docnest 0.1.11 → 0.1.13

package/README.md

@@ -20,7 +20,7 @@ npx docnest serve
 
 ## 配置
 
-复制 `docnest.config.example.mjs` 为项目根目录的 `docnest.config.mjs`，配置项目自己的标题、目录顺序、存储键前缀和 PDF 水印。
+复制 `docnest.config.example.mjs` 为项目根目录的 `docnest.config.mjs`，配置项目自己的标题、目录顺序、存储键前缀和阅读限制策略。
 
 ### 外观主题
 
@@ -56,7 +56,18 @@ export default defineConfig({
 
 未配置 `appearance` 时使用 `slate-modern + auto`。旧配置中的 `current-docs` 会自动迁移到 `slate-modern`，正文视觉不会发生变化；旧版保存的 `markdown-theme` 明暗偏好也会自动迁移到新的项目级存储键。
 
-水印默认关闭。开启后，PDF 导出弹窗会读取配置文字，并允许本次导出临时修改；临时修改不会写回文件或浏览器存储。
+PDF、页面水印和图表外带能力由一个开关统一控制，默认使用普通阅读模式：
+
+```js
+export default defineConfig({
+  restrictedMode: false,
+})
+```
+
+- `restrictedMode: false`：显示打印和 PDF 导出，允许 Mermaid 图下载与大图查看。导出 PDF 时会弹出本次水印设置，可选择是否添加并自定义文案；默认文案为 `site.title`，不会写回配置。
+- `restrictedMode: true`：隐藏打印和 PDF 导出入口且不加载导出模块；使用 `site.title` 作为固定水印，禁止文字选择、复制、剪切和拖拽，并隐藏 Mermaid 下载与大图查看入口。Mermaid 仍会在正文中正常渲染。
+
+受限模式只移除 DocNest 提供的页面入口和脚本，不承诺对浏览器开发者工具或系统级截图提供绝对防护。
 
 ### 极简单口令授权
 
@@ -67,6 +78,8 @@ export default defineConfig({
   auth: {
     enabled: true,
     passphrase: '请替换为项目自己的长口令',
+    // 服务通过反向代理挂载在子路径时填写，例如 /documents；默认跳转到 /。
+    redirectPrefix: '',
     stateFile: '.docnest/auth.json',
     localStorageKey: 'my-project:auth-passphrase',
     sessionTtlMinutes: 24 * 60,
@@ -80,6 +93,8 @@ export default defineConfig({
 `localStorageKey` 可选，用于为不同宿主项目隔离浏览器存储键。内置授权不提供“修改口令”或“退出”按钮；需要更换口令时，停止服务、删除 `stateFile`，修改配置中的 `passphrase` 后重新启动。
 建议把 `.docnest/` 加入宿主项目的 `.gitignore`，并为口令状态文件设置仅当前用户可读写的权限。
 
+如果 DocNest 由反向代理挂载在 `/documents/` 等子路径下，将 `auth.redirectPrefix` 配置为 `/documents`。登录页会把原始文档目标写成带此前缀的路径，口令登录后的服务端跳转也会使用同一前缀；不配置时保持跳转到 `/` 的默认行为。
+
 授权开启但既没有状态文件，也没有初始 `passphrase` 时，DocNest 会拒绝启动，避免意外以空口令开放文档。
 
 如需显式指定端口、文档目录或监听地址：
@@ -125,3 +140,16 @@ npm run pack:check
 ```
 
 最低支持 Node.js 20，验证 Node.js 20 和 22。
+
+## 发布规范
+
+DocNest 的 GitHub Release 和 npm 发布统一由 GitHub Actions 完成，不在本地直接执行 `npm publish`。
+
+发布新版本时：
+
+1. 更新 `package.json` 和 `package-lock.json` 的版本号，并运行 `npm test` 与 `npm run pack:check`。
+2. 将版本提交推送到 `main`。
+3. 在 `main` 上创建与包版本一致的标签，例如 `v0.1.13`。
+4. 推送该标签：`git push origin v0.1.13`。
+
+标签推送后，`.github/workflows/publish.yml` 会校验标签与包版本一致，使用 npm OIDC 发布公开包，并自动创建名为 `DocNest v0.1.13` 的 GitHub Release。远程仓库只保留 `main` 分支，发布标签不需要推送临时开发分支。

package/dist/cli.js

@@ -62,8 +62,7 @@ function exposeConfig(config) {
     process.env.DOCS_THEME_DEFAULT = config.appearance.defaultTheme;
     process.env.DOCS_THEME_MODE_DEFAULT = config.appearance.defaultMode;
     process.env.DOCS_THEME_ENABLED = JSON.stringify(config.appearance.enabledThemes);
-    process.env.DOCS_WATERMARK_ENABLED = String(config.export.watermark.enabled);
-    process.env.DOCS_WATERMARK_TEXT = config.export.watermark.text;
+    process.env.DOCS_RESTRICTED_MODE = String(config.restrictedMode);
     process.env.DOCS_HOST = config.server.host;
     process.env.DOCS_PORT_START = String(config.server.port);
     process.env.DOCS_WATCH_ENABLED = String(config.server.watch);

package/dist/config.d.ts

@@ -28,16 +28,20 @@ export type DocNestConfig = {
     auth?: {
         enabled?: boolean;
         passphrase?: string;
+        /**
+         * Prefix to add to authentication return targets when the service is
+         * mounted below a reverse-proxy path, for example `/documents`.
