openlearn-next 0.7.6 → 0.7.8

package/dist/server.cjs

@@ -916,7 +916,12 @@ var init_manifest_schema = __esm({
     teacherPanelSchema = import_zod.z.object({
       id: import_zod.z.string().min(1),
       title: import_zod.z.string().min(1),
-      icon: import_zod.z.string().optional()
+      icon: import_zod.z.string().optional(),
+      // v0.7.6 双轨制 UI：第三方 ZIP 插件在 process 模式下无法传 React 组件，
+      // 只能声明可视沙箱 HTML 的相对路径。此处必须显式列出 —— zod 的 object
+      // 默认 strip 未声明键，漏声明会让 view 在 parse() 后被静默丢弃，
+      // 宿主便退回「占位空态」，插件作者看到的是空白面板且无任何报错。
+      view: import_zod.z.string().min(1).optional()
     });
     studentFullscreenSchema = import_zod.z.object({
       id: import_zod.z.string().min(1),
@@ -994,7 +999,11 @@ var init_manifest_schema = __esm({
           id: import_zod.z.string().min(1),
           label: import_zod.z.string().min(1),
           icon: import_zod.z.string().optional(),
-          position: import_zod.z.number().int().optional()
+          position: import_zod.z.number().int().optional(),
+          // 可视沙箱视图（v0.7.6+）。同 teacherPanelSchema.view：漏声明 = 被 strip，
+          // 第三方插件的教师页签会退化成空白占位。
+          view: import_zod.z.string().min(1).optional(),
+          route: import_zod.z.string().optional()
         })
       ).optional(),
       "teacher.dashboard.widget": import_zod.z.array(
@@ -1002,7 +1011,8 @@ var init_manifest_schema = __esm({
           id: import_zod.z.string().min(1),
           label: import_zod.z.string().min(1),
           icon: import_zod.z.string().optional(),
-          position: import_zod.z.number().int().optional()
+          position: import_zod.z.number().int().optional(),
+          view: import_zod.z.string().min(1).optional()
         })
       ).optional(),
       "student.view": import_zod.z.array(
@@ -1010,14 +1020,17 @@ var init_manifest_schema = __esm({
           id: import_zod.z.string().min(1),
           label: import_zod.z.string().min(1),
           icon: import_zod.z.string().optional(),
-          route: import_zod.z.string().optional()
+          route: import_zod.z.string().optional(),
+          // 可视沙箱视图（v0.7.6+）。学生端同理：process 模式只能走 HTML 页面。
+          view: import_zod.z.string().min(1).optional()
         })
       ).optional(),
       "student.lesson.tool": import_zod.z.array(
         import_zod.z.object({
           id: import_zod.z.string().min(1),
           label: import_zod.z.string().min(1),
-          icon: import_zod.z.string().optional()
+          icon: import_zod.z.string().optional(),
+          view: import_zod.z.string().min(1).optional()
         })
       ).optional(),
       // E-1：补全 contribution-registry.ts 已定义的全部服务端 slot
@@ -4587,14 +4600,33 @@ function wrapProcessManager(processService, tracker, pluginId, processOwnerLooku
     })
   };
 }
-function wrapActionRegistry(actionRegistry, tracker, pluginId) {
+function wrapActionRegistry(actionRegistry, tracker, pluginId, manifestId) {
+  const prefix = manifestId || pluginId;
+  const isKernel = prefix.startsWith("@openlearn/");
   return {
     register: createSafeFunction((descriptor) => {
-      return Promise.resolve(actionRegistry.register(descriptor)).then(() => {
+      const commandType = descriptor.commandType;
+      const prefixed = isKernel || !commandType || commandType.startsWith(`${prefix}.`) ? commandType : `${prefix}.${commandType}`;
+      const effectiveDescriptor = prefixed !== commandType ? { ...descriptor, commandType: prefixed } : descriptor;
+      return Promise.resolve(actionRegistry.register(effectiveDescriptor)).then(() => {
+        if (prefixed !== commandType) {
+          Promise.resolve(
+            actionRegistry.register({
+              ...descriptor,
+              id: `${descriptor.id}__raw_alias`,
+              exposeToAgent: false
+            })
+          ).catch(() => {
+          });
+        }
         tracker.track(pluginId, {
           dispose: () => {
-            Promise.resolve(actionRegistry.unregister(descriptor.id)).catch(() => {
+            Promise.resolve(actionRegistry.unregister(effectiveDescriptor.id)).catch(() => {
