openlearn-next 0.7.9 → 0.7.10

package/dist/server.cjs

@@ -507,6 +507,74 @@ var init_plugin_metrics = __esm({
   }
 });
 
+// packages/core/capability/catalog.ts
+function validateManifestCapabilities(capabilities) {
+  const unknown = [];
+  for (const cap of capabilities) {
+    if (typeof cap !== "string" || !KNOWN_CAPABILITIES.has(cap)) {
+      unknown.push(typeof cap === "string" ? cap : String(cap));
+    }
+  }
+  return { valid: unknown.length === 0, unknown };
+}
+var CAP_API_WRITE, CAP_API_ADMIN, CAP_GRADES_WRITE, CAP_AGENT_TOOL, CAP_AI_INVOKE, CAP_TASK_REGISTER, CAP_STUDENT_DATA_READ, CAP_STUDENT_DATA_WRITE, CAP, CAPABILITIES, KNOWN_CAPABILITIES;
+var init_catalog = __esm({
+  "packages/core/capability/catalog.ts"() {
+    "use strict";
+    CAP_API_WRITE = "api:write";
+    CAP_API_ADMIN = "api:admin";
+    CAP_GRADES_WRITE = "grades:write";
+    CAP_AGENT_TOOL = "agent:tool";
+    CAP_AI_INVOKE = "ai:invoke";
+    CAP_TASK_REGISTER = "task:register";
+    CAP_STUDENT_DATA_READ = "student-data:read";
+    CAP_STUDENT_DATA_WRITE = "student-data:write";
+    CAP = {
+      // ── 资源型（ActionDescriptor.capabilityRequired）──────────────────────
+      ASSIGNMENT_MANAGE: "assignment:manage",
+      ASSIGNMENT_READ: "assignment:read",
+      ASSIGNMENT_REVIEW: "assignment:review",
+      ASSIGNMENT_SUBMIT: "assignment:submit",
+      ASSIGNMENT_WRITE: "assignment:write",
+      LESSON_DELETE: "lesson:delete",
+      LESSON_READ: "lesson:read",
+      LESSON_WRITE: "lesson:write",
+      MANAGEMENT_READ: "management:read",
+      MANAGEMENT_WRITE: "management:write",
+      PLUGIN_READ: "plugin:read",
+      PLUGIN_WRITE: "plugin:write",
+      PROCESS_READ: "process:read",
+      PROCESS_WRITE: "process:write",
+      STUDENT_WRITE: "student:write",
+      VFS_READ: "vfs:read",
+      VFS_WRITE: "vfs:write",
+      WHITEBOARD_READ: "whiteboard:read",
+      WHITEBOARD_WRITE: "whiteboard:write",
+      // ── 历史上只出现在 capabilitiesProposed、从未作为 capabilityRequired ──
+      // 保留是为了不让内置 management 插件在升级后突然被标成「未知串」。
+      CLASS_READ: "class:read",
+      CLASS_WRITE: "class:write",
+      STUDENT_READ: "student:read",
+      // ── 方法级（method-policy / 服务代理的 Security Barrier 3）───────────
+      API_WRITE: CAP_API_WRITE,
+      API_ADMIN: CAP_API_ADMIN,
+      GRADES_WRITE: CAP_GRADES_WRITE,
+      AGENT_TOOL: CAP_AGENT_TOOL,
+      AI_INVOKE: CAP_AI_INVOKE,
+      TASK_REGISTER: CAP_TASK_REGISTER,
+      STUDENT_DATA_READ: CAP_STUDENT_DATA_READ,
+      STUDENT_DATA_WRITE: CAP_STUDENT_DATA_WRITE,
+      // ── 平台内部 ─────────────────────────────────────────────────────────
+      // 片段命令（segment gate）用，插件片段可声明；不在 AI 工具箱里。
+      SEGMENT_GATE_EVAL: "segment:gate_eval"
+    };
+    CAPABILITIES = Object.freeze(
+      Array.from(new Set(Object.values(CAP)))
+    );
+    KNOWN_CAPABILITIES = new Set(CAPABILITIES);
+  }
+});
+
 // packages/core/esm-loader/manifest-schema.ts
 var import_zod, classroomToolSchema, helpDocSchema, quickActivitySchema, timelineSegmentSchema, paletteItemSchema, cockpitWidgetSchema, stageCardSchema, classroomTopbarActionSchema, classroomAttributionAwardSchema, studentCompetencyDimensionSchema, studentProfileWidgetSchema, canvasWidgetSchema, barometerMetricSchema, peerReviewRubricSchema, peerReviewBadgeSchema, preclassPasscodeActionSchema, preclassPasscodeAddonSchema, commandPaletteItemSchema, quickInsertItemSchema, aiPromptTemplateSchema, aiSkillProviderSchema, classTabSchema, classBatchActionSchema, studentRowPanelSchema, editorHeaderActionSchema, postClassWidgetSchema, coursewareViewerToolbarSchema, coursewareViewerOverlaySchema, portalTelemetrySchema, portalCourseBadgeSchema, portalTeachingModeSchema, portalInsightSchema, portalPreflightSchema, portalLaunchActionSchema, countdownWidgetSchema, countdownActionSchema, studentCountdownSchema, studentQuickActionsItemSchema, studentQuickActionsActionSchema, studentQuickActionsFabSchema, notificationTabsSchema, pacingDashboardSchema, diagnosticFeedSchema, collabCanvasSchema, topbarPillSchema, attributionActionSchema, leaderboardActionSchema, studentProfileActionSchema, studentProfileTimelineItemSchema, classroomHeaderActionSchema, classroomAgendaActionSchema, whiteboardDockPluginSchema, classroomAuditEventSchema, peerReviewActionSchema, peerReviewShowcaseWidgetSchema, seatingToolbarSchema, seatingLegendSchema, seatingSeatBadgeSchema, seatingSeatActionsSchema, seatingSummarySchema, whiteboardAutosaveStatusSchema, whiteboardAutosaveActionSchema, teacherPanelSchema, studentFullscreenSchema, globalSettingSchema, navUserMenuSchema, frontendSlotEntrySchema, frontendSlotsShape, pluginLocalesSchema, contributesSchema, deploySchema, apiRouteSchema, apiSchema, requiresItemSchema, manifestSchema, requiresItemV3Schema, manifestSchemaV3;
 var init_manifest_schema = __esm({
@@ -1800,7 +1868,7 @@ var init_token = __esm({
 });
 
 // packages/core/di/interfaces.ts
-var ICommandBusServiceToken4, IEventBusServiceToken3, IActionRegistryServiceToken4, ICapabilityServiceToken, IProcessServiceToken2, IStorageServiceToken, IAIServiceToken, IDatabaseToken4, IPluginHostToken, IPluginLifecycleManagerToken, IPluginDistributionManagerToken, IPluginRuntimeCompositionToken, IUnifiedExtensionRegistryToken, IPluginCapabilityGatewayToken, ICapabilityRegistryToken, IAuthSessionBridgeToken, ISemesterGradeServiceToken, IPointsDimensionRegistryToken, IPointsLedgerServiceToken, ILessonEngineServiceToken, IClassroomRuntimeServiceToken, IPresenceEngineServiceToken, ITeachingCollaborationServiceToken, ILearningAnalyticsServiceToken, IAICapabilityServiceToken, ICapabilityRuntimeServiceToken, ICapabilityGovernanceServiceToken, IPlatformServiceRegistryToken, ICoursewareRuntimeScriptRegistryToken, IClassroomLifecycleServiceToken, IInteractionRuntimeServiceToken, IClassroomCountdownServiceToken, IAssessmentGraderRegistryToken, IStageGuardServiceToken, PLUGIN_RESOLVABLE_TOKENS, PLUGIN_RESOLVABLE_TOKEN_NAMES, INetworkProxyServiceToken;
+var ICommandBusServiceToken4, IEventBusServiceToken3, IActionRegistryServiceToken4, ICapabilityServiceToken, IProcessServiceToken2, IStorageServiceToken, IAIServiceToken, IDatabaseToken4, IPluginHostToken, IPluginLifecycleManagerToken, IPluginDistributionManagerToken, IPluginRuntimeCompositionToken, IUnifiedExtensionRegistryToken, IPluginCapabilityGatewayToken, ICapabilityRegistryToken, IAuthSessionBridgeToken, ISemesterGradeServiceToken, IPointsDimensionRegistryToken, IPointsLedgerServiceToken, IClassRosterServiceToken, ILessonEngineServiceToken, IClassroomRuntimeServiceToken, IPresenceEngineServiceToken, ITeachingCollaborationServiceToken, ILearningAnalyticsServiceToken, IAICapabilityServiceToken, ICapabilityRuntimeServiceToken, ICapabilityGovernanceServiceToken, IPlatformServiceRegistryToken, ICoursewareRuntimeScriptRegistryToken, IClassroomLifecycleServiceToken, IInteractionRuntimeServiceToken, IClassroomCountdownServiceToken, IAssessmentGraderRegistryToken, IStageGuardServiceToken, PLUGIN_RESOLVABLE_TOKENS, PLUGIN_RESOLVABLE_TOKEN_NAMES, INetworkProxyServiceToken;
 var init_interfaces = __esm({
   "packages/core/di/interfaces.ts"() {
     "use strict";
@@ -1839,6 +1907,7 @@ var init_interfaces = __esm({
       "@openlearn/core:IPointsDimensionRegistry"
     );
     IPointsLedgerServiceToken = new Token("@openlearn/core:IPointsLedgerService");
+    IClassRosterServiceToken = new Token("@openlearn/core:IClassRosterService");
     ILessonEngineServiceToken = new Token("@openlearn/core:ILessonEngineService");
     IClassroomRuntimeServiceToken = new Token(
       "@openlearn/core:IClassroomRuntimeService"