+         */
+        redirectPrefix?: string;
         stateFile?: string;
         localStorageKey?: string;
         sessionTtlMinutes?: number;
     };
-    export?: {
-        watermark?: {
-            enabled?: boolean;
-            text?: string;
-        };
-    };
+    /**
+     * Restrict the reading experience to in-browser viewing only.
+     * Restricted mode also enables the fixed site-title watermark.
+     */
+    restrictedMode?: boolean;
 };
 export declare function defineConfig(config: DocNestConfig): DocNestConfig;
 export type ResolvedDocNestConfig = Required<DocNestConfig> & {
@@ -50,13 +54,12 @@ export type ResolvedDocNestConfig = Required<DocNestConfig> & {
     auth: {
         enabled: boolean;
         passphrase: string;
+        redirectPrefix: string;
         stateFile: string;
         localStorageKey: string;
         sessionTtlMinutes: number;
     };
-    export: {
-        watermark: Required<NonNullable<NonNullable<DocNestConfig['export']>['watermark']>>;
-    };
+    restrictedMode: boolean;
 };
 export declare function loadConfig(projectRoot?: string): Promise<ResolvedDocNestConfig>;
 export {};

package/dist/config.js

@@ -45,6 +45,20 @@ function normalizePositiveNumber(value, fallback) {
     const normalized = Number(value);
     return Number.isFinite(normalized) && normalized > 0 ? normalized : fallback;
 }
+function normalizeRedirectPrefix(value) {
+    if (typeof value !== 'string')
+        return '';
+    const normalized = value.trim();
+    if (!normalized ||
+        normalized === '/' ||
+        !normalized.startsWith('/') ||
+        normalized.startsWith('//') ||
+        normalized.includes('//') ||
+        normalized.includes('\\') ||
+        /[\r\n?#]/.test(normalized))
+        return '';
+    return normalized.replace(/\/+$/, '') || '';
+}
 function normalizeThemeName(value) {
     if (value === 'current-docs')
         return 'slate-modern';
@@ -87,7 +101,6 @@ async function loadConfig(projectRoot = process.cwd()) {
     const appearance = userConfig.appearance ?? {};
     const server = userConfig.server ?? {};
     const auth = userConfig.auth ?? {};
-    const watermark = userConfig.export?.watermark ?? {};
     const storageKeyPrefix = site.storageKeyPrefix?.trim() || `docnest:${projectName}`;
     const authLocalStorageKey = auth.localStorageKey?.trim() || `${storageKeyPrefix}:auth-passphrase`;
     return {
@@ -114,15 +127,11 @@ async function loadConfig(projectRoot = process.cwd()) {
         auth: {
             enabled: auth.enabled ?? false,
             passphrase: typeof auth.passphrase === 'string' ? auth.passphrase : '',
+            redirectPrefix: normalizeRedirectPrefix(auth.redirectPrefix),
             stateFile: node_path_1.default.resolve(projectRoot, auth.stateFile?.trim() || '.docnest/auth.json'),
             localStorageKey: authLocalStorageKey,
             sessionTtlMinutes: normalizePositiveNumber(auth.sessionTtlMinutes, 24 * 60),
         },
-        export: {
-            watermark: {
-                enabled: watermark.enabled ?? false,
-                text: watermark.text?.trim() || site.title?.trim() || projectName,
-            },
-        },
+        restrictedMode: userConfig.restrictedMode === true,
     };
 }

package/dist/server.js

@@ -54,8 +54,9 @@ const DOCS_THEME_ENABLED = (() => {
         return [...DOCS_THEME_NAMES];
     }
 })();
-const DOCS_WATERMARK_ENABLED = process.env.DOCS_WATERMARK_ENABLED === 'true';
-const DOCS_WATERMARK_TEXT = process.env.DOCS_WATERMARK_TEXT || DOCS_TITLE;
+const DOCS_RESTRICTED_MODE = process.env.DOCS_RESTRICTED_MODE === 'true';
+const DOCS_PDF_ENABLED = !DOCS_RESTRICTED_MODE;
+const DOCS_PAGE_WATERMARK_TEXT = DOCS_TITLE;
 const DOCS_DIR = path.resolve(process.env.DOCS_ROOT || path.join(process.cwd(), 'docs'));
 exports.docsDir = DOCS_DIR;
 const ROOT_DIRECTORY_ORDER = (() => {
@@ -108,8 +109,8 @@ app.locals.docsStorageKeyPrefix = DOCS_STORAGE_KEY_PREFIX;
 app.locals.docsThemeDefault = DOCS_THEME_DEFAULT;
 app.locals.docsThemeModeDefault = DOCS_THEME_MODE_DEFAULT;
 app.locals.docsThemeEnabled = DOCS_THEME_ENABLED;
-app.locals.docsWatermarkEnabled = DOCS_WATERMARK_ENABLED;
-app.locals.docsWatermarkText = DOCS_WATERMARK_TEXT;
+app.locals.docsRestrictedMode = DOCS_RESTRICTED_MODE;
+app.locals.docsPageWatermarkText = DOCS_PAGE_WATERMARK_TEXT;
 app.locals.docsAuthEnabled = BUILT_IN_AUTH_ENABLED;