             });
+            if (prefixed !== commandType) {
+              Promise.resolve(actionRegistry.unregister(`${descriptor.id}__raw_alias`)).catch(() => {
+              });
+            }
           }
         });
       });
@@ -4835,7 +4867,7 @@ async function buildContext(serviceRegistry, tracker, pluginId, manifest, db2, s
     // 可选方法，mock 或旧部署可缺省 —— 缺省时 isOwnProcess 退化为「不拦截」，与旧行为一致。
     typeof processService.getProcessOwner === "function" ? (processId) => processService.getProcessOwner(processId) : void 0
   );
-  const wrappedActionRegistry = wrapActionRegistry(actionRegistryService, tracker, pluginId);
+  const wrappedActionRegistry = wrapActionRegistry(actionRegistryService, tracker, pluginId, manifest.id);
   const wrappedCapability = wrapCapability(capabilityService);
   const wrappedStorage = wrapStorage(storageService, db2, manifest.id);
   const wrappedAI = wrapAI(aiService, pluginId, tracker);
@@ -8480,10 +8512,28 @@ var init_service_host = __esm({
             const actionRegistry = service;
             if (msg.method === "register") {
               const [descriptor] = effectiveArgs;
-              await actionRegistry.register(descriptor);
-              this.registeredActionIds.add(descriptor.id);
-              if (typeof descriptor?.commandType === "string") {
-                this.registeredActionCommandTypes.set(descriptor.id, descriptor.commandType);
+              const pluginId = this.pluginId || this.pluginActorId.replace(/^plugin:/, "");
+              const isKernel = pluginId.startsWith("@openlearn/");
+              const rawCommandType = descriptor.commandType;
+              const prefixed = isKernel || !rawCommandType || rawCommandType.startsWith(`${pluginId}.`) ? rawCommandType : resolvePluginCommandType(rawCommandType, pluginId);
+              const effectiveDescriptor = prefixed !== rawCommandType ? { ...descriptor, commandType: prefixed } : descriptor;
+              await actionRegistry.register(effectiveDescriptor);
+              this.registeredActionIds.add(effectiveDescriptor.id);
+              if (typeof effectiveDescriptor?.commandType === "string") {
+                this.registeredActionCommandTypes.set(effectiveDescriptor.id, effectiveDescriptor.commandType);
+              }
+              if (prefixed !== rawCommandType) {
+                try {
+                  const aliasId = `${descriptor.id}__raw_alias`;
+                  await actionRegistry.register({
+                    ...descriptor,
+                    id: aliasId,
+                    exposeToAgent: false
+                  });
+                  this.registeredActionIds.add(aliasId);
+                  this.registeredActionCommandTypes.set(aliasId, rawCommandType);
+                } catch {
+                }
               }
               transport.postMessage({
                 type: "result",
@@ -8494,8 +8544,14 @@ var init_service_host = __esm({
             } else if (msg.method === "unregister") {
               const [actionId] = msg.args;
               await actionRegistry.unregister(actionId);
+              try {
+                await actionRegistry.unregister(`${actionId}__raw_alias`);
+              } catch {
+              }
               this.registeredActionIds.delete(actionId);
+              this.registeredActionIds.delete(`${actionId}__raw_alias`);
               this.registeredActionCommandTypes.delete(actionId);
+              this.registeredActionCommandTypes.delete(`${actionId}__raw_alias`);
               transport.postMessage({
                 type: "result",
                 invokeId: msg.invokeId,
@@ -15228,6 +15284,26 @@ var BuiltinPlugin = {
       "page_meta"
       // 分页与大纲元数据
     ];
+    const isAllowedElementType = (type) => {
+      if (!type || typeof type !== "string") return false;
+      if (KNOWN_ELEMENT_TYPES2.includes(type)) return true;
+      if (type.includes("/") || type.startsWith("plugin:") || type.startsWith("ext-") || type.startsWith("plugin-")) {
+        return true;
