diff --git a/README.md b/README.md index 2bef3ae..6ab204d 100644 --- a/README.md +++ b/README.md @@ -29,7 +29,7 @@ Served via jsDelivr; fetched automatically during install — you never need to - `arcrun-wait/` — **arcrun-wait**（首裝） - `daemon/` — 桌面 App（Mac／Windows）安裝檔 -Built from `Arcrun@db33cbe907dd` by `installer/scripts/ship.mjs`（arcrun-rag repo，release 1.4.53，built 2026-08-24）。 +Built from `Arcrun@d3019a52cb18` by `installer/scripts/ship.mjs`（arcrun-rag repo，release 1.4.54，built 2026-08-26）。 ⚠️ 這份檔案由出貨管線每次自動重寫（`installer/scripts/render-bundles-readme.mjs`）—— 不要手動改這裡列的零件清單——它是算出來的：公庫＝Arcrun 這一版編了什麼， diff --git a/arcrun-cypher-executor/worker.mjs b/arcrun-cypher-executor/worker.mjs index ab3ba98..d2b3b9e 100644 --- a/arcrun-cypher-executor/worker.mjs +++ b/arcrun-cypher-executor/worker.mjs @@ -2436,7 +2436,7 @@ var init_recipes = __esm({ updated_at: now2 }; await installRecipeRecord(c.env.RECIPES, recipe); - const kbdbBase2 = (c.env.KBDB_BASE_URL ?? "https://kbdb.finally.click").replace(/\/$/, ""); + const kbdbBase3 = (c.env.KBDB_BASE_URL ?? "https://kbdb.finally.click").replace(/\/$/, ""); const evidence = { content: canonicalId, entry_type: "recipe_submission", @@ -2449,12 +2449,12 @@ var init_recipes = __esm({ submitted_at: now2 }) }; - const kbdbHeaders = { "Content-Type": "application/json" }; - if (c.env.KBDB_INTERNAL_TOKEN) kbdbHeaders["Authorization"] = `Bearer ${c.env.KBDB_INTERNAL_TOKEN}`; + const kbdbHeaders2 = { "Content-Type": "application/json" }; + if (c.env.KBDB_INTERNAL_TOKEN) kbdbHeaders2["Authorization"] = `Bearer ${c.env.KBDB_INTERNAL_TOKEN}`; c.executionCtx.waitUntil( - fetch(`${kbdbBase2}/entries`, { + fetch(`${kbdbBase3}/entries`, { method: "POST", - headers: kbdbHeaders, + headers: kbdbHeaders2, body: JSON.stringify(evidence) }).catch(() => void 0) ); @@ -9372,7 +9372,35 @@ async function mutateAuthStore(env, fn, tokenOverride) { } // cypher-executor/src/routes/health.ts +init_kbdb_proxy(); var healthRouter = new Hono2(); +var DATA_LAYER_CACHE_MS = 1e4; +var dataLayerCache = null; +async function dataLayerStatus(env) { + const now2 = Date.now(); + if (dataLayerCache && now2 - dataLayerCache.at < DATA_LAYER_CACHE_MS) return dataLayerCache.block; + let block; + try { + const { base, headers } = kbdbBase(env); + const res = await fetch(`${base}/health`, { headers, signal: AbortSignal.timeout(5e3) }); + const body = await res.json().catch(() => null); + block = body?.data_layer ?? { + ok: false, + reason: "kbdb_health_unreadable", + detail: `HTTP ${res.status}`, + summary: "\u9019\u53F0\u7684 kbdb \u9084\u6C92\u6709\u8CC7\u6599\u5C64\u4E16\u4EE3\u63A2\u91DD\uFF08\u6BD4 Arcrun#159 \u7684\u4FEE\u6CD5\u820A\uFF09\u2014\u2014\u72C0\u614B\u672A\u77E5\u3002" + }; + } catch (e) { + block = { + ok: false, + reason: "kbdb_unreachable", + detail: e instanceof Error ? e.message : String(e), + summary: "\u6253\u4E0D\u5230 kbdb\u2014\u2014\u8CC7\u6599\u5C64\u72C0\u614B\u672A\u77E5\uFF08\u672A\u77E5\u4E0D\u7B49\u65BC\u5065\u5EB7\uFF09\u3002" + }; + } + dataLayerCache = { at: now2, block }; + return block; +} function authStoreStatus(env) { const legacy = readAuthStore(env); return { @@ -9380,11 +9408,14 @@ function authStoreStatus(env) { portal_users: { home: "kbdb", writable: true, legacy_secrets_present: legacy.users.length > 0 } }; } -healthRouter.get("/health", (c) => { +healthRouter.get("/health", async (c) => { const bundleVersion = c.env.ARCRUN_BUNDLE_VERSION; const bundleCommit = c.env.ARCRUN_BUNDLE_COMMIT; + const dataLayer = await dataLayerStatus(c.env); return c.json({ ok: true, + status: dataLayer.ok ? "ok" : "degraded", + data_layer: dataLayer, ...bundleVersion ? { bundle_version: bundleVersion } : {}, ...bundleCommit ? { bundle_commit: bundleCommit } : {}, auth_store: authStoreStatus(c.env), @@ -14818,7 +14849,7 @@ async function cachedGiteaSprint(env, nowMs, waitUntil, fetcher = fetchGiteaSpri consoleDashboardRouter.get("/console/dashboard-data", async (c) => { const tenant2 = knowledgeOwner(c.env); const now2 = Date.now(); - const { base: kbdbUrl, headers: kbdbHeaders } = kbdbBase(c.env); + const { base: kbdbUrl, headers: kbdbHeaders2 } = kbdbBase(c.env); const graphUrl = graphBase(c.env); const [ beatEntries, @@ -14839,8 +14870,8 @@ consoleDashboardRouter.get("/console/dashboard-data", async (c) => { fetchEntries(c.env, tenant2, "dash_wait", 100), fetchEntries(c.env, tenant2, "inbox", 200), cachedGiteaSprint(c.env, now2, (p) => c.executionCtx.waitUntil(p)), - fetchJson(`${kbdbUrl}/health`, kbdbHeaders), - fetchJson(`${kbdbUrl}/embed/backfill/status`, kbdbHeaders), + fetchJson(`${kbdbUrl}/health`, kbdbHeaders2), + fetchJson(`${kbdbUrl}/embed/backfill/status`, kbdbHeaders2), // graph-plugin 只拿來判「圖服務活著沒」（燈號）——數字不從這裡拿，見 fetchTripletTotal。 // headers 一定要帶：plugin 的 /triplets 前綴掛 Bearer 閘，漏帶＝永遠 401＝永遠假紅燈（#100）。 fetchJson( @@ -15048,6 +15079,464 @@ init_webhook_handlers(); // cypher-executor/src/lib/app-system.ts init_kbdb_proxy(); init_webhook_handlers(); + +// cypher-executor/src/lib/asset-keys.ts +var ID_PREFIX = "arcrun"; +function classifyAssetKey(key) { + if (key.startsWith("idx:") || key.startsWith("cron-idx:")) return null; + if (key.startsWith("auth_recipe:")) { + const service = key.slice("auth_recipe:".length); + if (!service) return null; + return { + entry_type: "auth_recipe", + entry_id: `${ID_PREFIX}:auth_recipe:${service}`, + owner_id: null, + page_name: service, + kv_key: key + }; + } + if (key.startsWith("prompt_recipe:")) { + const name = key.slice("prompt_recipe:".length); + if (!name) return null; + return { + entry_type: "prompt_recipe", + entry_id: `${ID_PREFIX}:prompt_recipe:${name}`, + owner_id: null, + page_name: name, + kv_key: key + }; + } + if (key.startsWith("recipe:")) { + const id = key.slice("recipe:".length); + if (!id) return null; + return { + entry_type: "api_recipe", + entry_id: `${ID_PREFIX}:recipe:${id}`, + owner_id: null, + page_name: id, + kv_key: key + }; + } + const appAt = key.indexOf(":app:"); + if (appAt > 0) { + const owner = key.slice(0, appAt); + const id = key.slice(appAt + ":app:".length); + if (!owner || !id) return null; + return { + entry_type: "app_install", + entry_id: `${ID_PREFIX}:app:${owner}:${id}`, + owner_id: owner, + page_name: id, + kv_key: key + }; + } + const wfAt = key.indexOf(":wf:"); + if (wfAt > 0) { + const owner = key.slice(0, wfAt); + const name = key.slice(wfAt + ":wf:".length); + if (!owner || !name) return null; + return { + entry_type: "workflow_def", + entry_id: `${ID_PREFIX}:wf:${owner}:${name}`, + owner_id: owner, + page_name: name, + kv_key: key + }; + } + return null; +} +function assetKvKey(entryType, ownerId, pageName) { + switch (entryType) { + case "workflow_def": + return `${ownerId ?? ""}:wf:${pageName}`; + case "app_install": + return `${ownerId ?? ""}:app:${pageName}`; + case "api_recipe": + return `recipe:${pageName}`; + case "auth_recipe": + return `auth_recipe:${pageName}`; + case "prompt_recipe": + return `prompt_recipe:${pageName}`; + } +} +function classifyListPrefix(prefix) { + if (!prefix) return null; + if (prefix.startsWith("idx:") || prefix.startsWith("cron-idx:")) return null; + if (prefix === "auth_recipe:") return { entry_type: "auth_recipe" }; + if (prefix === "prompt_recipe:") return { entry_type: "prompt_recipe" }; + if (prefix === "recipe:") return { entry_type: "api_recipe" }; + if (prefix.endsWith(":wf:")) { + const owner = prefix.slice(0, -":wf:".length); + if (owner) return { entry_type: "workflow_def", owner_id: owner }; + } + if (prefix.endsWith(":app:")) { + const owner = prefix.slice(0, -":app:".length); + if (owner) return { entry_type: "app_install", owner_id: owner }; + } + return null; +} + +// cypher-executor/src/lib/durable-store.ts +function kbdbBase2(env) { + return (env.KBDB_BASE_URL ?? "https://arcrun-kbdb.uncle6-me.workers.dev").replace(/\/$/, ""); +} +function kbdbHeaders(env) { + const h = { "Content-Type": "application/json" }; + if (env.KBDB_INTERNAL_TOKEN) h["Authorization"] = `Bearer ${env.KBDB_INTERNAL_TOKEN}`; + return h; +} +var KbdbUnavailableError = class extends Error { + constructor(op, detail) { + super( + `\u8CC7\u7522\u7121\u6CD5\u5BEB\u5165 KBDB\uFF08${op}\uFF09\uFF1A${detail}\u3002\u672C\u6B21\u64CD\u4F5C\u5DF2\u4E2D\u6B62\u4E14\u672A\u5BEB\u5165\u4EFB\u4F55\u4E00\u908A\u2014\u2014\u9019\u662F\u523B\u610F\u7684\uFF1A\u5BE7\u53EF\u8B93\u4F60\u73FE\u5728\u770B\u5230\u5931\u6557\uFF0C\u4E5F\u4E0D\u8981\u5BEB\u9032\u53EA\u6703\u88AB\u4E0B\u6B21\u66F4\u65B0\u63DB\u6389\u7684 KV\u3001\u4E8B\u5F8C\u624D\u767C\u73FE\u6771\u897F\u4E0D\u898B\u4E86\uFF08Leo/Arcrun#16\u3001#17\uFF09\u3002` + ); + this.name = "KbdbUnavailableError"; + } +}; +function assetContent(type, def, pageName) { + const d = def ?? {}; + const pick = (...keys) => { + for (const k of keys) { + const v = d[k]; + if (typeof v === "string" && v.trim()) return v.trim(); + } + return ""; + }; + switch (type) { + case "workflow_def": + return pick("description") || pageName; + case "api_recipe": + return pick("description", "display_name", "canonical_id") || pageName; + case "auth_recipe": + return pick("description", "display_name", "service") || pageName; + case "prompt_recipe": + return pick("description", "name") || pageName; + case "app_install": + return pick("name") || pageName; + } +} +function entryToKvValue(entry) { + if (!entry?.metadata_json) return null; + try { + const env = JSON.parse(entry.metadata_json); + if (!env || env.arcrun_asset !== true) return null; + if (typeof env.definition_raw === "string") return env.definition_raw; + if (env.definition === void 0) return null; + return JSON.stringify(env.definition); + } catch { + return null; + } +} +var DurableKv = class { + constructor(kv, env) { + this.kv = kv; + this.env = env; + } + kv; + env; + rehydratedRecipeIdx = false; + rehydratedCronIdx = false; + /** + * 拿回底層那顆真正的 KV。**只有遷移／盤點會用到**（routes/storage.ts）： + * 那兩支的工作正是「比較 KV 那邊有什麼、KBDB 這邊有什麼」， + * 若透過包裝去問，list 會被導去 KBDB，就永遠比不出差異、也搬不動舊資料。 + * 一般業務程式碼不該碰這支——碰了就等於繞過本卷的全部保護。 + */ + get rawKv() { + return this.kv; + } + // ── KBDB 存取原語 ────────────────────────────────────────────────────── + async kbdbGetEntry(entryId) { + const res = await fetch(`${kbdbBase2(this.env)}/entries/${encodeURIComponent(entryId)}`, { + headers: kbdbHeaders(this.env) + }); + if (res.status === 404) return null; + if (!res.ok) return null; + const json = await res.json().catch(() => null); + return json?.entry ?? null; + } + async kbdbListEntries(entryType, ownerId) { + const params = new URLSearchParams({ entry_type: entryType, limit: "1000" }); + if (ownerId) params.set("owner_id", ownerId); + const res = await fetch(`${kbdbBase2(this.env)}/entries?${params.toString()}`, { + headers: kbdbHeaders(this.env) + }); + if (!res.ok) throw new KbdbUnavailableError("list", `HTTP ${res.status}`); + const json = await res.json().catch(() => null); + return json?.entries ?? []; + } + async kbdbPutEntry(ref, envelope) { + const content = assetContent(ref.entry_type, envelope.definition, ref.page_name); + const res = await fetch(`${kbdbBase2(this.env)}/entries/${encodeURIComponent(ref.entry_id)}`, { + method: "PUT", + headers: kbdbHeaders(this.env), + body: JSON.stringify({ + entry_type: ref.entry_type, + owner_id: ref.owner_id, + page_name: ref.page_name, + content, + // 刻意**不**標 embed:true：工作流的語意搜尋走既有的 entry_type='workflow' 那一列 + //（workflow-discovery 方案 C 的雙寫），這裡標了會變成同一支工作流嵌兩份向量。 + metadata_json: JSON.stringify(envelope) + }) + }); + if (!res.ok) throw new KbdbUnavailableError("put", `HTTP ${res.status} @ ${ref.entry_id}`); + } + async kbdbDeleteEntry(entryId) { + const res = await fetch(`${kbdbBase2(this.env)}/entries/${encodeURIComponent(entryId)}`, { + method: "DELETE", + headers: kbdbHeaders(this.env) + }); + if (!res.ok && res.status !== 404) throw new KbdbUnavailableError("delete", `HTTP ${res.status} @ ${entryId}`); + } + // ── 衍生索引重建（讀不到就重算，不進 KBDB）──────────────────────────── + /** + * 從 KBDB 的 api_recipe 列重建 recipe 反查索引： + * idx:{hash_id} → canonical_id + * idx:canonical:{canonical} → [uuid, ...] + * idx:installed:{canonical} → uuid + * + * installed 的還原順序：先看資產自己標的 installed 旗標（正常路徑，寫入時就記下了， + * 見 put() 對 `idx:installed:` 的處理）；同一個 canonical 沒有任何一版標記時 + *（＝遷移之前就存在的舊資料），退而取 updated_at 最新的那一版——因為 + * installRecipeRecord 的語意本來就是「最後寫入的那版即為安裝版」。 + * 這是還原不是猜測，但仍是**退路**，故在此寫明白。 + */ + async rehydrateRecipeIndices() { + if (this.rehydratedRecipeIdx) return; + this.rehydratedRecipeIdx = true; + const entries = await this.kbdbListEntries("api_recipe"); + const byCanonical = /* @__PURE__ */ new Map(); + const writes = []; + for (const e of entries) { + const raw2 = entryToKvValue(e); + if (!raw2) continue; + let def; + try { + def = JSON.parse(raw2); + } catch { + continue; + } + if (!def.canonical_id) continue; + if (def.hash_id) writes.push(this.kv.put(`idx:${def.hash_id}`, def.canonical_id)); + if (!def.uuid) continue; + let installed = false; + try { + installed = JSON.parse(e.metadata_json ?? "{}").installed === true; + } catch { + } + const list = byCanonical.get(def.canonical_id) ?? []; + list.push({ uuid: def.uuid, installed, updated_at: e.updated_at ?? 0 }); + byCanonical.set(def.canonical_id, list); + } + for (const [canonical, versions] of byCanonical) { + writes.push(this.kv.put(`idx:canonical:${canonical}`, JSON.stringify(versions.map((v) => v.uuid)))); + const chosen = versions.find((v) => v.installed) ?? versions.reduce((a, b) => b.updated_at > a.updated_at ? b : a); + writes.push(this.kv.put(`idx:installed:${canonical}`, chosen.uuid)); + } + await Promise.all(writes); + } + /** 從 KBDB 的 workflow_def 列重建 cron 索引（單一 key，見 lib/cron-index.ts）。 */ + async rehydrateCronIndex() { + if (this.rehydratedCronIdx) return; + this.rehydratedCronIdx = true; + const entries = await this.kbdbListEntries("workflow_def"); + const index = {}; + for (const e of entries) { + const raw2 = entryToKvValue(e); + if (!raw2) continue; + let def; + try { + def = JSON.parse(raw2); + } catch { + continue; + } + if (!def.cron_expr || !e.owner_id || !e.page_name) continue; + index[cronEntryKey(e.owner_id, e.page_name)] = def.cron_expr; + } + await this.kv.put(CRON_INDEX_KEY, JSON.stringify(index)); + } + // ── KVNamespace 介面 ─────────────────────────────────────────────────── + async get(key, type) { + const t0 = typeof type === "string" ? type : type?.type; + if (t0 === "arrayBuffer" || t0 === "stream") return this.kv.get(key, t0); + const asText = (raw2) => { + if (raw2 === null) return null; + const t = typeof type === "string" ? type : type?.type; + if (t === "json") { + try { + return JSON.parse(raw2); + } catch { + return null; + } + } + return raw2; + }; + const ref = classifyAssetKey(key); + if (!ref) { + const raw2 = await this.kv.get(key, "text"); + if (raw2 !== null) return asText(raw2); + if (key.startsWith("idx:")) { + await this.rehydrateRecipeIndices().catch(() => { + }); + return asText(await this.kv.get(key, "text")); + } + if (key === CRON_INDEX_KEY) { + await this.rehydrateCronIndex().catch(() => { + }); + return asText(await this.kv.get(key, "text")); + } + return asText(raw2); + } + const cached = await this.kv.get(key, "text"); + if (cached !== null) return asText(cached); + const fromKbdb = entryToKvValue(await this.kbdbGetEntry(ref.entry_id)); + if (fromKbdb === null) return asText(null); + await this.kv.put(key, fromKbdb).catch(() => { + }); + return asText(fromKbdb); + } + async put(key, value, options) { + if (options?.expirationTtl || options?.expiration || typeof value !== "string") { + return this.kv.put(key, value, options); + } + if (key.startsWith("idx:installed:")) { + await this.kv.put(key, value, options); + await this.markInstalledVersion(key.slice("idx:installed:".length), value).catch(() => { + }); + return; + } + const ref = classifyAssetKey(key); + if (!ref) return this.kv.put(key, value, options); + let definition; + let definitionRaw; + try { + definition = JSON.parse(value); + } catch { + definitionRaw = value; + } + const previous = ref.entry_type === "api_recipe" ? await this.readEnvelope(ref) : null; + await this.kbdbPutEntry(ref, { + arcrun_asset: true, + kv_key: key, + ...definitionRaw !== void 0 ? { definition_raw: definitionRaw } : { definition }, + ...previous?.installed ? { installed: true } : {} + }); + await this.kv.put(key, value, options); + } + async delete(key) { + const ref = classifyAssetKey(key); + if (ref) await this.kbdbDeleteEntry(ref.entry_id); + await this.kv.delete(key); + } + async list(options) { + const target = classifyListPrefix(options?.prefix ?? void 0); + if (!target) return this.kv.list(options); + const entries = await this.kbdbListEntries(target.entry_type, target.owner_id); + const keys = []; + const warm = []; + for (const e of entries) { + if (!e.page_name) continue; + if (target.entry_type === "workflow_def" && !e.owner_id) continue; + const name = assetKvKey(target.entry_type, e.owner_id ?? null, e.page_name); + keys.push({ name }); + const raw2 = entryToKvValue(e); + if (raw2 !== null) warm.push(this.kv.put(name, raw2).catch(() => { + })); + } + await Promise.all(warm); + if (target.entry_type === "app_install") { + const seen = new Set(keys.map((k) => k.name)); + const fromKv = await this.kv.list({ prefix: options?.prefix ?? void 0 }); + const heal = []; + for (const k of fromKv.keys) { + if (seen.has(k.name)) continue; + keys.push({ name: k.name }); + heal.push( + (async () => { + const raw2 = await this.kv.get(k.name, "text"); + if (raw2 === null) return; + const ref = classifyAssetKey(k.name); + if (!ref) return; + let definition; + let definitionRaw; + try { + definition = JSON.parse(raw2); + } catch { + definitionRaw = raw2; + } + await this.kbdbPutEntry(ref, { + arcrun_asset: true, + kv_key: k.name, + ...definitionRaw !== void 0 ? { definition_raw: definitionRaw } : { definition } + }); + })().catch(() => { + }) + ); + } + await Promise.all(heal); + } + return { keys, list_complete: true, cacheStatus: null }; + } + /** KVNamespace 介面補齊（本 worker 沒有呼叫端在用，原樣轉發，不做資產處理）。 */ + getWithMetadata(key, type) { + return this.kv.getWithMetadata(key, type); + } + // ── 內部小工具 ───────────────────────────────────────────────────────── + async readEnvelope(ref) { + const entry = await this.kbdbGetEntry(ref.entry_id); + if (!entry?.metadata_json) return null; + try { + const env = JSON.parse(entry.metadata_json); + return env?.arcrun_asset === true ? env : null; + } catch { + return null; + } + } + /** 把「這個 canonical 目前裝的是哪一版」記進該版 recipe 的信封（同 canonical 的其他版清掉旗標）。 */ + async markInstalledVersion(canonicalId, uuid) { + const entries = await this.kbdbListEntries("api_recipe"); + const jobs = []; + for (const e of entries) { + const raw2 = entryToKvValue(e); + if (!raw2) continue; + let def; + try { + def = JSON.parse(raw2); + } catch { + continue; + } + if (def.canonical_id !== canonicalId || !def.uuid) continue; + const shouldBeInstalled = def.uuid === uuid; + let envelope; + try { + envelope = JSON.parse(e.metadata_json ?? "{}"); + } catch { + continue; + } + if (envelope.installed === true === shouldBeInstalled) continue; + envelope.installed = shouldBeInstalled; + jobs.push( + fetch(`${kbdbBase2(this.env)}/entries/${encodeURIComponent(e.id)}`, { + method: "PATCH", + headers: kbdbHeaders(this.env), + body: JSON.stringify({ metadata_json: JSON.stringify(envelope) }) + }) + ); + } + await Promise.all(jobs); + } +}; + +// cypher-executor/src/lib/app-system.ts +function appStore(env) { + return new DurableKv(env.WEBHOOKS, env); +} +function kbdbBehindHint(e) { + const msg = e instanceof Error ? `${e.name}: ${e.message}` : String(e); + if (!msg.includes("KbdbUnavailable")) return null; + return "\u9019\u53F0\u5BE6\u4F8B\u7684\u77E5\u8B58\u5EAB\uFF08KBDB\uFF09\u6C92\u6709\u56DE\u61C9\uFF0C\u6216\u5B83\u7684\u7248\u672C\u6BD4\u76EE\u524D\u7684\u7A0B\u5F0F\u78BC\u820A\u2014\u2014\u5B89\u88DD\u9700\u8981\u77E5\u8B58\u5EAB\u63D0\u4F9B\u300C\u540C\u4E00\u4EFD\u8CC7\u7522\u6C38\u9060\u540C\u4E00\u5217\u300D\u7684\u5BEB\u5165\u80FD\u529B\u3002\u8ACB\u7BA1\u7406\u8005\u628A\u77E5\u8B58\u5EAB\u4E00\u8D77\u66F4\u65B0\u5230\u540C\u4E00\u7248\uFF1B\u5728\u90A3\u4E4B\u524D**\u5DF2\u7D93\u88DD\u597D\u7684 App \u4E0D\u53D7\u5F71\u97FF**\uFF0C\u7167\u5E38\u53EF\u7528\u3002"; +} var APP_UI_STYLES = ["inherit", "own"]; var DEFAULT_APP_UI_STYLE = "inherit"; var ID_RE = /^[a-z][a-z0-9_-]{0,63}$/; @@ -15119,6 +15608,17 @@ function validateAppDeclaration(raw2) { } if (d.actions !== void 0 && (!Array.isArray(d.actions) || d.actions.some((a) => typeof a !