 app.locals.docsAuthStorageKey = AUTH_CONFIG.localStorageKey || `${DOCS_STORAGE_KEY_PREFIX}:auth-passphrase`;
 function normalizeDocRelativePath(value) {
@@ -239,11 +240,13 @@ app.get('/favicon.ico', (req, res) => {
 app.use('/mermaid', express.static(MERMAID_DIR));
 // GitHub Markdown 样式（本地，避免 CDN 慢）
 app.use('/vendor/github-markdown-css', express.static(MARKDOWN_THEME_DIR));
-// html2canvas / DOMPurify / jsPDF（本地，用于前端导出 PDF）
-app.use('/vendor/html2canvas', express.static(HTML2CANVAS_DIR));
-app.use('/vendor/dompurify', express.static(DOMPURIFY_DIR));
-// jsPDF（本地，用于 Mermaid 图导出 PDF）
-app.use('/vendor/jspdf', express.static(JSPDF_DIR));
+if (DOCS_PDF_ENABLED) {
+    // html2canvas / DOMPurify / jsPDF（本地，用于前端导出 PDF）
+    app.use('/vendor/html2canvas', express.static(HTML2CANVAS_DIR));
+    app.use('/vendor/dompurify', express.static(DOMPURIFY_DIR));
+    // jsPDF（本地，用于 Mermaid 图导出 PDF）
+    app.use('/vendor/jspdf', express.static(JSPDF_DIR));
+}
 app.use(express.json({ limit: '16kb' }));
 app.use(express.urlencoded({ extended: false, limit: '16kb' }));
 function readCookie(cookieHeader, name) {
@@ -277,6 +280,17 @@ function safeNextPath(value) {
         return '/';
     return value;
 }
+function authRedirectTarget(value) {
+    const nextPath = safeNextPath(value);
+    const prefix = typeof AUTH_CONFIG.redirectPrefix === 'string' ? AUTH_CONFIG.redirectPrefix : '';
+    if (!prefix ||
+        nextPath === prefix ||
+        nextPath.startsWith(`${prefix}/`) ||
+        nextPath.startsWith(`${prefix}?`) ||
+        nextPath.startsWith(`${prefix}#`))
+        return nextPath;
+    return nextPath === '/' ? `${prefix}/` : `${prefix}${nextPath}`;
+}
 function setAuthCookie(res, token) {
     const maxAge = AUTH_MANAGER.sessionMaxAgeSeconds;
     res.setHeader('Set-Cookie', `${AUTH_MANAGER.sessionCookieName}=${encodeURIComponent(token)}; Max-Age=${maxAge}; Path=/; HttpOnly; SameSite=Lax`);
@@ -289,7 +303,7 @@ function wantsJson(req) {
 }
 function renderLoginPage(res, nextPath, error, status = 200) {
     return res.status(status).render('login', {
-        nextPath: safeNextPath(nextPath),
+        nextPath: authRedirectTarget(nextPath),
         error: error || '',
         assetVersion: ASSET_VERSION,
     });
@@ -313,7 +327,7 @@ app.post('/auth/verify', (req, res) => {
 app.post('/auth/login', (req, res) => {
     if (!BUILT_IN_AUTH_ENABLED)
         return res.redirect('/');
-    const nextPath = safeNextPath(req.body?.next);
+    const nextPath = authRedirectTarget(req.body?.next);
     const token = AUTH_MANAGER.createSession(String(req.body?.passphrase || ''));
     if (!token)
         return renderLoginPage(res, nextPath, '口令不正确，请重试。', 401);
@@ -500,8 +514,11 @@ function renderTree(tree, level = 0) {
         else {
             // 文件路径直接使用，路径重定向在 resolveDocPath 中处理
             const url = `/doc?path=${encodeURIComponent(item.path)}`;
+            const isReadme = item.name.toLowerCase() === 'readme.md';
+            const readmeClass = isReadme ? ' readme-link' : '';
+            const readmeBadge = isReadme ? '<span class="tree-readme-badge">README</span>' : '';
             html += `<li class="file">
-        <a href="${url}" class="file-link" title="${itemName}"><span class="tree-kind-icon tree-kind-icon-file" aria-hidden="true">📄</span>${itemName}</a>
+        <a href="${url}" class="file-link${readmeClass}" title="${itemName}"><span class="tree-kind-icon tree-kind-icon-file" aria-hidden="true">📄</span><span class="tree-file-name">${itemName}</span>${readmeBadge}</a>
       </li>`;
         }
     }

package/docnest.config.example.mjs

@@ -36,15 +36,14 @@ export default defineConfig({
     enabled: false,
     // 仅首次启动且授权状态文件不存在时使用；更换口令需手动删除状态文件后重启。
     passphrase: '',
+    // 通过反向代理挂载在子路径时，为登录成功后的目标补此前缀；默认空值跳转到根路径。
+    redirectPrefix: '',
     stateFile: '.docnest/auth.json',
     // 前端 localStorage 的键；口令会永久保存在浏览器本地，直到手动清除或口令失效。
     localStorageKey: 'my-project:auth-passphrase',
     sessionTtlMinutes: 24 * 60,
   },
-  export: {
-    watermark: {
-      enabled: false,
-      text: '我的项目文档',
-    },
-  },
+  // 受限阅读模式；默认关闭。开启后隐藏打印/PDF、Mermaid 下载和大图查看，
+  // 并使用 site.title 显示固定水印，同时禁止页面文字选择与复制。
+  restrictedMode: false,
 })

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "docnest",
-  "version": "0.1.11",
+  "version": "0.1.13",
   "description": "可复用的本地 Markdown 文档中心",
