fuli-context 0.4.0 → 0.5.0

package/graph-provider/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "fuli-graph-provider"
-version = "0.4.0"
+version = "0.5.0"
 description = "Graphiti-backed personal and shared project provider for Fuli."
 requires-python = ">=3.12"
 dependencies = [

package/npm-shrinkwrap.json

@@ -1,12 +1,12 @@
 {
   "name": "fuli-context",
-  "version": "0.4.0",
+  "version": "0.5.0",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "fuli-context",
-      "version": "0.4.0",
+      "version": "0.5.0",
       "license": "Apache-2.0",
       "dependencies": {
         "@hono/node-server": "2.0.12",

package/package.json

@@ -1,9 +1,10 @@
 {
   "name": "fuli-context",
-  "version": "0.4.0",
+  "version": "0.5.0",
   "description": "Local-first context graph for AI agents.",
   "type": "module",
   "files": [
+    "README.en.md",
     "npm-shrinkwrap.json",
     "src/",
     "dist/web/",

package/src/cli/command-registry.js

@@ -12,9 +12,9 @@ General:
   --version, -v
 
 Local service:
-  start [--port 2727] [--open] [--rebuild] [--data-dir DIR] [--personal-space NAME]
+  start [--port 2727] [--open] [--lan] [--rebuild] [--data-dir DIR] [--personal-space NAME]
   stop [--data-dir DIR]
-  restart [--port 2727] [--open] [--rebuild] [--data-dir DIR] [--personal-space NAME]
+  restart [--port 2727] [--open] [--lan] [--rebuild] [--data-dir DIR] [--personal-space NAME]
   status [--json] [--data-dir DIR]
   open [--data-dir DIR]
 

package/src/cli/local-runtime-command.js

@@ -40,10 +40,10 @@ export async function runLocalRuntimeCommand(command, args, dependencies = {}) {
 export function formatLocalRuntimeResult(command, result) {
   if (command === 'start') {
     const verb = result.status === 'running' ? '已经在运行' : '已启动';
-    return [`Fuli 本地服务${verb}。`, `管理界面：${result.url}`].join('\n');
+    return formatStartedRuntime(`Fuli 本地服务${verb}。`, result);
   }
   if (command === 'restart') {
-    return [`Fuli 本地服务已重启。`, `管理界面：${result.url}`].join('\n');
+    return formatStartedRuntime('Fuli 本地服务已重启。', result);
   }
   if (command === 'stop') {
     if (result.status === 'partial') {
@@ -61,6 +61,20 @@ export function formatLocalRuntimeResult(command, result) {
   throw new TypeError(`Unknown local runtime command: ${command}`);
 }
 
+function formatStartedRuntime(title, result) {
+  const lines = [title, `管理界面：${result.url}`];
+  if (result.lan === true) {
+    lines.push(
+      '局域网界面：',
+      ...result.lanUrls.map((url) => `  ${url}`),
+      `访问用户名：${result.lanAccess.username}`,
+      `临时访问口令：${result.lanAccess.accessCode}`,
+      '仅在可信 Wi-Fi 中使用；重新启动局域网模式会更换口令。'
+    );
+  }
+  return lines.join('\n');
+}
+
 function formatStatus(result) {
   const labels = {
     running: '运行中',

package/src/cli/local-runtime-options.js

@@ -9,13 +9,16 @@ const VALUE_OPTIONS = Object.freeze({
 const BOOLEAN_OPTIONS = Object.freeze({
   '--open': 'open',
   '--rebuild': 'rebuild',
+  '--lan': 'lan',
   '--json': 'json'
 });
 
 const ALLOWED_BY_COMMAND = Object.freeze({
-  start: new Set(['--data-dir', '--personal-space', '--port', '--open', '--rebuild']),
+  start: new Set(['--data-dir', '--personal-space', '--port', '--open', '--rebuild', '--lan']),
   stop: new Set(['--data-dir']),
-  restart: new Set(['--data-dir', '--personal-space', '--port', '--open', '--rebuild']),
+  restart: new Set([
+    '--data-dir', '--personal-space', '--port', '--open', '--rebuild', '--lan'
+  ]),
   status: new Set(['--data-dir', '--port', '--json']),
   open: new Set(['--data-dir'])
 });
@@ -29,6 +32,7 @@ export function parseLocalRuntimeOptions(command, args = []) {
     port: DEFAULT_FULI_PORT,
     open: false,
     rebuild: false,
+    lan: false,
     json: false
   };
   const seen = new Set();