+      }
+      try {
+        const reg = pluginHost?.getContributionRegistry?.();
+        if (reg) {
+          const paletteItems = reg.getBySlot("editor.palette_item") || [];
+          if (paletteItems.some((item) => item.type === type || item.id === type)) return true;
+          const renderers = reg.getBySlot("whiteboard.renderer") || [];
+          if (renderers.some((item) => item.targetType === type || item.id === type || item.elementType === type)) {
+            return true;
+          }
+        }
+      } catch {
+      }
+      return false;
+    };
     await actionRegistry.register({
       id: "core-whiteboard-draw",
       commandType: drawWhiteboardCmdType,
@@ -15251,8 +15327,8 @@ var BuiltinPlugin = {
     await commandBus.registerHandler(drawWhiteboardCmdType, {
       async execute(command) {
         const payload = command.payload;
-        if (!KNOWN_ELEMENT_TYPES2.includes(payload.type)) {
-          const hint = payload.type === "quiz" ? "" : payload.type && (payload.type.includes("quiz") || payload.type.includes("question")) ? ` \u63D0\u793A\uFF1A\u521B\u5EFA\u6D4B\u9A8C\u8BF7\u4F7F\u7528 quiz.create \u6216 quiz_pro.create \u5DE5\u5177\u3002` : ` \u5DF2\u77E5\u7C7B\u578B\uFF1A${KNOWN_ELEMENT_TYPES2.join(", ")}\u3002`;
+        if (!isAllowedElementType(payload.type)) {
+          const hint = payload.type === "quiz" ? "" : payload.type && (payload.type.includes("quiz") || payload.type.includes("question")) ? ` \u63D0\u793A\uFF1A\u521B\u5EFA\u6D4B\u9A8C\u8BF7\u4F7F\u7528 quiz.create \u6216 quiz_pro.create \u5DE5\u5177\u3002` : ` \u5DF2\u77E5\u7C7B\u578B\uFF1A${KNOWN_ELEMENT_TYPES2.join(", ")}\uFF0C\u6216\u63D2\u4EF6\u6269\u5C55\u56FE\u5143 (\u5982 ext-xxx/yyy)\u3002`;
           throw new Error(`\u4E0D\u652F\u6301\u7684\u5143\u7D20\u7C7B\u578B "${payload.type}"\u3002${hint}`);
         }
         const elementId = (0, import_uuid7.v7)();
@@ -15494,7 +15570,7 @@ var BuiltinPlugin = {
         );
         const batchInsert = db2.transaction(() => {
           for (const el of elements) {
-            if (!KNOWN_ELEMENT_TYPES2.includes(el.type)) {
+            if (!isAllowedElementType(el.type)) {
               throw new Error(`\u4E0D\u652F\u6301\u7684\u5143\u7D20\u7C7B\u578B "${el.type}"\u3002\u5DF2\u77E5\u7C7B\u578B\uFF1A${KNOWN_ELEMENT_TYPES2.join(", ")}`);
             }
             const elementId = (0, import_uuid7.v7)();
@@ -19027,6 +19103,19 @@ function trustedInlineAllowlist(env = process.env) {
     (env.OPENLEARN_TRUSTED_INLINE_PLUGINS ?? "").split(",").map((item) => item.trim()).filter((item) => item.length > 0)
   );
 }
+function matchesTrustedInlinePattern(pattern, manifestId) {
+  if (!manifestId) return false;
+  if (pattern === "*") return true;
+  if (pattern.endsWith("*")) return manifestId.startsWith(pattern.slice(0, -1));
+  return pattern === manifestId;
+}
+function isInTrustedInlineAllowlist(manifestId, env = process.env) {
+  if (!manifestId) return false;
+  for (const pattern of trustedInlineAllowlist(env)) {
+    if (matchesTrustedInlinePattern(pattern, manifestId)) return true;
+  }
+  return false;
+}
 function builtinPluginsDir() {
   try {
     const url = import_meta5.url;
@@ -19049,7 +19138,7 @@ function isInsideBuiltinPluginsDir(sourcePath, builtinDir = builtinPluginsDir())
 }
 function isTrustedInProcessPlugin(manifestId, env = process.env, sourcePath) {
   if (isInsideBuiltinPluginsDir(sourcePath)) return true;
-  if (manifestId && trustedInlineAllowlist(env).has(manifestId)) return true;
+  if (isInTrustedInlineAllowlist(manifestId, env)) return true;
   if (env.VITEST && env.OPENLEARN_ENFORCE_PLUGIN_ISOLATION !== "1") return true;
   return false;
 }
@@ -21037,7 +21126,7 @@ var import_node_fs11 = __toESM(require("node:fs"), 1);
 var import_node_path13 = __toESM(require("node:path"), 1);
 var import_node_url5 = require("node:url");
 var import_meta7 = {};
-var FALLBACK_VERSION = "0.7.6";
+var FALLBACK_VERSION = "0.7.8";
 function readPlatformVersion() {
   const bases = [];
   if (typeof __dirname !== "undefined") bases.push(__dirname);