   "repository": {
     "type": "git",
@@ -66,5 +66,6 @@
     "@types/node": "^22.10.0",
     "tsx": "^4.19.2",
     "typescript": "^5.7.2"
-  }
+  },
+  "packageManager": "pnpm@9.15.0+sha512.76e2379760a4328ec4415815bcd6628dee727af3779aaa4c914e3944156c4299921a89f976381ee107d41f12cfa4b66681ca9c718f0668fa0831ed4c6d8ba56c"
 }

package/server/static/css/styles.css

@@ -451,7 +451,9 @@ body[data-theme="dark"] .dir-toggle.active {
   color: var(--linear-text);
   text-decoration: none;
   font-size: 0.8125rem;
-  display: block;
+  display: flex;
+  align-items: center;
+  gap: 0.35rem;
   padding: 0.35rem 0.5rem;
   border-radius: var(--linear-radius);
   transition: background-color 0.15s ease, color 0.15s ease;
@@ -460,6 +462,40 @@ body[data-theme="dark"] .dir-toggle.active {
   white-space: nowrap;
 }
 
+.tree-kind-icon-file {
+  flex: 0 0 auto;
+}
+
+.tree-file-name {
+  min-width: 0;
+  overflow: hidden;
+  text-overflow: ellipsis;
+}
+
+.file-link.readme-link {
+  background: rgba(94, 106, 210, 0.07);
+  font-weight: 600;
+}
+
+.file-link.readme-link:hover,
+.file-link.readme-link.active {
+  background: rgba(94, 106, 210, 0.14);
+}
+
+.tree-readme-badge,
+.dir-listing-item-badge {
+  flex: 0 0 auto;
+  margin-left: auto;
+  padding: 0.1rem 0.4rem;
+  border: 1px solid rgba(94, 106, 210, 0.34);
+  border-radius: 999px;
+  color: var(--linear-accent);
+  font-size: 0.625rem;
+  font-weight: 700;
+  letter-spacing: 0.04em;
+  line-height: 1.2;
+}
+
 .file-link:hover {
   background-color: rgba(0, 0, 0, 0.04);
   color: var(--linear-accent);
@@ -2230,6 +2266,7 @@ body[data-theme="dark"] .pdf-export-modal__desc {
 }
 
 body[data-theme="dark"] .pdf-export-modal__option,
+body[data-theme="dark"] .pdf-export-modal__watermark-input,
 body[data-theme="dark"] .pdf-export-modal__btn {
   background: #1c1c1e;
   border-color: #2c2c2e;
@@ -5696,6 +5733,17 @@ body[data-theme="dark"] .breadcrumb-separator {
   color: var(--linear-text-muted);
 }
 
+.dir-listing-item.is-readme {
+  background: rgba(94, 106, 210, 0.07);
+  border-left: 3px solid var(--linear-accent);
+  padding-left: calc(0.875rem - 3px);
+}
+
+.dir-listing-item.is-readme .dir-listing-item-name {
+  color: var(--linear-text);
+  font-weight: 650;
+}
+
 .dir-listing-item.is-dir .dir-listing-item-name {
   font-weight: 550;
   color: var(--linear-text);

package/server/static/css/themes.css

@@ -40,6 +40,58 @@ body {
   font-family: var(--doc-font-ui);
 }
 
+/* Protected reading mode: no text selection/copy and a persistent viewport watermark. */
+html.docnest-page-protected body,
+html.docnest-page-protected body * {
+  -webkit-user-select: none !important;
+  -moz-user-select: none !important;
+  user-select: none !important;
+}
+
+html.docnest-page-protected body input,
+html.docnest-page-protected body textarea,
+html.docnest-page-protected body select,
+html.docnest-page-protected body [contenteditable="true"] {
+  -webkit-user-select: text !important;
+  -moz-user-select: text !important;
+  user-select: text !important;
+}
+
+/* Restricted mode keeps Mermaid inline but removes every affordance for opening
+ * or exporting a larger copy of the diagram. */
+html.docnest-restricted .markdown-body .mermaid {
+  cursor: default;
+}
+
+html.docnest-restricted .markdown-body .mermaid::after,
+html.docnest-restricted .markdown-body .mermaid-download-btn {
+  display: none !important;
+}
+
+.docnest-page-watermark {
+  position: fixed;
+  inset: 0;
+  z-index: 9990;
+  display: grid;
+  grid-template-columns: repeat(3, minmax(0, 1fr));
+  grid-template-rows: repeat(4, minmax(0, 1fr));
+  overflow: hidden;
+  pointer-events: none;
+  user-select: none;
+}
+
+.docnest-page-watermark__item {
+  display: flex;
+  align-items: center;
+  justify-content: center;
+  color: var(--linear-text, rgba(15, 23, 42, 0.42));
+  font: 700 clamp(0.75rem, 1.5vw, 1.5rem)/1 var(--doc-font-mono);
+  letter-spacing: 0.08em;
+  opacity: 0.12;
+  transform: rotate(-24deg);
+  white-space: nowrap;
+}
+
 ::selection {
   background: var(--doc-selection);
 }
@@ -318,8 +370,7 @@ body[data-doc-theme][data-theme="dark"] .pdf-export-modal__panel {
 }
 
 body[data-doc-theme][data-theme="dark"] .download-menu-content button,
-body[data-doc-theme][data-theme="dark"] .pdf-export-modal__option,
-body[data-doc-theme][data-theme="dark"] .pdf-export-modal__watermark-input {