package/src/http/request-policy.js

@@ -1,3 +1,5 @@
+import { timingSafeEqual } from 'node:crypto';
+
 import { sendJson } from './response.js';
 
 export function localServerAuthority(address) {
@@ -9,18 +11,38 @@ export function localServerAuthority(address) {
 }
 
 export function rejectDisallowedRequest({ request, response, authority }) {
+  return rejectRequestOutsidePolicy({ request, response, authority });
+}
+
+export function rejectRequestOutsidePolicy({
+  request,
+  response,
+  authority,
+  lanAuthorities = [],
+  lanAccessToken = null
+}) {
   const origin = request.headers.origin;
   const fetchSite = request.headers['sec-fetch-site'];
+  const requestAuthority = request.headers.host;
+  const lanRequest = lanAuthorities.includes(requestAuthority);
+  const loopbackRequest = requestAuthority === authority;
   if (
     !authority ||
-    request.headers.host !== authority ||
-    (origin !== undefined && origin !== `http://${authority}`) ||
+    (requestAuthority !== authority && !lanRequest) ||
+    (lanAuthorities.length > 0 && loopbackRequest && !isLoopbackAddress(request.socket?.remoteAddress)) ||
+    (origin !== undefined && origin !== `http://${requestAuthority}`) ||
     (typeof fetchSite === 'string' && fetchSite.toLowerCase() === 'cross-site')
   ) {
     sendJson(response, 403, { error: 'Forbidden' });
     return true;
   }
 
+  if (lanRequest && !hasLanAccess(request.headers.authorization, lanAccessToken)) {
+    response.setHeader('www-authenticate', 'Basic realm="FULI LAN", charset="UTF-8"');
+    sendJson(response, 401, { error: 'LAN access code required' });
+    return true;
+  }
+
   if (requiresJson(request) && !isJson(request.headers['content-type'])) {
     sendJson(response, 415, { error: 'Unsupported media type' });
     return true;
@@ -29,6 +51,19 @@ export function rejectDisallowedRequest({ request, response, authority }) {
   return false;
 }
 
+function hasLanAccess(authorization, accessToken) {
+  if (typeof accessToken !== 'string' || !accessToken) return false;
+  const expected = `Basic ${Buffer.from(`fuli:${accessToken}`).toString('base64')}`;
+  if (typeof authorization !== 'string' || authorization.length !== expected.length) {
+    return false;
+  }
+  return timingSafeEqual(Buffer.from(authorization), Buffer.from(expected));
+}
+
+function isLoopbackAddress(address) {
+  return address === '127.0.0.1' || address === '::1' || address === '::ffff:127.0.0.1';
+}
+
 function requiresJson(request) {
   if (request.method !== 'POST') return false;
   const pathname = new URL(request.url, 'http://127.0.0.1').pathname;

package/src/local-runtime/lifecycle.js

@@ -20,6 +20,7 @@ export async function startLocalRuntime(input, dependencies = {}) {
     paths: input.paths,
     personalSpaceName: input.personalSpaceName,
     port: input.port,
+    lan: input.lan === true,
     personalOnly: !managesDevelopmentWorkspace,
     buildProviders,
     noStart: false,
@@ -99,7 +100,10 @@ export async function inspectLocalRuntime(input, dependencies = {}) {
     console: {
       status: consoleReady ? 'ready' : processAlive ? 'unverified' : 'stopped',
       url: stateLooksOwned ? state.url : `http://127.0.0.1:${input.port}`,
-      pid: processAlive ? state.pid : null
+      pid: processAlive ? state.pid : null,
+      ...(stateLooksOwned && state.lan === true
+        ? { lan: true, lanUrls: safeLanUrls(state.lanUrls) }
+        : {})
     },
     personal,
     public: {
@@ -237,6 +241,12 @@ function isRuntimeState(state) {
     Number.isInteger(state.pid) && typeof state.url === 'string';
 }
 
