openlearn-next 0.7.9 → 0.7.12

package/dist/server.cjs

@@ -507,6 +507,74 @@ var init_plugin_metrics = __esm({
   }
 });
 
+// packages/core/capability/catalog.ts
+function validateManifestCapabilities(capabilities) {
+  const unknown = [];
+  for (const cap of capabilities) {
+    if (typeof cap !== "string" || !KNOWN_CAPABILITIES.has(cap)) {
+      unknown.push(typeof cap === "string" ? cap : String(cap));
+    }
+  }
+  return { valid: unknown.length === 0, unknown };
+}
+var CAP_API_WRITE, CAP_API_ADMIN, CAP_GRADES_WRITE, CAP_AGENT_TOOL, CAP_AI_INVOKE, CAP_TASK_REGISTER, CAP_STUDENT_DATA_READ, CAP_STUDENT_DATA_WRITE, CAP, CAPABILITIES, KNOWN_CAPABILITIES;
+var init_catalog = __esm({
+  "packages/core/capability/catalog.ts"() {
+    "use strict";
+    CAP_API_WRITE = "api:write";
+    CAP_API_ADMIN = "api:admin";
+    CAP_GRADES_WRITE = "grades:write";
+    CAP_AGENT_TOOL = "agent:tool";
+    CAP_AI_INVOKE = "ai:invoke";
+    CAP_TASK_REGISTER = "task:register";
+    CAP_STUDENT_DATA_READ = "student-data:read";
+    CAP_STUDENT_DATA_WRITE = "student-data:write";
+    CAP = {
+      // ── 资源型（ActionDescriptor.capabilityRequired）──────────────────────
+      ASSIGNMENT_MANAGE: "assignment:manage",
+      ASSIGNMENT_READ: "assignment:read",
+      ASSIGNMENT_REVIEW: "assignment:review",
+      ASSIGNMENT_SUBMIT: "assignment:submit",
+      ASSIGNMENT_WRITE: "assignment:write",
+      LESSON_DELETE: "lesson:delete",
+      LESSON_READ: "lesson:read",
+      LESSON_WRITE: "lesson:write",
+      MANAGEMENT_READ: "management:read",
+      MANAGEMENT_WRITE: "management:write",
+      PLUGIN_READ: "plugin:read",
+      PLUGIN_WRITE: "plugin:write",
+      PROCESS_READ: "process:read",
+      PROCESS_WRITE: "process:write",
+      STUDENT_WRITE: "student:write",
+      VFS_READ: "vfs:read",
+      VFS_WRITE: "vfs:write",
+      WHITEBOARD_READ: "whiteboard:read",
+      WHITEBOARD_WRITE: "whiteboard:write",
+      // ── 历史上只出现在 capabilitiesProposed、从未作为 capabilityRequired ──
+      // 保留是为了不让内置 management 插件在升级后突然被标成「未知串」。
+      CLASS_READ: "class:read",
+      CLASS_WRITE: "class:write",
+      STUDENT_READ: "student:read",
+      // ── 方法级（method-policy / 服务代理的 Security Barrier 3）───────────
+      API_WRITE: CAP_API_WRITE,
+      API_ADMIN: CAP_API_ADMIN,
+      GRADES_WRITE: CAP_GRADES_WRITE,
+      AGENT_TOOL: CAP_AGENT_TOOL,
+      AI_INVOKE: CAP_AI_INVOKE,
+      TASK_REGISTER: CAP_TASK_REGISTER,
+      STUDENT_DATA_READ: CAP_STUDENT_DATA_READ,
+      STUDENT_DATA_WRITE: CAP_STUDENT_DATA_WRITE,
+      // ── 平台内部 ─────────────────────────────────────────────────────────
+      // 片段命令（segment gate）用，插件片段可声明；不在 AI 工具箱里。
+      SEGMENT_GATE_EVAL: "segment:gate_eval"
+    };
+    CAPABILITIES = Object.freeze(
+      Array.from(new Set(Object.values(CAP)))
+    );
+    KNOWN_CAPABILITIES = new Set(CAPABILITIES);
+  }
+});
+
 // packages/core/esm-loader/manifest-schema.ts
 var import_zod, classroomToolSchema, helpDocSchema, quickActivitySchema, timelineSegmentSchema, paletteItemSchema, cockpitWidgetSchema, stageCardSchema, classroomTopbarActionSchema, classroomAttributionAwardSchema, studentCompetencyDimensionSchema, studentProfileWidgetSchema, canvasWidgetSchema, barometerMetricSchema, peerReviewRubricSchema, peerReviewBadgeSchema, preclassPasscodeActionSchema, preclassPasscodeAddonSchema, commandPaletteItemSchema, quickInsertItemSchema, aiPromptTemplateSchema, aiSkillProviderSchema, classTabSchema, classBatchActionSchema, studentRowPanelSchema, editorHeaderActionSchema, postClassWidgetSchema, coursewareViewerToolbarSchema, coursewareViewerOverlaySchema, portalTelemetrySchema, portalCourseBadgeSchema, portalTeachingModeSchema, portalInsightSchema, portalPreflightSchema, portalLaunchActionSchema, countdownWidgetSchema, countdownActionSchema, studentCountdownSchema, studentQuickActionsItemSchema, studentQuickActionsActionSchema, studentQuickActionsFabSchema, notificationTabsSchema, pacingDashboardSchema, diagnosticFeedSchema, collabCanvasSchema, topbarPillSchema, attributionActionSchema, leaderboardActionSchema, studentProfileActionSchema, studentProfileTimelineItemSchema, classroomHeaderActionSchema, classroomAgendaActionSchema, whiteboardDockPluginSchema, classroomAuditEventSchema, peerReviewActionSchema, peerReviewShowcaseWidgetSchema, seatingToolbarSchema, seatingLegendSchema, seatingSeatBadgeSchema, seatingSeatActionsSchema, seatingSummarySchema, whiteboardAutosaveStatusSchema, whiteboardAutosaveActionSchema, teacherPanelSchema, studentFullscreenSchema, globalSettingSchema, navUserMenuSchema, frontendSlotEntrySchema, frontendSlotsShape, pluginLocalesSchema, contributesSchema, deploySchema, apiRouteSchema, apiSchema, requiresItemSchema, manifestSchema, requiresItemV3Schema, manifestSchemaV3;
 var init_manifest_schema = __esm({
@@ -1800,7 +1868,7 @@ var init_token = __esm({
 });
 
 // packages/core/di/interfaces.ts
-var ICommandBusServiceToken4, IEventBusServiceToken3, IActionRegistryServiceToken4, ICapabilityServiceToken, IProcessServiceToken2, IStorageServiceToken, IAIServiceToken, IDatabaseToken4, IPluginHostToken, IPluginLifecycleManagerToken, IPluginDistributionManagerToken, IPluginRuntimeCompositionToken, IUnifiedExtensionRegistryToken, IPluginCapabilityGatewayToken, ICapabilityRegistryToken, IAuthSessionBridgeToken, ISemesterGradeServiceToken, IPointsDimensionRegistryToken, IPointsLedgerServiceToken, ILessonEngineServiceToken, IClassroomRuntimeServiceToken, IPresenceEngineServiceToken, ITeachingCollaborationServiceToken, ILearningAnalyticsServiceToken, IAICapabilityServiceToken, ICapabilityRuntimeServiceToken, ICapabilityGovernanceServiceToken, IPlatformServiceRegistryToken, ICoursewareRuntimeScriptRegistryToken, IClassroomLifecycleServiceToken, IInteractionRuntimeServiceToken, IClassroomCountdownServiceToken, IAssessmentGraderRegistryToken, IStageGuardServiceToken, PLUGIN_RESOLVABLE_TOKENS, PLUGIN_RESOLVABLE_TOKEN_NAMES, INetworkProxyServiceToken;
+var ICommandBusServiceToken4, IEventBusServiceToken3, IActionRegistryServiceToken4, ICapabilityServiceToken, IProcessServiceToken2, IStorageServiceToken, IAIServiceToken, IDatabaseToken4, IPluginHostToken, IPluginLifecycleManagerToken, IPluginDistributionManagerToken, IPluginRuntimeCompositionToken, IUnifiedExtensionRegistryToken, IPluginCapabilityGatewayToken, ICapabilityRegistryToken, IAuthSessionBridgeToken, ISemesterGradeServiceToken, IPointsDimensionRegistryToken, IPointsLedgerServiceToken, IClassRosterServiceToken, ILessonEngineServiceToken, IClassroomRuntimeServiceToken, IPresenceEngineServiceToken, ITeachingCollaborationServiceToken, ILearningAnalyticsServiceToken, IAICapabilityServiceToken, ICapabilityRuntimeServiceToken, ICapabilityGovernanceServiceToken, IPlatformServiceRegistryToken, ICoursewareRuntimeScriptRegistryToken, IClassroomLifecycleServiceToken, IInteractionRuntimeServiceToken, IClassroomCountdownServiceToken, IAssessmentGraderRegistryToken, IStageGuardServiceToken, PLUGIN_RESOLVABLE_TOKENS, PLUGIN_RESOLVABLE_TOKEN_NAMES, INetworkProxyServiceToken;
 var init_interfaces = __esm({
   "packages/core/di/interfaces.ts"() {
     "use strict";
@@ -1839,6 +1907,7 @@ var init_interfaces = __esm({
       "@openlearn/core:IPointsDimensionRegistry"
     );
     IPointsLedgerServiceToken = new Token("@openlearn/core:IPointsLedgerService");
+    IClassRosterServiceToken = new Token("@openlearn/core:IClassRosterService");
     ILessonEngineServiceToken = new Token("@openlearn/core:ILessonEngineService");
     IClassroomRuntimeServiceToken = new Token(
       "@openlearn/core:IClassroomRuntimeService"
@@ -1889,6 +1958,7 @@ var init_interfaces = __esm({
       ISemesterGradeServiceToken,
       IPointsDimensionRegistryToken,
       IPointsLedgerServiceToken,
+      IClassRosterServiceToken,
       ILessonEngineServiceToken,
       IClassroomRuntimeServiceToken,
       IPresenceEngineServiceToken,
@@ -3234,6 +3304,95 @@ var init_ai_event_bus = __esm({
   }
 });
 
+// packages/core/di/ai-provider-resolver.ts
+function hasOwnerColumns(db2) {
+  try {
+    const cols = db2.prepare("PRAGMA table_info(ai_providers)").all();
+    return cols.some((c) => c.name === "owner_id");
+  } catch {
+    return false;
+  }
+}
+function resolveAccessibleAiProvider(db2, options = {}) {
+  const { providerId, userId, lang = "zh" } = options;
+  const supportsOwner = hasOwnerColumns(db2);
+  let provider;
+  if (providerId) {
+    const row = supportsOwner ? db2.prepare(
+      "SELECT id, name, api_url, api_key, model_name, owner_id, is_shared, created_at, updated_at FROM ai_providers WHERE id = ?"
+    ).get(providerId) : db2.prepare("SELECT id, name, api_url, api_key, model_name FROM ai_providers WHERE id = ?").get(providerId);
+    if (!row) {
+      throw new AiProviderError(
+        lang === "zh" ? "\u672A\u627E\u5230\u6307\u5B9A\u7684 AI \u63D0\u4F9B\u5546" : "Specified AI Provider not found",
+        404,
+        "PROVIDER_NOT_FOUND"
+      );
+    }
+    if (supportsOwner) {
+      const isShared = Number(row.is_shared) === 1 || row.owner_id === null;
+      const isOwner = Boolean(userId && row.owner_id === userId);
+      if (!isShared && !isOwner) {
+        throw new AiProviderError(
+          lang === "zh" ? "\u65E0\u6743\u4F7F\u7528\u8BE5 AI \u63D0\u4F9B\u5546\uFF08\u975E\u672C\u4EBA\u79C1\u6709\u4E14\u672A\u5171\u4EAB\uFF09" : "Forbidden: You do not have access to this private AI provider",
+          403,
+          "PROVIDER_ACCESS_DENIED"
+        );
+      }
+    }
+    provider = row;
+  } else {
+    if (!supportsOwner) {
+      provider = db2.prepare(
+        "SELECT id, name, api_url, api_key, model_name FROM ai_providers WHERE api_key IS NOT NULL AND api_key != '' ORDER BY created_at DESC LIMIT 1"
+      ).get();
+    } else if (userId) {
+      provider = db2.prepare(
+        `SELECT id, name, api_url, api_key, model_name, owner_id, is_shared, created_at, updated_at
+           FROM ai_providers
+           WHERE (owner_id = ? OR is_shared = 1 OR owner_id IS NULL)
+             AND api_key IS NOT NULL AND api_key != ''
+           ORDER BY (CASE WHEN owner_id = ? THEN 0 WHEN is_shared = 1 THEN 1 ELSE 2 END), created_at DESC
+           LIMIT 1`
+      ).get(userId, userId);
+    } else {
+      provider = db2.prepare(
+        `SELECT id, name, api_url, api_key, model_name, owner_id, is_shared, created_at, updated_at
+           FROM ai_providers
+           WHERE (is_shared = 1 OR owner_id IS NULL)
+             AND api_key IS NOT NULL AND api_key != ''
+           ORDER BY (CASE WHEN is_shared = 1 THEN 0 ELSE 1 END), created_at DESC
+           LIMIT 1`
+      ).get();
+    }
+  }
+  if (provider?.api_key) {
+    provider.api_key = decryptApiKey(provider.api_key);
+  }
+  if (!provider || !provider.api_key || !provider.api_key.trim()) {
+    throw new AiProviderError(
+      lang === "zh" ? "\u672A\u68C0\u6D4B\u5230\u53EF\u7528\u7684 AI \u63D0\u4F9B\u5546\u3002\u8BF7\u524D\u5F80\u914D\u7F6E\u5927\u6A21\u578B\u670D\u52A1\u3002" : "No active AI Provider configured. Please add and configure an AI Provider in settings.",
+      400,
+      "NO_AI_PROVIDER"
+    );
+  }
+  return provider;
+}
+var AiProviderError;
+var init_ai_provider_resolver = __esm({
+  "packages/core/di/ai-provider-resolver.ts"() {
+    "use strict";
+    init_api_key_crypto();
+    AiProviderError = class extends Error {
+      constructor(message, status = 400, code = "AI_PROVIDER_ERROR") {
+        super(message);
+        this.name = "AiProviderError";
+        this.status = status;
+        this.code = code;
+      }
+    };
+  }
+});
+
 // packages/core/di/ai-service.ts
 var AIService;
 var init_ai_service = __esm({
@@ -3242,6 +3401,7 @@ var init_ai_service = __esm({
     init_provider_gateway();
     init_ai_event_bus();
     init_api_key_crypto();
+    init_ai_provider_resolver();
     AIService = class {
       constructor(db2) {
         this.db = db2;
@@ -3289,16 +3449,11 @@ var init_ai_service = __esm({
         this._contextDelegates.unregister?.(id);
       }
       async generateText(prompt, options) {
-        const provider = this.db.prepare(
-          "SELECT id, name, api_url, api_key, model_name FROM ai_providers WHERE api_key IS NOT NULL AND api_key != '' LIMIT 1"
-        ).get();
-        if (!provider || !provider.api_key) {
-          throw new Error("\u672A\u68C0\u6D4B\u5230\u53EF\u7528\u7684 AI \u63D0\u4F9B\u5546\u3002\u8BF7\u524D\u5F80\u300C\u7CFB\u7EDF\u7BA1\u7406 -> AI \u63D0\u4F9B\u5546\u7BA1\u7406\u300D\u6DFB\u52A0\u5E76\u914D\u7F6E\u5927\u6A21\u578B\u670D\u52A1\u3002");
-        }
-        const apiKey = decryptApiKey(provider.api_key);
-        if (!apiKey || !apiKey.trim()) {
-          throw new Error("AI Provider API Key \u89E3\u5BC6\u4E3A\u7A7A\uFF0C\u8BF7\u524D\u5F80\u300C\u7CFB\u7EDF\u7BA1\u7406 -> AI \u63D0\u4F9B\u5546\u7BA1\u7406\u300D\u91CD\u65B0\u4FDD\u5B58\u5BC6\u94A5\u3002");
-        }
+        const provider = resolveAccessibleAiProvider(this.db, {
+          userId: options?.userId,
+          providerId: options?.providerId
+        });
+        const apiKey = provider.api_key;
         if (looksLikeCiphertext(apiKey)) {
           throw new Error(
             "AI Provider API Key \u89E3\u5BC6\u5931\u8D25\uFF1AENCRYPTION_KEY \u4E0E\u52A0\u5BC6\u65F6\u4E0D\u4E00\u81F4\uFF08\u5E38\u89C1\u4E8E PM2 \u5C06 ENCRYPTION_KEY \u7F6E\u7A7A\u6216\u5BC6\u94A5\u88AB\u8F6E\u6362\uFF09\u3002\u8BF7\u6062\u590D\u539F ENCRYPTION_KEY\uFF0C\u6216\u524D\u5F80\u300C\u7CFB\u7EDF\u7BA1\u7406 -> AI \u63D0\u4F9B\u5546\u7BA1\u7406\u300D\u91CD\u65B0\u4FDD\u5B58 API Key\u3002"
@@ -4209,18 +4364,11 @@ function checkMethodPolicy(input) {
   if (tokens.uiService && token === tokens.uiService) return null;
   return null;
 }
-var CAP_API_WRITE, CAP_API_ADMIN, CAP_GRADES_WRITE, CAP_AGENT_TOOL, CAP_AI_INVOKE, CAP_TASK_REGISTER, CAP_STUDENT_DATA_READ, CAP_STUDENT_DATA_WRITE, HIGH_RISK_PATH_PREFIXES, IRREVERSIBLE_PATH_SUFFIXES, ENTITY_DELETE_RE;
+var HIGH_RISK_PATH_PREFIXES, IRREVERSIBLE_PATH_SUFFIXES, ENTITY_DELETE_RE;
 var init_method_policy = __esm({
   "packages/core/plugin-host/method-policy.ts"() {
     "use strict";
-    CAP_API_WRITE = "api:write";
-    CAP_API_ADMIN = "api:admin";
-    CAP_GRADES_WRITE = "grades:write";
-    CAP_AGENT_TOOL = "agent:tool";
-    CAP_AI_INVOKE = "ai:invoke";
-    CAP_TASK_REGISTER = "task:register";
-    CAP_STUDENT_DATA_READ = "student-data:read";
-    CAP_STUDENT_DATA_WRITE = "student-data:write";
+    init_catalog();
     HIGH_RISK_PATH_PREFIXES = Object.freeze([
       "/api/plugins",
       // 插件增删改、一键更新（可执行任意第三方代码）
@@ -4244,51 +4392,238 @@ var init_method_policy = __esm({
   }
 });
 