+body[data-doc-theme][data-theme="dark"] .pdf-export-modal__btn {
   border-color: var(--linear-border);
   background: var(--linear-bg-subtle);
   color: var(--linear-text);

package/server/static/js/core/doc-pdf-export.js

@@ -313,7 +313,7 @@
     return Math.max(minBreakY - startY, searchStartY + bestRow - startY);
   }
 
-  function addCanvasToPdf(pdf, canvas, margin, blockBreakpoints, watermarkEnabled, watermarkText) {
+  function addCanvasToPdf(pdf, canvas, margin, blockBreakpoints, watermark) {
     var pageWidth = pdf.internal.pageSize.getWidth();
     var pageHeight = pdf.internal.pageSize.getHeight();
     var usableWidth = pageWidth - margin * 2;
@@ -357,8 +357,14 @@
         sliceHeight
       );
 
-      if (watermarkEnabled) {
-        drawWatermarkPattern(context, pageCanvas.width, pageCanvas.height, pageCanvasHeight, watermarkText);
+      if (watermark && watermark.enabled) {
+        drawWatermarkPattern(
+          context,
+          pageCanvas.width,
+          pageCanvas.height,
+          pageCanvasHeight,
+          watermark.text,
+        );
       }
 
       if (pageIndex > 0) {
@@ -413,18 +419,17 @@
   function openPdfExportDialog() {
     return new Promise(function(resolve) {
       var config = window.DOCNEST_CONFIG || {};
-      var defaultWatermarkEnabled = config.watermarkEnabled === true;
-      var defaultWatermarkText = String(config.watermarkText || document.title || '');
+      var defaultWatermarkText = String(config.siteTitle || document.title || '');
       var modalId = 'pdf-export-modal';
       var overlay = document.createElement('div');
       overlay.className = 'pdf-export-modal';
       overlay.innerHTML = [
         '<div class="pdf-export-modal__panel" role="dialog" aria-modal="true" aria-labelledby="pdf-export-title">',
           '<div class="pdf-export-modal__title" id="pdf-export-title">下载 PDF</div>',
-          '<div class="pdf-export-modal__desc">导出前确认本次 PDF 是否需要水印；本次修改不会写回项目配置。</div>',
+          '<div class="pdf-export-modal__desc">可为本次导出的 PDF 临时添加水印，不会修改项目配置。</div>',
           '<label class="pdf-export-modal__option">',
             '<input type="checkbox" id="pdf-export-watermark-checkbox">',
-            '<span class="pdf-export-modal__option-text">启用水印</span>',
+            '<span class="pdf-export-modal__option-text">本次导出添加水印</span>',
           '</label>',
           '<label class="pdf-export-modal__watermark-field" for="pdf-export-watermark-text">水印文字</label>',
           '<input class="pdf-export-modal__watermark-input" id="pdf-export-watermark-text" type="text" maxlength="80">',
@@ -446,45 +451,38 @@
       }
 
       overlay.addEventListener('click', function(event) {
-        if (event.target === overlay) {
-          close(null);
-        }
+        if (event.target === overlay) close(null);
       });
-
       overlay.querySelector('[data-action="cancel"]').addEventListener('click', function() {
         close(null);
       });
-
       overlay.querySelector('[data-action="confirm"]').addEventListener('click', function() {
         var checkbox = overlay.querySelector('#pdf-export-watermark-checkbox');
         var watermarkInput = overlay.querySelector('#pdf-export-watermark-text');
         close({
-          watermarkEnabled: !!(checkbox && checkbox.checked),
-          watermarkText: watermarkInput ? watermarkInput.value.trim() : defaultWatermarkText,
+          enabled: !!(checkbox && checkbox.checked),
+          text: watermarkInput ? watermarkInput.value.trim() : defaultWatermarkText,
         });
       });
 
       document.body.appendChild(overlay);
       if (typeof pushModal === 'function') {
-        pushModal(modalId, function() {
-          close(null);
-        });
+        pushModal(modalId, function() { close(null); });
       }
 
       var checkbox = overlay.querySelector('#pdf-export-watermark-checkbox');
+      var watermarkInput = overlay.querySelector('#pdf-export-watermark-text');
+      if (watermarkInput) {
+        watermarkInput.value = defaultWatermarkText;
+        watermarkInput.disabled = true;
+      }
       if (checkbox) {
-        checkbox.checked = defaultWatermarkEnabled;
+        checkbox.checked = false;
         checkbox.addEventListener('change', function() {
-          var watermarkInput = overlay.querySelector('#pdf-export-watermark-text');
           if (watermarkInput) watermarkInput.disabled = !checkbox.checked;
