Merge remote-tracking branch 'origin/codex/wiki-auth-hardening' into codex/linked-guidance

.dockerignore

@@ -0,0 +1,24 @@
+.git
+**/.next
+**/node_modules
+**/dist
+coverage
+.env
+.env.*
+!.env.example
+*.tsbuildinfo
+.DS_Store
+.agents
+.codex
+
+# Documentation and CI metadata are not application build inputs.
+/docs
+/.gitea
+/README.md
+/AGENTS.md
+
+**/__pycache__
+**/.venv
+
+# Local authoring assets are uploaded via APIs, never application build inputs.
+/content

.gitea/workflows/python.yml

@@ -0,0 +1,28 @@
+name: python CI and deployment
+on:
+  push:
+    branches: [main]
+    paths:
+      - 'apps/python/**'
+      - 'scripts/deploy-python.sh'
+      - '.gitea/workflows/python.yml'
+  pull_request:
+    paths:
+      - 'apps/python/**'
+      - 'scripts/deploy-python.sh'
+      - '.gitea/workflows/python.yml'
+  workflow_dispatch:
+
+jobs:
+  verify-and-deploy:
+    runs-on: ces-control
+    timeout-minutes: 45
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+      - name: Build and verify python
+        run: docker build -f apps/python/Dockerfile -t "prompt-python:${{ gitea.sha }}" .
+      - name: Release python
+        if: gitea.ref == 'refs/heads/main' && (gitea.event_name == 'push' || gitea.event_name == 'workflow_dispatch')
+        run: bash scripts/deploy-python.sh "${{ gitea.sha }}"

.gitea/workflows/studio.yml

@@ -0,0 +1,63 @@
+name: studio CI and deployment
+on:
+  push:
+    branches: [main]
+    paths:
+      - 'apps/studio/**'
+      - 'scripts/deploy-studio.sh'
+      - 'scripts/verify-studio-production.sh'
+      - 'scripts/verify-studio-library.mjs'
+      - 'scripts/verify-studio-visual.cjs'
+      - '.gitea/workflows/studio.yml'
+      - 'scripts/*studio*'
+      - 'content/studio-examples/**'
+      - 'content/studio-tools/layouts-api.md'
+      - 'pnpm-workspace.yaml'
+  pull_request:
+    paths:
+      - 'apps/studio/**'
+      - 'scripts/deploy-studio.sh'
+      - 'scripts/verify-studio-production.sh'
+      - 'scripts/verify-studio-library.mjs'
+      - 'scripts/verify-studio-visual.cjs'
+      - '.gitea/workflows/studio.yml'
+      - 'scripts/*studio*'
+      - 'content/studio-examples/**'
+      - 'content/studio-tools/layouts-api.md'
+      - 'pnpm-workspace.yaml'
+  workflow_dispatch:
+
+jobs:
+  verify-and-deploy:
+    runs-on: ces-control
+    timeout-minutes: 45
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+      - name: Check shared content and documentation contracts
+        run: |
+          node scripts/check-studio-contracts.mjs
+          node --check scripts/export-studio-series.cjs
+          node --check scripts/save-studio-series.mjs
+          bash -n scripts/publish-studio-guide.sh scripts/deliver-studio-series.sh
+      - name: Build and verify studio
+        run: docker build -f apps/studio/Dockerfile -t "prompt-studio:${{ gitea.sha }}" .
+      - name: Release studio
+        if: gitea.ref == 'refs/heads/main' && (gitea.event_name == 'push' || gitea.event_name == 'workflow_dispatch')
+        run: bash scripts/deploy-studio.sh "${{ gitea.sha }}"
+      - name: Verify the deployed Studio API and native pages
+        if: gitea.ref == 'refs/heads/main' && (gitea.event_name == 'push' || gitea.event_name == 'workflow_dispatch')
+        run: bash scripts/verify-studio-production.sh
+      - name: Save server acceptance evidence
+        id: acceptance_evidence
+        if: always()
+        uses: actions/upload-artifact@v3
+        with:
+          name: studio-production-acceptance
+          path: artifacts/studio-acceptance/
+          if-no-files-found: ignore
+          retention-days: 7
+      - name: Remove temporary acceptance output after upload
+        if: always() && steps.acceptance_evidence.outcome == 'success'
+        run: rm -rf artifacts/studio-acceptance

.gitea/workflows/waterfall-wiki.yml

@@ -0,0 +1,51 @@
+name: waterfall-wiki CI and deployment
+on:
+  push:
+    branches: [main]
+    paths:
+      - 'apps/waterfall-wiki/**'
+      - '.gitea/workflows/waterfall-wiki.yml'
+      - 'Dockerfile'
+      - 'compose.yml'
+      - 'scripts/deploy.sh'
+      - 'scripts/infra.sh'
+      - 'scripts/auth-admin.sh'
+      - 'scripts/integration.sh'
+      - 'pnpm-workspace.yaml'
+  pull_request:
+    paths:
+      - 'apps/waterfall-wiki/**'
+      - '.gitea/workflows/waterfall-wiki.yml'
+      - 'Dockerfile'
+      - 'compose.yml'
+      - 'scripts/deploy.sh'
+      - 'scripts/infra.sh'
+      - 'scripts/auth-admin.sh'
+      - 'scripts/integration.sh'
+      - 'pnpm-workspace.yaml'
+  workflow_dispatch:
+
+jobs:
+  verify-and-deploy:
+    runs-on: ces-control
+    timeout-minutes: 45
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+      - name: Validate configuration
+        run: docker compose --env-file apps/waterfall-wiki/.env.example config --quiet
+      - name: Build and verify waterfall-wiki
+        run: docker build --target integration -t "waterfall-wiki-tests:${{ gitea.sha }}" .
+      - name: Verify retained character originals
+        run: docker run --rm --entrypoint node "waterfall-wiki-tests:${{ gitea.sha }}" --test tests/character-pack.test.mjs
+      - name: Build runtime
+        run: docker build --target runtime -t "waterfall-wiki:${{ gitea.sha }}" .
+      - name: Integration stack
+        env:
+          WATERFALL_WIKI_IMAGE: waterfall-wiki:${{ gitea.sha }}
+          WATERFALL_WIKI_TEST_IMAGE: waterfall-wiki-tests:${{ gitea.sha }}
+        run: bash scripts/integration.sh
+      - name: Deploy waterfall-wiki
+        if: gitea.ref == 'refs/heads/main' && (gitea.event_name == 'push' || gitea.event_name == 'workflow_dispatch')
+        run: bash scripts/deploy.sh "${{ gitea.sha }}"

.gitignore

@@ -1,6 +1,4 @@
 node_modules/
-.pnpm-store/
-.turbo/
 .next/
 coverage/
 .env*
@@ -12,21 +10,3 @@ dist/
 __pycache__/
 *.egg-info/
 .venv/
-
-# Content images belong in S3; metadata lives in managed-media.json.
-*.png
-*.jpg
-*.jpeg
-*.webp
-*.gif
-*.avif
-
-# Approved, versioned brand resources are package source assets.
-!packages/brand/assets/**/*.png
-!packages/brand/docs/logo-preview.png
-/apps/studio/public/brand/
-/apps/studio/public/favicon.ico
-/apps/studio/public/apple-touch-icon.png
-/apps/waterfall-wiki/public/brand/
-/apps/waterfall-wiki/public/favicon.ico
-/apps/waterfall-wiki/public/apple-touch-icon.png

AGENTS.md

@@ -8,6 +8,9 @@ This block is written and re-added by `next dev` — verify at `node_modules/nex
 
 <!-- END:nextjs-agent-rules -->
 
-## 项目维护
+## 交付与视觉验收
 
-- Wiki 和 Studio 共用 `apps/waterfall-wiki` 的 Pages Router、登录保护和品牌包。保留已发布的路由、媒体标识和数据库迁移。
+- 用户指定服务器为唯一运行与验收入口：http://8.211.154.134:18131/。
+- 页面改动必须先 push，等待 ces-control 的 CI/CD 成功部署，再直接访问服务器检查效果。
+- 不启动本地网页预览，不使用 localhost / 127.0.0.1 页面进行视觉验收，也不把本地预览链接交付给用户。
+- 类型检查、单元测试等不提供网页预览的检查可以本地执行；完整运行检查由 Docker CI 完成。

