@tbox.cn/app-template-agent 0.7.5 → 0.9.0

package/pnpm-lock.template.yaml

@@ -16,17 +16,17 @@ catalogs:
       specifier: 0.1.0
       version: 0.1.0
     '@tbox.cn/app-contracts':
-      specifier: 0.9.0
-      version: 0.9.0
+      specifier: 0.11.0
+      version: 0.11.0
     '@tbox.cn/app-contracts-mall':
-      specifier: 0.9.0
-      version: 0.9.0
+      specifier: 0.11.0
+      version: 0.11.0
     '@tbox.cn/app-sdk':
-      specifier: 0.18.0
-      version: 0.18.0
-    '@types/cors':
-      specifier: 2.8.19
-      version: 2.8.19
+      specifier: 0.20.0
+      version: 0.20.0
+    '@tbox.cn/app-theme-tbox':
+      specifier: 0.1.1
+      version: 0.1.1
     '@types/express':
       specifier: 4.17.25
       version: 4.17.25
@@ -45,9 +45,6 @@ catalogs:
     antd-mobile:
       specifier: 5.42.3
       version: 5.42.3
-    cors:
-      specifier: 2.8.6
-      version: 2.8.6
     eslint:
       specifier: 9.39.5
       version: 9.39.5
@@ -57,6 +54,9 @@ catalogs:
     express:
       specifier: 4.22.2
       version: 4.22.2
+    happy-dom:
+      specifier: 20.11.2
+      version: 20.11.2
     less:
       specifier: 4.8.1
       version: 4.8.1
@@ -100,13 +100,16 @@ catalogs:
       specifier: 4.5.7
       version: 4.5.7
 
+overrides:
+  debug@4.4.3: 4.4.1
+
 importers:
 
   .:
     devDependencies:
       '@tbox.cn/app-sdk':
         specifier: 'catalog:'
-        version: 0.18.0(@types/react@18.3.31)(rxjs@7.8.1)
+        version: 0.20.0(@types/react@18.3.31)(rxjs@7.8.1)
       eslint:
         specifier: 'catalog:'
         version: 9.39.5
@@ -122,36 +125,30 @@ importers:
 
   apps/client:
     dependencies:
-      '@app/module-weather':
+      '@app/agent-ui-kit':
+        specifier: workspace:*
+        version: link:../../packages/agent-ui-kit
+      '@app/contracts-mall':
         specifier: workspace:*
-        version: link:../../packages/module-weather
+        version: link:../../packages/contracts-mall
       '@app/provider-custom':
         specifier: workspace:*
         version: link:../../packages/provider-custom
-      '@phosphor-icons/react':
-        specifier: 'catalog:'
-        version: 2.1.10(react-dom@18.3.1(react@18.3.1))(react@18.3.1)
       '@tbox.cn/app-contracts':
         specifier: 'catalog:'
-        version: 0.9.0
+        version: 0.11.0
       '@tbox.cn/app-sdk':
         specifier: 'catalog:'
-        version: 0.18.0(@types/react@18.3.31)(rxjs@7.8.1)
-      antd-mobile:
+        version: 0.20.0(@types/react@18.3.31)(rxjs@7.8.1)
+      '@tbox.cn/app-theme-tbox':
         specifier: 'catalog:'
-        version: 5.42.3(react-dom@18.3.1(react@18.3.1))(react@18.3.1)
+        version: 0.1.1
       react:
         specifier: 'catalog:'
         version: 18.3.1
       react-dom:
         specifier: 'catalog:'
         version: 18.3.1(react@18.3.1)
-      react-markdown:
-        specifier: 'catalog:'
-        version: 9.1.0(@types/react@18.3.31)(react@18.3.1)
-      remark-gfm:
-        specifier: 'catalog:'
-        version: 4.0.1
       zustand:
         specifier: 'catalog:'
         version: 4.5.7(@types/react@18.3.31)(react@18.3.1)
@@ -168,6 +165,9 @@ importers:
       '@vitejs/plugin-react':
         specifier: 'catalog:'
         version: 4.7.0(vite@6.4.3(@types/node@24.13.3)(less@4.8.1)(tsx@4.23.11))
+      happy-dom:
+        specifier: 'catalog:'
+        version: 20.11.2
       less:
         specifier: 'catalog:'
         version: 4.8.1
@@ -180,15 +180,15 @@ importers:
       vite:
         specifier: 'catalog:'
         version: 6.4.3(@types/node@24.13.3)(less@4.8.1)(tsx@4.23.11)
+      vitest:
+        specifier: 'catalog:'
+        version: 4.1.10(@opentelemetry/api@1.9.1)(@types/node@24.13.3)(happy-dom@20.11.2)(vite@6.4.3(@types/node@24.13.3)(less@4.8.1)(tsx@4.23.11))
 