@@ -32843,11 +32932,17 @@ function validateStartupEnv(env = process.env) {
         severity: "warning",
         message: "OPENLEARN_TRUSTED_INLINE_PLUGINS \u53EA\u542B\u7A7A\u767D/\u9017\u53F7\uFF0C\u7B49\u540C\u4E8E\u672A\u914D\u7F6E\u3002"
       });
+    } else if (ids.includes("*")) {
+      warnings.push({
+        key: "OPENLEARN_TRUSTED_INLINE_PLUGINS",
+        severity: "warning",
+        message: "OPENLEARN_TRUSTED_INLINE_PLUGINS \u542B\u901A\u914D\u7B26 `*`\uFF1A**\u6240\u6709**\u63D2\u4EF6\u90FD\u88AB\u89C6\u4E3A\u53D7\u4FE1\uFF0C\u53EF\u5728\u8FDB\u7A0B\u5185\u4EE5 inline/worker \u8FD0\u884C\uFF08\u542B\u65E5\u540E\u5B89\u88C5\u7684\u4EFB\u610F\u7B2C\u4E09\u65B9\u5305\uFF09\u3002\u5B83\u4EEC\u4E0E\u5BBF\u4E3B\u5171\u4EAB\u73AF\u5883\u53D8\u91CF\u4E0E\u7F51\u7EDC\u6808\uFF0C\u51FA\u7AD9\u7F51\u7EDC\u62E6\u622A\u5BF9\u5B83\u4EEC\u4E0D\u751F\u6548\uFF0C\u672A\u6355\u83B7\u5F02\u5E38\u53EF\u62D6\u57AE\u670D\u52A1\u3002\u4EC5\u9650\u672C\u5730\u5F00\u53D1\uFF1B\u751F\u4EA7\u73AF\u5883\u8BF7\u6539\u4E3A\u7CBE\u786E id \u6216\u524D\u7F00\u5F0F\uFF08\u5982 `@ext/*`\uFF09\u3002"
+      });
     } else if (isProduction) {
       warnings.push({
         key: "OPENLEARN_TRUSTED_INLINE_PLUGINS",
         severity: "warning",
-        message: `\u751F\u4EA7\u73AF\u5883\u4FE1\u4EFB\u4E86 ${ids.length} \u4E2A\u63D2\u4EF6\u5728**\u8FDB\u7A0B\u5185**\u8FD0\u884C\uFF1A${ids.join(", ")}\u3002 \u5B83\u4EEC\u4E0E\u5BBF\u4E3B\u5171\u4EAB\u73AF\u5883\u53D8\u91CF\u4E0E\u7F51\u7EDC\u6808\uFF0C\u51FA\u7AD9\u7F51\u7EDC\u62E6\u622A\u5BF9\u5B83\u4EEC\u4E0D\u751F\u6548\u3002 \u786E\u8BA4\u8FD9\u662F\u6709\u610F\u4E3A\u4E4B\uFF1B\u5426\u5219\u6E05\u7A7A\u8BE5\u53D8\u91CF\u8BA9\u5B83\u4EEC\u56DE\u5230 process \u5B50\u8FDB\u7A0B\u9694\u79BB\u3002`
+        message: `\u751F\u4EA7\u73AF\u5883\u4FE1\u4EFB\u4E86 ${ids.length} \u4E2A\u6761\u76EE\u5728**\u8FDB\u7A0B\u5185**\u8FD0\u884C\uFF1A${ids.join(", ")}\u3002 \u5B83\u4EEC\u4E0E\u5BBF\u4E3B\u5171\u4EAB\u73AF\u5883\u53D8\u91CF\u4E0E\u7F51\u7EDC\u6808\uFF0C\u51FA\u7AD9\u7F51\u7EDC\u62E6\u622A\u5BF9\u5B83\u4EEC\u4E0D\u751F\u6548\u3002 \u786E\u8BA4\u8FD9\u662F\u6709\u610F\u4E3A\u4E4B\uFF1B\u5426\u5219\u6E05\u7A7A\u8BE5\u53D8\u91CF\u8BA9\u5B83\u4EEC\u56DE\u5230 process \u5B50\u8FDB\u7A0B\u9694\u79BB\u3002`
       });
     }
   }
@@ -33671,6 +33766,7 @@ var normalizeToolSchema = (schema) => {
 };
 var buildOpenAITools = (callerRole) => {
   let actions = kernelContainer.actionRegistry.getAllActions();
+  actions = actions.filter((action) => action.exposeToAgent !== false);
   if (callerRole === "student") {
     actions = actions.filter((action) => {
       const cap = action.capabilityRequired || "";
@@ -34628,7 +34724,7 @@ function renderPrometheusMetrics(now = Date.now(), sample) {
 // server/middleware/request-observability.ts
 var REQUEST_ID_RE = /^[A-Za-z0-9._:-]{8,64}$/;
 var QUIET_PATHS = /* @__PURE__ */ new Set(["/health", "/health/ready", "/", "/index.html", "/favicon.ico", "/robots.txt"]);
-var DEV_QUIET_PREFIXES = ["/@vite/", "/@fs/", "/src/", "/node_modules/", "/@id/"];
+var DEV_QUIET_PREFIXES = ["/@vite/", "/@fs/", "/src/", "/node_modules/", "/@id/", "/.vite-cache/"];
 var DEFAULT_HTTP_SLOW_MS = 1e3;
 function resolveHttpAccessLogMode(envAccessLog = process.env.HTTP_ACCESS_LOG, envLogLevel = process.env.LOG_LEVEL) {
   const normalized = envAccessLog?.trim().toLowerCase();
@@ -36080,6 +36176,142 @@ post({ type: 'ready' });
 </script>
 </body></html>`;
 
+// server/utils/plugin-view-bridge.ts
+var PLUGIN_VIEW_CSP = "sandbox allow-scripts allow-forms allow-downloads; frame-ancestors 'self'; default-src 'self' 'unsafe-inline' data: blob: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' data: blob: https:; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' data: blob: https:; style-src-attr 'unsafe-inline'; connect-src 'self' blob: data: https:;";
+var PLUGIN_VIEW_BRIDGE_JS = `(function () {
+  'use strict';
+  const CHANNEL = 'ol-plugin-view';
+  let targetOrigin = '*';
+  const pending = new Map();
+  const initCallbacks = [];