Dockerfile

@@ -0,0 +1,37 @@
+FROM node:24-bookworm-slim AS base
+ENV NEXT_TELEMETRY_DISABLED=1
+WORKDIR /app
+RUN apt-get update \
+    && apt-get install -y --no-install-recommends ffmpeg ca-certificates chromium fonts-noto-cjk \
+    && rm -rf /var/lib/apt/lists/*
+
+FROM base AS dependencies
+RUN corepack enable && corepack prepare pnpm@11.25.0 --activate
+COPY apps/waterfall-wiki/pnpm-lock.yaml ./
+COPY pnpm-workspace.yaml /tmp/monorepo-policy.yaml
+RUN node -e "const fs=require('fs');const text=fs.readFileSync('/tmp/monorepo-policy.yaml','utf8');fs.writeFileSync('pnpm-workspace.yaml', text.slice(text.indexOf('allowBuilds:')));"
+RUN pnpm fetch --frozen-lockfile --fetch-timeout=300000 --network-concurrency=8
+COPY apps/waterfall-wiki/package.json ./
+RUN pnpm install --offline --frozen-lockfile
+
+FROM dependencies AS build
+# .dockerignore excludes docs and operational notes without extra legacy COPY snapshots.
+COPY apps/waterfall-wiki/ .
+RUN pnpm typecheck && pnpm test && pnpm build && pnpm test:smoke
+
+FROM build AS integration
+USER node
+CMD ["npm", "run", "test:integration"]
+
+FROM base AS runtime
+ENV NODE_ENV=production HOSTNAME=0.0.0.0 PORT=3000 \
+    FFMPEG_PATH=/usr/bin/ffmpeg FFPROBE_PATH=/usr/bin/ffprobe
+COPY --from=build --chown=node:node /app/.next/standalone/ ./
+COPY --from=build --chown=node:node /app/dist/worker.cjs /app/dist/bootstrap.cjs /app/dist/publish-learning-series.cjs /app/dist/auth-cli.cjs ./
+COPY --from=build --chown=node:node /app/db/ ./db/
+COPY --chown=node:node apps/waterfall-wiki/scripts/container-health.mjs ./
+COPY --chown=node:node apps/waterfall-wiki/scripts/import-character-packs.mjs apps/waterfall-wiki/scripts/verify-character-pack.mjs ./scripts/
+COPY --chown=node:node apps/waterfall-wiki/seed/characters/ ./seed/characters/
+USER node
+EXPOSE 3000
+CMD ["node", "server.js"]

README.md

@@ -1,38 +1,104 @@
-# 啡跃 Endoleap
+# PROMPT
 
-啡跃把笔记、参考素材和创作工作台放在同一个 Next.js 应用里。应用位于 `apps/waterfall-wiki`，共享主题与品牌资源位于 `packages/brand`。
+把提示词、参考图、分步文档和创作工具收进同一个可连接的知识库。人可以浏览瀑布流、搜索和编辑；AI 可以从同一篇 post 读取纯文本、图片与 API 说明，再调用 Studio 生成作品。
 
-| 入口 | 用途 |
+**PROMPT 是网站与项目品牌；`waterfall-wiki` 是知识库应用的内部名称。** 目录、包、CI、镜像和 Compose 服务使用内部名称，网站导航与页面标题使用 PROMPT。
+
+线上入口：[PROMPT](http://8.211.154.134:18131/)。内容、媒体、API 与 Studio 共用登录入口。
+
+## 从一篇 post 开始
+
+每篇内容都有稳定的 `/explore/<id>` 地址。标题、标签、正文和封面可以修改，链接保持不变。数据库内容可以保留 24 位 public ID，内部仍使用 UUID；旧 `/p/<slug>`、`/skills/...` 等地址保留兼容跳转。
+
+- **浏览**：首页按不同笔记的反向引用数优先排序。重复引用和自引用不重复计数，代码、图片与外站链接不冒充笔记引用。详情可以查看引用来源。
+- **搜索**：标题、简介、正文、普通标签和系统标签共同匹配。支持多个关键词及双引号短语，先按相关性、再按引用数和时间排序；先筛选再分页。
+- **标签**：普通标签使用 `#中国风`、`#贴纸` 等名称，可以创建、添加或移除。系统标签是固定列表，目前为“文档入口”和“参考图”，只能搜索并勾选，不能通过 `#` 创建。系统标签显示在图片角标，普通标签显示在文字区；分类页顶部按系统标签筛选。
+- **编辑**：卡片与详情都能直接编辑标签；完整编辑器可以修改标题、简介、Markdown。保存使用 revision 检测并发冲突，避免旧窗口覆盖新修改。
+- **素材**：原件和加工结果都是普通资产，可被多篇 post 引用。文档封面与实际参考素材分开，子文档可以有自己的封面，同时保留原参考图。
+
+## 给 AI 的入口
+
+在同一个 post 地址加 `?agent_mode=True` 可以读取纯文本正文和媒体链接。业务 API 的相同参数会先返回接口说明；已有查询参数时使用 `&agent_mode=True`。这些入口同样需要登录或有效 Bearer JWT。
+
+| 地址 | 用途 |
 | --- | --- |
-| `/` | 浏览内容，打开 `/explore/<id>` 查看笔记 |
+| `/explore/<id>` | 人看的 post；加 `?agent_mode=True` 读纯文本 |
-| `/guide` | 浏览指导文档 |
-| `/graphic` | 图文排版 |
-| `/infinite_canvas` | 无限画布 |
 | `/api?agent_mode=True` | 业务 API 目录 |
-| `/studio/api` | Studio API 目录 |
+| `/api/explore-feed` | 统一搜索、系统/普通标签筛选与分页 |
+| `/api/notes/<id>` | GET 读取；PUT 编辑全文；PATCH 仅更新标签 |
+| `/api/tags` | GET 查看普通/系统标签；POST 创建或复用普通标签 |
+| `/api/upload` | 上传媒体；`assetOnly=true` 独立保存，不创建 post |
+| `/api/posts` | 用正文和已有资产创建普通 post |
+| `/api/media/<id>` | 媒体原件与衍生文件，支持 Range |
+| `/api/preview` | 有尺寸上限的 WebP 预览，不接受任意远程 URL |
 
-## 运行
+标签 PATCH 请求为 `{ "tags": ["标签 UUID"], "revision": "GET 返回的 revision" }`。它不会要求用户重输正文。Tag 对象的 `kind` 为 `normal` 或 `system`；系统标签还有稳定的 `system_key`。普通创建接口不允许提交 `kind` 或 `system_key`。
 
-准备 Node.js 24、pnpm 11.25.0、PostgreSQL、S3 兼容对象存储和 FFmpeg。参考 [环境变量示例](apps/waterfall-wiki/.env.example)，将变量注入 Web、初始化和媒体 worker 进程。邮箱注册与找回密码需要可用的 SMTP 服务。
+Wiki 中的教程是普通 post 与媒体数据，不需要为每份资料增加专用网页路由、JSON 文件端点或代码注册。
 
-在仓库根目录运行 `pnpm install --frozen-lockfile` 和 `pnpm build`。然后在 `apps/waterfall-wiki` 目录准备数据库和存储，初始化管理员认证并启动 Web。
+## Studio：从教程进入工具
+
+Studio 负责交互式排版与无状态渲染，知识库负责教程、来源和入口。`/studio` 返回 PROMPT 首页；请从对应 post 打开具体工具。
+
+27 套排版工具：`/studio/layouts/ref-01` 至 `/studio/layouts/ref-27`，每套对应原图 T/I/D 构件。目录与参数 API 为 `/studio/api/layouts` 和 `/studio/api/layouts/<id>`；POST 参数生成 SVG。效果通过 `/api/studio/designs` 存入 Wiki 现有 PostgreSQL，返回独立 ID，`/studio/designs/<id>` 可再次打开；PATCH 携带 revision 更新同一效果。Studio 不需要数据库连接或第二套数据库。详见 [27 套排版 API 教程](content/studio-tools/layouts-api.md)。
+
+其他试版工具：
+
+- `/studio/ideas/learning-skills-template`：ref-17 同一母版的四张占位封面。
+- `/studio/ideas/layout-selection`：ref-01、ref-07、ref-26 三种构图；可修改文字与配色，核对构件边界。
+- `/studio/api/export/<slug>`：GET 读取方案或初始 SVG；POST 校验自定义参数并生成 SVG/JSON。详细说明读取该地址的 `?agent_mode=True`。
+
+渲染不自动保存作品，也不自动发布 post。需要保留的结果应下载后再通过普通媒体和 post API 发布。原图的 T/I/D 构件、画板比例与来源保留为可读取数据；文字替换和矢量重建的范围应在教程中明确。
+
+## 仓库结构
+
+| 路径 | 职责 |
+| --- | --- |
+| `apps/waterfall-wiki` | Next.js Pages Router 知识库、搜索、标签、媒体 API、认证与后台视频加工 |
+| `apps/studio` | 独立 Next.js 创作工具与封面渲染 API |
+| `apps/python` | 按需运行的 PNG/视频导出 CLI，没有常驻网络服务 |
+| `content` | 本地作者资料、教程及排版源图，不打入 Wiki 运行镜像 |
+| `scripts` | CI 部署、运维、API 发布与作者工具 |
+| `docs` | 数据模型、接口、认证与部署说明 |
+
+两个 JavaScript 应用分别维护冻结的 pnpm 锁文件。根 Dockerfile 是 waterfall-wiki 的构建入口；应用目录的 Dockerfile 与它保持一致。
+
+## 环境与检查
+
+运行环境：Node.js 24、pnpm 11.25.0、PostgreSQL 17、S3 兼容对象存储；视频处理使用 FFmpeg，部分导出使用 Chromium。Python 工具需要 Python 3.12+。
 
 ```sh
-node dist/bootstrap.cjs
+pnpm install
-node dist/auth-cli.cjs init
+pnpm --dir apps/waterfall-wiki typecheck
-pnpm start
+pnpm --dir apps/waterfall-wiki test
+pnpm --dir apps/studio typecheck
+bash -n scripts/deploy.sh scripts/integration.sh scripts/deploy-studio.sh
 ```
 