   apps/server:
     dependencies:
       '@app/contracts-mall':
         specifier: workspace:*
         version: link:../../packages/contracts-mall
-      '@app/module-weather':
-        specifier: workspace:*
-        version: link:../../packages/module-weather
       '@app/provider-custom':
         specifier: workspace:*
         version: link:../../packages/provider-custom
@@ -200,13 +200,10 @@ importers:
         version: 0.1.0(@mastra/core@1.59.0(ai@6.0.246(zod@3.25.76))(express@4.22.2)(rxjs@7.8.1)(zod@3.25.76))(@tbox-dev-js/sdk@0.1.18)(zod@3.25.76)
       '@tbox.cn/app-contracts':
         specifier: 'catalog:'
-        version: 0.9.0
+        version: 0.11.0
       '@tbox.cn/app-sdk':
         specifier: 'catalog:'
-        version: 0.18.0(@types/react@18.3.31)(rxjs@7.8.1)
-      cors:
-        specifier: 'catalog:'
-        version: 2.8.6
+        version: 0.20.0(@types/react@18.3.31)(rxjs@7.8.1)
       express:
         specifier: 'catalog:'
         version: 4.22.2
@@ -214,9 +211,6 @@ importers:
         specifier: 'catalog:'
         version: 3.25.76
     devDependencies:
-      '@types/cors':
-        specifier: 'catalog:'
-        version: 2.8.19
       '@types/express':
         specifier: 'catalog:'
         version: 4.17.25
@@ -237,54 +231,87 @@ importers:
         version: 6.4.3(@types/node@24.13.3)(less@4.8.1)(tsx@4.23.11)
       vitest:
         specifier: 'catalog:'
-        version: 4.1.10(@opentelemetry/api@1.9.1)(@types/node@24.13.3)(vite@6.4.3(@types/node@24.13.3)(less@4.8.1)(tsx@4.23.11))
+        version: 4.1.10(@opentelemetry/api@1.9.1)(@types/node@24.13.3)(happy-dom@20.11.2)(vite@6.4.3(@types/node@24.13.3)(less@4.8.1)(tsx@4.23.11))
 
-  packages/contracts-mall:
+  packages/agent-ui-kit:
     dependencies:
-      '@tbox.cn/app-contracts-mall':
+      '@phosphor-icons/react':
+        specifier: 'catalog:'
+        version: 2.1.10(react-dom@18.3.1(react@18.3.1))(react@18.3.1)
+      '@tbox.cn/app-contracts':
         specifier: 'catalog:'
-        version: 0.9.0
+        version: 0.11.0
+      '@tbox.cn/app-sdk':
+        specifier: 'catalog:'
+        version: 0.20.0(@types/react@18.3.31)(rxjs@7.8.1)
+      antd-mobile:
+        specifier: 'catalog:'
+        version: 5.42.3(react-dom@18.3.1(react@18.3.1))(react@18.3.1)
+      react-markdown:
+        specifier: 'catalog:'
+        version: 9.1.0(@types/react@18.3.31)(react@18.3.1)
+      remark-gfm:
+        specifier: 'catalog:'
+        version: 4.0.1
+      zustand:
+        specifier: 'catalog:'
+        version: 4.5.7(@types/react@18.3.31)(react@18.3.1)
     devDependencies:
       '@types/node':
-        specifier: 24.13.3
+        specifier: 'catalog:'
         version: 24.13.3
+      '@types/react':
+        specifier: 'catalog:'
+        version: 18.3.31
+      '@types/react-dom':
+        specifier: 'catalog:'
+        version: 18.3.7(@types/react@18.3.31)
+      happy-dom:
+        specifier: 'catalog:'
+        version: 20.11.2
+      less:
+        specifier: 'catalog:'
+        version: 4.8.1
+      react:
+        specifier: 'catalog:'
+        version: 18.3.1
+      react-dom:
+        specifier: 'catalog:'
+        version: 18.3.1(react@18.3.1)
       typescript:
-        specifier: 5.9.3
+        specifier: 'catalog:'
         version: 5.9.3
+      vite:
+        specifier: 'catalog:'
+        version: 6.4.3(@types/node@24.13.3)(less@4.8.1)(tsx@4.23.11)
       vitest:
-        specifier: 4.1.10
-        version: 4.1.10(@opentelemetry/api@1.9.1)(@types/node@24.13.3)(vite@6.4.3(@types/node@24.13.3)(less@4.8.1)(tsx@4.23.11))
+        specifier: 'catalog:'
+        version: 4.1.10(@opentelemetry/api@1.9.1)(@types/node@24.13.3)(happy-dom@20.11.2)(vite@6.4.3(@types/node@24.13.3)(less@4.8.1)(tsx@4.23.11))
 