-// packages/core/command-bus/plugin-command.ts
-function bindPluginCommand(command, pluginActorId) {
-  const actor = typeof pluginActorId === "string" ? pluginActorId.trim() : "";
-  if (!actor) {
-    throw new Error("[Security] Refusing to dispatch a plugin command without a host-assigned actor");
+// packages/core/plugin-host/sql-guard.ts
+function sanitizeSql(sql) {
+  let inSingleQuote = false;
+  let inDoubleQuote = false;
+  let inBacktick = false;
+  let inBracket = false;
+  let result = "";
+  const len = sql.length;
+  for (let i = 0; i < len; i++) {
+    const ch = sql[i];
+    const next = i + 1 < len ? sql[i + 1] : "";
+    if (!inSingleQuote && !inDoubleQuote && !inBacktick && !inBracket && ch === "-" && next === "-") {
+      while (i < len && sql[i] !== "\n") i++;
+      result += " ";
+      continue;
+    }
+    if (!inSingleQuote && !inDoubleQuote && !inBacktick && !inBracket && ch === "/" && next === "*") {
+      i += 2;
+      while (i < len && !(sql[i] === "*" && i + 1 < len && sql[i + 1] === "/")) {
+        i++;
+      }
+      i++;
+      result += " ";
+      continue;
+    }
+    if (ch === "'" && !inDoubleQuote && !inBacktick && !inBracket) {
+      if (inSingleQuote) {
+        if (next === "'") {
+          i++;
+        } else {
+          inSingleQuote = false;
+        }
+      } else {
+        inSingleQuote = true;
+      }
+      result += " ";
+      continue;
+    }
+    if (inSingleQuote) {
+      result += " ";
+      continue;
+    }
+    if (ch === "[" && !inDoubleQuote && !inBacktick) {
+      inBracket = true;
+      result += " ";
+      continue;
+    }
+    if (ch === "]" && inBracket) {
+      inBracket = false;
+      result += " ";
+      continue;
+    }
+    if (ch === "`" && !inDoubleQuote) {
+      inBacktick = !inBacktick;
+      result += " ";
+      continue;
+    }
+    if (ch === '"' && !inBacktick) {
+      inDoubleQuote = !inDoubleQuote;
+      result += " ";
+      continue;
+    }
+    result += ch;
   }
-  const raw = command && typeof command === "object" ? { ...command } : {};
-  const metadata = raw.metadata && typeof raw.metadata === "object" ? { ...raw.metadata } : {};
-  delete metadata.approved;
-  return { ...raw, actorId: actor, metadata };
+  return result;
 }
-function pluginActorIdFor(manifestId, pluginId) {
-  const id = (manifestId || pluginId || "").trim();
-  if (!id) {
-    throw new Error("[Security] Refusing to dispatch a plugin command without a host-assigned actor");
+function extractFlatTables(flatSql, tables) {
+  const ddlRegex = /\b(?:CREATE|DROP|ALTER)\s+(?:TEMP(?:ORARY)?\s+)?TABLE\s+(?:IF\s+(?:NOT\s+)?EXISTS\s+)?([a-zA-Z_][\w]*)/gi;
+  for (const m of flatSql.matchAll(ddlRegex)) {
+    if (m[1] && m[1].toLowerCase() !== SUBQUERY_PLACEHOLDER) {
+      tables.add(m[1].toLowerCase());
+    }
+  }
+  const renameToRegex = /\bRENAME\s+TO\s+([a-zA-Z_][\w]*)/gi;
+  for (const m of flatSql.matchAll(renameToRegex)) {
+    if (m[1] && m[1].toLowerCase() !== SUBQUERY_PLACEHOLDER) {
+      tables.add(m[1].toLowerCase());
+    }
+  }
+  const simpleClauseRegex = /\b(?:INTO|UPDATE(?:\s+OR\s+(?:ROLLBACK|ABORT|REPLACE|FAIL|IGNORE))?|JOIN)\s+([a-zA-Z_][\w]*)/gi;
+  for (const m of flatSql.matchAll(simpleClauseRegex)) {
+    if (m[1] && m[1].toLowerCase() !== SUBQUERY_PLACEHOLDER) {
+      tables.add(m[1].toLowerCase());
+    }
+  }
+  const fromRegex = /\bFROM\s+([^;]+?)(?=\bWHERE\b|\bGROUP\b|\bHAVING\b|\bORDER\b|\bLIMIT\b|\bUNION\b|\bEXCEPT\b|\bINTERSECT\b|\bWINDOW\b|\bVALUES\b|\bSET\b|\bINTO\b|\bJOIN\b|\bLEFT\b|\bRIGHT\b|\bINNER\b|\bOUTER\b|\bCROSS\b|\bNATURAL\b|\bON\b|\bUSING\b|\bSELECT\b|;|$)/gi;
+  for (const match of flatSql.matchAll(fromRegex)) {
+    const clause = match[1];
+    if (!clause) continue;
+    const parts = clause.split(",");
+    for (const part of parts) {
+      const trimmed2 = part.trim();
+      if (!trimmed2) continue;
+      const tokenMatch = /^[a-zA-Z_][\w]*/.exec(trimmed2);
+      if (tokenMatch) {
+        const tableName = tokenMatch[0].toLowerCase();
+        if (tableName !== SUBQUERY_PLACEHOLDER) {
+          tables.add(tableName);
+        }
+      }
+    }
   }
-  return id.startsWith("plugin:") ? id : `plugin:${id}`;
 }
-var init_plugin_command = __esm({
-  "packages/core/command-bus/plugin-command.ts"() {
-    "use strict";
+function extractReferencedTables(cleanSql) {
+  const tables = /* @__PURE__ */ new Set();
+  let working = cleanSql;
+  const parenRegex = /\(([^()]*)\)/g;
+  let depth = 0;
+  while (parenRegex.test(working) && depth++ < 100) {
+    working = working.replace(parenRegex, (_full, inner) => {
+      extractFlatTables(inner, tables);
+      const trimmedInner = inner.trim();
+      if (/^(?:SELECT|VALUES|WITH)\b/i.test(trimmedInner)) {
+        return ` ${SUBQUERY_PLACEHOLDER} `;
+      }
+      return ` ${inner} `;
+    });
   }
-});
-
-// packages/core/plugin-host/plugin-namespace.ts
-function resolvePluginCommandType(type, pluginId) {
-  const prefix = pluginId + ".";
-  if (type.startsWith(prefix)) return type;
-  if (UUID_V7_PREFIX.test(type)) return type;
-  return prefix + type;
+  working = working.replace(/[()]/g, " ");
+  extractFlatTables(working, tables);
+  return tables;
 }
-function stripPluginCommandPrefix(type, pluginId) {
-  const prefix = pluginId + ".";
-  if (type.startsWith(prefix)) return type.slice(prefix.length);
-  if (UUID_V7_PREFIX.test(type)) {
-    const idx = type.indexOf(".");
-    return type.slice(idx + 1);
+function assertPluginSqlAllowed(options) {
+  const { sql, ownPrefix, allowedPrefixes = [], researchAllowed = false } = options;
+  if (typeof sql !== "string" || sql.trim() === "") return;
+  for (const opRegex of FORBIDDEN_OPERATIONS) {
+    if (opRegex.test(sql)) {
+      throw new Error(`Dangerous statement is forbidden: "${sql.trim()}"`);
+    }
+  }
+  const clean = sanitizeSql(sql);
+  const tables = extractReferencedTables(clean);
+  if (/\b(?:FROM|JOIN|INTO|UPDATE|TABLE)\b/i.test(clean) && tables.size === 0) {
+    throw new Error(`Worker plugin SQL rejected: unable to resolve target table in "${sql.trim()}"`);
+  }
+  const isDdl = /^\s*(DROP|CREATE|ALTER|TRUNCATE)\b/i.test(clean);
+  const words = clean.toLowerCase().match(/\b[a-zA-Z_][\w]*\b/g) || [];
+  for (const word of words) {
+    if (FORBIDDEN_CORE_TABLES_SET.has(word)) {
+      if (tables.has(word)) {
+        if (isDdl) {
+          throw new Error(
+            `Worker plugin is not permitted to perform DDL on table "${word}" (core security table is strictly forbidden)`
+          );
+        }
+        throw new Error(
+          `Worker plugin is not permitted to access table "${word}" (core security table is strictly forbidden)`
+        );
+      }
+    }
+  }
+  const ownPrefixLower = ownPrefix ? ownPrefix.toLowerCase() : "";
+  const validPrefixes = [ownPrefixLower, ...allowedPrefixes.map((p) => p.toLowerCase())].filter(Boolean);
+  for (const table of tables) {
+    if (table === "plugin_migrations") continue;
+    if (researchAllowed && table.startsWith("plugin_research_")) continue;
+    const isOwn = validPrefixes.some((p) => table.startsWith(p));
+    if (isOwn) continue;
+    if (table === "sqlite_master" || table === "sqlite_schema" || table === "sqlite_temp_master") {
+      const strippedComments = sql.replace(/--.*$/gm, " ").replace(/\/\*[\s\S]*?\*\//g, " ").trim();
+      const isAllowedMetaQuery = /^\s*SELECT\s+name\s+FROM\s+(?:sqlite_master|sqlite_schema)\s+WHERE\s+type\s*=\s*['"]table['"]\s+AND\s+name\s+LIKE\s+['"][A-Za-z0-9_%]+['"]\s*$/i.test(
+        strippedComments
+      ) && ownPrefixLower && strippedComments.toLowerCase().includes(ownPrefixLower);
+      if (isAllowedMetaQuery) continue;
+      throw new Error(`Direct access to sqlite metadata table "${table}" is forbidden`);
+    }
+    if (isDdl) {
+      throw new Error(
+        `Worker plugin is not permitted to perform DDL on table "${table}" (only ${ownPrefix || "<none>"} namespace is allowed)`
+      );
+    }
+    throw new Error(
+      `Worker plugin is not permitted to access table "${table}" (only ${ownPrefix || "<none>"} namespace is allowed)`
+    );
   }
-  return type;
 }
-var UUID_V7_PREFIX;
-var init_plugin_namespace = __esm({
-  "packages/core/plugin-host/plugin-namespace.ts"() {
+var FORBIDDEN_CORE_TABLES, FORBIDDEN_CORE_TABLES_SET, FORBIDDEN_OPERATIONS, SUBQUERY_PLACEHOLDER;
+var init_sql_guard = __esm({
+  "packages/core/plugin-host/sql-guard.ts"() {
     "use strict";
-    UUID_V7_PREFIX = /^[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[0-9a-f]{4}-[0-9a-f]{12}\./i;
+    FORBIDDEN_CORE_TABLES = Object.freeze([
+      "users",
+      "client_sessions",
+      "plugins",
+      "plugin_storage",
+      "ai_providers",
+      "processes",
+      "pending_commands",
+      "classes",
+      "students",
+      "class_students",
+      "lessons",
+      "assignments",
+      "assignment_submissions",
+      "attendance",
+      "schedules",
+      "class_grade_weights",
+      "exams",
+      "exam_scores",
+      "student_semester_reports",
+      "student_rollcalls",
+      "student_seats",
+      "student_read_notifications",
+      "student_lesson_progress",
+      "courseware",
+      "courseware_attempt",
+      "system_resources",
+      "events",
+      "_migrations",
+      "site_settings",
+      "agent_conversations",
+      "classroom_sessions",
+      "lesson_quiz_submissions",
+      "courseware_score_config",
+      "demo_data_registry",
+      "whiteboard_elements",
+      "student_point_logs",
+      "lianyun_research_activities",
+      "lianyun_research_groups",
+      "lianyun_research_submissions",
+      "lianyun_research_reviews"
+    ]);
+    FORBIDDEN_CORE_TABLES_SET = new Set(FORBIDDEN_CORE_TABLES.map((t) => t.toLowerCase()));
+    FORBIDDEN_OPERATIONS = [
+      /\bATTACH(?:\s+DATABASE)?\b/i,
+      /\bDETACH(?:\s+DATABASE)?\b/i,
+      /\bPRAGMA\b/i,
+      /\bVACUUM\b/i,
+      /\bCREATE\s+(?:TEMP(?:ORARY)?\s+)?(?:TRIGGER|VIEW)\b/i,
+      /\bDROP\s+(?:TEMP(?:ORARY)?\s+)?(?:TRIGGER|VIEW)\b/i
+    ];
+    SUBQUERY_PLACEHOLDER = "__ol_subquery__";
   }
 });
 
@@ -4318,6 +4653,108 @@ var init_plugin_tables = __esm({
   }
 });
 
