 直调形态不在 pattern 内（模板内无此调用形态；.pnpm 深路径匹配）
 
 SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
 PROJECT_DIR="$(dirname "$SCRIPT_DIR")"
 cd "$PROJECT_DIR"
-
 PORT=${PORT:-8000}
 
-echo "=== Stopping server on port $PORT ==="
-if lsof -i :"$PORT" > /dev/null 2>&1; then
-  for PID in $(lsof -t -i :"$PORT"); do
-    echo "Killing process $PID..."
-    kill -9 "$PID" 2>/dev/null || true
+esc_ere() {   # 元字符以 [c] 字面量化；单遍扫描防插入物自污染（BSD \+ 为量词，已实证）。
+  #   特例：^ 用 [\^]——裸置双引擎皆为行首锚（实证），[^] 则是非法未闭合括号表达式；\ 用 [\\]
+  local s="$1" i c out=""
+  for ((i=0; i<${#s}; i++)); do
+    c=${s:$i:1}
+    case $c in
+      '.'|'+'|'*'|'?'|'$'|'('|')'|'{'|'}'|'|'|'['|']') out+="[$c]" ;;
+      '^') out+='[\^]' ;;
+      '\') out+='[\\]' ;;
+      *) out+=$c ;;
+    esac
   done
-  sleep 1
-  lsof -i :"$PORT" > /dev/null 2>&1 && echo "Warning: Port $PORT still in use" || echo "Port $PORT is now free"
-else
-  echo "Port $PORT is not in use"
-fi
+  printf '%s' "$out"
+}
+
+LISTEN_TOOLS_OK=1   # 主作用域预计算（listen_pids 经命令替换运行于子 shell，内赋值不外传——R4b 实证）
+command -v lsof >/dev/null 2>&1 || command -v ss >/dev/null 2>&1 || LISTEN_TOOLS_OK=0
+listen_pids() {   # 两级降级：lsof（macOS 恒有）→ ss（iproute2）；参数化端口便于多端口扩展
+  local p=${1:-$PORT}
+  if command -v lsof >/dev/null 2>&1; then
+    lsof -nP -t -i :"$p" -sTCP:LISTEN 2>/dev/null | sort -u
+  elif command -v ss >/dev/null 2>&1; then
+    ss -ltnpH "sport = :$p" 2>/dev/null | grep -o 'pid=[0-9]*' | cut -d= -f2 | sort -u
+  else
+    echo "Warning: lsof/ss 均不可用，端口清理跳过（cmdline 兜底仍执行）" >&2
+  fi
+}
 
 echo "=== Cleaning up residual processes ==="
-pkill -f "tsx watch src/index.ts" 2>/dev/null || true
-pkill -f "node.*dist/index.js" 2>/dev/null || true
-pkill -f "vite" 2>/dev/null || true
+ESC=$(esc_ere "$PROJECT_DIR")
+pkill -TERM -f "$ESC/[^ ]*/node_modules" 2>/dev/null || true   # 先于端口杀：杜绝 watch 复活窗口
 
+PIDS=$(listen_pids "$PORT")
+if [ -n "$PIDS" ]; then
+  echo "=== Stopping server on port $PORT ==="
+  for PID in $PIDS; do echo "Killing process $PID..."; kill -9 "$PID" 2>/dev/null || true; done
+  sleep 1
+  if [ -n "$(listen_pids "$PORT")" ]; then
+    echo "Warning: Port $PORT still in use"
+  else
+    echo "Port $PORT is now free"
+  fi
+elif [ "$LISTEN_TOOLS_OK" = 1 ]; then
+  echo "=== Port $PORT: no listener ==="
+else
+  echo "=== Port $PORT: listener status unknown（定位工具缺失）==="
+fi
 echo "=== All services stopped ==="

package/scripts/verify-generated.mjs

@@ -43,7 +43,7 @@ function readManifestModules() {
   }
 }
 
-/** 收集 packages/* 下本地模块 id（有 tbox.component.json） */
+/** 收集 packages/* 下本地模块 id（有 tbox.module.json） */
 async function listLocalModuleIds() {
   const packagesDir = path.join(appDir, 'packages');
   if (!existsSync(packagesDir)) return [];
@@ -51,7 +51,7 @@ async function listLocalModuleIds() {
   const ids = [];
   for (const entry of entries) {
     if (!entry.isDirectory()) continue;
-    if (existsSync(path.join(packagesDir, entry.name, 'tbox.component.json'))) {
+    if (existsSync(path.join(packagesDir, entry.name, 'tbox.module.json'))) {
       ids.push(entry.name);
     }
   }
@@ -100,12 +100,12 @@ async function main() {
   }
 