-  packages/module-weather:
+  packages/contracts-mall:
     dependencies:
-      '@tbox.cn/app-contracts':
-        specifier: 'catalog:'
-        version: 0.9.0
-      '@tbox.cn/app-sdk':
+      '@tbox.cn/app-contracts-mall':
         specifier: 'catalog:'
-        version: 0.18.0(@types/react@18.3.31)(rxjs@7.8.1)
-      react:
-        specifier: 18.3.1
-        version: 18.3.1
-      zod:
-        specifier: 3.25.76
-        version: 3.25.76
+        version: 0.11.0
     devDependencies:
-      '@types/react':
-        specifier: 18.3.31
-        version: 18.3.31
+      '@types/node':
+        specifier: 24.13.3
+        version: 24.13.3
       typescript:
         specifier: 5.9.3
         version: 5.9.3
+      vitest:
+        specifier: 4.1.10
+        version: 4.1.10(@opentelemetry/api@1.9.1)(@types/node@24.13.3)(happy-dom@20.11.2)(vite@6.4.3(@types/node@24.13.3)(less@4.8.1)(tsx@4.23.11))
 
   packages/provider-custom:
     dependencies:
       '@tbox.cn/app-contracts':
         specifier: 'catalog:'
-        version: 0.9.0
+        version: 0.11.0
       '@tbox.cn/app-sdk':
         specifier: 'catalog:'
-        version: 0.18.0(@types/react@18.3.31)(rxjs@7.8.1)
+        version: 0.20.0(@types/react@18.3.31)(rxjs@7.8.1)
     devDependencies:
       '@types/node':
         specifier: 24.13.3
@@ -297,7 +324,7 @@ importers:
         version: 5.9.3
       vitest:
         specifier: 4.1.10
-        version: 4.1.10(@opentelemetry/api@1.9.1)(@types/node@24.13.3)(vite@6.4.3(@types/node@24.13.3)(less@4.8.1)(tsx@4.23.11))
+        version: 4.1.10(@opentelemetry/api@1.9.1)(@types/node@24.13.3)(happy-dom@20.11.2)(vite@6.4.3(@types/node@24.13.3)(less@4.8.1)(tsx@4.23.11))
 
 packages:
 
@@ -1299,21 +1326,24 @@ packages:
       '@tbox-dev-js/sdk': '>=0.1.18 <0.2.0'
       zod: '>=3.24.0 <4.0.0'
 
-  '@tbox.cn/app-contracts-mall@0.9.0':
-    resolution: {integrity: sha512-gkW6FboBd7rWyXDjxqxyT5O8hJmWYWXaGBT8QVk5fOjJ1NV8YyARkWPBAixs78F4K87eK1hwjGxo0H7fcfJIEw==}
+  '@tbox.cn/app-contracts-mall@0.11.0':
+    resolution: {integrity: sha512-4BpbtZAif2zmYlMJ2M1wF03yTs3n4w5eFBZKFlA3yGeAfjpODyUy4OTRmRMaFfz4dHBichQF3n30A0RgS/h0Eg==}
     engines: {node: '>=20.0.0'}
 
-  '@tbox.cn/app-contracts@0.9.0':
-    resolution: {integrity: sha512-8OkBhFGxSiGeIxLkgkX/HRkzpCXk7omKI54mGShUKG1+7DV6jR+SxIMTzz/Y6wQnY2kYv50esxkOiPhTspA0jg==}
+  '@tbox.cn/app-contracts@0.11.0':
+    resolution: {integrity: sha512-ePyJwpfmWwyOx1BrSoAWZpwEI7xB8b2wFliR+uaAQfyGvbOfvKbaWJXOt/qPJh+PlYgUGvGLGvntnX2m2YC6BA==}
     engines: {node: '>=20.0.0'}
 