@@ -1889,6 +1958,7 @@ var init_interfaces = __esm({
       ISemesterGradeServiceToken,
       IPointsDimensionRegistryToken,
       IPointsLedgerServiceToken,
+      IClassRosterServiceToken,
       ILessonEngineServiceToken,
       IClassroomRuntimeServiceToken,
       IPresenceEngineServiceToken,
@@ -4209,18 +4279,11 @@ function checkMethodPolicy(input) {
   if (tokens.uiService && token === tokens.uiService) return null;
   return null;
 }
-var CAP_API_WRITE, CAP_API_ADMIN, CAP_GRADES_WRITE, CAP_AGENT_TOOL, CAP_AI_INVOKE, CAP_TASK_REGISTER, CAP_STUDENT_DATA_READ, CAP_STUDENT_DATA_WRITE, HIGH_RISK_PATH_PREFIXES, IRREVERSIBLE_PATH_SUFFIXES, ENTITY_DELETE_RE;
+var HIGH_RISK_PATH_PREFIXES, IRREVERSIBLE_PATH_SUFFIXES, ENTITY_DELETE_RE;
 var init_method_policy = __esm({
   "packages/core/plugin-host/method-policy.ts"() {
     "use strict";
-    CAP_API_WRITE = "api:write";
-    CAP_API_ADMIN = "api:admin";
-    CAP_GRADES_WRITE = "grades:write";
-    CAP_AGENT_TOOL = "agent:tool";
-    CAP_AI_INVOKE = "ai:invoke";
-    CAP_TASK_REGISTER = "task:register";
-    CAP_STUDENT_DATA_READ = "student-data:read";
-    CAP_STUDENT_DATA_WRITE = "student-data:write";
+    init_catalog();
     HIGH_RISK_PATH_PREFIXES = Object.freeze([
       "/api/plugins",
       // 插件增删改、一键更新（可执行任意第三方代码）
@@ -4244,51 +4307,238 @@ var init_method_policy = __esm({
   }
 });
 
-// packages/core/command-bus/plugin-command.ts
-function bindPluginCommand(command, pluginActorId) {
-  const actor = typeof pluginActorId === "string" ? pluginActorId.trim() : "";
-  if (!actor) {
-    throw new Error("[Security] Refusing to dispatch a plugin command without a host-assigned actor");
+// packages/core/plugin-host/sql-guard.ts
+function sanitizeSql(sql) {
+  let inSingleQuote = false;
+  let inDoubleQuote = false;
+  let inBacktick = false;
+  let inBracket = false;
+  let result = "";
+  const len = sql.length;
+  for (let i = 0; i < len; i++) {
+    const ch = sql[i];
+    const next = i + 1 < len ? sql[i + 1] : "";
+    if (!inSingleQuote && !inDoubleQuote && !inBacktick && !inBracket && ch === "-" && next === "-") {
+      while (i < len && sql[i] !== "\n") i++;
+      result += " ";
+      continue;
+    }
+    if (!inSingleQuote && !inDoubleQuote && !inBacktick && !inBracket && ch === "/" && next === "*") {
+      i += 2;
+      while (i < len && !(sql[i] === "*" && i + 1 < len && sql[i + 1] === "/")) {
+        i++;
+      }
+      i++;
+      result += " ";
+      continue;
+    }
+    if (ch === "'" && !inDoubleQuote && !inBacktick && !inBracket) {
+      if (inSingleQuote) {
+        if (next === "'") {
+          i++;
+        } else {
+          inSingleQuote = false;
+        }
+      } else {
+        inSingleQuote = true;
+      }
+      result += " ";
+      continue;
+    }
+    if (inSingleQuote) {
+      result += " ";
+      continue;
+    }
+    if (ch === "[" && !inDoubleQuote && !inBacktick) {
+      inBracket = true;
+      result += " ";
+      continue;
+    }
+    if (ch === "]" && inBracket) {
+      inBracket = false;
+      result += " ";
+      continue;
+    }
+    if (ch === "`" && !inDoubleQuote) {
+      inBacktick = !inBacktick;
+      result += " ";
+      continue;
+    }
+    if (ch === '"' && !inBacktick) {
+      inDoubleQuote = !inDoubleQuote;
+      result += " ";
+      continue;
+    }
+    result += ch;
   }
-  const raw = command && typeof command === "object" ? { ...command } : {};
-  const metadata = raw.metadata && typeof raw.metadata === "object" ? { ...raw.metadata } : {};
-  delete metadata.approved;
-  return { ...raw, actorId: actor, metadata };
+  return result;
 }
-function pluginActorIdFor(manifestId, pluginId) {
-  const id = (manifestId || pluginId || "").trim();
-  if (!id) {
-    throw new Error("[Security] Refusing to dispatch a plugin command without a host-assigned actor");
+function extractFlatTables(flatSql, tables) {
+  const ddlRegex = /\b(?:CREATE|DROP|ALTER)\s+(?:TEMP(?:ORARY)?\s+)?TABLE\s+(?:IF\s+(?:NOT\s+)?EXISTS\s+)?([a-zA-Z_][\w]*)/gi;
+  for (const m of flatSql.matchAll(ddlRegex)) {
+    if (m[1] && m[1].toLowerCase() !== SUBQUERY_PLACEHOLDER) {
+      tables.add(m[1].toLowerCase());
+    }
+  }
+  const renameToRegex = /\bRENAME\s+TO\s+([a-zA-Z_][\w]*)/gi;
+  for (const m of flatSql.matchAll(renameToRegex)) {
+    if (m[1] && m[1].toLowerCase() !== SUBQUERY_PLACEHOLDER) {
+      tables.add(m[1].toLowerCase());
+    }
+  }
+  const simpleClauseRegex = /\b(?:INTO|UPDATE(?:\s+OR\s+(?:ROLLBACK|ABORT|REPLACE|FAIL|IGNORE))?|JOIN)\s+([a-zA-Z_][\w]*)/gi;
+  for (const m of flatSql.matchAll(simpleClauseRegex)) {
+    if (m[1] && m[1].toLowerCase() !== SUBQUERY_PLACEHOLDER) {
+      tables.add(m[1].toLowerCase());
+    }
+  }
+  const fromRegex = /\bFROM\s+([^;]+?)(?=\bWHERE\b|\bGROUP\b|\bHAVING\b|\bORDER\b|\bLIMIT\b|\bUNION\b|\bEXCEPT\b|\bINTERSECT\b|\bWINDOW\b|\bVALUES\b|\bSET\b|\bINTO\b|\bJOIN\b|\bLEFT\b|\bRIGHT\b|\bINNER\b|\bOUTER\b|\bCROSS\b|\bNATURAL\b|\bON\b|\bUSING\b|\bSELECT\b|;|$)/gi;
+  for (const match of flatSql.matchAll(fromRegex)) {
+    const clause = match[1];
+    if (!clause) continue;
+    const parts = clause.split(",");
+    for (const part of parts) {
+      const trimmed2 = part.trim();
+      if (!trimmed2) continue;
+      const tokenMatch = /^[a-zA-Z_][\w]*/.exec(trimmed2);
+      if (tokenMatch) {
+        const tableName = tokenMatch[0].toLowerCase();
+        if (tableName !== SUBQUERY_PLACEHOLDER) {
+          tables.add(tableName);
+        }
+      }
+    }
   }
-  return id.startsWith("plugin:") ? id : `plugin:${id}`;
 }
-var init_plugin_command = __esm({
-  "packages/core/command-bus/plugin-command.ts"() {
-    "use strict";
+function extractReferencedTables(cleanSql) {
+  const tables = /* @__PURE__ */ new Set();
+  let working = cleanSql;
+  const parenRegex = /\(([^()]*)\)/g;
+  let depth = 0;
+  while (parenRegex.test(working) && depth++ < 100) {
+    working = working.replace(parenRegex, (_full, inner) => {
+      extractFlatTables(inner, tables);
+      const trimmedInner = inner.trim();
+      if (/^(?:SELECT|VALUES|WITH)\b/i.test(trimmedInner)) {
+        return ` ${SUBQUERY_PLACEHOLDER} `;
+      }
+      return ` ${inner} `;
+    });
   }
-});
-
-// packages/core/plugin-host/plugin-namespace.ts
-function resolvePluginCommandType(type, pluginId) {
-  const prefix = pluginId + ".";
-  if (type.startsWith(prefix)) return type;
-  if (UUID_V7_PREFIX.test(type)) return type;
-  return prefix + type;
+  working = working.replace(/[()]/g, " ");
+  extractFlatTables(working, tables);
+  return tables;
 }
-function stripPluginCommandPrefix(type, pluginId) {
-  const prefix = pluginId + ".";
-  if (type.startsWith(prefix)) return type.slice(prefix.length);
-  if (UUID_V7_PREFIX.test(type)) {
-    const idx = type.indexOf(".");
-    return type.slice(idx + 1);
+function assertPluginSqlAllowed(options) {
+  const { sql, ownPrefix, allowedPrefixes = [], researchAllowed = false } = options;
+  if (typeof sql !== "string" || sql.trim() === "") return;
+  for (const opRegex of FORBIDDEN_OPERATIONS) {
+    if (opRegex.test(sql)) {
+      throw new Error(`Dangerous statement is forbidden: "${sql.trim()}"`);
+    }
+  }
+  const clean = sanitizeSql(sql);
+  const tables = extractReferencedTables(clean);
+  if (/\b(?:FROM|JOIN|INTO|UPDATE|TABLE)\b/i.test(clean) && tables.size === 0) {
+    throw new Error(`Worker plugin SQL rejected: unable to resolve target table in "${sql.trim()}"`);
+  }
+  const isDdl = /^\s*(DROP|CREATE|ALTER|TRUNCATE)\b/i.test(clean);
+  const words = clean.toLowerCase().match(/\b[a-zA-Z_][\w]*\b/g) || [];
+  for (const word of words) {
