@xiaobuyu/nodesign 0.0.6 → 0.0.8

package/server/api/assets.js

@@ -18,17 +18,19 @@ import { guardProject } from './_guard.js';
 import {
   getSharedDir, ensureProjectWorkspace, removeSessionWorkspace, commitWorkspace,
 } from '../projects/workspace.js';
-import { patchBoard, readBoard, reconcileBoardRenames, forwardId, forwardPath, renameBoardPaths } from '../projects/board-store.js';
+import { patchBoard, readBoard, reconcileBoardRenames, pruneDanglingBindings, forwardId, forwardPath, renameBoardPaths } from '../projects/board-store.js';
 import { moveEntry, MoveError } from '../projects/move-entry.js';
 import { reconcileAutoRefsThrottled } from '../lib/auto-relations.js';
 import { taskManifest, ENTRY_FILE, KIND_SITE, docxClaimedFiles, isDirArtifact } from '../lib/artifact-target.js';
-import { RESERVED_DIRS, HARD_IGNORE_DIRS, DRAFTS_DIR, isReservedFile } from '../lib/task-scan.js';
+import { RESERVED_DIRS, HARD_IGNORE_DIRS, DRAFTS_DIR, isReservedFile, loadIgnore } from '../lib/task-scan.js';
+import { OUTPUT_DIRS } from '../lib/kinds/site.js';
 import { listReferences } from '../lib/reference-assets.js';
 import { resolveArtifactFile, isServablePath } from '../lib/artifact-file-path.js';
+import { USER_UPLOAD_DIR, ensureUploadDir, uploadRefPath, listUploadedAssets, deleteUploadedAsset } from '../lib/user-uploads.js';
 import { getProjectCover } from '../lib/cover.js';
 import { makeDocxPageHandler, makeDocxPdfHandler } from './assets/docx-page.js';
 import { mountNotesRoutes } from './assets/notes.js';
-import { safeSegment, decorateNoteText } from './assets/helpers.js';
+import { safeSegment, decorateNoteText, decorateFilePreview, PREVIEW_EXTS } from './assets/helpers.js';
 import { CHALK_DIR } from '../lib/chalk.js';
 import {
   sendImage, isThumbPath, findOriginalForThumbnail, imageCacheControl,
@@ -37,6 +39,7 @@ import {
 import { injectSrcset } from '../lib/html-srcset.js';
 import { sendVideo, isVideo } from '../lib/video-variant.js';
 import { IMAGE_EXTS, VIDEO_EXTS, decorateCardKind } from '../lib/kinds/file-kinds.js';
+import { noteBoardDirty } from '../lib/board-dirty.js';
 
 const router = express.Router();
 
@@ -95,7 +98,7 @@ router.post('/:pid/assets', upload.single('file'), async (req, res, next) => {
     if (!req.file) return res.status(400).json({ error: 'no file (field name: file)' });
 
     await ensureProjectWorkspace(req.params.pid);
-    const assetsDir = path.join(getSharedDir(req.params.pid), 'assets');
+    const assetsDir = await ensureUploadDir(getSharedDir(req.params.pid));
 
     const originalName = decodeUploadName(req.file.originalname);
     let filename = sanitizeFilename(originalName);
@@ -112,7 +115,7 @@ router.post('/:pid/assets', upload.single('file'), async (req, res, next) => {
       asset: {
         // path 给 agent Read 用 — 相对 cwd（sessions/<sid>/）走 ../shared/assets/
         // 或者用 SDK additionalDirectories 拿到的绝对路径前缀；前端展示用 name 即可。
-        path: `../../shared/assets/${filename}`,
+        path: uploadRefPath(USER_UPLOAD_DIR, filename),
         name: filename,
         originalName,
         size: req.file.size,
@@ -127,24 +130,7 @@ router.get('/:pid/assets', async (req, res, next) => {
     if (!guardProject(req, res)) return;
 
     const assetsDir = path.join(getSharedDir(req.params.pid), 'assets');
-    let entries;
-    try {
-      entries = await fs.readdir(assetsDir, { withFileTypes: true });
-    } catch (err) {
-      if (err.code === 'ENOENT') return res.json({ assets: [] });
-      throw err;
-    }
-    const assets = [];
-    for (const e of entries) {
-      if (!e.isFile()) continue;
-      let stat;
-      try { stat = await fs.stat(path.join(assetsDir, e.name)); } catch { continue; }
-      assets.push({
-        path: `../../shared/assets/${e.name}`, name: e.name,
-        size: stat.size, mtime: stat.mtime.toISOString(),
-      });
-    }
-    assets.sort((a, b) => (a.mtime < b.mtime ? 1 : -1));
+    const assets = await listUploadedAssets(getSharedDir(req.params.pid));
 