== "string"))) { errors.push("actions \u5FC5\u9808\u662F\u5B57\u4E32\u9663\u5217"); + } else if (Array.isArray(d.actions) && Array.isArray(d.workflows)) { + const wfNames = new Set( + d.workflows.map((w) => w && typeof w === "object" ? w.name : void 0).filter((n) => typeof n === "string") + ); + for (const a of d.actions) { + if (!wfNames.has(a)) { + errors.push( + `actions \u88E1\u7684\u300C${a}\u300D\u627E\u4E0D\u5230\u540C\u540D\u7684 workflow\uFF08\u52D5\u4F5C\u540D\u5C31\u662F\u5DE5\u4F5C\u6D41\u672C\u5730\u540D\uFF09\u3002\u9019\u4EFD\u5BA3\u544A\u7684\u5DE5\u4F5C\u6D41\u662F\uFF1A${[...wfNames].join("\uFF0F") || "\uFF08\u4E00\u500B\u90FD\u6C92\u6709\uFF09"}` + ); + } + } } return { ok: errors.length === 0, errors }; } @@ -15143,6 +15643,26 @@ function applyDeclarationDefaults(raw2) { keeps_data: raw2.remove?.keeps_data ?? true }; } +var APP_PLACEHOLDERS = ["__NAMESPACE__", "__CYPHER_BASE__"]; +function resolveDeclarationPlaceholders(value, coords) { + const base = coords.cypherBase.replace(/\/+$/, ""); + const swap = (s) => s.split("__NAMESPACE__").join(coords.namespace).split("__CYPHER_BASE__").join(base); + const walk = (v) => { + if (typeof v === "string") return swap(v); + if (Array.isArray(v)) return v.map(walk); + if (v && typeof v === "object") { + const out = {}; + for (const [k, val] of Object.entries(v)) out[swap(k)] = walk(val); + return out; + } + return v; + }; + return walk(value); +} +function remainingPlaceholders(value) { + const text = JSON.stringify(value) ?? ""; + return APP_PLACEHOLDERS.filter((p) => text.includes(p)); +} async function computeContentHash(raw2) { const canonical = canonicalize(raw2); const data = new TextEncoder().encode(canonical); @@ -15164,7 +15684,7 @@ function workflowKvKey(tenant2, wfKey) { return `${tenant2}:wf:${wfKey}`; } async function getInstalledApp(env, tenant2, id) { - const raw2 = await env.WEBHOOKS.get(appKey(tenant2, id), "text"); + const raw2 = await appStore(env).get(appKey(tenant2, id), "text"); if (!raw2) return null; try { return JSON.parse(raw2); @@ -15174,10 +15694,10 @@ async function getInstalledApp(env, tenant2, id) { } async function listInstalledApps(env, tenant2) { const prefix = `${tenant2}:app:`; - const list = await env.WEBHOOKS.list({ prefix }); + const list = await appStore(env).list({ prefix }); const apps = await Promise.all( list.keys.map(async (k) => { - const raw2 = await env.WEBHOOKS.get(k.name, "text"); + const raw2 = await appStore(env).get(k.name, "text"); if (!raw2) return null; try { return JSON.parse(raw2); @@ -15201,36 +15721,83 @@ async function ensureTemplate(env, name, slots, description) { body: JSON.stringify({ name, slots, description }) }); } -async function installApp(env, tenant2, rawDecl) { - const validation = validateAppDeclaration(rawDecl); - if (!validation.ok) return { ok: false, errors: validation.errors }; - const decl = applyDeclarationDefaults(rawDecl); - const contentHash = await computeContentHash(rawDecl); +async function installApp(env, tenant2, rawDecl, opts = {}) { + let decl0 = rawDecl; + if (opts.coords) { + try { + decl0 = resolveDeclarationPlaceholders(rawDecl, opts.coords); + } catch (e) { + return { + ok: false, + step: "\u88DC\u4E0A\u9019\u53F0\u5BE6\u4F8B\u7684\u4F4D\u5740", + errors: [e instanceof Error ? e.message : String(e)], + hint: "\u9019\u662F\u7CFB\u7D71\u5167\u90E8\u7684\u554F\u984C\uFF0C\u4E0D\u662F\u4F60\u505A\u932F\u4E86\u3002\u628A\u9019\u53E5\u8A71\u56DE\u5831\u7D66\u7BA1\u7406\u8005\u5373\u53EF\u3002" + }; + } + } + const left = remainingPlaceholders(decl0); + if (left.length > 0) { + return { + ok: false, + step: "\u88DC\u4E0A\u9019\u53F0\u5BE6\u4F8B\u7684\u4F4D\u5740", + errors: [`\u9019\u4EFD\u5BA3\u544A\u88E1\u9084\u6709\u6C92\u586B\u7684\u4F4D\u7F6E\uFF1A${left.join("\u3001")}`], + hint: "\u9019\u500B App \u7684\u4F5C\u8005\u7559\u4E86\u8981\u7531\u5BE6\u4F8B\u586B\u7684\u6B04\u4F4D\uFF0C\u4F46\u9019\u53F0\u5BE6\u4F8B\u6C92\u586B\u5F97\u8D77\u4F86\u3002\u8ACB\u56DE\u5831\u7D66\u7BA1\u7406\u8005\u3002" + }; + } + const validation = validateAppDeclaration(decl0); + if (!validation.ok) { + return { + ok: false, + step: "\u6AA2\u67E5\u9019\u500B App \u7684\u5BA3\u544A", + errors: validation.errors, + hint: "\u9019\u662F App \u4F5C\u8005\u90A3\u908A\u8981\u4FEE\u7684\uFF0C\u91CD\u8A66\u4E0D\u6703\u8B8A\u597D\u3002\u628A\u4E0A\u9762\u9019\u5E7E\u884C\u539F\u6587\u56DE\u5831\u7D66\u9019\u500B App \u7684\u4F5C\u8005\u3002" + }; + } + const decl = applyDeclarationDefaults(decl0); + const contentHash = await computeContentHash(decl0); const existing = await getInstalledApp(env, tenant2, decl.id); if (existing && existing.content_hash === contentHash && existing.status === "active") { return { ok: true, changed: false, app: existing }; } - for (const dt of decl.data) { - await ensureTemplate(env, dt.name, dt.slots, dt.description); + try { + for (const dt of decl.data) { + await ensureTemplate(env, dt.name, dt.slots, dt.description); + } + } catch (e) { + return { + ok: false, + step: "\u6E96\u5099\u8CC7\u6599\u578B\u5225", + errors: [e instanceof Error ? e.message : String(e)], + hint: "\u9019\u53F0\u5BE6\u4F8B\u7684\u77E5\u8B58\u5EAB\u670D\u52D9\u6C92\u6709\u56DE\u61C9\u3002\u7A0D\u7B49\u4E00\u5206\u9418\u518D\u6309\u4E00\u6B21\u5B89\u88DD\uFF1B\u4E00\u76F4\u5931\u6557\u5C31\u628A\u9019\u53E5\u8A71\u56DE\u5831\u7D66\u7BA1\u7406\u8005\u3002" + }; } const workflowRefs = []; - for (const wf of decl.workflows) { - const wfKey = `${decl.id}__${wf.name}`; - await env.WEBHOOKS.put( - workflowKvKey(tenant2, wfKey), - JSON.stringify({ - graph: wf.graph, - description: wf.description || `${decl.name}: ${wf.name}`, - created_at: existing?.installed_at ?? (/* @__PURE__ */ new Date()).toISOString() - }) - ); - workflowRefs.push({ name: wf.name, wf_key: wfKey, description: wf.description || "" }); + try { + for (const wf of decl.workflows) { + const wfKey = `${decl.id}__${wf.name}`; + await appStore(env).put( + workflowKvKey(tenant2, wfKey), + JSON.stringify({ + graph: wf.graph, + description: wf.description || `${decl.name}: ${wf.name}`, + created_at: existing?.installed_at ?? (/* @__PURE__ */ new Date()).toISOString() + }) + ); + workflowRefs.push({ name: wf.name, wf_key: wfKey, description: wf.description || "" }); + } + } catch (e) { + return { + ok: false, + step: "\u5B89\u88DD\u5DE5\u4F5C\u6D41", + errors: [e instanceof Error ? e.message : String(e)], + hint: kbdbBehindHint(e) ?? `\u5DF2\u7D93\u88DD\u4E0A ${workflowRefs.length}\uFF0F${decl.workflows.length} \u689D\u3002\u518D\u6309\u4E00\u6B21\u5B89\u88DD\u6703\u5F9E\u982D\u8986\u5BEB\u4E00\u904D\uFF1B\u4E00\u76F4\u5931\u6557\u5C31\u628A\u9019\u53E5\u8A71\u56DE\u5831\u7D66\u7BA1\u7406\u8005\u3002` + }; } if (existing) { const keepKeys = new Set(workflowRefs.map((w) => w.wf_key)); for (const prev of existing.workflows) { if (!keepKeys.has(prev.wf_key)) { - await env.WEBHOOKS.delete(workflowKvKey(tenant2, prev.wf_key)); + await appStore(env).delete(workflowKvKey(tenant2, prev.wf_key)); } } } @@ -15252,16 +15819,32 @@ async function installApp(env, tenant2, rawDecl) { updated_at: (/* @__PURE__ */ new Date()).toISOString(), status: "active" }; - await env.WEBHOOKS.put(appKey(tenant2, decl.id), JSON.stringify(record)); + try { + await appStore(env).put(appKey(tenant2, decl.id), JSON.stringify(record)); + } catch (e) { + return { + ok: false, + step: "\u5BEB\u5165\u5B89\u88DD\u7D00\u9304", + errors: [e instanceof Error ? e.message : String(e)], + hint: kbdbBehindHint(e) ?? "\u5DE5\u4F5C\u6D41\u5DF2\u7D93\u88DD\u597D\u4E86\uFF0C\u53EA\u5DEE\u6700\u5F8C\u9019\u4E00\u7B46\u7D00\u9304\u2014\u2014\u518D\u6309\u4E00\u6B21\u5B89\u88DD\u5C31\u6703\u88DC\u4E0A\u3002" + }; + } return { ok: true, changed: true, app: record }; } async function uninstallApp(env, tenant2, id) { const existing = await getInstalledApp(env, tenant2, id); if (!existing) return { ok: false, error: "\u9019\u500B App \u6C92\u6709\u5B89\u88DD\u7D00\u9304" }; - for (const wf of existing.workflows) { - await env.WEBHOOKS.delete(workflowKvKey(tenant2, wf.wf_key)); + try { + for (const wf of existing.workflows) { + await appStore(env).delete(workflowKvKey(tenant2, wf.wf_key)); + } + await appStore(env).delete(appKey(tenant2, id)); + } catch (e) { + return { + ok: false, + error: kbdbBehindHint(e) ?? `\u79FB\u9664\u5931\u6557\uFF1A${e instanceof Error ? e.message : String(e)}` + }; } - await env.WEBHOOKS.delete(appKey(tenant2, id)); return { ok: true }; } async function runAppAction(env, tenant2, appId, action, payload, ctx) { @@ -15272,7 +15855,7 @@ async function runAppAction(env, tenant2, appId, action, payload, ctx) { } const wfRef = app2.workflows.find((w) => w.name === action); if (!wfRef) return { ok: false, status: 500, error: "\u52D5\u4F5C\u5C0D\u61C9\u7684\u5DE5\u4F5C\u6D41\u907A\u5931\uFF08\u5B89\u88DD\u614B\u640D\u6BC0\uFF09" }; - const raw2 = await env.WEBHOOKS.get(workflowKvKey(tenant2, wfRef.wf_key), "text"); + const raw2 = await appStore(env).get(workflowKvKey(tenant2, wfRef.wf_key), "text"); if (!raw2) return { ok: false, status: 500, error: "\u5DE5\u4F5C\u6D41\u8CC7\u6599\u907A\u5931\uFF08\u5B89\u88DD\u614B\u640D\u6BC0\uFF09" }; let graph; try { @@ -15307,6 +15890,899 @@ function detailApp(app2) { }; } +// cypher-executor/src/lib/app-catalog/notes.json +var notes_default = { + id: "notes", + name: "\u7B46\u8A18", + icon: "\u{1F4DD}", + workflows: [ + { + name: "create_note", + description: "\u6536\u4E00\u6BB5 markdown \u5167\u5BB9\uFF08\u53EF\u9078\u65E5\u671F\uFF09\uFF0C\u5BEB\u5165\u4E00\u7B46 note record\uFF0C\u56DE\u50B3\u6574\u7406\u904E\u7684\u4E7E\u6DE8\u6B04\u4F4D \uFF08\u4E0D\u662F KBDB \u539F\u59CB\u56DE\u61C9\u2014\u2014\u90A3\u500B\u8981\u547C\u53EB\u7AEF\u81EA\u5DF1\u525D body \u5B57\u4E32\uFF0C\u4E0D\u8A72\u8B93\u524D\u7AEF\u505A\u9019\u4EF6\u4E8B\uFF09\u3002\n", + graph: { + id: "notes_create", + name: "notes_create", + nodes: [ + { + id: "input", + type: "Input", + label: "input" + }, + { + id: "prep", + type: "Component", + label: "prep", + componentId: "code", + data: { + code: `// \u{1F534} \u771F\u5BE6\u8E29\u904E\u7684\u5751\uFF08\u672C\u6A5F\u7528 matrix/arcrun \u7684 GraphExecutor \u771F\u8DD1\u904E\u624D\u767C\u73FE\uFF0C\u4E0D\u662F\u731C\u7684\uFF09\uFF1A +// {{input.xxx}} \u5728 xxx \u9019\u500B key \u771F\u7684\u4E0D\u5B58\u5728\u6642\uFF0CGraphExecutor \u7684 interpolateString +// \u6703\u56DE\u300C\u539F\u6A23\u4FDD\u7559\u9019\u500B {{...}} \u5B57\u9762\u5B57\u4E32\u300D\uFF0C\u4E0D\u662F undefined\u3001\u4E5F\u4E0D\u662F\u7A7A\u5B57\u4E32 +// \uFF08matrix/arcrun/cypher-executor/src/graph-executor.ts interpolateString \u7684\u65E2\u6709\u8A2D\u8A08\uFF1A +// \u300C\u627E\u4E0D\u5230\u5C31\u4FDD\u7559\u5B57\u9762\u5B57\u4E32\u300D\uFF0C\u662F\u5F15\u64CE\u6545\u610F\u7684\u884C\u70BA\uFF0C\u4E0D\u662F bug\uFF09\u3002 +// \u21D2 \u547C\u53EB\u7AEF\u6F0F\u5E36 date \u6642\uFF0C\u9019\u88E1\u6536\u5230\u7684 input.date \u4E0D\u662F undefined\uFF0C\u662F\u5B57\u4E32 "{{input.date}}" +// \u2014\u2014\u82E5\u53EA\u5224\u65B7 == null || === ''\uFF0C\u9019\u500B\u5B57\u9762\u5B57\u4E32\u6703\u88AB\u8AA4\u5224\u6210\u300C\u6709\u7D66\u503C\u300D\uFF0C +// \u7136\u5F8C\u5728 YYYY-MM-DD \u683C\u5F0F\u6AA2\u67E5\u90A3\u95DC\u5931\u6557\uFF0C\u8B93\u300C\u4E0D\u5E36 date \u5C31\u7528\u4ECA\u5929\u300D\u6574\u500B\u5931\u6548\u3002 +// \u4FEE\u6CD5\uFF1A\u591A\u5224\u4E00\u7A2E\u300C\u770B\u8D77\u4F86\u50CF\u6C92\u89E3\u958B\u7684\u6A21\u677F\u300D\u7684\u5F62\u72C0\uFF0C\u8996\u540C\u6C92\u7D66\u3002 +function provided(v) { + if (typeof v !== 'string') return false; + var t = v.trim(); + return t !== '' && !/^\\{\\{[\\s\\S]*\\}\\}$/.test(t); +} +const content = provided(input.content) ? String(input.content).trim() : ''; +if (!content) return { success: false, error: 'content \u4E0D\u53EF\u70BA\u7A7A\uFF08\u7B46\u8A18\u81F3\u5C11\u8981\u6709\u5167\u5BB9\uFF09' }; +const now = new Date(); +const rawDate = provided(input.date) ? String(input.date).trim() : now.toISOString().slice(0, 10); +if (!/^\\d{4}-\\d{2}-\\d{2}$/.test(rawDate)) { + return { success: false, error: 'date \u5FC5\u9808\u662F YYYY-MM-DD \u683C\u5F0F\uFF08\u6536\u5230\uFF1A' + rawDate + '\uFF09' }; +} +return { success: true, content: content, date: rawDate, created_at: now.toISOString() }; +`, + input: { + content: "{{input.content}}", + date: "{{input.date}}" + }, + limits: { + timeout_ms: 1e3, + max_output_bytes: 8192 + } + } + }, + { + id: "write_note", + type: "Component", + label: "write_note", + componentId: "http_request", + data: { + method: "POST", + url: "__CYPHER_BASE__/kbdb/records", + headers: { + "Content-Type": "application/json", + "X-Arcrun-API-Key": "__NAMESPACE__" + }, + body_json: { + template: "note", + values: { + date: "{{prep.data.date}}", + content: "{{prep.data.content}}", + created_at: "{{prep.data.created_at}}" + } + } + } + }, + { + id: "extract_note", + type: "Component", + label: "extract_note", + componentId: "code", + data: { + code: "function parse(b) { if (typeof b === 'string') { try { return JSON.parse(b); } catch (e) { return null; } } return b; }\nconst body = parse(input.body);\nif (!body || body.success !