-媒体 worker 在同一目录作为独立进程运行 `node dist/worker.cjs`。绑定管理员验证器时，在远程交互终端执行 `node dist/auth-cli.cjs qr`。已有实例复用原数据库、对象存储和私有认证文件。
+完整集成测试只针对显式隔离的数据库、对象存储和生产容器运行，覆盖存储、视频加工、编辑冲突、真实搜索与引用、标签规则和登录保护。不要把生产存储配置拿来运行集成测试。
 
-## Monorepo 与 Turborepo
+本项目以指定服务器为唯一网页运行与验收入口：先推送，再等待 ces-control CI/CD，最后直接检查服务器。不要启动本地网页预览，不用 localhost 页面作为视觉验收或交付入口。具体约定见 [AGENTS.md](AGENTS.md)。
 
-仓库在现有 pnpm workspace 上接入 Turborepo，无需运行面向新项目的 `npx create-turbo@latest`。应用仍位于 `apps/waterfall-wiki`，源码品牌包仍位于 `packages/brand`；子包脚本和应用产物路径保持原样。依赖统一锁定在根目录 `pnpm-lock.yaml`，安装从仓库根目录执行。
+## 部署与持久化
 
-根目录命令由 Turbo 调度：`pnpm dev` 启动开发任务，`pnpm dev:waterfall-wiki` 仅启动 Wiki，`pnpm build` 构建应用及 worker/CLI，`pnpm typecheck` 生成 Next.js 类型并检查 TypeScript。`pnpm start` 继续直接启动现有应用。也可以在子包目录使用原有命令。
+Gitea 工作流按应用路径触发：`waterfall-wiki.yml`、`studio.yml` 和 `python.yml`。waterfall-wiki 完成类型检查、单元测试、生产构建、冒烟和真实 PostgreSQL/S3 集成测试后部署；Studio 独立构建和部署。文档与作者数据本身不触发应用部署。
 
-锁文件合并保留应用原有依赖解析。唯一重叠差异是 `@tailwindcss/postcss` 的间接 PostCSS 依赖：品牌包原为 8.5.32，现在沿用应用的 8.5.31；品牌包直接声明的 PostCSS 8.5.6 不变。
+| 服务 | 入口/端口 |
+| --- | --- |
+| `waterfall-wiki` | 公网 `18131`，也是 Studio 的统一入口 |
+| PostgreSQL | `127.0.0.1:18132` |
+| 对象存储 | `127.0.0.1:18133` |
+| Studio | `127.0.0.1:18134`；公网通过 `/studio` 代理 |
+| Python | 无网络端口，按需运行 |
 
-迁移阶段所有任务禁用缓存，根命令使用 `--env-mode=loose` 透传既有环境变量，保留品牌资源准备步骤的每次执行。后续启用缓存前，需明确环境变量输入、跨包资源和所有输出。当前不配置 CI/CD，也不自动发布。
+生产 Compose 项目仍为 `prompt`，部署根目录仍为 `/opt/prompt`。既有 `prompt_postgres_data`、`prompt_objects`、`prompt_auth_data` 卷与数据库身份保留；应用更名不会重新创建一套空存储。Compose 应用服务改为 `waterfall-wiki` 和 `waterfall-wiki-worker`，镜像参数为 `WATERFALL_WIKI_IMAGE` / `WATERFALL_WIKI_TEST_IMAGE`。
 
-仅检查任务计划、不执行编译或生成应用产物时，可运行 `pnpm build --dry=json` 和 `pnpm typecheck --dry=json`。完整构建与运行验证另行执行。
+部署在停止写入后备份数据库，再运行迁移和启动新版。失败时恢复兼容旧镜像的备份并回滚服务。生产不执行 `down -v`，也不清空对象文件。早期合集验证会遍历分页，不假定旧文章一定在第一页。
+
+## 登录与自动化
+
+共享验证器的 6 位 TOTP 动态码登录，JWT 保存在 HttpOnly Cookie 中；这属于单因素动态码登录，不是 2FA。密钥保存在服务器认证卷，不进入 Git、镜像或 HTTP 二维码接口。
+
+服务器管理员在交互式 SSH 终端运行 `sudo /opt/prompt/auth qr` 绑定验证器。不要把二维码、动态密钥或 JWT 粘贴到聊天、日志和仓库。服务端自动化可使用 `node auth-cli.cjs run <脚本>`，在进程内为本机 API 请求附加短期凭据，不输出令牌。
+
+更多说明：[登录与 SSH 绑定](docs/dynamic-code-login.md) · [API](docs/api.md) · [数据模型](docs/data-model.md) · [项目结构与部署](docs/monorepo.md)。

apps/python/Dockerfile

@@ -0,0 +1,8 @@
+FROM python:3.12-slim
+RUN apt-get update && apt-get install -y --no-install-recommends ffmpeg fonts-noto-cjk && rm -rf /var/lib/apt/lists/*
+WORKDIR /app
+COPY apps/python/ .
+RUN pip install --no-cache-dir . && python -m unittest discover -s tests -v
+RUN useradd --create-home exporter
+USER exporter
+ENTRYPOINT ["prompt-export"]

apps/python/pyproject.toml

@@ -0,0 +1,12 @@
+[build-system]
+requires = ["setuptools==75.8.0"]
+build-backend = "setuptools.build_meta"
+[project]
+name = "prompt-tools"
+version = "0.1.0"
+requires-python = ">=3.12"
+dependencies = ["Pillow==11.1.0"]
+[project.scripts]
+prompt-export = "prompt_tools.export:main"
+[tool.setuptools.packages.find]
+where = ["src"]

apps/python/src/prompt_tools/export.py

@@ -0,0 +1,70 @@
+"""Render a Studio JSON bundle into PNG slides and optionally MP4."""
+import argparse
+import json
+import subprocess
+from pathlib import Path
+from PIL import Image, ImageDraw, ImageFont
+
+
+def validate(bundle):
+    if bundle.get("version") != 1 or not isinstance(bundle.get("slides"), list) or not bundle["slides"]:
+        raise ValueError("Expected a version 1 Studio bundle with slides")
+    for slide in bundle["slides"]:
+        if not all(isinstance(slide.get(k), str) for k in ("heading", "body", "color")):
+            raise ValueError("Invalid slide")
+    return bundle["slides"]
+
+
+def wrap(draw, text, font, width):
+    lines = []
+    for paragraph in text.split("\n"):
+        line = ""
+        for char in paragraph:
+            if line and draw.textlength(line + char, font=font) > width:
+                lines.append(line)
+                line = ""
+            line += char
+        lines.append(line)
+    return lines
+
+
+def render(bundle, output, font_path):
+    slides = validate(bundle)
+    output.mkdir(parents=True, exist_ok=True)
+    heading = ImageFont.truetype(str(font_path), 76)
+    body = ImageFont.truetype(str(font_path), 38)
+    for index, slide in enumerate(slides, 1):
+        image = Image.new("RGB", (1080, 1440), slide["color"])
+        draw = ImageDraw.Draw(image)
+        draw.text((80, 80), f"PROMPT / {index:02}", font=body, fill="#353535")
+        y = 330
+        for text, font, gap in [(slide["heading"], heading, 108), (slide["body"], body, 65)]:
+            for line in wrap(draw, text, font, 920):
+                if y + gap > 1360:
+                    raise ValueError(f"Slide {index} overflows; split the text into more slides")
+                draw.text((80, y), line, font=font, fill="#242424")
+                y += gap
+            y += 70
+        image.save(output / f"slide-{index:03}.png")
+
+
+def main():
+    parser = argparse.ArgumentParser(description=__doc__)
+    parser.add_argument("bundle", type=Path)
+    parser.add_argument("--output", type=Path, required=True)
+    parser.add_argument("--font", type=Path, required=True, help="CJK font TTF/OTF/TTC")
+    parser.add_argument("--video", action="store_true")
+    args = parser.parse_args()
+    bundle = json.loads(args.bundle.read_text())
+    render(bundle, args.output, args.font)
+    if args.video:
+        # Use an explicit temporary input sequence so old PNGs cannot leak into a video.
+        import tempfile
+        import shutil
+        with tempfile.TemporaryDirectory() as staging:
+            for index in range(1, len(bundle["slides"]) + 1):
+                shutil.copy(args.output / f"slide-{index:03}.png", Path(staging) / f"slide-{index:03}.png")
+            subprocess.run(["ffmpeg", "-y", "-framerate", "1/4", "-i", str(Path(staging) / "slide-%03d.png"), "-vf", "fps=30,format=yuv420p", "-c:v", "libx264", "-movflags", "+faststart", str(args.output / "video.mp4")], check=True)
+
+if __name__ == "__main__":
+    main()