     // 参考素材单独一组，走抽屉不上画布。为什么它们此前完全看不见（以及为什么
     // 修法是加扫描口不是改形态注册表）见 lib/reference-assets.js 文件头。
@@ -166,17 +152,9 @@ router.delete('/:pid/assets/:filename', async (req, res, next) => {
       return res.status(400).json({ error: 'invalid filename' });
     }
 
-    const assetsDir = path.join(getSharedDir(req.params.pid), 'assets');
-    const filePath = path.resolve(assetsDir, filename);
-    if (!filePath.startsWith(assetsDir + path.sep)) {
-      return res.status(400).json({ error: 'invalid filename' });
-    }
-    try {
-      await fs.unlink(filePath);
-    } catch (err) {
-      if (err.code === 'ENOENT') return res.status(404).json({ error: 'asset not found' });
-      throw err;
-    }
+    const outcome = await deleteUploadedAsset(getSharedDir(req.params.pid), filename);
+    if (outcome === 'invalid') return res.status(400).json({ error: 'invalid filename' });
+    if (outcome === 'not_found') return res.status(404).json({ error: 'asset not found' });
     res.status(204).end();
   } catch (err) { next(err); }
 });
@@ -254,10 +232,10 @@ router.get('/:pid/artifacts', async (req, res, next) => {
     // 那个接口，而迁移一旦晚于第一次渲染，用户会先看到一个叫 `tasks` 的文件夹
     // 套着他的文件夹。跑过之后是三次 stat 的事（幂等早退），不值得省。
     await ensureProjectWorkspace(req.params.pid);
-    // 跟上 agent 在画布背后做的改名（`mv` 之后卡片 id 就变了）。同上：挂在这里
-    // 是为了让用户看到的第一帧就是对齐过的。没有新 commit 时是一次 rev-parse。
+    // 跟上 agent 在画布背后做的改名（挂在这让第一帧就对齐；无新 commit 时只一次 rev-parse）
     await reconcileBoardRenames(req.params.pid).catch(
       (err) => console.warn('[board] 改名对账失败:', err.message));
+    await pruneDanglingBindings(req.params.pid).catch(() => {});   // 悬空线 30s 节流清扫（理由见 board-store）
 