+function safeLanUrls(value) {
+  return Array.isArray(value)
+    ? value.filter((url) => typeof url === 'string' && url.startsWith('http://'))
+    : [];
+}
+
 function isProcessAlive(pid) {
   try { process.kill(pid, 0); return true; } catch { return false; }
 }

package/src/server/lan-access.js

@@ -0,0 +1,52 @@
+import { isIPv4 } from 'node:net';
+import { networkInterfaces } from 'node:os';
+
+export const LAN_ACCESS_USERNAME = 'fuli';
+
+export function discoverLanAddresses(interfaces = networkInterfaces()) {
+  const addresses = [];
+  for (const entries of Object.values(interfaces ?? {})) {
+    for (const entry of entries ?? []) {
+      if (!entry || entry.internal || !isIpv4Family(entry.family)) continue;
+      if (!isPrivateLanIpv4(entry.address)) continue;
+      addresses.push(entry.address);
+    }
+  }
+  return [...new Set(addresses)].sort(compareIpv4);
+}
+
+export function lanConsoleUrls(addresses, port) {
+  return addresses.map((address) => `http://${consoleAuthority(address, port)}`);
+}
+
+export function lanServerAuthorities(addresses, port) {
+  return lanConsoleUrls(addresses, port).map((url) => new URL(url).host);
+}
+
+function isIpv4Family(family) {
+  return family === 'IPv4' || family === 4;
+}
+
+function isPrivateLanIpv4(address) {
+  if (!isIPv4(address)) return false;
+  const [first, second] = address.split('.').map(Number);
+  return first === 10 ||
+    (first === 172 && second >= 16 && second <= 31) ||
+    (first === 192 && second === 168) ||
+    (first === 169 && second === 254);
+}
+
+function consoleAuthority(address, port) {
+  return Number(port) === 80 ? address : `${address}:${port}`;
+}
+
+function compareIpv4(left, right) {
+  const leftParts = left.split('.').map(Number);
+  const rightParts = right.split('.').map(Number);
+  for (let index = 0; index < 4; index += 1) {
+    if (leftParts[index] !== rightParts[index]) {
+      return leftParts[index] - rightParts[index];
+    }
+  }
+  return 0;
+}

package/src/server.js

@@ -4,11 +4,16 @@ import { fileURLToPath } from 'node:url';
 
 import { handleApiRequest } from './http/api-router.js';
 import { mapHttpError } from './http/error-mapping.js';
-import { localServerAuthority, rejectDisallowedRequest } from './http/request-policy.js';
+import { localServerAuthority, rejectRequestOutsidePolicy } from './http/request-policy.js';
 import { sendJson } from './http/response.js';
 import { serveStatic } from './http/static-handler.js';
 import { DEFAULT_FULI_PORT } from './defaults.js';
 import { resolveGraphRuntimeOptions } from './graphiti/runtime-config.js';
+import {
+  discoverLanAddresses,
+  lanConsoleUrls,
+  lanServerAuthorities
+} from './server/lan-access.js';
 import { createServerApplication } from './server/application-lifecycle.js';
 import { listenServer } from './server/listen.js';
 
@@ -26,8 +31,19 @@ export async function createServer(options = {}) {
     store,
     app,
     closeApplicationOnShutdown,
-    isBlockedPort = isFetchBlockedPort
+    isBlockedPort = isFetchBlockedPort,
+    lan = false,
+    lanAccessToken = null,
+    lanAddresses: configuredLanAddresses = null
   } = options;
+  const lanEnabled = lan === true;
+  const lanToken = lanEnabled ? requiredLanToken(lanAccessToken) : null;
+  const lanAddresses = lanEnabled
+    ? [...new Set(configuredLanAddresses ?? discoverLanAddresses())]
+    : [];
+  if (lanEnabled && lanAddresses.length === 0) {
+    throw new Error('No private IPv4 LAN address is available');
+  }
   if (Number(port) !== 0 && isBlockedPort(port)) {
     throw new Error(`Port ${port} is blocked for local fetch`);
   }
@@ -45,15 +61,23 @@ export async function createServer(options = {}) {
 
   for (let attempt = 0; attempt < 20; attempt += 1) {
     let authority = null;
+    let allowedLanAuthorities = [];
     const server = createHttpServer((request, response) => {
-      handleRequest({ request, response, app: application, authority }).catch((error) => {
+      handleRequest({
+        request,
+        response,
+        app: application,
+        authority,
+        lanAuthorities: allowedLanAuthorities,
+        lanAccessToken: lanToken
+      }).catch((error) => {
         const mapped = mapHttpError(error);
         sendJson(response, mapped.status, mapped.body);
       });
     });
 