         });
         checkbox.focus();
       }
-      var watermarkInput = overlay.querySelector('#pdf-export-watermark-text');
-      if (watermarkInput) {
-        watermarkInput.value = defaultWatermarkText;
-        watermarkInput.disabled = !defaultWatermarkEnabled;
-      }
     });
   }
 
@@ -568,7 +566,7 @@
     }
   }
 
-  function exportCurrentDoc(button, options) {
+  function exportCurrentDoc(button, watermark) {
     var article = document.querySelector('.main-content .markdown-body');
     if (!article) {
       showPdfExportError('未找到当前文档内容，无法导出 PDF。');
@@ -588,21 +586,13 @@
           format: 'a4',
           compress: true,
         });
-        var config = window.DOCNEST_CONFIG || {};
-        var watermarkEnabled = options && typeof options.watermarkEnabled === 'boolean'
-          ? options.watermarkEnabled
-          : config.watermarkEnabled === true;
-        var watermarkText = options && options.watermarkText
-          ? options.watermarkText
-          : String(config.watermarkText || document.title || '');
-
         return waitForExportReady()
           .then(function() {
             return renderCanvas(exportRoot);
           })
           .then(function(canvas) {
             var blockBreakpoints = collectBlockBreakpoints(exportRoot, canvas.height / Math.max(exportRoot.scrollHeight, 1));
-            addCanvasToPdf(pdf, canvas, margin, blockBreakpoints, watermarkEnabled, watermarkText);
+            addCanvasToPdf(pdf, canvas, margin, blockBreakpoints, watermark);
             pdf.save(getExportFileName() + '.pdf');
           })
           .finally(function() {
@@ -619,13 +609,13 @@
   }
 
   function init() {
+    if (window.DOCNEST_CONFIG && window.DOCNEST_CONFIG.restrictedMode === true) return;
     var button = document.getElementById('download-doc-pdf-btn');
     if (!button) return;
 
     button.addEventListener('click', function() {
-      openPdfExportDialog().then(function(result) {
-        if (!result) return;
-        exportCurrentDoc(button, result);
+      openPdfExportDialog().then(function(watermark) {
+        if (watermark) exportCurrentDoc(button, watermark);
       });
     });
   }

package/server/static/js/diagram/diagram-download.js

@@ -1,5 +1,10 @@
 // 图表下载和复制功能
+function isDocNestRestrictedMode() {
+  return !!(window.DOCNEST_CONFIG && window.DOCNEST_CONFIG.restrictedMode === true);
+}
+
 function downloadCurrentDiagram() {
+  if (isDocNestRestrictedMode()) return;
   if (!currentSvg) return;
   // 获取原始 SVG（移除缩放样式）
   const originalSvg = currentSvg.cloneNode(true);
@@ -10,6 +15,7 @@ function downloadCurrentDiagram() {
 }
 
 function copyCurrentDiagram() {
+  if (isDocNestRestrictedMode()) return;
   if (!currentSvg) return;
   
   // 获取原始 SVG（移除缩放样式）
@@ -199,6 +205,7 @@ function showCopyNotification(message, success) {
 
 // 下载功能
 function showDownloadMenu(svgElement, defaultName) {
+  if (isDocNestRestrictedMode()) return;
   const menu = document.createElement('div');
   menu.className = 'download-menu';
   menu.id = 'download-menu';
@@ -246,6 +253,7 @@ function closeDownloadMenu() {
 }
 
 function downloadDiagram(format, name) {
+  if (isDocNestRestrictedMode()) return;
   const svg = window.currentDownloadSvg;
   if (!svg) return;
   

package/server/static/js/diagram/diagram-viewer.js

@@ -4,7 +4,12 @@ let defaultZoom = 1;
 let currentSvg = null;
 let isFullscreen = false;
 
+function isDocNestRestrictedMode() {
+  return !!(window.DOCNEST_CONFIG && window.DOCNEST_CONFIG.restrictedMode === true);
+}
+
 function setupDiagramViewer() {
+  if (isDocNestRestrictedMode()) return;
   const diagrams = document.querySelectorAll('.markdown-body .mermaid');
   diagrams.forEach((diagram, index) => {
     // 添加下载按钮
@@ -38,6 +43,7 @@ function setupDiagramViewer() {
 }
 
 function openDiagramViewer(svgElement) {
+  if (isDocNestRestrictedMode()) return;
   const viewer = document.getElementById('diagram-viewer');
   const container = document.getElementById('diagram-viewer-svg-container');
   

package/server/views/dir.ejs

@@ -15,6 +15,7 @@
   <script src="/static/js/core/sidebar.js?v=<%= assetVersion %>"></script>
 </head>
 <body data-current-dir-path="<%= currentDirPath %>">
+  <%- include('partials/page-protection') %>
   <div class="container">
     <%- include('partials/header', { showBackLink: true, showPrintButton: false, showPdfButton: false }) %>