     const assetsDir = path.join(getSharedDir(req.params.pid), 'assets');
     const artifacts = [];
@@ -349,8 +327,14 @@ router.get('/:pid/artifacts', async (req, res, next) => {
             item.meta = JSON.parse(metaRaw);
           } catch { /* 无 sidecar（旧图）→ 无 meta */ }
         }
-        // 便签/板书把正文带给前端渲卡片（≤4KB 截断，完整内容走 artifact-file；见 helpers.decorateNoteText）
+        // 便签/板书带正文、文本文件带 1KB 预览（完整内容都走 artifact-file；见 helpers）
+        // ⚠️ upload 也要（2026-08-29）：用户上传的角色卡/世界卡就住在 用户内容/，
+        // kind='upload' —— 原来只认 task-file，于是上传来的 json/md 卡面永远是空的
+        // 细条。json 预览器做完才发现最常见的那一类 json 根本走不到这里。
         if (kind === 'note' && ext === '.md') await decorateNoteText(item, path.join(dir, e.name));
+        else if ((kind === 'task-file' || kind === 'upload') && PREVIEW_EXTS.has(ext)) {
+          await decorateFilePreview(item, path.join(dir, e.name));
+        }
         artifacts.push(item);
       }
     };
@@ -376,6 +360,7 @@ router.get('/:pid/artifacts', async (req, res, next) => {
     // 磁盘上的位置是同一个字符串 —— 这样 agent `mv` 一个文件之后，git 的改名
     // 检测能直接翻译成画布 id 的改名（见 board-store 的 reconcileBoardRenames）。
     const workspaceRoot = getSharedDir(req.params.pid);
+    const rootIgnore = await loadIgnore(workspaceRoot);
     const tasks = [];
     let hasRootSite = false;
     // 根站认领的一级子目录（pages 顶层段）—— 散文件过滤要用同一口径
@@ -474,6 +459,8 @@ router.get('/:pid/artifacts', async (req, res, next) => {
         if (!e.isDirectory() || e.name.startsWith('.')) continue;
         if (RESERVED_DIRS.has(e.name) || HARD_IGNORE_DIRS.has(e.name)) continue;
         if (e.name === DRAFTS_DIR) continue;      // 站点试作，由 site 解析器管
+        // 构建目录不当独立站/收纳夹（site:dist 案）；递归也吃根 .ndignore（与页面清单同规则）
+        if (OUTPUT_DIRS.includes(e.name) || rootIgnore(under(rel, e.name), true)) continue;
         if (claimed.has(e.name)) continue;        // 已经是一件产物了
         folders.push(under(rel, e.name));
         await collect(path.join(dir, e.name), under(rel, e.name), depth + 1);
@@ -493,7 +480,11 @@ router.get('/:pid/artifacts', async (req, res, next) => {
       // 板书住 notes/板书/（不进 notes/ 顶层：便利贴注入只列顶层，板书另有自己的注入）
       await scanDir(path.join(workspaceRoot, CHALK_DIR), 'note', CHALK_DIR);
       for (const rel of folders) {
-        await scanDir(path.join(workspaceRoot, rel), 'task-file', rel, 0);
+        // 用户上传的落点扫成 upload 而不是 task-file：来源轴（board-kinds.sourceOf）
+        // 按 kind 分「我放的 / agent 做的」，落回 task-file 的话用户自己拖进来的图
+        // 会被标成「agent 做的」。子目录仍按普通文件夹走。
+        const kind = rel === USER_UPLOAD_DIR ? 'upload' : 'task-file';
+        await scanDir(path.join(workspaceRoot, rel), kind, rel, 0);
       }
     } catch (err) {
       if (err.code !== 'ENOENT') throw err;
@@ -663,6 +654,8 @@ router.post('/:pid/move', express.json(), async (req, res, next) => {
     const out = await moveEntry(req.params.pid, req.body?.from, req.body?.to);
     res.json(out);                                                            // ③
     if (out.moved) {
+      // 板上动静（2026-08-29 刀 4）：用户搬了文件，agent 下次摸板前该知道
+      try { noteBoardDirty(req.params.pid, [{ kind: 'mv', id: out.from, to: out.to }]); } catch { /* 记不上不挡搬家 */ }
       // ④ 响应之后再 commit：它只服务于稍后的对账，不该让用户多等一次 git add
       commitWorkspace(req.params.pid, null, `move: ${out.from} → ${out.to}`, { author: 'user' })
         .catch(err => console.warn('[git] move commit failed:', err.message));

package/server/api/board.js

@@ -10,9 +10,12 @@
  */
 
 import express from 'express';
+import { listRoleNames } from '../engine/agent/role-card.js';
+import { getWorkspaceRoot } from '../projects/workspace.js';
 import { validateProjectId, getProject } from '../projects/store.js';
 import { guardProject } from './_guard.js';
 import { readBoard, replaceBoard, patchBoard, commitStaging, removeByTag } from '../projects/board-store.js';
+import { noteBoardDirty } from '../lib/board-dirty.js';
 import { setViewpoint, getViewpoint } from '../projects/viewpoint-store.js';
 import { exportGraph, exportGraphZip } from '../lib/board-graph-export.js';
 import { getSharedDir } from '../projects/workspace.js';
@@ -27,7 +30,12 @@ function guard(req, res) {
 router.get('/:pid/board', async (req, res, next) => {
   try {
     if (!guard(req, res)) return;
-    res.json({ board: await readBoard(req.params.pid) });
+    // roles 是**派生态**：每次从 .claude/agents/ 现读，不落 board.json ——
+    // 板上存的署名是 slug（权威），展示名住在角色文件里（模型可改），两者不能混成一份数据。
+    // 前端只拿它把 slug 渲染得好看，任何判断仍按 slug 走。
+    let roles = {};
+    try { roles = Object.fromEntries(await listRoleNames(getWorkspaceRoot(req.params.pid))); } catch { /* 没有角色就是空表 */ }
+    res.json({ board: await readBoard(req.params.pid), roles });
   } catch (err) { next(err); }
 });
 