== true || !body.record) {\n return { success: false, error: (body && body.error) || 'KBDB \u5BEB\u5165\u6C92\u6709\u56DE\u53EF\u7528\u7684 record' };\n}\nconst v = body.record.values || {};\nreturn {\n success: true,\n record_id: body.record.record_id,\n date: v.date || '',\n content: v.content || '',\n created_at: v.created_at || '',\n};\n", + input: { + body: "{{write_note.data.body}}" + }, + limits: { + timeout_ms: 1e3, + max_output_bytes: 65536 + } + } + } + ], + edges: [ + { + from: "input", + to: "prep", + type: "ON_SUCCESS" + }, + { + from: "prep", + to: "write_note", + type: "ON_SUCCESS" + }, + { + from: "write_note", + to: "extract_note", + type: "ON_SUCCESS" + } + ] + } + }, + { + name: "list_notes", + description: "\u53D6\u56DE\u6CB3\u9053\uFF1A\u9810\u8A2D\u5168\u90E8\uFF08\u4F9D created_at \u65B0\u5230\u820A\uFF09\uFF0C\u5E36 date \u53EA\u56DE\u90A3\u4E00\u5929\u7684\u7B46\u8A18\u3002\n", + graph: { + id: "notes_list", + name: "notes_list", + nodes: [ + { + id: "input", + type: "Input", + label: "input" + }, + { + id: "fetch_notes", + type: "Component", + label: "fetch_notes", + componentId: "http_request", + data: { + method: "GET", + url: "__CYPHER_BASE__/kbdb/records/by-template/note?limit=500", + headers: { + Accept: "application/json", + "X-Arcrun-API-Key": "__NAMESPACE__" + } + } + }, + { + id: "filter_sort", + type: "Component", + label: "filter_sort", + componentId: "code", + data: { + code: "// \u{1F534} \u771F\u5BE6\u8E29\u904E\u7684\u5751\uFF08\u672C\u6A5F\u7528 matrix/arcrun \u7684 GraphExecutor \u771F\u8DD1\u904E\u624D\u767C\u73FE\u2014\u2014\n// \u4E0D\u52A0\u9019\u6BB5\u9632\u8B77\u6642\uFF0C\u300C\u4E0D\u5E36 date\uFF1D\u67E5\u5168\u90E8\u300D\u9019\u500B\u6700\u5E38\u7528\u7684\u9810\u8A2D\u8DEF\u5F91\u6703\u975C\u9ED8\u56DE\u50B3 0 \u7B46\uFF0C\n// \u8A73\u7D30\u6210\u56E0\u898B notes-create.yaml \u7684 prep \u7BC0\u9EDE\u540C\u6B3E\u8A3B\u89E3\uFF0C\u9019\u88E1\u4E0D\u91CD\u8907\u8CBC\u4E00\u6B21\uFF09\u3002\nfunction provided(v) {\n if (typeof v !== 'string') return false;\n var t = v.trim();\n return t !== '' && !/^\\{\\{[\\s\\S]*\\}\\}$/.test(t);\n}\nfunction parse(b) { if (typeof b === 'string') { try { return JSON.parse(b); } catch (e) { return null; } } return b; }\nconst body = parse(input.body) || {};\nconst records = Array.isArray(body.records) ? body.records : [];\nconst wantDate = provided(input.date) ? String(input.date).trim() : '';\nlet notes = records.map(function (r) {\n const v = r.values || {};\n return {\n record_id: r.record_id,\n date: v.date || '',\n content: v.content || '',\n created_at: v.created_at || ''\n };\n});\nif (wantDate) notes = notes.filter(function (n) { return n.date === wantDate; });\nnotes.sort(function (a, b) { return (b.created_at || '').localeCompare(a.created_at || ''); });\nreturn { success: true, notes: notes, count: notes.length, date: wantDate || null };\n", + input: { + body: "{{fetch_notes.data.body}}", + date: "{{input.date}}" + }, + limits: { + timeout_ms: 3e3, + max_output_bytes: 4194304 + } + } + } + ], + edges: [ + { + from: "input", + to: "fetch_notes", + type: "ON_SUCCESS" + }, + { + from: "fetch_notes", + to: "filter_sort", + type: "ON_SUCCESS" + } + ] + } + } + ], + ui: { + html: ` + + + + +\u7B46\u8A18 + + + + +
+ + +
+

\u7B46\u8A18

+
+ +
+ + +
+
+
+
+ +
+ + \u5C0F\u65E5\u66C6 + + + \u25BE +
+ + +
+
\u8F09\u5165\u4E2D\u2026
+
+
+ +\n\n\n\n\n\n
\n
\n
Arcrun　駕駛艙
\n
\n
\n \n
\n
\n
\n
…
\n
\n
載入中
\n
\n
\n
\n
\n
\n
今日完成
\n
– / – 件
\n
\n
\n
\n
收件匣未處理
\n
– 條
\n
來自 Telegram
\n
\n
\n
\n
等你的事
\n
載入中…
\n
\n
\n
今日路線
\n \n
本週
\n \n
系統狀況live 健康信號
\n
載入中…
\n
每 60 秒自動刷新
\n 進入完整控制台 ›\n
\n\n\n\n"},"/console/index.html":{"type":"text/html; charset=utf-8","b64":false,"data":"\n\n\n\n\nArcrun Console\n\n\n\n\n\n\n\n\n
\n
\n
\n
Arcrun
\n
私人系統・僅供擁有者進入
\n
\n
\n \n \n \n
\n
\n
這是一個人的智慧總部。
若你不是擁有者，這裡沒有你要找的東西。
\n \n \n
\n
\n\n\n
\n
\n
\n
Arcrun
\n
首次設定
\n
系統偵測到尚未設定擁有者帳號。
設定一組 Email 與密碼，之後只有你能進入。
\n
\n
\n \n \n \n \n
\n
\n \n
\n
\n\n\n
\n
\n
Arcrun
\n \n
總庫搜尋
\n
工作流
\n \n
設定
\n
☾ 切深色
\n
\n
\n
\n\n \n
\n
Arcrun　控制台
\n
\n
\n
\n
…
\n
\n
載入中
\n
\n
\n
\n
\n
\n
今日完成
\n
– / – 件
\n
\n
\n
\n
收件匣未處理
\n
– 條
\n
來自 Telegram
\n
\n
\n
\n
等你的事
\n
載入中…
\n
\n
\n
\n
\n
\n 今日路線狀態即時同步\n
\n
  • ○載入中…
\n
本週
\n
    \n
    每 60 秒自動刷新
    \n
    \n
    \n
    \n\n \n
    \n
    總庫搜尋
    \n
    \n
    \n
    \n 藏書地圖\n
    \n
    地圖載入中…
    \n
    \n
    \n
    \n \n \n
    \n
    \n
    \n
    \n
    \n
    \n
    \n
    \n\n \n
    \n
    \n \n 知識卡片\n
    \n
    \n
    載入中…
    \n
    \n
    關聯視圖
    \n
    \n
    \n
    \n
    \n
    \n\n \n
    \n
    工作流
    \n \n
    載入中…
    \n
    \n
    零件與 Recipes（框架資源）
    \n
    \n \n \n
    \n
    \n
    \n
    \n\n \n
    \n
    憑證管理
    \n
    \n 🛡 保險箱原則：系統只保存目錄與加密後的值，任何頁面都看不到密文內容。只能整筆替換或刪除。\n
    \n
    \n
    新增憑證
    \n
    \n \n \n \n \n
    \n
    \n
    \n
    載入中…
    \n
    \n\n \n
    \n
    分流台全部待辦・80/15/5
    \n
    \n
    載入中…
    \n
    \n\n \n
    \n
    設定
    \n
    \n
    \n
    \n
    \n
    深色模式
    \n
    預設淺色（紙感）。切換立即生效，選擇記在這台裝置（localStorage）。
    \n
    \n
    \n
    \n
    \n
    \n \n
    語意搜尋
    \n
    狀態偵測中…
    \n
    \n
    \n
    \n
    MCP token 有效期（TTL）
    \n
    讀取中…
    \n
    \n 誠實佔位：此頁還不能改這個值——可調功能＝Arcrun#19（設定頁改→存 KBDB→發 token 時讀）。實作前要調整請在部署端 env MCP_TOKEN_TTL（mcp worker）設定。\n
    \n
    \n
    \n
    更換帳號密碼
    \n
    需輸入舊密碼驗證身分
    \n
    \n \n \n \n \n
    \n
    \n
    \n \n
    \n
    Portal 帳號密碼救援
    \n
    忘記某個 Portal（RAG 搜尋頁）帳號的密碼，包含你自己那組管理員帳號——不需要先登進 Portal。輸入該帳號的 Email，會產生一組新密碼，只顯示這一次，請立刻抄下並拿去 Portal 登入頁使用。
    \n
    \n \n \n
    \n
    \n
    \n
    \n
    系統資訊
    \n
    載入中…
    \n
    \n \n
    \n
    \n\n
    \n
    \n\n\n
    \n \n
    搜尋
    \n
    工作流
    \n \n
    設定
    \n
    \n\n
    \n\n\n\n\n"},"/favicon.ico":{"type":"image/x-icon","b64":true,"data":"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"},"/favicon.svg":{"type":"image/svg+xml","b64":false,"data":"arcrun icon"},"/index.html":{"type":"text/html; charset=utf-8","b64":false,"data":"\n\n\n\nArcrun RAG\n\n\n\n\n\n\n\n

    正在前往搜尋頁… 沒有自動跳轉請點這裡

    \n\n\n"},"/portal/app-mount.test.mjs":{"type":"application/javascript; charset=utf-8","b64":false,"data":"// App 掛載協定 v0.2 的結構自測（Arcrun#152／#82，leo 2026-08-24 拍板）\n// 跑法：node console-ui/public/portal/app-mount.test.mjs\n//\n// 這支守的是**協定的形狀**，不是長相——長相要用瀏覽器量（見 #152 的驗收留言）。\n// 之所以要有它：這一輪的病根是「出口與樣式被做成個案」——筆記 App 有返回鍵、總圖沒有；\n// CIS 表複製進 shadow 了、但 App 根本沒接上。個案會悄悄再長出來，所以把\n// 「不准再有個案」這件事寫成可執行的檢查。\nimport fs from 'node:fs';\n\nconst html = fs.readFileSync(new URL('./index.html', import.meta.url).pathname, 'utf8');\nlet pass = 0, fail = 0;\nconst chk = (label, cond, extra = '') => {\n if (cond) { console.log('PASS:', label); pass++; }\n else { console.log('FAIL:', label, extra); fail++; }\n};\n\n// ── ① 出口：每一個非首頁的 view 都必須有 .pagehead ────────────────────────────\n// ensureBackControls() 是往 `#v- .pagehead` 裡塞返回鍵的。少了那一列 ＝ 那個 view\n// 悄悄沒有出口，而且沒有人會發現（leo 就是這樣卡在總圖）。\nconst viewsLine = html.match(/var VIEWS = \\[(.*?)\\];/);\nif (!viewsLine) throw new Error('抽不到 VIEWS 清單');\nconst VIEWS = viewsLine[1].split(',').map((s) => s.trim().replace(/^'|'$/g, ''));\nconst HOME = (html.match(/var HOME = '([^']+)'/) || [])[1];\nchk('抽得到 VIEWS 與 HOME', VIEWS.length > 0 && !!HOME, `VIEWS=${VIEWS.length} HOME=${HOME}`);\n\nfor (const v of VIEWS) {\n if (v === HOME) continue;\n // 抓 `