+// packages/core/plugin-host/inline-db-guard.ts
+function isSqlGuardAllModesEnabled(env = process.env) {
+  const raw = env.OPENLEARN_SQL_GUARD_ALL_MODES?.trim().toLowerCase();
+  return raw === "1" || raw === "true" || raw === "on" || raw === "yes";
+}
+function createGuardedPluginDatabase(db2, pluginId, manifestId) {
+  const ownPrefix = pluginTablePrefix(pluginId, manifestId);
+  const allowedPrefixes = listAllowedPluginTablePrefixes(pluginId, manifestId);
+  const assertSql = (sql) => {
+    try {
+      assertPluginSqlAllowed({ sql: typeof sql === "string" ? sql : String(sql ?? ""), ownPrefix, allowedPrefixes });
+    } catch (err) {
+      const message = err?.message ? String(err.message) : String(err);
+      const wrapped = new Error(`${SQL_GUARD_ERROR_PREFIX}\uFF1A${message}\uFF08\u63D2\u4EF6 "${pluginId}"\uFF09`);
+      wrapped.code = "PLUGIN_SQL_REJECTED";
+      throw wrapped;
+    }
+  };
+  return new Proxy(db2, {
+    get(target, prop, receiver) {
+      const value = Reflect.get(target, prop, receiver);
+      if (typeof value !== "function") return value;
+      if (prop === "prepare") {
+        return (sql, ...rest) => {
+          assertSql(sql);
+          return value.call(target, sql, ...rest);
+        };
+      }
+      if (prop === "exec") {
+        return (sql, ...rest) => {
+          assertSql(sql);
+          return value.call(target, sql, ...rest);
+        };
+      }
+      if (prop === "pragma") {
+        return (source, ...rest) => {
+          assertSql(`PRAGMA ${String(source ?? "")}`);
+          return value.call(target, source, ...rest);
+        };
+      }
+      return value.bind(target);
+    }
+  });
+}
+var SQL_GUARD_ERROR_PREFIX;
+var init_inline_db_guard = __esm({
+  "packages/core/plugin-host/inline-db-guard.ts"() {
+    "use strict";
+    init_sql_guard();
+    init_plugin_tables();
+    SQL_GUARD_ERROR_PREFIX = "[PluginHost] SQL \u88AB\u62D2\u7EDD";
+  }
+});
+
+// packages/core/command-bus/plugin-command.ts
+function bindPluginCommand(command, pluginActorId) {
+  const actor = typeof pluginActorId === "string" ? pluginActorId.trim() : "";
+  if (!actor) {
+    throw new Error("[Security] Refusing to dispatch a plugin command without a host-assigned actor");
+  }
+  const raw = command && typeof command === "object" ? { ...command } : {};
+  const metadata = raw.metadata && typeof raw.metadata === "object" ? { ...raw.metadata } : {};
+  delete metadata.approved;
+  return { ...raw, actorId: actor, metadata };
+}
+function pluginActorIdFor(manifestId, pluginId) {
+  const id = (manifestId || pluginId || "").trim();
+  if (!id) {
+    throw new Error("[Security] Refusing to dispatch a plugin command without a host-assigned actor");
+  }
+  return id.startsWith("plugin:") ? id : `plugin:${id}`;
+}
+var init_plugin_command = __esm({
+  "packages/core/command-bus/plugin-command.ts"() {
+    "use strict";
+  }
+});
+
+// packages/core/plugin-host/plugin-namespace.ts
+function resolvePluginCommandType(type, pluginId) {
+  const prefix = pluginId + ".";
+  if (type.startsWith(prefix)) return type;
+  if (UUID_V7_PREFIX.test(type)) return type;
+  return prefix + type;
+}
+function stripPluginCommandPrefix(type, pluginId) {
+  const prefix = pluginId + ".";
+  if (type.startsWith(prefix)) return type.slice(prefix.length);
+  if (UUID_V7_PREFIX.test(type)) {
+    const idx = type.indexOf(".");
+    return type.slice(idx + 1);
+  }
+  return type;
+}
+var UUID_V7_PREFIX;
+var init_plugin_namespace = __esm({
+  "packages/core/plugin-host/plugin-namespace.ts"() {
+    "use strict";
+    UUID_V7_PREFIX = /^[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[0-9a-f]{4}-[0-9a-f]{12}\./i;
+  }
+});
+
 // packages/core/plugin-host/context-builder.ts
 var context_builder_exports = {};
 __export(context_builder_exports, {
@@ -4720,15 +5157,51 @@ function wrapInteractionRuntimeService(service, tracker, pluginId) {
     listActivityProviders: createSafeFunction(() => service.listActivityProviders())
   };
 }
-function wrapPluginRuntimeService(raw, tokenName, tracker, pluginId) {
+function wrapPluginRuntimeService(raw, tokenName, tracker, pluginId, manifestId) {
   if (tokenName === IClassroomLifecycleServiceToken.name) {
     return wrapClassroomLifecycleService(raw, tracker, pluginId);
   }
   if (tokenName === IInteractionRuntimeServiceToken.name) {
     return wrapInteractionRuntimeService(raw, tracker, pluginId);
   }
+  if (tokenName === "@openlearn/core:IDatabase" && isSqlGuardAllModesEnabled()) {
+    return createGuardedPluginDatabase(raw, pluginId, manifestId);
+  }
   return raw;
 }
+function wrapRosterService(service, pluginId, capabilities) {
+  const CAP_ROSTER_READ = "management:read";
+  const safe = (fn) => createSafeFunction(fn);
+  const assertReadable = (method, detail) => {
+    const hasCap = hasCapability(capabilities ?? [], CAP_ROSTER_READ);
+    recordSecurityAudit("plugin.roster_read", {
+      pluginId,
+      method,
+      ...detail,
+      hasCapability: hasCap,
+      ...hasCap ? {} : { denied: true }
+    });
+    if (hasCap) return;
+    console.error(
+      `[Security] \u63D2\u4EF6 "${pluginId}" \u8C03\u7528 roster.${method} \u88AB\u62D2\uFF1A\u7F3A\u5C11\u80FD\u529B "${CAP_ROSTER_READ}"\u3002\u8BF7\u5728 manifest.capabilitiesProposed \u58F0\u660E\u5B83\uFF08\u6559\u5E08\u89D2\u8272\u9ED8\u8BA4\u5177\u5907\uFF09\u3002`
+    );
+    throw new PluginCapabilityDeniedError(pluginId, CAP_ROSTER_READ, "read", method);
+  };
+  return {
+    listClasses: safe(async () => {
+      assertReadable("listClasses", {});
+      return service.listClasses();
+    }),
+    listClassStudents: safe(async (classId) => {
+      assertReadable("listClassStudents", { classId });
+      return service.listClassStudents(classId);
+    }),
+    getStudent: safe(async (studentId) => {
+      assertReadable("getStudent", { studentId });
+      return service.getStudent(studentId);
+    })
+  };
+}
 function wrapPointsLedgerService(service, pluginId, capabilities) {
   const auditAccess = (studentId, method, operation, requiredCap) => {
     const hasCap = hasCapability(capabilities ?? [], requiredCap);
@@ -4741,6 +5214,9 @@ function wrapPointsLedgerService(service, pluginId, capabilities) {
       ...hasCap ? {} : { denied: true }
     });
     if (!hasCap) {
+      console.error(
+        `[Security] \u63D2\u4EF6 "${pluginId}" \u8C03\u7528 pointsLedger.${method} \u88AB\u62D2\uFF1A\u7F3A\u5C11\u80FD\u529B "${requiredCap}"\uFF08${operation} / student=${studentId}\uFF09\u3002\u8BF7\u5728 manifest.capabilitiesProposed \u58F0\u660E\u5B83\u3002`
+      );
       throw new PluginCapabilityDeniedError(pluginId, requiredCap, operation, method);
     }
   };
@@ -4857,6 +5333,7 @@ async function buildContext(serviceRegistry, tracker, pluginId, manifest, db2, s
   const aiService = await serviceRegistry.resolve(IAIServiceToken);
   const pointsDimensionRegistry = await serviceRegistry.tryResolve(IPointsDimensionRegistryToken);
   const pointsLedgerService = await serviceRegistry.tryResolve(IPointsLedgerServiceToken);
+  const rosterService = await serviceRegistry.tryResolve(IClassRosterServiceToken);
   const wrappedCommandBus = wrapCommandBus(commandBusService, tracker, pluginId, manifest.id, actionRegistryService);
   const wrappedEventBus = wrapEventBus(eventBusService, tracker, pluginId);
   const wrappedProcessManager = wrapProcessManager(
@@ -4873,6 +5350,7 @@ async function buildContext(serviceRegistry, tracker, pluginId, manifest, db2, s
   const wrappedAI = wrapAI(aiService, pluginId, tracker);
   const wrappedPointsDimension = pointsDimensionRegistry ? wrapPointsDimensionRegistry(pointsDimensionRegistry, tracker, pluginId) : null;
   const wrappedPointsLedger = pointsLedgerService ? wrapPointsLedgerService(pointsLedgerService, pluginId, manifest.capabilitiesProposed) : null;
+  const wrappedRoster = rosterService ? wrapRosterService(rosterService, pluginId, manifest.capabilitiesProposed) : null;
   Object.setPrototypeOf(wrappedCommandBus, null);
   Object.setPrototypeOf(wrappedEventBus, null);
   Object.setPrototypeOf(wrappedProcessManager, null);
@@ -4900,7 +5378,8 @@ async function buildContext(serviceRegistry, tracker, pluginId, manifest, db2, s
     storage: wrappedStorage,
     ai: wrappedAI,
     pointsDimension: wrappedPointsDimension,
-    pointsLedger: wrappedPointsLedger
+    pointsLedger: wrappedPointsLedger,
+    roster: wrappedRoster
   };
   if (skipTokens && skipTokens.size > 0) {
     const TOKEN_TO_SERVICE_KEY = {
@@ -4912,7 +5391,8 @@ async function buildContext(serviceRegistry, tracker, pluginId, manifest, db2, s
       "@openlearn/core:IStorageService": "storage",
       "@openlearn/core:IAIService": "ai",
       "@openlearn/core:IPointsDimensionRegistry": "pointsDimension",
-      "@openlearn/core:IPointsLedgerService": "pointsLedger"
+      "@openlearn/core:IPointsLedgerService": "pointsLedger",
+      "@openlearn/core:IClassRosterService": "roster"
     };
     for (const tokenName of skipTokens) {
       const serviceKey = TOKEN_TO_SERVICE_KEY[tokenName];
@@ -5023,9 +5503,9 @@ async function buildContext(serviceRegistry, tracker, pluginId, manifest, db2, s
             `[PluginHost] Plugin "${manifest.id}" cannot resolve "${token}" by name. Use the Token object imported from @openlearn/plugin-sdk, or one of the SDK-exported Token names.`
           );
         }
-        return serviceRegistry.resolveByName(token).then((raw) => wrapPluginRuntimeService(raw, token, tracker, pluginId));
+        return serviceRegistry.resolveByName(token).then((raw) => wrapPluginRuntimeService(raw, token, tracker, pluginId, manifest.id));
       }
-      return serviceRegistry.resolve(token).then((raw) => wrapPluginRuntimeService(raw, token.name, tracker, pluginId));
+      return serviceRegistry.resolve(token).then((raw) => wrapPluginRuntimeService(raw, token.name, tracker, pluginId, manifest.id));
     },
     // V3.2: 插件向 DI 容器提供服务（对应 manifest.provides）
     provide: async (token, instance) => {
@@ -5125,6 +5605,7 @@ var init_context_builder = __esm({
     init_audit_log();
     init_method_policy();
     init_errors2();
+    init_inline_db_guard();
     init_extension_points();
     init_interfaces();
     init_plugin_command();
@@ -7518,241 +7999,6 @@ var init_event_forwarder = __esm({
   }
 });
 
-// packages/core/plugin-host/sql-guard.ts
-function sanitizeSql(sql) {
-  let inSingleQuote = false;
-  let inDoubleQuote = false;
-  let inBacktick = false;
-  let inBracket = false;
-  let result = "";
-  const len = sql.length;
-  for (let i = 0; i < len; i++) {
-    const ch = sql[i];
-    const next = i + 1 < len ? sql[i + 1] : "";
-    if (!inSingleQuote && !inDoubleQuote && !inBacktick && !inBracket && ch === "-" && next === "-") {
-      while (i < len && sql[i] !== "\n") i++;
-      result += " ";
-      continue;
-    }
-    if (!inSingleQuote && !inDoubleQuote && !inBacktick && !inBracket && ch === "/" && next === "*") {
-      i += 2;
-      while (i < len && !(sql[i] === "*" && i + 1 < len && sql[i + 1] === "/")) {
-        i++;
-      }
-      i++;
-      result += " ";
-      continue;
-    }
-    if (ch === "'" && !inDoubleQuote && !inBacktick && !inBracket) {
-      if (inSingleQuote) {
-        if (next === "'") {
-          i++;
-        } else {
-          inSingleQuote = false;
-        }
-      } else {
-        inSingleQuote = true;
-      }
-      result += " ";
-      continue;
-    }
-    if (inSingleQuote) {
-      result += " ";
-      continue;
-    }
-    if (ch === "[" && !inDoubleQuote && !inBacktick) {
-      inBracket = true;
-      result += " ";
-      continue;
-    }
-    if (ch === "]" && inBracket) {
-      inBracket = false;
-      result += " ";
-      continue;
-    }
-    if (ch === "`" && !inDoubleQuote) {
-      inBacktick = !inBacktick;
-      result += " ";
-      continue;
-    }
-    if (ch === '"' && !inBacktick) {
-      inDoubleQuote = !inDoubleQuote;
-      result += " ";
-      continue;
-    }
-    result += ch;
-  }
-  return result;
-}
-function extractFlatTables(flatSql, tables) {
-  const ddlRegex = /\b(?:CREATE|DROP|ALTER)\s+(?:TEMP(?:ORARY)?\s+)?TABLE\s+(?:IF\s+(?:NOT\s+)?EXISTS\s+)?([a-zA-Z_][\w]*)/gi;
-  for (const m of flatSql.matchAll(ddlRegex)) {
-    if (m[1] && m[1].toLowerCase() !== SUBQUERY_PLACEHOLDER) {
-      tables.add(m[1].toLowerCase());
-    }
-  }
-  const renameToRegex = /\bRENAME\s+TO\s+([a-zA-Z_][\w]*)/gi;
-  for (const m of flatSql.matchAll(renameToRegex)) {
-    if (m[1] && m[1].toLowerCase() !== SUBQUERY_PLACEHOLDER) {
-      tables.add(m[1].toLowerCase());
-    }
-  }
-  const simpleClauseRegex = /\b(?:INTO|UPDATE(?:\s+OR\s+(?:ROLLBACK|ABORT|REPLACE|FAIL|IGNORE))?|JOIN)\s+([a-zA-Z_][\w]*)/gi;
-  for (const m of flatSql.matchAll(simpleClauseRegex)) {
-    if (m[1] && m[1].toLowerCase() !== SUBQUERY_PLACEHOLDER) {
-      tables.add(m[1].toLowerCase());
-    }
-  }
-  const fromRegex = /\bFROM\s+([^;]+?)(?=\bWHERE\b|\bGROUP\b|\bHAVING\b|\bORDER\b|\bLIMIT\b|\bUNION\b|\bEXCEPT\b|\bINTERSECT\b|\bWINDOW\b|\bVALUES\b|\bSET\b|\bINTO\b|\bJOIN\b|\bLEFT\b|\bRIGHT\b|\bINNER\b|\bOUTER\b|\bCROSS\b|\bNATURAL\b|\bON\b|\bUSING\b|\bSELECT\b|;|$)/gi;
-  for (const match of flatSql.matchAll(fromRegex)) {
-    const clause = match[1];
-    if (!clause) continue;
-    const parts = clause.split(",");
-    for (const part of parts) {
-      const trimmed2 = part.trim();
-      if (!trimmed2) continue;
-      const tokenMatch = /^[a-zA-Z_][\w]*/.exec(trimmed2);
-      if (tokenMatch) {
-        const tableName = tokenMatch[0].toLowerCase();
-        if (tableName !== SUBQUERY_PLACEHOLDER) {
-          tables.add(tableName);
-        }
-      }
-    }
-  }
-}
-function extractReferencedTables(cleanSql) {
-  const tables = /* @__PURE__ */ new Set();
-  let working = cleanSql;
-  const parenRegex = /\(([^()]*)\)/g;
-  let depth = 0;
-  while (parenRegex.test(working) && depth++ < 100) {
-    working = working.replace(parenRegex, (_full, inner) => {
-      extractFlatTables(inner, tables);
-      const trimmedInner = inner.trim();
-      if (/^(?:SELECT|VALUES|WITH)\b/i.test(trimmedInner)) {
-        return ` ${SUBQUERY_PLACEHOLDER} `;
-      }
-      return ` ${inner} `;
-    });
-  }
-  working = working.replace(/[()]/g, " ");
-  extractFlatTables(working, tables);
-  return tables;
-}
-function assertPluginSqlAllowed(options) {
-  const { sql, ownPrefix, allowedPrefixes = [], researchAllowed = false } = options;
-  if (typeof sql !== "string" || sql.trim() === "") return;
-  for (const opRegex of FORBIDDEN_OPERATIONS) {
-    if (opRegex.test(sql)) {
-      throw new Error(`Dangerous statement is forbidden: "${sql.trim()}"`);
-    }
-  }
-  const clean = sanitizeSql(sql);
-  const tables = extractReferencedTables(clean);
-  if (/\b(?:FROM|JOIN|INTO|UPDATE|TABLE)\b/i.test(clean) && tables.size === 0) {
-    throw new Error(`Worker plugin SQL rejected: unable to resolve target table in "${sql.trim()}"`);
-  }
-  const isDdl = /^\s*(DROP|CREATE|ALTER|TRUNCATE)\b/i.test(clean);
-  const words = clean.toLowerCase().match(/\b[a-zA-Z_][\w]*\b/g) || [];
-  for (const word of words) {
-    if (FORBIDDEN_CORE_TABLES_SET.has(word)) {
-      if (tables.has(word)) {
-        if (isDdl) {
-          throw new Error(
-            `Worker plugin is not permitted to perform DDL on table "${word}" (core security table is strictly forbidden)`
-          );
-        }
-        throw new Error(
-          `Worker plugin is not permitted to access table "${word}" (core security table is strictly forbidden)`
-        );
-      }
-    }
-  }
-  const ownPrefixLower = ownPrefix ? ownPrefix.toLowerCase() : "";
-  const validPrefixes = [ownPrefixLower, ...allowedPrefixes.map((p) => p.toLowerCase())].filter(Boolean);
-  for (const table of tables) {
-    if (table === "plugin_migrations") continue;
-    if (researchAllowed && table.startsWith("plugin_research_")) continue;
-    const isOwn = validPrefixes.some((p) => table.startsWith(p));
-    if (isOwn) continue;
-    if (table === "sqlite_master" || table === "sqlite_schema" || table === "sqlite_temp_master") {
-      const strippedComments = sql.replace(/--.*$/gm, " ").replace(/\/\*[\s\S]*?\*\//g, " ").trim();
-      const isAllowedMetaQuery = /^\s*SELECT\s+name\s+FROM\s+(?:sqlite_master|sqlite_schema)\s+WHERE\s+type\s*=\s*['"]table['"]\s+AND\s+name\s+LIKE\s+['"][A-Za-z0-9_%]+['"]\s*$/i.test(
-        strippedComments
-      ) && ownPrefixLower && strippedComments.toLowerCase().includes(ownPrefixLower);
-      if (isAllowedMetaQuery) continue;
-      throw new Error(`Direct access to sqlite metadata table "${table}" is forbidden`);
-    }
-    if (isDdl) {
-      throw new Error(
-        `Worker plugin is not permitted to perform DDL on table "${table}" (only ${ownPrefix || "<none>"} namespace is allowed)`
-      );
-    }
-    throw new Error(
-      `Worker plugin is not permitted to access table "${table}" (only ${ownPrefix || "<none>"} namespace is allowed)`
-    );
-  }
-}
-var FORBIDDEN_CORE_TABLES, FORBIDDEN_CORE_TABLES_SET, FORBIDDEN_OPERATIONS, SUBQUERY_PLACEHOLDER;
-var init_sql_guard = __esm({
-  "packages/core/plugin-host/sql-guard.ts"() {
-    "use strict";
-    FORBIDDEN_CORE_TABLES = Object.freeze([
-      "users",
-      "client_sessions",
-      "plugins",
-      "plugin_storage",
-      "ai_providers",
-      "processes",
-      "pending_commands",
-      "classes",
-      "students",
-      "class_students",
-      "lessons",
-      "assignments",
-      "assignment_submissions",
-      "attendance",
-      "schedules",
-      "class_grade_weights",
-      "exams",
-      "exam_scores",
-      "student_semester_reports",
-      "student_rollcalls",
-      "student_seats",
-      "student_read_notifications",
-      "student_lesson_progress",
-      "courseware",
-      "courseware_attempt",
-      "system_resources",
-      "events",
-      "_migrations",
-      "site_settings",
-      "agent_conversations",
-      "classroom_sessions",
-      "lesson_quiz_submissions",
-      "courseware_score_config",
-      "demo_data_registry",
-      "whiteboard_elements",
-      "student_point_logs",
-      "lianyun_research_activities",
-      "lianyun_research_groups",
-      "lianyun_research_submissions",
-      "lianyun_research_reviews"
-    ]);
-    FORBIDDEN_CORE_TABLES_SET = new Set(FORBIDDEN_CORE_TABLES.map((t) => t.toLowerCase()));
-    FORBIDDEN_OPERATIONS = [
-      /\bATTACH(?:\s+DATABASE)?\b/i,
-      /\bDETACH(?:\s+DATABASE)?\b/i,
-      /\bPRAGMA\b/i,
-      /\bVACUUM\b/i,
-      /\bCREATE\s+(?:TEMP(?:ORARY)?\s+)?(?:TRIGGER|VIEW)\b/i,
-      /\bDROP\s+(?:TEMP(?:ORARY)?\s+)?(?:TRIGGER|VIEW)\b/i
-    ];
-    SUBQUERY_PLACEHOLDER = "__ol_subquery__";
-  }
-});
-
 // packages/core/worker-runtime/service-host.ts
 function sanitizeClonableValue(val, depth = 0, seen = /* @__PURE__ */ new WeakSet()) {
   if (depth > 12) return null;
@@ -9050,6 +9296,7 @@ var init_di = __esm({
     init_storage_service();
     init_ai_service();
     init_courseware_runtime_script_registry();
+    init_ai_provider_resolver();
     init_container();
   }
 });
@@ -10309,6 +10556,15 @@ var CommandBus = class {
   hasHandler(commandType) {
     return this.handlers.has(commandType) || this.legacyHandlers.has(commandType);
   }
+  /**
+   * 只读枚举已注册的命令类型（modern + legacy）。
+   *
+   * 供插件激活后的「handler 有、ActionDescriptor 没有」自检使用（Issue #369）：
+   * 自检要能看清「这次激活新增了哪些命令」，而不是去读私有 Map。
+   */
+  listRegisteredCommandTypes() {
+    return Array.from(/* @__PURE__ */ new Set([...this.handlers.keys(), ...this.legacyHandlers.keys()]));
+  }
   async execute(command) {
     const actorId = typeof command.actorId === "string" ? command.actorId.trim() : "";
     if (!actorId) {
@@ -10411,6 +10667,20 @@ var ActionRegistry = class {
   getActionByCommandType(commandType) {
     return Array.from(this.actions.values()).find((a) => a.commandType === commandType);
   }
+  /** 已登记描述符覆盖的 commandType（去重、只读）。 */
+  listRegisteredCommandTypes() {
+    return Array.from(new Set(Array.from(this.actions.values()).map((a) => a.commandType))).sort();
+  }
+  /**
+   * 给定命令类型里**没有** ActionDescriptor 的那些。
+   *
+   * 命令总线是 default-deny：这种命令会在用户点击时被 403 `COMMAND_NOT_REGISTERED` 拒绝。
+   * 插件激活后用它把「注册了 handler 却忘了登记描述符」提前打成一条 WARN（Issue #369）。
+   */
+  listMissingDescriptors(commandTypes) {
+    const registered = new Set(Array.from(this.actions.values()).map((a) => a.commandType));
+    return Array.from(new Set(commandTypes)).filter((type) => !registered.has(type)).sort();
+  }
 };
 