@@ -36,7 +44,26 @@ router.patch('/:pid/board', express.json({ limit: '600kb' }), async (req, res, n
     if (!guard(req, res)) return;
     const patch = req.body?.patch;
     if (!patch || typeof patch !== 'object') return res.status(400).json({ error: 'patch required' });
+    // 板上动静（2026-08-29 刀 4）：HTTP PATCH 就是用户的手。**位置真变了才算动静**
+    // —— 前端的尺寸回写（useMeasuredSize）也走这条路，只有 w/h 变化不该吵 agent。
+    let prev = null;
+    if (patch.objects && typeof patch.objects === 'object') {
+      try { prev = await readBoard(req.params.pid); } catch { /* 记不上不挡写 */ }
+    }
     const board = await patchBoard(req.params.pid, patch);
+    if (prev) {
+      const events = [];
+      for (const [id, o] of Object.entries(patch.objects)) {
+        const was = prev.objects?.[id];
+        if (o === null) { if (was) events.push({ kind: 'removed', id }); continue; }
+        const now = board.objects?.[id];
+        if (!was || !now) continue;
+        if (Math.round(was.x) !== Math.round(now.x) || Math.round(was.y) !== Math.round(now.y)) {
+          events.push({ kind: 'moved', id });
+        }
+      }
+      if (events.length) noteBoardDirty(req.params.pid, events);
+    }
     res.json({ ok: true, board });
   } catch (err) {
     if (err?.status === 400) return res.status(400).json({ error: err.message });
@@ -94,6 +121,7 @@ router.post('/:pid/board/erase', express.json({ limit: '16kb' }), async (req, re
     const tag = typeof req.body?.tag === 'string' ? req.body.tag : '';
     if (!tag) return res.status(400).json({ error: 'tag required' });
     const { board, removed } = await removeByTag(req.params.pid, tag);
+    if (removed) noteBoardDirty(req.params.pid, [{ kind: 'erased', id: tag }]);
     res.json({ ok: true, removed, board });
   } catch (err) { next(err); }
 });

package/server/api/browse.js

@@ -46,6 +46,7 @@ import { pendingHelp } from '../engine/browse/handover.js';
 import { readVisit, readFrame, saveFrame, recordVisit, forgetVisit } from '../engine/browse/state.js';
 import { browseCard } from '../engine/browse/card.js';
 import { checkUrl } from '../lib/ssrf-guard.js';
+import { msg } from '../shared/messages.js';
 
 const router = express.Router();
 
@@ -96,11 +97,11 @@ router.post('/:pid/browse/open', async (req, res, next) => {
     const visit = await readVisit(pid);
     const want = String(req.body?.url || visit?.url || '');
     if (!/^https?:\/\//i.test(want)) {
-      return res.status(400).json({ error: '没有可打开的地址（这个项目还没逛过任何站）' });
+      return res.status(400).json({ error: msg(req, '没有可打开的地址（这个项目还没逛过任何站）') });
     }
     // 用户点的也过闸 —— 闸是硬边界，不因为"是人点的"就放行
     const pre = await checkUrl(want);
-    if (!pre.ok) return res.status(403).json({ error: `网络闸拒了这个地址：${pre.reason}` });
+    if (!pre.ok) return res.status(403).json({ error: msg(req, '网络闸拒了这个地址：{reason}', { reason: pre.reason }) });
 
     const out = await withBrowser(pid, async ({ page }) => {
       if (page.url() !== want) {

package/server/api/chatai.js

@@ -25,6 +25,7 @@ import path from 'node:path';
 import fs from 'node:fs/promises';
 import express from 'express';
 import { guardProject } from './_guard.js';
+import { msg } from '../shared/messages.js';
 import { getWorkspaceRoot } from '../projects/workspace.js';
 import { performTurn } from '../engine/chatai/perform.js';
 import {
@@ -57,7 +58,7 @@ const playing = new Set();
 function gateApproved(req, res) {
   // 档位 + 逐人批准（auth/tier.js localGenApproved）：basic 档不开，pro 档要被站主批过
   if (localGenApproved(req.user)) return true;
-  res.status(403).json({ error: '演出通路尚未对这个账号开放' });
+  res.status(403).json({ error: msg(req, '演出通路尚未对这个账号开放') });
   return false;
 }
 
