@tbox.cn/app-template-agent 0.1.0

package/apps/server/src/cli/plugin-doctor.ts

@@ -0,0 +1,89 @@
+import {
+  diagnosePlugins,
+  type PluginDiagnostic,
+} from '@tbox.cn/agent-plugin/doctor';
+import { loadMastraPluginTools } from '@tbox.cn/agent-plugin/mastra';
+import { createPluginIntegration } from '@tbox.cn/app-sdk/server';
+
+import { collectRegistryState } from './collect-registry.js';
+
+const args = new Set(process.argv.slice(2));
+const live = args.has('--live');
+const json = args.has('--json');
+const pluginIntegration = createPluginIntegration();
+const config = pluginIntegration.readConfig();
+const { staticToolIds, bindings, cardTypes } = await collectRegistryState();
+let loadedPluginTools;
+let liveLoadError: string | undefined;
+const runtimeMessages: string[] = [];
+
+if (live && config.plugins.length > 0 && process.env.TBOX_API_KEY) {
+  const originalLog = console.log;
+  const originalWarn = console.warn;
+  if (json) {
+    const capture = (...values: unknown[]) => {
+      runtimeMessages.push(values.map(String).join(' '));
+    };
+    console.log = capture;
+    console.warn = capture;
+  }
+  try {
+    loadedPluginTools = (
+      await loadMastraPluginTools(pluginIntegration.integration, {
+        reservedToolIds: staticToolIds,
+      })
+    ).references;
+  } catch (error) {
+    liveLoadError = error instanceof Error ? error.message : String(error);
+  } finally {
+    console.log = originalLog;
+    console.warn = originalWarn;
+  }
+}
+
+let diagnostics: PluginDiagnostic[] = diagnosePlugins({
+  config,
+  bindings,
+  staticToolIds,
+  cardTypes,
+  apiKeyConfigured: Boolean(process.env.TBOX_API_KEY),
+  loadedPluginTools,
+});
+
+if (live && config.plugins.length > 0 && !process.env.TBOX_API_KEY) {
+  diagnostics = [
+    ...diagnostics,
+    {
+      level: 'error',
+      code: 'LIVE_CHECK_REQUIRES_API_KEY',
+      message: '--live 检查需要 TBOX_API_KEY',
+    },
+  ];
+}
+
+if (liveLoadError) {
+  diagnostics = [
+    ...diagnostics,
+    {
+      level: 'error',
+      code: 'LIVE_CHECK_FAILED',
+      message: liveLoadError,
+    },
+  ];
+}
+
+if (json) {
+  console.log(JSON.stringify({ live, diagnostics, runtimeMessages }, null, 2));
+} else if (diagnostics.length === 0) {
+  console.log(`[plugin-doctor] ${live ? 'live' : 'offline'} 检查通过`);
+} else {
+  diagnostics.forEach((diagnostic) => {
+    const output = `[plugin-doctor] ${diagnostic.level.toUpperCase()} ${diagnostic.code}: ${diagnostic.message}`;
+    if (diagnostic.level === 'error') console.error(output);
+    else console.warn(output);
+  });
+}
+
+if (diagnostics.some((diagnostic) => diagnostic.level === 'error')) {
+  process.exitCode = 1;
+}

