web-extend-plugin-vue2 0.2.2 → 0.2.5

package/dist/index.cjs

@@ -6,438 +6,492 @@ function _interopDefault (e) { return e && e.__esModule ? e : { default: e }; }
 
 var Vue__default = /*#__PURE__*/_interopDefault(Vue);
 
-/**
- * 宿主可覆盖的默认运行时配置（路径、白名单、超时等）。
- * 使用方式：`resolveRuntimeOptions({ ...defaultWebExtendPluginRuntime, manifestListPath: '/api/my-plugins' })`
- * 或只传需要改动的字段：`resolveRuntimeOptions({ manifestListPath: '/api/my-plugins' })`。
- *
- * @module default-runtime-config
- */
-
-/**
- * @typedef {typeof defaultWebExtendPluginRuntime} WebExtendPluginDefaultRuntime
- */
-
-const defaultWebExtendPluginRuntime = {
-  /** 清单 HTTP 服务前缀（与后端 context-path 对齐），不含尾部 `/` */
-  manifestBase: '/fp-api',
-
-  /**
-   * 拉取插件清单的 **路径段**（以 `/` 开头），拼在 `manifestBase` 之后。
-   * 完整 URL：`{manifestBase}{manifestListPath}` → 默认 `/fp-api/api/frontend-plugins`
-   */
-  manifestListPath: '/api/frontend-plugins',
-
-  /** 清单 `fetch` 的 `credentials`，需 Cookie 会话时用 `include` */
-  manifestFetchCredentials: 'include',
-
-  /** 插件 dev 服务存活探测路径（拼在 `webPluginDevOrigin` 后） */
-  devPingPath: '/__web_plugin_dev_ping',
-
-  /** 插件 dev 热更新 SSE 路径（拼在插件 dev 的 origin 后） */
-  devReloadSsePath: '/__web_plugin_reload_stream',
-
-  /** 隐式 dev 映射里，每个 id 对应的入口路径（相对插件 dev origin） */
-  webPluginDevEntryPath: '/src/plugin-entry.js',
-
-  /** `fetch(devPingUrl)` 超时毫秒数 */
-  devPingTimeoutMs: 500,
-
-  /**
-   * **隐式 dev 映射**（可选）：开发模式下若 `webPluginDevOrigin` 上 ping 成功，运行时会为若干插件 id 自动生成
-   * `{ id → origin + webPluginDevEntryPath }`，从而用 dev 服务入口替代清单里的 dist，便于热更新联调。
-   *
-   * 插件 id 来源优先级：`webPluginDevIds`（或 `VITE_WEB_PLUGIN_DEV_IDS`）→ 本字段。**默认 `[]`**，
-   * 避免把仓库示例 id 写进通用宿主；联调时在 `.env` 里设 `VITE_WEB_PLUGIN_DEV_IDS=com.xxx,com.yyy`，
-   * 或 `resolveRuntimeOptions({ defaultImplicitDevPluginIds: ['com.xxx'] })` 即可。
-   */
-  defaultImplicitDevPluginIds: [],
-
-  /**
-   * 允许通过 `<script>` / 动态 `import()` 加载的插件脚本所在主机名（小写），防误配公网 URL。
-   */
-  allowedScriptHosts: ['localhost', '127.0.0.1', '::1'],
-
-  /**
-   * `hostApi.getBridge().request(path)` 允许的 path 前缀；须以 `/` 开头。
-   * 需与后端实际 API 前缀一致。
-   */
-  bridgeAllowedPathPrefixes: ['/api/']
+/**
+ * 对外配置单一入口：`resolveRuntimeOptions` / 文档 / 其它模块的默认值与环境键名均由此引用。
+ * 宿主通过 `resolveRuntimeOptions(partial)` 覆盖的对象形状见 `defaultWebExtendPluginRuntime`。
+ */
+/** 与 `package.json` 的 peer 下限一致；`npm run test:peer-min` / CI matrix 须与此保持同步 */
+const peerMinimumVersions = {
+    vue: '2.6.14',
+    vueRouter: '3.5.4'
+};
+// ---------------------------------------------------------------------------
+// 协议与品牌（发布契约；与清单 `hostPluginApiVersion` 对齐 semver 主版本，一般不随宿主覆盖）
+// ---------------------------------------------------------------------------
+const HOST_PLUGIN_API_VERSION = '1.0.0';
+/** 控制台日志与首次引导横幅使用的短名称 */
+const RUNTIME_CONSOLE_LABEL = 'web-extend-plugin-vue2';
+// ---------------------------------------------------------------------------
+// 与 `build-env` / `resolveBundledEnv` 配套的键名（单一事实来源，便于检索与文档）
+// ---------------------------------------------------------------------------
+const webExtendPluginEnvKeys = {
+    manifestBase: 'VITE_FRONTEND_PLUGIN_BASE',
+    manifestListPath: 'VITE_WEB_PLUGIN_MANIFEST_PATH',
+    implicitDevIds: 'VITE_WEB_PLUGIN_IMPLICIT_DEV_IDS',
+    allowedScriptHosts: 'VITE_WEB_PLUGIN_ALLOWED_SCRIPT_HOSTS',
+    bridgePrefixes: 'VITE_WEB_PLUGIN_BRIDGE_PREFIXES',
+    devFallbackManifestUrl: 'VITE_WEB_PLUGIN_DEV_FALLBACK_MANIFEST_URL',
+    manifestMode: 'VITE_WEB_PLUGIN_MANIFEST_MODE',
+    staticManifestUrl: 'VITE_WEB_PLUGIN_STATIC_MANIFEST_URL',
+    mountPath: 'VITE_WEB_PLUGIN_MOUNT_PATH',
+    devEntry: 'VITE_WEB_PLUGIN_DEV_ENTRY',
+    devPing: 'VITE_WEB_PLUGIN_DEV_PING_PATH',
+    devSse: 'VITE_WEB_PLUGIN_DEV_SSE_PATH',
+    devPingTimeout: 'VITE_WEB_PLUGIN_DEV_PING_TIMEOUT_MS',
+    manifestCredentials: 'VITE_WEB_PLUGIN_MANIFEST_CREDENTIALS',
+    devManifestFallback: 'VITE_WEB_PLUGIN_DEV_MANIFEST_FALLBACK',
+    webPluginDevOrigin: 'VITE_WEB_PLUGIN_DEV_ORIGIN',
+    webPluginDevIds: 'VITE_WEB_PLUGIN_DEV_IDS',
+    webPluginDevMap: 'VITE_WEB_PLUGIN_DEV_MAP',
+    pluginsBootstrapSummary: 'VITE_PLUGINS_BOOTSTRAP_SUMMARY',
+    /** 清单路径备选：部分宿主单独使用 */
+    manifestPathAlt: 'VUE_APP_WEB_PLUGIN_MANIFEST_PATH'
+};
+// ---------------------------------------------------------------------------
+// `manifestMode` 未配置且环境未指定时的默认值
+// ---------------------------------------------------------------------------
+const defaultManifestMode = 'api';
+// ---------------------------------------------------------------------------
+// `manifest-fetch-composer` 中间件默认（中间件 options 可逐项覆盖）
+// ---------------------------------------------------------------------------
+const defaultManifestFetchCache = {
+    storageKeyPrefix: 'wep.manifestFetch.v1',
+    maxEntries: 50
+};
+// ---------------------------------------------------------------------------
+// 路由合成名前缀（`createHostApi` 为无 name 的路由生成 `__wep_${pluginId}_${seq}`）
+// ---------------------------------------------------------------------------
+const routeSynthNamePrefix = '__wep_';
+// ---------------------------------------------------------------------------
+// 宿主可通过 `resolveRuntimeOptions` 覆盖的运行时默认值（与 README / index.d.ts 描述一致）
+// ---------------------------------------------------------------------------
+const defaultWebExtendPluginRuntime = {
+    manifestBase: '/fp-api',
+    manifestListPath: '/api/frontend-plugins',
+    manifestFetchCredentials: 'include',
+    devPingPath: '/__web_plugin_dev_ping',
+    devReloadSsePath: '/__web_plugin_reload_stream',
+    webPluginDevEntryPath: '/src/plugin-entry.js',
+    devPingTimeoutMs: 500,
+    defaultImplicitDevPluginIds: [],
+    allowedScriptHosts: ['localhost', '127.0.0.1', '::1'],
+    bridgeAllowedPathPrefixes: ['/api/'],
+    /** 与 `hostLayoutComponent` 同时使用时默认父路由 name */
+    pluginRoutesParentName: '__wepPluginHost',
+    /** 插件壳路径（与菜单、ensurePluginHostRoute 一致） */
+    pluginMountPath: '/plugin',
+    /** `manifestMode=api` 且开发环境下，API 失败或 plugins 为空时尝试的静态 JSON（可放于 `public/web-plugins/`） */
+    devFallbackStaticManifestUrl: '/web-plugins/plugins.manifest.json'
 };
 
 /**
- * 不依赖 `import.meta`，兼容 Webpack 4/5、Vue CLI、Vite、Rspack 等宿主。
- * - Webpack / Vue CLI：依赖构建时注入的 `process.env`（如 `VUE_APP_*`、`DefinePlugin` 注入的 `VITE_*`）。
- * - Vite：在入口调用 `setWebExtendPluginEnv(import.meta.env)`，或 `installWebExtendPluginVue2(..., { env: import.meta.env })`。
- * - 也可在入口前设置 `globalThis.__WEP_ENV__ = import.meta.env`（与 setWebExtendPluginEnv 二选一即可）。
- *
- * @module bundled-env
+ * 与具体打包器解耦的运行时环境读取：优先显式注入，其次 `globalThis.__WEP_ENV__`，再读 `process.env`。
+ * Vite 宿主建议在入口调用 `setWebExtendPluginEnv(import.meta.env)`。
  */
-
-/** @type {Record<string, unknown> | null} */
-let _explicitEnv = null;
-
+let _injected = null;
 /**
- * 显式注入与 `import.meta.env` 同形态的对象（推荐 Vite 宿主在入口调用一次）。
- * @param {Record<string, unknown> | null | undefined} env
+ * 注入与 `import.meta.env` 同形态的对象（键如 `VITE_*`、`DEV`）。
  */
 function setWebExtendPluginEnv(env) {
-  _explicitEnv = env && typeof env === 'object' ? env : null;
+    _injected = env && typeof env === 'object' ? env : null;
 }
-
-/**
- * @returns {Record<string, unknown> | null}
- */
-function getInjectedEnvObject() {
-  if (_explicitEnv) {
-    return _explicitEnv
-  }
-  try {
-    const g = typeof globalThis !== 'undefined' ? globalThis : undefined;
-    if (g && g.__WEP_ENV__ && typeof g.__WEP_ENV__ === 'object') {
-      return g.__WEP_ENV__
+function getEnvObject() {
+    if (_injected) {
+        return _injected;
+    }
+    try {
+        const g = typeof globalThis !== 'undefined' ? globalThis : undefined;
+        const raw = g;
+        if (raw && raw.__WEP_ENV__ && typeof raw.__WEP_ENV__ === 'object') {
+            return raw.__WEP_ENV__;
+        }
     }
-  } catch (_) {}
-  return null
+    catch {
+        /* ignore */
+    }
+    return null;
 }
-
 /**
- * 从注入环境读取字符串配置键（`VITE_*` / `PLUGIN_*` 等）。
- * @param {string} key
- * @returns {string|undefined}
+ * 读取注入环境中的字符串配置（`VITE_*` / `PLUGIN_*` 等价键由调用方传入）。
  */
 function readInjectedEnvKey(key) {
-  const o = getInjectedEnvObject();
-  if (!o || !(key in o)) {
-    return undefined
-  }
-  const v = o[key];
-  if (v === undefined || v === '') {
-    return undefined
-  }
-  return String(v)
+    const o = getEnvObject();
+    if (!o || !(key in o)) {
+        return undefined;
+    }
+    const v = o[key];
+    if (v === undefined || v === '') {
+        return undefined;
+    }
+    return String(v);
 }
-
-/**
- * @returns {boolean}
- */
 function readInjectedEnvDev() {
-  const o = getInjectedEnvObject();
-  return !!(o && o.DEV === true)
+    const o = getEnvObject();
+    return !!(o && o.DEV === true);
 }
 
 /**
- * 从注入环境与 `process.env` 解析 VITE_/PLUGIN_ 键。
- * @module runtime/env-resolve
- */
-
-/**
- * @param {string} key
- * @returns {string|undefined}
+ * 从注入环境与 `process.env` 解析 `VITE_*` / `PLUGIN_*` 键。
  */
 function readProcessEnv(key) {
-  try {
-    if (typeof process !== 'undefined' && process.env && key in process.env) {
-      const v = process.env[key];
-      if (v !== undefined && v !== '') {
-        return String(v)
-      }
+    try {
+        if (typeof process !== 'undefined' && process.env && key in process.env) {
+            const v = process.env[key];
+            if (v !== undefined && v !== '') {
+                return String(v);
+            }
+        }
+    }
+    catch {
+        /* ignore */
     }
-  } catch (_) {}
-  return undefined
+    return undefined;
 }
-
-/**
- * @param {string} viteStyleKey
- * @returns {string|null}
- */
 function viteKeyToPluginAlternate(viteStyleKey) {
-  if (typeof viteStyleKey !== 'string' || !viteStyleKey.startsWith('VITE_')) {
-    return null
-  }
-  return `PLUGIN_${viteStyleKey.slice(5)}`
+    if (typeof viteStyleKey !== 'string' || !viteStyleKey.startsWith('VITE_')) {
+        return null;
+    }
+    return `PLUGIN_${viteStyleKey.slice(5)}`;
 }
-
-/**
- * @param {string} key
- * @param {string} [fallback='']
- */
 function resolveBundledEnv(key, fallback = '') {
-  const alt = viteKeyToPluginAlternate(key);
-  const inj = readInjectedEnvKey(key);
-  const fromInjected =
-    inj === undefined || inj === null ? (alt ? readInjectedEnvKey(alt) : undefined) : inj;
-  const proc = readProcessEnv(key);
-  const fromProcess =
-    proc === undefined || proc === null ? (alt ? readProcessEnv(alt) : undefined) : proc;
-  const first = fromInjected === undefined || fromInjected === null ? fromProcess : fromInjected;
-  return first === undefined || first === null ? fallback : first
+    const alt = viteKeyToPluginAlternate(key);
+    const inj = readInjectedEnvKey(key);
+    const fromInjected = inj === undefined || inj === null ? (alt ? readInjectedEnvKey(alt) : undefined) : inj;
+    const proc = readProcessEnv(key);
+    const fromProcess = proc === undefined || proc === null ? (alt ? readProcessEnv(alt) : undefined) : proc;
+    const first = fromInjected === undefined || fromInjected === null ? fromProcess : fromInjected;
+    return first === undefined || first === null ? fallback : first;
 }
-
-/**
- * @returns {boolean}
- */
 function resolveBundledIsDev() {
-  try {
-    if (readInjectedEnvDev()) {
-      return true
+    try {
+        if (readInjectedEnvDev()) {
+            return true;
+        }
+    }
+    catch {
+        /* ignore */
     }
-  } catch (_) {}
-  try {
-    if (typeof process !== 'undefined' && process.env && process.env.NODE_ENV === 'development') {
-      return true
+    try {
+        if (typeof process !== 'undefined' && process.env && process.env.NODE_ENV === 'development') {
+            return true;
+        }
     }
-  } catch (_) {}
-  return false
+    catch {
+        /* ignore */
+    }
+    return false;
 }
 
 /**
- * 路径与脚本主机名校验工具。
- * @module runtime/path-host-utils
+ * 清单模式与静态清单 URL 配置解析（显式 options + VITE_* / PLUGIN_* 环境）。
  */
+const EK$1 = webExtendPluginEnvKeys;
+function resolveManifestModeFromInputs(userMode) {
+    if (userMode !== undefined && userMode !== null && String(userMode).trim() !== '') {
+        const s = String(userMode).trim().toLowerCase();
+        if (s === 'static' || s === 'api') {
+            return s;
+        }
+    }
+    const e = resolveBundledEnv(EK$1.manifestMode, '');
+    if (e) {
+        const s = String(e).trim().toLowerCase();
+        if (s === 'static' || s === 'api') {
+            return s;
+        }
+    }
+    return defaultManifestMode;
+}
+function resolveStaticManifestUrlFromInputs(userUrl) {
+    if (userUrl !== undefined && userUrl !== null) {
+        const s = String(userUrl).trim();
+        if (s !== '') {
+            return s;
+        }
+    }
+    return String(resolveBundledEnv(EK$1.staticManifestUrl, '') || '').trim();
+}
 