 // packages/core/capability/event/capability-event-bus.ts
@@ -10678,6 +10948,7 @@ var InvocationEngine = class {
 };
 
 // packages/core/capability/guard/capability-guard.ts
+init_catalog();
 var CapabilityGuard = class _CapabilityGuard {
   constructor() {
     this.actorCapabilities = /* @__PURE__ */ new Map();
@@ -10693,20 +10964,20 @@ var CapabilityGuard = class _CapabilityGuard {
     ]);
     this.actorCapabilities.set("anonymous", []);
     this.actorCapabilities.set("agent-system-0", [
-      "lesson:write",
-      "lesson:delete",
-      "whiteboard:write",
+      CAP.LESSON_WRITE,
+      CAP.LESSON_DELETE,
+      CAP.WHITEBOARD_WRITE,
       "quiz:write",
-      "plugin:read",
-      "vfs:read",
-      "vfs:write",
-      "management:write",
-      "management:read",
-      "process:write",
-      "process:read"
+      CAP.PLUGIN_READ,
+      CAP.VFS_READ,
+      CAP.VFS_WRITE,
+      CAP.MANAGEMENT_WRITE,
+      CAP.MANAGEMENT_READ,
+      CAP.PROCESS_WRITE,
+      CAP.PROCESS_READ
     ]);
     this.actorCapabilities.set("teacher-demo", ["lesson:*", "whiteboard:*", "management:*", "quiz:*", "vfs:*"]);
-    this.actorCapabilities.set("student-demo", ["student:write", "lesson:read", "whiteboard:read"]);
+    this.actorCapabilities.set("student-demo", [CAP.STUDENT_WRITE, CAP.LESSON_READ, CAP.WHITEBOARD_READ]);
   }
   grant(actorId, cap) {
     const caps = this.actorCapabilities.get(actorId) || [];
@@ -10740,11 +11011,11 @@ var CapabilityGuard = class _CapabilityGuard {
         "vfs:*",
         "process:*",
         "plugin:*",
-        "student:write",
-        "assignment:read",
-        "assignment:submit",
-        "assignment:review",
-        "assignment:manage"
+        CAP.STUDENT_WRITE,
+        CAP.ASSIGNMENT_READ,
+        CAP.ASSIGNMENT_SUBMIT,
+        CAP.ASSIGNMENT_REVIEW,
+        CAP.ASSIGNMENT_MANAGE
       ];
       const [reqRes2, reqAct2] = requiredCap.split(":");
       if (teacherCaps.some((c) => {
@@ -10756,12 +11027,12 @@ var CapabilityGuard = class _CapabilityGuard {
     }
     if (role === "student") {
       const studentCaps = [
-        "student:write",
-        "lesson:read",
-        "whiteboard:read",
-        "assignment:read",
-        "assignment:submit",
-        "assignment:review"
+        CAP.STUDENT_WRITE,
+        CAP.LESSON_READ,
+        CAP.WHITEBOARD_READ,
+        CAP.ASSIGNMENT_READ,
+        CAP.ASSIGNMENT_SUBMIT,
+        CAP.ASSIGNMENT_REVIEW
       ];
       const [reqRes2, reqAct2] = requiredCap.split(":");
       if (studentCaps.some((c) => {
@@ -12100,18 +12371,25 @@ function generateUnambiguousPassword(length = 20) {
   }
   return out;
 }
+function resolveSeedPasswordMode(env = process.env) {
+  return env.OPENLEARN_SEED_PASSWORD_MODE?.trim().toLowerCase() === "random" ? "random" : "default";
+}
 function resolveSeedCredential(username, options) {
   if (options?.allowWellKnown) {
-    return { password: username, mustChange: false, generated: false };
+    return { password: username, mustChange: false, generated: false, source: "playwright" };
   }
   const envValue = options?.envValue?.trim();
   if (envValue) {
-    return { password: envValue, mustChange: envValue === username, generated: false };
+    return { password: envValue, mustChange: envValue === username, generated: false, source: "env" };
   }
   if (options?.vitestFallback) {
-    return { password: `Vitest-${username}-NotDefault9`, mustChange: false, generated: false };
+    return { password: `Vitest-${username}-NotDefault9`, mustChange: false, generated: false, source: "vitest" };
+  }
+  const mode = options?.mode ?? resolveSeedPasswordMode();
+  if (mode === "random") {
+    return { password: generateUnambiguousPassword(20), mustChange: true, generated: true, source: "random" };
   }
-  return { password: generateUnambiguousPassword(20), mustChange: true, generated: true };
+  return { password: username, mustChange: true, generated: false, source: "default" };
 }
 function resolveBootstrapCredentialDir() {
   if (process.env.OPENLEARN_DATA_DIR?.trim()) {
@@ -12135,6 +12413,11 @@ function persistGeneratedSeedCredentials(lines) {
     console.warn(`[SECURITY] \u65E0\u6CD5\u5199\u5165 ${filePath}\uFF0C\u8BF7\u4ECE\u4E0A\u65B9\u65E5\u5FD7\u6284\u5F55\u521D\u59CB\u53E3\u4EE4\u3002`, err);
   }
 }
+function logDefaultSeedCredentials(usernames) {
+  console.warn(
+    "[SECURITY] \u9996\u6B21\u542F\u52A8\u5DF2\u521B\u5EFA\u79CD\u5B50\u8D26\u53F7\uFF0C\u521D\u59CB\u53E3\u4EE4 = \u7528\u6237\u540D\uFF08\u9996\u6B21\u767B\u5F55\u540E\u5FC5\u987B\u4FEE\u6539\uFF09\uFF1A\n" + usernames.map((name) => `  ${name} / ${name}`).join("\n") + "\n  \u6539\u5BC6\u524D\uFF0C\u9664\u300C\u6539\u5BC6 / \u767B\u51FA\u300D\u4EE5\u5916\u7684\u6240\u6709\u63A5\u53E3\u90FD\u4F1A\u88AB\u62D2\u7EDD\uFF08403 FORBIDDEN_DEFAULT_PASSWORD\uFF09\u3002\n  \u5982\u9700\u968F\u673A\u521D\u59CB\u53E3\u4EE4\uFF0C\u8BBE\u7F6E OPENLEARN_SEED_PASSWORD_MODE=random \u540E\u91CD\u5EFA\u6570\u636E\u5E93\u3002"
+  );
+}
 function verifyPassword(pwd, storedHash) {
   if (storedHash.startsWith("$2")) {
     return { valid: import_bcryptjs.default.compareSync(pwd, storedHash), needsUpgrade: false };
@@ -12248,16 +12531,19 @@ function initializeDatabase(instance) {
     const countObj = instance.prepare("SELECT COUNT(*) as cnt FROM users").get();
     const allowWellKnown = isPlaywrightTestFlag(process.env.PLAYWRIGHT_TEST);
     const vitestFallback = Boolean(process.env.VITEST) && !allowWellKnown;
+    const seedMode = resolveSeedPasswordMode();
     if (countObj && countObj.cnt === 0) {
       const adminCred = resolveSeedCredential("admin", {
         envValue: process.env.OPENLEARN_ADMIN_PASSWORD,
         allowWellKnown,
-        vitestFallback
+        vitestFallback,
+        mode: seedMode
       });
       const teacherCred = resolveSeedCredential("teacher", {
         envValue: process.env.OPENLEARN_TEACHER_PASSWORD,
         allowWellKnown,
-        vitestFallback
+        vitestFallback,
+        mode: seedMode
       });
       const insertStmt = instance.prepare(
         "INSERT INTO users (id, username, password_hash, role, name, created_at, must_change_password) VALUES (?, ?, ?, ?, ?, ?, ?)"
@@ -12284,8 +12570,12 @@ function initializeDatabase(instance) {
       if (adminCred.generated) generated.push(`admin ${adminCred.password}`);
       if (teacherCred.generated) generated.push(`teacher ${teacherCred.password}`);
       if (generated.length > 0) persistGeneratedSeedCredentials(generated);
-    } else if (!allowWellKnown) {
-      const seeded = instance.prepare("SELECT id, username, password_hash FROM users WHERE username IN (?, ?)").all("admin", "teacher");
+      const defaulted = [];
+      if (adminCred.source === "default") defaulted.push("admin");
+      if (teacherCred.source === "default") defaulted.push("teacher");
+      if (defaulted.length > 0) logDefaultSeedCredentials(defaulted);
+    } else {
+      const seeded = allowWellKnown ? [] : instance.prepare("SELECT id, username, password_hash FROM users WHERE username IN (?, ?)").all("admin", "teacher");
       for (const user of seeded) {
         if (!verifyPassword(user.username, user.password_hash).valid) continue;
         instance.prepare("UPDATE users SET must_change_password = 1 WHERE id = ?").run(user.id);
@@ -13205,8 +13495,8 @@ var ManagementPlugin = {
     });
     await commandBus.registerHandler(classTemplateDownloadCmd, {
       async execute() {
-        const headers = "Class Name,Class Desc,Student Name,Student Email";
-        const sampleRow = "Class 101,Introduction to English,John Doe,john@example.com\nClass 101,Introduction to English,Jane Smith,jane@example.com";
+        const headers = "Class Name,Class Desc,Student Number,Student Name,Student Email,Initial Password,Student Notes,Gender";
+        const sampleRow = "Class 101,Introduction to English,20260101,John Doe,john@example.com,,,Male\nClass 101,Introduction to English,20260102,Jane Smith,jane@example.com,,,Female";
         const content = `${headers}
 ${sampleRow}`;
         const fileId = (0, import_uuid4.v7)();
@@ -13238,8 +13528,8 @@ ${sampleRow}`;
     });
     await commandBus.registerHandler(studentTemplateDownloadCmd, {
       async execute() {
-        const headers = "Student Name,Student Email";
-        const sampleRow = "Alice Cooper,alice@example.com\nBob Dylan,bob@example.com";
+        const headers = "Student Number,Student Name,Student Email,Initial Password,Student Notes,Gender";
+        const sampleRow = "20260101,Alice Cooper,alice@example.com,,,Male\n20260102,Bob Dylan,bob@example.com,,,Female";
         const content = `${headers}
 ${sampleRow}`;
         const fileId = (0, import_uuid4.v7)();
@@ -14920,6 +15210,45 @@ var BuiltinPlugin = {
       "page_meta"
       // 分页与大纲元数据
     ];
+    const normalizePluginElementData = (dataObj) => {
+      const pluginId = typeof dataObj.pluginId === "string" ? dataObj.pluginId.trim() : "";
+      if (!pluginId) {
+        console.warn("[Whiteboard] plugin \u5143\u7D20\u672A\u58F0\u660E pluginId\uFF0C\u5C06\u53EA\u80FD\u6309 widgetId \u67E5\u627E\u7EC4\u4EF6\uFF1B\u5EFA\u8BAE\u8865\u4E0A manifest id\u3002");
+      }
+      const teacher = typeof dataObj.teacherWidgetId === "string" ? dataObj.teacherWidgetId.trim() : "";
+      const student = typeof dataObj.studentWidgetId === "string" ? dataObj.studentWidgetId.trim() : "";
+      if (!teacher && !student) {
+        throw new Error(
+          "plugin \u5143\u7D20\u5FC5\u987B\u81F3\u5C11\u58F0\u660E teacherWidgetId \u6216 studentWidgetId \u4E4B\u4E00\uFF0C\u5426\u5219\u6559\u5E08\u7AEF / \u5B66\u751F\u7AEF\u90FD\u4F1A\u505C\u5728\u52A0\u8F7D\u6001\u3002"
+        );
+      }
+      if (!teacher) {
+        dataObj.teacherWidgetId = student;
+        console.warn(`[Whiteboard] plugin \u5143\u7D20\u53EA\u58F0\u660E\u4E86 studentWidgetId\uFF0C\u5DF2\u56DE\u9000 teacherWidgetId="${student}"\u3002`);
+      } else if (!student) {
+        dataObj.studentWidgetId = teacher;
+        console.warn(`[Whiteboard] plugin \u5143\u7D20\u53EA\u58F0\u660E\u4E86 teacherWidgetId\uFF0C\u5DF2\u56DE\u9000 studentWidgetId="${teacher}"\u3002`);
+      }
+    };
+    const buildElementData = (type, rawData, segmentId, page) => {
+      let dataObj = null;
+      try {
+        const parsed = JSON.parse(rawData);
+        dataObj = parsed && typeof parsed === "object" && !Array.isArray(parsed) ? parsed : null;
+      } catch {
+        if (type === "plugin") {
+          throw new Error(
+            'plugin \u5143\u7D20\u7684 data \u5FC5\u987B\u662F\u5408\u6CD5 JSON \u5B57\u7B26\u4E32\uFF08\u4F8B\u5982 {"pluginId":"ext-x","teacherWidgetId":"w"}\uFF09\u3002'
+          );
+        }
+      }
+      if (!dataObj) return rawData;
+      if (segmentId && !dataObj.segmentId) dataObj.segmentId = segmentId;
+      if (page !== void 0 && dataObj.page === void 0) dataObj.page = page;
+      else if (dataObj.page === void 0) dataObj.page = 0;
+      if (type === "plugin") normalizePluginElementData(dataObj);
+      return JSON.stringify(dataObj);
+    };
     const isAllowedElementType = (type) => {
       if (!type || typeof type !== "string") return false;
       if (KNOWN_ELEMENT_TYPES2.includes(type)) return true;
@@ -14968,20 +15297,7 @@ var BuiltinPlugin = {
           throw new Error(`\u4E0D\u652F\u6301\u7684\u5143\u7D20\u7C7B\u578B "${payload.type}"\u3002${hint}`);
         }
         const elementId = (0, import_uuid7.v7)();
-        let dataStr = payload.data;
-        try {
-          const dataObj = JSON.parse(dataStr);
-          if (payload.segmentId && !dataObj.segmentId) {
-            dataObj.segmentId = payload.segmentId;
-          }
-          if (payload.page !== void 0 && dataObj.page === void 0) {
-            dataObj.page = payload.page;
-          } else if (dataObj.page === void 0) {
-            dataObj.page = 0;
-          }
-          dataStr = JSON.stringify(dataObj);
-        } catch {
-        }
+        const dataStr = buildElementData(payload.type, payload.data, payload.segmentId, payload.page);
         const stmt = db2.prepare(
           "INSERT INTO whiteboard_elements (id, lesson_id, type, data, created_at) VALUES (?, ?, ?, ?, ?)"
         );
@@ -15210,15 +15526,7 @@ var BuiltinPlugin = {
               throw new Error(`\u4E0D\u652F\u6301\u7684\u5143\u7D20\u7C7B\u578B "${el.type}"\u3002\u5DF2\u77E5\u7C7B\u578B\uFF1A${KNOWN_ELEMENT_TYPES2.join(", ")}`);
             }
             const elementId = (0, import_uuid7.v7)();
-            let dataStr = el.data;
-            try {
-              const dataObj = JSON.parse(dataStr);
-              if (el.segmentId && !dataObj.segmentId) dataObj.segmentId = el.segmentId;
-              if (el.page !== void 0 && dataObj.page === void 0) dataObj.page = el.page;
-              else if (dataObj.page === void 0) dataObj.page = 0;
-              dataStr = JSON.stringify(dataObj);
-            } catch {
-            }
+            const dataStr = buildElementData(el.type, el.data, el.segmentId, el.page);
             insertStmt.run(elementId, payload.lessonId, el.type, dataStr, Date.now());
             elementIds.push(elementId);
           }
@@ -18042,6 +18350,40 @@ var SemesterGradeService = class {
   }
 };
 