package/apps/server/src/cli/plugin-inspect.ts

@@ -0,0 +1,49 @@
+import { inspectPluginTool } from '@tbox.cn/agent-plugin/inspect';
+// 豁免：CLI 诊断工具（plugin:inspect）直接调 @tbox-dev-js/sdk 的 TboxPluginClient 做运行时检查，
+// 非应用运行时平台能力路径（007 铁律针对平台能力调用；诊断工具保持直连）
+import { TboxPluginClient } from '@tbox-dev-js/sdk';
+import { createPluginIntegration } from '@tbox.cn/app-sdk/server';
+
+import { collectRegistryState } from './collect-registry.js';
+
+const args = process.argv.slice(2).filter((arg) => arg !== '--json');
+const [pluginId, toolId] = args;
+
+if (!pluginId || !toolId) {
+  console.error('用法: pnpm plugin:inspect <pluginId> <toolId>');
+  process.exitCode = 1;
+} else if (!process.env.TBOX_API_KEY) {
+  console.error('[plugin-inspect] 缺少 TBOX_API_KEY');
+  process.exitCode = 1;
+} else {
+  const { readConfig } = createPluginIntegration();
+  const config = readConfig();
+  const client = new TboxPluginClient({ apiKey: process.env.TBOX_API_KEY });
+  try {
+    const { staticToolIds } = await collectRegistryState();
+    const inspection = await inspectPluginTool({
+      reference: { pluginId, toolId },
+      client,
+      config,
+      reservedToolIds: staticToolIds,
+    });
+    console.log(
+      JSON.stringify(
+        {
+          ...inspection,
+          note:
+            'runtimeId 已考虑内置工具冲突；完整插件间冲突请运行 plugin:doctor --live',
+        },
+        null,
+        2,
+      ),
+    );
+  } catch (error) {
+    console.error(
+      `[plugin-inspect] ${
+        error instanceof Error ? error.message : String(error)
+      }`,
+    );
+    process.exitCode = 1;
+  }
+}