apps/python/tests/test_export.py

@@ -0,0 +1,13 @@
+import unittest
+from prompt_tools.export import validate, wrap
+class ExportTests(unittest.TestCase):
+    def test_bad_bundle(self):
+        for bundle in [{}, {"version": 1, "slides": []}, {"version": 1, "slides": [{}]}]:
+            with self.assertRaises(ValueError): validate(bundle)
+    def test_wrap_preserves_content(self):
+        class Draw:
+            def textlength(self, text, font): return len(text)
+        self.assertEqual(wrap(Draw(), "中文内容测试", None, 3), ["中文内", "容测试"])
+    def test_valid_bundle(self):
+        slides = [{"heading": "标题", "body": "正文", "color": "#fff"}]
+        self.assertEqual(validate({"version": 1, "slides": slides}), slides)

apps/studio/Dockerfile

@@ -0,0 +1,22 @@
+FROM node:24-bookworm-slim AS build
+WORKDIR /app
+RUN corepack enable && corepack prepare pnpm@11.25.0 --activate
+COPY apps/studio/pnpm-lock.yaml ./
+COPY pnpm-workspace.yaml /tmp/monorepo-policy.yaml
+RUN node -e "const fs=require('fs');const text=fs.readFileSync('/tmp/monorepo-policy.yaml','utf8');fs.writeFileSync('pnpm-workspace.yaml', text.slice(text.indexOf('allowBuilds:')));"
+RUN pnpm fetch --frozen-lockfile --fetch-timeout=300000 --network-concurrency=8
+COPY apps/studio/package.json ./
+RUN pnpm install --offline --frozen-lockfile
+COPY apps/studio/ .
+# Compare the two public parameter validators inside the isolated CI build.
+COPY apps/waterfall-wiki/src/lib/layout-parameters.ts /waterfall-wiki/src/lib/layout-parameters.ts
+COPY apps/waterfall-wiki/src/lib/series.ts /waterfall-wiki/src/lib/series.ts
+RUN pnpm typecheck && pnpm test && pnpm build && pnpm test:smoke
+FROM node:24-bookworm-slim
+WORKDIR /app
+ENV NODE_ENV=production HOSTNAME=0.0.0.0 PORT=3000
+COPY --from=build --chown=node:node /app/.next/standalone/ ./
+COPY --from=build --chown=node:node /app/.next/static/ ./.next/static/
+USER node
+EXPOSE 3000
+CMD ["node", "server.js"]

apps/studio/fixtures/autumn-journal.json

@@ -0,0 +1,163 @@
+{
+  "schemaVersion": 2,
+  "name": "把秋天装进一页 · 银杏观察手记",
+  "document": {
+    "version": 1,
+    "brief": {
+      "topic": "银杏与秋日观察手记",
+      "audience": "喜欢日常摄影与视觉手帐的小红书读者",
+      "intent": "以封面、观察方法和行动结尾组成三页可发布图文",
+      "designIntent": "奶油纸底、森林墨色、银杏金点缀；宋体大标题与克制的无衬线正文；所有页面保留相同页边距和节奏",
+      "imageStrategy": "生成一幅原创银杏静物插画作为系列母图；每页复用素材，保留裁切配置，不把正文烘焙进图片"
+    },
+    "style": {
+      "version": "autumn-journal/1",
+      "palette": {
+        "paper": "#F3EFE5",
+        "ink": "#253C32",
+        "muted": "#718074",
+        "accent": "#C3A050"
+      },
+      "typography": {
+        "title": {
+          "fontFamily": "serif",
+          "fontSize": 8.4,
+          "fontWeight": 600,
+          "lineHeight": 1.15,
+          "letterSpacing": 0
+        },
+        "body": {
+          "fontFamily": "sans",
+          "fontSize": 3.1,
+          "fontWeight": 400,
+          "lineHeight": 1.65,
+          "letterSpacing": 0
+        },
+        "caption": {
+          "fontFamily": "sans",
+          "fontSize": 1.7,
+          "fontWeight": 500,
+          "lineHeight": 1.2,
+          "letterSpacing": 0
+        }
+      },
+      "spacing": {
+        "margin": 10,
+        "gap": 4
+      }
+    },
+    "sources": [],
+    "pages": [
+      {
+        "key": "cover",
+        "role": "cover",
+        "layoutId": "standard-01",
+        "intent": "用银杏静物与两行大标题建立主题",
+        "bindings": {
+          "T01": "title",
+          "T02": "body",
+          "T03": "caption"
+        },
+        "parameters": {
+          "texts": {
+            "T01": {
+              "value": "把秋天\n装进一页"
+            },
+            "T02": {
+              "value": "不必走很远。\n一片银杏，就是今天的风景。"
+            },
+            "T03": {
+              "value": "SEASONAL NOTES / 01"
+            }
+          },
+          "images": {
+            "I01": {
+              "fit": "cover",
+              "cropX": 50,
+              "cropY": 50,
+              "zoom": 1
+            }
+          },
+          "decorations": {}
+        }
+      },
+      {
+        "key": "observe",
+        "role": "body",
+        "layoutId": "standard-01",
+        "intent": "用三个观察动作提供可实践的方法",
+        "bindings": {
+          "T01": "title",
+          "T02": "body",
+          "T03": "caption"
+        },
+        "parameters": {
+          "texts": {
+            "T01": {
+              "value": "先看见\n再记录"
+            },
+            "T02": {
+              "value": "看叶脉，看光落下的方向。\n留住一片金黄，也留出一半空白。\n把感受写成短句，画面就有了呼吸。"
+            },
+            "T03": {
+              "value": "FIELD NOTES / 02"
+            }
+          },
+          "images": {
+            "I01": {
+              "fit": "cover",
+              "cropX": 65,
+              "cropY": 40,
+              "zoom": 1.25
+            }
+          },
+          "decorations": {}
+        }
+      },
+      {
+        "key": "ending",
+        "role": "ending",
+        "layoutId": "standard-01",
+        "intent": "以轻量行动和提问收尾",
+        "bindings": {
+          "T01": "title",
+          "T02": "body",
+          "T03": "caption"
+        },
+        "parameters": {
+          "texts": {
+            "T01": {
+              "value": "留一点白\n给下一次",
+              "align": "middle"
+            },
+            "T02": {
+              "value": "今天，捡起一片叶子。\n用三个词记录它的颜色、纹理与心情。\n你的秋天，会从哪一页开始？",
+              "align": "middle"
+            },
+            "T03": {
+              "value": "YOUR TURN / 03"
+            }
+          },
+          "images": {
+            "I01": {
+              "fit": "cover",
+              "cropX": 65,
+              "cropY": 50,
+              "zoom": 1
+            }
+          },
+          "decorations": {},
+          "layers": {
+            "I01": {
+              "x": 40,
+              "y": 55,
+              "width": 40,
+              "height": 40,
+              "radius": 20
+            }
+          }
+        }
+      }
+    ]
+  }
+}

apps/studio/next-env.d.ts

@@ -0,0 +1,7 @@
+/// <reference types="next" />
+/// <reference types="next/image-types/global" />
+import "./.next/types/routes.d.ts";
+import "./.next/types/root-params.d.ts";
+
+// NOTE: This file should not be edited
+// see https://nextjs.org/docs/pages/api-reference/config/typescript for more information.

apps/studio/next.config.ts

@@ -0,0 +1,3 @@
+import type { NextConfig } from "next";
+const config: NextConfig = { basePath: "/studio", output: "standalone", outputFileTracingRoot: process.cwd(), poweredByHeader: false };
+export default config;

apps/studio/package.json

@@ -0,0 +1,27 @@
+{
+  "name": "@prompt/studio",
+  "private": true,
+  "scripts": {
+    "dev": "next dev -p 3001",
+    "build": "next build",
+    "start": "next start",
+    "typecheck": "next typegen && tsc --noEmit",
+    "test": "node --test tests/*.test.mjs",
+    "test:smoke": "node scripts/smoke.mjs"
+  },
+  "dependencies": {
+    "next": "16.4.2",
+    "react": "19.3.1",
+    "react-dom": "19.3.1",
+    "lucide-react": "1.61.0"
+  },
+  "devDependencies": {
+    "@tailwindcss/postcss": "4.3.3",
+    "@types/node": "24.19.2",
+    "@types/react": "19.3.0",
+    "@types/react-dom": "19.3.0",
+    "tailwindcss": "4.3.3",
+    "typescript": "5.9.3"
+  },
+  "packageManager": "pnpm@11.25.0"
+}

apps/studio/postcss.config.mjs

@@ -0,0 +1,3 @@
+export default {
+  plugins: { "@tailwindcss/postcss": {} },
+};