@@ -237,30 +238,30 @@ router.post('/:pid/chatai/turn', async (req, res, next) => {
     if (!gateApproved(req, res)) return;
 
     const input = String(req.body?.input ?? '').trim();
-    if (!input) return res.status(422).json({ error: 'input 是空的' });
+    if (!input) return res.status(422).json({ error: msg(req, 'input 是空的') });
     if (input.length > MAX_INPUT_CHARS) {
-      return res.status(422).json({ error: `input 超长（上限 ${MAX_INPUT_CHARS} 字符）` });
+      return res.status(422).json({ error: msg(req, 'input 超长（上限 {max} 字符）', { max: MAX_INPUT_CHARS }) });
     }
 
     // 08-21 经营态：演出通路烧的是带钥匙的 API 钱，公开注册号（免费档）不开 —— 跟订阅 Claude 同一把资格
     if (!can(req.user, 'subscription')) {
-      return res.status(403).json({ error: '演出模式仅限 Pro 档，暂未对外开放；当前档位请用设计会话', code: 'MODEL_LOCKED' });
+      return res.status(403).json({ error: msg(req, '演出模式仅限 Pro 档，暂未对外开放；当前档位请用设计会话'), code: 'MODEL_LOCKED' });
     }
     const quota = checkQuota(req.user);
     if (!quota.ok) {
-      const word = quota.kind === 'lifetime' ? '试用额度' : '今日额度';
-      return res.status(429).json({ error: `${word}用完了（${fmtUsd(quota.used)} / ${fmtUsd(quota.limit)}）` });
+      const word = quota.kind === 'lifetime' ? msg(req, '试用额度') : msg(req, '今日额度');
+      return res.status(429).json({ error: msg(req, '{word}用完了（{used} / {limit}）', { word, used: fmtUsd(quota.used), limit: fmtUsd(quota.limit) }) });
     }
     const r = rate.take(req.user?.id ?? 'anon');
     if (!r.ok) {
       res.setHeader('Retry-After', Math.ceil(r.retryAfterMs / 1000));
-      return res.status(429).json({ error: '太快了，歇几秒再发' });
+      return res.status(429).json({ error: msg(req, '太快了，歇几秒再发') });
     }
 
     const dir = await resolvePerformanceDir(req, res);
     if (!dir) return;
     if (playing.has(dir.abs)) {
-      return res.status(409).json({ error: '这场演出正有一轮在跑，等它回完' });
+      return res.status(409).json({ error: msg(req, '这场演出正有一轮在跑，等它回完') });
     }
 
     const stream = req.body?.stream !== false;

package/server/api/exports/cards.js

@@ -14,6 +14,7 @@
 import { collectCards } from '../../lib/export-collect.js';
 import { packageBundles } from '../../lib/export-package.js';
 
+import { msg } from '../../shared/messages.js';
 const FORMATS = ['raw', 'zip', 'md', 'handoff'];
 const MAX_CARDS = 200;
 
@@ -47,22 +48,22 @@ export function makeCardsExportHandler({ guard, rootOf }) {
       if (!project) return;
       const { cardIds, format } = req.body || {};
       if (!Array.isArray(cardIds) || !cardIds.length) {
-        return res.status(400).json({ error: '要导出哪几张卡（cardIds 不能为空）' });
+        return res.status(400).json({ error: msg(req, '要导出哪几张卡（cardIds 不能为空）') });
       }
       if (cardIds.length > MAX_CARDS) {
-        return res.status(400).json({ error: `一次最多导出 ${MAX_CARDS} 张卡` });
+        return res.status(400).json({ error: msg(req, '一次最多导出 {max} 张卡', { max: MAX_CARDS }) });
       }
       if (!FORMATS.includes(format)) {
-        return res.status(400).json({ error: `不认识的导出格式：${format}` });
+        return res.status(400).json({ error: msg(req, '不认识的导出格式：{format}', { format }) });
       }
 
       if (inflight >= MAX_INFLIGHT) {
         res.setHeader('Retry-After', '10');
-        return res.status(429).json({ error: '导出排队中（这台机器一次只打两个包），过几秒再点' });
+        return res.status(429).json({ error: msg(req, '导出排队中（这台机器一次只打两个包），过几秒再点') });
       }
       if (inflightByProject.get(project.id)) {
         res.setHeader('Retry-After', '10');
-        return res.status(429).json({ error: '这个项目已经有一个导出在跑了，等它完事' });
+        return res.status(429).json({ error: msg(req, '这个项目已经有一个导出在跑了，等它完事') });
       }
       inflight += 1;
       inflightByProject.set(project.id, true);
@@ -71,7 +72,7 @@ export function makeCardsExportHandler({ guard, rootOf }) {
       const { bundles, skipped } = await collectCards({ workspaceRoot, cardIds });
       if (!bundles.length) {
         return res.status(skipped[0]?.status === 404 ? 404 : 400)
-          .json({ error: '一张都没收到', skipped });
+          .json({ error: msg(req, '一张都没收到'), skipped });
       }
 