package/apps/server/src/index.ts

@@ -0,0 +1,230 @@
+import express from 'express';
+import cors from 'cors';
+import { createServer } from 'http';
+import path from 'path';
+import { fileURLToPath } from 'url';
+import { registerAll } from './modules.js';
+import {
+  createWsServer,
+  createServerContext,
+  createEngineFromContext,
+  tboxTraceExporter,
+  extractImageUrls,
+  TBOX_FILE_URL_PREFIX,
+  createAuthRuntime,
+  createPlatformApiRouter,
+  createTtsProxy,
+  createModelProvider,
+  createPluginIntegration,
+  ConversationService,
+} from '@tbox.cn/app-sdk/server';
+import { installInspector, injectScript, isReady } from '@tbox.cn/app-sdk/platform';
+import { translateTool } from './tools/translate.js';
+import { INTENT_ROUTES, createAppIntentDispatcher } from './intent-routes.js';
+
+const __dirname = path.dirname(fileURLToPath(import.meta.url));
+const PORT = Number(process.env.PORT) || 8000;
+const HOST = process.env.HOST || '0.0.0.0';
+const isProduction = process.env.NODE_ENV === 'production';
+
+const AI_MODEL_NAME = process.env.APP_AI_MODEL_NAME || '';
+
+const AGENT_CONFIG = {
+  instructions: [
+    '你是一个通用 AI 助手。可以回答用户问题，也可以调用工具获取信息。用简洁、清晰的语言回复。',
+    '调用业务工具时正常按其 schema 传参，拿到结果后用自然语言回复用户；',
+    '是否向用户呈现卡片由系统自动决定，你不需要也不应该主动渲染 UI。',
+  ].join('\n'),
+};
+
+// 平台能力装配（003/006 平台轴，已下沉 @tbox.cn/app-sdk/server）
+const auth = createAuthRuntime();
+const { getModel } = createModelProvider();
+const pluginTools = createPluginIntegration();
+
+/** 懒初始化单例 ConversationService */
+let _conversationService: ConversationService | null = null;
+function getConversationService(): ConversationService | null {
+  if (!_conversationService) {
+    const apiKey = process.env.TBOX_API_KEY;
+    if (!apiKey) return null;
+    _conversationService = new ConversationService(apiKey);
+  }
+  return _conversationService;
+}
+
+// 进程级最后防线
+process.on('unhandledRejection', (reason) => {
+  console.error('[server] unhandledRejection:', reason);
+});
+process.on('uncaughtException', (err) => {
+  console.error('[server] uncaughtException:', err);
+});
+
+const app = express();
+app.use(cors());
+app.use(express.json());
+
+// 🔒 平台基础设施 — 禁止 AI 删除或修改（@infrastructure-locked）
+installInspector(app);
+
+// 非 prod 默认开启 dev-login：对暴露公网的实例给出可见警示（生产必须 NODE_ENV=production）
+if (auth.config.devLoginEnabled) {
+  console.warn(
+    '[AUTH] dev-login 已开启（非 production 默认）。若本实例暴露公网，请设 NODE_ENV=production 或 AUTH_DEV_LOGIN_DISABLED=true。',
+  );
+}
+
+// 自注册闭环：模块路由挂载到 /api/m/<moduleId>/（在 apiRouter 之前，避免被 /api 兜底 404 截获）
+// ctx 为模块级单例：registerAll 在 start() 内执行，ApiRouteRegistry 共享 root 保证延迟注册即时生效
+const ctx = createServerContext();
+
+// 全局 /api 鉴权（H2 挂载顺序契约）：除 public（login/dev-login/health）外一律要求 Bearer token；
+// optional 模式缺失 token → 匿名身份（写通道仍被 action gateway 拒绝）
+// ⚠️ 必须先于 /api/m、/api/action、createPlatformApiRouter 挂载，保证全 API 面受鉴权约束
+app.use('/api', auth.middleware);
+
+app.use('/api/m', ctx.routes.mount());
+
+// 业务动作网关（004 D3/C2）：POST /api/action — SDK 黑盒唯一写入口（幂等/防重放/签名槽位；
+// 006 D11：匿名写拒绝，不随 AUTH_MODE 变）
+app.use('/api/action', ctx.actions.middleware());
+
+// API 路由（平台路由面：auth/health/tbox/conversation + 404 兜底；卡片恢复内部化）
+app.use('/api', createPlatformApiRouter({ ctx, auth }));
+
+// 从 ServerContext 构造 ChatEngine（自注册闭环组装端）
+async function createEngine() {
+  return createEngineFromContext(ctx, {
+    instructions: AGENT_CONFIG.instructions,
+    model: getModel(AI_MODEL_NAME),
+    traceExporter: tboxTraceExporter,
+    modelName: AI_MODEL_NAME,
+    fileUrlPrefix: TBOX_FILE_URL_PREFIX,
+    // B21：意图路由接线（业务意图表 + handlerDispatch）
+    intentRoutes: INTENT_ROUTES,
+    handlerDispatch: createAppIntentDispatcher(ctx),
+    loadPlugins: async () => {
+      const loaded = await pluginTools.loadTools({
+        reservedToolIds: Object.keys(ctx.tools.getAll()),
+      });
+      return { tools: loaded.tools, references: loaded.references };
+    },
+    saveMessage: async ({ conversationId, query, answer, mediaItems, outerBusinessId, cards }) => {