+  const contextUpdateCallbacks = [];
+  let currentContext = null;
+
+  function post(msg) {
+    if (window.parent && window.parent !== window) {
+      window.parent.postMessage(Object.assign({ channel: CHANNEL }, msg), targetOrigin);
+    }
+  }
+
+  function call(op, args) {
+    const callId = Math.random().toString(16).slice(2) + Date.now().toString(16);
+    return new Promise(function (resolve, reject) {
+      pending.set(callId, { resolve: resolve, reject: reject });
+      post({ type: 'call', callId: callId, op: op, args: args || [] });
+    });
+  }
+
+  window.addEventListener('message', function (event) {
+    const data = event.data;
+    if (!data || data.channel !== CHANNEL) return;
+    if (event.source !== window.parent) return;
+
+    if (data.type === 'init') {
+      currentContext = data.payload || {};
+      targetOrigin = event.origin && event.origin !== 'null' ? event.origin : '*';
+      for (let i = 0; i < initCallbacks.length; i++) {
+        try {
+          initCallbacks[i](currentContext);
+        } catch (e) {
+          console.error('[OpenLearnPluginBridge] init callback error:', e);
+        }
+      }
+      return;
+    }
+
+    if (data.type === 'context-update') {
+      currentContext = Object.assign({}, currentContext, data.payload || {});
+      for (let i = 0; i < contextUpdateCallbacks.length; i++) {
+        try {
+          contextUpdateCallbacks[i](currentContext);
+        } catch (e) {
+          console.error('[OpenLearnPluginBridge] contextUpdate callback error:', e);
+        }
+      }
+      return;
+    }
+
+    if (data.type === 'reply') {
+      const waiter = pending.get(data.callId);
+      if (!waiter) return;
+      pending.delete(data.callId);
+      if (data.ok) {
+        waiter.resolve(data.value);
+      } else {
+        waiter.reject(new Error(data.error || 'bridge call failed'));
+      }
+      return;
+    }
+  });
+
+  const bridge = {
+    CHANNEL: CHANNEL,
+    onInit: function (callback) {
+      if (typeof callback === 'function') {
+        if (currentContext) {
+          try {
+            callback(currentContext);
+          } catch (e) {
+            console.error('[OpenLearnPluginBridge] onInit callback error:', e);
+          }
+        }
+        initCallbacks.push(callback);
+      }
+      return bridge;
+    },
+    onContextUpdate: function (callback) {
+      if (typeof callback === 'function') {
+        contextUpdateCallbacks.push(callback);
+      }
+      return bridge;
+    },
+    getContext: function () {
+      return currentContext;
+    },
+    ui: {
+      toast: function (message, type) {
+        return call('ui.toast', [message, type || 'info']);
+      },
+      showToast: function (message, type) {
+        return call('ui.toast', [message, type || 'info']);
+      },
+      resize: function (height) {
+        post({ type: 'resize', height: Number(height) || 0 });
+      },
+    },
+    invokeCommand: function (type, payload) {
+      return call('command.invoke', [type, payload]);
+    },
+    api: {
+      get: function (path) {
+        return call('api.get', [path]);
+      },
+      post: function (path, body) {
+        return call('api.post', [path, body]);
+      },
+      del: function (path) {
+        return call('api.del', [path]);
+      },
+    },
+    storage: {
+      get: function (key) {
+        return call('storage.get', [key]);
+      },
+      set: function (key, value) {
+        return call('storage.set', [key, value]);
+      },
+      delete: function (key) {
+        return call('storage.delete', [key]);
+      },
+    },
+  };
+
+  window.OpenLearnPluginBridge = bridge;
+  // \u901A\u77E5\u5BBF\u4E3B\u89C6\u56FE\u6C99\u7BB1 iframe \u5DF2\u5C31\u7EEA
+  post({ type: 'ready' });
+})();
+`;
+
 // packages/core/bootstrap/adapter/bootstrap-registration.ts
 var BootstrapRegistration = class {
   static registerConfiguration(builder, context) {
@@ -42515,7 +42747,8 @@ async function importCoursePackage(pkg, options) {
   let elements = [];
   try {