       // 格式合法性由 packageBundles 自己把关（raw 要单文件、md 要有 markdown），

package/server/api/exports/docx-pdf.js

@@ -12,6 +12,7 @@
 
 import { renderDocx, cleanupRender } from '../../lib/docx/render.js';
 
+import { msg } from '../../shared/messages.js';
 /**
  * @param {import('express').Response} res
  * @param {{absPath:string, relPath:string}} target
@@ -22,7 +23,9 @@ export async function docxToPdfResponse(res, target) {
     out = await renderDocx(target.absPath, {});     // 只要 pdf，不出 png
   } catch (err) {
     return res.status(500).json({
-      error: 'LibreOffice 转换失败',
+      // 这个函数只收 res 不收 req（签名是给导出管线用的）。express 把请求挂在
+      // res.req 上，用它取语言，不为一句报错改所有调用点的签名。
+      error: msg(res.req, 'LibreOffice 转换失败'),
       details: String(err.message || err).slice(0, 500),
     });
   }

package/server/api/instruction.js

@@ -1,7 +1,7 @@
 /**
  * server/api/instruction.js — 项目 Instruction 文件读写
  *
- * Instruction = workspace/.claude/CLAUDE.md。SDK 启用 settingSources:
+ * Instruction = workspace/CLAUDE.md（2026-08-24 挪到工作区根：画布可见 + SDK 根目录也原生注入）。SDK 启用 settingSources:
  * ['project'] 后 agent 进每次 session 自动读到 system prompt。S1 已经
  * 在 ensureProjectWorkspace 写入模板 starter，本阶段加 GET/PUT 让前端
  * "项目背景" tab 直接编辑该文件。
@@ -37,7 +37,7 @@ router.get('/:pid/instruction', async (req, res, next) => {
     // ensureProjectWorkspace 幂等补齐（老 project 第一次进 instruction tab 也能读到）
     await ensureProjectWorkspace(req.params.pid);
 
-    const filePath = path.join(getSharedDir(req.params.pid), '.claude', INSTRUCTION_FILE);
+    const filePath = path.join(getSharedDir(req.params.pid), INSTRUCTION_FILE);
     try {
       const content = await fs.readFile(filePath, 'utf8');
       res.json({ content, exists: true });
@@ -66,7 +66,7 @@ router.put('/:pid/instruction', async (req, res, next) => {
     }
 
     await ensureProjectWorkspace(req.params.pid);
-    const filePath = path.join(getSharedDir(req.params.pid), '.claude', INSTRUCTION_FILE);
+    const filePath = path.join(getSharedDir(req.params.pid), INSTRUCTION_FILE);
     await fs.writeFile(filePath, content, 'utf8');
     res.json({ ok: true });
   } catch (err) { next(err); }

package/server/api/local.js

@@ -16,14 +16,15 @@ import { fileURLToPath } from 'node:url';
 import path from 'node:path';
 import { platform } from '../runtime/platform.js';
 import { loadLocalConfig, saveLocalConfig, CONFIG_ENUMS } from '../runtime/local-config.js';
-import { MODEL_CONFIG_ERRORS, EXTERNAL_SDK_ALIAS, externalModelIds } from '../engine/agent/model-context.js';
-import { UPSTREAMS_BUILTIN } from '../engine/agent/model-table.js';
+import { MODEL_CONFIG_ERRORS, externalModelIds } from '../engine/agent/model-context.js';
+import { UPSTREAMS_BUILTIN, SHARED_SDK_ALIAS } from '../engine/agent/model-table.js';
 import { capabilitySnapshot } from '../runtime/capabilities.js';
 import { TOOL_CAPABILITIES } from '../engine/mcp/capability-gate.js';
 import { probeCapabilities } from '../runtime/capabilities.js';
 import { envView, setEnvValues, envPath } from '../runtime/local-env.js';
 import { probeModel } from '../lib/ingress/slot-probe.js';
 import { selectableModelsFor } from '../engine/agent/model-context.js';
+import { msg } from '../shared/messages.js';
 
 export const RESTART_EXIT_CODE = 75;
 