+      const agentId = process.env.TBOX_APP_ID;
+      const service = getConversationService();
+      if (!service || !agentId) return undefined;
+      const imageUrls = extractImageUrls(mediaItems, TBOX_FILE_URL_PREFIX);
+      return await service.saveMessage({
+        conversationId,
+        agentId,
+        query,
+        answer,
+        ...(outerBusinessId && { outerBusinessId }),
+        ...(imageUrls.length > 0 && {
+          multiModalInputs: { imageUrls },
+        }),
+        // P3 W1：卡片快照随消息持久化（MessageEmbedded，004 D1）。
+        // 若平台拒绝 inputs（V1 验证失败），此处切换为 extraParams 字符串或 FileCardPersistenceBackend 落盘。
+        ...(cards && cards.length > 0 && { inputs: { cards } }),
+      });
+    },
+  });
+}
+
+if (isProduction) {
+  const clientDistPath = path.join(__dirname, '../../client/dist');
+  app.use(express.static(clientDistPath));
+  app.get('*', (req, res) => {
+    if (!req.path.startsWith('/api')) {
+      res.sendFile(path.join(clientDistPath, 'index.html'));
+    } else {
+      res.status(404).json({ error: 'Not Found' });
+    }
+  });
+} else {
+  // 开发环境：Vite middlewareMode 单进程
+  const { createServer: createViteServer } = await import('vite');
+  const { readFile } = await import('fs/promises');
+  const clientRoot = path.resolve(__dirname, '../../client');
+  const vite = await createViteServer({
+    root: clientRoot,
+    server: { middlewareMode: true },
+    // custom：不添加 Vite 自己的 SPA fallback / 404 处理器，
+    // 由下方 app.use('*') 统一处理 HTML 路由，避免 Vite 的 404 先返回。
+    appType: 'custom',
+    optimizeDeps: { entries: [] },
+  });
+
+  // Vite 中间件：处理静态资源、模块转换、HMR
+  app.use(vite.middlewares);
+
+  // HTML 路由兜底：非 /api、/ws 的请求一律返回 index.html（经 Vite 转换 + inspector 注入）
+  app.use('*', async (req, res, next) => {
+    if (req.originalUrl.startsWith('/api') || req.originalUrl.startsWith('/ws')) {
+      return next();
+    }
+    try {
+      const rawHtml = await readFile(path.join(clientRoot, 'index.html'), 'utf-8');
+      const template = await vite.transformIndexHtml(req.originalUrl, rawHtml);
+      const html = isReady() ? injectScript(template) : template;
+      res.status(200).set({ 'Content-Type': 'text/html' }).end(html);
+    } catch (e) {
+      next(e);
+    }
+  });
+}
+
+const httpServer = createServer(app);
+
+async function start() {
+  // 注册业务模块（自注册闭环）
+  await registerAll(ctx);
+
+  // 模板演示工具（apps 级工具，P3 建议迁入模块）：不参与模块体系，直接注册
+  ctx.tools.register(translateTool);
+
+  const engine = await createEngine();
+
+  const chatWss = createWsServer(engine, { auth: auth.wsAuth });
+  const ttsWss = createTtsProxy();
+
+  httpServer.on('error', (err: NodeJS.ErrnoException) => {
+    if (err.code === 'EADDRINUSE') {
+      console.error(`[server] Port ${PORT} is already in use.`);
+    } else if (err.code === 'EACCES') {
+      console.error(`[server] Permission denied while binding ${HOST}:${PORT}.`);
+    } else {
+      console.error('[server] Failed to start HTTP server:', err);
+    }
+    process.exit(1);
+  });
+
+  httpServer.on('upgrade', (request, socket, head) => {
+    socket.on('error', (e) => console.warn('[upgrade] socket error:', e.message));
+    const { pathname } = new URL(request.url || '/', 'http://localhost');
+
+    if (pathname === '/ws') {
+      chatWss.handleUpgrade(request, socket, head, (ws) => {
+        chatWss.emit('connection', ws, request);
+      });
+    } else if (pathname === '/ws/tts') {
+      ttsWss.handleUpgrade(request, socket, head, (ws) => {
+        ttsWss.emit('connection', ws, request);
+      });
+    } else {
+      socket.destroy();
+    }
+  });
+
+  httpServer.listen(PORT, HOST, () => {
+    console.log(`🚀 Server running at http://${HOST}:${PORT}`);
+    console.log(`📡 WebSocket endpoint: ws://${HOST}:${PORT}/ws`);
+    console.log(`🔊 TTS endpoint: ws://${HOST}:${PORT}/ws/tts`);
+  });
+}
+
+start().catch((err) => {
+  console.error('[server] Failed to start:', err);
+  process.exit(1);
+});