     elements = pkg.elements.map((element) => {
-      if (!KNOWN_ELEMENT_TYPES.has(element.type)) {
+      const isAllowed = KNOWN_ELEMENT_TYPES.has(element.type) || typeof element.type === "string" && (element.type.includes("/") || element.type.startsWith("plugin:") || element.type.startsWith("ext-") || element.type.startsWith("plugin-"));
+      if (!isAllowed) {
         throw new Error(`\u8BFE\u7A0B\u5305\u5305\u542B\u4E0D\u652F\u6301\u7684\u767D\u677F\u5143\u7D20\u7C7B\u578B\uFF1A${element.type}`);
       }
       const data = resolveAssetPlaceholders(element.data, materialized);
@@ -43365,6 +43598,14 @@ function sanitizePrivateNotes(raw) {
 }
 
 // server/services/roster-service.ts
+function normalizeStudentGender(value) {
+  if (typeof value !== "string") return null;
+  const v = value.trim().toLowerCase();
+  if (!v) return null;
+  if (["male", "m", "boy", "\u7537", "\u7537\u751F"].includes(v)) return "male";
+  if (["female", "f", "girl", "\u5973", "\u5973\u751F"].includes(v)) return "female";
+  return null;
+}
 var RosterService = class {
   constructor(db2 = kernelContainer.db, readDb, pluginHost) {
     this.db = db2;
@@ -43657,7 +43898,7 @@ var RosterService = class {
     const params = ownerScoped ? [scope.userId || "", scope.username || ""] : [];
     const total = this.reader.prepare(`SELECT COUNT(*) AS n FROM students s ${where}`).get(...params).n;
     const students = this.reader.prepare(
-      `SELECT s.id, s.student_number, s.name, s.email, s.avatar, s.locked_lesson_id, s.lock_mode, s.lock_target, s.private_notes, s.created_at
+      `SELECT s.id, s.student_number, s.name, s.email, s.avatar, s.gender, s.locked_lesson_id, s.lock_mode, s.lock_target, s.private_notes, s.created_at
          FROM students s ${where}
          ORDER BY s.created_at DESC LIMIT ? OFFSET ?`
     ).all(
@@ -43693,6 +43934,7 @@ var RosterService = class {
   }
   createStudent(params) {
     const { name, email, student_number, password } = params;
+    const gender = normalizeStudentGender(params.gender);
     if (!name?.trim()) throw new Error("Student name is required");
     const studentId = randomId();
     let finalNum = student_number && student_number.trim() !== "" ? student_number.trim() : "";
@@ -43709,7 +43951,9 @@ var RosterService = class {
       finalPlain = initialPassword;
     }
     const hashedPassword = hashPassword(finalPlain);
-    this.db.prepare("INSERT INTO students (id, student_number, name, email, password, created_at) VALUES (?, ?, ?, ?, ?, ?)").run(studentId, finalNum, name.trim(), email || "", hashedPassword, Date.now());
+    this.db.prepare(
+      "INSERT INTO students (id, student_number, name, email, password, gender, created_at) VALUES (?, ?, ?, ?, ?, ?, ?)"
+    ).run(studentId, finalNum, name.trim(), email || "", hashedPassword, gender, Date.now());
     return {
       id: studentId,
       student_number: finalNum,
@@ -43718,6 +43962,9 @@ var RosterService = class {
   }
   updateStudent(id, params) {
     const { name, email, student_number, password, locked_lesson_id, lock_mode, lock_target, private_notes } = params;
+    if (params.gender !== void 0) {
+      this.db.prepare("UPDATE students SET gender = ? WHERE id = ?").run(normalizeStudentGender(params.gender), id);
+    }
     if (name) this.db.prepare("UPDATE students SET name = ? WHERE id = ?").run(name.trim(), id);
     if (email !== void 0)
       this.db.prepare("UPDATE students SET email = ? WHERE id = ?").run(email?.trim() || null, id);
@@ -43835,7 +44082,7 @@ var RosterService = class {
   getClassStudents(classId) {
     return this.reader.prepare(
       `
-      SELECT s.id, s.student_number, s.name, s.email, s.avatar, s.locked_lesson_id, s.lock_mode, s.lock_target, s.private_notes, s.created_at, cs.joined_at
+      SELECT s.id, s.student_number, s.name, s.email, s.avatar, s.gender, s.locked_lesson_id, s.lock_mode, s.lock_target, s.private_notes, s.created_at, cs.joined_at
       FROM students s
       INNER JOIN class_students cs ON s.id = cs.student_id
       WHERE cs.class_id = ?