apps/studio/scripts/smoke.mjs

@@ -0,0 +1,29 @@
+/** CI-only isolated runtime checks, never a local preview workflow. */
+import {readFileSync} from 'node:fs';
+import {spawn} from 'node:child_process';import {once} from 'node:events';import {createServer} from 'node:net';import {createServer as createHttpServer} from 'node:http';import assert from 'node:assert/strict';import {setTimeout} from 'node:timers/promises';
+const designId='00000000-0000-4000-8000-000000000001',missingId='00000000-0000-4000-8000-000000000002';
+const standardId='00000000-0000-4000-8000-000000000003';
+const seriesId='00000000-0000-4000-8000-000000000004';
+const doc=JSON.parse(readFileSync(new URL('../fixtures/autumn-journal.json',import.meta.url))).document;
+const assetId='00000000-0000-4000-8000-000000000005';doc.sources=[{assetId,author:'CI fixture',license:'test only',url:'generated',prompt:'test image',tool:'fixture'}];for(const p of doc.pages)p.parameters.images.I01.assetId=assetId;
+let reads=0;
+const wiki=createHttpServer((req,res)=>{reads++;assert.equal(req.headers.cookie,'session=smoke-test');res.setHeader('Content-Type','application/json');if(req.url.endsWith(seriesId))return res.end(JSON.stringify({design:{id:seriesId,name:'完整三页作品',layoutId:'standard-01',revision:1,url:'/studio/template-layout?id='+seriesId,parameters:doc.pages[0].parameters,document:doc}}));const standard=req.url.endsWith(standardId);if(!standard&&!req.url.endsWith(designId)){res.writeHead(404);return res.end('{}')}res.end(JSON.stringify({design:{id:standard?standardId:designId,name:'已保存的实际页面',layoutId:standard?'standard-01':'ref-01',revision:3,url:'/studio/designs/'+designId,parameters:{added:[{id:'user-smoke',kind:'text',role:'Added text',box:[10,10,20,10],direction:'horizontal',text:'新增元素已恢复',reading:'custom'}],layers:{T01:{x:12,rotation:25,opacity:.7},'user-smoke':{z:12}},texts:{T01:{value:'确定的页面文字',color:'#123456'}},images:{I01:{color:'#abcdef'}},decorations:{D01:{hidden:true}},paper:'#eeeeee'}}}))});
+wiki.listen(0,'127.0.0.1');await once(wiki,'listening');
+const socket=createServer();socket.listen(0,'127.0.0.1');await once(socket,'listening');const port=socket.address().port;await new Promise(r=>socket.close(r));const child=spawn(process.execPath,['.next/standalone/server.js'],{env:{...process.env,PORT:String(port),HOSTNAME:'127.0.0.1',STUDIO_WIKI_ORIGIN:'http://127.0.0.1:'+wiki.address().port},stdio:'inherit'}),base='http://127.0.0.1:'+port;
+try{let ready=false;for(let i=0;i<60;i++){try{if((await fetch(base+'/studio/api/health')).ok){ready=true;break}}catch{}await setTimeout(250)}assert.ok(ready);const library=await fetch(base+'/studio').then(r=>r.text());assert.ok(library.includes('standard-01'));assert.ok(library.includes('ref-27'));const catalog=await fetch(base+'/studio/api/layouts').then(r=>r.json());assert.equal(catalog.layouts.length,28);
+for(const l of catalog.layouts){const page=await fetch(base+l.url);assert.equal(page.status,200,l.id);const html=await page.text();assert.ok(html.includes(l.name));assert.ok(html.includes('data-layout-id="'+l.id+'"'));assert.ok(!/<svg|<img|data:image|trial-controls|page-tools|workbench-top|contenteditable|编辑页面/.test(html),'Default page must use native elements, not source imagery');const schema=await fetch(base+l.api).then(r=>r.json());assert.equal(schema.id,l.id);for(const s of schema.elements)assert.ok(html.includes('data-element="'+s.id+'"'));if(l.family==='standard'){assert.equal((await fetch(base+l.api+'?format=svg')).status,400);continue;}const original=await fetch(base+l.api+'?format=svg').then(r=>r.text());assert.ok(original.includes('data-layout-id="'+l.id+'"'));const text=schema.elements.find(e=>e.kind==='text');const result=await fetch(base+l.api,{method:'POST',headers:{'Content-Type':'application/json'},body:JSON.stringify({texts:{[text.id]:{value:'API render <test>'}}})});assert.equal(result.status,200);assert.ok((await result.text()).includes('&lt;'));}
+assert.equal(reads,0,'Default pages never load a saved design');
+const headers={cookie:'session=smoke-test'};
+for(const id of [designId,standardId]){
+const saved=await fetch(base+'/studio/template-layout?id='+id,{headers});assert.equal(saved.status,200);const savedHtml=await saved.text();assert.ok(savedHtml.includes('确定的页面文字'));assert.ok(savedHtml.includes('新增元素已恢复'));assert.ok(savedHtml.includes('data-element="user-smoke"'));assert.ok(savedHtml.includes('rotate(25deg)'));assert.ok(savedHtml.includes('opacity:0.7'));assert.ok(savedHtml.includes('data-design-id="'+id+'"'));assert.ok(savedHtml.includes('#123456'));assert.ok(!savedHtml.includes('data-element="D01"'));assert.ok(!savedHtml.includes('data:image'));assert.ok(!/page-tools|workbench-top|contenteditable|编辑页面/.test(savedHtml));
+}
+const complete=await fetch(base+'/studio/template-layout?id='+seriesId,{headers});assert.equal(complete.status,200);const completeHtml=await complete.text(),artwork=completeHtml.match(/<main[\s\S]*?<\/main>/)[0];assert.equal((artwork.match(/data-page-key=/g)||[]).length,3);assert.ok(artwork.includes('data-style-version="autumn-journal/1"'));assert.ok(artwork.includes('把秋天'));assert.ok(artwork.includes('先看见'));assert.ok(artwork.includes('留一点白'));assert.ok(!/button|contenteditable|workbench-top/.test(artwork));
+const second=await fetch(base+'/studio/template-layout?id='+seriesId+'&page=2&export=1',{headers});assert.equal(second.status,200);const secondHtml=(await second.text()).match(/<main[\s\S]*?<\/main>/)[0];assert.equal((secondHtml.match(/data-page-key=/g)||[]).length,1);assert.ok(secondHtml.includes('data-page="2"'));assert.ok(secondHtml.includes('height:1440px'));assert.ok(secondHtml.includes('width=2160'));assert.ok(secondHtml.includes('profile=export'));assert.ok(secondHtml.includes('Noto Serif CJK SC'));
+for(const suffix of ['0','4','bad'])assert.equal((await fetch(base+'/studio/template-layout?id='+seriesId+'&page='+suffix,{headers})).status,404);
+for(const path of ['/studio/template-layout','/studio/template-layout?id=invalid','/studio/template-layout?id='+missingId,'/studio/template-layout?id='+designId+'&id='+standardId])assert.equal((await fetch(base+path,{headers})).status,404);
+assert.equal((await fetch(base+'/studio/layouts/ref-02?id='+designId,{headers})).status,404);
+assert.equal((await fetch(base+'/studio/layouts/ref-01?id='+missingId,{headers})).status,404);
+const beforeInvalid=reads;assert.equal((await fetch(base+'/studio/layouts/ref-01?id=invalid',{headers})).status,404);assert.equal(reads,beforeInvalid);
+const legacy=await fetch(base+'/studio/designs/'+designId,{headers,redirect:'manual'});assert.equal(legacy.status,307);assert.equal(legacy.headers.get('location'),'/studio/template-layout?id='+designId);
+const old=await fetch(base+'/studio/layouts/ref-01?id='+designId,{headers,redirect:'manual'});assert.equal(old.status,307);assert.equal(old.headers.get('location'),'/studio/template-layout?id='+designId);
+assert.equal((await fetch(base+'/studio/layouts/ref-28')).status,404);assert.equal((await fetch(base+'/studio/api/layouts/ref-01',{method:'POST',headers:{'Content-Type':'application/json'},body:JSON.stringify({texts:{I01:{value:'bad'}}})})).status,400);console.log('All 27 native pages, server-loaded saved IDs, legacy redirects and render APIs passed');}finally{child.kill('SIGTERM');await once(child,'exit');await new Promise(r=>wiki.close(r))}