package/apps/server/src/intent-routes.ts

@@ -0,0 +1,23 @@
+import type { IntentRoute, HandlerResult, ServerContext } from '@tbox.cn/app-sdk/server';
+
+/**
+ * 业务意图表（B21：intent-framework hybrid 接线——SDK 框架 + 源码意图表，003 §3.3）。
+ * chat() 先 matchIntent（最长关键词命中）；命中则经 handlerDispatch 出卡/文字，不走 LLM。
+ *
+ * 示例（商圈应用启用积分抵扣停车意图）：
+ *   { id: 'points-parking', keywords: ['积分抵扣停车', '停车抵扣'], handlerId: 'points-parking', action: 'run' }
+ * 本模板默认空表（保持 LLM + tool calling 主路径）；业务方在此声明意图路由。
+ */
+export const INTENT_ROUTES: IntentRoute[] = [];
+
+/**
+ * 意图命中后的业务分发：经 ServerContext 的 HandlerRegistry.dispatch（组装端绑定 ctx）。
+ * 命名 createAppIntentDispatcher（区别于 SDK 导出的 createIntentDispatcher：后者先 matchIntent
+ * 再分发，本函数由 chat-engine 命中后直接分发）。
+ * P2-3：用户原始输入以 payload.content 传入，handler 侧可经 payload.content 取用。
+ */
+export function createAppIntentDispatcher(ctx: ServerContext) {
+  return async (route: IntentRoute, content: string): Promise<HandlerResult | undefined> => {
+    return ctx.handlers.dispatch(route.handlerId, route.action, { content }, ctx);
+  };
+}

package/apps/server/src/modules.ts

@@ -0,0 +1,31 @@
+/**
+ * 服务端模块注册装配文件（与 apps/client/src/modules.ts 逐行同构）。
+ * tbox CLI 协助维护锚点区；你也可以直接编辑自由区。
+ *
+ * 锚点区：@tbox:imports-begin/end（模块 import 行）+ @tbox:register-begin/end（模块数组）
+ * CLI 行为：增量插入/删除模块行，保留非标行。
+ */
+import type { ServerContext, InferModuleCards } from '@tbox.cn/app-sdk/server';
+
+// @tbox:imports-begin
+import { serverModule as moduleWeather } from '@app/module-weather/server';
+// @tbox:imports-end
+
+// @tbox:register-begin
+const modules = [
+  moduleWeather,
+];
+// @tbox:register-end
+
+// 自由区：可做装配级定制——条件注册、顺序调整、包裹中间件
+// const dynamicModule = process.env.ENABLE_X ? xModule : null;
+
+/** 注册所有已安装模块（服务端装配——勿与 apps/client/src/modules.ts 混淆） */
+export function registerAll(ctx: ServerContext): void {
+  for (const m of modules) {
+    m.register(ctx);
+  }
+}
+
+// 类型从运行时装配数组自动推导：增删模块后 CardType 自动收缩/扩展（002 §6.7）
+export type CardType = InferModuleCards<(typeof modules)[number]>;

package/apps/server/src/tools/translate.ts

@@ -0,0 +1,41 @@
+// 铁律：不直接 import @mastra/core，经 @tbox.cn/app-sdk/server 的 createTool 入口（单例铁律）
+import { createTool } from '@tbox.cn/app-sdk/server';
+import { z } from 'zod';
+
+/**
+ * 翻译工具 — 中英文互译
+ * 由原 translator Skill 改造而来，现在作为 Tool 注册，LLM 自主调用
+ */
+export const translateTool = createTool({
+  id: 'translate',
+  description:
+    '中英文互译工具。当用户需要翻译文本时调用此工具。自动检测源语言并翻译为目标语言：中文→英文，英文→中文。',
+  inputSchema: z.object({
+    text: z.string().describe('要翻译的文本'),
+    targetLang: z
+      .enum(['zh', 'en'])
+      .optional()
+      .describe('目标语言，不传则自动检测：中文输入翻译为英文，英文输入翻译为中文'),
+  }),
+  outputSchema: z.object({
+    original: z.string(),
+    translated: z.string(),
+    sourceLang: z.string(),
+    targetLang: z.string(),
+  }),
+  execute: async ({ text, targetLang }) => {
+    // 简单语言检测：包含中文字符则认为是中文
+    const isChinese = /[\u4e00-\u9fff]/.test(text);
+    const detectedTarget = targetLang || (isChinese ? 'en' : 'zh');
+    const sourceLang = isChinese ? 'zh' : 'en';
+
+    // 注意：这里返回指令让 LLM 来做实际翻译
+    // 实际生产环境可以调用翻译 API 或发起子 LLM 调用
+    return {
+      original: text,
+      translated: `[请将以下${sourceLang === 'zh' ? '中文' : '英文'}翻译为${detectedTarget === 'zh' ? '中文' : '英文'}]: ${text}`,
+      sourceLang,
+      targetLang: detectedTarget,
+    };
+  },
+});