     <div class="content">
@@ -47,9 +48,11 @@
                 </a>
               <% }); %>
               <% listing.files.forEach(function(file) { %>
-                <a href="/doc?path=<%= encodeURIComponent(file.path) %>" class="dir-listing-item is-file">
+                <% const isReadme = file.name.toLowerCase() === 'readme.md'; %>
+                <a href="/doc?path=<%= encodeURIComponent(file.path) %>" class="dir-listing-item is-file<%= isReadme ? ' is-readme' : '' %>">
                   <span class="dir-listing-item-icon">📄</span>
                   <span class="dir-listing-item-name"><%= file.name %></span>
+                  <% if (isReadme) { %><span class="dir-listing-item-badge">目录说明</span><% } %>
                 </a>
               <% }); %>
             </div>

package/server/views/doc.ejs

@@ -15,10 +15,13 @@
   <script src="/static/js/core/theme.js?v=<%= assetVersion %>"></script>
   <script src="/static/js/core/mermaid-init.js?v=<%= assetVersion %>"></script>
   <script src="/static/js/core/doc-client-nav.js?v=<%= assetVersion %>"></script>
-  <script src="/static/js/core/doc-pdf-export.js?v=<%= assetVersion %>"></script>
+  <% if (!docsRestrictedMode) { %>
+    <script src="/static/js/core/doc-pdf-export.js?v=<%= assetVersion %>"></script>
+  <% } %>
   <script src="/static/js/core/sidebar.js?v=<%= assetVersion %>"></script>
 </head>
 <body data-current-path="<%= currentPath %>">
+  <%- include('partials/page-protection') %>
   <div class="container">
     <%- include('partials/header', { showBackLink: true, showPrintButton: true, showPdfButton: true }) %>
     <div class="content">
@@ -34,26 +37,31 @@
       </main>
     </div>
   </div>
-  <%- include('partials/diagram-viewer') %>
-  <!-- 按依赖顺序加载模块 -->
-  <script src="/static/js/utils/modal-stack.js?v=<%= assetVersion %>"></script>
-  <script src="/static/js/diagram/diagram-viewer.js?v=<%= assetVersion %>"></script>
-  <script src="/static/js/diagram/diagram-zoom.js?v=<%= assetVersion %>"></script>
-  <script src="/static/js/diagram/diagram-drag.js?v=<%= assetVersion %>"></script>
-  <script src="/static/js/diagram/diagram-controls.js?v=<%= assetVersion %>"></script>
-  <script src="/static/js/diagram/diagram-download.js?v=<%= assetVersion %>"></script>
+  <% if (!docsRestrictedMode) { %>
+    <%- include('partials/diagram-viewer') %>
+    <!-- 按依赖顺序加载模块 -->
+    <script src="/static/js/utils/modal-stack.js?v=<%= assetVersion %>"></script>
+    <script src="/static/js/diagram/diagram-viewer.js?v=<%= assetVersion %>"></script>
+    <script src="/static/js/diagram/diagram-zoom.js?v=<%= assetVersion %>"></script>
+    <script src="/static/js/diagram/diagram-drag.js?v=<%= assetVersion %>"></script>
+    <script src="/static/js/diagram/diagram-controls.js?v=<%= assetVersion %>"></script>
+    <script src="/static/js/diagram/diagram-download.js?v=<%= assetVersion %>"></script>
+  <% } %>
   <script src="/static/js/utils/app.js?v=<%= assetVersion %>"></script>
+  <% if (!docsRestrictedMode) { %>
+    <script>
+      // 打印当前文章
+      (function() {
+        const printBtn = document.getElementById('print-doc-btn');
+        if (printBtn) {
+          printBtn.addEventListener('click', function() {
+            window.print();
+          });
+        }
+      })();
+    </script>
+  <% } %>
   <script>
-    // 打印当前文章
-    (function() {
-      const printBtn = document.getElementById('print-doc-btn');
-      if (printBtn) {
-        printBtn.addEventListener('click', function() {
-          window.print();
-        });
-      }
-    })();
-
     // 高亮当前文档；展开状态：恢复上次保存的 + 当前文档所在路径，不折叠其他已展开项
     (function() {
       const STORAGE_KEY = <%- JSON.stringify(docsStorageKeyPrefix + ':open-dirs') %>;

package/server/views/index.ejs

@@ -17,6 +17,7 @@
   <script src="/static/js/core/sidebar.js?v=<%= assetVersion %>"></script>
 </head>
 <body>
+  <%- include('partials/page-protection') %>
   <div class="container">
     <%- include('partials/header', { showBackLink: false }) %>
     <div class="content">
@@ -29,14 +30,16 @@
       </main>
     </div>
   </div>
-  <%- include('partials/diagram-viewer') %>
-  <!-- 按依赖顺序加载模块 -->
-  <script src="/static/js/utils/modal-stack.js?v=<%= assetVersion %>"></script>
-  <script src="/static/js/diagram/diagram-viewer.js?v=<%= assetVersion %>"></script>
-  <script src="/static/js/diagram/diagram-zoom.js?v=<%= assetVersion %>"></script>