 /**
- * @param {string} p
+ * 路径与脚本主机名校验工具。
  */
 function ensureLeadingPath(p) {
-  const t = String(p || '').trim();
-  if (!t) {
-    return '/'
-  }
-  return t.startsWith('/') ? t : `/${t}`
+    const t = String(p || '').trim();
+    if (!t) {
+        return '/';
+    }
+    return t.startsWith('/') ? t : `/${t}`;
 }
-
-/**
- * @param {string} hostname
- */
 function normalizeHost(hostname) {
-  if (!hostname) {
-    return ''
-  }
-  const h = hostname.toLowerCase();
-  if (h.startsWith('[') && h.endsWith(']')) {
-    return h.slice(1, -1)
-  }
-  return h
+    if (!hostname) {
+        return '';
+    }
+    const h = hostname.toLowerCase();
+    if (h.startsWith('[') && h.endsWith(']')) {
+        return h.slice(1, -1);
+    }
+    return h;
 }
-
-/**
- * @param {string[]} hostnames
- * @returns {Set<string>}
- */
 function buildAllowedScriptHostsSet(hostnames) {
-  const s = new Set();
-  for (const h of hostnames) {
-    const n = normalizeHost(h);
-    if (n) {
-      s.add(n);
+    const s = new Set();
+    for (const h of hostnames) {
+        const n = normalizeHost(h);
+        if (n) {
+            s.add(n);
+        }
     }
-  }
-  return s
+    return s;
 }
-
-/**
- * @param {string} url
- * @param {Set<string>} hostSet
- */
 function isScriptHostAllowed(url, hostSet) {
-  if (typeof window === 'undefined') {
-    return false
-  }
-  try {
-    const u = new URL(url, window.location.origin);
-    const h = normalizeHost(u.hostname);
-    return hostSet.has(h)
-  } catch {
-    return false
-  }
+    if (typeof window === 'undefined') {
+        return false;
+    }
+    try {
+        const u = new URL(url, window.location.origin);
+        const h = normalizeHost(u.hostname);
+        return hostSet.has(h);
+    }
+    catch {
+        return false;
+    }
 }
 
 /**
  * 合并用户、环境与默认配置得到运行时选项。
- * @module runtime/resolve-runtime-options
  */
-
-
 const DEF = defaultWebExtendPluginRuntime;
-
-/**
- * @param {string|undefined} userVal
- * @param {string} envKey
- * @param {RequestCredentials} fallback
- */
+const EK = webExtendPluginEnvKeys;
 function resolveManifestCredentials(userVal, envKey, fallback) {
-  if (userVal !== undefined && userVal !== '') {
-    const s = String(userVal);
-    if (s === 'include' || s === 'omit' || s === 'same-origin') {
-      return s
+    if (userVal !== undefined) {
+        const s = String(userVal);
+        if (s === 'include' || s === 'omit' || s === 'same-origin') {
+            return s;
+        }
+    }
+    const e = resolveBundledEnv(envKey, '');
+    if (e === 'include' || e === 'omit' || e === 'same-origin') {
+        return e;
     }
-  }
-  const e = resolveBundledEnv(envKey, '');
-  if (e === 'include' || e === 'omit' || e === 'same-origin') {
-    return e
-  }
-  return fallback
+    return fallback;
 }
-
-/**
- * @param {number|undefined} userVal
- * @param {string} envKey
- * @param {number} fallback
- */
 function resolvePositiveInt(userVal, envKey, fallback) {
-  if (typeof userVal === 'number' && Number.isFinite(userVal) && userVal > 0) {
-    return Math.floor(userVal)
-  }
-  const raw = resolveBundledEnv(envKey, '');
-  const n = raw ? parseInt(raw, 10) : NaN;
-  if (Number.isFinite(n) && n > 0) {
-    return n
-  }
-  return fallback
+    if (typeof userVal === 'number' && Number.isFinite(userVal) && userVal > 0) {
+        return Math.floor(userVal);
+    }
+    const raw = resolveBundledEnv(envKey, '');
+    const n = raw ? parseInt(raw, 10) : NaN;
+    if (Number.isFinite(n) && n > 0) {
+        return n;
+    }
+    return fallback;
 }
-
-/**
- * 合并用户、环境变量与 `defaultWebExtendPluginRuntime`，得到完整运行时选项（宿主可只传需要覆盖的字段）。
- * @param {WebExtendPluginRuntimeOptions} [user]
- * @returns {object}
- */
+/** 合并用户、环境变量与 `defaultWebExtendPluginRuntime`，得到完整运行时选项（宿主可只传需要覆盖的字段）。 */
+// eslint-disable-next-line @typescript-eslint/no-explicit-any
 function resolveRuntimeOptions$1(user = {}) {
-  const manifestBaseRaw =
-    user.manifestBase !== undefined && user.manifestBase !== ''
-      ? String(user.manifestBase)
-      : resolveBundledEnv('VITE_FRONTEND_PLUGIN_BASE', DEF.manifestBase) || DEF.manifestBase;
-
-  const manifestListPath = ensureLeadingPath(
-    user.manifestListPath !== undefined && user.manifestListPath !== ''
-      ? user.manifestListPath
-      : resolveBundledEnv('VITE_WEB_PLUGIN_MANIFEST_PATH', DEF.manifestListPath)
-  );
-
-  const defaultImplicitDevPluginIds = Array.isArray(user.defaultImplicitDevPluginIds)
-    ? user.defaultImplicitDevPluginIds.map(String).filter(Boolean)
-    : (() => {
-        const e = resolveBundledEnv('VITE_WEB_PLUGIN_IMPLICIT_DEV_IDS', '');
-        if (e) {
-          return e
-            .split(',')
-            .map((s) => s.trim())
-            .filter(Boolean)
-        }
-        return [...DEF.defaultImplicitDevPluginIds]
-      })();
-
-  const allowedScriptHosts =
-    Array.isArray(user.allowedScriptHosts) && user.allowedScriptHosts.length > 0
-      ? user.allowedScriptHosts.map((h) => normalizeHost(String(h))).filter(Boolean)
-      : (() => {
-          const e = resolveBundledEnv('VITE_WEB_PLUGIN_ALLOWED_SCRIPT_HOSTS', '');
-          if (e) {
-            return e
-              .split(',')
-              .map((s) => normalizeHost(s.trim()))
-              .filter(Boolean)
-          }
-          return [...DEF.allowedScriptHosts]
+    const manifestBaseRaw = user.manifestBase !== undefined && user.manifestBase !== ''
+        ? String(user.manifestBase)
+        : resolveBundledEnv(EK.manifestBase, DEF.manifestBase) || DEF.manifestBase;
+    const manifestListPath = ensureLeadingPath(user.manifestListPath !== undefined && user.manifestListPath !== ''
+        ? user.manifestListPath
+        : resolveBundledEnv(EK.manifestListPath, DEF.manifestListPath));
+    const defaultImplicitDevPluginIds = Array.isArray(user.defaultImplicitDevPluginIds)
+        ? user.defaultImplicitDevPluginIds.map(String).filter(Boolean)
+        : (() => {
+            const e = resolveBundledEnv(EK.implicitDevIds, '');
+            if (e) {
+                return e
+                    .split(',')
+                    .map((s) => s.trim())
+                    .filter(Boolean);
+            }
+            return [...DEF.defaultImplicitDevPluginIds];
         })();
-
-  const bridgeAllowedPathPrefixes =
-    Array.isArray(user.bridgeAllowedPathPrefixes) && user.bridgeAllowedPathPrefixes.length > 0
-      ? user.bridgeAllowedPathPrefixes.map((p) => ensureLeadingPath(p)).filter(Boolean)
-      : (() => {
-          const e = resolveBundledEnv('VITE_WEB_PLUGIN_BRIDGE_PREFIXES', '');
-          if (e) {
-            return e
-              .split(',')
-              .map((s) => ensureLeadingPath(s.trim()))
-              .filter(Boolean)
-          }
-          return [...DEF.bridgeAllowedPathPrefixes]
+    const allowedScriptHosts = Array.isArray(user.allowedScriptHosts) && user.allowedScriptHosts.length > 0
+        ? user.allowedScriptHosts.map((h) => normalizeHost(String(h))).filter(Boolean)
+        : (() => {
+            const e = resolveBundledEnv(EK.allowedScriptHosts, '');
+            if (e) {
+                return e
+                    .split(',')
+                    .map((s) => normalizeHost(s.trim()))
+                    .filter(Boolean);
+            }
+            return [...DEF.allowedScriptHosts];
         })();
-
-  return {
-    manifestBase: manifestBaseRaw.replace(/\/$/, '') || DEF.manifestBase.replace(/\/$/, ''),
-    manifestListPath,
-    manifestFetchCredentials: resolveManifestCredentials(
-      user.manifestFetchCredentials,
-      'VITE_WEB_PLUGIN_MANIFEST_CREDENTIALS',
-      DEF.manifestFetchCredentials
-    ),
-    isDev: user.isDev !== undefined ? user.isDev : resolveBundledIsDev(),
-    webPluginDevOrigin:
-      user.webPluginDevOrigin !== undefined ? user.webPluginDevOrigin : resolveBundledEnv('VITE_WEB_PLUGIN_DEV_ORIGIN', ''),
-    webPluginDevIds:
-      user.webPluginDevIds !== undefined ? user.webPluginDevIds : resolveBundledEnv('VITE_WEB_PLUGIN_DEV_IDS', ''),
-    webPluginDevMapJson:
-      user.webPluginDevMapJson !== undefined
-        ? user.webPluginDevMapJson
-        : resolveBundledEnv('VITE_WEB_PLUGIN_DEV_MAP', ''),
-    webPluginDevEntryPath: ensureLeadingPath(
-      user.webPluginDevEntryPath !== undefined && user.webPluginDevEntryPath !== ''
-        ? user.webPluginDevEntryPath
-        : resolveBundledEnv('VITE_WEB_PLUGIN_DEV_ENTRY', DEF.webPluginDevEntryPath)
-    ),
-    devPingPath: ensureLeadingPath(
-      user.devPingPath !== undefined && user.devPingPath !== ''
-        ? user.devPingPath
-        : resolveBundledEnv('VITE_WEB_PLUGIN_DEV_PING_PATH', DEF.devPingPath)
-    ),
-    devReloadSsePath: ensureLeadingPath(
-      user.devReloadSsePath !== undefined && user.devReloadSsePath !== ''
-        ? user.devReloadSsePath
-        : resolveBundledEnv('VITE_WEB_PLUGIN_DEV_SSE_PATH', DEF.devReloadSsePath)
-    ),
-    devPingTimeoutMs: resolvePositiveInt(user.devPingTimeoutMs, 'VITE_WEB_PLUGIN_DEV_PING_TIMEOUT_MS', DEF.devPingTimeoutMs),
-    defaultImplicitDevPluginIds,
-    allowedScriptHosts,
-    bridgeAllowedPathPrefixes,
-    bootstrapSummary: user.bootstrapSummary,
-    ...(typeof user.fetchManifest === 'function' ? { fetchManifest: user.fetchManifest } : {})
-  }
+    const bridgeAllowedPathPrefixes = Array.isArray(user.bridgeAllowedPathPrefixes) && user.bridgeAllowedPathPrefixes.length > 0
+        ? user.bridgeAllowedPathPrefixes.map((p) => ensureLeadingPath(p)).filter(Boolean)
+        : (() => {
+            const e = resolveBundledEnv(EK.bridgePrefixes, '');
+            if (e) {
+                return e
+                    .split(',')
+                    .map((s) => ensureLeadingPath(s.trim()))
+                    .filter(Boolean);
+            }
+            return [...DEF.bridgeAllowedPathPrefixes];
+        })();
+    const manifestMode = resolveManifestModeFromInputs(user.manifestMode);
+    const staticManifestUrl = resolveStaticManifestUrlFromInputs(user.staticManifestUrl);
+    const isDevResolved = user.isDev !== undefined ? user.isDev : resolveBundledIsDev();
+    const devFallbackStaticManifestUrl = (() => {
+        if (user.devFallbackStaticManifestUrl !== undefined && String(user.devFallbackStaticManifestUrl).trim() !== '') {
+            return String(user.devFallbackStaticManifestUrl).trim();
+        }
+        const e = resolveBundledEnv(EK.devFallbackManifestUrl, '');
+        if (e) {
+            return e.trim();
+        }
+        return String(DEF.devFallbackStaticManifestUrl).trim();
+    })();
+    const hostLayoutComponent = user.hostLayoutComponent;
+    const pluginRoutesParentName = (() => {
+        if (user.pluginRoutesParentName !== undefined) {
+            return String(user.pluginRoutesParentName).trim();
+        }
+        if (hostLayoutComponent != null) {
+            return String(DEF.pluginRoutesParentName).trim();
+        }
+        return '';
+    })();
+    const pluginMountRaw = user.pluginMountPath !== undefined && String(user.pluginMountPath).trim() !== ''
+        ? String(user.pluginMountPath).trim()
+        : String(resolveBundledEnv(EK.mountPath, '') || DEF.pluginMountPath).trim();
+    const pluginMountPath = ensureLeadingPath(pluginMountRaw || DEF.pluginMountPath);
+    const pluginHostRouteMeta = user.pluginHostRouteMeta !== undefined && user.pluginHostRouteMeta !== null
+        ? user.pluginHostRouteMeta
+        : undefined;
+    const ensurePluginHostRoute = user.ensurePluginHostRoute !== false;
+    const devManifestFallback = (() => {
+        if (manifestMode === 'static') {
+            return false;
+        }
+        if (user.devManifestFallback === false) {
+            return false;
+        }
+        if (user.devManifestFallback === true) {
+            return true;
+        }
+        const envFlag = resolveBundledEnv(EK.devManifestFallback, '');
+        if (envFlag === '0' || envFlag === 'false') {
+            return false;
+        }
+        if (envFlag === '1' || envFlag === 'true') {
+            return true;
+        }
+        return !!isDevResolved;
+    })();
+    return {
+        manifestBase: manifestBaseRaw.replace(/\/$/, '') || DEF.manifestBase.replace(/\/$/, ''),
+        manifestListPath,
+        manifestMode,
+        staticManifestUrl,
+        devManifestFallback,
+        devFallbackStaticManifestUrl,
+        manifestFetchCredentials: resolveManifestCredentials(user.manifestFetchCredentials, EK.manifestCredentials, DEF.manifestFetchCredentials),
+        isDev: isDevResolved,
+        webPluginDevOrigin: user.webPluginDevOrigin !== undefined
+            ? user.webPluginDevOrigin
+            : resolveBundledEnv(EK.webPluginDevOrigin, ''),
+        webPluginDevIds: user.webPluginDevIds !== undefined ? user.webPluginDevIds : resolveBundledEnv(EK.webPluginDevIds, ''),
+        webPluginDevMapJson: user.webPluginDevMapJson !== undefined
+            ? user.webPluginDevMapJson
+            : resolveBundledEnv(EK.webPluginDevMap, ''),
+        webPluginDevEntryPath: ensureLeadingPath(user.webPluginDevEntryPath !== undefined && user.webPluginDevEntryPath !== ''
+            ? user.webPluginDevEntryPath
+            : resolveBundledEnv(EK.devEntry, DEF.webPluginDevEntryPath)),
+        devPingPath: ensureLeadingPath(user.devPingPath !== undefined && user.devPingPath !== ''
+            ? user.devPingPath
+            : resolveBundledEnv(EK.devPing, DEF.devPingPath)),
+        devReloadSsePath: ensureLeadingPath(user.devReloadSsePath !== undefined && user.devReloadSsePath !== ''
+            ? user.devReloadSsePath
+            : resolveBundledEnv(EK.devSse, DEF.devReloadSsePath)),
+        devPingTimeoutMs: resolvePositiveInt(user.devPingTimeoutMs, EK.devPingTimeout, DEF.devPingTimeoutMs),
+        defaultImplicitDevPluginIds,
+        allowedScriptHosts,
+        bridgeAllowedPathPrefixes,
+        bootstrapSummary: user.bootstrapSummary,
+        hostLayoutComponent,
+        pluginMountPath,
+        pluginHostRouteMeta,
+        ensurePluginHostRoute,
+        pluginRoutesParentName,
+        ...(typeof user.fetchManifest === 'function' ? { fetchManifest: user.fetchManifest } : {}),
+        ...(typeof user.transformRoutes === 'function' ? { transformRoutes: user.transformRoutes } : {}),
+        ...(typeof user.interceptRegisterRoutes === 'function'
+            ? { interceptRegisterRoutes: user.interceptRegisterRoutes }
+            : {}),
+        ...(typeof user.adaptRouteDeclarations === 'function'
+            ? { adaptRouteDeclarations: user.adaptRouteDeclarations }
+            : {}),
+        ...(typeof user.applyPluginMenuItems === 'function'
+            ? { applyPluginMenuItems: user.applyPluginMenuItems }
+            : {}),
+        ...(typeof user.revokePluginMenuItems === 'function'
+            ? { revokePluginMenuItems: user.revokePluginMenuItems }
+            : {}),
+        ...(user.hostContext !== undefined &&
+            user.hostContext !== null &&
+            typeof user.hostContext === 'object' &&
+            !Array.isArray(user.hostContext)
+            ? { hostContext: user.hostContext }
+            : {}),
+        ...(typeof user.onBeforePluginActivate === 'function'
+            ? { onBeforePluginActivate: user.onBeforePluginActivate }
+            : {}),
+        ...(typeof user.onAfterPluginActivate === 'function'
+            ? { onAfterPluginActivate: user.onAfterPluginActivate }
+            : {}),
+        ...(typeof user.onPluginActivateError === 'function'
+            ? { onPluginActivateError: user.onPluginActivateError }
+            : {})
+    };
 }
 