     try {
-      await listenServer(server, port);
+      await listenServer(server, port, lanEnabled ? '0.0.0.0' : '127.0.0.1');
     } catch (error) {
       runtime.close();
       throw error;
@@ -66,6 +90,9 @@ export async function createServer(options = {}) {
       throw new Error(`Port ${address.port} is blocked for local fetch`);
     }
     authority = localServerAuthority(address);
+    allowedLanAuthorities = lanEnabled
+      ? lanServerAuthorities(lanAddresses, address.port)
+      : [];
     if (!authority) {
       await new Promise((resolveClose) => server.close(resolveClose));
       runtime.close();
@@ -73,7 +100,12 @@ export async function createServer(options = {}) {
     }
 
     server.once('close', runtime.close);
-    return { server, url: `http://${authority}`, app: application };
+    return {
+      server,
+      url: `http://${authority}`,
+      lanUrls: lanEnabled ? lanConsoleUrls(lanAddresses, address.port) : [],
+      app: application
+    };
   }
 
   runtime.close();
@@ -94,8 +126,21 @@ export function isFetchBlockedPort(port) {
   return FETCH_BLOCKED_PORTS.has(Number(port));
 }
 
-async function handleRequest({ request, response, app, authority }) {
-  if (rejectDisallowedRequest({ request, response, authority })) return;
+async function handleRequest({
+  request,
+  response,
+  app,
+  authority,
+  lanAuthorities,
+  lanAccessToken
+}) {
+  if (rejectRequestOutsidePolicy({
+    request,
+    response,
+    authority,
+    lanAuthorities,
+    lanAccessToken
+  })) return;
   if (await handleApiRequest({ request, response, app })) return;
   serveStatic(new URL(request.url, 'http://127.0.0.1').pathname, response);
 }
@@ -110,7 +155,13 @@ if (process.argv[1] && fileURLToPath(import.meta.url) === process.argv[1]) {
 async function runProgram(args) {
   const runtimeOptions = resolveGraphRuntimeOptions(args, process.env);
   const port = numberOption(args, '--port', DEFAULT_FULI_PORT);
-  const { server, url } = await createServer({ ...runtimeOptions, port });
+  const lan = args.includes('--lan');
+  const { server, url, lanUrls } = await createServer({
+    ...runtimeOptions,
+    port,
+    lan,
+    lanAccessToken: lan ? process.env.FULI_LAN_ACCESS_TOKEN : null
+  });
   const handlers = new Map();
   const close = () => server.close();
   for (const signal of ['SIGINT', 'SIGTERM']) {
@@ -122,6 +173,14 @@ async function runProgram(args) {
     for (const [signal, handler] of handlers) process.off(signal, handler);
   });
   console.log(`复利工作台 running at ${url}`);
+  for (const lanUrl of lanUrls) console.log(`复利工作台 LAN at ${lanUrl}`);
+}
+
+function requiredLanToken(value) {
+  if (typeof value !== 'string' || value.length < 16) {
+    throw new TypeError('LAN mode requires a generated access token');
+  }
+  return value;
 }
 
 function numberOption(args, flag, fallback) {

package/src/setup/graph-runtime.js

@@ -15,6 +15,11 @@ import {
   ensureContainerRuntime,
   runDockerCompose
 } from './container-runtime.js';
+import {
+  discoverLanAddresses,
+  LAN_ACCESS_USERNAME,
+  lanConsoleUrls
+} from '../server/lan-access.js';
 import { readJsonFile, writeJsonFileAtomic } from '../storage/json-file.js';
 
 export {
@@ -30,6 +35,11 @@ export const MANAGED_WORKSPACE_PROVIDER_URL = WORKSPACE_PROVIDER_URL;
 