apps/studio/src/components/LayoutSelection.tsx

@@ -0,0 +1,14 @@
+import {referencePreview} from '../lib/layout-images-client';
+import {useState} from 'react';
+import Head from 'next/head';
+import {SourceCover,selections,type CoverValues} from './SourceCover';
+import {tutorialPost} from '../content/tool-links';
+export function LayoutSelection(){
+ const [active,setActive]=useState(0),[values,setValues]=useState<CoverValues[]>(selections.map(l=>({fields:Object.fromEntries(Object.entries(l.fields).filter(([,v])=>v!==undefined)) as Record<string,string>,color:'#83918a',accent:'#c3cec5'}))),[guides,setGuides]=useState(false),[status,setStatus]=useState('');
+ const layout=selections[active],current=values[active];
+ function update(patch:Partial<CoverValues>){setValues(old=>old.map((v,i)=>i===active?{...v,...patch}:v));}
+ async function download(format:'svg'|'json'){
+  try{setStatus('正在生成…');const r=await fetch('/studio/api/export/layout-selection?format='+format,{method:'POST',headers:{'Content-Type':'application/json'},body:JSON.stringify({layoutId:layout.id,...current})});if(!r.ok)throw Error();const url=URL.createObjectURL(await r.blob()),a=document.createElement('a');a.href=url;a.download=layout.id+'.'+format;a.click();setTimeout(()=>URL.revokeObjectURL(url),500);setStatus('已导出当前模板。')}catch{setStatus('导出失败，请重试。')}
+ }
+ return <main className="template-trial"><Head><title>三种排版 · Studio 工具</title></Head><header className="trial-nav"><a href={tutorialPost}>← PROMPT 使用教程</a><span>STUDIO / LAYOUT SELECTION</span></header><section className="trial-intro"><div><small>REF-01 / REF-07 / REF-26</small><h1>三个构图，各有位置。</h1><p>切换真实原图对应的模板，分别试文字与配色。图位与装饰按教程构件重建为干净矢量；当前只放占位内容。</p></div></section><div className="trial-workspace"><aside className="trial-controls"><h2>选择与编辑</h2><label>排版<select value={active} onChange={e=>{setActive(Number(e.target.value));setStatus('')}}>{selections.map((l,i)=><option key={l.id} value={i}>{l.id} · {l.name}</option>)}</select></label>{layout.slots.filter(s=>s.kind==='text').map(s=><label key={s.id}>{s.id} · {s.role}<textarea rows={current.fields[s.id]?.includes('\n')?3:1} maxLength={120} value={current.fields[s.id]||''} onChange={e=>update({fields:{...current.fields,[s.id]:e.target.value}})}/></label>)}<div className="trial-colors"><label>主图色<input type="color" value={current.color} onChange={e=>update({color:e.target.value})}/></label><label>副图色<input type="color" value={current.accent} onChange={e=>update({accent:e.target.value})}/></label></div><label className="trial-switch"><input type="checkbox" checked={guides} onChange={e=>setGuides(e.target.checked)}/>显示构件边界</label><div className="trial-actions"><button className="trial-primary" onClick={()=>void download('svg')}>下载当前 SVG</button><button onClick={()=>void download('json')}>下载参数 JSON</button></div><p className="trial-help">每张模板单独保留本页修改，刷新恢复初始值。下载 SVG 为无边界线的正式图；原始低分辨率图层在 JSON 中保留作对照。</p><p role="status">{status}</p></aside><div><div className="selection-preview"><SourceCover layout={layout} values={current} guides={guides}/></div><div className="selection-thumbs">{selections.map((l,i)=><button key={l.id} aria-pressed={active===i} onClick={()=>setActive(i)}><SourceCover layout={l} values={values[i]}/><span>{l.id}</span></button>)}</div><details className="trial-reference"><summary>原图与构件坐标</summary><div className="trial-reference-body"><img src={referencePreview(layout.referenceUrl)} alt={layout.name+'原图'}/><div><a href={layout.tutorialUrl}>阅读这张原图的教程 ↗</a><table><thead><tr><th>ID</th><th>构件</th><th>x,y,w,h</th></tr></thead><tbody>{layout.slots.map(s=><tr key={s.id}><td>{s.id}</td><td>{s.role}</td><td>{s.box.join(', ')}</td></tr>)}</tbody></table></div></div></details></div></div></main>;
+}

apps/studio/src/components/LayoutWorkbench.tsx

@@ -1,5 +1,3 @@
-import { ThemeToggle } from "./ThemeToggle";
-import { Brand } from "./Brand";
 import {CurvedCopy} from './NativeCurvedCopy';
 import {useEffect,useRef,useState,type CSSProperties,type KeyboardEvent,type PointerEvent} from 'react';
 import {ArrowLeft,MousePointer2,Type,Square,Circle,ImagePlus,Layers,SlidersHorizontal,Undo2,Redo2,Copy,Trash2,Eye,EyeOff,Lock,Unlock,ChevronUp,ChevronDown,Minus,Plus,Scan,Save} from 'lucide-react';
@@ -57,7 +55,7 @@ export function LayoutWorkbench({layout,design:initialDesign}:LayoutPageProps){
  const selectedColor=slot?(slot.kind==='text'?params.texts[slot.id]?.color||textColor(layout.id,slot):slot.kind==='image'?params.images[slot.id]?.color||String(imageShape(layout,slot).backgroundColor):params.decorations[slot.id]?.color||'#83908a'):'';
  return <main className={'native-layout-page'+(editing?' is-editing':'')}>
   <Head><title>{name} · Prompt</title><meta name="description" content={layout.name+' · 可直接编辑的排版页面'}/></Head>
-  {editing&&<header className="workbench-top"><a href="/explore/8eb8c76500580f7a4b56ba3c" aria-label="返回目录"><ArrowLeft size={18}/></a><a href="/workspace" className="studio-mark"><Brand compact/></a><ThemeToggle/><input aria-label="页面名称" value={name} maxLength={120} onChange={e=>{setName(e.target.value);setDirty(true)}}/><span className="save-indicator">{busy?'正在处理…':dirty?'有未保存的修改':design?'已保存':'尚未保存'}</span><button title="撤销 ⌘Z" disabled={!history.length||busy} onClick={undo}><Undo2 size={17}/></button><button title="重做 ⇧⌘Z" disabled={!future.length||busy} onClick={redo}><Redo2 size={17}/></button><button onClick={()=>{setEditing(false);setTextEditing(null);setSelected(null)}}>查看页面</button><button className="primary" disabled={busy||!name.trim()} onClick={()=>void save()}><Save size={15}/>保存</button></header>}
+  {editing&&<header className="workbench-top"><a href="/explore/8eb8c76500580f7a4b56ba3c" aria-label="返回目录"><ArrowLeft size={18}/></a><span className="studio-mark">P<span>STUDIO</span></span><input aria-label="页面名称" value={name} maxLength={120} onChange={e=>{setName(e.target.value);setDirty(true)}}/><span className="save-indicator">{busy?'正在处理…':dirty?'有未保存的修改':design?'已保存':'尚未保存'}</span><button title="撤销 ⌘Z" disabled={!history.length||busy} onClick={undo}><Undo2 size={17}/></button><button title="重做 ⇧⌘Z" disabled={!future.length||busy} onClick={redo}><Redo2 size={17}/></button><button onClick={()=>{setEditing(false);setTextEditing(null);setSelected(null)}}>查看页面</button><button className="primary" disabled={busy||!name.trim()} onClick={()=>void save()}><Save size={15}/>保存</button></header>}
   {editing&&<aside className={'workbench-layers '+(panel==='layers'?'mobile-open':'')} inert={busy}><div className="panel-heading"><Layers size={16}/><strong>图层与素材</strong><span>{elements.length}</span></div><div className="insert-tools"><button onClick={()=>add('text')}><Type/>文字</button><button onClick={()=>add('decoration','rectangle')}><Square/>矩形</button><button onClick={()=>add('decoration','ellipse')}><Circle/>椭圆</button><button onClick={()=>add('image')}><ImagePlus/>图片</button></div><div className="layers-caption">{layout.id.toUpperCase()} <span>从上到下排列</span></div><div className="layer-list">{[...elements].sort((a,b)=>(layer(b).z??(b.kind==='text'?3:b.kind==='image'?1:2))-(layer(a).z??(a.kind==='text'?3:a.kind==='image'?1:2))).map(s=><div key={s.id} className={'layer-row '+(selected===s.id?'active':'')+(layer(s).hidden?' muted':'')}><button className="layer-select" onClick={()=>{setSelected(s.id);setTextEditing(null)}}>{s.kind==='text'?<Type size={14}/>:s.kind==='image'?<ImagePlus size={14}/>:<Square size={14}/>}<span>{s.role}</span></button><button title="显示或隐藏图层" aria-label={s.role+'显示或隐藏'} onClick={()=>updateLayer(s,{hidden:!layer(s).hidden})}>{layer(s).hidden?<EyeOff size={13}/>:<Eye size={13}/>}</button><button title="锁定或解锁图层" aria-label={s.role+'锁定或解锁'} onClick={()=>updateLayer(s,{locked:!layer(s).locked})}>{layer(s).locked?<Lock size={13}/>:<Unlock size={13}/>}</button></div>)}</div><p className="workbench-tip">拖动移动 · 双击文字改写<br/>⌘/Ctrl D 复制 · 方向键微调<br/>Shift + 方向键移动 10 单位</p></aside>}
   <div ref={viewport} className={editing?'workbench-viewport':'page-viewport'} onClick={e=>{if(e.target===e.currentTarget){setSelected(null);setTextEditing(null)}}}>
   {editing&&<div className="canvas-caption">{layout.name}<span>{layout.width} × {layout.height}</span></div>}