+    if (FORBIDDEN_CORE_TABLES_SET.has(word)) {
+      if (tables.has(word)) {
+        if (isDdl) {
+          throw new Error(
+            `Worker plugin is not permitted to perform DDL on table "${word}" (core security table is strictly forbidden)`
+          );
+        }
+        throw new Error(
+          `Worker plugin is not permitted to access table "${word}" (core security table is strictly forbidden)`
+        );
+      }
+    }
+  }
+  const ownPrefixLower = ownPrefix ? ownPrefix.toLowerCase() : "";
+  const validPrefixes = [ownPrefixLower, ...allowedPrefixes.map((p) => p.toLowerCase())].filter(Boolean);
+  for (const table of tables) {
+    if (table === "plugin_migrations") continue;
+    if (researchAllowed && table.startsWith("plugin_research_")) continue;
+    const isOwn = validPrefixes.some((p) => table.startsWith(p));
+    if (isOwn) continue;
+    if (table === "sqlite_master" || table === "sqlite_schema" || table === "sqlite_temp_master") {
+      const strippedComments = sql.replace(/--.*$/gm, " ").replace(/\/\*[\s\S]*?\*\//g, " ").trim();
+      const isAllowedMetaQuery = /^\s*SELECT\s+name\s+FROM\s+(?:sqlite_master|sqlite_schema)\s+WHERE\s+type\s*=\s*['"]table['"]\s+AND\s+name\s+LIKE\s+['"][A-Za-z0-9_%]+['"]\s*$/i.test(
+        strippedComments
+      ) && ownPrefixLower && strippedComments.toLowerCase().includes(ownPrefixLower);
+      if (isAllowedMetaQuery) continue;
+      throw new Error(`Direct access to sqlite metadata table "${table}" is forbidden`);
+    }
+    if (isDdl) {
+      throw new Error(
+        `Worker plugin is not permitted to perform DDL on table "${table}" (only ${ownPrefix || "<none>"} namespace is allowed)`
+      );
+    }
+    throw new Error(
+      `Worker plugin is not permitted to access table "${table}" (only ${ownPrefix || "<none>"} namespace is allowed)`
+    );
   }
-  return type;
 }
-var UUID_V7_PREFIX;
-var init_plugin_namespace = __esm({
-  "packages/core/plugin-host/plugin-namespace.ts"() {
+var FORBIDDEN_CORE_TABLES, FORBIDDEN_CORE_TABLES_SET, FORBIDDEN_OPERATIONS, SUBQUERY_PLACEHOLDER;
+var init_sql_guard = __esm({
+  "packages/core/plugin-host/sql-guard.ts"() {
     "use strict";
-    UUID_V7_PREFIX = /^[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[0-9a-f]{4}-[0-9a-f]{12}\./i;
+    FORBIDDEN_CORE_TABLES = Object.freeze([
+      "users",
+      "client_sessions",
+      "plugins",
+      "plugin_storage",
+      "ai_providers",
+      "processes",
+      "pending_commands",
+      "classes",
+      "students",
+      "class_students",
+      "lessons",
+      "assignments",
+      "assignment_submissions",
+      "attendance",
+      "schedules",
+      "class_grade_weights",
+      "exams",
+      "exam_scores",
+      "student_semester_reports",
+      "student_rollcalls",
+      "student_seats",
+      "student_read_notifications",
+      "student_lesson_progress",
+      "courseware",
+      "courseware_attempt",
+      "system_resources",
+      "events",
+      "_migrations",
+      "site_settings",
+      "agent_conversations",
+      "classroom_sessions",
+      "lesson_quiz_submissions",
+      "courseware_score_config",
+      "demo_data_registry",
+      "whiteboard_elements",
+      "student_point_logs",
+      "lianyun_research_activities",
+      "lianyun_research_groups",
+      "lianyun_research_submissions",
+      "lianyun_research_reviews"
+    ]);
+    FORBIDDEN_CORE_TABLES_SET = new Set(FORBIDDEN_CORE_TABLES.map((t) => t.toLowerCase()));
+    FORBIDDEN_OPERATIONS = [
+      /\bATTACH(?:\s+DATABASE)?\b/i,
+      /\bDETACH(?:\s+DATABASE)?\b/i,
+      /\bPRAGMA\b/i,
+      /\bVACUUM\b/i,
+      /\bCREATE\s+(?:TEMP(?:ORARY)?\s+)?(?:TRIGGER|VIEW)\b/i,
+      /\bDROP\s+(?:TEMP(?:ORARY)?\s+)?(?:TRIGGER|VIEW)\b/i
+    ];
+    SUBQUERY_PLACEHOLDER = "__ol_subquery__";
   }
 });
 
@@ -4318,6 +4568,108 @@ var init_plugin_tables = __esm({
   }
 });
 
+// packages/core/plugin-host/inline-db-guard.ts
+function isSqlGuardAllModesEnabled(env = process.env) {
+  const raw = env.OPENLEARN_SQL_GUARD_ALL_MODES?.trim().toLowerCase();
+  return raw === "1" || raw === "true" || raw === "on" || raw === "yes";
+}
+function createGuardedPluginDatabase(db2, pluginId, manifestId) {
+  const ownPrefix = pluginTablePrefix(pluginId, manifestId);
+  const allowedPrefixes = listAllowedPluginTablePrefixes(pluginId, manifestId);
+  const assertSql = (sql) => {
+    try {
+      assertPluginSqlAllowed({ sql: typeof sql === "string" ? sql : String(sql ?? ""), ownPrefix, allowedPrefixes });
+    } catch (err) {
+      const message = err?.message ? String(err.message) : String(err);
+      const wrapped = new Error(`${SQL_GUARD_ERROR_PREFIX}\uFF1A${message}\uFF08\u63D2\u4EF6 "${pluginId}"\uFF09`);
+      wrapped.code = "PLUGIN_SQL_REJECTED";
+      throw wrapped;
+    }
+  };
+  return new Proxy(db2, {
+    get(target, prop, receiver) {
+      const value = Reflect.get(target, prop, receiver);
+      if (typeof value !== "function") return value;
+      if (prop === "prepare") {
+        return (sql, ...rest) => {
+          assertSql(sql);
+          return value.call(target, sql, ...rest);
+        };
+      }
+      if (prop === "exec") {
+        return (sql, ...rest) => {
+          assertSql(sql);
+          return value.call(target, sql, ...rest);
+        };
+      }
+      if (prop === "pragma") {
+        return (source, ...rest) => {
+          assertSql(`PRAGMA ${String(source ?? "")}`);
+          return value.call(target, source, ...rest);
+        };
+      }
+      return value.bind(target);
+    }
+  });
+}
+var SQL_GUARD_ERROR_PREFIX;
+var init_inline_db_guard = __esm({
+  "packages/core/plugin-host/inline-db-guard.ts"() {
+    "use strict";
+    init_sql_guard();
+    init_plugin_tables();
+    SQL_GUARD_ERROR_PREFIX = "[PluginHost] SQL \u88AB\u62D2\u7EDD";
+  }
+});
+
+// packages/core/command-bus/plugin-command.ts
+function bindPluginCommand(command, pluginActorId) {
+  const actor = typeof pluginActorId === "string" ? pluginActorId.trim() : "";
+  if (!actor) {
+    throw new Error("[Security] Refusing to dispatch a plugin command without a host-assigned actor");
+  }
+  const raw = command && typeof command === "object" ? { ...command } : {};
+  const metadata = raw.metadata && typeof raw.metadata === "object" ? { ...raw.metadata } : {};
+  delete metadata.approved;
+  return { ...raw, actorId: actor, metadata };
+}
+function pluginActorIdFor(manifestId, pluginId) {
+  const id = (manifestId || pluginId || "").trim();
+  if (!id) {
+    throw new Error("[Security] Refusing to dispatch a plugin command without a host-assigned actor");
+  }
+  return id.startsWith("plugin:") ? id : `plugin:${id}`;
+}
+var init_plugin_command = __esm({
+  "packages/core/command-bus/plugin-command.ts"() {
+    "use strict";
+  }
+});
+
+// packages/core/plugin-host/plugin-namespace.ts
+function resolvePluginCommandType(type, pluginId) {
+  const prefix = pluginId + ".";
+  if (type.startsWith(prefix)) return type;
+  if (UUID_V7_PREFIX.test(type)) return type;
+  return prefix + type;
+}
+function stripPluginCommandPrefix(type, pluginId) {
+  const prefix = pluginId + ".";
+  if (type.startsWith(prefix)) return type.slice(prefix.length);
+  if (UUID_V7_PREFIX.test(type)) {
+    const idx = type.indexOf(".");
+    return type.slice(idx + 1);
+  }
+  return type;
+}
+var UUID_V7_PREFIX;
+var init_plugin_namespace = __esm({
+  "packages/core/plugin-host/plugin-namespace.ts"() {
+    "use strict";
+    UUID_V7_PREFIX = /^[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[0-9a-f]{4}-[0-9a-f]{12}\./i;
+  }
+});