+// packages/core/di/roster-service.ts
+var ClassRosterService = class {
+  constructor(db2) {
+    this.db = db2;
+  }
+  async listClasses() {
+    const rows = this.db.prepare(
+      `SELECT c.id AS id, c.name AS name, COUNT(cs.student_id) AS student_count
+           FROM classes c
+           LEFT JOIN class_students cs ON cs.class_id = c.id
+          GROUP BY c.id, c.name
+          ORDER BY c.created_at DESC, c.name ASC`
+    ).all();
+    return rows.map((row) => ({ id: row.id, name: row.name, studentCount: Number(row.student_count) }));
+  }
+  async listClassStudents(classId) {
+    const rows = this.db.prepare(
+      `SELECT s.id AS id, s.name AS name, s.student_number AS student_number
+           FROM class_students cs
+           JOIN students s ON s.id = cs.student_id
+          WHERE cs.class_id = ?
+          ORDER BY s.name ASC`
+    ).all(classId);
+    return rows.map(toStudentRef);
+  }
+  async getStudent(studentId) {
+    const row = this.db.prepare("SELECT id, name, student_number FROM students WHERE id = ?").get(studentId);
+    return row ? toStudentRef(row) : null;
+  }
+};
+function toStudentRef(row) {
+  return { id: row.id, name: row.name, studentNumber: row.student_number ?? null };
+}
+
 // packages/core/di/points-dimension-registry.ts
 var PointsDimensionRegistry = class {
   constructor() {
@@ -20253,6 +20595,7 @@ init_types();
 init_errors2();
 init_interfaces();
 init_plugin_grants();
+init_catalog();
 var PluginHostLifecycle = class extends PluginHostHttp {
   /**
    * 激活插件。
@@ -20310,12 +20653,47 @@ var PluginHostLifecycle = class extends PluginHostHttp {
     const currentState = this.pluginStates.get(pluginId) ?? "installed" /* INSTALLED */;
     this.validateTransition(pluginId, currentState, "activating" /* ACTIVATING */);
     this.setPluginState(pluginId, "activating" /* ACTIVATING */);
+    const commandTypesBefore = this.listHostCommandTypes();
     const preloaded = this.preloadedPlugins.get(pluginId);
     if (preloaded) {
       await this.activatePreloaded(pluginId, preloaded);
+      this.auditMissingActionDescriptors(pluginId, commandTypesBefore);
       return;
     }
     await this.activateFromDatabase(pluginId, currentState);
+    this.auditMissingActionDescriptors(pluginId, commandTypesBefore);
+  }
+  /** 宿主 CommandBus 当前注册的命令类型；解析失败返回空集（自检不能影响激活）。 */
+  listHostCommandTypes() {
+    try {
+      const bus = this.serviceRegistry.resolve(ICommandBusServiceToken4);
+      return new Set(bus.listRegisteredCommandTypes?.() ?? []);
+    } catch {
+      return /* @__PURE__ */ new Set();
+    }
+  }
+  /**
+   * 插件激活后的命令契约自检（Issue #369）。
+   *
+   * 命令总线是 default-deny：handler 有、ActionDescriptor 没有的命令会在用户点击时
+   * 403 `COMMAND_NOT_REGISTERED`。静态扫描抓不到循环注册 / 对象表 / `regHandler()` 包装，
+   * 所以改为激活后做一次运行时差集，把缺口提前打成立即可见的 WARN。
+   *
+   * 自检只服务可观测性：任何异常都不能影响激活结果，故整体 try/catch 且只打日志。
+   */
+  auditMissingActionDescriptors(pluginId, before) {
+    try {
+      if (this.inflightActivate.size > 1) return;
+      const added = Array.from(this.listHostCommandTypes()).filter((type) => !before.has(type));
+      if (added.length === 0) return;
+      const registry4 = this.serviceRegistry.resolve(IActionRegistryServiceToken4);
+      const missing = registry4.listMissingDescriptors?.(added) ?? [];
+      if (missing.length === 0) return;
+      console.warn(
+        `[PluginHost] \u63D2\u4EF6 "${pluginId}" \u6709 ${missing.length} \u4E2A\u547D\u4EE4 handler \u6CA1\u6709 ActionDescriptor\uFF1A${missing.join(", ")}\u3002\u8FD9\u4E9B\u547D\u4EE4\u4F1A\u88AB default-deny \u4EE5 403 COMMAND_NOT_REGISTERED \u62D2\u7EDD\uFF0C\u8BF7\u4E3A\u6BCF\u4E2A registerHandler \u540C\u65F6\u6CE8\u518C actionRegistry.register(...)\u3002`
+      );
+    } catch {
+    }
   }
   /**
    * preloaded 插件的激活（Phase 8，内置插件路径）。
@@ -20566,6 +20944,12 @@ var PluginHostLifecycle = class extends PluginHostHttp {
   async grantCapabilities(actorId, caps, opts) {
     if (caps.length === 0) return;
     try {
+      const { unknown } = validateManifestCapabilities(caps);
+      if (unknown.length > 0) {
+        console.error(
+          `[PluginHost] "${actorId}" \u7684 manifest \u58F0\u660E\u4E86\u672A\u77E5\u80FD\u529B\uFF1A${unknown.join(", ")}\u3002\u8FD9\u4E9B\u4E32\u4E0D\u4F1A\u751F\u6548\uFF08\u5B88\u536B\u53EA\u8BA4 ActionDescriptor.capabilityRequired\uFF09\u3002\u5408\u6CD5\u6E05\u5355\u89C1 packages/core/capability/catalog.ts \u4E0E docs/reference/plugin-capability-matrix.md\u3002`
+        );
+      }
       const capService = await this.serviceRegistry.resolve(ICapabilityServiceToken);
       for (const cap of caps) {
         if (typeof cap !== "string" || isBlockedPluginCapability(cap)) {
@@ -20906,7 +21290,7 @@ var import_node_fs11 = __toESM(require("node:fs"), 1);
 var import_node_path13 = __toESM(require("node:path"), 1);
 var import_node_url5 = require("node:url");
 var import_meta7 = {};
-var FALLBACK_VERSION = "0.7.9";
+var FALLBACK_VERSION = "0.7.12";
 function readPlatformVersion() {
   const bases = [];
   if (typeof __dirname !== "undefined") bases.push(__dirname);
@@ -30615,6 +30999,7 @@ var Kernel = class {
     this.serviceRegistry.register(ISemesterGradeServiceToken, new SemesterGradeService(this.db));
     this.serviceRegistry.register(IPointsDimensionRegistryToken, new PointsDimensionRegistry());
     this.serviceRegistry.register(IPointsLedgerServiceToken, new PointsLedgerService(this.db));
+    this.serviceRegistry.register(IClassRosterServiceToken, new ClassRosterService(this.db));
     this.serviceRegistry.register(ILessonEngineServiceToken, { getRuntime: async () => this.lessonRuntime });
     this.serviceRegistry.register(IClassroomRuntimeServiceToken, {
       getRuntimeKernel: async () => this.classroomRuntime
@@ -32470,6 +32855,299 @@ var import_helmet = __toESM(require("helmet"), 1);
 
 // server/security/rate-limit.ts
 var import_express_rate_limit = __toESM(require("express-rate-limit"), 1);
+
+// server/security/route-scope.ts
+var AUTH_MIDDLEWARE_MARKER = Symbol.for("openlearn.routeScope.authMiddleware");
+var DATA_SCOPE_MARKER = Symbol.for("openlearn.routeScope.dataScope");
+function markAuthMiddleware(middleware, roles) {
+  Object.defineProperty(middleware, AUTH_MIDDLEWARE_MARKER, {
+    value: { roles: [...roles] },
+    enumerable: false,
+    configurable: true
+  });
+  return middleware;
+}
+function markDataScopeMiddleware(middleware, scope) {
+  Object.defineProperty(middleware, DATA_SCOPE_MARKER, {
+    value: scope,
+    enumerable: false,
+    configurable: true
+  });
+  return middleware;
+}
+function readMarker(handle, marker) {
+  if (typeof handle !== "function") return void 0;
+  return handle[marker];
+}
+function collectAuthRoutes(app) {
+  const router = app._router ?? app.router;
+  const stack = router?.stack ?? [];
+  const result = [];
+  for (const layer of stack) {
+    const route = layer?.route;
+    if (!route) continue;
+    const handles = (route.stack ?? []).map((entry) => entry.handle);
+    const authMeta = handles.map((handle) => readMarker(handle, AUTH_MIDDLEWARE_MARKER)).find(Boolean);
+    if (!authMeta) continue;
+    const scope = handles.map((handle) => readMarker(handle, DATA_SCOPE_MARKER)).find(Boolean);
+    const methods = Object.keys(route.methods ?? {}).filter((method) => method !== "_all" && route.methods[method]).map((method) => method.toUpperCase());
+    for (const method of methods) {
+      result.push({
+        method,
+        path: String(route.path),
+        scope,
+        roles: [...authMeta.roles]
+      });
+    }
+  }
+  return result;
+}
+function isWhitelisted(route, whitelist) {
+  return whitelist.some(
+    (entry) => entry.method.toUpperCase() === route.method && normalizePath2(entry.path) === normalizePath2(route.path)
+  );
+}
+function normalizePath2(path48) {
+  if (!path48) return "/";
+  return path48.endsWith("/") && path48.length > 1 ? path48.slice(0, -1) : path48;
+}
+function auditRouteScopes(app, whitelist = []) {
+  const declared = [];
+  const roleGated = [];
+  const undeclared = [];
+  for (const route of collectAuthRoutes(app)) {
+    if (route.scope) {
+      declared.push(route);
+      continue;
+    }
+    if (route.roles.length > 0) {
+      roleGated.push(route);
+      continue;
+    }
+    if (isWhitelisted(route, whitelist)) continue;
+    undeclared.push(route);
+  }
+  return { declared, roleGated, undeclared };
+}
+function formatRouteScopeViolation(route) {
+  return `${route.method} ${route.path}`;
+}
+function assertRouteDataScopes(app, options = {}) {
+  const logger2 = options.logger ?? console;
+  const audit = auditRouteScopes(app, options.whitelist ?? []);
+  if (audit.undeclared.length > 0) {
+    const lines = audit.undeclared.map(formatRouteScopeViolation);
+    const message = `[RouteScope] ${audit.undeclared.length} \u4E2A\u5DF2\u8BA4\u8BC1\u8DEF\u7531\u672A\u58F0\u660E\u6570\u636E\u8303\u56F4\uFF08requireScopedAuth\uFF09\uFF1A
+  - ${lines.join("\n  - ")}`;
+    if (options.enforce) {
+      logger2.error(message);
+      throw new Error(message);
+    }
+    logger2.warn(message);
+  }
+  if (audit.declared.length > 0) {
+    logger2.info?.(
+      `[RouteScope] \u5DF2\u58F0\u660E\u6570\u636E\u8303\u56F4 ${audit.declared.length} \u6761\uFF0C\u89D2\u8272\u95E8\u7981\u8DEF\u7531 ${audit.roleGated.length} \u6761\uFF0C\u672A\u58F0\u660E ${audit.undeclared.length} \u6761\uFF08\u767D\u540D\u5355 ${options.whitelist?.length ?? 0} \u6761\uFF09\u3002`
+    );
+  }
+  return audit;
+}
+
+// server/utils/password-gate.ts
+var PASSWORD_GATE_SKIP_ENV = "OPENLEARN_SKIP_PASSWORD_CHANGE_GATE";
+var PASSWORD_GATE_SKIP_ENV_ALIAS = "DEV_BYPASS_PASSWORD_CHANGE_GATE";
+var productionWarningEmitted = false;
+function isTruthyFlag2(value) {
+  if (typeof value !== "string") return false;
+  const normalized = value.trim().toLowerCase();
+  return normalized === "1" || normalized === "true";
+}
+function isPasswordChangeGateSkipped(env = process.env) {
+  const requested = isTruthyFlag2(env[PASSWORD_GATE_SKIP_ENV]) || isTruthyFlag2(env[PASSWORD_GATE_SKIP_ENV_ALIAS]);
+  if (!requested) return false;
+  if ((env.NODE_ENV ?? "") === "production") {
+    if (!productionWarningEmitted) {
+      productionWarningEmitted = true;
+      console.warn(
+        `[SECURITY] ${PASSWORD_GATE_SKIP_ENV}/${PASSWORD_GATE_SKIP_ENV_ALIAS} \u5DF2\u914D\u7F6E\uFF0C\u4F46\u751F\u4EA7\u73AF\u5883\uFF08NODE_ENV=production\uFF09\u4E25\u683C\u5FFD\u7565\u8BE5\u5F00\u5173\uFF1A\u5F3A\u5236\u6539\u5BC6\u9632\u7EBF\u4E0D\u5931\u6548\u3002\u8BF7\u7ACB\u5373\u4ECE\u751F\u4EA7\u73AF\u5883\u79FB\u9664\u8BE5\u53D8\u91CF\u3002`
+      );
+    }
+    return false;
+  }
+  return true;
+}
+
+// server/services/session-role.ts
+var SESSION_ROLE_WHITELIST = /* @__PURE__ */ new Set(["administrator", "teacher", "student", "anonymous"]);
+function resolveSessionRole(session) {
+  if (!session) return "anonymous";
+  for (const candidate of [session.subRole, session.role]) {
+    if (typeof candidate !== "string" || candidate.length === 0) continue;
+    const normalized = candidate === "admin" ? "administrator" : candidate;
+    if (SESSION_ROLE_WHITELIST.has(normalized)) return normalized;
+  }
+  return "anonymous";
+}
+function isAdministrator(session) {
+  return resolveSessionRole(session) === "administrator";
+}
+
+// server/middleware/auth.ts
+var SESSION_REFRESH_INTERVAL_MS = 5 * 60 * 1e3;
+function getValidSession(token) {
+  let sessionRow;
+  try {
+    sessionRow = kernelContainer.db.prepare("SELECT * FROM client_sessions WHERE id = ?").get(token);
+  } catch {
+    return null;
+  }
+  if (!sessionRow) return null;
+  const now = Date.now();
+  if (sessionRow.expires_at && sessionRow.expires_at < now) {
+    kernelContainer.db.prepare("DELETE FROM client_sessions WHERE id = ?").run(token);
+    return null;
+  }
+  const idleTimeout = 24 * 60 * 60 * 1e3;
+  if (sessionRow.updated_at && now - sessionRow.updated_at > idleTimeout) {
+    kernelContainer.db.prepare("DELETE FROM client_sessions WHERE id = ?").run(token);
+    return null;
+  }
+  if (!sessionRow.updated_at || now - sessionRow.updated_at > SESSION_REFRESH_INTERVAL_MS) {
+    kernelContainer.db.prepare("UPDATE client_sessions SET updated_at = ? WHERE id = ?").run(now, token);
+  }
+  let session;
+  try {
+    session = JSON.parse(sessionRow.session_data);
+  } catch {
+    return null;
+  }
+  if (session && !session.userId && session.studentId) {
+    session.userId = session.studentId;
+  }
+  if (session.role && !["teacher", "student", "administrator", "admin"].includes(session.role)) {
+    session.role = "anonymous";
+  }
+  return session;
+}
+function getCookieToken(req) {
+  const rc = req.headers.cookie;
+  if (!rc) return null;
+  const parts = rc.split(";");
+  for (const part of parts) {
+    const trimmed2 = part.trim();
+    if (trimmed2.startsWith("edu_os_token=")) {
+      return trimmed2.substring("edu_os_token=".length);
+    }
+  }
+  return null;
+}
+function getActorId(req) {
+  const token = getCookieToken(req);
+  if (!token) return "anonymous";
+  try {
+    const session = getValidSession(token);
+    if (!session) return "anonymous";
+    const role = resolveSessionRole(session);
+    const rawUserId = session.userId || session.studentId || "demo";
+    const safeUserId = String(rawUserId).replace(/[:\s]/g, "_").slice(0, 64);
+    return `user:${safeUserId}:${role}`;
+  } catch {
+    return "anonymous";
+  }
+}
+function requireAuth(...roles) {
+  const middleware = (req, res, next) => {
+    const token = getCookieToken(req);
+    if (!token) return res.status(401).json({ success: false, error: "Authentication required" });
+    const session = getValidSession(token);
+    if (!session) return res.status(401).json({ success: false, error: "Session expired or invalid" });
+    if (roles.length > 0) {
+      const userRole = resolveSessionRole(session);
+      const effectiveRoles = roles.map((r) => r === "admin" ? "administrator" : r);
+      if (!effectiveRoles.includes(userRole)) {
+        return res.status(403).json({ success: false, error: `Role ${session.role} not allowed. Required: ${roles.join(", ")}` });
+      }
+    }
+    req.session = session;
+    next();
+  };
+  return markAuthMiddleware(middleware, roles);
+}
+var PASSWORD_CHANGE_EXEMPT_PATHS = /* @__PURE__ */ new Set([
+  "/api/auth/change-password",
+  "/api/auth/logout",
+  "/api/auth/session",
+  "/api/auth/me",
+  "/api/client-errors"
+]);
+function enforcePasswordChanged(req, res, next) {
+  if (process.env.PLAYWRIGHT_TEST) {
+    return next();
+  }
+  if (isPasswordChangeGateSkipped()) {
+    return next();
+  }
+  const path48 = req.path || "";
+  if (!path48.startsWith("/api/")) {
+    return next();
+  }
+  if (PASSWORD_CHANGE_EXEMPT_PATHS.has(path48)) {
+    return next();
+  }
+  const token = getCookieToken(req);
+  if (token) {
+    const session = getValidSession(token);
+    if (session && session.mustChangePassword) {
+      res.status(403).json({
+        success: false,
+        code: "FORBIDDEN_DEFAULT_PASSWORD",
+        error: "Default password must be changed first"
+      });
+      return;
+    }
+  }
+  next();
+}
+function socketAuthMiddleware(socket, next) {
+  try {
+    const cookieHeader = socket.handshake.headers.cookie;
+    let token = null;
+    if (cookieHeader) {
+      const parts = cookieHeader.split(";");
+      for (const part of parts) {
+        const trimmed2 = part.trim();
+        if (trimmed2.startsWith("edu_os_token=")) {
+          token = trimmed2.substring("edu_os_token=".length);
+          break;
+        }
+      }
+    }
+    if (!token && socket.handshake.auth?.token) {
+      token = socket.handshake.auth.token;
+    }
+    if (process.env.NODE_ENV === "test" && !token) {
+      return next();
+    }
+    if (!token) {
+      return next(new Error("Authentication required: missing edu_os_token"));
+    }
+    const session = getValidSession(token);
+    if (!session) {
+      return next(new Error("Authentication required: session expired or invalid"));
+    }
+    if (session.mustChangePassword && !isPasswordChangeGateSkipped()) {
+      return next(new Error("FORBIDDEN_DEFAULT_PASSWORD"));
+    }
+    socket.data.session = session;
+    socket.data.userId = session.userId;
+    socket.data.role = session.role;
+    next();
+  } catch (err) {
+    next(new Error(`Authentication error: ${err.message}`));
+  }
+}
+
+// server/security/rate-limit.ts
 function loginRateLimitKey(req) {
   const body = req.body ?? {};
   const raw = body.username ?? body.studentId ?? body.studentName ?? "";
@@ -32486,6 +33164,18 @@ function writeRateLimitKey(req) {
     return ip;
   }
 }
+function sessionRateLimitKey(req) {
+  try {
+    const token = getCookieToken(req);
+    const session = token ? getValidSession(token) : null;
+    if (session) {
+      const identity = String(session.userId || session.studentId || session.username || "").trim();
+      if (identity) return `session:${identity.slice(0, 64)}`;
+    }
+  } catch {
+  }
+  return `ip:${writeRateLimitKey(req)}`;
+}
 var limiterValidation = {
   xForwardedForHeader: false,
   trustProxy: false,
@@ -32524,6 +33214,17 @@ function createAiLimiter(max) {
     validate: limiterValidation
   });
 }
+function createSessionWriteLimiter(max) {
+  return (0, import_express_rate_limit.default)({
+    windowMs: 60 * 1e3,
+    max,
+    keyGenerator: sessionRateLimitKey,
+    message: { error: "\u8BF7\u6C42\u8FC7\u4E8E\u9891\u7E41\uFF0C\u8BF7\u7A0D\u540E\u518D\u8BD5\u3002Too many requests, please try again later." },
+    standardHeaders: true,
+    legacyHeaders: false,
+    validate: limiterValidation
+  });
+}
 