@@ -42,7 +43,8 @@ router.get('/status', (_req, res) => {
     modelConfigErrors: MODEL_CONFIG_ERRORS,
     // 本机能力位 + 每个能力位管着哪些工具（配置页那张表）
     capabilities: capabilitySnapshot().map((c) => ({ ...c, tools: Object.entries(TOOL_CAPABILITIES).filter(([, v]) => v.cap === c.id).map(([t]) => t) })),
-    externalSdkAlias: EXTERNAL_SDK_ALIAS,
+    // 外部插槽（和一切不写 sdkAlias 的行）借用的共用 spoof 名。响应字段名保持 externalSdkAlias 不动（对外形状）
+    externalSdkAlias: SHARED_SDK_ALIAS,
     // 内置 Claude 行现在能不能选：'api_key' | 'login' | null（设置页「模型」那块的状态行）
     claudeAuth: platform.claudeAuthPresent(),
     // 内置上游（只报名字和是否配了钥匙，不报钥匙）：配置页提示「这些名字被占了」
@@ -60,13 +62,13 @@ router.get('/config', (_req, res) => {
 router.put('/config', (req, res) => {
   const raw = req.body;
   if (raw === null || typeof raw !== 'object' || Array.isArray(raw)) {
-    return res.status(400).json({ error: '配置必须是一个对象 { upstreams, models }' });
+    return res.status(400).json({ error: msg(req, '配置必须是一个对象 { upstreams, models }') });
   }
   try {
     const v = saveLocalConfig(raw);
     res.json({ ok: true, path: v.path, errors: v.errors, needsRestart: true });
   } catch (err) {
-    res.status(500).json({ error: `写配置失败：${err.message}` });
+    res.status(500).json({ error: msg(req, '写配置失败：{err}', { err: err.message }) });
   }
 });
 
@@ -92,15 +94,15 @@ router.put('/env', async (req, res) => {
 const probing = new Set();
 router.post('/models/:id/probe', async (req, res) => {
   const id = req.params.id;
-  if (!selectableModelsFor(req.user).some((m) => m.id === id)) return res.status(404).json({ error: `模型 ${id} 不在可选清单里（没配钥匙的行不体检）` });
-  if (probing.has(id)) return res.status(409).json({ error: '这一行正在体检，等它完' });
+  if (!selectableModelsFor(req.user).some((m) => m.id === id)) return res.status(404).json({ error: msg(req, '模型 {id} 不在可选清单里（没配钥匙的行不体检）', { id }) });
+  if (probing.has(id)) return res.status(409).json({ error: msg(req, '这一行正在体检，等它完') });
   probing.add(id);
   try {
     const vision = req.query.vision !== '0';
     const timeoutMs = Math.min(120_000, Math.max(5_000, Number(req.query.timeoutMs) || 45_000));
     res.json(await probeModel(id, { vision, timeoutMs }));
   } catch (err) {
-    res.status(500).json({ error: `体检出错：${err.message}` });
+    res.status(500).json({ error: msg(req, '体检出错：{err}', { err: err.message }) });
   } finally {
     probing.delete(id);
   }

package/server/api/projects.js

@@ -17,6 +17,7 @@ import {
   listRunsForProject,
 } from '../projects/store.js';
 import { guardProject } from './_guard.js';
+import { chalkPreview } from '../lib/board-excerpt.js';
 import { taskManifest } from '../lib/artifact-target.js';
 import { countPublishedByUser } from '../lib/publish-store.js';
 import { checkQuota } from '../lib/quota.js';
@@ -39,6 +40,9 @@ const ownerScope = (req) => req.user?.id ?? null;
 
 const KIND_VALUES = new Set(['project', 'quick']);
 const KIND_QUERY_VALUES = new Set(['project', 'quick', 'all']);
+// 项目模式（2026-08-27）：design=设计工作台（现状默认）/ rp=演出（常驻角色演故事）。
+// 切换下个会话生效（会话启动时读一次），真相源与工具对照表见 engine/mcp/mode-profile.js。
+const MODE_VALUES = new Set(['design', 'rp']);
 