+
 // packages/core/plugin-host/context-builder.ts
 var context_builder_exports = {};
 __export(context_builder_exports, {
@@ -4720,15 +5072,51 @@ function wrapInteractionRuntimeService(service, tracker, pluginId) {
     listActivityProviders: createSafeFunction(() => service.listActivityProviders())
   };
 }
-function wrapPluginRuntimeService(raw, tokenName, tracker, pluginId) {
+function wrapPluginRuntimeService(raw, tokenName, tracker, pluginId, manifestId) {
   if (tokenName === IClassroomLifecycleServiceToken.name) {
     return wrapClassroomLifecycleService(raw, tracker, pluginId);
   }
   if (tokenName === IInteractionRuntimeServiceToken.name) {
     return wrapInteractionRuntimeService(raw, tracker, pluginId);
   }
+  if (tokenName === "@openlearn/core:IDatabase" && isSqlGuardAllModesEnabled()) {
+    return createGuardedPluginDatabase(raw, pluginId, manifestId);
+  }
   return raw;
 }
+function wrapRosterService(service, pluginId, capabilities) {
+  const CAP_ROSTER_READ = "management:read";
+  const safe = (fn) => createSafeFunction(fn);
+  const assertReadable = (method, detail) => {
+    const hasCap = hasCapability(capabilities ?? [], CAP_ROSTER_READ);
+    recordSecurityAudit("plugin.roster_read", {
+      pluginId,
+      method,
+      ...detail,
+      hasCapability: hasCap,
+      ...hasCap ? {} : { denied: true }
+    });
+    if (hasCap) return;
+    console.error(
+      `[Security] \u63D2\u4EF6 "${pluginId}" \u8C03\u7528 roster.${method} \u88AB\u62D2\uFF1A\u7F3A\u5C11\u80FD\u529B "${CAP_ROSTER_READ}"\u3002\u8BF7\u5728 manifest.capabilitiesProposed \u58F0\u660E\u5B83\uFF08\u6559\u5E08\u89D2\u8272\u9ED8\u8BA4\u5177\u5907\uFF09\u3002`
+    );
+    throw new PluginCapabilityDeniedError(pluginId, CAP_ROSTER_READ, "read", method);
+  };
+  return {
+    listClasses: safe(async () => {
+      assertReadable("listClasses", {});
+      return service.listClasses();
+    }),
+    listClassStudents: safe(async (classId) => {
+      assertReadable("listClassStudents", { classId });
+      return service.listClassStudents(classId);
+    }),
+    getStudent: safe(async (studentId) => {
+      assertReadable("getStudent", { studentId });
+      return service.getStudent(studentId);
+    })
+  };
+}
 function wrapPointsLedgerService(service, pluginId, capabilities) {
   const auditAccess = (studentId, method, operation, requiredCap) => {
     const hasCap = hasCapability(capabilities ?? [], requiredCap);
@@ -4741,6 +5129,9 @@ function wrapPointsLedgerService(service, pluginId, capabilities) {
       ...hasCap ? {} : { denied: true }
     });
     if (!hasCap) {
+      console.error(
+        `[Security] \u63D2\u4EF6 "${pluginId}" \u8C03\u7528 pointsLedger.${method} \u88AB\u62D2\uFF1A\u7F3A\u5C11\u80FD\u529B "${requiredCap}"\uFF08${operation} / student=${studentId}\uFF09\u3002\u8BF7\u5728 manifest.capabilitiesProposed \u58F0\u660E\u5B83\u3002`
+      );
       throw new PluginCapabilityDeniedError(pluginId, requiredCap, operation, method);
     }
   };
@@ -4857,6 +5248,7 @@ async function buildContext(serviceRegistry, tracker, pluginId, manifest, db2, s
   const aiService = await serviceRegistry.resolve(IAIServiceToken);
   const pointsDimensionRegistry = await serviceRegistry.tryResolve(IPointsDimensionRegistryToken);
   const pointsLedgerService = await serviceRegistry.tryResolve(IPointsLedgerServiceToken);
+  const rosterService = await serviceRegistry.tryResolve(IClassRosterServiceToken);
   const wrappedCommandBus = wrapCommandBus(commandBusService, tracker, pluginId, manifest.id, actionRegistryService);
   const wrappedEventBus = wrapEventBus(eventBusService, tracker, pluginId);
   const wrappedProcessManager = wrapProcessManager(
@@ -4873,6 +5265,7 @@ async function buildContext(serviceRegistry, tracker, pluginId, manifest, db2, s
   const wrappedAI = wrapAI(aiService, pluginId, tracker);
   const wrappedPointsDimension = pointsDimensionRegistry ? wrapPointsDimensionRegistry(pointsDimensionRegistry, tracker, pluginId) : null;
   const wrappedPointsLedger = pointsLedgerService ? wrapPointsLedgerService(pointsLedgerService, pluginId, manifest.capabilitiesProposed) : null;
+  const wrappedRoster = rosterService ? wrapRosterService(rosterService, pluginId, manifest.capabilitiesProposed) : null;
   Object.setPrototypeOf(wrappedCommandBus, null);
   Object.setPrototypeOf(wrappedEventBus, null);
   Object.setPrototypeOf(wrappedProcessManager, null);
@@ -4900,7 +5293,8 @@ async function buildContext(serviceRegistry, tracker, pluginId, manifest, db2, s
     storage: wrappedStorage,
     ai: wrappedAI,
     pointsDimension: wrappedPointsDimension,
-    pointsLedger: wrappedPointsLedger
+    pointsLedger: wrappedPointsLedger,
+    roster: wrappedRoster
   };
   if (skipTokens && skipTokens.size > 0) {
     const TOKEN_TO_SERVICE_KEY = {
@@ -4912,7 +5306,8 @@ async function buildContext(serviceRegistry, tracker, pluginId, manifest, db2, s
       "@openlearn/core:IStorageService": "storage",
       "@openlearn/core:IAIService": "ai",
       "@openlearn/core:IPointsDimensionRegistry": "pointsDimension",
-      "@openlearn/core:IPointsLedgerService": "pointsLedger"
+      "@openlearn/core:IPointsLedgerService": "pointsLedger",
+      "@openlearn/core:IClassRosterService": "roster"
     };
     for (const tokenName of skipTokens) {
       const serviceKey = TOKEN_TO_SERVICE_KEY[tokenName];
@@ -5023,9 +5418,9 @@ async function buildContext(serviceRegistry, tracker, pluginId, manifest, db2, s
             `[PluginHost] Plugin "${manifest.id}" cannot resolve "${token}" by name. Use the Token object imported from @openlearn/plugin-sdk, or one of the SDK-exported Token names.`
           );
         }
-        return serviceRegistry.resolveByName(token).then((raw) => wrapPluginRuntimeService(raw, token, tracker, pluginId));
+        return serviceRegistry.resolveByName(token).then((raw) => wrapPluginRuntimeService(raw, token, tracker, pluginId, manifest.id));
       }
-      return serviceRegistry.resolve(token).then((raw) => wrapPluginRuntimeService(raw, token.name, tracker, pluginId));
+      return serviceRegistry.resolve(token).then((raw) => wrapPluginRuntimeService(raw, token.name, tracker, pluginId, manifest.id));
     },
     // V3.2: 插件向 DI 容器提供服务（对应 manifest.provides）
     provide: async (token, instance) => {
@@ -5125,6 +5520,7 @@ var init_context_builder = __esm({
     init_audit_log();
     init_method_policy();
     init_errors2();
+    init_inline_db_guard();
     init_extension_points();
     init_interfaces();
     init_plugin_command();
@@ -7518,241 +7914,6 @@ var init_event_forwarder = __esm({
   }
 });
 
-// packages/core/plugin-host/sql-guard.ts
-function sanitizeSql(sql) {
-  let inSingleQuote = false;
-  let inDoubleQuote = false;
-  let inBacktick = false;
-  let inBracket = false;
-  let result = "";
-  const len = sql.length;
-  for (let i = 0; i < len; i++) {
-    const ch = sql[i];
-    const next = i + 1 < len ? sql[i + 1] : "";
-    if (!inSingleQuote && !inDoubleQuote && !inBacktick && !inBracket && ch === "-" && next === "-") {
-      while (i < len && sql[i] !== "\n") i++;
-      result += " ";
-      continue;
-    }
-    if (!inSingleQuote && !inDoubleQuote && !inBacktick && !inBracket && ch === "/" && next === "*") {
-      i += 2;
-      while (i < len && !(sql[i] === "*" && i + 1 < len && sql[i + 1] === "/")) {
-        i++;
-      }
-      i++;
-      result += " ";
-      continue;
-    }
-    if (ch === "'" && !inDoubleQuote && !inBacktick && !inBracket) {
-      if (inSingleQuote) {
-        if (next === "'") {
-          i++;
-        } else {