package/apps/server/tests/cards-registry.test.ts

@@ -0,0 +1,55 @@
+// 卡片 / 工具 registry 一致性守护测试（自注册闭环版）。
+// 通过 registerAll(ctx) 收集真实注册状态，替代原手写 registry 静态断言。
+// 注：C 方案下卡片渲染在 client（React 组件），server 无 template.html，故移除原 C12（模板占位符 ∈ schema）。
+import { describe, it, expect } from 'vitest';
+import { diagnosePlugins } from '@tbox.cn/agent-plugin/doctor';
+import { createServerContext, buildToolCardBindings, createPluginIntegration } from '@tbox.cn/app-sdk/server';
+import { registerAll } from '../src/modules.js';
+
+describe('工具 / 卡片 registry 一致性（自注册闭环）', () => {
+  it('C2: ctx.tools 每个 key === tool.id', async () => {
+    const ctx = createServerContext();
+    await registerAll(ctx);
+    for (const [key, tool] of Object.entries(ctx.tools.getAll())) {
+      expect((tool as { id?: string }).id).toBe(key);
+    }
+  });
+
+  it('C3: 自动生成的 binding 的每个 cardType 都在 ctx.cards 注册', async () => {
+    const ctx = createServerContext();
+    await registerAll(ctx);
+    const cards = ctx.cards.getAll();
+    for (const binding of buildToolCardBindings(cards)) {
+      expect(Object.keys(cards)).toContain(binding.cardType);
+    }
+  });
+
+  it('C3: 工具卡片 binding 与静态工具、插件配置一致（不访问网络）', async () => {
+    const ctx = createServerContext();
+    await registerAll(ctx);
+    const cards = ctx.cards.getAll();
+    const diagnostics = diagnosePlugins({
+      config: createPluginIntegration().readConfig(),
+      bindings: buildToolCardBindings(cards),
+      staticToolIds: Object.keys(ctx.tools.getAll()),
+      cardTypes: Object.keys(cards),
+      apiKeyConfigured: true,
+    });
+    expect(diagnostics.filter((item) => item.level === 'error')).toEqual([]);
+  });
+
+  it('插件装配读取根目录 config/plugins.json', () => {
+    expect(createPluginIntegration().readConfig()).toMatchObject({
+      plugins: expect.any(Array),
+      warnings: [],
+    });
+  });
+
+  it('C3: 每张卡 meta.cardType === ctx.cards 的 key', async () => {
+    const ctx = createServerContext();
+    await registerAll(ctx);
+    for (const [key, meta] of Object.entries(ctx.cards.getAll())) {
+      expect((meta as { cardType?: string }).cardType).toBe(key);
+    }
+  });
+});

package/apps/server/tests/tool-runtime.test.ts

@@ -0,0 +1,49 @@
+import { describe, expect, it } from 'vitest';
+import { createServerContext, createSdkToolRuntime } from '@tbox.cn/app-sdk/server';
+import { registerAll } from '../src/modules.js';
+
+describe('tool runtime 宿主装配（自注册闭环）', () => {
+  it('合并模块工具并用同一次加载结果创建卡片 resolver', async () => {
+    const ctx = createServerContext();
+    await registerAll(ctx);
+
+    const runtime = await createSdkToolRuntime(ctx, {
+      loadPlugins: async () => ({ tools: {}, references: [] }),
+    });
+
+    expect(Object.keys(runtime.tools)).toEqual(
+      expect.arrayContaining(['getWeather']),
+    );
+    expect(runtime.cardResolver.issues).toEqual([]);
+    expect(
+      runtime.cardResolver.resolve('getWeather', {
+        city: '杭州',
+        temp: 28,
+        weather: '晴',
+        humidity: 60,
+      }),
+    ).toEqual({
+      status: 'ready',
+      cardType: 'weather',
+      data: {
+        city: '杭州',
+        temp: 28,
+        weather: '晴',
+        humidity: 60,
+      },
+    });
+  });
+
+  it('未注册的 tool 不出卡，仅作为模型上下文', async () => {
+    const ctx = createServerContext();
+    await registerAll(ctx);
+
+    const runtime = await createSdkToolRuntime(ctx, {
+      loadPlugins: async () => ({ tools: {}, references: [] }),
+    });
+
+    expect(runtime.cardResolver.resolve('notExistedTool', {})).toEqual({
+      status: 'unbound',
+    });
+  });
+});