 export async function ensureGraphRuntime(input, dependencies = {}) {
   const deps = graphDependencies(dependencies);
+  const lan = input.lan === true;
+  const lanAddresses = lan ? deps.discoverLanAddresses() : [];
+  if (lan && lanAddresses.length === 0) {
+    throw new Error('未发现可用的私有 IPv4 局域网地址，无法启动 LAN 模式。');
+  }
   const containerRuntime = await deps.ensureContainerRuntime({
     env: input.env ?? process.env,
     onProgress: input.onProgress
@@ -61,33 +71,52 @@ export async function ensureGraphRuntime(input, dependencies = {}) {
   const existing = deps.readState(input.paths.graphRuntimeStatePath);
   if (isGraphRuntimeState(existing) && deps.isProcessAlive(existing.pid)) {
     const healthy = await deps.webHealth(existing.url, existing.pid, existing.version);
-    if (healthy && existing.port === input.port) {
-      return { status: 'running', url: existing.url, pid: existing.pid };
+    if (
+      healthy &&
+      existing.port === input.port &&
+      exposureMatches(existing, { lan, lanAddresses })
+    ) {
+      return runtimeResult('running', existing);
     }
     if (!healthy) throw new Error('Recorded Fuli Graphiti runtime is not healthy');
     deps.stopProcess(existing.pid);
+    if (!await deps.waitForExit(existing.pid)) {
+      throw new Error('Fuli Graphiti console did not stop before changing exposure mode');
+    }
   }
+  const lanAccessToken = lan ? deps.createLanAccessToken() : null;
   const child = deps.spawnWebRuntime({
     paths: input.paths,
     nodePath: process.execPath,
-    port: input.port
+    port: input.port,
+    lan,
+    lanAccessToken,
+    env: input.env ?? process.env
   });
   const url = `http://127.0.0.1:${input.port}`;
   if (!Number.isInteger(child.pid) || !await waitForWeb(url, child.pid, deps)) {
     if (Number.isInteger(child.pid)) deps.stopProcess(child.pid);
     throw new Error('Fuli Graphiti console could not start');
   }
-  deps.writeState(input.paths.graphRuntimeStatePath, {
+  const state = {
     version: 3,
     pid: child.pid,
     url,
     port: input.port,
+    ...(lan
+      ? {
+          lan: true,
+          lanUrls: lanConsoleUrls(lanAddresses, input.port)
+        }
+      : {}),
     managedProviders: input.personalOnly
       ? ['personal']
       : ['personal', 'development-workspace'],
     startedAt: new Date().toISOString()
-  });
-  return { status: 'started', url, pid: child.pid };
+  };
+  deps.writeState(input.paths.graphRuntimeStatePath, state);
+  deps.secureFile(input.paths.graphRuntimeStatePath);
+  return runtimeResult('started', state, lanAccessToken);
 }
 
 function ensureProviderSecrets(path, deps) {
@@ -250,14 +279,19 @@ function spawnWebRuntime(input) {
   mkdirSync(dirname(input.paths.logPath), { recursive: true });
   const log = openSync(input.paths.logPath, 'a');
   try {
-    const child = spawn(input.nodePath, [
+    const args = [
       input.paths.serverPath,
       '--runtime-config', input.paths.graphRuntimeConfigPath,
       '--port', String(input.port)
-    ], {
+    ];
+    if (input.lan) args.push('--lan');
+    const child = spawn(input.nodePath, args, {
       detached: true,
       windowsHide: true,
-      stdio: ['ignore', log, log]
+      stdio: ['ignore', log, log],
+      env: input.lan
+        ? { ...input.env, FULI_LAN_ACCESS_TOKEN: input.lanAccessToken }
+        : input.env
     });
     child.unref();
     return child;
@@ -292,6 +326,9 @@ function graphDependencies(overrides) {
     stopProcess,
     stopLegacyService,
     webHealth: checkLocalConsoleHealth,
+    discoverLanAddresses,
+    createLanAccessToken: secret,
+    waitForExit: waitForProcessExit,
     ...overrides
   };
 }
@@ -323,6 +360,30 @@ function isGraphRuntimeState(state) {
     Number.isInteger(state.pid) && typeof state.url === 'string';
 }
 