 /**
- * 默认清单 HTTP 拉取（未配置 `fetchManifest` 时）。
- * @module runtime/default-fetch-manifest
- */
-
-/**
- * @typedef {object} FetchWebPluginManifestContext
- * @property {string} manifestUrl
- * @property {RequestCredentials} credentials
- */
-
-/**
- * @typedef {object} FetchWebPluginManifestResult
- * @property {boolean} ok
- * @property {number} [status]
- * @property {{ hostPluginApiVersion?: string, plugins?: object[] }|null} [data]
- * @property {unknown} [error]
- */
-
-/**
- * @callback FetchWebPluginManifestFn
- * @param {FetchWebPluginManifestContext} ctx
- * @returns {Promise<FetchWebPluginManifestResult>}
+ * 将裸 `{ plugins }` 与 `{ code, data: { plugins } }` 式响应解包为清单对象。
  */
+function unwrapNestedManifestBody(body) {
+    if (!body || typeof body !== 'object') {
+        return null;
+    }
+    const o = body;
+    if (Array.isArray(o.plugins)) {
+        return o;
+    }
+    const d = o.data;
+    if (d && typeof d === 'object') {
+        const inner = d;
+        if (Array.isArray(inner.plugins)) {
+            return inner;
+        }
+        if ('plugins' in inner) {
+            return inner;
+        }
+    }
+    return d !== undefined && d !== null && typeof d === 'object' ? d : o;
+}
 
-/**
- * 默认清单请求（未配置 `fetchManifest` 时）。
- * @param {FetchWebPluginManifestContext} ctx
- * @returns {Promise<FetchWebPluginManifestResult>}
- */
 async function defaultFetchWebPluginManifest$1(ctx) {
-  const { manifestUrl, credentials } = ctx;
-  try {
-    const res = await fetch(manifestUrl, { credentials });
-    if (!res.ok) {
-      return { ok: false, status: res.status, data: null }
+    const { manifestUrl, credentials } = ctx;
+    try {
+        const res = await fetch(manifestUrl, { credentials });
+        if (!res.ok) {
+            return { ok: false, status: res.status, data: null };
+        }
+        const body = await res.json();
+        const data = unwrapNestedManifestBody(body);
+        if (!data || typeof data !== 'object') {
+            return {
+                ok: false,
+                error: new Error('[wep] invalid manifest response body'),
+                data: null
+            };
+        }
+        return { ok: true, data };
+    }
+    catch (e) {
+        return { ok: false, error: e, data: null };
     }
-    const data = await res.json();
-    return { ok: true, data }
-  } catch (e) {
-    return { ok: false, error: e, data: null }
-  }
 }
 
 function getDefaultExportFromCjs (x) {
@@ -3165,1368 +3219,1378 @@ function requireSemver () {
 var semverExports = requireSemver();
 var semver = /*@__PURE__*/getDefaultExportFromCjs(semverExports);
 
-/**
- * 与 `plugin-web-starter`（WebPluginsResponse）返回的 `hostPluginApiVersion` 保持一致，用于契约校验。
- * @type {string}
- */
-const HOST_PLUGIN_API_VERSION = '1.0.0';
-
 /**
- * 开发模式插件 URL 映射（显式 JSON + 隐式 dev 探测）。
- * @module runtime/dev-map
+ * `disposeWebPlugin` 使用的菜单撤销钩子：在 `bootstrapPlugins` 中用 `resolveRuntimeOptions` 结果注册。
  */
+let revokePluginMenuItems;
+function setRevokePluginMenuItems(fn) {
+    revokePluginMenuItems = fn;
+}
+function revokePluginMenusIfConfigured(pluginId) {
+    if (typeof revokePluginMenuItems === 'function') {
+        try {
+            revokePluginMenuItems(pluginId);
+        }
+        catch (e) {
+            console.warn('[wep] revokePluginMenuItems failed', pluginId, e);
+        }
+    }
+}
 
 /**
- * @param {{ isDev: boolean, webPluginDevMapJson?: string|null }} opts
+ * 开发模式插件 URL 映射（显式 JSON + 隐式 dev 探测）。
  */
 function parseWebPluginDevMapExplicit(opts) {
-  if (!opts.isDev) {
-    return null
-  }
-  const raw = opts.webPluginDevMapJson;
-  if (raw === undefined || raw === null || String(raw).trim() === '') {
-    return null
-  }
-  try {
-    const map = JSON.parse(String(raw));
-    return map && typeof map === 'object' ? map : null
-  } catch {
-    console.warn('[plugins] webPluginDevMapJson / VITE_WEB_PLUGIN_DEV_MAP is not valid JSON');
-    return null
-  }
+    if (!opts.isDev) {
+        return null;
+    }
+    const raw = opts.webPluginDevMapJson;
+    if (raw === undefined || raw === null || String(raw).trim() === '') {
+        return null;
+    }
+    try {
+        const map = JSON.parse(String(raw));
+        return map && typeof map === 'object' ? map : null;
+    }
+    catch {
+        console.warn('[wep] invalid webPluginDevMapJson / VITE_WEB_PLUGIN_DEV_MAP');
+        return null;
+    }
 }
-
-/**
- * @param {Record<string, string>} implicit
- * @param {Record<string, string>|null} explicit
- */
 function mergeDevMaps(implicit, explicit) {
-  const i = implicit && typeof implicit === 'object' ? implicit : {};
-  const e = explicit && typeof explicit === 'object' ? explicit : {};
-  return { ...i, ...e }
+    const i = implicit && typeof implicit === 'object' ? implicit : {};
+    const e = explicit && typeof explicit === 'object' ? explicit : {};
+    return { ...i, ...e };
 }
-
-/**
- * @param {object} opts
- * @param {boolean} opts.isDev
- * @param {string|undefined|null} opts.webPluginDevOrigin
- * @param {string|undefined|null} opts.webPluginDevIds
- * @param {string[]} opts.defaultImplicitDevPluginIds
- * @param {string} opts.devPingPath
- * @param {number} opts.devPingTimeoutMs
- * @param {string} opts.webPluginDevEntryPath
- * @param {Set<string>} hostSet
- */
 async function buildImplicitWebPluginDevMap(opts, hostSet) {
-  if (!opts.isDev) {
-    return {}
-  }
-  const origin =
-    opts.webPluginDevOrigin === undefined || opts.webPluginDevOrigin === null
-      ? ''
-      : String(opts.webPluginDevOrigin).trim();
-  if (!origin) {
-    return {}
-  }
-  if (!isScriptHostAllowed(`${origin}/`, hostSet)) {
-    return {}
-  }
-
-  const idsRaw = opts.webPluginDevIds;
-  const ids =
-    idsRaw !== undefined && idsRaw !== null && String(idsRaw).trim() !== ''
-      ? String(idsRaw)
-          .split(',')
-          .map((s) => s.trim())
-          .filter(Boolean)
-      : [...opts.defaultImplicitDevPluginIds];
-
-  if (ids.length === 0) {
-    return {}
-  }
-
-  const base = origin.replace(/\/$/, '');
-  const pingUrl = `${base}${opts.devPingPath}`;
-  try {
-    const ctrl = new AbortController();
-    const timer = setTimeout(() => ctrl.abort(), opts.devPingTimeoutMs);
-    const r = await fetch(pingUrl, {
-      mode: 'cors',
-      cache: 'no-store',
-      signal: ctrl.signal
-    });
-    clearTimeout(timer);
-    if (!r.ok) {
-      return {}
+    if (!opts.isDev) {
+        return {};
+    }
+    const origin = opts.webPluginDevOrigin === undefined || opts.webPluginDevOrigin === null
+        ? ''
+        : String(opts.webPluginDevOrigin).trim();
+    if (!origin) {
+        return {};
+    }
+    if (!isScriptHostAllowed(`${origin}/`, hostSet)) {
+        return {};
+    }
+    const idsRaw = opts.webPluginDevIds;
+    const ids = idsRaw !== undefined && idsRaw !== null && String(idsRaw).trim() !== ''
+        ? String(idsRaw)
+            .split(',')
+            .map((s) => s.trim())
+            .filter(Boolean)
+        : [...opts.defaultImplicitDevPluginIds];
+    if (ids.length === 0) {
+        return {};
+    }
+    const base = origin.replace(/\/$/, '');
+    const pingUrl = `${base}${opts.devPingPath}`;
+    try {
+        const ctrl = new AbortController();
+        const timer = setTimeout(() => ctrl.abort(), opts.devPingTimeoutMs);
+        const r = await fetch(pingUrl, {
+            mode: 'cors',
+            cache: 'no-store',
+            signal: ctrl.signal
+        });
+        clearTimeout(timer);
+        if (!r.ok) {
+            return {};
+        }
+        const body = (await r.text()).trim();
+        if (body !== 'ok') {
+            return {};
+        }
+    }
+    catch {
+        return {};
     }
-    const body = (await r.text()).trim();
-    if (body !== 'ok') {
-      return {}
+    const pathPart = opts.webPluginDevEntryPath;
+    const map = {};
+    for (const id of ids) {
+        map[id] = `${base}${pathPart}`;
     }
-  } catch {
-    return {}
-  }
-
-  const pathPart = opts.webPluginDevEntryPath;
-  const map = {};
-  for (const id of ids) {
-    map[id] = `${base}${pathPart}`;
-  }
-  if (ids.length) {
-    console.info(
-      '[plugins] 已检测到插件 dev 服务（',
-      base,
-      '），下列 id 将加载隐式 dev 入口（',
-      pathPart,
-      '）而非清单 dist：',
-      ids.join(', ')
-    );
-  }
-  return map
+    if (ids.length) {
+        console.info('[wep] plugin dev server', base, '→ implicit entries', pathPart, ids.join(', '));
+    }
+    return map;
 }
 
 /**
  * 开发模式下插件热更新 SSE（按 dev 映射中的 origin 连接）。
- * @module runtime/dev-reload-sse
  */
-
-/** @type {Map<string, EventSource>} */
 const pluginDevEventSources = new Map();
-
 let pluginDevBeforeUnloadRegistered = false;
-
 function closeAllPluginDevEventSources() {
-  for (const es of pluginDevEventSources.values()) {
-    try {
-      es.close();
-    } catch (_) {}
-  }
-  pluginDevEventSources.clear();
+    for (const es of pluginDevEventSources.values()) {
+        try {
+            es.close();
+        }
+        catch {
+            /* ignore */
+        }
+    }
+    pluginDevEventSources.clear();
 }
-
 function ensurePluginDevBeforeUnload() {
-  if (pluginDevBeforeUnloadRegistered || typeof window === 'undefined') {
-    return
-  }
-  pluginDevBeforeUnloadRegistered = true;
-  window.addEventListener('beforeunload', closeAllPluginDevEventSources);
+    if (pluginDevBeforeUnloadRegistered || typeof window === 'undefined') {
+        return;
+    }
+    pluginDevBeforeUnloadRegistered = true;
+    window.addEventListener('beforeunload', closeAllPluginDevEventSources);
 }
-
-/**
- * @param {string} origin
- * @param {Set<string>} hostSet
- */
 function isDevOriginAllowedForSse(origin, hostSet) {
-  try {
-    const u = new URL(origin);
-    return hostSet.has(normalizeHost(u.hostname))
-  } catch {
-    return false
-  }
+    try {
+        const u = new URL(origin);
+        return hostSet.has(normalizeHost(u.hostname));
+    }
+    catch {
+        return false;
+    }
 }
-
-/**
- * @param {string} origin
- * @param {boolean} isDev
- * @param {Set<string>} hostSet
- * @param {string} ssePath
- */
 function startPluginDevReloadSse(origin, isDev, hostSet, ssePath) {
-  if (!isDev || pluginDevEventSources.has(origin)) {
-    return
-  }
-  if (!isDevOriginAllowedForSse(origin, hostSet)) {
-    return
-  }
-  ensurePluginDevBeforeUnload();
-  const base = origin.replace(/\/$/, '');
-  const url = `${base}${ssePath}`;
-  try {
-    const es = new EventSource(url);
-    pluginDevEventSources.set(origin, es);
-    es.addEventListener('reload', () => {
-      window.location.reload();
-    });
-    es.onopen = () => {
-      console.info('[plugins] plugin dev reload SSE:', url);
-    };
-  } catch (e) {
-    console.warn('[plugins] EventSource failed', url, e);
-  }
+    if (!isDev || pluginDevEventSources.has(origin)) {
+        return;
+    }
+    if (!isDevOriginAllowedForSse(origin, hostSet)) {
+        return;
+    }
+    ensurePluginDevBeforeUnload();
+    const base = origin.replace(/\/$/, '');
+    const url = `${base}${ssePath}`;
+    try {
+        const es = new EventSource(url);
+        pluginDevEventSources.set(origin, es);
+        es.addEventListener('reload', () => {
+            window.location.reload();
+        });
+        es.onopen = () => {
+            console.info('[wep] dev reload SSE', url);
+        };
+    }
+    catch (e) {
+        console.warn('[wep] EventSource failed', url, e);
+    }
 }
-
-/**
- * @param {Record<string, string>|null|undefined} devMap
- * @param {boolean} isDev
- * @param {Set<string>} hostSet
- * @param {string} ssePath
- */
 function startPluginDevSseForMap(devMap, isDev, hostSet, ssePath) {
-  if (!isDev || !devMap || typeof window === 'undefined') {
-    return
-  }
-  const origins = new Set();
-  for (const entry of Object.values(devMap)) {
-    if (typeof entry !== 'string') {
-      continue
+    if (!isDev || !devMap || typeof window === 'undefined') {
+        return;
     }
-    const t = entry.trim();
-    if (!t) {
-      continue
+    const origins = new Set();
+    for (const entry of Object.values(devMap)) {
+        if (typeof entry !== 'string') {
+            continue;
+        }
+        const t = entry.trim();
+        if (!t) {
+            continue;
+        }
+        try {
+            origins.add(new URL(t, window.location.href).origin);
+        }
+        catch {
+            /* skip */
+        }
     }
-    try {
-      origins.add(new URL(t, window.location.href).origin);
-    } catch {
-      /* skip */
+    for (const o of origins) {
+        startPluginDevReloadSse(o, isDev, hostSet, ssePath);
     }
-  }
-  for (const o of origins) {
-    startPluginDevReloadSse(o, isDev, hostSet, ssePath);
-  }
 }
 
 /**
  * 动态加载脚本（去重与并发合并）。
- * @module runtime/load-script
  */
-
 const loadScriptMemo = new Map();
+function loadScript(src) {
+    if (typeof document === 'undefined') {
+        return Promise.reject(new Error('loadScript: no document'));
+    }
+    if (loadScriptMemo.has(src)) {
+        return loadScriptMemo.get(src);
+    }
+    const p = new Promise((resolve, reject) => {
+        const scripts = document.getElementsByTagName('script');
+        for (let i = 0; i < scripts.length; i++) {
+            const el = scripts[i];
+            if (el.src === src) {
+                if (el.getAttribute('data-wep-loaded') === 'true') {
+                    resolve();
+                    return;
+                }
+                el.addEventListener('load', () => {
+                    el.setAttribute('data-wep-loaded', 'true');
+                    resolve();
+                }, { once: true });
+                el.addEventListener('error', () => reject(new Error('loadScript failed: ' + src)), { once: true });
+                return;
+            }
+        }
+        const s = document.createElement('script');
+        s.async = true;
+        s.src = src;
+        s.onload = () => {
+            s.setAttribute('data-wep-loaded', 'true');
+            resolve();
+        };
+        s.onerror = () => reject(new Error('loadScript failed: ' + src));
+        document.head.appendChild(s);
+    });
+    loadScriptMemo.set(src, p);
+    p.catch(() => loadScriptMemo.delete(src));
+    return p;
+}
+
+let _printed = false;
+/** 在首次引导插件时打印一行运行时标识（非大块 ASCII art）。 */
+function printRuntimeBannerOnce() {
+    if (_printed) {
+        return;
+    }
+    _printed = true;
+    if (typeof console !== 'undefined' && typeof console.info === 'function') {
+        console.info(`[wep] ${RUNTIME_CONSOLE_LABEL} · host API ${HOST_PLUGIN_API_VERSION}`);
+    }
+}
 