    \">` 之後、下一個 view 之前那一段，看有沒有 pagehead\n const at = html.indexOf(`id=\"v-${v}\"`);\n if (at < 0) { chk(`view ${v} 存在於 HTML`, false); continue; }\n const nextView = html.indexOf('id=\"v-', at + 10);\n const block = html.slice(at, nextView < 0 ? at + 4000 : nextView);\n chk(`非首頁 view「${v}」有 .pagehead（返回鍵才掛得上）`, /class=\"pagehead\"/.test(block));\n}\n\n// ── ② 不准再有「某一頁自己的返回鍵」 ─────────────────────────────────────────\nchk('沒有殘留的個案返回鍵（app-back-btn 已撤）', !html.includes('app-back-btn'));\nchk('返回鍵只由 ensureBackControls() 產生（全檔只有一處 createElement 出 data-portal-back）',\n (html.match(/setAttribute\\('data-portal-back'/g) || []).length === 1);\nchk('返回鍵是頁首第一格（insertBefore firstChild）', /insertBefore\\(b, head\\.firstChild\\)/.test(html));\nchk('返回鍵一律回 HOME', /data-portal-back\\]'\\)\\) nav\\(HOME\\)/.test(html));\n\n// ── ③ 樣式：兩種模式與層序 ──────────────────────────────────────────────────\nchk('層序＝arcrun-base < app < arcrun（全局在最上面才蓋得過 App）',\n html.includes('@layer arcrun-base, app, arcrun;'));\nchk('沒宣告＝跟隨全局（預設 inherit，不是維持 App 原樣）',\n /var inherit = style !== 'own';/.test(html));\nchk('App 自己的 style 會被包進 app 層', /'@layer app\\{' \\+ st\\.textContent \\+ '\\}'/.test(html));\nchk('全局色票／CIS 都進 arcrun 層', (html.match(/'@layer arcrun\\{'/g) || []).length === 2);\nchk('樣式模式從 App 宣告來（不是 Portal 猜的）', /mountAppUi\\(host, app\\.ui_html, app\\.ui_style\\)/.test(html));\n\n// ── ④ 畫布是全局決定的（兩種模式都一樣）────────────────────────────────────\n// leo：「全局要給它多大的畫布也是全局決定的⋯⋯應該整個右側邊欄都是它的」\nchk('App 頁不吃 .page 的寬度上限與左右留白', /#v-app\\.on \\{[^}]*max-width: none;[^}]*padding: 0;/.test(html));\nchk('shadow host 由**外部文件**決定尺寸（App 在 shadow 裡改不動）',\n /#app-ui-mount \\{[^}]*width: 100%/.test(html));\n\n// ── ⑤ 隔離沒有被拆掉（這一輪的紅線）──────────────────────────────────────\nchk('App 仍然掛進 Shadow DOM', /host\\.attachShadow\\(\\{ mode: 'open' \\}\\)/.test(html));\n\nconsole.log(`\\n${fail === 0 ? '✅' : '❌'} pass=${pass} fail=${fail}`);\nprocess.exit(fail === 0 ? 0 : 1);\n"},"/portal/index.html":{"type":"text/html; charset=utf-8","b64":false,"data":"\n\n\n\n\nArcrun Portal\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n\n \n \n \n \n \n \n \n \n \n \n \n\n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n\n\n\n
    \n
    \n
    \n
    \"arc>run\" width=\"986\" height=\"176\">\"arc>run\" width=\"986\" height=\"176\">
    \n
    知識入口・Portal
    \n
    \n
    \n \n \n \n
    \n
    \n \n
    \n 忘記密碼了？寄一條「修改密碼」連結給我\n
    \n
    \n \n \n
    \n
    \n \n
    \n
    \n\n\n
    \n
    \n
    \n
    設定新密碼
    \n
    \n
    \n
    \n \n
    \n
    \n
    \n\n\n
    \n
    \n
    \n
    \"arc>run\" width=\"986\" height=\"176\">\"arc>run\" width=\"986\" height=\"176\">
    \n
    歡迎！先建立你的帳號
    \n
    \n
    \n \n \n \n \n
    \n \n \n
    \n
    這組帳密就是之後登入知識庫用的，只需要設定這一次。
    \n
    \n
    \n\n\n
    \n
    \n
    \"arcrun\"\"arcrun\"
    \n \n
    App 界面
    \n
    App 市集
    \n
    AR 設定
    \n
    App 開發
    \n
    ☾ 切深色
    \n
    \n
    \n
    \n\n \n
    \n
    App 界面
    \n
    載入中…
    \n
    \n\n \n
    \n
    搜尋
    \n
    \n
    \n \n \n
    \n
    \n \n \n \n
    \n \n
    \n
    AI 問答・答案附出處，可回搜尋驗證
    \n
    \n \n \n
    \n
    \n
    \n
    \n
    \n
    \n
    \n
    \n
    \n
    \n
    \n
    \n\n \n
    \n
    總圖
    \n
    \n
    \n
    \n 點節點可跳到該實體的圖譜搜尋。這張圖由知識庫的三元組即時算出——同一份地圖的文字版\n （給 AI 注入用的總庫目錄）。\n
    \n
    \n
    \n\n \n
    \n
    \n \n 知識卡片\n
    \n
    載入中…
    \n
    \n\n \n
    \n
    App 市集瀏覽、安裝、或上傳你自己做的 App
    \n
    \n
    \n
    ⬆
    \n
    \n
    上傳你的 App
    \n
    打包成一份宣告，讓其他人也能安裝——尚未接後端，先佔位
    \n
    \n
    \n
    已安裝
    \n
    載入中…
    \n
    可安裝
    \n
    \n
    尚未接市集後端
    \n
    目前還沒有「瀏覽別人分享的 App」這條路，之後開通後會列在這裡——現在這裡不放假資料。
    \n
    \n
    \n
    \n\n \n
    \n
    上傳Markdown / 純文字
    \n
    \n 上傳的文件會進入知識庫收件管線：約 1 分鐘後可在搜尋頁找到；AI 整理後會以 wiki 卡形式出現。支援 .md / .txt（一律以 .md 收件）。\n
    \n
    \n
    把 .md / .txt 檔案拖放到這裡
    \n
    或
    \n \n \n
    \n
    \n
    \n\n \n \n
    \n
    App 開發Workflows／零件／Recipe／Credential
    \n
    \n
    \n
    ✦
    \n
    \n
    叫 AI 幫你做一個 App
    \n
    用一句話描述你要什麼——尚未接後端，先佔位
    \n
    \n
    \n
    工作環境
    \n
    \n
    \n Workflows›\n
    \n
    \n 資料上傳›\n
    \n
    零件尚未接進 Portal
    \n
    Recipe尚未接進 Portal
    \n
    Credential尚未接進 Portal
    \n
    \n
    \n
    \n\n
    \n
    工作流唯讀・系統狀態
    \n
    \n 此頁只顯示系統裡的工作流與最近執行狀態，不能觸發執行（觸發屬系統擁有者權限）。\n
    \n
    載入中…
    \n
    \n\n \n
    \n
    \n \n App\n \n
    \n
    載入中…
    \n
    \n\n \n
    \n
    設定
    \n \n
    \n
    帳號
    \n
    管理
    \n
    \n
    \n \n
    \n
    \n
    \n
    \n 版本\n \n
    \n
    查詢中…
    \n
    \n \n
    \n
    \n
    \n
    我的帳號
    \n
    載入中…
    \n
    \n
    \n
    \n
    \n
    深色模式
    \n
    預設淺色（紙感）。切換立即生效，選擇記在這台裝置。
    \n
    \n
    \n
    \n
    \n \n
    \n
    更改密碼
    \n
    需輸入舊密碼驗證身分；新密碼至少 8 碼
    \n
    \n \n \n \n \n
    \n
    \n
    \n \n
    \n \n
    \n 你的知識庫網址（小幫手連線用）\n \n \n
    \n
    同步小幫手
    \n
    把你電腦上的資料夾變成知識庫。換電腦或重裝時可以再下載一次。
    \n
    \n 下載 Mac 版\n
    封測版未簽章，第一次請右鍵→打開。裝好第一次開啟時，貼上這個網址＋你的帳號密碼就連上了。
    \n
    \n
    \n \n
    \n
    \n 你的 MCP 網址（給你的 AI 連線用）\n —\n \n
    \n
    接上你的 AI（MCP）
    \n
    把上面這串網址貼到 Claude、ChatGPT 等 AI 的「新增自訂連接器」欄位，就能讓你的 AI 直接查這個知識庫。
    \n
    \n \n
    \n
    AI 設定
    \n
    \n 這裡不需要任何設定。聊天問答用的是你自己 Cloudflare 帳號內建的 AI，裝好就能直接問。
    \n 文件整理成知識卡的部分，請在同步小幫手（電腦上的托盤圖示）的「AI 設定…」填一把 Gemini API Key。\n
    \n
    \n \n
    \n
    疑難排解
    \n
    要回報問題，請到你電腦上的 Arcrun（同步小幫手）「版本與更新」頁——那裡的「疑難排解」按一下就能匯出完整診斷檔給我們（只有統計數字，不含你的任何文件內容）。
    \n
    \n \n
    \n
    \n\n \n
    \n
    管理帳號與知識庫授權
    \n
    \n
    帳號
    \n
    管理
    \n
    \n\n
    執行紀錄保留期
    \n
    \n
    保留天數
    \n
    執行紀錄是稽核資料，超過保留天數會被每日自動清除；預設 90 天（3 個月），也可設為「不刪除」（企業稽核用途）。
    \n
    \n \n \n \n
    \n
    \n
    \n
    \n\n
    帳號管理
    \n
    \n
    新增同仁帳號
    \n
    建立後會產生一組一次性密碼——只顯示這一次，請當場轉交同仁（同仁可在「設定」自行改密）。
    \n
    \n \n \n \n \n
    \n
    \n
    \n
    \n
    載入中…
    \n\n
    庫目錄管理
    \n
    \n 你的知識庫網址（小幫手連線用）\n \n \n
    \n
    \n \n 裝好同步小幫手並選好要看守的資料夾之後，每個資料夾會自動成為一個「庫」出現在下面——不需要人工新增。下面還是空的，代表小幫手還沒裝好或還沒選資料夾。\n
    \n
    載入中…
    \n
    \n\n
    \n
    \n\n\n
    \n
    App 界面
    \n
    App 市集
    \n
    AR 設定
    \n
    App 開發
    \n
    \n\n