+function exposureMatches(state, { lan }) {
+  if ((state.lan === true) !== lan) return false;
+  if (!lan) return true;
+  // A repeated explicit LAN start rotates the in-memory access code.
+  return false;
+}
+
+function runtimeResult(status, state, lanAccessToken = null) {
+  const result = { status, url: state.url, pid: state.pid };
+  if (state.lan !== true) return result;
+  if (typeof lanAccessToken !== 'string' || lanAccessToken.length < 16) {
+    throw new Error('LAN runtime started without a valid access code');
+  }
+  return {
+    ...result,
+    lan: true,
+    lanUrls: [...state.lanUrls],
+    lanAccess: {
+      username: LAN_ACCESS_USERNAME,
+      accessCode: lanAccessToken
+    }
+  };
+}
+
 function stopLegacyService() {
   if (process.platform !== 'darwin') return;
   spawnSync('launchctl', ['remove', 'dev.jevonscode.fuli.local'], {
@@ -355,6 +416,14 @@ function stopProcess(pid) {
   try { process.kill(pid, 'SIGTERM'); } catch { /* already stopped */ }
 }
 
+async function waitForProcessExit(pid) {
+  for (let attempt = 0; attempt < 50; attempt += 1) {
+    if (!isProcessAlive(pid)) return true;
+    await delay(100);
+  }
+  return false;
+}
+
 function delay(ms) {
   return new Promise((resolve) => setTimeout(resolve, ms));
 }