 // server/security/trust-proxy.ts
 function resolveTrustProxy(raw) {
@@ -32808,21 +33509,29 @@ function validateStartupEnv(env = process.env) {
   if (isProduction) {
     const adminPassword = trimmed(env, "OPENLEARN_ADMIN_PASSWORD");
     if (adminPassword && adminPassword.toLowerCase() === "admin") {
-      errors.push({
+      warnings.push({
         key: "OPENLEARN_ADMIN_PASSWORD",
-        severity: "error",
-        message: '\u751F\u4EA7\u73AF\u5883\u7981\u6B62\u628A OPENLEARN_ADMIN_PASSWORD \u8BBE\u4E3A\u7528\u6237\u540D "admin"\u3002\u8BF7\u8BBE\u7F6E\u5F3A\u53E3\u4EE4\u3002'
+        severity: "warning",
+        message: "OPENLEARN_ADMIN_PASSWORD \u4E0E\u7528\u6237\u540D\u76F8\u540C\u3002\u8FD9\u4E0D\u6BD4\u7559\u7A7A\u66F4\u5F31\uFF08\u7559\u7A7A\u65F6\u521D\u59CB\u53E3\u4EE4\u540C\u6837\u662F admin\uFF09\uFF0C\u4F46\u8BF7\u786E\u8BA4\u9996\u6B21\u767B\u5F55\u540E\u7ACB\u5373\u6539\u5BC6\uFF1B\u751F\u4EA7\u90E8\u7F72\u5EFA\u8BAE\u76F4\u63A5\u8BBE\u7F6E\u4E3A\u5F3A\u53E3\u4EE4\u3002"
       });
     }
     const teacherPassword = trimmed(env, "OPENLEARN_TEACHER_PASSWORD");
     if (teacherPassword && teacherPassword.toLowerCase() === "teacher") {
-      errors.push({
+      warnings.push({
         key: "OPENLEARN_TEACHER_PASSWORD",
-        severity: "error",
-        message: '\u751F\u4EA7\u73AF\u5883\u7981\u6B62\u628A OPENLEARN_TEACHER_PASSWORD \u8BBE\u4E3A\u7528\u6237\u540D "teacher"\u3002\u8BF7\u8BBE\u7F6E\u5F3A\u53E3\u4EE4\u3002'
+        severity: "warning",
+        message: "OPENLEARN_TEACHER_PASSWORD \u4E0E\u7528\u6237\u540D\u76F8\u540C\u3002\u8BF7\u786E\u8BA4\u9996\u6B21\u767B\u5F55\u540E\u7ACB\u5373\u6539\u5BC6\uFF0C\u751F\u4EA7\u90E8\u7F72\u5EFA\u8BAE\u8BBE\u7F6E\u4E3A\u5F3A\u53E3\u4EE4\u3002"
       });
     }
   }
+  const seedMode = trimmed(env, "OPENLEARN_SEED_PASSWORD_MODE");
+  if (seedMode && !["default", "random"].includes(seedMode.toLowerCase())) {
+    errors.push({
+      key: "OPENLEARN_SEED_PASSWORD_MODE",
+      severity: "error",
+      message: `\u53EA\u652F\u6301 "default"\uFF08\u53E3\u4EE4 = \u7528\u6237\u540D\uFF0C\u9996\u6B21\u767B\u5F55\u5F3A\u5236\u6539\u5BC6\uFF09\u6216 "random"\uFF08\u968F\u673A\u53E3\u4EE4\u5199\u5165 bootstrap-credentials.txt\uFF09\uFF0C\u6536\u5230 "${seedMode}"\u3002`
+    });
+  }
   const metricsToken = trimmed(env, "METRICS_TOKEN");
   if (metricsToken && metricsToken.length < 16) {
     warnings.push({
@@ -33892,297 +34601,6 @@ function startBackupScheduler(deps) {
   };
 }
 
-// server/security/route-scope.ts
-var AUTH_MIDDLEWARE_MARKER = Symbol.for("openlearn.routeScope.authMiddleware");
-var DATA_SCOPE_MARKER = Symbol.for("openlearn.routeScope.dataScope");
-function markAuthMiddleware(middleware, roles) {
-  Object.defineProperty(middleware, AUTH_MIDDLEWARE_MARKER, {
-    value: { roles: [...roles] },
-    enumerable: false,
-    configurable: true
-  });
-  return middleware;
-}
-function markDataScopeMiddleware(middleware, scope) {
-  Object.defineProperty(middleware, DATA_SCOPE_MARKER, {
-    value: scope,
-    enumerable: false,
-    configurable: true
-  });
-  return middleware;
-}
-function readMarker(handle, marker) {
-  if (typeof handle !== "function") return void 0;
-  return handle[marker];
-}
-function collectAuthRoutes(app) {
-  const router = app._router ?? app.router;
-  const stack = router?.stack ?? [];
-  const result = [];
-  for (const layer of stack) {
-    const route = layer?.route;
-    if (!route) continue;
-    const handles = (route.stack ?? []).map((entry) => entry.handle);
-    const authMeta = handles.map((handle) => readMarker(handle, AUTH_MIDDLEWARE_MARKER)).find(Boolean);
-    if (!authMeta) continue;
-    const scope = handles.map((handle) => readMarker(handle, DATA_SCOPE_MARKER)).find(Boolean);
-    const methods = Object.keys(route.methods ?? {}).filter((method) => method !== "_all" && route.methods[method]).map((method) => method.toUpperCase());
-    for (const method of methods) {
-      result.push({
-        method,
-        path: String(route.path),
-        scope,
-        roles: [...authMeta.roles]
-      });
-    }
-  }
-  return result;
-}
-function isWhitelisted(route, whitelist) {
-  return whitelist.some(
-    (entry) => entry.method.toUpperCase() === route.method && normalizePath2(entry.path) === normalizePath2(route.path)
-  );
-}
-function normalizePath2(path48) {
-  if (!path48) return "/";
-  return path48.endsWith("/") && path48.length > 1 ? path48.slice(0, -1) : path48;
-}
-function auditRouteScopes(app, whitelist = []) {
-  const declared = [];
-  const roleGated = [];
-  const undeclared = [];
-  for (const route of collectAuthRoutes(app)) {
-    if (route.scope) {
-      declared.push(route);
-      continue;
-    }
-    if (route.roles.length > 0) {
-      roleGated.push(route);
-      continue;
-    }
-    if (isWhitelisted(route, whitelist)) continue;
-    undeclared.push(route);
-  }
-  return { declared, roleGated, undeclared };
-}
-function formatRouteScopeViolation(route) {
-  return `${route.method} ${route.path}`;
-}
-function assertRouteDataScopes(app, options = {}) {
-  const logger2 = options.logger ?? console;
-  const audit = auditRouteScopes(app, options.whitelist ?? []);
-  if (audit.undeclared.length > 0) {
-    const lines = audit.undeclared.map(formatRouteScopeViolation);
-    const message = `[RouteScope] ${audit.undeclared.length} \u4E2A\u5DF2\u8BA4\u8BC1\u8DEF\u7531\u672A\u58F0\u660E\u6570\u636E\u8303\u56F4\uFF08requireScopedAuth\uFF09\uFF1A
-  - ${lines.join("\n  - ")}`;
-    if (options.enforce) {
-      logger2.error(message);
-      throw new Error(message);
-    }
-    logger2.warn(message);
-  }
-  if (audit.declared.length > 0) {
-    logger2.info?.(
-      `[RouteScope] \u5DF2\u58F0\u660E\u6570\u636E\u8303\u56F4 ${audit.declared.length} \u6761\uFF0C\u89D2\u8272\u95E8\u7981\u8DEF\u7531 ${audit.roleGated.length} \u6761\uFF0C\u672A\u58F0\u660E ${audit.undeclared.length} \u6761\uFF08\u767D\u540D\u5355 ${options.whitelist?.length ?? 0} \u6761\uFF09\u3002`
-    );
-  }
-  return audit;
-}
-
-// server/utils/password-gate.ts
-var PASSWORD_GATE_SKIP_ENV = "OPENLEARN_SKIP_PASSWORD_CHANGE_GATE";
-var PASSWORD_GATE_SKIP_ENV_ALIAS = "DEV_BYPASS_PASSWORD_CHANGE_GATE";
-var productionWarningEmitted = false;
-function isTruthyFlag2(value) {
-  if (typeof value !== "string") return false;
-  const normalized = value.trim().toLowerCase();
-  return normalized === "1" || normalized === "true";
-}
-function isPasswordChangeGateSkipped(env = process.env) {
-  const requested = isTruthyFlag2(env[PASSWORD_GATE_SKIP_ENV]) || isTruthyFlag2(env[PASSWORD_GATE_SKIP_ENV_ALIAS]);
-  if (!requested) return false;
-  if ((env.NODE_ENV ?? "") === "production") {
-    if (!productionWarningEmitted) {
-      productionWarningEmitted = true;
-      console.warn(
-        `[SECURITY] ${PASSWORD_GATE_SKIP_ENV}/${PASSWORD_GATE_SKIP_ENV_ALIAS} \u5DF2\u914D\u7F6E\uFF0C\u4F46\u751F\u4EA7\u73AF\u5883\uFF08NODE_ENV=production\uFF09\u4E25\u683C\u5FFD\u7565\u8BE5\u5F00\u5173\uFF1A\u5F3A\u5236\u6539\u5BC6\u9632\u7EBF\u4E0D\u5931\u6548\u3002\u8BF7\u7ACB\u5373\u4ECE\u751F\u4EA7\u73AF\u5883\u79FB\u9664\u8BE5\u53D8\u91CF\u3002`
-      );
-    }
-    return false;
-  }
-  return true;
-}
-
-// server/services/session-role.ts
-var SESSION_ROLE_WHITELIST = /* @__PURE__ */ new Set(["administrator", "teacher", "student", "anonymous"]);
-function resolveSessionRole(session) {
-  if (!session) return "anonymous";
-  for (const candidate of [session.subRole, session.role]) {
-    if (typeof candidate !== "string" || candidate.length === 0) continue;
-    const normalized = candidate === "admin" ? "administrator" : candidate;
-    if (SESSION_ROLE_WHITELIST.has(normalized)) return normalized;
-  }
-  return "anonymous";
-}
-function isAdministrator(session) {
-  return resolveSessionRole(session) === "administrator";
-}
-
-// server/middleware/auth.ts
-var SESSION_REFRESH_INTERVAL_MS = 5 * 60 * 1e3;
-function getValidSession(token) {
-  let sessionRow;
-  try {
-    sessionRow = kernelContainer.db.prepare("SELECT * FROM client_sessions WHERE id = ?").get(token);
-  } catch {
-    return null;
-  }
-  if (!sessionRow) return null;
-  const now = Date.now();
-  if (sessionRow.expires_at && sessionRow.expires_at < now) {
-    kernelContainer.db.prepare("DELETE FROM client_sessions WHERE id = ?").run(token);
-    return null;
-  }
-  const idleTimeout = 24 * 60 * 60 * 1e3;
-  if (sessionRow.updated_at && now - sessionRow.updated_at > idleTimeout) {
-    kernelContainer.db.prepare("DELETE FROM client_sessions WHERE id = ?").run(token);
-    return null;
-  }
-  if (!sessionRow.updated_at || now - sessionRow.updated_at > SESSION_REFRESH_INTERVAL_MS) {
-    kernelContainer.db.prepare("UPDATE client_sessions SET updated_at = ? WHERE id = ?").run(now, token);
-  }
-  let session;
-  try {
-    session = JSON.parse(sessionRow.session_data);
-  } catch {
-    return null;
-  }
-  if (session && !session.userId && session.studentId) {
-    session.userId = session.studentId;
-  }
-  if (session.role && !["teacher", "student", "administrator", "admin"].includes(session.role)) {
-    session.role = "anonymous";
-  }
-  return session;
-}
-function getCookieToken(req) {
-  const rc = req.headers.cookie;
-  if (!rc) return null;
-  const parts = rc.split(";");
-  for (const part of parts) {
-    const trimmed2 = part.trim();
-    if (trimmed2.startsWith("edu_os_token=")) {
-      return trimmed2.substring("edu_os_token=".length);
-    }
-  }
-  return null;
-}
-function getActorId(req) {
-  const token = getCookieToken(req);
-  if (!token) return "anonymous";
-  try {
-    const session = getValidSession(token);
-    if (!session) return "anonymous";
-    const role = resolveSessionRole(session);
-    const rawUserId = session.userId || session.studentId || "demo";
-    const safeUserId = String(rawUserId).replace(/[:\s]/g, "_").slice(0, 64);
-    return `user:${safeUserId}:${role}`;
-  } catch {
-    return "anonymous";
-  }
-}
-function requireAuth(...roles) {
-  const middleware = (req, res, next) => {
-    const token = getCookieToken(req);
-    if (!token) return res.status(401).json({ success: false, error: "Authentication required" });
-    const session = getValidSession(token);
-    if (!session) return res.status(401).json({ success: false, error: "Session expired or invalid" });
-    if (roles.length > 0) {
-      const userRole = resolveSessionRole(session);
-      const effectiveRoles = roles.map((r) => r === "admin" ? "administrator" : r);
-      if (!effectiveRoles.includes(userRole)) {
-        return res.status(403).json({ success: false, error: `Role ${session.role} not allowed. Required: ${roles.join(", ")}` });
-      }
-    }
-    req.session = session;
-    next();
-  };
-  return markAuthMiddleware(middleware, roles);
-}
-var PASSWORD_CHANGE_EXEMPT_PATHS = /* @__PURE__ */ new Set([
-  "/api/auth/change-password",
-  "/api/auth/logout",
-  "/api/auth/session",
-  "/api/auth/me",
-  "/api/client-errors"
-]);
-function enforcePasswordChanged(req, res, next) {
-  if (process.env.PLAYWRIGHT_TEST) {
-    return next();
-  }
-  if (isPasswordChangeGateSkipped()) {
-    return next();
-  }
-  const path48 = req.path || "";
-  if (!path48.startsWith("/api/")) {
-    return next();
-  }
-  if (PASSWORD_CHANGE_EXEMPT_PATHS.has(path48)) {
-    return next();
-  }
-  const token = getCookieToken(req);
-  if (token) {
-    const session = getValidSession(token);
-    if (session && session.mustChangePassword) {
-      res.status(403).json({
-        success: false,
-        code: "FORBIDDEN_DEFAULT_PASSWORD",
-        error: "Default password must be changed first"
-      });
-      return;
-    }
-  }
-  next();
-}
-function socketAuthMiddleware(socket, next) {
-  try {
-    const cookieHeader = socket.handshake.headers.cookie;
-    let token = null;
-    if (cookieHeader) {
-      const parts = cookieHeader.split(";");
-      for (const part of parts) {
-        const trimmed2 = part.trim();
-        if (trimmed2.startsWith("edu_os_token=")) {
-          token = trimmed2.substring("edu_os_token=".length);
-          break;
-        }
-      }
-    }
-    if (!token && socket.handshake.auth?.token) {
-      token = socket.handshake.auth.token;
-    }
-    if (process.env.NODE_ENV === "test" && !token) {
-      return next();
-    }
-    if (!token) {
-      return next(new Error("Authentication required: missing edu_os_token"));
-    }
-    const session = getValidSession(token);
-    if (!session) {
-      return next(new Error("Authentication required: session expired or invalid"));
-    }
-    if (session.mustChangePassword && !isPasswordChangeGateSkipped()) {
-      return next(new Error("FORBIDDEN_DEFAULT_PASSWORD"));
-    }
-    socket.data.session = session;
-    socket.data.userId = session.userId;
-    socket.data.role = session.role;
-    next();
-  } catch (err) {
-    next(new Error(`Authentication error: ${err.message}`));
-  }
-}
-
 // server/middleware/csrf.ts
 var WRITE_METHODS = /* @__PURE__ */ new Set(["POST", "PUT", "PATCH", "DELETE"]);
 var EXEMPT_PREFIXES = [
@@ -38099,9 +38517,12 @@ var generateStudentNumber = (db2) => {
   return `S${nextSeq.toString().padStart(3, "0")}`;
 };
 