package/apps/server/tsconfig.json

@@ -0,0 +1,5 @@
+{
+  "extends": "../../tsconfig.base.json",
+  "compilerOptions": {},
+  "include": ["src", "tests"]
+}

package/apps/server/tsup.config.ts

@@ -0,0 +1,25 @@
+import { defineConfig } from 'tsup';
+
+export default defineConfig({
+  entry: ['src/index.ts'],
+  format: ['esm'],
+  target: 'node24',
+  platform: 'node',
+  outDir: 'dist',
+  clean: true,
+  sourcemap: true,
+  // 本地 workspace 源码包（exports 指向 src/*.ts，node 无法直接加载）必须内联：@app/*。
+  // @tbox.cn/{app-sdk,contracts,contracts-mall} 以发布态消费（dist 产物，node 可直载）→ external；
+  // 已发布 npm 的 @tbox.cn/agent-plugin（exports 指向 dist 产物）保持 external。
+  noExternal: [/^@app\//],
+  // 确保不打包 node 内置模块
+  external: [
+    'express',
+    'cors',
+    'ws',
+    'path',
+    'url',
+    'http',
+    'fs',
+  ],
+});

package/apps/server/vitest.config.ts

@@ -0,0 +1,8 @@
+import { defineConfig } from 'vitest/config';
+
+export default defineConfig({
+  test: {
+    globals: true,
+    environment: 'node',
+  },
+});

package/config/chat.json

@@ -0,0 +1,8 @@
+{
+  "enableImageUpload": true,
+  "enableVideoUpload": true,
+  "enableTTS": true,
+  "enableVoiceInput": true,
+  "defaultInputMode": "TEXT",
+  "quickCommands": []
+}

package/config/llm_provider.json

@@ -0,0 +1,3 @@
+{
+  "modelName": "glm-5.1"
+}

package/config/plugins.json

@@ -0,0 +1,3 @@
+{
+  "plugins": []
+}

package/eslint.config.mjs

@@ -0,0 +1,41 @@
+import tseslint from "typescript-eslint";
+import reactHooks from "eslint-plugin-react-hooks";
+
+export default [
+  {
+    files: ["apps/**/*.ts", "packages/**/*.ts", "apps/**/*.tsx", "packages/**/*.tsx"],
+    plugins: {
+      "@typescript-eslint": tseslint.plugin,
+      "react-hooks": reactHooks,
+    },
+    languageOptions: {
+      parser: tseslint.parser,
+      parserOptions: {
+        sourceType: "module",
+      },
+    },
+    linterOptions: {
+      reportUnusedDisableDirectives: "off",
+    },
+    rules: {
+      "quotes": ["error", "single", { "avoidEscape": true }],
+      "no-restricted-syntax": [
+        "error",
+        {
+          selector:
+            "Property[key.name='path'][parent.parent.callee.name='WebSocketServer'] > Literal:not([value='/ws'])",
+          message:
+            "WebSocket server path 必须为 '/ws'，禁止修改。客户端环境变量依赖此路径。",
+        },
+        {
+          selector:
+            "CallExpression[callee.property.name='listen'] > Literal[raw=/^\\d{4,5}$/]",
+          message: "禁止硬编码端口号。必须使用 process.env.PORT || 8000。",
+        },
+      ],
+    },
+  },
+  {
+    ignores: ["**/dist/**", "**/node_modules/**", "**/.vite/**"],
+  },
+];