package/dist/web/assets/KnowledgeOrganizerPage-CJCNI2Wd.css

@@ -1 +0,0 @@
-.batch-confirm-dialog[data-v-5b6ea24b]{width:min(980px,100vw - 64px)}.batch-confirm-form[data-v-5b6ea24b]{grid-template-columns:320px minmax(0,1fr);gap:24px;padding-top:20px;display:grid}.batch-confirm-controls[data-v-5b6ea24b]{align-content:start;gap:14px;display:grid}.batch-confirm-controls>label[data-v-5b6ea24b],.batch-confirmer-fields label[data-v-5b6ea24b]{color:#5f6962;gap:6px;font-size:10px;font-weight:600;display:grid}.batch-confirm-controls[data-v-5b6ea24b] .searchable-select{width:100%}.batch-group-summary[data-v-5b6ea24b]{border-top:1px solid #e1e5e2;border-bottom:1px solid #e1e5e2;gap:4px;padding:12px 0;display:grid}.batch-group-summary span[data-v-5b6ea24b],.batch-group-summary small[data-v-5b6ea24b]{color:#89918b;font-size:8px}.batch-group-summary strong[data-v-5b6ea24b]{color:#35443b;font-size:12px}.batch-group-summary p[data-v-5b6ea24b]{color:#6e7871;font-size:9px;line-height:1.5}.batch-confirmer-fields[data-v-5b6ea24b]{grid-template-columns:112px minmax(0,1fr);gap:8px;display:grid}.batch-confirm-rule[data-v-5b6ea24b],.batch-limit-note[data-v-5b6ea24b]{color:#7c857f;font-size:9px;line-height:1.5}.batch-confirm-review[data-v-5b6ea24b]{border-left:1px solid #e1e5e2;min-width:0;padding-left:24px}.batch-review-heading[data-v-5b6ea24b]{justify-content:space-between;align-items:center;gap:16px;padding-bottom:10px;display:flex}.batch-review-heading h4[data-v-5b6ea24b]{color:#344239;font-size:13px}.batch-review-heading p[data-v-5b6ea24b]{color:#858e87;margin-top:2px;font-size:9px}.batch-review-list[data-v-5b6ea24b]{border-top:1px solid #e3e6e3;border-bottom:1px solid #e3e6e3;max-height:410px;overflow:auto}.batch-review-item[data-v-5b6ea24b]{cursor:pointer;border-bottom:1px solid #eceeec;grid-template-columns:auto minmax(0,1fr);gap:9px;padding:10px 2px;display:grid}.batch-review-item[data-v-5b6ea24b]:last-child{border-bottom:0}.batch-review-item>input[data-v-5b6ea24b]{margin-top:2px}.batch-review-item>span[data-v-5b6ea24b]{gap:3px;min-width:0;display:grid}.batch-review-item strong[data-v-5b6ea24b]{color:#3a4740;font-size:10px}.batch-review-item small[data-v-5b6ea24b]{color:#77817a;font-size:8px}.batch-review-item em[data-v-5b6ea24b]{color:#848d87;text-overflow:ellipsis;white-space:nowrap;font-size:8px;font-style:normal;line-height:1.4;overflow:hidden}.batch-confirm-acknowledgement[data-v-5b6ea24b]{color:#4f5d55;cursor:pointer;align-items:flex-start;gap:8px;margin-top:12px;font-size:9px;line-height:1.5;display:flex}.batch-confirm-form>.publish-dialog-error[data-v-5b6ea24b],.batch-confirm-form>.publish-dialog-actions[data-v-5b6ea24b]{grid-column:1/-1}@media (width<=820px){.batch-confirm-form[data-v-5b6ea24b]{grid-template-columns:1fr}.batch-confirm-review[data-v-5b6ea24b]{border-left:0;padding:0}}.knowledge-organizer[data-v-e7137842]{flex-direction:column;gap:12px;padding:18px 24px 20px;display:flex;overflow:hidden}.organizer-head[data-v-e7137842]{grid-template-columns:minmax(0,1fr) auto;align-items:center;gap:12px 24px;min-width:0;display:grid}.organizer-principle[data-v-e7137842]{align-self:center;min-width:0;padding:0 2px}.organizer-principle h3[data-v-e7137842]{font-size:16px}.organizer-principle>p[data-v-e7137842]:last-child{color:#6e7771;max-width:760px;margin-top:5px;font-size:11px;line-height:1.55}.organizer-attention[data-v-e7137842]{text-align:right;border-left:1px solid #dde2de;grid-area:1/2;min-width:152px;padding-left:20px}.organizer-attention strong[data-v-e7137842],.organizer-attention span[data-v-e7137842],.organizer-attention small[data-v-e7137842]{display:block}.organizer-attention strong[data-v-e7137842]{color:#6f582b;font-size:23px;font-weight:620}.organizer-attention span[data-v-e7137842]{color:#5f675f;font-size:10px;font-weight:650}.organizer-attention small[data-v-e7137842]{color:#8a918b;margin-top:2px;font-size:8px}.organizer-loading-inline[data-v-e7137842]{color:#7b847e;text-align:center;font-size:10px}.organizer-toolbar[data-v-e7137842]{align-items:center;gap:8px;min-height:34px;display:flex}.organizer-search[data-v-e7137842]{flex:300px;min-width:180px;max-width:360px}.organizer-search>span[data-v-e7137842]{clip:rect(0 0 0 0);width:1px;height:1px;position:absolute;overflow:hidden}.organizer-search input[data-v-e7137842]{width:100%}.review-state-filter[data-v-e7137842],.quadrant-filter[data-v-e7137842]{white-space:nowrap;background:#f1f4f1;border:1px solid #d7ddd8;border-radius:7px;flex:none;align-items:center;gap:2px;height:31px;padding:2px;display:flex}.quadrant-filter[data-v-e7137842]{max-width:470px;overflow-x:auto}.review-state-filter>span[data-v-e7137842],.quadrant-filter>span[data-v-e7137842]{color:#7a847d;padding:0 