-  '@tbox.cn/app-sdk@0.18.0':
-    resolution: {integrity: sha512-n3ZlG24V7EsTmy3OLZaZGcXBX67LeaQWEl/CwQeE7gO+1FLqa8l3WKoYYuZIi4eFaDSIuUSfB6DOdnNGWm55iw==}
+  '@tbox.cn/app-sdk@0.20.0':
+    resolution: {integrity: sha512-r6Jx/ciA+UWZ8rOlaAs94Et98g/n9NBIMoaXy3jpnUNs8zFrBTrViVYGaQvBMqL4yvDLcJBjOJQ2oSF7h1MJGQ==}
     engines: {node: '>=20.0.0'}
     hasBin: true
 
-  '@tbox.cn/app-toolkit@0.2.0':
-    resolution: {integrity: sha512-pu+99pVoxdqjCNP6Zl3TRvcP2Nn/5/Xtkb1hqptK5ftzdfsXacdmZrTy3/JVdSwwEefiZO2r9Yv1PTo99a4KHw==}
+  '@tbox.cn/app-theme-tbox@0.1.1':
+    resolution: {integrity: sha512-g4150ksl35yZLMSezeMrtqj281Ly2RcX7qJCYQql0oDMHczlBXu2lpKuzOZ2GUdCnfT61wdmuahb7jPuyg6o7A==}
+
+  '@tbox.cn/app-toolkit@0.4.0':
+    resolution: {integrity: sha512-b4ha8IonQKu2M9O/EHrUqUZh7ReiMfryNojptytRsnAOiJnTyRIQeChrDxEDHfb5ZS8AAJ0Prb5/ofxvqd7uqg==}
     engines: {node: '>=20.0.0'}
 
   '@types/babel__core@7.20.5':
@@ -1337,9 +1367,6 @@ packages:
   '@types/connect@3.4.38':
     resolution: {integrity: sha512-K6uROf1LD88uDQqJCktA4yzL1YYAK6NgfsI0v/mTgyPKWsX1CnJ0XPSDhViejru1GcRkLWb8RlzFYJRqGUbaug==}
 
-  '@types/cors@2.8.19':
-    resolution: {integrity: sha512-mFNylyeyqN93lfe/9CSxOGREz8cpzAhH+E93xJ4xWQf62V8sQ/24reV2nyzUWM6H6Xji+GGHpkbLe7pVoUEskg==}
-
   '@types/debug@4.1.13':
     resolution: {integrity: sha512-KSVgmQmzMwPlmtljOomayoR89W4FynCAi3E8PPs7vmDVPe84hT+vGPKkJfThkmXs0x0jAaa9U8uW8bbfyS2fWw==}
 
@@ -1414,6 +1441,12 @@ packages:
   '@types/unist@3.0.3':
     resolution: {integrity: sha512-ko/gIFJRv177XgZsZcBwnqJN5x/Gien8qNOn0D5bQU/zAzVf9Zt3BlcUiLqhV9y4ARk0GbT3tnUiPNgnTXzc/Q==}
 
+  '@types/whatwg-mimetype@3.0.2':
+    resolution: {integrity: sha512-c2AKvDT8ToxLIOUlN51gTiHXflsfIFisS4pO7pDPoKouJCESkhZnEy623gwP9laCy5lnLDAw1vAzu2vM2YLOrA==}
+
+  '@types/ws@8.18.1':
+    resolution: {integrity: sha512-ThVF6DCVhA8kUGy+aazFQ4kXQ7E1Ty7A3ypFOe0IcJV8O/M511G99AW24irKrW56Wt44yG9+ij8FaqoBGkuBXg==}
+
   '@typescript-eslint/eslint-plugin@8.67.0':
     resolution: {integrity: sha512-Un7Heoyj65NREbKAyIrFxeM143NZpExWmy1Nep4DLeQOeLlTeumPjoNKnBrU5D5moWXbPJgRa5Uwcdu0faVNGQ==}
     engines: {node: ^18.18.0 || ^20.9.0 || >=21.1.0}
@@ -1637,6 +1670,10 @@ packages:
     engines: {node: ^6 || ^7 || ^8 || ^9 || ^10 || ^11 || ^12 || >=13.7}
     hasBin: true
 