-  <script src="/static/js/diagram/diagram-drag.js?v=<%= assetVersion %>"></script>
-  <script src="/static/js/diagram/diagram-controls.js?v=<%= assetVersion %>"></script>
-  <script src="/static/js/diagram/diagram-download.js?v=<%= assetVersion %>"></script>
+  <% if (!docsRestrictedMode) { %>
+    <%- include('partials/diagram-viewer') %>
+    <!-- 按依赖顺序加载模块 -->
+    <script src="/static/js/utils/modal-stack.js?v=<%= assetVersion %>"></script>
+    <script src="/static/js/diagram/diagram-viewer.js?v=<%= assetVersion %>"></script>
+    <script src="/static/js/diagram/diagram-zoom.js?v=<%= assetVersion %>"></script>
+    <script src="/static/js/diagram/diagram-drag.js?v=<%= assetVersion %>"></script>
+    <script src="/static/js/diagram/diagram-controls.js?v=<%= assetVersion %>"></script>
+    <script src="/static/js/diagram/diagram-download.js?v=<%= assetVersion %>"></script>
+  <% } %>
   <script src="/static/js/utils/app.js?v=<%= assetVersion %>"></script>
   <script src="/socket.io/socket.io.js"></script>
   <script>

package/server/views/not-found.ejs

@@ -14,6 +14,7 @@
   <script src="/static/js/core/sidebar.js?v=<%= assetVersion %>"></script>
 </head>
 <body class="not-found-page">
+  <%- include('partials/page-protection') %>
   <div class="container">
     <%- include('partials/header', { showBackLink: true }) %>
     <div class="content">

package/server/views/partials/appearance-head.ejs

@@ -2,8 +2,8 @@
   window.DOCNEST_CONFIG = {
     authEnabled: <%= docsAuthEnabled ? 'true' : 'false' %>,
     authStorageKey: <%- JSON.stringify(docsAuthStorageKey) %>,
-    watermarkEnabled: <%= docsWatermarkEnabled ? 'true' : 'false' %>,
-    watermarkText: <%- JSON.stringify(docsWatermarkText) %>,
+    siteTitle: <%- JSON.stringify(docsTitle) %>,
+    restrictedMode: <%= docsRestrictedMode ? 'true' : 'false' %>,
     storageKeyPrefix: <%- JSON.stringify(docsStorageKeyPrefix) %>,
     appearance: {
       defaultTheme: <%- JSON.stringify(docsThemeDefault) %>,

package/server/views/partials/header.ejs

@@ -13,13 +13,13 @@
     </div>
     <div class="header-meta">
       <div class="header-actions">
-        <% if (typeof showPrintButton !== 'undefined' && showPrintButton) { %>
+        <% if (typeof showPrintButton !== 'undefined' && showPrintButton && !docsRestrictedMode) { %>
           <button type="button" id="print-doc-btn" class="header-action-btn print-btn" title="打印当前文章">
             <span class="print-icon">🖨️</span>
             <span class="header-action-text">打印</span>
           </button>
         <% } %>
-        <% if (typeof showPdfButton !== 'undefined' && showPdfButton) { %>
+        <% if (typeof showPdfButton !== 'undefined' && showPdfButton && !docsRestrictedMode) { %>
           <button type="button" id="download-doc-pdf-btn" class="header-action-btn download-pdf-btn" title="下载当前文章 PDF">
             <span class="download-pdf-icon">⬇️</span>
             <span class="header-action-text">下载 PDF</span>

package/server/views/partials/page-protection.ejs

@@ -0,0 +1,31 @@
+<% if (docsRestrictedMode) { %>
+  <div class="docnest-page-watermark" aria-hidden="true">
+    <% for (let index = 0; index < 12; index += 1) { %>
+      <span class="docnest-page-watermark__item"><%= docsPageWatermarkText %></span>
+    <% } %>
+  </div>
+  <script>
+    document.documentElement.classList.add('docnest-page-protected', 'docnest-restricted');
+    (function() {
+      function isEditableTarget(target) {
+        return !!(target && target.closest && target.closest('input, textarea, select, [contenteditable="true"]'));
+      }
+
+      function preventProtectedAction(event) {
+        if (!isEditableTarget(event.target)) event.preventDefault();
+      }
+
+      document.addEventListener('selectstart', preventProtectedAction);
+      document.addEventListener('copy', preventProtectedAction);
+      document.addEventListener('cut', preventProtectedAction);
+      document.addEventListener('dragstart', preventProtectedAction);
+      document.addEventListener('keydown', function(event) {
+        if (isEditableTarget(event.target)) return;
+        var key = String(event.key || '').toLowerCase();
+        if ((event.metaKey || event.ctrlKey) && (key === 'a' || key === 'c' || key === 'x')) {
+          event.preventDefault();
+        }
+      });
+    })();
+  </script>
+<% } %>