6px;font-size:8px;font-weight:650}.review-state-filter button[data-v-e7137842],.quadrant-filter button[data-v-e7137842]{color:#626d66;white-space:nowrap;background:0 0;border:0;border-radius:5px;height:25px;padding:0 7px;font-size:9px}.review-state-filter button[data-v-e7137842]:hover,.quadrant-filter button[data-v-e7137842]:hover{color:#35473d;background:#ffffffa8}.review-state-filter button.active[data-v-e7137842],.quadrant-filter button.active[data-v-e7137842]{color:#30483a;background:#fff;box-shadow:0 1px 3px #2f3d341f}.review-state-filter button.state-pending.active[data-v-e7137842]{color:#765d2e}.review-state-filter button.state-agent_confirmed.active[data-v-e7137842]{color:#4d5f78}.review-state-filter button.state-confirmed.active[data-v-e7137842]{color:#356047}.review-state-filter button strong[data-v-e7137842],.quadrant-filter button strong[data-v-e7137842]{margin-left:2px;font-size:8px;font-weight:720}.organizer-result-summary[data-v-e7137842]{color:#7b847e;white-space:nowrap;flex:none;font-size:9px}.organizer-toolbar .batch-confirm-action[data-v-e7137842]{margin-left:auto}.organizer-toolbar .toolbar-action+.toolbar-action[data-v-e7137842]{margin-left:0}.organizer-truncated[data-v-e7137842]{color:#806536;margin:-4px 0 0;font-size:9px}.organizer-layout[data-v-e7137842]{background:#fff;border:1px solid #cfd7d1;border-radius:8px;flex:1;grid-template-columns:minmax(0,1fr);min-height:0;display:grid;overflow:hidden}.organizer-layout.has-selection[data-v-e7137842]{grid-template-columns:minmax(0,1fr) 340px}.organizer-layout[data-v-e7137842]:not(.has-selection) .graph-inspector{display:none}.organizer-directory[data-v-e7137842]{overscroll-behavior:contain;min-width:0;overflow:auto}.organizer-table-head[data-v-e7137842],.organizer-row[data-v-e7137842]{grid-template-columns:minmax(230px,1.35fr) 114px 130px minmax(160px,.8fr) 118px;align-items:center;gap:12px;min-width:920px;display:grid}.organizer-table-head[data-v-e7137842]{z-index:2;color:#8b938d;background:#f7f8f6;border-bottom:1px solid #e0e4e0;padding:10px 15px;font-size:9px;font-weight:680;position:sticky;top:0}.organizer-row[data-v-e7137842]{color:#4f5952;text-align:left;background:#fff;border:0;border-bottom:1px solid #e8ebe8;width:100%;min-height:68px;padding:11px 15px}.organizer-row[data-v-e7137842]:hover{background:#f8faf8}.organizer-row.selected[data-v-e7137842]{background:#f1f6f3;box-shadow:inset 2px 0 #557863}.organizer-item-copy[data-v-e7137842]{gap:4px;min-width:0;display:grid}.organizer-item-copy strong[data-v-e7137842],.organizer-item-copy small[data-v-e7137842]{text-overflow:ellipsis;white-space:nowrap;overflow:hidden}.organizer-item-copy strong[data-v-e7137842]{color:#2f3933;font-size:11px;font-weight:630}.organizer-item-copy small[data-v-e7137842],.organizer-basis[data-v-e7137842],.organizer-row time[data-v-e7137842]{color:#7b847e;font-size:9px}.quadrant-chip[data-v-e7137842],.review-chip[data-v-e7137842]{white-space:nowrap;border-radius:999px;width:fit-content;padding:4px 7px;font-size:9px;font-weight:650}.quadrant-chip[data-v-e7137842]{color:#59655e;background:#f0f2ef;gap:1px;display:grid}.quadrant-chip small[data-v-e7137842]{color:inherit;opacity:.75;font-size:7px;font-weight:520}.quadrant-chip.known_known[data-v-e7137842]{color:#356047;background:#edf6f0}.quadrant-chip.known_unknown[data-v-e7137842]{color:#77602f;background:#f7f2e5}.quadrant-chip.unknown_known[data-v-e7137842]{color:#4d5f78;background:#eef2f7}.quadrant-chip.unknown_unknown[data-v-e7137842]{color:#725d70;background:#f5eff4}.review-chip.state-confirmed[data-v-e7137842]{color:#356047;background:#edf6f0}.review-chip.state-agent_confirmed[data-v-e7137842]{color:#4d5f78;background:#eef2f7}.review-chip.state-pending[data-v-e7137842]{color:#77602f;background:#f7f2e5}.organizer-basis[data-v-e7137842]{overflow-wrap:anywhere}@media (width<=1260px){.review-state-filter>span[data-v-e7137842],.quadrant-filter>span[data-v-e7137842],.organizer-result-summary[data-v-e7137842]{display:none}.organizer-table-head[data-v-e7137842],.organizer-row[data-v-e7137842]{grid-template-columns:minmax(210px,1fr) 108px 104px minmax(140px,.8fr) 104px;min-width:760px}}@media (width<=1040px){.organizer-layout.has-selection[data-v-e7137842]{grid-template-columns:minmax(0,1fr) 280px}.organizer-table-head[data-v-e7137842],.organizer-row[data-v-e7137842]{grid-template-columns:minmax(210px,1fr) 108px 104px;min-width:470px}.organizer-table-head[data-v-e7137842]>:nth-child(n+4),.organizer-basis[data-v-e7137842],.organizer-row time[data-v-e7137842]{display:none}.batch-confirm-action[data-v-e7137842]{text-overflow:ellipsis;white-space:nowrap;max-width:108px;overflow:hidden}}