 /**
- * @param {string} src
- * @returns {Promise<void>}
+ * 浏览器 fetch 静态 JSON 清单（与 defaultFetchWebPluginManifest 相同解包规则）。
  */
-function loadScript(src) {
-  if (typeof document === 'undefined') {
-    return Promise.reject(new Error('loadScript: no document'))
-  }
-  if (loadScriptMemo.has(src)) {
-    return loadScriptMemo.get(src)
-  }
-  const p = new Promise((resolve, reject) => {
-    const scripts = document.getElementsByTagName('script');
-    for (let i = 0; i < scripts.length; i++) {
-      const el = scripts[i];
-      if (el.src === src) {
-        if (el.getAttribute('data-wep-loaded') === 'true') {
-          resolve();
-          return
+async function fetchStaticManifestViaHttp(ctx) {
+    const { manifestUrl, credentials } = ctx;
+    try {
+        const creds = credentials === 'omit' ? 'omit' : 'same-origin';
+        const res = await fetch(manifestUrl, {
+            method: 'GET',
+            credentials: creds,
+            cache: 'no-store'
+        });
+        if (!res.ok) {
+            return {
+                ok: false,
+                status: res.status,
+                error: new Error('[wep] static manifest HTTP ' + res.status),
+                data: null
+            };
         }
-        el.addEventListener(
-          'load',
-          () => {
-            el.setAttribute('data-wep-loaded', 'true');
-            resolve();
-          },
-          { once: true }
-        );
-        el.addEventListener('error', () => reject(new Error('loadScript failed: ' + src)), { once: true });
-        return
-      }
+        const body = await res.json();
+        const data = unwrapNestedManifestBody(body);
+        if (!data || typeof data !== 'object') {
+            return {
+                ok: false,
+                error: new Error('[wep] invalid static manifest JSON'),
+                data: null
+            };
+        }
+        return { ok: true, data };
+    }
+    catch (e) {
+        return { ok: false, error: e, data: null };
     }
-    const s = document.createElement('script');
-    s.async = true;
-    s.src = src;
-    s.onload = () => {
-      s.setAttribute('data-wep-loaded', 'true');
-      resolve();
-    };
-    s.onerror = () => reject(new Error('loadScript failed: ' + src));
-    document.head.appendChild(s);
-  });
-  loadScriptMemo.set(src, p);
-  p.catch(() => loadScriptMemo.delete(src));
-  return p
 }
 
 /**
- * 拉取清单、合并 dev 映射、加载入口并执行 activator。
- * @module runtime/bootstrap-plugins
+ * 开箱：在未手工配置时，注册 `/plugin` + 宿主 Layout 的命名父路由，供 `router.addRoute(parentName, child)` 挂载插件页。
  */
+function routeNameExists(router, name) {
+    if (!name) {
+        return false;
+    }
+    if (typeof router.getRoutes === 'function') {
+        return router.getRoutes().some((r) => r.name === name);
+    }
+    return walkRouteNames(router.options && router.options.routes, name);
+}
+function walkRouteNames(routes, name) {
+    if (!Array.isArray(routes)) {
+        return false;
+    }
+    for (const r of routes) {
+        if (r && typeof r === 'object' && r.name === name) {
+            return true;
+        }
+        const ch = r && typeof r === 'object' ? r.children : null;
+        if (walkRouteNames(ch, name)) {
+            return true;
+        }
+    }
+    return false;
+}
+function ensurePluginHostRoute$1(router, opts) {
+    if (opts.ensurePluginHostRoute === false) {
+        return;
+    }
+    if (!router || typeof router.addRoute !== 'function') {
+        return;
+    }
+    const parentName = String(opts.pluginRoutesParentName || '').trim();
+    if (!parentName) {
+        return;
+    }
+    if (routeNameExists(router, parentName)) {
+        return;
+    }
+    const Layout = opts.hostLayoutComponent;
+    if (!Layout) {
+        console.warn('[wep] 缺少 hostLayoutComponent，未自动注册插件壳路由；请传入宿主 Layout，或在路由表中自行配置与 pluginRoutesParentName 一致的父路由');
+        return;
+    }
+    const mountDefault = defaultWebExtendPluginRuntime.pluginMountPath;
+    let pathRaw = String(opts.pluginMountPath || mountDefault).trim().replace(/\/$/, '') || mountDefault;
+    if (!pathRaw.startsWith('/')) {
+        pathRaw = `/${pathRaw}`;
+    }
+    const meta = opts.pluginHostRouteMeta && typeof opts.pluginHostRouteMeta === 'object'
+        ? { ...opts.pluginHostRouteMeta }
+        : { requiresConfig: true, hidden: true };
+    router.addRoute({
+        path: pathRaw,
+        name: parentName,
+        component: Layout,
+        redirect: 'noredirect',
+        meta,
+        children: []
+    });
+}
 
 /**
- * @param {import('./resolve-runtime-options.js').WebExtendPluginRuntimeOptions|object} opts
+ * 宿主通过 `resolveRuntimeOptions({ hostContext })` 注入的只读上下文，
+ * 经浅拷贝 + 浅冻结后挂到 `hostApi.hostContext`，供插件访问 store/i18n 等而不污染 HostApi 顶层命名。
  */
-function shouldShowBootstrapSummary(opts) {
-  if (opts.bootstrapSummary === true) {
-    return true
-  }
-  if (opts.bootstrapSummary === false) {
-    return false
-  }
-  const env = resolveBundledEnv('VITE_PLUGINS_BOOTSTRAP_SUMMARY', '');
-  if (env === '0' || env === 'false') {
-    return false
-  }
-  if (env === '1' || env === 'true') {
-    return true
-  }
-  return resolveBundledIsDev()
+function freezeShallowHostContext(input) {
+    if (input == null || typeof input !== 'object' || Array.isArray(input)) {
+        return Object.freeze({});
+    }
+    return Object.freeze({ ...input });
 }
 
 /**
- * @param {{ id: string }} p
- * @param {string} [entryUrl]
- * @param {Record<string, string>|null|undefined} devMap
- * @param {Set<string>} hostSet
+ * 将静态清单配置路径解析为用于 fetch 的绝对 URL（浏览器）。
  */
-async function loadPluginEntry(p, entryUrl, devMap, hostSet) {
-  const devEntry = devMap && typeof devMap[p.id] === 'string' ? devMap[p.id].trim() : '';
-  if (devEntry) {
-    if (!isScriptHostAllowed(devEntry, hostSet)) {
-      console.warn('[plugins] dev entry URL not allowed', p.id, devEntry);
-      return
+function resolveStaticManifestUrlForFetch(url, origin) {
+    const u = String(url || '').trim();
+    if (!u) {
+        return '';
+    }
+    if (/^https?:\/\//i.test(u)) {
+        return u;
+    }
+    const o = String(origin || '').trim();
+    if (!o) {
+        return u.startsWith('/') ? u : `/${u}`;
     }
     try {
-      await import(
-        /* webpackIgnore: true */
-        /* @vite-ignore */
-        devEntry
-      );
-    } catch (e) {
-      console.warn('[plugins] dev module import failed, try manifest entryUrl', p.id, e);
-      if (entryUrl && isScriptHostAllowed(entryUrl, hostSet)) {
-        await loadScript(entryUrl);
-      }
-      return
+        const pathPart = u.startsWith('/') ? u : `/${u}`;
+        return new URL(pathPart, o).href;
+    }
+    catch {
+        return u;
     }
-    return
-  }
-  if (!entryUrl || !isScriptHostAllowed(entryUrl, hostSet)) {
-    console.warn('[plugins] skip (entryUrl not allowed)', p.id, entryUrl);
-    return
-  }
-  await loadScript(entryUrl);
 }
 
 /**
- * @param {import('vue-router').default} router
- * @param {(pluginId: string, router: import('vue-router').default, hostKit?: { bridgeAllowedPathPrefixes: string[] }) => object} createHostApiFactory
- * @param {import('./resolve-runtime-options.js').WebExtendPluginRuntimeOptions} [runtimeOptions]
+ * 拉取插件清单、加载入口脚本并调用各插件 `activator`。
  */
-async function bootstrapPlugins$1(router, createHostApiFactory, runtimeOptions) {
-  if (typeof window === 'undefined') {
-    console.warn('[plugins] bootstrapPlugins skipped: requires browser (window)');
-    return
-  }
-  const opts = resolveRuntimeOptions$1(runtimeOptions || {});
-  const base = String(opts.manifestBase).replace(/\/$/, '');
-  const manifestUrl = `${base}${opts.manifestListPath}`;
-  const hostSet = buildAllowedScriptHostsSet(opts.allowedScriptHosts);
-  const explicit = parseWebPluginDevMapExplicit(opts);
-
-  const manifestCtx = {
-    manifestUrl,
-    credentials: opts.manifestFetchCredentials
-  };
-  const [manifestResult, implicit] = await Promise.all([
-    (async () => {
-      try {
-        if (typeof opts.fetchManifest === 'function') {
-          return await opts.fetchManifest(manifestCtx)
+function shouldShowBootstrapSummary(opts) {
+    if (opts.bootstrapSummary === true) {
+        return true;
+    }
+    if (opts.bootstrapSummary === false) {
+        return false;
+    }
+    const env = resolveBundledEnv(webExtendPluginEnvKeys.pluginsBootstrapSummary, '');
+    if (env === '0' || env === 'false') {
+        return false;
+    }
+    if (env === '1' || env === 'true') {
+        return true;
+    }
+    return resolveBundledIsDev();
+}
+async function loadPluginEntry(p, entryUrl, devMap, hostSet) {
+    const devEntry = devMap && typeof devMap[p.id] === 'string' ? devMap[p.id].trim() : '';
+    if (devEntry) {
+        if (!isScriptHostAllowed(devEntry, hostSet)) {
+            console.warn('[wep] dev entry URL not allowed', p.id, devEntry);
+            return;
+        }
+        try {
+            await import(
+            /* webpackIgnore: true */
+            /* @vite-ignore */
+            devEntry);
         }
-        return await defaultFetchWebPluginManifest$1(manifestCtx)
-      } catch (e) {
-        return { ok: false, error: e, data: null }
-      }
-    })(),
-    buildImplicitWebPluginDevMap(opts, hostSet)
-  ]);
-
-  const devMap = mergeDevMaps(implicit, explicit);
-  startPluginDevSseForMap(devMap, opts.isDev, hostSet, opts.devReloadSsePath);
-
-  const hostKit = { bridgeAllowedPathPrefixes: opts.bridgeAllowedPathPrefixes };
-
-  if (!manifestResult.ok) {
-    if (manifestResult.error) {
-      console.warn('[plugins] fetch manifest failed', manifestResult.error);
-    } else {
-      console.warn('[plugins] manifest HTTP', manifestResult.status, manifestUrl);
+        catch (e) {
+            console.warn('[wep] dev import failed, trying manifest entryUrl', p.id, e);
+            if (entryUrl && isScriptHostAllowed(entryUrl, hostSet)) {
+                await loadScript(entryUrl);
+            }
+            return;
+        }
+        return;
     }
-    if (shouldShowBootstrapSummary(opts)) {
-      console.info('[plugins] bootstrap_summary', { ok: false, reason: 'manifest_fetch' });
+    if (!entryUrl || !isScriptHostAllowed(entryUrl, hostSet)) {
+        console.warn('[wep] skip (entryUrl not allowed)', p.id, entryUrl);
+        return;
     }
-    return
-  }
-  /** @type {{ hostPluginApiVersion?: string, plugins?: object[] }} */
-  const data = manifestResult.data;
-  if (!data) {
-    if (shouldShowBootstrapSummary(opts)) {
-      console.info('[plugins] bootstrap_summary', { ok: false, reason: 'manifest_empty_body' });
+    await loadScript(entryUrl);
+}
+async function bootstrapPlugins$1(
+// eslint-disable-next-line @typescript-eslint/no-explicit-any
+router, 
+// eslint-disable-next-line @typescript-eslint/no-explicit-any
+createHostApiFactory, runtimeOptions) {
+    if (typeof window === 'undefined') {
+        console.warn('[wep] bootstrapPlugins skipped (no window)');
+        return;
     }
-    return
-  }
-
-  const apiVer = data.hostPluginApiVersion;
-  if (apiVer) {
-    const coerced = semver.coerce(apiVer);
-    const maj = coerced ? coerced.major : 0;
-    const range = `^${maj}.0.0`;
-    if (!semver.satisfies(HOST_PLUGIN_API_VERSION, range, { includePrerelease: true })) {
-      console.warn(
-        '[plugins] host API version mismatch: host implements',
-        HOST_PLUGIN_API_VERSION,
-        'server declares',
-        apiVer
-      );
+    printRuntimeBannerOnce();
+    const opts = resolveRuntimeOptions$1(runtimeOptions || {});
+    setRevokePluginMenuItems(typeof opts.revokePluginMenuItems === 'function' ? opts.revokePluginMenuItems : undefined);
+    ensurePluginHostRoute$1(router, opts);
+    const base = String(opts.manifestBase).replace(/\/$/, '');
+    const isStatic = opts.manifestMode === 'static';
+    let manifestUrl;
+    if (isStatic) {
+        const raw = String(opts.staticManifestUrl || '').trim();
+        if (!raw) {
+            console.warn('[wep] manifestMode=static requires non-empty staticManifestUrl (or env VITE_WEB_PLUGIN_STATIC_MANIFEST_URL)');
+            if (shouldShowBootstrapSummary(opts)) {
+                console.info('[wep] bootstrap_summary', { ok: false, reason: 'static_manifest_url_missing' });
+            }
+            return;
+        }
+        manifestUrl = resolveStaticManifestUrlForFetch(raw, window.location.origin);
     }
-  }
-
-  window.__PLUGIN_ACTIVATORS__ = window.__PLUGIN_ACTIVATORS__ || {};
-
-  const plugins = data.plugins || [];
-  if (plugins.length === 0) {
-    console.info(
-      '[plugins] 清单为空。请检查：① 后端清单服务（plugin-web-starter）是否已接入；② web-plugin.web-plugins-dir 是否指向含各插件子目录及 manifest.json 的路径；③ 浏览器直接访问',
-      manifestUrl,
-      '是否返回 plugins 条目。'
-    );
-  }
-
-  const summary = {
-    manifestCount: plugins.length,
-    activated: 0,
-    skipEngines: 0,
-    skipLoad: 0,
-    skipNoActivator: 0,
-    activateFail: 0
-  };
-
-  for (const p of plugins) {
-    const range = p.engines && p.engines.host;
-    if (range && !semver.satisfies(HOST_PLUGIN_API_VERSION, range, { includePrerelease: true })) {
-      console.warn('[plugins] skip (engines.host)', p.id, range);
-      summary.skipEngines++;
-      continue
+    else {
+        manifestUrl = `${base}${opts.manifestListPath}`;
     }
-    const entryUrl = p.entryUrl;
-    try {
-      await loadPluginEntry(p, entryUrl, devMap, hostSet);
-    } catch (e) {
-      console.warn('[plugins] script load failed', p.id, e);
-      summary.skipLoad++;
-      continue
+    const hostSet = buildAllowedScriptHostsSet(opts.allowedScriptHosts);
+    const explicit = parseWebPluginDevMapExplicit(opts);
+    const manifestCtx = {
+        manifestUrl,
+        credentials: opts.manifestFetchCredentials
+    };
+    const [primaryResult, implicit] = await Promise.all([
+        (async () => {
+            try {
+                if (typeof opts.fetchManifest === 'function') {
+                    return await opts.fetchManifest(manifestCtx);
+                }
+                return await defaultFetchWebPluginManifest$1(manifestCtx);
+            }
+            catch (e) {
+                return { ok: false, error: e, data: null };
+            }
+        })(),
+        buildImplicitWebPluginDevMap(opts, hostSet)
+    ]);
+    let manifestResult = primaryResult;
+    let manifestUrlUsed = manifestUrl;
+    if (!isStatic && opts.devManifestFallback && opts.isDev) {
+        const dataObj = primaryResult.ok && primaryResult.data && typeof primaryResult.data === 'object'
+            ? primaryResult.data
+            : null;
+        const plen = dataObj && Array.isArray(dataObj.plugins) ? dataObj.plugins.length : 0;
+        const needFallback = !primaryResult.ok || plen === 0;
+        const fallbackRaw = String(opts.devFallbackStaticManifestUrl || '').trim();
+        if (needFallback && fallbackRaw) {
+            const fallbackUrl = resolveStaticManifestUrlForFetch(fallbackRaw, window.location.origin);
+            const fallbackCtx = {
+                manifestUrl: fallbackUrl,
+                credentials: opts.manifestFetchCredentials
+            };
+            const fr = await fetchStaticManifestViaHttp(fallbackCtx);
+            const fdata = fr.ok && fr.data && typeof fr.data === 'object' ? fr.data : null;
+            const flen = fdata && Array.isArray(fdata.plugins) ? fdata.plugins.length : 0;
+            if (fr.ok && flen > 0) {
+                manifestResult = fr;
+                manifestUrlUsed = fallbackUrl;
+                console.info('[wep] dev manifest fallback', { url: fallbackUrl, plugins: flen });
+            }
+        }
     }
-    const activator = window.__PLUGIN_ACTIVATORS__[p.id];
-    if (typeof activator !== 'function') {
-      console.warn('[plugins] no activator for', p.id);
-      summary.skipNoActivator++;
-      continue
+    const devMap = mergeDevMaps(implicit, explicit);
+    startPluginDevSseForMap(devMap, opts.isDev, hostSet, opts.devReloadSsePath);
+    const frozenHostContext = freezeShallowHostContext(opts.hostContext !== undefined ? opts.hostContext : undefined);
+    const hostKit = {
+        hostContext: frozenHostContext,
+        bridgeAllowedPathPrefixes: opts.bridgeAllowedPathPrefixes,
+        ...(opts.pluginRoutesParentName ? { pluginRoutesParentName: opts.pluginRoutesParentName } : {}),
+        ...(typeof opts.transformRoutes === 'function' ? { transformRoutes: opts.transformRoutes } : {}),
+        ...(typeof opts.interceptRegisterRoutes === 'function'
+            ? { interceptRegisterRoutes: opts.interceptRegisterRoutes }
+            : {}),
+        ...(typeof opts.adaptRouteDeclarations === 'function'
+            ? { adaptRouteDeclarations: opts.adaptRouteDeclarations }
+            : {}),
+        ...(typeof opts.applyPluginMenuItems === 'function'
+            ? { applyPluginMenuItems: opts.applyPluginMenuItems }
+            : {}),
+        ...(typeof opts.revokePluginMenuItems === 'function'
+            ? { revokePluginMenuItems: opts.revokePluginMenuItems }
+            : {})
+    };
+    if (!manifestResult.ok) {
+        if (manifestResult.error) {
+            console.warn('[wep] fetch manifest failed', manifestResult.error);
+        }
+        else {
+            const label = isStatic ? 'static manifest' : 'manifest HTTP';
+            console.warn(`[wep] ${label}`, manifestResult.status, manifestUrlUsed);
+        }
+        if (shouldShowBootstrapSummary(opts)) {
+            console.info('[wep] bootstrap_summary', { ok: false, reason: 'manifest_fetch' });
+        }
+        return;
     }
-    const hostApi = createHostApiFactory(p.id, router, hostKit);
-    try {
-      activator(hostApi);
-      summary.activated++;
-    } catch (e) {
-      console.error('[plugins] activate failed', p.id, e);
-      summary.activateFail++;
+    const data = manifestResult.data;
+    if (!data) {
+        if (shouldShowBootstrapSummary(opts)) {
+            console.info('[wep] bootstrap_summary', { ok: false, reason: 'manifest_empty_body' });
+        }
+        return;
+    }
+    const apiVer = data.hostPluginApiVersion;
+    if (apiVer) {
+        const coerced = semver.coerce(apiVer);
+        const maj = coerced ? coerced.major : 0;
+        const range = `^${maj}.0.0`;
+        if (!semver.satisfies(HOST_PLUGIN_API_VERSION, range, { includePrerelease: true })) {
+            console.warn('[wep] host API version mismatch', {
+                host: HOST_PLUGIN_API_VERSION,
+                manifest: apiVer
+            });
+        }
+    }
+    window.__PLUGIN_ACTIVATORS__ = window.__PLUGIN_ACTIVATORS__ || {};
+    const plugins = data.plugins || [];
+    if (plugins.length === 0) {
+        const hint = isStatic ? 'check static JSON file and plugins[]' : 'check backend and URL';
+        console.info('[wep] empty plugin manifest — ' + hint, manifestUrlUsed);
+    }
+    const summary = {
+        manifestCount: plugins.length,
+        activated: 0,
+        skipEngines: 0,
+        skipLoad: 0,
+        skipNoActivator: 0,
+        activateFail: 0
+    };
+    for (const p of plugins) {
+        const range = p.engines && p.engines.host;
+        if (range && !semver.satisfies(HOST_PLUGIN_API_VERSION, range, { includePrerelease: true })) {
+            console.warn('[wep] skip plugin (engines.host)', p.id, range);
+            summary.skipEngines++;
+            continue;
+        }
+        const entryUrl = p.entryUrl;
+        try {
+            await loadPluginEntry(p, entryUrl, devMap, hostSet);
+        }
+        catch (e) {
+            console.warn('[wep] script load failed', p.id, e);
+            summary.skipLoad++;
+            continue;
+        }
+        const activator = window.__PLUGIN_ACTIVATORS__[p.id];
+        if (typeof activator !== 'function') {
+            console.warn('[wep] no activator for', p.id);
+            summary.skipNoActivator++;
+            continue;
+        }
+        const pluginRecord = Object.freeze({ ...p });
+        try {
+            if (typeof opts.onBeforePluginActivate === 'function') {
+                await Promise.resolve(opts.onBeforePluginActivate({
+                    pluginId: p.id,
+                    router,
+                    pluginRecord
+                }));
+            }
+        }
+        catch (e) {
+            console.warn('[wep] activate skipped (onBeforePluginActivate)', p.id, e);
+            summary.activateFail++;
+            continue;
+        }
+        const hostApi = createHostApiFactory(p.id, router, hostKit);
+        try {
+            await Promise.resolve(activator(hostApi, { pluginRecord }));
+            summary.activated++;
+            if (typeof opts.onAfterPluginActivate === 'function') {
+                await Promise.resolve(opts.onAfterPluginActivate({
+                    pluginId: p.id,
+                    router,
+                    pluginRecord,
+                    hostApi
+                }));
+            }
+        }
+        catch (e) {
+            console.error('[wep] activate failed', p.id, e);
+            summary.activateFail++;
+            if (typeof opts.onPluginActivateError === 'function') {
+                try {
+                    await Promise.resolve(opts.onPluginActivateError({
+                        pluginId: p.id,
+                        error: e,
+                        pluginRecord,
+                        hostApi
+                    }));
+                }
+                catch (hookErr) {
+                    console.warn('[wep] onPluginActivateError hook failed', p.id, hookErr);
+                }
+            }
+        }
+    }
+    if (shouldShowBootstrapSummary(opts)) {
+        console.info('[wep] bootstrap_summary', { ok: true, ...summary });
     }
-  }
-
-  if (shouldShowBootstrapSummary(opts)) {
-    console.info('[plugins] bootstrap_summary', { ok: true, ...summary });
-  }
 }
 