@@ -43896,13 +44143,14 @@ var RosterService = class {
         email,
         studentNumber,
         notes,
+        gender: normalizeStudentGender(st?.gender),
         plainPassword,
         autoPassword,
         hashedPassword: hashPassword(plainPassword)
       });
     }
     const insertStudent = this.db.prepare(
-      "INSERT INTO students (id, student_number, name, email, password, private_notes, created_at) VALUES (?, ?, ?, ?, ?, ?, ?)"
+      "INSERT INTO students (id, student_number, name, email, password, private_notes, gender, created_at) VALUES (?, ?, ?, ?, ?, ?, ?, ?)"
     );
     const findByEmail = this.db.prepare("SELECT id, student_number, name, email FROM students WHERE email = ?");
     const findByNumber = this.db.prepare(
@@ -43929,7 +44177,16 @@ var RosterService = class {
         }
         const studentId = randomId("stu_");
         const finalNum = row.studentNumber || generateStudentNumber(this.db) || `ST_${studentId}`;
-        insertStudent.run(studentId, finalNum, row.name, row.email || null, row.hashedPassword, row.notes || null, now);
+        insertStudent.run(
+          studentId,
+          finalNum,
+          row.name,
+          row.email || null,
+          row.hashedPassword,
+          row.notes || null,
+          row.gender,
+          now
+        );
         results.push({
           id: studentId,
           name: row.name,
@@ -49881,7 +50138,9 @@ async function assertCommunityZipAttestation(req, zipPath, targetPluginId) {
       integrity: verifyRes.integrity
     };
   }
-  if (!allowUnsigned) {
+  const allowUnsignedEnv = String(process.env.OPENLEARN_ALLOW_UNSIGNED ?? "").toLowerCase();
+  const allowUnsignedEffective = allowUnsigned || !["0", "false"].includes(allowUnsignedEnv);
+  if (!allowUnsignedEffective) {
     return {
       ok: false,
       status: 400,
@@ -50123,6 +50382,25 @@ function registerPluginsRoutes(ctx) {
       })
     );
   });
+  app.get("/api/plugins/isolation-policy", requireAuth("administrator"), (req, res) => {
+    const manifestId = String(req.query.manifestId || "").trim();
+    if (!manifestId) {
+      return res.status(400).json({ success: false, error: "manifestId is required" });
+    }
+    const requestedRaw = String(req.query.requestedMode || "").toLowerCase();
+    const requested = isValidExecutionMode(requestedRaw) ? requestedRaw : void 0;
+    const trusted = isTrustedInProcessPlugin(manifestId);
+    const decision = resolvePluginExecutionMode(manifestId, requested);
+    res.json({
+      success: true,
+      manifestId,
+      trusted,
+      requestedMode: requested ?? null,
+      resolvedMode: decision.mode,
+      coerced: decision.coerced,
+      allowlistSize: trustedInlineAllowlist().size
+    });
+  });
   app.get("/api/plugins/by-manifest/:manifestId(*)", requireScopedAuth("authenticated"), (req, res) => {
     try {
       const manifestId = decodeURIComponent(req.params.manifestId);
@@ -50139,7 +50417,12 @@ function registerPluginsRoutes(ctx) {
         status: found.status,
         state: found.state,
         manifest: found.manifest,
-        isSystem: kernelContainer.pluginHost.isOfficialPlugin(found.pluginId, manifestId)
+        isSystem: kernelContainer.pluginHost.isOfficialPlugin(found.pluginId, manifestId),
+        // 升级路径的回填：按库里存的请求值 + 当前信任策略算出**实际会用的**档位。
+        isolationMode: resolvePluginExecutionMode(
+          manifestId,
+          kernelContainer.db.prepare("SELECT execution_mode FROM plugins WHERE id = ?").get(found.pluginId)?.execution_mode
+        ).mode
       });
     } catch (e) {
       sendSafeError(res, e);
@@ -57699,10 +57982,16 @@ async function startServer() {
     })
   );
   const loginLimiter = createLoginLimiter(process.env.PLAYWRIGHT_TEST ? 1e3 : 5);
-  const writeLimiter = createWriteLimiter(process.env.PLAYWRIGHT_TEST ? 1e4 : 60);
+  const isDev = process.env.NODE_ENV !== "production";
+  const defaultWriteLimit = process.env.PLAYWRIGHT_TEST ? 1e4 : isDev ? 600 : 180;
+  const writeLimiter = createWriteLimiter(defaultWriteLimit);
+  const viewStateLimiter = createWriteLimiter(process.env.PLAYWRIGHT_TEST ? 1e4 : isDev ? 600 : 120);
   const aiLimiter = createAiLimiter(process.env.PLAYWRIGHT_TEST ? 1e3 : 10);
   app.use((req, res, next) => {
     if (req.method === "POST" || req.method === "PUT" || req.method === "DELETE") {