apps/studio/src/components/TemplateTrial.tsx

@@ -12,8 +12,8 @@ export function TemplateTrial({idea}:{idea:Idea}){
  const download=(text:string,type:string,name:string)=>{const url=URL.createObjectURL(new Blob([text],{type})),a=document.createElement('a');a.href=url;a.download=name;a.click();setTimeout(()=>URL.revokeObjectURL(url),500)};
  async function exportSvg(){await document.fonts.ready;const svg=document.querySelector(`[data-proof="${selected.key}"] svg`);if(!svg)return;download(new XMLSerializer().serializeToString(svg),'image/svg+xml',`ref-17-${selected.key}.svg`);setNotice('已下载当前封面 SVG，可继续编辑文字与图形。')}
  const reset=()=>{setSlides(idea.slides);setMasthead(template.masthead);setGuides(false);setNotice('已恢复初始试版。')};
- return <main className="template-trial"><Head><title>{idea.title} · 啡跃 Endoleap</title><link rel="alternate" type="text/markdown" href={'/studio/api/export/'+idea.slug+'?format=markdown'}/></Head>
+ return <main className="template-trial"><Head><title>{idea.title} · Studio</title><link rel="alternate" type="text/markdown" href={'/studio/api/export/'+idea.slug+'?format=markdown'}/></Head>
-  <header className="trial-nav"><a href={tutorialPost}>← 啡跃使用教程</a><span>STUDIO / TEMPLATE PROOF</span><a href={template.tutorialUrl} target="_blank" rel="noreferrer">排版教程 ↗</a></header>
+  <header className="trial-nav"><a href={tutorialPost}>← PROMPT 使用教程</a><span>STUDIO / TEMPLATE PROOF</span><a href={template.tutorialUrl} target="_blank" rel="noreferrer">排版教程 ↗</a></header>
   <section className="trial-intro"><div><small>REF-17 · 同一母版 / 四张试版</small><h1>先试封面，再填内容。</h1><p>英文刊头、圆形叠标、左下主图与右侧窄栏保持同一套坐标。三组合集先用主题占位，暂不放入具体 Skills。</p></div><div className="trial-source"><b>01 母版</b><span>02 笔记复习</span><span>03 教学资料</span><span>04 英语学习</span></div></section>
   <div className="trial-workspace"><aside className="trial-controls"><h2>试一试</h2><label>当前封面<select value={active} onChange={e=>{setActive(Number(e.target.value));setNotice('')}}>{slides.map((s,i)=><option value={i} key={s.key}>{s.label}</option>)}</select></label>
    <fieldset><legend>共享英文刊头</legend><label>第一行<input value={masthead[0]} maxLength={8} onChange={e=>setMasthead([e.target.value.toUpperCase().replace(/[^A-Z ]/g,''),masthead[1]])}/></label><label>第二行<input value={masthead[1]} maxLength={8} onChange={e=>setMasthead([masthead[0],e.target.value.replace(/[^A-Za-z ]/g,'')])}/></label></fieldset>

apps/studio/src/lib/design-server.ts

@@ -9,7 +9,7 @@ import type {Design} from './native-layout';
 /** Only forward the session to our fixed private Wiki service, never a request Host. */
 export async function readDesign(id:unknown,req:IncomingMessage):Promise<Design|null>{
  if(!uuid(id))return null;
- const origin=process.env.STUDIO_WIKI_ORIGIN||`http://127.0.0.1:${process.env.PORT || '3000'}`;
+ const origin=process.env.STUDIO_WIKI_ORIGIN||'http://waterfall-wiki:3000';
  const headers:Record<string,string>={};
  if(req.headers.cookie)headers.cookie=req.headers.cookie;
  if(req.headers.authorization)headers.authorization=req.headers.authorization;

apps/studio/src/lib/layout-images.ts

@@ -0,0 +1,9 @@
+import type {NextApiRequest} from 'next';
+import type {Parameters} from './layout-parameters';
+/** Only fetch bounded previews from the authenticated Wiki service, never caller URLs. */
+export async function embedLayoutImages(req:NextApiRequest,params:Parameters){
+ const ids=[...new Set(Object.values(params.images).flatMap(v=>v.assetId?[v.assetId]:[]))],sources:Record<string,string>={};let total=0;
+ const headers:Record<string,string>={};if(req.headers.authorization)headers.authorization=req.headers.authorization;if(req.headers.cookie)headers.cookie=req.headers.cookie;
+ for(const id of ids){const url='http://waterfall-wiki:3000/api/preview?'+new URLSearchParams({source:'/api/media/'+id,width:'960'}),r=await fetch(url,{headers,signal:AbortSignal.timeout(15000),redirect:'error'});if(!r.ok||r.headers.get('content-type')?.split(';')[0]!=='image/webp')throw Error('图片预览不可访问，请检查图片 ID 与登录状态');const chunks:Buffer[]=[];const reader=r.body!.getReader();try{while(true){const {done,value}=await reader.read();if(done)break;total+=value.length;if(total>16*1024*1024)throw Error('图片预览总计超限');chunks.push(Buffer.from(value))}}finally{await reader.cancel()}sources[id]='data:image/webp;base64,'+Buffer.concat(chunks).toString('base64');}
+ return sources;
+}

apps/studio/src/lib/layout-parameters.ts

@@ -0,0 +1,32 @@
+export type Slot={id:string;kind:string;role:string;box:number[];direction:string;text:string|null;reading:string};
+export type Layout={id:string;name:string;width:number;height:number;elements:Slot[]};
+export type TextValue={value:string;color?:string;scale?:number;align?:'start'|'middle'|'end';fontFamily?:'sans'|'serif'|'mono';fontSize?:number;fontWeight?:number;lineHeight?:number;letterSpacing?:number};
+export type ImageValue={assetId?:string;color?:string;fit?:'cover'|'contain';cropX?:number;cropY?:number;zoom?:number};
+export type DecorationValue={color?:string;hidden?:boolean};
+export type LayerValue={x?:number;y?:number;width?:number;height?:number;rotation?:number;opacity?:number;radius?:number;z?:number;hidden?:boolean;locked?:boolean};
+export type AddedSlot=Slot & {shape?:'rectangle'|'ellipse'};
+export type Parameters={texts:Record<string,TextValue>;images:Record<string,ImageValue>;decorations:Record<string,DecorationValue>;paper?:string;layers?:Record<string,LayerValue>;added?:AddedSlot[]};
+export class LayoutParameterError extends Error{}
+export const uuid=(v:unknown):v is string=>typeof v==='string'&&/^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i.test(v);
+function fail(message:string):never{throw new LayoutParameterError(message)}
+function object(v:unknown):Record<string,unknown>{if(!v||typeof v!=='object'||Array.isArray(v))fail('参数必须为 JSON 对象');return v as Record<string,unknown>}
+function keys(v:Record<string,unknown>,allowed:string[]){if(Object.keys(v).some(k=>!allowed.includes(k)))fail('未知参数或构件 ID')}
+function number(v:unknown,min:number,max:number){if(typeof v!=='number'||!Number.isFinite(v)||v<min||v>max)fail(`数值范围 ${min}–${max}`);return v}
+function color(v:unknown){if(typeof v!=='string'||!/^#[a-f0-9]{6}$/i.test(v))fail('颜色使用 #RRGGBB');return v}
+export function parameters(layout:Layout,input:unknown):Parameters{
+ const raw=object(input);keys(raw,['texts','images','decorations','paper','layers','added']);const result:Parameters={texts:{},images:{},decorations:{}};
+ const added:AddedSlot[]=[];
+ if(raw.added!==undefined){if(!Array.isArray(raw.added)||raw.added.length>100)fail('最多新增100个元素');for(const entry of raw.added){const v=object(entry);keys(v,['id','kind','role','box','direction','text','reading','shape']);if(typeof v.id!=='string'||!/^user-[a-zA-Z0-9-]{1,60}$/.test(v.id)||added.some(s=>s.id===v.id))fail('新增元素 ID 无效或重复');if(!['text','image','decoration'].includes(String(v.kind)))fail('新增元素类型无效');if(typeof v.role!=='string'||v.role.length>80)fail('图层名称最多80字');if(!Array.isArray(v.box)||v.box.length!==4)fail('box 为 x,y,width,height');const box=v.box.map((n,i)=>number(n,i<2?-10000:.1,10000));if(v.direction!=='horizontal'||v.reading!=='custom'||(v.text!==null&&(typeof v.text!=='string'||v.text.length>500)))fail('新增元素内容无效');if(v.shape!==undefined&&!['rectangle','ellipse'].includes(String(v.shape)))fail('无效形状');added.push({id:v.id,kind:String(v.kind),role:v.role,box,direction:'horizontal',text:v.text as string|null,reading:'custom',...(v.shape?{shape:v.shape as AddedSlot['shape']}:{})})}result.added=added}
+ const elements=[...layout.elements,...added];
+ if(raw.layers!==undefined){const entries=object(raw.layers);keys(entries,elements.map(e=>e.id));result.layers={};for(const [id,entry] of Object.entries(entries)){const v=object(entry);keys(v,['x','y','width','height','rotation','opacity','radius','z','hidden','locked']);const layer:Record<string,number|boolean>={};for(const [key,value] of Object.entries(v)){if(key==='hidden'||key==='locked'){if(typeof value!=='boolean')fail('图层开关必须为布尔值');layer[key]=value}else{const range:Record<string,number[]>={x:[-10000,10000],y:[-10000,10000],width:[.1,10000],height:[.1,10000],rotation:[-360,360],opacity:[0,1],radius:[0,5000],z:[-1000,1000]};layer[key]=number(value,range[key][0],range[key][1])}}result.layers[id]=layer}}
+ if(raw.paper!==undefined)result.paper=color(raw.paper);
+ for(const [group,kind] of [['texts','text'],['images','image'],['decorations','decoration']] as const){
+  const entries=object(raw[group]??{});keys(entries,elements.filter(e=>e.kind===kind).map(e=>e.id));
+  for(const [id,value] of Object.entries(entries)){const v=object(value);
+   if(group==='texts'){keys(v,['value','color','scale','align','fontFamily','fontSize','fontWeight','lineHeight','letterSpacing']);if(typeof v.value!=='string'||Array.from(v.value).length>500||v.value.split('\n').length>8)fail('文字最多 500 字 / 8 行');const t:TextValue={value:v.value};if(v.color!==undefined)t.color=color(v.color);if(v.scale!==undefined){if(typeof v.scale!=='number'||!Number.isFinite(v.scale)||v.scale<.25||v.scale>2)fail('scale 范围 0.25–2');t.scale=v.scale}if(v.align!==undefined){if(!['start','middle','end'].includes(String(v.align)))fail('无效 align');t.align=v.align as TextValue['align']}if(v.fontFamily!==undefined){if(!['sans','serif','mono'].includes(String(v.fontFamily)))fail('无效字体');t.fontFamily=v.fontFamily as TextValue['fontFamily']}for(const [key,min,max] of [['fontSize',.1,1000],['fontWeight',100,900],['lineHeight',.5,4],['letterSpacing',-20,100]] as const)if(v[key]!==undefined)t[key]=number(v[key],min,max);result.texts[id]=t;
+   }else if(group==='images'){keys(v,['assetId','color','fit','cropX','cropY','zoom']);const image:ImageValue={};if(v.assetId!==undefined){if(!uuid(v.assetId))fail('assetId 必须为已上传图片 UUID');image.assetId=v.assetId}if(v.color!==undefined)image.color=color(v.color);if(v.fit!==undefined){if(v.fit!=='cover'&&v.fit!=='contain')fail('fit 使用 cover 或 contain');image.fit=v.fit}for(const [key,min,max] of [['cropX',0,100],['cropY',0,100],['zoom',1,5]] as const)if(v[key]!==undefined)image[key]=number(v[key],min,max);result.images[id]=image;
+   }else{keys(v,['color','hidden']);const d:DecorationValue={};if(v.color!==undefined)d.color=color(v.color);if(v.hidden!==undefined){if(typeof v.hidden!=='boolean')fail('hidden 必须为布尔值');d.hidden=v.hidden}result.decorations[id]=d}
+  }
+ }
+ return result;
+}