-          inSingleQuote = false;
-        }
-      } else {
-        inSingleQuote = true;
-      }
-      result += " ";
-      continue;
-    }
-    if (inSingleQuote) {
-      result += " ";
-      continue;
-    }
-    if (ch === "[" && !inDoubleQuote && !inBacktick) {
-      inBracket = true;
-      result += " ";
-      continue;
-    }
-    if (ch === "]" && inBracket) {
-      inBracket = false;
-      result += " ";
-      continue;
-    }
-    if (ch === "`" && !inDoubleQuote) {
-      inBacktick = !inBacktick;
-      result += " ";
-      continue;
-    }
-    if (ch === '"' && !inBacktick) {
-      inDoubleQuote = !inDoubleQuote;
-      result += " ";
-      continue;
-    }
-    result += ch;
-  }
-  return result;
-}
-function extractFlatTables(flatSql, tables) {
-  const ddlRegex = /\b(?:CREATE|DROP|ALTER)\s+(?:TEMP(?:ORARY)?\s+)?TABLE\s+(?:IF\s+(?:NOT\s+)?EXISTS\s+)?([a-zA-Z_][\w]*)/gi;
-  for (const m of flatSql.matchAll(ddlRegex)) {
-    if (m[1] && m[1].toLowerCase() !== SUBQUERY_PLACEHOLDER) {
-      tables.add(m[1].toLowerCase());
-    }
-  }
-  const renameToRegex = /\bRENAME\s+TO\s+([a-zA-Z_][\w]*)/gi;
-  for (const m of flatSql.matchAll(renameToRegex)) {
-    if (m[1] && m[1].toLowerCase() !== SUBQUERY_PLACEHOLDER) {
-      tables.add(m[1].toLowerCase());
-    }
-  }
-  const simpleClauseRegex = /\b(?:INTO|UPDATE(?:\s+OR\s+(?:ROLLBACK|ABORT|REPLACE|FAIL|IGNORE))?|JOIN)\s+([a-zA-Z_][\w]*)/gi;
-  for (const m of flatSql.matchAll(simpleClauseRegex)) {
-    if (m[1] && m[1].toLowerCase() !== SUBQUERY_PLACEHOLDER) {
-      tables.add(m[1].toLowerCase());
-    }
-  }
-  const fromRegex = /\bFROM\s+([^;]+?)(?=\bWHERE\b|\bGROUP\b|\bHAVING\b|\bORDER\b|\bLIMIT\b|\bUNION\b|\bEXCEPT\b|\bINTERSECT\b|\bWINDOW\b|\bVALUES\b|\bSET\b|\bINTO\b|\bJOIN\b|\bLEFT\b|\bRIGHT\b|\bINNER\b|\bOUTER\b|\bCROSS\b|\bNATURAL\b|\bON\b|\bUSING\b|\bSELECT\b|;|$)/gi;
-  for (const match of flatSql.matchAll(fromRegex)) {
-    const clause = match[1];
-    if (!clause) continue;
-    const parts = clause.split(",");
-    for (const part of parts) {
-      const trimmed2 = part.trim();
-      if (!trimmed2) continue;
-      const tokenMatch = /^[a-zA-Z_][\w]*/.exec(trimmed2);
-      if (tokenMatch) {
-        const tableName = tokenMatch[0].toLowerCase();
-        if (tableName !== SUBQUERY_PLACEHOLDER) {
-          tables.add(tableName);
-        }
-      }
-    }
-  }
-}
-function extractReferencedTables(cleanSql) {
-  const tables = /* @__PURE__ */ new Set();
-  let working = cleanSql;
-  const parenRegex = /\(([^()]*)\)/g;
-  let depth = 0;
-  while (parenRegex.test(working) && depth++ < 100) {
-    working = working.replace(parenRegex, (_full, inner) => {
-      extractFlatTables(inner, tables);
-      const trimmedInner = inner.trim();
-      if (/^(?:SELECT|VALUES|WITH)\b/i.test(trimmedInner)) {
-        return ` ${SUBQUERY_PLACEHOLDER} `;
-      }
-      return ` ${inner} `;
-    });
-  }
-  working = working.replace(/[()]/g, " ");
-  extractFlatTables(working, tables);
-  return tables;
-}
-function assertPluginSqlAllowed(options) {
-  const { sql, ownPrefix, allowedPrefixes = [], researchAllowed = false } = options;
-  if (typeof sql !== "string" || sql.trim() === "") return;
-  for (const opRegex of FORBIDDEN_OPERATIONS) {
-    if (opRegex.test(sql)) {
-      throw new Error(`Dangerous statement is forbidden: "${sql.trim()}"`);
-    }
-  }
-  const clean = sanitizeSql(sql);
-  const tables = extractReferencedTables(clean);
-  if (/\b(?:FROM|JOIN|INTO|UPDATE|TABLE)\b/i.test(clean) && tables.size === 0) {
-    throw new Error(`Worker plugin SQL rejected: unable to resolve target table in "${sql.trim()}"`);
-  }
-  const isDdl = /^\s*(DROP|CREATE|ALTER|TRUNCATE)\b/i.test(clean);
-  const words = clean.toLowerCase().match(/\b[a-zA-Z_][\w]*\b/g) || [];
-  for (const word of words) {
-    if (FORBIDDEN_CORE_TABLES_SET.has(word)) {
-      if (tables.has(word)) {
-        if (isDdl) {
-          throw new Error(
-            `Worker plugin is not permitted to perform DDL on table "${word}" (core security table is strictly forbidden)`
-          );
-        }
-        throw new Error(
-          `Worker plugin is not permitted to access table "${word}" (core security table is strictly forbidden)`
-        );
-      }
-    }
-  }
-  const ownPrefixLower = ownPrefix ? ownPrefix.toLowerCase() : "";
-  const validPrefixes = [ownPrefixLower, ...allowedPrefixes.map((p) => p.toLowerCase())].filter(Boolean);
-  for (const table of tables) {
-    if (table === "plugin_migrations") continue;
-    if (researchAllowed && table.startsWith("plugin_research_")) continue;
-    const isOwn = validPrefixes.some((p) => table.startsWith(p));
-    if (isOwn) continue;
-    if (table === "sqlite_master" || table === "sqlite_schema" || table === "sqlite_temp_master") {
-      const strippedComments = sql.replace(/--.*$/gm, " ").replace(/\/\*[\s\S]*?\*\//g, " ").trim();
-      const isAllowedMetaQuery = /^\s*SELECT\s+name\s+FROM\s+(?:sqlite_master|sqlite_schema)\s+WHERE\s+type\s*=\s*['"]table['"]\s+AND\s+name\s+LIKE\s+['"][A-Za-z0-9_%]+['"]\s*$/i.test(
-        strippedComments
-      ) && ownPrefixLower && strippedComments.toLowerCase().includes(ownPrefixLower);
-      if (isAllowedMetaQuery) continue;
-      throw new Error(`Direct access to sqlite metadata table "${table}" is forbidden`);
-    }
-    if (isDdl) {
-      throw new Error(
-        `Worker plugin is not permitted to perform DDL on table "${table}" (only ${ownPrefix || "<none>"} namespace is allowed)`
-      );
-    }
-    throw new Error(
-      `Worker plugin is not permitted to access table "${table}" (only ${ownPrefix || "<none>"} namespace is allowed)`
-    );
-  }
-}
-var FORBIDDEN_CORE_TABLES, FORBIDDEN_CORE_TABLES_SET, FORBIDDEN_OPERATIONS, SUBQUERY_PLACEHOLDER;
-var init_sql_guard = __esm({
-  "packages/core/plugin-host/sql-guard.ts"() {
-    "use strict";
-    FORBIDDEN_CORE_TABLES = Object.freeze([
-      "users",
-      "client_sessions",
-      "plugins",
-      "plugin_storage",
-      "ai_providers",
-      "processes",
-      "pending_commands",
-      "classes",
-      "students",
-      "class_students",
-      "lessons",
-      "assignments",
-      "assignment_submissions",
-      "attendance",
-      "schedules",
-      "class_grade_weights",
-      "exams",
-      "exam_scores",
-      "student_semester_reports",
-      "student_rollcalls",
-      "student_seats",
-      "student_read_notifications",
-      "student_lesson_progress",
-      "courseware",
-      "courseware_attempt",
-      "system_resources",
-      "events",
-      "_migrations",
-      "site_settings",
-      "agent_conversations",
-      "classroom_sessions",
-      "lesson_quiz_submissions",
-      "courseware_score_config",
-      "demo_data_registry",
-      "whiteboard_elements",
-      "student_point_logs",
-      "lianyun_research_activities",
-      "lianyun_research_groups",
-      "lianyun_research_submissions",
-      "lianyun_research_reviews"
-    ]);
-    FORBIDDEN_CORE_TABLES_SET = new Set(FORBIDDEN_CORE_TABLES.map((t) => t.toLowerCase()));
-    FORBIDDEN_OPERATIONS = [
-      /\bATTACH(?:\s+DATABASE)?\b/i,
-      /\bDETACH(?:\s+DATABASE)?\b/i,
-      /\bPRAGMA\b/i,
-      /\bVACUUM\b/i,
-      /\bCREATE\s+(?:TEMP(?:ORARY)?\s+)?(?:TRIGGER|VIEW)\b/i,
-      /\bDROP\s+(?:TEMP(?:ORARY)?\s+)?(?:TRIGGER|VIEW)\b/i
-    ];
-    SUBQUERY_PLACEHOLDER = "__ol_subquery__";
-  }
-});
-
 // packages/core/worker-runtime/service-host.ts
 function sanitizeClonableValue(val, depth = 0, seen = /* @__PURE__ */ new WeakSet()) {
   if (depth > 12) return null;