+  buffer-image-size@0.6.4:
+    resolution: {integrity: sha512-nEh+kZOPY1w+gcCMobZ6ETUp9WfibndnosbpwB1iJk/8Gt5ZF2bhS6+B6bPYz424KtwsR6Rflc3tCz1/ghX2dQ==}
+    engines: {node: '>=4.0'}
+
   bundle-require@5.1.0:
     resolution: {integrity: sha512-3WrrOuZiyaaZPWiEt4G3+IffISVC9HYlWueJEBWED4ZH4aIAC2PnkdnuRrR94M+w6yGWn4AglWtJtBI8YqvgoA==}
     engines: {node: ^12.20.0 || ^14.13.1 || >=16.0.0}
@@ -1757,10 +1794,6 @@ packages:
     resolution: {integrity: sha512-yCEafptTtb4bk7GLEQoM8KVJpxAfdBJYaXyzQEgQQQgYrZiDp8SJmGKlYza6CYjEDNstAdNdKA3UuoULlEbS6w==}
     engines: {node: '>=12.13'}
 
-  cors@2.8.6:
-    resolution: {integrity: sha512-tJtZBBHA6vjIAaF6EnIaq6laBBP9aq/Y3ouVJjEfoHbRBcHBAHYcMh/w8LDrk2PvIMMq8gmopa5D4V8RmbrxGw==}
-    engines: {node: '>= 0.10'}
-
   croner@10.0.1:
     resolution: {integrity: sha512-ixNtAJndqh173VQ4KodSdJEI6nuioBWI0V1ITNKhZZsO0pEMoDxz539T4FTTbSZ/xIOSuDnzxLVRqBVSvPNE2g==}
     engines: {node: '>=18.0'}
@@ -1791,8 +1824,8 @@ packages:
       supports-color:
         optional: true
 
-  debug@4.4.3:
-    resolution: {integrity: sha512-RGwwWnwQvkVfavKVt22FGLw+xYSdzARwm0ru6DhTVA3umU5hZc28V3kO4stgYryrTlLpuvgI9GiijltAjNbcqA==}
+  debug@4.4.1:
+    resolution: {integrity: sha512-KcKCqiftBJcZr++7ykoDIEwSa3XWowTfNPo92BYxjXiyYEVrUQh2aLyhxBCwww+heortUFxEJYcRzosstTEBYQ==}
     engines: {node: '>=6.0'}
     peerDependencies:
       supports-color: '*'
@@ -1843,6 +1876,10 @@ packages:
     resolution: {integrity: sha512-Q0n9HRi4m6JuGIV1eFlmvJB7ZEVxu93IrMyiMsGC0lrMJMWzRgx6WGquyfQgZVb31vhGgXnfmPNNXmxnOkRBrg==}
     engines: {node: '>= 0.8'}
 
+  entities@7.0.1:
+    resolution: {integrity: sha512-TWrgLOFUQTH994YUyl1yT4uyavY5nNB5muff+RtWaqNVCAK408b5ZnnbNAUEWLTCpum9w6arT70i1XdQ4UeOPA==}
+    engines: {node: '>=0.12'}
+
   errno@0.1.8:
     resolution: {integrity: sha512-dJ6oBr5SQ1VSd9qkk7ByRgb/1SH4JZjCHSW/mr63/QcXO9zLVxvJ6Oy13nio03rxpSnVDDjFor75SjVeZWPW/A==}
     hasBin: true
@@ -2084,6 +2121,10 @@ packages:
     resolution: {integrity: sha512-5v6yZd4JK3eMI3FqqCouswVqwugaA9r4dNZB1wwcmrD02QkV5H0y7XBQW8QwQqEaZY1pM9aqORSORhJRdNK44Q==}
     engines: {node: '>=6.0'}
 
+  happy-dom@20.11.2:
+    resolution: {integrity: sha512-7MB+bJLkxu3SowAfBJbjW+c55kNz5tkR45gu2qzrxznezhLeN5YIlJbwUgSzlGc+qWoZ8Ykg71H5ezz69xixrw==}
+    engines: {node: '>=20.0.0'}
+
   has-flag@4.0.0:
     resolution: {integrity: sha512-EykJT/Q1KjTWctppgIAgfSO0tKVuZUjhgMr17kqTumMl6Afv3EISleU7qZUzoXDFTAHTDC4NOoG/ZxU3EvlMPQ==}
     engines: {node: '>=8'}
@@ -3176,6 +3217,10 @@ packages:
       jsdom:
         optional: true
 