    \n\n\n\n"},"/portal/os-split.test.mjs":{"type":"application/javascript; charset=utf-8","b64":false,"data":"import fs from 'node:fs';\nconst html = fs.readFileSync(new URL('./index.html', import.meta.url).pathname,'utf8');\n// 抽出 daemonPick 相關函式（從 DAEMON_BASE_DEFAULT 到 daemonHint 結尾）\n//\n// 🔴 2026-08-05：結尾標記本來寫死 daemonHint 的**整句文案**，於是同日改 Mac 提示語\n// （zip→DMG 的步驟不同）就讓這支自測直接炸「抽不到函式區塊」，而且沒人發現。\n// ⇒ 改成錨定「函式結束」這個結構，不再綁文案——文案本來就會改，測試不該為此壞掉。\nconst start = html.indexOf('var DAEMON_BASE_DEFAULT');\nconst hintAt = html.indexOf('function daemonHint', start);\nconst endMark = '\\n }';\nconst end = hintAt < 0 ? -1 : html.indexOf(endMark, hintAt) + endMark.length;\nif (start < 0 || hintAt < 0 || end < start) throw new Error('抽不到函式區塊');\nconst src = html.slice(start, end);\n\nconst cases = [\n ['Windows', 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/120 Safari/537.36'],\n ['Mac', 'Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 Safari/605.1.15'],\n ['iPhone', 'Mozilla/5.0 (iPhone; CPU iPhone OS 17_0 like Mac OS X) AppleWebKit/605.1.15 Safari/604.1'],\n ['Linux', 'Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 Chrome/120 Safari/537.36'],\n];\nlet pass=0, fail=0;\nconst chk=(l,c,extra='')=>{ if(c){console.log('PASS:',l);pass++;} else {console.log('FAIL:',l,extra);fail++;} };\n\nfor (const [name, ua] of cases) {\n const fn = new Function('navigator','window', src + '; return {daemonPick:daemonPick, daemonHint:daemonHint, daemonBase:daemonBase};');\n const api = fn({userAgent: ua}, {});\n const d = api.daemonPick();\n const label = d.sure ? d.pick.label : '(兩個都給)';\n const url = d.sure ? d.pick.url : d.mac.url + ' + ' + d.win.url;\n console.log(`\\n[${name}] sure=${d.sure} → ${label}`);\n console.log(` url: ${url}`);\n if (name==='Windows') {\n chk('Windows 給 win zip', d.sure && d.pick.url.endsWith('ArcrunRAG-win-unsigned.zip'), d.pick&&d.pick.url);\n chk('Windows 另一版是 Mac', d.other && d.other.url.endsWith('ArcrunRAG-mac.dmg'));\n chk('Windows 話術提 藍色視窗', api.daemonHint('win').includes('仍要執行'));\n }\n if (name==='Mac') {\n // 2026-08-05：Mac 一律給 DMG（拖進 Applications 的標準安裝畫面），不再給 zip\n // ——zip 解開就是一個裸 .app，使用者會直接在「下載」資料夾雙擊執行，自更新會蓋錯位置。\n chk('Mac 給 dmg（不是 zip）', d.sure && d.pick.url.endsWith('ArcrunRAG-mac.dmg'));\n chk('Mac 另一版是 Windows', d.other && d.other.url.endsWith('win-unsigned.zip'));\n chk('Mac 話術提 右鍵打開', api.daemonHint('mac').includes('右鍵'));\n }\n if (name==='iPhone' || name==='Linux') {\n // iPhone 含 \"Mac OS X\" 但不是桌機 Mac；Linux 兩者皆非 → 都該落在「不確定＝兩個都給」\n if (name==='Linux') chk('Linux 判不出來→兩個都給', d.sure===false);\n if (name==='iPhone') chk('iPhone 不該被判成 Mac（手機→兩個都給）', d.sure===false, 'sure='+d.sure);\n }\n}\n// 舊 key 相容\nconst fn2 = new Function('navigator','window', src + '; return daemonBase();');\nconsole.log('\\n[相容] daemonDownload 舊 key →', fn2({userAgent:''},{ARCRUN_CONFIG:{daemonDownload:'https://x.dev/d/ArcrunRAG-mac-unsigned.zip'}}));\nchk('舊 key 推得出目錄', fn2({userAgent:''},{ARCRUN_CONFIG:{daemonDownload:'https://x.dev/d/ArcrunRAG-mac-unsigned.zip'}})==='https://x.dev/d/');\nchk('daemonBase 新 key 優先', fn2({userAgent:''},{ARCRUN_CONFIG:{daemonBase:'https://y.dev/z'}})==='https://y.dev/z/');\nconsole.log(`\\n=== ${pass} passed, ${fail} failed ===`);\nprocess.exit(fail?1:0);\n"},"/portal/retrieval-tree.test.mjs":{"type":"application/javascript; charset=utf-8","b64":false,"data":"// 檢索過程樹（Arcrun#44 第二輪，leo 2026-08-18「希望以樹狀圖來展示」）的資料組裝測試。\n// 只測**樹的資料**，不測 markmap 怎麼畫——畫圖是現成函式庫的事（D97），\n// 我們自己要為之負責的是「層級對不對、有沒有把讀過的東西吞掉」。\n// 跑法：node console-ui/public/portal/retrieval-tree.test.mjs\nimport fs from 'node:fs';\nconst html = fs.readFileSync(new URL('./index.html', import.meta.url).pathname, 'utf8');\n\nconst grab = (name) => {\n const i = html.indexOf(`function ${name}(`);\n if (i < 0) throw new Error(`找不到 ${name}`);\n let d = 0, j = html.indexOf('{', i);\n for (let k = j; k < html.length; k++) { if (html[k] === '{') d++; if (html[k] === '}') { d--; if (!d) return html.slice(i, k + 1); } }\n throw new Error('括號不平衡');\n};\nconst src = ['esc', 'srcLocalPath', 'machineLabelMap', 'srcCrumbs', 'retrievalTreeData', 'visibleLeaves', 'treeListHtml'].map(grab).join('\\n');\nconst fn = new Function(src + '\\nvar SEARCH_ROUTE_LABEL = { graph: \"圖譜命中子庫\", index: \"索引退回選庫\", all: \"全庫讀取\" };'\n + '\\nreturn { srcCrumbs, machineLabelMap, retrievalTreeData, visibleLeaves, treeListHtml };')();\n\nlet pass = 0, fail = 0;\nconst t = (l, c, e = '') => { c ? (console.log('PASS:', l), pass++) : (console.log('FAIL:', l, e), fail++); };\nconst txt = (n) => String(n.content).replace(/<[^>]*>/g, '');\n\n// 2026-08-18 從 youlin stage 實跑 /portal/data/chat 抓下來的真回應形狀（narrative 真的是空字串）\nconst REAL = {\n route: 'graph', vector_used: false, libraries_considered: 8,\n libraries: [{ library: 'testkb', score: 1.69, via: 'graph', matched_entities: ['Arcrun124驗證卡'] }],\n indexes_read: [\n { library: 'general', narrative: '', selected: false, top_entities: [], triplet_count: 0, entry_count: 100 },\n { library: 'testkb', narrative: '', selected: true, top_entities: ['Arcrun124驗證卡'], triplet_count: 4, entry_count: 9 },\n { library: 'kb', narrative: '', selected: false, top_entities: ['knowledge-base'], triplet_count: 7, entry_count: 16 }\n ],\n pages_read: [{ page: 'Arcrun124驗證卡', library: 'testkb', chars: 231, source: 'kb://test/arcrun-124-verify.md#0' }]\n};\n\n// ① 層級＝leo 畫的那張：搜尋詞 → 命中子庫 → 索引敘事 → 原文片段\nconst tree = fn.retrievalTreeData('Arcrun124驗證卡是什麼？', REAL);\nt('第 1 層是搜尋詞', txt(tree).indexOf('Arcrun124驗證卡是什麼？') === 0, txt(tree));\nconst lib = tree.children[0];\nt('第 2 層是命中子庫（帶分數與命中實體）', /testkb/.test(txt(lib)) && /1\\.69/.test(txt(lib)) && /命中實體/.test(txt(lib)), txt(lib));\nconst idx = lib.children[0];\nt('第 3 層是該子庫的索引敘事', /三元組/.test(txt(idx)) && /筆條目/.test(txt(idx)), txt(idx));\nconst page = idx.children[0];\nt('第 4 層是原文片段（掛在索引敘事底下）', /Arcrun124驗證卡/.test(txt(page)) && /231 字/.test(txt(page)), txt(page));\nt('原文片段帶資料夾麵包屑', /test › arcrun-124-verify\\.md/.test(txt(page)), txt(page));\n\n// ② narrative 是空字串時不假裝有敘事（線上真資料就是這樣）\nt('沒有敘事就說沒有，不留空白', /索引沒有敘事/.test(txt(idx)), txt(idx));\n\n// ③ 沒被選用的子庫不可以被吞掉，但要收合起來不擠掉主線\nconst rest = tree.children[tree.children.length - 1];\nt('沒讀原文的子庫收在一個節點底下', /考慮過但沒讀原文（2 個子庫）/.test(txt(rest)), txt(rest));\nt('那個節點預設收合', rest.payload && rest.payload.fold === 1, JSON.stringify(rest.payload));\nt('主線只有命中的子庫', tree.children.length === 2, `實得 ${tree.children.length} 條分支`);\n\n// ④ 讀了原文、但沒出現在 libraries[] 的子庫（route=all）也要長出來\nconst allRoute = fn.retrievalTreeData('問句', {\n route: 'all', libraries: [], indexes_read: [],\n pages_read: [{ page: 'P', library: 'kb', chars: 10, source: 'kb://a/b/c.md#2' }]\n});\nt('route=all 時仍有子庫分支', allRoute.children.length === 1 && /kb/.test(txt(allRoute.children[0])), txt(allRoute.children[0]));\nt('沒有索引敘事時不生假的中間層', /^P/.test(txt(allRoute.children[0].children[0])), txt(allRoute.children[0].children[0]));\n\n// ⑤ 完全沒資料時不要生一棵空樹\nconst empty = fn.retrievalTreeData('問句', { route: 'all', libraries: [], indexes_read: [], pages_read: [] });\nt('沒有任何子庫時說明原因', /全庫作答|沒有回報/.test(txt(empty.children[0])), txt(empty.children[0]));\n\n// ⑥ 麵包屑：資料夾可以有很多層，全部拆開；機器那一層現在是「沒有」\nconst c = fn.srcCrumbs('kb://RFP/2026/design.md#3', 'kb');\nt('多層資料夾全部拆開', JSON.stringify(c.dirs) === '[\"RFP\",\"2026\"]', JSON.stringify(c.dirs));\nt('檔名拆得出來', c.file === 'design.md', c.file);\nt('片段編號拆得出來', c.frag === '3', c.frag);\nt('子庫帶得進來', c.library === 'kb', c.library);\nt('機器那一層是 null（資料裡真的沒有）', c.machine === null, String(c.machine));\nt('相對路徑原樣留著（複製給用戶去本機找）', c.path === 'RFP/2026/design.md', c.path);\n\nconst g = fn.srcCrumbs('gitea:Leo/InkStoneCo@wiki/x.md#1', 'kb');\nt('非 kb:// 來源不硬拆成假麵包屑', g.path === '' && g.file === '' && g.dirs.length === 0, JSON.stringify(g));\n\n// ⑦ markmap 載不進來時的退路：同一份樹資料畫成巢狀清單\nconst list = fn.treeListHtml(tree);\nt('退路是巢狀清單', /