@@ -10309,6 +10470,15 @@ var CommandBus = class {
   hasHandler(commandType) {
     return this.handlers.has(commandType) || this.legacyHandlers.has(commandType);
   }
+  /**
+   * 只读枚举已注册的命令类型（modern + legacy）。
+   *
+   * 供插件激活后的「handler 有、ActionDescriptor 没有」自检使用（Issue #369）：
+   * 自检要能看清「这次激活新增了哪些命令」，而不是去读私有 Map。
+   */
+  listRegisteredCommandTypes() {
+    return Array.from(/* @__PURE__ */ new Set([...this.handlers.keys(), ...this.legacyHandlers.keys()]));
+  }
   async execute(command) {
     const actorId = typeof command.actorId === "string" ? command.actorId.trim() : "";
     if (!actorId) {
@@ -10411,6 +10581,20 @@ var ActionRegistry = class {
   getActionByCommandType(commandType) {
     return Array.from(this.actions.values()).find((a) => a.commandType === commandType);
   }
+  /** 已登记描述符覆盖的 commandType（去重、只读）。 */
+  listRegisteredCommandTypes() {
+    return Array.from(new Set(Array.from(this.actions.values()).map((a) => a.commandType))).sort();
+  }
+  /**
+   * 给定命令类型里**没有** ActionDescriptor 的那些。
+   *
+   * 命令总线是 default-deny：这种命令会在用户点击时被 403 `COMMAND_NOT_REGISTERED` 拒绝。
+   * 插件激活后用它把「注册了 handler 却忘了登记描述符」提前打成一条 WARN（Issue #369）。
+   */
+  listMissingDescriptors(commandTypes) {
+    const registered = new Set(Array.from(this.actions.values()).map((a) => a.commandType));
+    return Array.from(new Set(commandTypes)).filter((type) => !registered.has(type)).sort();
+  }
 };
 
 // packages/core/capability/event/capability-event-bus.ts
@@ -10678,6 +10862,7 @@ var InvocationEngine = class {
 };
 
 // packages/core/capability/guard/capability-guard.ts
+init_catalog();
 var CapabilityGuard = class _CapabilityGuard {
   constructor() {
     this.actorCapabilities = /* @__PURE__ */ new Map();
@@ -10693,20 +10878,20 @@ var CapabilityGuard = class _CapabilityGuard {
     ]);
     this.actorCapabilities.set("anonymous", []);
     this.actorCapabilities.set("agent-system-0", [
-      "lesson:write",
-      "lesson:delete",
-      "whiteboard:write",
+      CAP.LESSON_WRITE,
+      CAP.LESSON_DELETE,
+      CAP.WHITEBOARD_WRITE,
       "quiz:write",
-      "plugin:read",
-      "vfs:read",
-      "vfs:write",
-      "management:write",
-      "management:read",
-      "process:write",
-      "process:read"
+      CAP.PLUGIN_READ,
+      CAP.VFS_READ,
+      CAP.VFS_WRITE,
+      CAP.MANAGEMENT_WRITE,
+      CAP.MANAGEMENT_READ,
+      CAP.PROCESS_WRITE,
+      CAP.PROCESS_READ
     ]);
     this.actorCapabilities.set("teacher-demo", ["lesson:*", "whiteboard:*", "management:*", "quiz:*", "vfs:*"]);
-    this.actorCapabilities.set("student-demo", ["student:write", "lesson:read", "whiteboard:read"]);
+    this.actorCapabilities.set("student-demo", [CAP.STUDENT_WRITE, CAP.LESSON_READ, CAP.WHITEBOARD_READ]);
   }
   grant(actorId, cap) {
     const caps = this.actorCapabilities.get(actorId) || [];
@@ -10740,11 +10925,11 @@ var CapabilityGuard = class _CapabilityGuard {
         "vfs:*",
         "process:*",
         "plugin:*",
-        "student:write",
-        "assignment:read",
-        "assignment:submit",
-        "assignment:review",
-        "assignment:manage"
+        CAP.STUDENT_WRITE,
+        CAP.ASSIGNMENT_READ,
+        CAP.ASSIGNMENT_SUBMIT,
+        CAP.ASSIGNMENT_REVIEW,
+        CAP.ASSIGNMENT_MANAGE
       ];
       const [reqRes2, reqAct2] = requiredCap.split(":");
       if (teacherCaps.some((c) => {
@@ -10756,12 +10941,12 @@ var CapabilityGuard = class _CapabilityGuard {
     }
     if (role === "student") {
       const studentCaps = [
-        "student:write",
-        "lesson:read",
-        "whiteboard:read",
-        "assignment:read",
-        "assignment:submit",
-        "assignment:review"
+        CAP.STUDENT_WRITE,
+        CAP.LESSON_READ,
+        CAP.WHITEBOARD_READ,
+        CAP.ASSIGNMENT_READ,
+        CAP.ASSIGNMENT_SUBMIT,
+        CAP.ASSIGNMENT_REVIEW
       ];
       const [reqRes2, reqAct2] = requiredCap.split(":");
       if (studentCaps.some((c) => {
@@ -12100,18 +12285,25 @@ function generateUnambiguousPassword(length = 20) {
   }
   return out;
 }
+function resolveSeedPasswordMode(env = process.env) {
+  return env.OPENLEARN_SEED_PASSWORD_MODE?.trim().toLowerCase() === "random" ? "random" : "default";
+}
 function resolveSeedCredential(username, options) {
   if (options?.allowWellKnown) {
-    return { password: username, mustChange: false, generated: false };
+    return { password: username, mustChange: false, generated: false, source: "playwright" };
   }
   const envValue = options?.envValue?.trim();
   if (envValue) {
-    return { password: envValue, mustChange: envValue === username, generated: false };
+    return { password: envValue, mustChange: envValue === username, generated: false, source: "env" };
   }
   if (options?.vitestFallback) {
-    return { password: `Vitest-${username}-NotDefault9`, mustChange: false, generated: false };
+    return { password: `Vitest-${username}-NotDefault9`, mustChange: false, generated: false, source: "vitest" };
   }
-  return { password: generateUnambiguousPassword(20), mustChange: true, generated: true };
+  const mode = options?.mode ?? resolveSeedPasswordMode();
+  if (mode === "random") {
+    return { password: generateUnambiguousPassword(20), mustChange: true, generated: true, source: "random" };
+  }
+  return { password: username, mustChange: true, generated: false, source: "default" };
 }
 function resolveBootstrapCredentialDir() {
   if (process.env.OPENLEARN_DATA_DIR?.trim()) {
@@ -12135,6 +12327,11 @@ function persistGeneratedSeedCredentials(lines) {
     console.warn(`[SECURITY] \u65E0\u6CD5\u5199\u5165 ${filePath}\uFF0C\u8BF7\u4ECE\u4E0A\u65B9\u65E5\u5FD7\u6284\u5F55\u521D\u59CB\u53E3\u4EE4\u3002`, err);
   }
 }
+function logDefaultSeedCredentials(usernames) {
+  console.warn(
+    "[SECURITY] \u9996\u6B21\u542F\u52A8\u5DF2\u521B\u5EFA\u79CD\u5B50\u8D26\u53F7\uFF0C\u521D\u59CB\u53E3\u4EE4 = \u7528\u6237\u540D\uFF08\u9996\u6B21\u767B\u5F55\u540E\u5FC5\u987B\u4FEE\u6539\uFF09\uFF1A\n" + usernames.map((name) => `  ${name} / ${name}`).join("\n") + "\n  \u6539\u5BC6\u524D\uFF0C\u9664\u300C\u6539\u5BC6 / \u767B\u51FA\u300D\u4EE5\u5916\u7684\u6240\u6709\u63A5\u53E3\u90FD\u4F1A\u88AB\u62D2\u7EDD\uFF08403 FORBIDDEN_DEFAULT_PASSWORD\uFF09\u3002\n  \u5982\u9700\u968F\u673A\u521D\u59CB\u53E3\u4EE4\uFF0C\u8BBE\u7F6E OPENLEARN_SEED_PASSWORD_MODE=random \u540E\u91CD\u5EFA\u6570\u636E\u5E93\u3002"
+  );
+}
 function verifyPassword(pwd, storedHash) {
   if (storedHash.startsWith("$2")) {
     return { valid: import_bcryptjs.default.compareSync(pwd, storedHash), needsUpgrade: false };
@@ -12248,16 +12445,19 @@ function initializeDatabase(instance) {
     const countObj = instance.prepare("SELECT COUNT(*) as cnt FROM users").get();
     const allowWellKnown = isPlaywrightTestFlag(process.env.PLAYWRIGHT_TEST);
     const vitestFallback = Boolean(process.env.VITEST) && !allowWellKnown;
+    const seedMode = resolveSeedPasswordMode();
     if (countObj && countObj.cnt === 0) {
       const adminCred = resolveSeedCredential("admin", {
         envValue: process.env.OPENLEARN_ADMIN_PASSWORD,
         allowWellKnown,
-        vitestFallback
+        vitestFallback,
+        mode: seedMode
       });
       const teacherCred = resolveSeedCredential("teacher", {
         envValue: process.env.OPENLEARN_TEACHER_PASSWORD,
         allowWellKnown,
-        vitestFallback
+        vitestFallback,
+        mode: seedMode
       });
       const insertStmt = instance.prepare(
         "INSERT INTO users (id, username, password_hash, role, name, created_at, must_change_password) VALUES (?, ?, ?, ?, ?, ?, ?)"