   // ① 漂移 = 0：声明（manifest + 本地模块）vs 服务端 modules.ts 实际装配
-  // 契约包（无 tbox.component.json / 无 serverModule）不参与 modules.ts 装配，不计入声明
+  // 契约包（无 tbox.module.json / 无 serverModule）不参与 modules.ts 装配，不计入声明
   // （客户端 modules.ts 装配漂移由 tbox-app module doctor 全量校验兜底）
   const npmModules = readManifestModules();
   const declared = new Set([
     ...npmModules
-      .filter((m) => existsSync(path.join(appDir, 'packages', m.id, 'tbox.component.json')))
+      .filter((m) => existsSync(path.join(appDir, 'packages', m.id, 'tbox.module.json')))
       .map((m) => m.id),
     ...(await listLocalModuleIds()),
   ]);

package/tsconfig.base.json

@@ -12,6 +12,7 @@
     "isolatedModules": true,
     "allowImportingTsExtensions": true,
     "noEmit": true,
+    "incremental": true,
     "useDefineForClassFields": true,
     "noUnusedLocals": true,
     "noUnusedParameters": true,

package/apps/client/babel-plugins/code-inspect.cjs

@@ -1,110 +0,0 @@
-/**
- * ============================================================================
- * 平台配套 babel plugin - 给每个 JSXElement 注入 data-code-inspect-* 属性。
- * 配合 tbox 平台 inspector runtime（/__vs_inspector__.js）使用，让 host 端微调浮层
- * 能拿到源码位置，直接走「直改源码」快路径，而不是把意图发回 LLM 重新生成代码。
- *
- * 注入的属性（与 inspector runtime 期望严格对齐，名字别改）：
- *   data-code-inspect-loc-filepath = 绝对路径
- *   data-code-inspect-loc-line     = "{line}:{column}" (1-based, 来自 JSX opening tag)
- *   data-code-inspect-jsx-tag      = JSX 标签名 (如 "div" / "Form.Item")
- *   data-code-inspect-component    = 所在组件名 (爬 AST 找最近的函数/类组件)
- *
- * Vite 接入：在 vite.config.ts 里 `react({ babel: { plugins: [...] } })`，仅 dev（command==='serve'）启用。
- * ============================================================================
- */
-
-const LOC_FILEPATH_ATTRIBUTE_NAME = 'data-code-inspect-loc-filepath';
-const LOC_LINE_ATTRIBUTE_NAME = 'data-code-inspect-loc-line';
-const TAG_ATTRIBUTE_NAME = 'data-code-inspect-jsx-tag';
-const COMPONENT_ATTRIBUTE_NAME = 'data-code-inspect-component';
-
-const PLUGIN_NAME = 'code-inspect-plugin';
-
-function getJsxName(nameNode) {
-  if (nameNode.type === 'JSXIdentifier') return nameNode.name;
-  if (nameNode.type === 'JSXMemberExpression') {
-    return getJsxName(nameNode.object) + '.' + nameNode.property.name;
-  }
-  return '';
-}
-
-function getCurrentComponentName(path) {
-  let current = path;
-  while (current) {
-    if (current.isFunctionDeclaration() && current.node.id) {
-      return current.node.id.name;
-    }
-    if (
-      current.isVariableDeclarator() &&
-      current.node.id &&
-      current.node.init
-    ) {
-      const init = current.node.init;
-      if (
-        init.type === 'ArrowFunctionExpression' ||
-        init.type === 'FunctionExpression'
-      ) {
-        return current.node.id.name;
-      }
-    }
-    if (current.isClassDeclaration() && current.node.id) {
-      return current.node.id.name;
-    }
-    if (
-      (current.isFunctionExpression() ||
-        current.isArrowFunctionExpression() ||
-        current.isCallExpression()) &&
-      current.parent &&
-      current.parent.type === 'VariableDeclarator' &&
-      current.parent.id
-    ) {
-      return current.parent.id.name;
-    }
-    current = current.parentPath;
-  }
-  return 'Unknown';
-}
-
-function CodeInspectPlugin(babel) {
-  const t = babel.types;
-
-  return {
-    name: PLUGIN_NAME,
-    visitor: {
-      JSXElement(path) {
-        const node = path.node;
-        const nodeName = getJsxName(node.openingElement.name);
-        if (!nodeName) return;
-        if (!node.loc) return;
-
-        const filename = path.hub.file.opts.filename || 'unknown';
-        const { line, column } = node.loc.start;
-        const componentName = getCurrentComponentName(path);
-
-        node.openingElement.attributes.push(
-          t.jsxAttribute(
-            t.jsxIdentifier(LOC_FILEPATH_ATTRIBUTE_NAME),
-            t.stringLiteral(filename),
-          ),
-          t.jsxAttribute(
-            t.jsxIdentifier(LOC_LINE_ATTRIBUTE_NAME),
-            t.stringLiteral(`${line}:${column}`),
-          ),
-          t.jsxAttribute(
-            t.jsxIdentifier(TAG_ATTRIBUTE_NAME),
-            t.stringLiteral(nodeName),
-          ),
-          t.jsxAttribute(
-            t.jsxIdentifier(COMPONENT_ATTRIBUTE_NAME),
-            t.stringLiteral(componentName),
-          ),
-        );
-      },
-    },
-  };
-}
-
-module.exports = CodeInspectPlugin;
-module.exports.CodeInspectPlugin = CodeInspectPlugin;
-module.exports.PLUGIN_NAME = PLUGIN_NAME;