+  whatwg-mimetype@3.0.0:
+    resolution: {integrity: sha512-nt+N2dzIutVRxARx1nghPKGv1xHikU7HKdfafKkLNLindmPU/ch3U31NOCGGA/dmPcmb1VlofO0vnKAcsm0o/Q==}
+    engines: {node: '>=12'}
+
   which@2.0.2:
     resolution: {integrity: sha512-BLI3Tl1TW3Pvl70l3yq3Y64i+awpwXqsGBYWkkqMtnbXgrMD+yj7rhW0kuEDxzJaYXGjEW5ogapKNMEKNMjibA==}
     engines: {node: '>= 8'}
@@ -3351,7 +3396,7 @@ snapshots:
       '@babel/types': 7.29.8
       '@jridgewell/remapping': 2.3.5
       convert-source-map: 2.0.0
-      debug: 4.4.3
+      debug: 4.4.1
       gensync: 1.0.0-beta.2
       json5: 2.2.3
       semver: 6.3.1
@@ -3435,7 +3480,7 @@ snapshots:
       '@babel/parser': 7.29.8
       '@babel/template': 7.29.7
       '@babel/types': 7.29.8
-      debug: 4.4.3
+      debug: 4.4.1
     transitivePeerDependencies:
       - supports-color
 
@@ -3688,7 +3733,7 @@ snapshots:
   '@eslint/config-array@0.21.2':
     dependencies:
       '@eslint/object-schema': 2.1.7
-      debug: 4.4.3
+      debug: 4.4.1
       minimatch: 3.1.5
     transitivePeerDependencies:
       - supports-color
@@ -3704,7 +3749,7 @@ snapshots:
   '@eslint/eslintrc@3.3.6':
     dependencies:
       ajv: 6.15.0
-      debug: 4.4.3
+      debug: 4.4.1
       espree: 10.4.0
       globals: 14.0.0
       ignore: 5.3.2
@@ -3999,18 +4044,18 @@ snapshots:
       '@tbox-dev-js/sdk': 0.1.18
       zod: 3.25.76
 
-  '@tbox.cn/app-contracts-mall@0.9.0':
+  '@tbox.cn/app-contracts-mall@0.11.0':
     dependencies:
-      '@tbox.cn/app-contracts': 0.9.0
+      '@tbox.cn/app-contracts': 0.11.0
       zod: 3.25.76
 
-  '@tbox.cn/app-contracts@0.9.0':
+  '@tbox.cn/app-contracts@0.11.0':
     dependencies:
       '@ag-ui/core': 0.0.47
       react: 18.3.1
       zod: 3.25.76
 
-  '@tbox.cn/app-sdk@0.18.0(@types/react@18.3.31)(rxjs@7.8.1)':
+  '@tbox.cn/app-sdk@0.20.0(@types/react@18.3.31)(rxjs@7.8.1)':
     dependencies:
       '@ag-ui/core': 0.0.47
       '@ai-sdk/openai-compatible': 2.0.68(zod@3.25.76)
@@ -4019,8 +4064,8 @@ snapshots:
       '@mastra/observability': 1.16.5(@mastra/core@1.59.0(ai@6.0.246(zod@3.25.76))(express@4.22.2)(rxjs@7.8.1)(zod@3.25.76))(zod@3.25.76)
       '@tbox-dev-js/sdk': 0.1.18
       '@tbox.cn/agent-plugin': 0.1.0(@mastra/core@1.59.0(ai@6.0.246(zod@3.25.76))(express@4.22.2)(rxjs@7.8.1)(zod@3.25.76))(@tbox-dev-js/sdk@0.1.18)(zod@3.25.76)
-      '@tbox.cn/app-contracts': 0.9.0
-      '@tbox.cn/app-toolkit': 0.2.0
+      '@tbox.cn/app-contracts': 0.11.0
+      '@tbox.cn/app-toolkit': 0.4.0
       ai: 6.0.246(zod@3.25.76)
       express: 4.22.2
       gray-matter: 4.0.3
@@ -4043,7 +4088,9 @@ snapshots:
       - utf-8-validate
       - workflow
 
-  '@tbox.cn/app-toolkit@0.2.0':
+  '@tbox.cn/app-theme-tbox@0.1.1': {}
+
+  '@tbox.cn/app-toolkit@0.4.0':
     dependencies:
       ajv: 8.20.0
       zod: 3.25.76
@@ -4083,10 +4130,6 @@ snapshots:
     dependencies:
       '@types/node': 24.13.3
 