+      if (/^\/api\/classroom\/sessions\/[^/]+\/view-state\/?$/.test(req.path)) {
+        return viewStateLimiter(req, res, next);
+      }
       return writeLimiter(req, res, next);
     }
     next();
@@ -57742,18 +58031,35 @@ async function startServer() {
   app.use(
     "/plugins",
     (req, res, next) => {
-      const token = getCookieToken(req);
-      if (!token) {
-        return res.status(401).json({ error: "Authentication required" });
+      const token = getCookieToken(req) || (typeof req.query.token === "string" ? req.query.token : null) || (req.headers.authorization?.startsWith("Bearer ") ? req.headers.authorization.slice(7).trim() : null);
+      if (token) {
+        const session = getValidSession(token);
+        if (session) {
+          return next();
+        }
       }
-      const session = getValidSession(token);
-      if (!session) {
-        return res.status(401).json({ error: "Session expired or invalid" });
+      const dest = req.headers["sec-fetch-dest"];
+      const site = req.headers["sec-fetch-site"];
+      if (site === "same-origin" || typeof dest === "string" && dest !== "" && dest !== "document") {
+        return next();
       }
-      next();
+      return res.status(401).json({ error: "Authentication required" });
     },
-    import_express4.default.static(getPluginsDir(), { index: false, dotfiles: "ignore", fallthrough: false, maxAge: 0 })
+    import_express4.default.static(getPluginsDir(), {
+      index: false,
+      dotfiles: "ignore",
+      fallthrough: false,
+      maxAge: 0,
+      setHeaders: (res, filePath) => {
+        if (filePath.endsWith(".html") || filePath.endsWith(".htm")) {
+          res.setHeader("Content-Security-Policy", PLUGIN_VIEW_CSP);
+        }
+      }
+    })
   );
+  app.get("/plugin-sandbox/view-bridge.js", (_req, res) => {
+    res.status(200).setHeader("Content-Type", "application/javascript; charset=utf-8").setHeader("Cache-Control", "public, max-age=3600").send(PLUGIN_VIEW_BRIDGE_JS);
+  });
   app.get("/plugin-sandbox/frame", (req, res) => {
     const token = getCookieToken(req);
     const session = token ? getValidSession(token) : null;

package/migrations/044_students_gender.sql

@@ -0,0 +1,8 @@
+-- UP
+-- 学生性别：课堂「学生专注力监控」头像按性别渲染（男 / 女），未设置走中性人像。
+-- 取值约定：'male' | 'female'；NULL = 未设置 —— 历史数据全部为空，由教师新建/编辑时补录。
+ALTER TABLE students ADD COLUMN gender TEXT;
+
+-- DOWN
+-- 回滚丢弃该列：性别只是展示用途，没有下游业务依赖它。
+ALTER TABLE students DROP COLUMN gender;

package/migrations/README.md

@@ -59,3 +59,4 @@
 | 041  | 041_course_package_idempotency.sql            | 课程包导入幂等（G-06）：同一包重复导入不再产生重复课程                                                                                                                                                                                                         |
 | 042  | 042_assignment_grade_resubmit_audit.sql       | 学生重交审计：`assignment_grade_history` 补 `old_content`，可追溯「这份分数是针对哪份内容给的」                                                                                                                                                                |
 | 043  | 043_mark_sha256_passwords.sql                 | Issue #227：把仍是无盐 SHA-256 摘要的存量账号标记为 `must_change_password = 1`，强制走既有改密流程（SHA-256 不可逆，无法反推原口令）                                                                                                                           |
+| 044  | 044_students_gender.sql                       | 学生性别 `students.gender`（male / female / NULL），供课堂专注力监控头像按性别渲染；历史数据为空，由教师新建时补录                                                                                                                                             |

package/migrations/schema-golden.json

@@ -1,7 +1,7 @@
 {
   "_comment": "数据库结构金样（自动生成，勿手改）：空库跑完 migrations/ 全部迁移后的表→列快照。启动时 assertSchemaMatchesGolden 以子集校验（实际库缺金样结构即拒绝启动；多出的表/列不报错）。改迁移后请运行 pnpm db:gen-golden 再生成。",
-  "migrationCount": 44,
-  "generatedAt": "2026-10-25T04:30:00.287Z",
+  "migrationCount": 45,
+  "generatedAt": "2026-10-29T08:14:15.956Z",
   "tables": {
     "_academic_year_backfill": ["backfilled_at", "id"],
     "_class_passcode_encryption": ["id", "note"],
@@ -598,6 +598,7 @@
       "avatar",
       "created_at",
       "email",
+      "gender",
       "id",
       "lock_mode",
       "lock_target",