@@ -12284,8 +12484,12 @@ function initializeDatabase(instance) {
       if (adminCred.generated) generated.push(`admin ${adminCred.password}`);
       if (teacherCred.generated) generated.push(`teacher ${teacherCred.password}`);
       if (generated.length > 0) persistGeneratedSeedCredentials(generated);
-    } else if (!allowWellKnown) {
-      const seeded = instance.prepare("SELECT id, username, password_hash FROM users WHERE username IN (?, ?)").all("admin", "teacher");
+      const defaulted = [];
+      if (adminCred.source === "default") defaulted.push("admin");
+      if (teacherCred.source === "default") defaulted.push("teacher");
+      if (defaulted.length > 0) logDefaultSeedCredentials(defaulted);
+    } else {
+      const seeded = allowWellKnown ? [] : instance.prepare("SELECT id, username, password_hash FROM users WHERE username IN (?, ?)").all("admin", "teacher");
       for (const user of seeded) {
         if (!verifyPassword(user.username, user.password_hash).valid) continue;
         instance.prepare("UPDATE users SET must_change_password = 1 WHERE id = ?").run(user.id);
@@ -14920,6 +15124,45 @@ var BuiltinPlugin = {
       "page_meta"
       // 分页与大纲元数据
     ];
+    const normalizePluginElementData = (dataObj) => {
+      const pluginId = typeof dataObj.pluginId === "string" ? dataObj.pluginId.trim() : "";
+      if (!pluginId) {
+        console.warn("[Whiteboard] plugin \u5143\u7D20\u672A\u58F0\u660E pluginId\uFF0C\u5C06\u53EA\u80FD\u6309 widgetId \u67E5\u627E\u7EC4\u4EF6\uFF1B\u5EFA\u8BAE\u8865\u4E0A manifest id\u3002");
+      }
+      const teacher = typeof dataObj.teacherWidgetId === "string" ? dataObj.teacherWidgetId.trim() : "";
+      const student = typeof dataObj.studentWidgetId === "string" ? dataObj.studentWidgetId.trim() : "";
+      if (!teacher && !student) {
+        throw new Error(
+          "plugin \u5143\u7D20\u5FC5\u987B\u81F3\u5C11\u58F0\u660E teacherWidgetId \u6216 studentWidgetId \u4E4B\u4E00\uFF0C\u5426\u5219\u6559\u5E08\u7AEF / \u5B66\u751F\u7AEF\u90FD\u4F1A\u505C\u5728\u52A0\u8F7D\u6001\u3002"
+        );
+      }
+      if (!teacher) {
+        dataObj.teacherWidgetId = student;
+        console.warn(`[Whiteboard] plugin \u5143\u7D20\u53EA\u58F0\u660E\u4E86 studentWidgetId\uFF0C\u5DF2\u56DE\u9000 teacherWidgetId="${student}"\u3002`);
+      } else if (!student) {
+        dataObj.studentWidgetId = teacher;
+        console.warn(`[Whiteboard] plugin \u5143\u7D20\u53EA\u58F0\u660E\u4E86 teacherWidgetId\uFF0C\u5DF2\u56DE\u9000 studentWidgetId="${teacher}"\u3002`);
+      }
+    };
+    const buildElementData = (type, rawData, segmentId, page) => {
+      let dataObj = null;
+      try {
+        const parsed = JSON.parse(rawData);
+        dataObj = parsed && typeof parsed === "object" && !Array.isArray(parsed) ? parsed : null;
+      } catch {
+        if (type === "plugin") {
+          throw new Error(
+            'plugin \u5143\u7D20\u7684 data \u5FC5\u987B\u662F\u5408\u6CD5 JSON \u5B57\u7B26\u4E32\uFF08\u4F8B\u5982 {"pluginId":"ext-x","teacherWidgetId":"w"}\uFF09\u3002'
+          );
+        }
+      }
+      if (!dataObj) return rawData;
+      if (segmentId && !dataObj.segmentId) dataObj.segmentId = segmentId;
+      if (page !== void 0 && dataObj.page === void 0) dataObj.page = page;
+      else if (dataObj.page === void 0) dataObj.page = 0;
+      if (type === "plugin") normalizePluginElementData(dataObj);
+      return JSON.stringify(dataObj);
+    };
     const isAllowedElementType = (type) => {
       if (!type || typeof type !== "string") return false;
       if (KNOWN_ELEMENT_TYPES2.includes(type)) return true;
@@ -14968,20 +15211,7 @@ var BuiltinPlugin = {
           throw new Error(`\u4E0D\u652F\u6301\u7684\u5143\u7D20\u7C7B\u578B "${payload.type}"\u3002${hint}`);
         }
         const elementId = (0, import_uuid7.v7)();
-        let dataStr = payload.data;
-        try {
-          const dataObj = JSON.parse(dataStr);
-          if (payload.segmentId && !dataObj.segmentId) {
-            dataObj.segmentId = payload.segmentId;
-          }
-          if (payload.page !== void 0 && dataObj.page === void 0) {
-            dataObj.page = payload.page;
-          } else if (dataObj.page === void 0) {
-            dataObj.page = 0;
-          }
-          dataStr = JSON.stringify(dataObj);
-        } catch {
-        }
+        const dataStr = buildElementData(payload.type, payload.data, payload.segmentId, payload.page);
         const stmt = db2.prepare(
           "INSERT INTO whiteboard_elements (id, lesson_id, type, data, created_at) VALUES (?, ?, ?, ?, ?)"
         );
@@ -15210,15 +15440,7 @@ var BuiltinPlugin = {
               throw new Error(`\u4E0D\u652F\u6301\u7684\u5143\u7D20\u7C7B\u578B "${el.type}"\u3002\u5DF2\u77E5\u7C7B\u578B\uFF1A${KNOWN_ELEMENT_TYPES2.join(", ")}`);
             }
             const elementId = (0, import_uuid7.v7)();
-            let dataStr = el.data;
-            try {
-              const dataObj = JSON.parse(dataStr);
-              if (el.segmentId && !dataObj.segmentId) dataObj.segmentId = el.segmentId;
-              if (el.page !== void 0 && dataObj.page === void 0) dataObj.page = el.page;
-              else if (dataObj.page === void 0) dataObj.page = 0;
-              dataStr = JSON.stringify(dataObj);
-            } catch {
-            }
+            const dataStr = buildElementData(el.type, el.data, el.segmentId, el.page);
             insertStmt.run(elementId, payload.lessonId, el.type, dataStr, Date.now());
             elementIds.push(elementId);
           }
@@ -18042,6 +18264,40 @@ var SemesterGradeService = class {
   }
 };
 
+// packages/core/di/roster-service.ts
+var ClassRosterService = class {
+  constructor(db2) {
+    this.db = db2;
+  }
+  async listClasses() {
+    const rows = this.db.prepare(
+      `SELECT c.id AS id, c.name AS name, COUNT(cs.student_id) AS student_count
+           FROM classes c
+           LEFT JOIN class_students cs ON cs.class_id = c.id
+          GROUP BY c.id, c.name
+          ORDER BY c.created_at DESC, c.name ASC`
+    ).all();
+    return rows.map((row) => ({ id: row.id, name: row.name, studentCount: Number(row.student_count) }));
+  }
+  async listClassStudents(classId) {
+    const rows = this.db.prepare(
+      `SELECT s.id AS id, s.name AS name, s.student_number AS student_number
+           FROM class_students cs
+           JOIN students s ON s.id = cs.student_id
+          WHERE cs.class_id = ?