package/apps/client/src/hooks/usePullDownHistory.ts

@@ -1,97 +0,0 @@
-import { useCallback, useRef, useState } from 'react';
-
-export type PullStatus = 'idle' | 'pulling' | 'ready' | 'loading' | 'noMore';
-
-const DAMPING = 0.4;
-const THRESHOLD = 60;
-
-interface Options {
-  isAtTopRef: React.MutableRefObject<boolean>;
-  isLoadingHistory: boolean;
-  hasMore: boolean;
-  onLoad: () => Promise<void>;
-}
-
-/** 列表顶部下拉加载历史（纯 H5 触摸，去 Taro）。 */
-export function usePullDownHistory({ isAtTopRef, isLoadingHistory, hasMore, onLoad }: Options) {
-  const [pullStatus, setPullStatus] = useState<PullStatus>('idle');
-  const [pullDistance, setPullDistance] = useState(0);
-  const startYRef = useRef(0);
-  const isPullingRef = useRef(false);
-
-  const handleTouchStart = useCallback(
-    (e: React.TouchEvent) => {
-      if (isLoadingHistory || pullStatus === 'loading') return;
-      const touch = e.touches[0];
-      if (!touch) return;
-      startYRef.current = touch.clientY;
-      isPullingRef.current = isAtTopRef.current;
-    },
-    [isLoadingHistory, pullStatus, isAtTopRef],
-  );
-
-  const handleTouchMove = useCallback(
-    (e: React.TouchEvent) => {
-      if (!isPullingRef.current) return;
-      if (isLoadingHistory || pullStatus === 'loading') return;
-      if (!hasMore && pullStatus !== 'pulling' && pullStatus !== 'ready') return;
-
-      const touch = e.touches[0];
-      if (!touch) return;
-      const deltaY = touch.clientY - startYRef.current;
-
-      if (deltaY <= 0) {
-        if (pullStatus !== 'idle') {
-          setPullStatus('idle');
-          setPullDistance(0);
-        }
-        return;
-      }
-
-      try {
-        e.preventDefault();
-      } catch {
-        /* passive listener, ignore */
-      }
-
-      const distance = deltaY * DAMPING;
-      if (!hasMore) {
-        setPullStatus('noMore');
-        setPullDistance(Math.min(distance, THRESHOLD));
-        return;
-      }
-      setPullDistance(distance);
-      setPullStatus(distance > THRESHOLD ? 'ready' : 'pulling');
-    },
-    [isLoadingHistory, pullStatus, hasMore],
-  );
-
-  const handleTouchEnd = useCallback(() => {
-    if (!isPullingRef.current) return;
-    isPullingRef.current = false;
-
-    if (pullStatus === 'ready' && hasMore) {
-      setPullStatus('loading');
-      setPullDistance(THRESHOLD);
-      onLoad()
-        .then(() => {
-          setPullStatus('idle');
-          setPullDistance(0);
-        })
-        .catch(() => {
-          setPullStatus('idle');
-          setPullDistance(0);
-        });
-    } else if (pullStatus === 'noMore') {
-      setTimeout(() => {
-        setPullStatus('idle');
-        setPullDistance(0);
-      }, 1500);
-    } else {
-      setPullStatus('idle');
-      setPullDistance(0);
-    }
-  }, [pullStatus, hasMore, onLoad]);
-
-  return { pullStatus, pullDistance, handleTouchStart, handleTouchMove, handleTouchEnd };
-}