-  '@types/cors@2.8.19':
-    dependencies:
-      '@types/node': 24.13.3
-
   '@types/debug@4.1.13':
     dependencies:
       '@types/ms': 2.1.0
@@ -4169,6 +4212,12 @@ snapshots:
 
   '@types/unist@3.0.3': {}
 
+  '@types/whatwg-mimetype@3.0.2': {}
+
+  '@types/ws@8.18.1':
+    dependencies:
+      '@types/node': 24.13.3
+
   '@typescript-eslint/eslint-plugin@8.67.0(@typescript-eslint/parser@8.67.0(eslint@9.39.5)(typescript@5.9.3))(eslint@9.39.5)(typescript@5.9.3)':
     dependencies:
       '@eslint-community/regexpp': 4.12.2
@@ -4191,7 +4240,7 @@ snapshots:
       '@typescript-eslint/types': 8.67.0
       '@typescript-eslint/typescript-estree': 8.67.0(typescript@5.9.3)
       '@typescript-eslint/visitor-keys': 8.67.0
-      debug: 4.4.3
+      debug: 4.4.1
       eslint: 9.39.5
       typescript: 5.9.3
     transitivePeerDependencies:
@@ -4201,7 +4250,7 @@ snapshots:
     dependencies:
       '@typescript-eslint/tsconfig-utils': 8.68.0(typescript@5.9.3)
       '@typescript-eslint/types': 8.68.0
-      debug: 4.4.3
+      debug: 4.4.1
       typescript: 5.9.3
     transitivePeerDependencies:
       - supports-color
@@ -4224,7 +4273,7 @@ snapshots:
       '@typescript-eslint/types': 8.67.0
       '@typescript-eslint/typescript-estree': 8.67.0(typescript@5.9.3)
       '@typescript-eslint/utils': 8.67.0(eslint@9.39.5)(typescript@5.9.3)
-      debug: 4.4.3
+      debug: 4.4.1
       eslint: 9.39.5
       ts-api-utils: 2.5.0(typescript@5.9.3)
       typescript: 5.9.3
@@ -4241,7 +4290,7 @@ snapshots:
       '@typescript-eslint/tsconfig-utils': 8.67.0(typescript@5.9.3)
       '@typescript-eslint/types': 8.67.0
       '@typescript-eslint/visitor-keys': 8.67.0
-      debug: 4.4.3
+      debug: 4.4.1
       minimatch: 10.2.6
       semver: 7.8.5
       tinyglobby: 0.2.17
@@ -4471,6 +4520,10 @@ snapshots:
       node-releases: 2.0.53
       update-browserslist-db: 1.3.1(browserslist@4.28.8)
 
+  buffer-image-size@0.6.4:
+    dependencies:
+      '@types/node': 24.13.3
+
   bundle-require@5.1.0(esbuild@0.27.7):
     dependencies:
       esbuild: 0.27.7
@@ -4564,11 +4617,6 @@ snapshots:
     dependencies:
       is-what: 4.1.16
 
-  cors@2.8.6:
-    dependencies:
-      object-assign: 4.1.1
-      vary: 1.1.2
-
   croner@10.0.1: {}
 
   cross-spawn@7.0.6:
@@ -4590,7 +4638,7 @@ snapshots:
       ms: 2.1.3
     optional: true
 
-  debug@4.4.3:
+  debug@4.4.1:
     dependencies:
       ms: 2.1.3
 
@@ -4626,6 +4674,8 @@ snapshots:
 
   encodeurl@2.0.0: {}
 
+  entities@7.0.1: {}
+
   errno@0.1.8:
     dependencies:
       prr: 1.0.1
@@ -4768,7 +4818,7 @@ snapshots:
       ajv: 6.15.0
       chalk: 4.1.2
       cross-spawn: 7.0.6
-      debug: 4.4.3
+      debug: 4.4.1
       escape-string-regexp: 4.0.0
       eslint-scope: 8.4.0
       eslint-visitor-keys: 4.2.1
@@ -4985,6 +5035,19 @@ snapshots:
       section-matter: 1.0.0
       strip-bom-string: 1.0.0
 