+// server/services/ai-provider-resolver.ts
+init_ai_provider_resolver();
+
 // server/routes/os.ts
 function registerOsRoutes(ctx) {
-  const { app, runGeminiAgentChat: runGeminiAgentChat2, runOpenAIAgentChat: runOpenAIAgentChat2, activityRegistry, aiLimiter } = ctx;
+  const { app, runOpenAIAgentChat: runOpenAIAgentChat2, activityRegistry, aiLimiter } = ctx;
   app.get("/api/ping", (_req, res) => {
     res.json({ ok: true, ts: Date.now() });
   });
@@ -38320,13 +38741,10 @@ function registerOsRoutes(ctx) {
       }
       let callerRole;
       let userId;
-      const token = getCookieToken(req);
-      if (token) {
-        const session = getValidSession(token);
-        if (session) {
-          callerRole = session.role;
-          userId = session.userId;
-        }
+      const session = req.session || (getCookieToken(req) ? getValidSession(getCookieToken(req)) : null);
+      if (session) {
+        callerRole = session.role;
+        userId = session.userId || session.username;
       }
       const convKey = `agent:${userId || "anonymous"}:${currentLessonId || "global"}`;
       const MEMORY_TURNS = 20;
@@ -38336,19 +38754,17 @@ function registerOsRoutes(ctx) {
         content: r.content
       }));
       let provider;
-      if (providerId) {
-        provider = kernelContainer.db.prepare("SELECT id, name, api_url, api_key, model_name FROM ai_providers WHERE id = ?").get(providerId);
-      } else {
-        provider = kernelContainer.db.prepare(
-          "SELECT id, name, api_url, api_key, model_name FROM ai_providers WHERE api_key IS NOT NULL AND api_key != '' LIMIT 1"
-        ).get();
-      }
-      if (provider?.api_key) provider.api_key = decryptApiKey(provider.api_key);
-      if (!provider || !provider.api_key || !provider.api_key.trim()) {
-        return res.status(400).json({
+      try {
+        provider = resolveAccessibleAiProvider(kernelContainer.db, {
+          providerId,
+          userId,
+          lang
+        });
+      } catch (err) {
+        return res.status(err.status || 400).json({
           success: false,
-          error: "NO_AI_PROVIDER",
-          message: lang === "zh" ? "\u672A\u68C0\u6D4B\u5230\u53EF\u7528\u7684 AI \u63D0\u4F9B\u5546\u3002\u8BF7\u524D\u5F80\u300C\u7CFB\u7EDF\u7BA1\u7406 -> AI \u63D0\u4F9B\u5546\u7BA1\u7406\u300D\u6DFB\u52A0\u5E76\u914D\u7F6E\u5927\u6A21\u578B\u670D\u52A1\u3002" : 'No active AI Provider configured. Please add and configure an AI Provider in "System Management -> AI Provider Management".'
+          error: err.code || "NO_AI_PROVIDER",
+          message: err.message
         });
       }
       const actorId = getActorId(req);
@@ -41812,7 +42228,7 @@ Provide a short, friendly, and helpful hint (1-2 sentences) directly related to
    * 的按学科硬编码字符串拼接，与课题内容无关。此方法用真实的 LLM 调用取代它。
    */
   async generateOutlineWithAi(params) {
-    const { title, category, description, timeline, lang = "zh" } = params;
+    const { title, category, description, timeline, lang = "zh", providerId, userId } = params;
     const trimmedTitle = (title || "").trim();
     if (!trimmedTitle) {
       const err = new Error(lang === "zh" ? "\u8BFE\u7A0B\u8BFE\u9898\u4E0D\u80FD\u4E3A\u7A7A" : "Course title is required");
@@ -41852,7 +42268,12 @@ ${timelineText}` : "- \u8BFE\u5802\u65F6\u95F4\u8F74\u73AF\u8282\uFF1A\uFF08\u65
    - \`## \u{1F4E5} \u8BFE\u540E\u4F5C\u4E1A\`\uFF1A\u4E00\u4EFD\u660E\u786E\u7684\u8BFE\u540E\u4EFB\u52A1\u4E0E\u63D0\u4EA4\u8981\u6C42\u3002
 4. \u5185\u5BB9\u5FC5\u987B\u7D27\u6263\u8BFE\u9898\u672C\u8EAB\uFF0C\u7981\u6B62\u4F7F\u7528"\u516C\u5F0F A""\u6A21\u5757 1"\u4E4B\u7C7B\u7684\u5360\u4F4D\u7B26\u6216\u4E0E\u8BFE\u9898\u65E0\u5173\u7684\u901A\u7528\u5957\u8BDD\u3002
 5. \u7BC7\u5E45\u63A7\u5236\u5728 600-1000 \u5B57\uFF0C\u8BED\u8A00${lang === "zh" ? "\u4F7F\u7528\u7B80\u4F53\u4E2D\u6587" : "use English"}\u3002`;
-    const raw = await this.aiService.generateText(prompt, { temperature: 0.6, maxTokens: 2048 });
+    const raw = await this.aiService.generateText(prompt, {
+      temperature: 0.6,
+      maxTokens: 2048,
+      userId,
+      providerId
+    });
     const outline = stripReasoningArtifacts(stripOuterCodeFence(String(raw || "").trim()));
     if (!outline) {
       const err = new Error(
@@ -42116,13 +42537,17 @@ function registerLessonsRoutes(ctx) {
     safeAiLimiter,
     async (req, res) => {
       try {
-        const { title, category, description, timeline, lang } = req.body || {};
+        const { title, category, description, timeline, lang, providerId } = req.body || {};
+        const session = req.session;
+        const userId = session?.userId || session?.username;
         const content = await lessonService.generateOutlineWithAi({
           title,
           category,
           description,
           timeline,
-          lang
+          lang,
+          providerId,
+          userId
         });
         res.json({ success: true, content });
       } catch (e) {
@@ -45167,6 +45592,26 @@ function resolveWritableStudentId(session, rawId) {
   if (isTeacher(session) && teacherCanSeeStudent(kernelContainer.getReadDb(), session, studentId)) return studentId;
   return null;
 }
+var SEED_STATUS_TTL_MS = 15e3;
+var seedStatusCache = null;
+function readSeedDefaultStatus() {
+  const now = Date.now();
+  if (seedStatusCache && seedStatusCache.expiresAt > now) return seedStatusCache.payload;
+  const accounts = [];
+  try {
+    const rows = kernelContainer.db.prepare("SELECT username, password_hash FROM users WHERE username IN (?, ?)").all("admin", "teacher");
+    for (const row of rows) {
+      if (verifyPassword(row.username, row.password_hash).valid) accounts.push(row.username);
+    }
+  } catch {
+  }
+  const payload = { active: accounts.length > 0, accounts };
+  seedStatusCache = { payload, expiresAt: now + SEED_STATUS_TTL_MS };
+  return payload;
+}
+function invalidateSeedStatusCache() {
+  seedStatusCache = null;
+}
 function registerRosterRoutes(ctx) {
   const { app, io, loginLimiter } = ctx;
   const rosterService = new RosterService(kernelContainer.db, kernelContainer.getReadDb());
@@ -45448,6 +45893,7 @@ function registerRosterRoutes(ctx) {
           return res.status(400).json({ error: "New password must be different from the username" });
         }
         kernelContainer.db.prepare("UPDATE users SET password_hash = ?, must_change_password = 0 WHERE id = ?").run(hashPassword(newPassword), session.userId);
+        invalidateSeedStatusCache();
         kernelContainer.db.prepare("DELETE FROM client_sessions WHERE id != ? AND session_data LIKE ?").run(token, `%${session.userId}%`);
         try {
           const updatedSession = { ...session, mustChangePassword: false };
@@ -45615,6 +46061,13 @@ function registerRosterRoutes(ctx) {
       sendSafeError(res, e);
     }
   });
+  app.get("/api/auth/seed-status", (_req, res) => {
+    try {
+      res.json(readSeedDefaultStatus());
+    } catch (e) {
+      sendSafeError(res, e);
+    }
+  });
   app.post("/api/auth/login", loginLimiter, (req, res) => {
     try {
       const { entrance, username, password, studentId } = req.body;
@@ -48180,7 +48633,7 @@ var ScheduleService = class {
    * Timetable OCR 课表图像识别与数据清洗
    */
   async processTimetableOcr(imageBase64, options = {}) {
-    const { lang = "zh", providerId } = options;
+    const { lang = "zh", providerId, userId } = options;
     if (!imageBase64) {
       throw new Error("imageBase64 is required");
     }
@@ -48211,21 +48664,11 @@ var ScheduleService = class {
 