 /**
- * 宿主侧插件引导：拉取清单、dev 映射、加载入口脚本、调用 activator。
- * 实现已拆至 `src/runtime/` 下各模块；本文件保留模块说明与对外类型约定，并 re-export 稳定 API。
- *
- * **Webpack 宿主**：用 `DefinePlugin` 注入 `process.env.VITE_*` 或 **`PLUGIN_*`**（等价键），或 `resolveRuntimeOptions` 显式传参。
- * **Vite 宿主**：入口调用 `setWebExtendPluginEnv(import.meta.env)`，或 `installWebExtendPluginVue2(..., { env: import.meta.env })`。
- *
- * @module PluginRuntime
+ * 运行时引导相关 API 的聚合导出。
  */
 
 var pluginRuntime = /*#__PURE__*/Object.freeze({
-  __proto__: null,
-  bootstrapPlugins: bootstrapPlugins$1,
-  defaultFetchWebPluginManifest: defaultFetchWebPluginManifest$1,
-  resolveRuntimeOptions: resolveRuntimeOptions$1
+    __proto__: null,
+    bootstrapPlugins: bootstrapPlugins$1,
+    defaultFetchWebPluginManifest: defaultFetchWebPluginManifest$1,
+    ensurePluginHostRoute: ensurePluginHostRoute$1,
+    resolveRuntimeOptions: resolveRuntimeOptions$1
 });
 
 /**
  * 清单拉取函数的组合工具：缓存、埋点等以**中间件**形式扩展，不侵入 `bootstrapPlugins` 核心逻辑，
- * 符合第三方依赖「可组合、可替换」约定。契约与 `PluginRuntime` 中 `fetchManifest` 一致。
- *
- * @module runtime/manifest-fetch-composer
- */
-
-/**
- * @typedef {object} FetchWebPluginManifestContext
- * @property {string} manifestUrl
- * @property {RequestCredentials} credentials
- */
-
-/**
- * @typedef {object} FetchWebPluginManifestResult
- * @property {boolean} ok
- * @property {number} [status]
- * @property {{ hostPluginApiVersion?: string, plugins?: object[] }|null} [data]
- * @property {unknown} [error]
- */
-
-/**
- * @callback FetchWebPluginManifestFn
- * @param {FetchWebPluginManifestContext} ctx
- * @returns {Promise<FetchWebPluginManifestResult>}
- */
-
-/**
- * 将内层 `fetchManifest` 包装为带缓存的版本。等价于
- * `composeManifestFetch(inner, manifestFetchCacheMiddleware(options))`。
- *
- * @param {FetchWebPluginManifestFn} inner 内层实现（如预设生成的 `fetchManifest` 或 `defaultFetchWebPluginManifest`）
- * @param {ManifestFetchCacheOptions} [options]
- * @returns {FetchWebPluginManifestFn}
+ * 可组合的 `fetchManifest` 包装；入参/出参与 `resolveRuntimeOptions({ fetchManifest })` 一致。
  */
 function wrapManifestFetchWithCache$1(inner, options = {}) {
-  return composeManifestFetch$1(inner, manifestFetchCacheMiddleware$1(options))
+    return composeManifestFetch$1(inner, manifestFetchCacheMiddleware$1(options));
 }
-
-/**
- * @typedef {object} ManifestFetchCacheOptions
- * @property {number} [ttlMs] 缓存时长（毫秒）。`<= 0` 或未传时**不缓存**（直接透传 `inner`）。
- * @property {'memory'|'session'|'local'} [storage='memory'] `session`/`local` 依赖 `JSON.stringify`，仅适合可序列化的 `data`。
- * @property {string} [storageKeyPrefix='wep.manifestFetch.v1'] Web Storage 键前缀（仅 storage 非 memory 时生效）。
- * @property {(ctx: FetchWebPluginManifestContext) => string} [cacheKey] 默认 `manifestUrl + '\0' + credentials`。
- * @property {(result: FetchWebPluginManifestResult) => boolean} [shouldCache] 默认：`ok === true` 且 `data` 非空。
- * @property {number} [maxEntries=50] 仅 `memory`：超过条数时淘汰最久未读条目。
- * @property {() => number} [now] 测试注入时间戳。
- */
-
-/**
- * 清单拉取**中间件工厂**：`next` 为内层 `fetchManifest`。
- *
- * @param {ManifestFetchCacheOptions} options
- * @returns {(next: FetchWebPluginManifestFn) => FetchWebPluginManifestFn}
- */
 function manifestFetchCacheMiddleware$1(options = {}) {
-  const ttlMs = typeof options.ttlMs === 'number' && Number.isFinite(options.ttlMs) ? options.ttlMs : 0;
-  if (ttlMs <= 0) {
-    return (next) => next
-  }
-
-  const storage = options.storage || 'memory';
-  const prefix = options.storageKeyPrefix || 'wep.manifestFetch.v1';
-  const maxEntries = typeof options.maxEntries === 'number' && options.maxEntries > 0 ? options.maxEntries : 50;
-  const getNow = typeof options.now === 'function' ? options.now : () => Date.now();
-  const cacheKeyFn =
-    typeof options.cacheKey === 'function'
-      ? options.cacheKey
-      : (ctx) => `${String(ctx.manifestUrl)}\0${String(ctx.credentials)}`;
-
-  const shouldCache =
-    typeof options.shouldCache === 'function'
-      ? options.shouldCache
-      : (r) => !!(r && r.ok === true && r.data != null);
-
-  /** @type {Map<string, { expiresAt: number, result: FetchWebPluginManifestResult, lastRead: number }>} */
-  const memory = new Map();
-
-  function cloneResult(r) {
-    try {
-      if (typeof structuredClone === 'function') {
-        return structuredClone(r)
-      }
-    } catch (_) {}
-    try {
-      return JSON.parse(JSON.stringify(r))
-    } catch (_) {
-      return { ...r, data: r.data }
-    }
-  }
-
-  function touchMemory(key) {
-    const e = memory.get(key);
-    if (e) {
-      e.lastRead = getNow();
-    }
-  }
-
-  function pruneMemory() {
-    if (memory.size <= maxEntries) {
-      return
+    const ttlMs = typeof options.ttlMs === 'number' && Number.isFinite(options.ttlMs) ? options.ttlMs : 0;
+    if (ttlMs <= 0) {
+        return (next) => next;
     }
-    const entries = [...memory.entries()].sort((a, b) => a[1].lastRead - b[1].lastRead);
-    const drop = memory.size - maxEntries;
-    for (let i = 0; i < drop; i++) {
-      memory.delete(entries[i][0]);
+    const storage = options.storage || 'memory';
+    const prefix = options.storageKeyPrefix || defaultManifestFetchCache.storageKeyPrefix;
+    const maxEntries = typeof options.maxEntries === 'number' && options.maxEntries > 0
+        ? options.maxEntries
+        : defaultManifestFetchCache.maxEntries;
+    const getNow = typeof options.now === 'function' ? options.now : () => Date.now();
+    const cacheKeyFn = typeof options.cacheKey === 'function'
+        ? options.cacheKey
+        : (ctx) => `${String(ctx.manifestUrl)}\0${String(ctx.credentials)}`;
+    const shouldCache = typeof options.shouldCache === 'function'
+        ? options.shouldCache
+        : (r) => !!(r && r.ok === true && r.data != null);
+    const memory = new Map();
+    function cloneResult(r) {
+        try {
+            if (typeof structuredClone === 'function') {
+                return structuredClone(r);
+            }
+        }
+        catch {
+            /* ignore */
+        }
+        try {
+            return JSON.parse(JSON.stringify(r));
+        }
+        catch {
+            return { ...r, data: r.data };
+        }
     }
-  }
-
-  function readWebStorage(store, key) {
-    try {
-      const raw = store.getItem(key);
-      if (!raw) {
-        return null
-      }
-      const o = JSON.parse(raw);
-      if (!o || typeof o !== 'object') {
-        return null
-      }
-      const exp = o.expiresAt;
-      const res = o.result;
-      if (typeof exp !== 'number' || getNow() > exp) {
-        store.removeItem(key);
-        return null
-      }
-      return /** @type {FetchWebPluginManifestResult} */ (res)
-    } catch (_) {
-      return null
+    function touchMemory(key) {
+        const e = memory.get(key);
+        if (e) {
+            e.lastRead = getNow();
+        }
     }
-  }
-
-  function writeWebStorage(store, key, result, expiresAt) {
-    try {
-      store.setItem(key, JSON.stringify({ expiresAt, result }));
-    } catch (_) {
-      /* Quota / 不可序列化 */
+    function pruneMemory() {
+        if (memory.size <= maxEntries) {
+            return;
+        }
+        const entries = [...memory.entries()].sort((a, b) => a[1].lastRead - b[1].lastRead);
+        const drop = memory.size - maxEntries;
+        for (let i = 0; i < drop; i++) {
+            memory.delete(entries[i][0]);
+        }
     }
-  }
-
-  return (next) => {
-    return async (ctx) => {
-      const key = cacheKeyFn(ctx);
-      const now = getNow();
-
-      if (storage === 'memory') {
-        const hit = memory.get(key);
-        if (hit && hit.expiresAt > now) {
-          touchMemory(key);
-          return cloneResult(hit.result)
+    function readWebStorage(store, key) {
+        try {
+            const raw = store.getItem(key);
+            if (!raw) {
+                return null;
+            }
+            const o = JSON.parse(raw);
+            if (!o || typeof o !== 'object') {
+                return null;
+            }
+            const exp = o.expiresAt;
+            const res = o.result;
+            if (typeof exp !== 'number' || getNow() > exp) {
+                store.removeItem(key);
+                return null;
+            }
+            return res;
+        }
+        catch {
+            return null;
         }
-      } else if (storage === 'session' && typeof sessionStorage !== 'undefined') {
-        const sk = `${prefix}:${key}`;
-        const hit = readWebStorage(sessionStorage, sk);
-        if (hit) {
-          return cloneResult(hit)
+    }
+    function writeWebStorage(store, key, result, expiresAt) {
+        try {
+            store.setItem(key, JSON.stringify({ expiresAt, result }));
         }
-      } else if (storage === 'local' && typeof localStorage !== 'undefined') {
-        const sk = `${prefix}:${key}`;
-        const hit = readWebStorage(localStorage, sk);
-        if (hit) {
-          return cloneResult(hit)
+        catch {
+            /* Quota / 不可序列化 */
         }
-      }
-
-      const result = await next(ctx);
-
-      if (!shouldCache(result)) {
-        return result
-      }
-
-      const expiresAt = now + ttlMs;
-      const frozen = cloneResult(result);
-
-      if (storage === 'memory') {
-        memory.set(key, { expiresAt, result: frozen, lastRead: now });
-        pruneMemory();
-      } else if (storage === 'session' && typeof sessionStorage !== 'undefined') {
-        writeWebStorage(sessionStorage, `${prefix}:${key}`, frozen, expiresAt);
-      } else if (storage === 'local' && typeof localStorage !== 'undefined') {
-        writeWebStorage(localStorage, `${prefix}:${key}`, frozen, expiresAt);
-      }
-
-      return result
     }
-  }
+    return (next) => {
+        return async (ctx) => {
+            const key = cacheKeyFn(ctx);
+            const now = getNow();
+            if (storage === 'memory') {
+                const hit = memory.get(key);
+                if (hit && hit.expiresAt > now) {
+                    touchMemory(key);
+                    return cloneResult(hit.result);
+                }
+            }
+            else if (storage === 'session' && typeof sessionStorage !== 'undefined') {
+                const sk = `${prefix}:${key}`;
+                const hit = readWebStorage(sessionStorage, sk);
+                if (hit) {
+                    return cloneResult(hit);
+                }
+            }
+            else if (storage === 'local' && typeof localStorage !== 'undefined') {
+                const sk = `${prefix}:${key}`;
+                const hit = readWebStorage(localStorage, sk);
+                if (hit) {
+                    return cloneResult(hit);
+                }
+            }
+            const result = await next(ctx);
+            if (!shouldCache(result)) {
+                return result;
+            }
+            const expiresAt = now + ttlMs;
+            const frozen = cloneResult(result);
+            if (storage === 'memory') {
+                memory.set(key, { expiresAt, result: frozen, lastRead: now });
+                pruneMemory();
+            }
+            else if (storage === 'session' && typeof sessionStorage !== 'undefined') {
+                writeWebStorage(sessionStorage, `${prefix}:${key}`, frozen, expiresAt);
+            }
+            else if (storage === 'local' && typeof localStorage !== 'undefined') {
+                writeWebStorage(localStorage, `${prefix}:${key}`, frozen, expiresAt);
+            }
+            return result;
+        };
+    };
 }
-
-/**
- * 自右向左组合中间件（与 Koa/Redux 习惯一致：`compose(f,g,h)(inner)` = f(g(h(inner))))。
- *
- * @param {FetchWebPluginManifestFn} inner 最内层拉取实现
- * @param {...function(FetchWebPluginManifestFn): FetchWebPluginManifestFn} middlewares 每个元素签名 `(next) => async (ctx) => result`
- * @returns {FetchWebPluginManifestFn}
- */
 function composeManifestFetch$1(inner, ...middlewares) {
-  if (typeof inner !== 'function') {
-    throw new Error('[web-extend-plugin-vue2] composeManifestFetch 需要 inner 为函数')
-  }
-  let f = inner;
-  for (let i = middlewares.length - 1; i >= 0; i--) {
-    const mw = middlewares[i];
-    if (typeof mw !== 'function') {
-      throw new Error('[web-extend-plugin-vue2] composeManifestFetch 中间件须为函数')
+    if (typeof inner !== 'function') {
+        throw new Error('[web-extend-plugin-vue2] composeManifestFetch 需要 inner 为函数');
     }
-    f = mw(f);
-  }
-  return f
+    let f = inner;
+    for (let i = middlewares.length - 1; i >= 0; i--) {
+        const mw = middlewares[i];
+        if (typeof mw !== 'function') {
+            throw new Error('[web-extend-plugin-vue2] composeManifestFetch 中间件须为函数');
+        }
+        f = mw(f);
+    }
+    return f;
 }
 