+          ORDER BY s.name ASC`
+    ).all(classId);
+    return rows.map(toStudentRef);
+  }
+  async getStudent(studentId) {
+    const row = this.db.prepare("SELECT id, name, student_number FROM students WHERE id = ?").get(studentId);
+    return row ? toStudentRef(row) : null;
+  }
+};
+function toStudentRef(row) {
+  return { id: row.id, name: row.name, studentNumber: row.student_number ?? null };
+}
+
 // packages/core/di/points-dimension-registry.ts
 var PointsDimensionRegistry = class {
   constructor() {
@@ -20253,6 +20509,7 @@ init_types();
 init_errors2();
 init_interfaces();
 init_plugin_grants();
+init_catalog();
 var PluginHostLifecycle = class extends PluginHostHttp {
   /**
    * 激活插件。
@@ -20310,12 +20567,47 @@ var PluginHostLifecycle = class extends PluginHostHttp {
     const currentState = this.pluginStates.get(pluginId) ?? "installed" /* INSTALLED */;
     this.validateTransition(pluginId, currentState, "activating" /* ACTIVATING */);
     this.setPluginState(pluginId, "activating" /* ACTIVATING */);
+    const commandTypesBefore = this.listHostCommandTypes();
     const preloaded = this.preloadedPlugins.get(pluginId);
     if (preloaded) {
       await this.activatePreloaded(pluginId, preloaded);
+      this.auditMissingActionDescriptors(pluginId, commandTypesBefore);
       return;
     }
     await this.activateFromDatabase(pluginId, currentState);
+    this.auditMissingActionDescriptors(pluginId, commandTypesBefore);
+  }
+  /** 宿主 CommandBus 当前注册的命令类型；解析失败返回空集（自检不能影响激活）。 */
+  listHostCommandTypes() {
+    try {
+      const bus = this.serviceRegistry.resolve(ICommandBusServiceToken4);
+      return new Set(bus.listRegisteredCommandTypes?.() ?? []);
+    } catch {
+      return /* @__PURE__ */ new Set();
+    }
+  }
+  /**
+   * 插件激活后的命令契约自检（Issue #369）。
+   *
+   * 命令总线是 default-deny：handler 有、ActionDescriptor 没有的命令会在用户点击时
+   * 403 `COMMAND_NOT_REGISTERED`。静态扫描抓不到循环注册 / 对象表 / `regHandler()` 包装，
+   * 所以改为激活后做一次运行时差集，把缺口提前打成立即可见的 WARN。
+   *
+   * 自检只服务可观测性：任何异常都不能影响激活结果，故整体 try/catch 且只打日志。
+   */
+  auditMissingActionDescriptors(pluginId, before) {
+    try {
+      if (this.inflightActivate.size > 1) return;
+      const added = Array.from(this.listHostCommandTypes()).filter((type) => !before.has(type));
+      if (added.length === 0) return;
+      const registry4 = this.serviceRegistry.resolve(IActionRegistryServiceToken4);
+      const missing = registry4.listMissingDescriptors?.(added) ?? [];
+      if (missing.length === 0) return;
+      console.warn(
+        `[PluginHost] \u63D2\u4EF6 "${pluginId}" \u6709 ${missing.length} \u4E2A\u547D\u4EE4 handler \u6CA1\u6709 ActionDescriptor\uFF1A${missing.join(", ")}\u3002\u8FD9\u4E9B\u547D\u4EE4\u4F1A\u88AB default-deny \u4EE5 403 COMMAND_NOT_REGISTERED \u62D2\u7EDD\uFF0C\u8BF7\u4E3A\u6BCF\u4E2A registerHandler \u540C\u65F6\u6CE8\u518C actionRegistry.register(...)\u3002`
+      );
+    } catch {
+    }
   }
   /**
    * preloaded 插件的激活（Phase 8，内置插件路径）。
@@ -20566,6 +20858,12 @@ var PluginHostLifecycle = class extends PluginHostHttp {
   async grantCapabilities(actorId, caps, opts) {
     if (caps.length === 0) return;
     try {
+      const { unknown } = validateManifestCapabilities(caps);
+      if (unknown.length > 0) {
+        console.error(
+          `[PluginHost] "${actorId}" \u7684 manifest \u58F0\u660E\u4E86\u672A\u77E5\u80FD\u529B\uFF1A${unknown.join(", ")}\u3002\u8FD9\u4E9B\u4E32\u4E0D\u4F1A\u751F\u6548\uFF08\u5B88\u536B\u53EA\u8BA4 ActionDescriptor.capabilityRequired\uFF09\u3002\u5408\u6CD5\u6E05\u5355\u89C1 packages/core/capability/catalog.ts \u4E0E docs/reference/plugin-capability-matrix.md\u3002`
+        );
+      }
       const capService = await this.serviceRegistry.resolve(ICapabilityServiceToken);
       for (const cap of caps) {
         if (typeof cap !== "string" || isBlockedPluginCapability(cap)) {
@@ -20906,7 +21204,7 @@ var import_node_fs11 = __toESM(require("node:fs"), 1);
 var import_node_path13 = __toESM(require("node:path"), 1);
 var import_node_url5 = require("node:url");
 var import_meta7 = {};
-var FALLBACK_VERSION = "0.7.9";
+var FALLBACK_VERSION = "0.7.10";
 function readPlatformVersion() {
   const bases = [];
   if (typeof __dirname !== "undefined") bases.push(__dirname);
@@ -30615,6 +30913,7 @@ var Kernel = class {
     this.serviceRegistry.register(ISemesterGradeServiceToken, new SemesterGradeService(this.db));
     this.serviceRegistry.register(IPointsDimensionRegistryToken, new PointsDimensionRegistry());
     this.serviceRegistry.register(IPointsLedgerServiceToken, new PointsLedgerService(this.db));
+    this.serviceRegistry.register(IClassRosterServiceToken, new ClassRosterService(this.db));
     this.serviceRegistry.register(ILessonEngineServiceToken, { getRuntime: async () => this.lessonRuntime });
     this.serviceRegistry.register(IClassroomRuntimeServiceToken, {
       getRuntimeKernel: async () => this.classroomRuntime
@@ -32808,21 +33107,29 @@ function validateStartupEnv(env = process.env) {
   if (isProduction) {
     const adminPassword = trimmed(env, "OPENLEARN_ADMIN_PASSWORD");
     if (adminPassword && adminPassword.toLowerCase() === "admin") {
-      errors.push({
+      warnings.push({
         key: "OPENLEARN_ADMIN_PASSWORD",
-        severity: "error",
-        message: '\u751F\u4EA7\u73AF\u5883\u7981\u6B62\u628A OPENLEARN_ADMIN_PASSWORD \u8BBE\u4E3A\u7528\u6237\u540D "admin"\u3002\u8BF7\u8BBE\u7F6E\u5F3A\u53E3\u4EE4\u3002'
+        severity: "warning",
+        message: "OPENLEARN_ADMIN_PASSWORD \u4E0E\u7528\u6237\u540D\u76F8\u540C\u3002\u8FD9\u4E0D\u6BD4\u7559\u7A7A\u66F4\u5F31\uFF08\u7559\u7A7A\u65F6\u521D\u59CB\u53E3\u4EE4\u540C\u6837\u662F admin\uFF09\uFF0C\u4F46\u8BF7\u786E\u8BA4\u9996\u6B21\u767B\u5F55\u540E\u7ACB\u5373\u6539\u5BC6\uFF1B\u751F\u4EA7\u90E8\u7F72\u5EFA\u8BAE\u76F4\u63A5\u8BBE\u7F6E\u4E3A\u5F3A\u53E3\u4EE4\u3002"
       });
     }
     const teacherPassword = trimmed(env, "OPENLEARN_TEACHER_PASSWORD");
     if (teacherPassword && teacherPassword.toLowerCase() === "teacher") {
-      errors.push({
+      warnings.push({
         key: "OPENLEARN_TEACHER_PASSWORD",
-        severity: "error",
-        message: '\u751F\u4EA7\u73AF\u5883\u7981\u6B62\u628A OPENLEARN_TEACHER_PASSWORD \u8BBE\u4E3A\u7528\u6237\u540D "teacher"\u3002\u8BF7\u8BBE\u7F6E\u5F3A\u53E3\u4EE4\u3002'
+        severity: "warning",
+        message: "OPENLEARN_TEACHER_PASSWORD \u4E0E\u7528\u6237\u540D\u76F8\u540C\u3002\u8BF7\u786E\u8BA4\u9996\u6B21\u767B\u5F55\u540E\u7ACB\u5373\u6539\u5BC6\uFF0C\u751F\u4EA7\u90E8\u7F72\u5EFA\u8BAE\u8BBE\u7F6E\u4E3A\u5F3A\u53E3\u4EE4\u3002"
       });
     }
   }
+  const seedMode = trimmed(env, "OPENLEARN_SEED_PASSWORD_MODE");
+  if (seedMode && !["default", "random"].includes(seedMode.toLowerCase())) {
+    errors.push({
+      key: "OPENLEARN_SEED_PASSWORD_MODE",
+      severity: "error",
+      message: `\u53EA\u652F\u6301 "default"\uFF08\u53E3\u4EE4 = \u7528\u6237\u540D\uFF0C\u9996\u6B21\u767B\u5F55\u5F3A\u5236\u6539\u5BC6\uFF09\u6216 "random"\uFF08\u968F\u673A\u53E3\u4EE4\u5199\u5165 bootstrap-credentials.txt\uFF09\uFF0C\u6536\u5230 "${seedMode}"\u3002`
+    });
+  }
   const metricsToken = trimmed(env, "METRICS_TOKEN");
   if (metricsToken && metricsToken.length < 16) {
     warnings.push({
@@ -45167,6 +45474,26 @@ function resolveWritableStudentId(session, rawId) {
   if (isTeacher(session) && teacherCanSeeStudent(kernelContainer.getReadDb(), session, studentId)) return studentId;
   return null;
 }
+var SEED_STATUS_TTL_MS = 15e3;
+var seedStatusCache = null;
+function readSeedDefaultStatus() {
+  const now = Date.now();
+  if (seedStatusCache && seedStatusCache.expiresAt > now) return seedStatusCache.payload;
+  const accounts = [];
+  try {
+    const rows = kernelContainer.db.prepare("SELECT username, password_hash FROM users WHERE username IN (?, ?)").all("admin", "teacher");
+    for (const row of rows) {
+      if (verifyPassword(row.username, row.password_hash).valid) accounts.push(row.username);
+    }
+  } catch {
+  }
+  const payload = { active: accounts.length > 0, accounts };
+  seedStatusCache = { payload, expiresAt: now + SEED_STATUS_TTL_MS };
+  return payload;
+}
+function invalidateSeedStatusCache() {
+  seedStatusCache = null;
+}
 function registerRosterRoutes(ctx) {
   const { app, io, loginLimiter } = ctx;
   const rosterService = new RosterService(kernelContainer.db, kernelContainer.getReadDb());
@@ -45448,6 +45775,7 @@ function registerRosterRoutes(ctx) {
           return res.status(400).json({ error: "New password must be different from the username" });
         }
         kernelContainer.db.prepare("UPDATE users SET password_hash = ?, must_change_password = 0 WHERE id = ?").run(hashPassword(newPassword), session.userId);
+        invalidateSeedStatusCache();
         kernelContainer.db.prepare("DELETE FROM client_sessions WHERE id != ? AND session_data LIKE ?").run(token, `%${session.userId}%`);
         try {
           const updatedSession = { ...session, mustChangePassword: false };
@@ -45615,6 +45943,13 @@ function registerRosterRoutes(ctx) {
       sendSafeError(res, e);
     }
   });
+  app.get("/api/auth/seed-status", (_req, res) => {
+    try {
+      res.json(readSeedDefaultStatus());
+    } catch (e) {
+      sendSafeError(res, e);
+    }
+  });
   app.post("/api/auth/login", loginLimiter, (req, res) => {
     try {
       const { entrance, username, password, studentId } = req.body;