+  happy-dom@20.11.2:
+    dependencies:
+      '@types/node': 24.13.3
+      '@types/whatwg-mimetype': 3.0.2
+      '@types/ws': 8.18.1
+      buffer-image-size: 0.6.4
+      entities: 7.0.1
+      whatwg-mimetype: 3.0.0
+      ws: 8.21.3
+    transitivePeerDependencies:
+      - bufferutil
+      - utf-8-validate
+
   has-flag@4.0.0: {}
 
   has-symbols@1.1.0: {}
@@ -5519,7 +5582,7 @@ snapshots:
   micromark@4.0.2:
     dependencies:
       '@types/debug': 4.1.13
-      debug: 4.4.3
+      debug: 4.4.1
       decode-named-character-reference: 1.3.0
       devlop: 1.1.0
       micromark-core-commonmark: 2.0.3
@@ -6087,7 +6150,7 @@ snapshots:
       cac: 6.7.14
       chokidar: 4.0.3
       consola: 3.4.2
-      debug: 4.4.3
+      debug: 4.4.1
       esbuild: 0.27.7
       fix-dts-default-cjs-exports: 1.0.1
       joycon: 3.1.1
@@ -6230,7 +6293,7 @@ snapshots:
       less: 4.8.1
       tsx: 4.23.11
 
-  vitest@4.1.10(@opentelemetry/api@1.9.1)(@types/node@24.13.3)(vite@6.4.3(@types/node@24.13.3)(less@4.8.1)(tsx@4.23.11)):
+  vitest@4.1.10(@opentelemetry/api@1.9.1)(@types/node@24.13.3)(happy-dom@20.11.2)(vite@6.4.3(@types/node@24.13.3)(less@4.8.1)(tsx@4.23.11)):
     dependencies:
       '@vitest/expect': 4.1.10
       '@vitest/mocker': 4.1.10(vite@6.4.3(@types/node@24.13.3)(less@4.8.1)(tsx@4.23.11))
@@ -6255,9 +6318,12 @@ snapshots:
     optionalDependencies:
       '@opentelemetry/api': 1.9.1
       '@types/node': 24.13.3
+      happy-dom: 20.11.2
     transitivePeerDependencies:
       - msw
 
+  whatwg-mimetype@3.0.0: {}
+
   which@2.0.2:
     dependencies:
       isexe: 2.0.0

package/pnpm-workspace.template.yaml

@@ -4,7 +4,7 @@
 # - catalog 键集 = agent 三模板成员 catalog: 引用并集 ∪ 平台三键（@tbox.cn/app-{sdk,contracts*}——
 #   codegen 展开恒改写为 catalog: 的完备键）；键随成员引用增删，不镜像根全量。
 # - catalog 值与根 pnpm-workspace.yaml 同键全等（scripts/release.mjs sync-catalog 维护）。
-# - 非 catalog 顶层键与根镜像（packages/overrides 除外——发布态不带 overrides）。
+# - 非 catalog 顶层键与根镜像（packages 除外）；overrides 不镜像，仅携 debug 钉版止血键（@tbox 回指不进模板——发布态解析 registry）。
 packages:
   - apps/*
   - packages/*
@@ -38,9 +38,10 @@ catalog:
   ws: 8.21.3
   "@types/ws": 8.18.1
   "@tbox.cn/agent-plugin": 0.1.0
-  "@tbox.cn/app-sdk": 0.18.0
-  "@tbox.cn/app-contracts": 0.9.0
-  "@tbox.cn/app-contracts-mall": 0.9.0
+  "@tbox.cn/app-sdk": 0.20.0
+  "@tbox.cn/app-contracts": 0.11.0
+  "@tbox.cn/app-contracts-mall": 0.11.0
+  "@tbox.cn/app-theme-tbox": 0.1.1
   zustand: 4.5.7
   eslint: 9.39.5
   typescript-eslint: 8.67.0
@@ -58,3 +59,10 @@ catalog:
   remark-gfm: 4.0.1
   happy-dom: 20.11.2
   postcss-pxtorem: 6.1.0
+
+# debug 钉版止血（与根 pnpm-workspace.yaml 同步维护；见 2026-09-16-ci-internal-registry-pollution.md）：
+# 模板锁种子投影会清 overrides 段致 debug 重解析为 4.4.3（R5 子集校验失败），故模板必须同携此键；
+# 段恒居文件末尾——create --local-deps 的 overrides 条目按"并入末尾段"注入（cli/src/commands/create.ts）。
+# 平台修复内网 registry 数据后随根一并移除。
+overrides:
+  "debug@4.4.3": "4.4.1"