 var manifestComposer = /*#__PURE__*/Object.freeze({
-  __proto__: null,
-  composeManifestFetch: composeManifestFetch$1,
-  manifestFetchCacheMiddleware: manifestFetchCacheMiddleware$1,
-  wrapManifestFetchWithCache: wrapManifestFetchWithCache$1
+    __proto__: null,
+    composeManifestFetch: composeManifestFetch$1,
+    manifestFetchCacheMiddleware: manifestFetchCacheMiddleware$1,
+    wrapManifestFetchWithCache: wrapManifestFetchWithCache$1
 });
 
-/**
- * 插件通过宿主访问后端的受控通道：仅允许配置的前缀路径，默认 `/api/`；强制默认 `same-origin` 携带 Cookie。
- * 前缀列表由 `createRequestBridge({ allowedPathPrefixes })` 传入，与 `defaultWebExtendPluginRuntime.bridgeAllowedPathPrefixes` 对齐。
- *
- * @module bridge
- */
-
-/**
- * @param {{ allowedPathPrefixes?: string[] }} [config]
- */
-function createRequestBridge(config = {}) {
-  const raw =
-    Array.isArray(config.allowedPathPrefixes) && config.allowedPathPrefixes.length > 0
-      ? config.allowedPathPrefixes
-      : defaultWebExtendPluginRuntime.bridgeAllowedPathPrefixes;
-  const allowedPathPrefixes = raw.map((p) => ensureLeadingPath(p));
-
-  return {
-    /**
-     * 发起受控 `fetch`。
-     * @param {string} path 必须以 `/` 开头，且匹配某一 `allowedPathPrefixes` 前缀
-     * @param {RequestInit} [init] 会与默认 `{ credentials: 'same-origin' }` 合并（后者可被覆盖）
-     */
-    async request(path, init = {}) {
-      if (typeof path !== 'string' || !path.startsWith('/')) {
-        throw new Error('[bridge] path must be a string starting with /')
-      }
-      const allowed = allowedPathPrefixes.some((p) => path.startsWith(p));
-      if (!allowed) {
-        throw new Error('[bridge] path not allowed: ' + path)
-      }
-      return fetch(path, {
-        credentials: 'same-origin',
-        ...init
-      })
-    }
-  }
-}
-
-/**
- * 宿主全局响应式注册表：菜单与扩展点槽位，供布局与 `ExtensionPoint` 订阅。
- *
- * @module registries
- */
-
-/**
- * @type {{
- *   menus: object[],
- *   slots: Record<string, Array<{ pluginId: string, component: import('vue').Component, priority: number, key: string }>>
- * }}
- */
-const registries = Vue__default.default.observable({
-  menus: [],
-  /** 扩展点 id → 已注册组件列表（内容区 / 工具栏等共用模型） */
-  slots: {},
-  /**
-   * 每次变更 slots 时递增，供 ExtensionPoint 计算属性显式依赖。
-   * Vue 2 对「先访问不存在的 slots[key]、后 Vue.set 补 key」的依赖收集不可靠，会导致扩展点不刷新。
-   */
-  slotRevision: 0
+/**
+ * 宿主侧响应式注册表：扩展点槽位（供布局与 `ExtensionPoint` 消费）。
+ * 菜单数据由宿主在 `applyPluginMenuItems` 中自行并入其路由/菜单 state，框架不维护平行菜单列表。
+ */
+const registries = Vue__default.default.observable({
+    slots: {},
+    slotRevision: 0
 });
 
-/**
- * 按 `pluginId` 收集 `onTeardown` 回调，供 `disposeWebPlugin` 统一执行。
- *
- * @module teardown-registry
- */
-
-/** @type {Map<string, Function[]>} */
-const byPlugin = new Map();
-
-/**
- * 登记插件卸载时要执行的同步回调（建议只做解绑、清定时器等轻量逻辑）。
- * @param {string} pluginId
- * @param {() => void} fn
- */
-function registerPluginTeardown(pluginId, fn) {
-  if (typeof fn !== 'function') {
-    return
-  }
-  let arr = byPlugin.get(pluginId);
-  if (!arr) {
-    arr = [];
-    byPlugin.set(pluginId, arr);
-  }
-  arr.push(fn);
-}
-
-/**
- * 执行并清空该插件已登记的全部 teardown；调用后 Map 中不再保留该 id。
- * @param {string} pluginId
- */
-function runPluginTeardowns(pluginId) {
-  const arr = byPlugin.get(pluginId);
-  if (!arr) {
-    return
-  }
-  byPlugin.delete(pluginId);
-  for (const fn of arr) {
-    try {
-      fn();
-    } catch (e) {
-      console.warn('[plugins] teardown failed', pluginId, e);
-    }
-  }
+/**
+ * 按插件 id 收集 `onTeardown` 回调，供 `disposeWebPlugin` 统一执行。
+ */
+const _byPlugin = new Map();
+function registerPluginTeardown(pluginId, fn) {
+    if (typeof fn !== 'function') {
+        return;
+    }
+    let list = _byPlugin.get(pluginId);
+    if (!list) {
+        list = [];
+        _byPlugin.set(pluginId, list);
+    }
+    list.push(fn);
 }
-
-/**
- * 构造供插件 activator 调用的宿主 API（路由、菜单、扩展点、资源注入等）。
- * 与打包工具无关；Webpack 宿主需已配置 `vue-loader` 以编译本包内的 `.vue` 依赖。
- *
- * @module createHostApi
- */
-
-/** 扩展点列表项 key 递增，避免用 Date.now() 导致列表重排时误卸载组件 */
-let slotItemKeySeq = 0;
-/** 无 name 的动态路由合成名递增，避免多次 registerRoutes 重名 */
-let routeSynthSeq = 0;
-
-/**
- * @typedef {object} RegisterSlotEntry
- * @property {import('vue').Component} component
- * @property {number} [priority]
- */
-
-/**
- * @typedef {object} HostApi
- * @property {string} hostPluginApiVersion 宿主实现的协议版本
- * @property {(routes: import('vue-router').RouteConfig[]) => void} registerRoutes 注册路由；无 `name` 时自动生成稳定合成名；优先 `router.addRoute`
- * @property {(items: object[]) => void} registerMenuItems 注册菜单并按 `order` 排序
- * @property {(pointId: string, components: RegisterSlotEntry[]) => void} registerSlotComponents 向扩展点挂载组件
- * @property {(urls?: string[]) => void} registerStylesheetUrls 注入 `link[rel=stylesheet]`，带 `data-plugin-asset`
- * @property {(urls?: string[]) => void} registerScriptUrls 顺序注入外链脚本
- * @property {() => void} registerSanitizedHtmlSnippet MVP 未实现，调用即抛错
- * @property {() => ReturnType<typeof createRequestBridge>} getBridge 受控 `fetch` 代理
- * @property {(pluginId: string, fn: () => void) => void} onTeardown 注册卸载回调；由 `disposeWebPlugin(pluginId)` 触发
- */
-
-/**
- * @typedef {object} HostKitOptions
- * @property {string[]} [bridgeAllowedPathPrefixes] 覆盖 `getBridge().request` 允许的 URL 前缀；默认见 `defaultWebExtendPluginRuntime.bridgeAllowedPathPrefixes`
- */
-
-/**
- * 创建单个插件在宿主侧的 API 句柄，传入插件 `activator(hostApi)`。
- *
- * `bootstrapPlugins` 始终以 `(pluginId, router, hostKitOptions)` 调用工厂；请使用 `(id, r, kit) => createHostApi(id, r, kit)` 传入 `bridgeAllowedPathPrefixes`。
- * 单参工厂 `(id) => createHostApi(id, router)` 仍可用（忽略后两个实参），此时 bridge 仅用包内默认前缀。
- *
- * @param {string} pluginId 与 manifest.id 一致
- * @param {import('vue-router').default} router 宿主 Vue Router 实例（vue-router@3）
- * @param {HostKitOptions} [hostKitOptions]
- * @returns {HostApi}
- */
-function createHostApi(pluginId, router, hostKitOptions = {}) {
-  const bridgePrefixes =
-    Array.isArray(hostKitOptions.bridgeAllowedPathPrefixes) &&
-    hostKitOptions.bridgeAllowedPathPrefixes.length > 0
-      ? hostKitOptions.bridgeAllowedPathPrefixes
-      : defaultWebExtendPluginRuntime.bridgeAllowedPathPrefixes;
-  const bridge = createRequestBridge({ allowedPathPrefixes: bridgePrefixes });
-
-  /**
-   * 注入样式表；`disposeWebPlugin` 会按 `data-plugin-asset` 移除对应节点。
-   * @param {string} href
-   */
-  function injectStylesheet(href) {
-    const link = document.createElement('link');
-    link.rel = 'stylesheet';
-    link.href = href;
-    link.setAttribute('data-plugin-asset', pluginId);
-    document.head.appendChild(link);
-  }
-
-  /**
-   * 注入外链脚本（用于插件额外资源，非清单主入口）。
-   * @param {string} src
-   * @returns {Promise<void>}
-   */
-  function injectScript(src) {
-    return new Promise((resolve, reject) => {
-      const s = document.createElement('script');
-      s.async = true;
-      s.src = src;
-      s.setAttribute('data-plugin-asset', pluginId);
-      s.onload = () => resolve();
-      s.onerror = () => reject(new Error('script failed: ' + src));
-      document.head.appendChild(s);
-    })
-  }
-
-  return {
-    hostPluginApiVersion: HOST_PLUGIN_API_VERSION,
-
-    /**
-     * 动态注册路由。Vue Router 3.5+ 推荐 `addRoute`；若不存在则回退已弃用的 `addRoutes`。
-     * @param {import('vue-router').RouteConfig[]} routes
-     */
-    registerRoutes(routes) {
-      const wrapped = routes.map((r) => ({
-        ...r,
-        name: r.name || `__wep_${pluginId}_${routeSynthSeq++}`,
-        meta: { ...(r.meta || {}), pluginId }
-      }));
-      if (typeof router.addRoute === 'function') {
-        for (const r of wrapped) {
-          router.addRoute(r);
-        }
-      } else {
-        router.addRoutes(wrapped);
-      }
-    },
-
-    /**
-     * 写入全局菜单注册表（响应式）；按 `order` 升序排列。
-     * @param {object[]} items
-     */
-    registerMenuItems(items) {
-      for (const item of items) {
-        registries.menus.push({ ...item, pluginId });
-      }
-      registries.menus.sort(
-        (a, b) => (a.order != null ? a.order : 0) - (b.order != null ? b.order : 0)
-      );
-    },
-
-    /**
-     * 向指定扩展点 id 注册 Vue 组件；`ExtensionPoint` 按 `priority` 降序渲染。
-     * @param {string} pointId
-     * @param {RegisterSlotEntry[]} components
-     */
-    registerSlotComponents(pointId, components) {
-      if (!pointId) {
-        return
-      }
-      if (!registries.slots[pointId]) {
-        Vue__default.default.set(registries.slots, pointId, []);
-      }
-      const list = registries.slots[pointId];
-      for (const c of components) {
-        list.push({
-          pluginId,
-          component: c.component,
-          priority: c.priority != null ? c.priority : 0,
-          key: `${pluginId}-${pointId}-${++slotItemKeySeq}`
-        });
-      }
-      list.sort((a, b) => b.priority - a.priority);
-      registries.slotRevision++;
-    },
-
-    /**
-     * @param {string[]|undefined} urls
-     */
-    registerStylesheetUrls(urls) {
-      for (const u of urls || []) {
-        if (typeof u === 'string' && u) {
-          injectStylesheet(u);
-        }
-      }
-    },
-
-    /**
-     * 串行加载多个脚本，失败仅告警不中断宿主。
-     * @param {string[]|undefined} urls
-     */
-    registerScriptUrls(urls) {
-      const chain = (urls || []).filter((u) => typeof u === 'string' && u).reduce(
-        (p, u) => p.then(() => injectScript(u)),
-        Promise.resolve()
-      );
-      chain.catch((e) => console.warn('[plugins] registerScriptUrls', pluginId, e));
-    },
-
-    registerSanitizedHtmlSnippet() {
-      throw new Error('registerSanitizedHtmlSnippet is not enabled in MVP')
-    },
-
-    getBridge: () => bridge,
-
-    /**
-     * 插件卸载前清理逻辑；第一个参数为预留与协议对齐，实际以创建 API 时的 `pluginId` 为准。
-     * @param {string} _pluginId 预留，与 manifest.id 一致时可传入
-     * @param {() => void} fn
-     */
-    onTeardown(_pluginId, fn) {
-      if (typeof fn === 'function') {
-        registerPluginTeardown(pluginId, fn);
-      }
-    }
-  }
+function runPluginTeardowns(pluginId) {
+    const list = _byPlugin.get(pluginId);
+    if (!list) {
+        return;
+    }
+    _byPlugin.delete(pluginId);
+    for (const fn of list) {
+        try {
+            fn();
+        }
+        catch (e) {
+            console.warn('[wep] teardown failed', pluginId, e);
+        }
+    }
 }
 
-/**
- * 单插件卸载：与 `bootstrapPlugins` / `createHostApi` 对称，清理注册表与 DOM 副作用。
- *
- * @module dispose-plugin
- */
-
-/**
- * 卸载指定 id 的插件：依次执行 teardown、移除菜单与扩展点条目、删除 activator、移除带 `data-plugin-asset` 的节点。
- *
- * **路由**：Vue Router 3 无公开 `removeRoute`，此处不改动 matcher；动态路由需整页刷新或自行维护路由表。
- *
- * @param {string} pluginId 与 manifest.id 一致
- */
-function disposeWebPlugin(pluginId) {
-  if (!pluginId || typeof pluginId !== 'string') {
-    return
-  }
-
-  runPluginTeardowns(pluginId);
-
-  for (let i = registries.menus.length - 1; i >= 0; i--) {
-    if (registries.menus[i].pluginId === pluginId) {
-      registries.menus.splice(i, 1);
-    }
-  }
-
-  const slots = registries.slots;
-  for (const pointId of Object.keys(slots)) {
-    const list = slots[pointId];
-    if (!Array.isArray(list)) {
-      continue
-    }
-    const next = list.filter((x) => x.pluginId !== pluginId);
-    if (next.length === 0) {
-      Vue__default.default.delete(slots, pointId);
-    } else if (next.length !== list.length) {
-      Vue__default.default.set(slots, pointId, next);
-    }
-  }
-  registries.slotRevision++;
-
-  if (typeof window !== 'undefined' && window.__PLUGIN_ACTIVATORS__) {
-    delete window.__PLUGIN_ACTIVATORS__[pluginId];
-  }
-
-  if (typeof document !== 'undefined') {
-    document.querySelectorAll('[data-plugin-asset]').forEach((el) => {
-      if (el.getAttribute('data-plugin-asset') === pluginId) {
-        el.remove();
-      }
-    });
-  }
+/**
+ * 插件访问后端的受控通道：`fetch` 仅允许落在配置的路径前缀下（默认 `/api/`），默认 `credentials: 'same-origin'`。
+ */
+function createRequestBridge(config = {}) {
+    const raw = Array.isArray(config.allowedPathPrefixes) && config.allowedPathPrefixes.length > 0
+        ? config.allowedPathPrefixes
+        : defaultWebExtendPluginRuntime.bridgeAllowedPathPrefixes;
+    const allowedPathPrefixes = raw.map((p) => ensureLeadingPath(p));
+    return {
+        async request(path, init = {}) {
+            if (typeof path !== 'string' || !path.startsWith('/')) {
+                throw new Error('[wep:bridge] path must start with /');
+            }
+            const allowed = allowedPathPrefixes.some((p) => path.startsWith(p));
+            if (!allowed) {
+                throw new Error('[wep:bridge] path not allowed: ' + path);
+            }
+            return fetch(path, {
+                credentials: 'same-origin',
+                ...init
+            });
+        }
+    };
 }
 