 // GET /api/projects 默认行为（2026-05-07）：不带 ?kind= 时 **只返 kind='project'**，
 // 把闪聊（kind='quick'）从主项目列表里挡掉 —— 避免老 client / 任何漏传 kind 的调用
@@ -84,7 +88,10 @@ router.get('/stats', async (req, res, next) => {
       } catch { /* 目录没了：算 0 件 */ }
       const kinds = {};
       for (const a of artifacts) if (a.kind) kinds[a.kind] = (kinds[a.kind] || 0) + 1;
-      stats[p.id] = { tasks: artifacts.length, kinds };
+      // 板书不进 artifacts（它不是产物），所以卡上"这里躺着什么"必须单独问一句 ——
+      // 不问的话整个演出项目会一直写着"还没出东西"，而里面躺着一整个故事
+      const chalk = await chalkPreview(getSharedDir(p.id)).catch(() => null);
+      stats[p.id] = { tasks: artifacts.length, kinds, ...(chalk ? { chalk } : {}) };
     }));
     // dev 模式（不要求登录）没有 req.user，这两笔账就没有主语，整块不下发
     const summary = req.user
@@ -101,7 +108,7 @@ const DESCRIPTION_MAX = 2000;
 
 router.post('/', async (req, res, next) => {
   try {
-    const { name, skillId, description, kind, autoNamed } = req.body || {};
+    const { name, skillId, description, kind, mode, autoNamed } = req.body || {};
     if (!name || typeof name !== 'string' || !name.trim()) {
       return res.status(400).json({ error: 'name required' });
     }
@@ -114,8 +121,11 @@ router.post('/', async (req, res, next) => {
     if (kind != null && !KIND_VALUES.has(kind)) {
       return res.status(400).json({ error: `kind must be project|quick (got ${kind})` });
     }
+    if (mode != null && !MODE_VALUES.has(mode)) {
+      return res.status(400).json({ error: `mode must be design|rp (got ${mode})` });
+    }
     const project = createProject({
-      name, skillId, description, kind, autoNamed: !!autoNamed,
+      name, skillId, description, kind, mode: mode ?? undefined, autoNamed: !!autoNamed,
       ownerId: req.user?.id ?? null,
     });
     await ensureProjectWorkspace(project.id);
@@ -154,6 +164,12 @@ router.patch('/:pid', (req, res, next) => {
       }
       patch.kind = req.body.kind;
     }
+    if ('mode' in (req.body || {})) {
+      if (!MODE_VALUES.has(req.body.mode)) {
+        return res.status(400).json({ error: `mode must be design|rp (got ${req.body.mode})` });
+      }
+      patch.mode = req.body.mode;
+    }
     // E1a（2026-08-13）：会话真相源收敛到 projects.active_session_id 之后，
     // 前端切会话得能直接写这个指针（此前唯一的写入方是 turn.js —— 不发消息、
     // 只是切着看，指针就不动，别的标签页也就永远对不齐）。接受 null（清空）

package/server/api/publish.js

@@ -13,6 +13,7 @@
 import express from 'express';
 import { guardProject } from './_guard.js';
 import { publishSite, unpublishSite, validTaskName, lookupPublished } from '../lib/site-publish.js';
+import { msg } from '../shared/messages.js';
 
 const router = express.Router();
 
@@ -44,7 +45,7 @@ router.post(['/:pid/publish', '/:pid/publish/:task'], async (req, res) => {
   } catch (err) {
     if (err.status) return res.status(err.status).json({ error: err.message });
     console.error('[publish] deploy failed:', err.stderr || err.message);
-    res.status(502).json({ error: '发布失败：Cloudflare 部署没成功，稍后再试' });
+    res.status(502).json({ error: msg(req, '发布失败：Cloudflare 部署没成功，稍后再试') });
   }
 });
 
@@ -57,7 +58,7 @@ router.delete(['/:pid/publish', '/:pid/publish/:task'], async (req, res) => {
   } catch (err) {
     if (err.status) return res.status(err.status).json({ error: err.message });
     console.error('[publish] delete failed:', err.stderr || err.message);
-    res.status(502).json({ error: '下线失败，稍后再试' });
+    res.status(502).json({ error: msg(req, '下线失败，稍后再试') });
   }
 });