package/scripts/check-inspector.sh

@@ -1,91 +0,0 @@
-#!/bin/bash
-# ============================================================================
-# 平台基础设施守卫 — 校验 tbox 微调（Inspector）注入未被破坏。
-# Inspector 已下沉 @tbox.cn/app-sdk/platform（003 §3.1），本脚本断言同步更新。
-# 支持两种上下文：
-#   1. 根 workspace 成员形态（模板子树）：向上探测 pnpm-workspace.yaml 取 SDK 真源
-#   2. 生成应用发布态：app-sdk 经 node_modules 解析（检查包存在 + exports 含 ./platform）
-# ============================================================================
-set -e
-
-SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
-PROJECT_DIR="$(dirname "$SCRIPT_DIR")"
-
-INDEX_FILE="$PROJECT_DIR/apps/server/src/index.ts"
-AGENT_HTML="$PROJECT_DIR/apps/client/index.html"
-VITE_CFG="$PROJECT_DIR/apps/client/vite.config.ts"
-
-fail() {
-  echo ""
-  echo "❌ [check-inspector] 平台基础设施校验失败：$1"
-  echo ""
-  echo "   tbox 平台微调能力（点选元素 → 写入聊天框）是平台基础设施，AI agent 不得删除。"
-  echo "   必须保留："
-  echo "     1. @tbox.cn/app-sdk/platform 存在并导出 installInspector（RUNTIME_PATH 约定不变）"
-  echo "     2. apps/server/src/index.ts 从 @tbox.cn/app-sdk/platform import 并调用 installInspector(app)"
-  echo "     3. apps/client/index.html 含 inspector 脚本标签"
-  echo "     4. apps/client/vite.config.ts 接入 code-inspect plugin"
-  echo ""
-  exit 1
-}
-
-# 定位 app-sdk 源码路径：模板内 → workspace 根 → node_modules（发布态）
-SDK_SRC=""
-for candidate in \
-  "$PROJECT_DIR/packages/app-sdk" \
-  "$PROJECT_DIR/../packages/app-sdk" \
-  "$PROJECT_DIR/../../packages/app-sdk"; do
-  if [ -f "$candidate/src/platform/inspector.ts" ]; then
-    SDK_SRC="$candidate"
-    break
-  fi
-done
-
-if [ -n "$SDK_SRC" ]; then
-  # 1. inspector.ts 存在 + 导出 installInspector + RUNTIME_PATH（RUNTIME_PATH 约定不变）
-  INSPECTOR_FILE="$SDK_SRC/src/platform/inspector.ts"
-  grep -qE "export\s+(async\s+)?function\s+installInspector" "$INSPECTOR_FILE" \
-    || fail "inspector.ts 未导出 installInspector"
-  grep -qE "RUNTIME_PATH\s*=\s*['\"]/__vs_inspector__\.js['\"]" "$INSPECTOR_FILE" \
-    || fail "inspector.ts 中 RUNTIME_PATH 被改动"
-else
-  # 发布态：@tbox.cn/app-sdk 经 node_modules 解析
-  SDK_PKG=""
-  for base in "$PROJECT_DIR" "$PROJECT_DIR/../.."; do
-    if [ -d "$base/node_modules/@tbox.cn/app-sdk" ]; then
-      SDK_PKG="$base/node_modules/@tbox.cn/app-sdk"
-      break
-    fi
-  done
-  [ -n "$SDK_PKG" ] || fail "未找到 @tbox.cn/app-sdk（源码形态或 node_modules 发布态）"
-  node -e "
-    const fs = require('fs');
-    const pkg = JSON.parse(fs.readFileSync('$SDK_PKG/package.json', 'utf8'));
-    const ex = pkg.exports || {};
-    if (!ex['./platform']) { console.error('platform export missing'); process.exit(1); }
-  " || fail "@tbox.cn/app-sdk 的 package.json 未导出 ./platform"
-fi
-
-# 2. index.ts 从 @tbox.cn/app-sdk/platform import 并调用 installInspector(app)
-grep -qE "from\s+['\"]@tbox\.cn/app-sdk/platform['\"]" "$INDEX_FILE" \
-  || fail "index.ts 未从 @tbox.cn/app-sdk/platform import"
-grep -qE "installInspector\s*\(\s*app\s*[,)]" "$INDEX_FILE" \
-  || fail "index.ts 未调用 installInspector(app)"
-
-# 3. client/index.html 内置 inspector 脚本标签
-[ -f "$AGENT_HTML" ] || fail "缺失文件 apps/client/index.html"
-grep -qE "/__vs_inspector__\.js" "$AGENT_HTML" \
-  || fail "apps/client/index.html 缺少 inspector 脚本标签"
-
-# 4. vite.config 接入 code-inspect plugin
-[ -f "$VITE_CFG" ] || fail "缺失文件 apps/client/vite.config.ts"
-grep -qE "codeInspectPlugin" "$VITE_CFG" \
-  || fail "apps/client/vite.config.ts 未接入 code-inspect plugin"
-
-# 5. 源码标注：code-inspect babel plugin 存在
-CODE_INSPECT="$PROJECT_DIR/apps/client/babel-plugins/code-inspect.cjs"
-[ -f "$CODE_INSPECT" ] || fail "缺失文件 apps/client/babel-plugins/code-inspect.cjs"
-grep -qE "data-code-inspect-loc-filepath" "$CODE_INSPECT" \
-  || fail "code-inspect.cjs 未注入 data-code-inspect-* 属性"
-
-echo "✅ [check-inspector] 平台基础设施校验通过"