 /**
- * 在宿主布局中声明扩展点；插件通过 `hostApi.registerSlotComponents(pointId, ...)` 注入组件。
- * 使用纯 render 函数，便于 Rollup 发布 dist，宿主无需再转译 .vue。
+ * 构造插件 `activator(hostApi)` 使用的宿主 API：路由、菜单、扩展点、资源与受控请求桥。
  */
-
-const SlotErrorBoundary = {
-  name: 'SlotErrorBoundary',
-  props: { label: String },
-  data() {
-    return { error: null }
-  },
-  errorCaptured(err) {
-    this.error = err && err.message ? err.message : String(err);
-    console.error('[ExtensionPoint] render error in', this.label, err);
-    return false
-  },
-  render(h) {
-    if (this.error) {
-      return h(
-        'div',
-        { class: 'plugin-point-error', style: { color: '#c00', fontSize: '12px' } },
-        `[插件 ${this.label}] 渲染失败`
-      )
+let slotItemKeySeq = 0;
+let routeSynthSeq = 0;
+function analyzeRouteInputTree(nodes) {
+    let hasDecl = false;
+    let hasCfg = false;
+    function walk(r) {
+        if (!r || typeof r !== 'object') {
+            return;
+        }
+        const o = r;
+        const cfg = o.component != null || o.components != null;
+        const decl = typeof o.componentRef === 'string';
+        if (cfg) {
+            hasCfg = true;
+        }
+        else if (decl) {
+            hasDecl = true;
+        }
+        const ch = o.children;
+        if (Array.isArray(ch)) {
+            for (const c of ch) {
+                walk(c);
+            }
+        }
     }
-    const d = this.$slots.default;
-    return d && d[0] ? d[0] : h('span')
-  }
-};
-
-var ExtensionPoint = {
-  name: 'ExtensionPoint',
-  components: { SlotErrorBoundary },
-  props: {
-    pointId: { type: String, required: true },
-    slotProps: { type: Object, default: () => ({}) }
-  },
-  computed: {
-    items() {
-      void registries.slotRevision;
-      return registries.slots[this.pointId] || []
-    },
-    forwardProps() {
-      return this.slotProps || {}
+    for (const n of nodes) {
+        walk(n);
     }
-  },
-  render(h) {
-    return h(
-      'div',
-      {
-        class: 'extension-point',
-        style: { minHeight: '8px' },
-        attrs: { 'data-point-id': this.pointId }
-      },
-      this.items.map((item) =>
-        h(
-          SlotErrorBoundary,
-          {
-            key: item.key,
-            props: { label: item.pluginId }
-          },
-          [h(item.component, { props: this.forwardProps })]
-        )
-      )
-    )
-  }
-};
-
+    return { hasDecl, hasCfg };
+}
 /**
- * 一键接入：注册 `ExtensionPoint` 并执行 `bootstrapPlugins`。
- * @module install
+ * 单插件在宿主侧的 API 句柄。工厂请传 `(id, router, kit) => createHostApi(id, r, kit)` 以便 bridge 白名单等到位。
  */
+// eslint-disable-next-line @typescript-eslint/no-explicit-any
+function createHostApi(pluginId, router, hostKitOptions = {}) {
+    const bridgePrefixes = Array.isArray(hostKitOptions.bridgeAllowedPathPrefixes) &&
+        hostKitOptions.bridgeAllowedPathPrefixes.length > 0
+        ? hostKitOptions.bridgeAllowedPathPrefixes
+        : defaultWebExtendPluginRuntime.bridgeAllowedPathPrefixes;
+    const bridge = createRequestBridge({ allowedPathPrefixes: bridgePrefixes });
+    const parentName = typeof hostKitOptions.pluginRoutesParentName === 'string'
+        ? hostKitOptions.pluginRoutesParentName.trim()
+        : '';
+    function applyInternalRegister(rawRouteConfigs) {
+        const wrapped = rawRouteConfigs.map((r) => ({
+            ...r,
+            name: r.name || `${routeSynthNamePrefix}${pluginId}_${routeSynthSeq++}`,
+            meta: { ...(r.meta || {}), pluginId }
+        }));
+        if (typeof router.addRoute !== 'function') {
+            throw new Error('[wep] vue-router 3.5+ 必需：请使用 router.addRoute（不再支持 addRoutes）');
+        }
+        if (parentName) {
+            for (const r of wrapped) {
+                router.addRoute(parentName, r);
+            }
+        }
+        else {
+            for (const r of wrapped) {
+                router.addRoute(r);
+            }
+        }
+    }
+    function injectStylesheet(href) {
+        const link = document.createElement('link');
+        link.rel = 'stylesheet';
+        link.href = href;
+        link.setAttribute('data-plugin-asset', pluginId);
+        document.head.appendChild(link);
+    }
+    function injectScript(src) {
+        return new Promise((resolve, reject) => {
+            const s = document.createElement('script');
+            s.async = true;
+            s.src = src;
+            s.setAttribute('data-plugin-asset', pluginId);
+            s.onload = () => resolve();
+            s.onerror = () => reject(new Error('script failed: ' + src));
+            document.head.appendChild(s);
+        });
+    }
+    const hostContext = hostKitOptions.hostContext != null && typeof hostKitOptions.hostContext === 'object'
+        ? hostKitOptions.hostContext
+        : Object.freeze({});
+    return {
+        hostPluginApiVersion: HOST_PLUGIN_API_VERSION,
+        /** 宿主注入的只读依赖（store、router、开放能力等），见 `resolveRuntimeOptions.hostContext` */
+        hostContext,
+        registerRoutes(routes) {
+            const list = Array.isArray(routes) ? routes : [];
+            if (list.length === 0) {
+                return;
+            }
+            const { hasDecl, hasCfg } = analyzeRouteInputTree(list);
+            if (hasDecl && hasCfg) {
+                throw new Error('[wep] registerRoutes: cannot mix RouteDeclaration (componentRef) with RouteConfig (component)');
+            }
+            let configs;
+            if (hasDecl) {
+                const adapt = hostKitOptions.adaptRouteDeclarations;
+                if (typeof adapt !== 'function') {
+                    throw new Error('[wep] registerRoutes: RouteDeclaration (componentRef) requires adaptRouteDeclarations on the host');
+                }
+                configs = adapt({
+                    pluginId,
+                    router,
+                    declarations: list
+                });
+            }
+            else {
+                configs = list;
+            }
+            if (typeof hostKitOptions.transformRoutes === 'function') {
+                configs = hostKitOptions.transformRoutes({
+                    pluginId,
+                    router,
+                    routes: configs
+                });
+            }
+            if (typeof hostKitOptions.interceptRegisterRoutes === 'function') {
+                hostKitOptions.interceptRegisterRoutes({
+                    pluginId,
+                    router,
+                    routes: configs,
+                    applyInternalRegister
+                });
+            }
+            else {
+                applyInternalRegister(configs);
+            }
+        },
+        registerMenuItems(items) {
+            const apply = hostKitOptions.applyPluginMenuItems;
+            if (typeof apply !== 'function') {
+                throw new Error('[wep] registerMenuItems 需要宿主在 resolveRuntimeOptions 中提供 applyPluginMenuItems，将菜单数据并入宿主侧栏/目录 state（框架不再维护 registries.menus）');
+            }
+            const list = Array.isArray(items) ? items : [];
+            const enriched = list.map((item) => ({ ...item, pluginId }));
+            enriched.sort((a, b) => (a.order != null ? Number(a.order) : 0) - (b.order != null ? Number(b.order) : 0));
+            apply({ pluginId, items: enriched });
+        },
+        registerSlotComponents(pointId, components) {
+            if (!pointId) {
+                return;
+            }
+            if (!registries.slots[pointId]) {
+                Vue__default.default.set(registries.slots, pointId, []);
+            }
+            const list = registries.slots[pointId];
+            for (const c of components) {
+                list.push({
+                    pluginId,
+                    component: c.component,
+                    priority: c.priority != null ? c.priority : 0,
+                    key: `${pluginId}-${pointId}-${++slotItemKeySeq}`
+                });
+            }
+            list.sort((a, b) => b.priority - a.priority);
+            registries.slotRevision++;
+        },
+        registerStylesheetUrls(urls) {
+            for (const u of urls || []) {
+                if (typeof u === 'string' && u) {
+                    injectStylesheet(u);
+                }
+            }
+        },
+        registerScriptUrls(urls) {
+            const chain = (urls || []).filter((u) => typeof u === 'string' && u).reduce((p, u) => p.then(() => injectScript(u)), Promise.resolve());
+            chain.catch((e) => console.warn('[wep] registerScriptUrls', pluginId, e));
+        },
+        registerSanitizedHtmlSnippet() {
+            throw new Error('registerSanitizedHtmlSnippet is not enabled');
+        },
+        getBridge: () => bridge,
+        onTeardown(_pluginId, fn) {
+            if (typeof fn === 'function') {
+                registerPluginTeardown(pluginId, fn);
+            }
+        }
+    };
+}
 
 /**
- * 注册全局组件 `ExtensionPoint` 并异步引导插件清单。
- *
- * @param {*} Vue
- * @param {*} router  vue-router 实例
- * @param {Record<string, unknown>} [options] 传给 `resolveRuntimeOptions` 的字段；可含 `env`（Vite 传入 `import.meta.env`）以读取 `VITE_*`。
- * @returns {Promise<void>}
+ * 卸载单个插件：执行 teardown、清理注册表与 activator、移除带 `data-plugin-asset` 的 DOM。
+ * 注意：Vue Router 3 无公开 `removeRoute`，动态路由通常需整页刷新或宿主自行维护。
  */
-function installWebExtendPluginVue2(Vue, router, options) {
-  const opts = options || {};
-  const { env: injectedEnv, ...runtimeUser } = opts;
-  if (injectedEnv && typeof injectedEnv === 'object') {
-    setWebExtendPluginEnv(injectedEnv);
-  }
-  if (Vue && ExtensionPoint) {
-    Vue.component('ExtensionPoint', ExtensionPoint);
-  }
-  const runtime = resolveRuntimeOptions$1(runtimeUser);
-  return bootstrapPlugins$1(router, (id, r, kit) => createHostApi(id, r, kit), runtime)
+function disposeWebPlugin(pluginId) {
+    if (!pluginId || typeof pluginId !== 'string') {
+        return;
+    }
+    runPluginTeardowns(pluginId);
+    revokePluginMenusIfConfigured(pluginId);
+    const slots = registries.slots;
+    for (const pointId of Object.keys(slots)) {
+        const list = slots[pointId];
+        if (!Array.isArray(list)) {
+            continue;
+        }
+        const next = list.filter((x) => x.pluginId !== pluginId);
+        if (next.length === 0) {
+            Vue__default.default.delete(slots, pointId);
+        }
+        else if (next.length !== list.length) {
+            Vue__default.default.set(slots, pointId, next);
+        }
+    }
+    registries.slotRevision++;
+    if (typeof window !== 'undefined' && window.__PLUGIN_ACTIVATORS__) {
+        delete window.__PLUGIN_ACTIVATORS__[pluginId];
+    }
+    if (typeof document !== 'undefined') {
+        document.querySelectorAll('[data-plugin-asset]').forEach((el) => {
+            if (el.getAttribute('data-plugin-asset') === pluginId) {
+                el.remove();
+            }
+        });
+    }
 }
 
 /**
- * 预设：Vue CLI + 统一 axios（如若依 `utils/request`）。
- * 对外以 {@link presetVueCliAxios} 聚合；亦保留具名函数便于 tree-shaking。
- *
- * @module presets/vue-cli-axios
+ * 布局中的扩展点占位；插件通过 `hostApi.registerSlotComponents(pointId, ...)` 注入组件。
+ * 样式由宿主全局 CSS 覆盖 `.extension-point` / `.plugin-point-error`。
  */
+const SlotErrorBoundary = Vue__default.default.extend({
+    name: 'SlotErrorBoundary',
+    props: { label: String },
+    data() {
+        return { error: null };
+    },
+    errorCaptured(err) {
+        this.error = err instanceof Error && err.message ? err.message : String(err);
+        console.error('[wep:ExtensionPoint]', this.label, err);
+        return false;
+    },
+    // eslint-disable-next-line @typescript-eslint/no-explicit-any
+    render(h) {
+        if (this.error) {
+            return h('div', { class: 'plugin-point-error' }, `[插件 ${this.label}] 渲染失败`);
+        }
+        const d = this.$slots.default;
+        return d && d[0] ? d[0] : h('span');
+    }
+});
+var ExtensionPoint = Vue__default.default.extend({
+    name: 'ExtensionPoint',
+    components: { SlotErrorBoundary },
+    props: {
+        pointId: { type: String, required: true },
+        slotProps: { type: Object, default: () => ({}) }
+    },
+    computed: {
+        items() {
+            void registries.slotRevision;
+            return registries.slots[this.pointId] || [];
+        },
+        forwardProps() {
+            return this.slotProps || {};
+        }
+    },
+    // eslint-disable-next-line @typescript-eslint/no-explicit-any
+    render(h) {
+        return h('div', {
+            class: 'extension-point',
+            attrs: { 'data-point-id': this.pointId }
+        }, this.items.map((item) => h(SlotErrorBoundary, {
+            key: item.key,
+            props: { label: item.pluginId }
+        }, [h(item.component, { props: this.forwardProps })])));
+    }
+});
 
 /**
- * @typedef {object} VueCliAxiosInstallPresetDeps
- * @property {(config: { url: string, method?: string, [key: string]: unknown }) => Promise<unknown>} request 宿主 axios 封装（已含 baseURL、Token 等）
+ * 注册全局 `ExtensionPoint` 并异步拉取清单、激活插件。
  */
-
 /**
- * 将 `manifestBase + manifestListPath` 转为相对 `VUE_APP_BASE_API` 的路径（供 axios baseURL 拼接）。
- * @param {string} manifestUrl
- * @param {string} [apiBase]
+ * @param Vue Vue 构造函数
+ * @param router vue-router 实例
+ * @param options 传给 `resolveRuntimeOptions`；可含 `env` 以读取 `VITE_*`
  */
-function manifestPathForVueCliApiBase(manifestUrl, apiBase) {
-  const base = String(
-    apiBase !== undefined
-      ? apiBase
-      : (typeof process !== 'undefined' && process.env && process.env.VUE_APP_BASE_API) || ''
-  ).replace(/\/$/, '');
-  if (typeof window === 'undefined') {
-    return '/api/frontend-plugins'
-  }
-  const u = new URL(manifestUrl, window.location.origin);
-  let path = u.pathname + u.search;
-  if (base && path.startsWith(base)) {
-    path = path.slice(base.length) || '/';
-  }
-  return path
+// eslint-disable-next-line @typescript-eslint/no-explicit-any
+function installWebExtendPluginVue2(Vue, router, options) {
+    const opts = options || {};
+    const { env: injectedEnv, ...runtimeUser } = opts;
+    if (injectedEnv && typeof injectedEnv === 'object') {
+        setWebExtendPluginEnv(injectedEnv);
+    }
+    if (Vue && ExtensionPoint) {
+        Vue.component('ExtensionPoint', ExtensionPoint);
+    }
+    const runtime = resolveRuntimeOptions$1(runtimeUser);
+    return bootstrapPlugins$1(router, (id, r, kit) => createHostApi(id, r, kit || {}), runtime);
 }
 