 \u8FD4\u56DE\u683C\u5F0F\u793A\u4F8B\uFF1A
 [{"dayOfWeek":1,"periodNumber":1,"className":"\u9AD8\u4E00(13)","subject":"\u4FE1\u606F","timeSlot":"08:00-08:40","location":"312","teacherName":""}]`;
-    let provider;
-    if (providerId) {
-      provider = this.db.prepare("SELECT id, name, api_url, api_key, model_name FROM ai_providers WHERE id = ?").get(providerId);
-    }
-    if (!provider) {
-      provider = this.db.prepare(
-        "SELECT id, name, api_url, api_key, model_name FROM ai_providers WHERE api_key IS NOT NULL AND api_key != '' ORDER BY created_at DESC LIMIT 1"
-      ).get();
-    }
-    if (provider?.api_key) provider.api_key = decryptApiKey(provider.api_key);
-    if (!provider || !provider.api_key || !provider.api_key.trim()) {
-      throw new Error(
-        lang === "zh" ? "\u672A\u68C0\u6D4B\u5230\u53EF\u7528\u7684 AI \u63D0\u4F9B\u5546\u3002\u8BF7\u524D\u5F80\u300C\u7CFB\u7EDF\u7BA1\u7406 -> AI \u63D0\u4F9B\u5546\u7BA1\u7406\u300D\u6DFB\u52A0\u5E76\u914D\u7F6E\u5927\u6A21\u578B\u670D\u52A1\u3002" : 'No AI provider configured. Please add and configure an AI Provider in "System Management -> AI Provider Management".'
-      );
-    }
+    const provider = resolveAccessibleAiProvider(this.db, {
+      providerId,
+      userId,
+      lang
+    });
     let chatUrl = provider.api_url.trim();
     if (!chatUrl.endsWith("/chat/completions")) {
       chatUrl = chatUrl.endsWith("/") ? chatUrl + "chat/completions" : chatUrl + "/chat/completions";
@@ -48441,7 +48884,9 @@ function registerSchedulesRoutes(ctx) {
     const startTime = Date.now();
     try {
       const { imageBase64, lang = "zh", providerId } = req.body;
-      const result = await scheduleService.processTimetableOcr(imageBase64, { lang, providerId });
+      const session = req.session;
+      const userId = session?.userId || session?.username;
+      const result = await scheduleService.processTimetableOcr(imageBase64, { lang, providerId, userId });
       res.json({
         success: true,
         entries: result.entries,
@@ -48827,7 +49272,7 @@ var GradingService = class {
   }
   // ── 6. AI 学期综合总评评语生成 ────────────────────────────────────────────────
   async generateSemesterAiEvaluation(params) {
-    const { classId, studentId, semesterName = "2026\u5E74\u6625\u5B63\u5B66\u671F", providerId } = params;
+    const { classId, studentId, semesterName = "2026\u5E74\u6625\u5B63\u5B66\u671F", providerId, userId } = params;
     const student = this.db.prepare("SELECT name FROM students WHERE id = ?").get(studentId);
     if (!student) {
       throw new Error("Student not found");
@@ -48885,13 +49330,10 @@ ${examsText}
    - \u6307\u51FA\u5176\u53EF\u4EE5\u6539\u8FDB\u7684\u5730\u65B9\uFF08\u5982\u8FDB\u5EA6\u843D\u540E\u3001\u8003\u8BD5\u53D1\u6325\u4E0D\u4F73\u7B49\uFF09\uFF0C\u8BED\u6C14\u8981\u975E\u5E38\u6E29\u67D4\u3001\u59D4\u5A49\uFF0C\u7ED9\u4E88\u5176\u4FE1\u5FC3\u3002
    - \u5BF9\u672A\u6765\u7684\u671F\u8BB8\uFF0C\u6FC0\u52B1\u5B66\u751F\u5728\u4E0B\u5B66\u671F\u7EE7\u7EED\u52AA\u529B\u3002
 3. \u957F\u5EA6\u63A7\u5236\u5728 150-250 \u5B57\u4E4B\u95F4\u3002\u4E0D\u8981\u5305\u542B\u4EFB\u4F55 Markdown \u683C\u5F0F\uFF0C\u53EA\u8FD4\u56DE\u7EAF\u6587\u672C\u8BC4\u8BED\u3002`;
-    const provider = providerId ? this.db.prepare("SELECT id, name, api_url, api_key, model_name FROM ai_providers WHERE id = ?").get(providerId) : this.db.prepare(
-      "SELECT id, name, api_url, api_key, model_name FROM ai_providers WHERE api_key IS NOT NULL AND api_key != '' LIMIT 1"
-    ).get();
-    if (provider?.api_key) provider.api_key = decryptApiKey(provider.api_key);
-    if (!provider || !provider.api_key || !provider.api_key.trim()) {
-      throw new Error("\u672A\u68C0\u6D4B\u5230\u53EF\u7528\u7684 AI \u63D0\u4F9B\u5546\u3002\u8BF7\u524D\u5F80\u300C\u7CFB\u7EDF\u7BA1\u7406 -> AI \u63D0\u4F9B\u5546\u7BA1\u7406\u300D\u6DFB\u52A0\u5E76\u914D\u7F6E\u5927\u6A21\u578B\u670D\u52A1\u3002");
-    }
+    const provider = resolveAccessibleAiProvider(this.db, {
+      providerId,
+      userId
+    });
     let chatUrl = provider.api_url.trim();
     if (!chatUrl.endsWith("/chat/completions")) {
       chatUrl = chatUrl.endsWith("/") ? chatUrl + "chat/completions" : chatUrl + "/chat/completions";
@@ -49164,11 +49606,14 @@ function registerGradingRoutes(ctx) {
         const { classId, studentId } = req.params;
         if (gate(req, res, classId, "staff")) return;
         const { semesterName = "2026\u5E74\u6625\u5B63\u5B66\u671F", providerId } = req.body;
+        const session = req.session;
+        const userId = session?.userId || session?.username;
         const aiEvaluation = await gradingService.generateSemesterAiEvaluation({
           classId,
           studentId,
           semesterName,
-          providerId
+          providerId,
+          userId
         });
         res.json({ success: true, aiEvaluation });
       } catch (e) {
@@ -49596,7 +50041,8 @@ async function pluginApiGatewayMiddleware(req, res, next) {
     }
   }
   const clientIp = req.ip || req.socket?.remoteAddress || "unknown-ip";
-  const rateLimitKey = `${clientIp}:${resolvedUuid || pluginId}:${method}:${normalizedSubPath}`;
+  const identityKey = auth.isAuthenticated ? `u:${String(auth.userId || auth.username || auth.actorId).slice(0, 64)}` : `ip:${clientIp}`;
+  const rateLimitKey = `${identityKey}:${resolvedUuid || pluginId}:${method}:${normalizedSubPath}`;
   const windowMs = matchedRule?.rateLimit?.windowMs ?? 60 * 1e3;
   const maxRequests = matchedRule?.rateLimit?.max ?? 120;
   if (!rateLimiter.consume(rateLimitKey, maxRequests, windowMs)) {
@@ -50585,16 +51031,9 @@ function listInstalledManifestVersions() {
   return installed;
 }
 function registerPluginsRoutes(ctx) {
-  const {
-    app,
-    aiLimiter,
-    buildOpenAITools: buildOpenAITools2,
-    executeAgentToolCall: executeAgentToolCall2,
-    buildOpenAIChatUrl: buildOpenAIChatUrl2,
-    runGeminiAgentChat: runGeminiAgentChat2,
-    runOpenAIAgentChat: runOpenAIAgentChat2
-  } = ctx;
-  const safeAiLimiter = typeof aiLimiter === "function" ? aiLimiter : (_req, _res, next) => next();
+  const { app, aiLimiter } = ctx;
+  const noopMiddleware = (_req, _res, next) => next();
+  const safeAiLimiter = typeof aiLimiter === "function" ? aiLimiter : noopMiddleware;
   app.get("/api/docs/plugin-guide", (req, res) => {
     try {
       const docPath = import_path22.default.join(process.cwd(), "docs_plugin_guide.md");
@@ -51630,9 +52069,13 @@ function registerPluginsRoutes(ctx) {
     }
   });
   app.all("/api/plugins/:pluginId/*", pluginApiGatewayMiddleware);
-  app.get("/api/ai-providers", requireAuth("teacher", "administrator"), (req, res) => {
+  app.get("/api/ai-providers", requireScopedAuth("self", "teacher", "administrator"), (req, res) => {
     try {
-      const providers = kernelContainer.db.prepare("SELECT * FROM ai_providers ORDER BY created_at DESC").all();
+      const session = req.session;
+      const currentUserId = session?.userId || session?.username;
+      const providers = kernelContainer.db.prepare(
+        "SELECT id, name, api_url, api_key, model_name, owner_id, is_shared, created_at, updated_at FROM ai_providers WHERE (owner_id = ? OR is_shared = 1) ORDER BY created_at DESC"
+      ).all(currentUserId);
       const masked = providers.map((p) => {
         let apiKey;
         try {
@@ -51640,54 +52083,122 @@ function registerPluginsRoutes(ctx) {
         } catch {
           apiKey = "[UNDECRYPTABLE]";
         }
-        return { ...p, api_key: apiKey };
+        return {
+          ...p,
+          api_key: apiKey,
+          is_shared: Number(p.is_shared) === 1
+        };
       });
       res.json(masked);
     } catch (e) {
       sendSafeError(res, e);
     }
   });
-  app.post("/api/ai-providers", requireAuth("administrator"), (req, res) => {
+  app.post("/api/ai-providers", requireScopedAuth("self", "teacher", "administrator"), (req, res) => {
     try {
-      const { name, api_url, api_key, model_name } = req.body;
+      const session = req.session;
+      const currentUserId = session?.userId || session?.username;
+      const isAdmin = isAdministrator2(session);
+      const { name, api_url, api_key, model_name, is_shared } = req.body;
       if (!name || !api_url || !model_name) {
         return res.status(400).json({ error: "Missing name, api_url or model_name" });
       }
+      const wantsShared = is_shared === 1 || is_shared === true || is_shared === "1";
+      if (wantsShared && !isAdmin) {
+        return res.status(403).json({ error: "Only administrators can create platform shared providers" });
+      }
       const id = "prov_" + Date.now();
       const now = Date.now();
       const encryptedKey = api_key ? encryptApiKey(api_key) : "";
       kernelContainer.db.prepare(
-        "INSERT INTO ai_providers (id, name, api_url, api_key, model_name, created_at, updated_at) VALUES (?, ?, ?, ?, ?, ?, ?)"
-      ).run(id, name, api_url, encryptedKey, model_name, now, now);
+        "INSERT INTO ai_providers (id, name, api_url, api_key, model_name, owner_id, is_shared, created_at, updated_at) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?)"
+      ).run(
+        id,
+        name.trim(),
+        api_url.trim(),
+        encryptedKey,
+        model_name.trim(),
+        currentUserId,
+        wantsShared && isAdmin ? 1 : 0,
+        now,
+        now
+      );
       res.json({ success: true, id });
     } catch (e) {
       sendSafeError(res, e);
     }
   });
-  app.put("/api/ai-providers/:id", requireAuth("administrator"), (req, res) => {
+  app.put("/api/ai-providers/:id", requireScopedAuth("self", "teacher", "administrator"), (req, res) => {
     try {
-      const { name, api_url, api_key, model_name } = req.body;
+      const session = req.session;
+      const currentUserId = session?.userId || session?.username;
+      const isAdmin = isAdministrator2(session);
+      const { name, api_url, api_key, model_name, is_shared } = req.body;
       if (!name || !api_url || !model_name) {
         return res.status(400).json({ error: "Missing name, api_url or model_name" });
       }
+      const existing = kernelContainer.db.prepare("SELECT id, api_key, owner_id, is_shared FROM ai_providers WHERE id = ?").get(req.params.id);
+      if (!existing) {
+        return res.status(404).json({ error: "AI provider not found" });
+      }
+      const isExistingShared = Number(existing.is_shared) === 1;
+      if (isExistingShared) {
+        if (!isAdmin) {
+          return res.status(403).json({ error: "Forbidden: Only administrators can modify platform shared providers" });
+        }
+      } else {
+        if (existing.owner_id !== currentUserId) {
+          return res.status(403).json({
+            error: "Forbidden: You do not have permission to modify another user's private AI provider"
+          });
+        }
+      }
+      let nextShared = existing.is_shared ?? 0;
+      if (is_shared !== void 0) {
+        const wantsShared = is_shared === 1 || is_shared === true || is_shared === "1";
+        if (wantsShared !== (Number(existing.is_shared) === 1)) {
+          if (!isAdmin) {
+            return res.status(403).json({ error: "Forbidden: Only administrators can change platform shared status" });
+          }
+          nextShared = wantsShared ? 1 : 0;
+        }
+      }
       const now = Date.now();
       let finalKey;
       if (api_key && api_key.trim() !== "" && !api_key.includes("****")) {
         finalKey = encryptApiKey(api_key);
       } else {
-        const existing = kernelContainer.db.prepare("SELECT api_key FROM ai_providers WHERE id = ?").get(req.params.id);
         finalKey = existing?.api_key || "";
       }
       kernelContainer.db.prepare(
-        "UPDATE ai_providers SET name = ?, api_url = ?, api_key = ?, model_name = ?, updated_at = ? WHERE id = ?"
-      ).run(name, api_url, finalKey, model_name, now, req.params.id);
+        "UPDATE ai_providers SET name = ?, api_url = ?, api_key = ?, model_name = ?, is_shared = ?, updated_at = ? WHERE id = ?"
+      ).run(name.trim(), api_url.trim(), finalKey, model_name.trim(), nextShared, now, req.params.id);
       res.json({ success: true });
     } catch (e) {
       sendSafeError(res, e);
     }
   });
-  app.delete("/api/ai-providers/:id", requireAuth("administrator"), (req, res) => {
+  app.delete("/api/ai-providers/:id", requireScopedAuth("self", "teacher", "administrator"), (req, res) => {
     try {
+      const session = req.session;
+      const currentUserId = session?.userId || session?.username;
+      const isAdmin = isAdministrator2(session);
+      const existing = kernelContainer.db.prepare("SELECT id, owner_id, is_shared FROM ai_providers WHERE id = ?").get(req.params.id);
+      if (!existing) {
+        return res.status(404).json({ error: "AI provider not found" });
+      }
+      const isExistingShared = Number(existing.is_shared) === 1;
+      if (isExistingShared) {
+        if (!isAdmin) {
+          return res.status(403).json({ error: "Forbidden: Only administrators can delete platform shared providers" });
+        }
+      } else {
+        if (existing.owner_id !== currentUserId) {
+          return res.status(403).json({
+            error: "Forbidden: You do not have permission to delete another user's private AI provider"
+          });
+        }
+      }
       kernelContainer.db.prepare("DELETE FROM ai_providers WHERE id = ?").run(req.params.id);
       res.json({ success: true });
     } catch (e) {
@@ -51770,65 +52281,82 @@ function registerPluginsRoutes(ctx) {
       sendSafeError(res, e);
     }
   });
-  app.post("/api/ai-providers/test", requireAuth("administrator"), safeAiLimiter, async (req, res) => {
-    try {
-      const { api_url, api_key: providedKey, model_name } = req.body;
-      if (!api_url || !model_name) {
-        return res.status(400).json({ error: "api_url and model_name are required" });
-      }
-      let api_key = "";
-      if (providedKey && providedKey.includes("****")) {
-        const existing = kernelContainer.db.prepare("SELECT api_key FROM ai_providers WHERE api_url = ? AND model_name = ? LIMIT 1").get(api_url, model_name);
-        api_key = existing ? decryptApiKey(existing.api_key) : "";
-      } else if (providedKey) {
-        api_key = providedKey.includes(":") ? decryptApiKey(providedKey) : providedKey;
-      }
-      let cleanUrl = api_url.trim();
-      if (!cleanUrl.endsWith("/chat/completions")) {
-        cleanUrl = cleanUrl.endsWith("/") ? cleanUrl + "chat/completions" : cleanUrl + "/chat/completions";
-      }
-      const urlSafety = isSafeExternalUrl(cleanUrl);
-      if (!urlSafety.safe) {
-        return res.status(400).json({ error: `Blocked unsafe AI provider URL: ${urlSafety.reason}` });
-      }
-      let response;
+  app.post(
+    "/api/ai-providers/test",
+    requireScopedAuth("self", "teacher", "administrator"),
+    safeAiLimiter,
+    async (req, res) => {
       try {
-        response = await fetchWithSafeRedirects(cleanUrl, {
-          method: "POST",
-          headers: {
-            "Content-Type": "application/json",
-            Authorization: `Bearer ${api_key || ""}`
-          },
-          body: JSON.stringify({
-            model: model_name,
-            messages: [{ role: "user", content: "Say connected" }],
-            max_tokens: 5
-          }),
-          timeoutMs: 1e4
-        });
-      } catch (err) {
-        const isTimeout = err instanceof AIFetchTimeoutError || err?.name === "TimeoutError" || err?.name === "AbortError" || /abort|timeout/i.test(err?.message ?? "");
-        if (isTimeout) {
-          return res.status(504).json({
+        const session = req.session;
+        const currentUserId = session?.userId || session?.username;
+        const { api_url, api_key: providedKey, model_name, id } = req.body;
+        if (!api_url || !model_name) {
+          return res.status(400).json({ error: "api_url and model_name are required" });
+        }
+        let api_key = "";
+        if (providedKey && providedKey.includes("****")) {
+          let existing;
+          if (id) {
+            existing = kernelContainer.db.prepare("SELECT api_key FROM ai_providers WHERE id = ? AND (owner_id = ? OR is_shared = 1)").get(id, currentUserId);
+          } else {
+            existing = kernelContainer.db.prepare(
+              "SELECT api_key FROM ai_providers WHERE api_url = ? AND model_name = ? AND (owner_id = ? OR is_shared = 1) LIMIT 1"
+            ).get(api_url, model_name, currentUserId);
+          }
+          if (!existing) {
+            return res.status(403).json({ error: "Forbidden: Cannot access key for this provider" });
+          }
+          api_key = decryptApiKey(existing.api_key);
+        } else if (providedKey) {
+          api_key = providedKey.includes(":") ? decryptApiKey(providedKey) : providedKey;
+        }
+        let cleanUrl = api_url.trim();
+        if (!cleanUrl.endsWith("/chat/completions")) {
+          cleanUrl = cleanUrl.endsWith("/") ? cleanUrl + "chat/completions" : cleanUrl + "/chat/completions";
+        }
+        const urlSafety = isSafeExternalUrl(cleanUrl);
+        if (!urlSafety.safe) {
+          return res.status(400).json({ error: `Blocked unsafe AI provider URL: ${urlSafety.reason}` });
+        }
+        let response;
+        try {
+          response = await fetchWithSafeRedirects(cleanUrl, {
+            method: "POST",
+            headers: {
+              "Content-Type": "application/json",
+              Authorization: `Bearer ${api_key || ""}`
+            },
+            body: JSON.stringify({
+              model: model_name,
+              messages: [{ role: "user", content: "Say connected" }],
+              max_tokens: 5
+            }),
+            timeoutMs: 1e4
+          });
+        } catch (err) {
+          const isTimeout = err instanceof AIFetchTimeoutError || err?.name === "TimeoutError" || err?.name === "AbortError" || /abort|timeout/i.test(err?.message ?? "");
+          if (isTimeout) {
+            return res.status(504).json({
+              success: false,
+              error: "AI Provider request timed out after 10000ms. Please verify the URL or provider availability."
+            });
+          }
+          throw err;
+        }
+        const responseText = await response.text();
+        if (response.ok) {
+          res.json({ success: true, message: "Successfully connected and received response." });
+        } else {
+          res.status(response.status).json({
             success: false,
-            error: "AI Provider request timed out after 10000ms. Please verify the URL or provider availability."
+            error: `API responded with status ${response.status}: ${responseText.slice(0, 200)}`
           });
         }
-        throw err;
-      }
-      const responseText = await response.text();
-      if (response.ok) {
-        res.json({ success: true, message: "Successfully connected and received response." });
-      } else {
-        res.status(response.status).json({
-          success: false,
-          error: `API responded with status ${response.status}: ${responseText.slice(0, 200)}`
-        });
+      } catch (e) {
+        sendSafeError(res, e, 500, "Connection failed");
       }
-    } catch (e) {
-      sendSafeError(res, e, 500, "Connection failed");
     }
-  });
+  );
 }
 
 // server/services/assessment-service.ts
@@ -58273,12 +58801,16 @@ async function startServer() {
   const defaultWriteLimit = process.env.PLAYWRIGHT_TEST ? 1e4 : isDev ? 600 : 180;
   const writeLimiter = createWriteLimiter(defaultWriteLimit);
   const viewStateLimiter = createWriteLimiter(process.env.PLAYWRIGHT_TEST ? 1e4 : isDev ? 600 : 120);
+  const pluginApiLimiter = createSessionWriteLimiter(process.env.PLAYWRIGHT_TEST ? 1e4 : 600);
   const aiLimiter = createAiLimiter(process.env.PLAYWRIGHT_TEST ? 1e3 : 10);
   app.use((req, res, next) => {
     if (req.method === "POST" || req.method === "PUT" || req.method === "DELETE") {
       if (/^\/api\/classroom\/sessions\/[^/]+\/view-state\/?$/.test(req.path)) {
         return viewStateLimiter(req, res, next);
       }
+      if (req.path.startsWith("/api/plugins/")) {
+        return pluginApiLimiter(req, res, next);
+      }
       return writeLimiter(req, res, next);
     }
     next();