 /**
- * 兼容裸清单 JSON 与常见 `{ code, data: { plugins } }` 包装。
- * @param {unknown} body
- * @returns {object|null}
+ * Vue CLI + 统一 axios（如 RuoYi `utils/request`）场景的 `install` 预设。
  */
-function unwrapTableStyleManifestBody(body) {
-  if (!body || typeof body !== 'object') {
-    return null
-  }
-  const o = /** @type {Record<string, unknown>} */ (body);
-  if (Array.isArray(o.plugins)) {
-    return o
-  }
-  const d = o.data;
-  if (d && typeof d === 'object') {
-    const inner = /** @type {Record<string, unknown>} */ (d);
-    if (Array.isArray(inner.plugins)) {
-      return inner
+function resolveManifestPathUnderApiBase(manifestUrl, apiBase) {
+    const base = String(apiBase !== undefined
+        ? apiBase
+        : typeof process !== 'undefined' && process.env && process.env.VUE_APP_BASE_API
+            ? String(process.env.VUE_APP_BASE_API)
+            : '').replace(/\/$/, '');
+    if (typeof window === 'undefined') {
+        return '/api/frontend-plugins';
     }
-    if ('plugins' in inner) {
-      return inner
+    const u = new URL(manifestUrl, window.location.origin);
+    let path = u.pathname + u.search;
+    if (base && path.startsWith(base)) {
+        path = path.slice(base.length) || '/';
     }
-  }
-  return d !== undefined && d !== null && typeof d === 'object' ? /** @type {object} */ (d) : o
+    return path;
 }
-
-function bridgePrefixesFromVueCliEnv() {
-  const base = (
-    typeof process !== 'undefined' && process.env && process.env.VUE_APP_BASE_API
-      ? String(process.env.VUE_APP_BASE_API)
-      : ''
-  ).replace(/\/$/, '');
-  const raw = [base ? `${base}/` : '', '/api/', '/dev-api/'].filter(Boolean);
-  return [...new Set(raw)]
-}
-
 /**
- * 生成可直接传给 `installWebExtendPluginVue2` 的 options（含 fetchManifest、manifestBase、bridge 前缀）。
- * @param {VueCliAxiosInstallPresetDeps} deps
- * @param {Record<string, unknown>} [extra] 合并覆盖，如 `manifestListPath`、`env` 等
- * @returns {Record<string, unknown>}
+ * 常见 Java 清单路径：与 `VUE_APP_BASE_API` 拼接为 `${base}/frontend-plugins`。
+ * 若后端使用 `/api/frontend-plugins` 段，请在 extra 中显式传入 `manifestListPath`。
  */
+const defaultVueCliJavaManifestListPath = '/frontend-plugins';
+function bridgePrefixesFromVueCliEnv() {
+    const base = (typeof process !== 'undefined' && process.env && process.env.VUE_APP_BASE_API
+        ? String(process.env.VUE_APP_BASE_API)
+        : '').replace(/\/$/, '');
+    const raw = [base ? `${base}/` : '', '/api/', '/dev-api/'].filter(Boolean);
+    return [...new Set(raw)];
+}
 function createVueCliAxiosInstallOptions(deps, extra = {}) {
-  const { request } = deps;
-  if (typeof request !== 'function') {
-    throw new Error('[web-extend-plugin-vue2] createVueCliAxiosInstallOptions({ request }) 需要宿主 request 函数')
-  }
-  const envBase = (
-    typeof process !== 'undefined' && process.env && process.env.VUE_APP_BASE_API
-      ? String(process.env.VUE_APP_BASE_API)
-      : ''
-  ).replace(/\/$/, '');
-  const userBase =
-    extra.manifestBase !== undefined && String(extra.manifestBase).trim() !== ''
-      ? String(extra.manifestBase).replace(/\/$/, '')
-      : '';
-  const stripBase = userBase || envBase;
-
-  const fetchManifest = async (ctx) => {
-    try {
-      const url = manifestPathForVueCliApiBase(ctx.manifestUrl, stripBase);
-      const body = await request({
-        url,
-        method: 'get'
-      });
-      const data = unwrapTableStyleManifestBody(body);
-      if (!data || typeof data !== 'object') {
-        return {
-          ok: false,
-          error: new Error('[web-plugin] 清单响应格式无效'),
-          data: null
+    const { request } = deps;
+    if (typeof request !== 'function') {
+        throw new Error('[wep] createVueCliAxiosInstallOptions requires deps.request');
+    }
+    const { fetchManifest: userFetchManifest, manifestMode: extraManifestMode, staticManifestUrl: extraStaticManifestUrl, ...restExtra } = extra;
+    const envBase = (typeof process !== 'undefined' && process.env && process.env.VUE_APP_BASE_API
+        ? String(process.env.VUE_APP_BASE_API)
+        : '').replace(/\/$/, '');
+    const userBase = extra.manifestBase !== undefined && String(extra.manifestBase).trim() !== ''
+        ? String(extra.manifestBase).replace(/\/$/, '')
+        : '';
+    const stripBase = userBase || envBase;
+    const manifestMode = resolveManifestModeFromInputs(extraManifestMode);
+    const staticManifestUrl = resolveStaticManifestUrlFromInputs(extraStaticManifestUrl);
+    const fetchManifestApi = async (ctx) => {
+        try {
+            const url = resolveManifestPathUnderApiBase(ctx.manifestUrl, stripBase);
+            const body = await request({
+                url,
+                method: 'get'
+            });
+            const data = unwrapNestedManifestBody(body);
+            if (!data || typeof data !== 'object') {
+                return {
+                    ok: false,
+                    error: new Error('[wep] invalid manifest response'),
+                    data: null
+                };
+            }
+            return { ok: true, data };
+        }
+        catch (e) {
+            return { ok: false, error: e, data: null };
         }
-      }
-      return { ok: true, data }
-    } catch (e) {
-      return { ok: false, error: e, data: null }
+    };
+    const fetchManifestStatic = (ctx) => fetchStaticManifestViaHttp(ctx);
+    const fetchManifest = typeof userFetchManifest === 'function'
+        ? userFetchManifest
+        : manifestMode === 'static'
+            ? fetchManifestStatic
+            : fetchManifestApi;
+    const opts = {
+        manifestBase: stripBase || undefined,
+        bridgeAllowedPathPrefixes: bridgePrefixesFromVueCliEnv(),
+        manifestMode,
+        staticManifestUrl,
+        ...restExtra,
+        fetchManifest
+    };
+    const listPath = typeof process !== 'undefined' &&
+        process.env &&
+        process.env[webExtendPluginEnvKeys.manifestPathAlt];
+    if (listPath && opts.manifestListPath === undefined && extra.manifestListPath === undefined) {
+        opts.manifestListPath = String(process.env[webExtendPluginEnvKeys.manifestPathAlt]);
     }
-  };
-
-  const opts = {
-    manifestBase: stripBase || undefined,
-    bridgeAllowedPathPrefixes: bridgePrefixesFromVueCliEnv(),
-    fetchManifest,
-    ...extra
-  };
-
-  const listPath =
-    typeof process !== 'undefined' && process.env && process.env.VUE_APP_WEB_PLUGIN_MANIFEST_PATH;
-  if (listPath && opts.manifestListPath === undefined && extra.manifestListPath === undefined) {
-    opts.manifestListPath = String(listPath);
-  }
-
-  return opts
+    return opts;
 }
-
 /**
- * Vue CLI + axios 预设的**对外聚合入口**（与具名导出函数等价，便于按需查阅与扩展多预设）。
- * @type {Readonly<{ id: string, description: string, createInstallOptions: typeof createVueCliAxiosInstallOptions, manifestPathForApiBase: typeof manifestPathForVueCliApiBase, unwrapManifestBody: typeof unwrapTableStyleManifestBody }>}
+ * 少样板接入：`hostContext` 自动含 `router`（及可选 `store`）、`isDev` 与常见 `manifestListPath` 默认值。
+ * 更多运行时字段仍可通过 `extra` 覆盖。
  */
+function createVueCliAxiosQuickInstallOptions(
+// eslint-disable-next-line @typescript-eslint/no-explicit-any
+router, deps, extra = {}) {
+    const { request, hostLayoutComponent, store, hostContext: depHostContext, applyPluginMenuItems, revokePluginMenuItems } = deps;
+    const { hostContext: extraHostContext, isDev: extraIsDev, manifestListPath: extraListPath, ...restExtra } = extra;
+    const hostContext = {
+        router,
+        ...(store !== undefined ? { store } : {}),
+        ...(depHostContext && typeof depHostContext === 'object' ? depHostContext : {}),
+        ...(extraHostContext && typeof extraHostContext === 'object' ? extraHostContext : {})
+    };
+    const manifestListPath = extraListPath !== undefined && String(extraListPath).trim() !== ''
+        ? String(extraListPath)
+        : defaultVueCliJavaManifestListPath;
+    return createVueCliAxiosInstallOptions({ request }, {
+        hostLayoutComponent,
+        hostContext,
+        applyPluginMenuItems,
+        revokePluginMenuItems,
+        isDev: extraIsDev !== undefined ? Boolean(extraIsDev) : resolveBundledIsDev(),
+        manifestListPath,
+        ...restExtra
+    });
+}
 const presetVueCliAxios = Object.freeze({
-  id: 'vue-cli-axios',
-  description: 'Vue CLI + 统一 axios 实例（如若依 utils/request），清单走宿主 request',
-  createInstallOptions: createVueCliAxiosInstallOptions,
-  manifestPathForApiBase: manifestPathForVueCliApiBase,
-  unwrapManifestBody: unwrapTableStyleManifestBody
+    id: 'vue-cli-axios',
+    description: 'Vue CLI + axios request for API manifest; optional manifestMode=static uses fetch',
+    createInstallOptions: createVueCliAxiosInstallOptions,
+    createQuickInstallOptions: createVueCliAxiosQuickInstallOptions,
+    defaultJavaManifestListPath: defaultVueCliJavaManifestListPath,
+    manifestPathForApiBase: resolveManifestPathUnderApiBase,
+    unwrapManifestBody: unwrapNestedManifestBody
 });
 
 /**
- * 稳定对外 API：具名导出 + {@link WebExtendPluginVue2} 聚合对象。
- * 语义化版本内保持本文件导出的符号与聚合结构兼容。
- *
- * `PluginRuntime` 与 `manifest-fetch-composer` 通过 namespace 绑定到 `WebExtendPluginVue2.runtime`，避免具名导出与聚合对象重复列举。
- *
- * @module public
+ * Vue CLI + axios 场景的一键安装：合并 hostContext、默认清单路径与 IIFE 全局 Vue。
  */
-
-
-const {
-  bootstrapPlugins,
-  defaultFetchWebPluginManifest,
-  resolveRuntimeOptions
-} = pluginRuntime;
-
-const {
-  composeManifestFetch,
-  manifestFetchCacheMiddleware,
-  wrapManifestFetchWithCache
-} = manifestComposer;
+// eslint-disable-next-line @typescript-eslint/no-explicit-any
+function installVueCliAxiosWebPlugins(Vue, router, deps, extra) {
+    const exposeGlobalVue = extra?.exposeGlobalVue !== false;
+    if (exposeGlobalVue && typeof window !== 'undefined') {
+        window.Vue = Vue;
+    }
+    const { exposeGlobalVue: _skip, ...restExtra } = extra || {};
+    const opts = createVueCliAxiosQuickInstallOptions(router, deps, restExtra);
+    return installWebExtendPluginVue2(Vue, router, opts);
+}
 
 /**
- * 根命名空间：宿主可通过 `WebExtendPluginVue2.presets.vueCliAxios` 等路径发现能力，避免仅依赖散落的具名导出。
- * @type {Readonly<{
- *   install: typeof installWebExtendPluginVue2,
- *   runtime: Readonly<{ bootstrapPlugins: typeof pluginRuntime.bootstrapPlugins, resolveRuntimeOptions: typeof pluginRuntime.resolveRuntimeOptions, defaultFetchWebPluginManifest: typeof pluginRuntime.defaultFetchWebPluginManifest, composeManifestFetch: typeof manifestComposer.composeManifestFetch, manifestFetchCacheMiddleware: typeof manifestComposer.manifestFetchCacheMiddleware, wrapManifestFetchWithCache: typeof manifestComposer.wrapManifestFetchWithCache }>,
- *   host: Readonly<{ createHostApi: typeof createHostApi, disposeWebPlugin: typeof disposeWebPlugin, createRequestBridge: typeof createRequestBridge, registries: typeof registries }>,
- *   config: Readonly<{ defaultWebExtendPluginRuntime: typeof defaultWebExtendPluginRuntime, setWebExtendPluginEnv: typeof setWebExtendPluginEnv }>,
- *   constants: Readonly<{ HOST_PLUGIN_API_VERSION: typeof HOST_PLUGIN_API_VERSION }>,
- *   components: Readonly<{ ExtensionPoint: typeof ExtensionPoint }>,
- *   presets: Readonly<{ vueCliAxios: typeof presetVueCliAxios }>
- * }>}
+ * 包对外稳定导出与 `WebExtendPluginVue2` 命名空间。
  */
+const { bootstrapPlugins, defaultFetchWebPluginManifest, resolveRuntimeOptions, ensurePluginHostRoute } = pluginRuntime;
+const { composeManifestFetch, manifestFetchCacheMiddleware, wrapManifestFetchWithCache } = manifestComposer;
 const WebExtendPluginVue2 = Object.freeze({
-  install: installWebExtendPluginVue2,
-  runtime: Object.freeze({
-    bootstrapPlugins: bootstrapPlugins$1,
-    resolveRuntimeOptions: resolveRuntimeOptions$1,
-    defaultFetchWebPluginManifest: defaultFetchWebPluginManifest$1,
-    composeManifestFetch: composeManifestFetch$1,
-    manifestFetchCacheMiddleware: manifestFetchCacheMiddleware$1,
-    wrapManifestFetchWithCache: wrapManifestFetchWithCache$1
-  }),
-  host: Object.freeze({
-    createHostApi,
-    disposeWebPlugin,
-    createRequestBridge,
-    registries
-  }),
-  config: Object.freeze({
-    defaultWebExtendPluginRuntime,
-    setWebExtendPluginEnv
-  }),
-  constants: Object.freeze({
-    HOST_PLUGIN_API_VERSION
-  }),
-  components: Object.freeze({
-    ExtensionPoint
-  }),
-  presets: Object.freeze({
-    vueCliAxios: presetVueCliAxios
-  })
+    install: installWebExtendPluginVue2,
+    runtime: Object.freeze({
+        bootstrapPlugins: bootstrapPlugins$1,
+        resolveRuntimeOptions: resolveRuntimeOptions$1,
+        ensurePluginHostRoute: ensurePluginHostRoute$1,
+        defaultFetchWebPluginManifest: defaultFetchWebPluginManifest$1,
+        composeManifestFetch: composeManifestFetch$1,
+        manifestFetchCacheMiddleware: manifestFetchCacheMiddleware$1,
+        wrapManifestFetchWithCache: wrapManifestFetchWithCache$1
+    }),
+    host: Object.freeze({
+        createHostApi,
+        disposeWebPlugin,
+        createRequestBridge,
+        registries
+    }),
+    config: Object.freeze({
+        defaultWebExtendPluginRuntime,
+        setWebExtendPluginEnv,
+        webExtendPluginEnvKeys,
+        defaultManifestFetchCache,
+        defaultManifestMode,
+        routeSynthNamePrefix,
+        peerMinimumVersions
+    }),
+    constants: Object.freeze({
+        HOST_PLUGIN_API_VERSION,
+        RUNTIME_CONSOLE_LABEL
+    }),
+    components: Object.freeze({
+        ExtensionPoint
+    }),
+    presets: Object.freeze({
+        vueCliAxios: presetVueCliAxios
+    })
 });
 
 exports.ExtensionPoint = ExtensionPoint;
 exports.HOST_PLUGIN_API_VERSION = HOST_PLUGIN_API_VERSION;
+exports.RUNTIME_CONSOLE_LABEL = RUNTIME_CONSOLE_LABEL;
 exports.WebExtendPluginVue2 = WebExtendPluginVue2;
 exports.bootstrapPlugins = bootstrapPlugins;
 exports.composeManifestFetch = composeManifestFetch;
 exports.createHostApi = createHostApi;
 exports.createRequestBridge = createRequestBridge;
 exports.createVueCliAxiosInstallOptions = createVueCliAxiosInstallOptions;
+exports.createVueCliAxiosQuickInstallOptions = createVueCliAxiosQuickInstallOptions;
 exports.defaultFetchWebPluginManifest = defaultFetchWebPluginManifest;
+exports.defaultManifestFetchCache = defaultManifestFetchCache;
+exports.defaultManifestMode = defaultManifestMode;
+exports.defaultVueCliJavaManifestListPath = defaultVueCliJavaManifestListPath;
 exports.defaultWebExtendPluginRuntime = defaultWebExtendPluginRuntime;
 exports.disposeWebPlugin = disposeWebPlugin;
+exports.ensurePluginHostRoute = ensurePluginHostRoute;
+exports.installVueCliAxiosWebPlugins = installVueCliAxiosWebPlugins;
 exports.installWebExtendPluginVue2 = installWebExtendPluginVue2;
 exports.manifestFetchCacheMiddleware = manifestFetchCacheMiddleware;
-exports.manifestPathForVueCliApiBase = manifestPathForVueCliApiBase;
+exports.peerMinimumVersions = peerMinimumVersions;
 exports.presetVueCliAxios = presetVueCliAxios;
 exports.registries = registries;
+exports.resolveManifestPathUnderApiBase = resolveManifestPathUnderApiBase;
 exports.resolveRuntimeOptions = resolveRuntimeOptions;
+exports.routeSynthNamePrefix = routeSynthNamePrefix;
 exports.setWebExtendPluginEnv = setWebExtendPluginEnv;
-exports.unwrapTableStyleManifestBody = unwrapTableStyleManifestBody;
+exports.unwrapNestedManifestBody = unwrapNestedManifestBody;
+exports.webExtendPluginEnvKeys = webExtendPluginEnvKeys;
 exports.wrapManifestFetchWithCache = wrapManifestFetchWithCache;
 //# sourceMappingURL=index.cjs.map