apps/studio/src/lib/series.ts

@@ -0,0 +1,42 @@
+import {parameters,LayoutParameterError,type Layout,type Parameters,type TextValue,uuid} from './layout-parameters';
+export type Typography=Required<Pick<TextValue,'fontFamily'|'fontSize'|'fontWeight'|'lineHeight'|'letterSpacing'>>;
+export type Series={version:1;brief:{topic:string;audience:string;intent:string;designIntent:string;imageStrategy:string};style:{version:string;palette:{paper:string;ink:string;muted:string;accent:string};typography:Record<'title'|'body'|'caption',Typography>;spacing:{margin:number;gap:number}};sources:{assetId:string;author:string;license:string;url:string;prompt:string;tool:string}[];pages:{key:string;role:'cover'|'body'|'ending';layoutId:string;intent:string;bindings:Record<string,'title'|'body'|'caption'>;parameters:Parameters}[]};
+function fail(message:string):never{throw new LayoutParameterError(message)}
+const obj=(v:unknown)=>{if(!v||typeof v!=='object'||Array.isArray(v))return fail('作品字段必须是对象');return v as Record<string,unknown>};
+function exact(v:unknown,allowed:string[]){const o=obj(v);if(Object.keys(o).some(k=>!allowed.includes(k)))fail('作品包含未知字段');return o}
+function str(v:unknown,max=1000){if(typeof v!=='string'||!v.trim()||v.length>max)fail('作品文字缺失或超长');return v as string}
+function num(v:unknown,min:number,max:number){if(typeof v!=='number'||!Number.isFinite(v)||v<min||v>max)fail('作品数值超出范围');return v as number}
+/** Closed, bounded content document. The same validator runs in persistence and SSR. */
+export function series(input:unknown,layouts:Layout[]):Series{
+ const raw=exact(input,['version','brief','style','sources','pages']);if(raw.version!==1)fail('不支持的作品版本');
+ const brief=exact(raw.brief,['topic','audience','intent','designIntent','imageStrategy']);for(const k of ['topic','audience','intent','designIntent','imageStrategy'])str(brief[k],2000);
+ const style=exact(raw.style,['version','palette','typography','spacing']);str(style.version,80);
+ const palette=exact(style.palette,['paper','ink','muted','accent']);for(const k of ['paper','ink','muted','accent'])if(!/^#[a-f\d]{6}$/i.test(String(palette[k])))fail('作品颜色使用 #RRGGBB');
+ const typography=exact(style.typography,['title','body','caption']);
+ for(const role of ['title','body','caption']){const t=exact(typography[role],['fontFamily','fontSize','fontWeight','lineHeight','letterSpacing']);if(!['sans','serif','mono'].includes(String(t.fontFamily)))fail('无效作品字体');num(t.fontSize,.1,40);num(t.fontWeight,100,900);num(t.lineHeight,.5,4);num(t.letterSpacing,-5,10)}
+ const spacing=exact(style.spacing,['margin','gap']);num(spacing.margin,4,16);num(spacing.gap,1,10);if(Number(spacing.margin)*2+Number(spacing.gap)*4>48)fail('页边距与间距组合过大');
+ if(!Array.isArray(raw.sources)||raw.sources.length>100)fail('素材来源最多100条');
+ const sources=raw.sources.map(v=>{const s=exact(v,['assetId','author','license','url','prompt','tool']);if(!uuid(str(s.assetId,36)))fail('来源需素材 UUID');for(const k of ['author','license','url','prompt','tool'])str(s[k],4000);if(s.url!=='generated'&&!/^https?:\/\//.test(String(s.url)))fail('来源使用 http(s) 地址或 generated');return s as Series['sources'][number]});
+ if(!Array.isArray(raw.pages)||raw.pages.length<3||raw.pages.length>18)fail('作品需要3–18页');
+ const seen=new Set<string>();
+ const pages=raw.pages.map((entry,index)=>{const p=exact(entry,['key','role','layoutId','intent','bindings','parameters']);const key=str(p.key,60);if(!/^[a-z0-9-]+$/.test(key)||seen.has(key))fail('页面 key 必须唯一');seen.add(key);
+ const role=index===0?'cover':index===(raw.pages as unknown[]).length-1?'ending':'body';if(p.role!==role)fail('页序须为封面、正文、结尾');str(p.intent,1000);const layout=layouts.find(l=>l.id===p.layoutId);if(!layout)fail('作品模板不存在');const resolvedLayout=layout!;const params=parameters(resolvedLayout,p.parameters);const bindings=obj(p.bindings);const slots=[...resolvedLayout.elements,...(params.added||[])];for(const [id,token] of Object.entries(bindings)){if(!slots.some(s=>s.id===id&&s.kind==='text')||!['title','body','caption'].includes(String(token)))fail('字体绑定无效');if(!params.texts[id])fail('绑定文字必须提供文案')}
+ // Every visible text is authored; template placeholder copy must never leak into a finished series.
+ for(const s of slots)if(s.kind==='text'&&!params.layers?.[s.id]?.hidden&&!params.texts[s.id])fail('请填写或隐藏所有文字元素');
+ for(const image of Object.values(params.images))if(image.assetId&&!sources.some(s=>s.assetId===image.assetId))fail('每张图片需记录作者、许可和生成过程');
+ return {...p,parameters:params,bindings} as Series['pages'][number]});
+ return {version:1,brief:brief as Series['brief'],style:style as Series['style'],sources,pages};
+}
+/** Style units use a 120-wide reference canvas; explicit element values always win. */
+export function pageParameters(doc:Series,page:Series['pages'][number],layout:Layout):Parameters{
+ const p=page.parameters,s=doc.style,k=layout.width/120;
+ const result:Parameters={...p,paper:p.paper||s.palette.paper,texts:{...p.texts},images:{...p.images},decorations:{...p.decorations},layers:{...p.layers}};
+ for(const [id,token] of Object.entries(page.bindings)){const t=s.typography[token];result.texts[id]={...t,fontSize:t.fontSize*k,letterSpacing:t.letterSpacing*k,color:token==='caption'?s.palette.muted:s.palette.ink,...p.texts[id]}}
+ for(const slot of [...layout.elements,...(p.added||[])]){if(slot.kind==='image')result.images[slot.id]={color:s.palette.accent,...p.images[slot.id]};if(slot.kind==='decoration')result.decorations[slot.id]={color:s.palette.accent,...p.decorations[slot.id]}}
+ if(layout.id==='standard-01'){
+  const m=s.spacing.margin,g=s.spacing.gap,w=120-2*m;
+  const boxes:Record<string,number[]>={T03:[m,m,w,4],T01:[m,m+4+g,w,28],I01:[m,m+32+2*g,w,50],T02:[m,m+82+3*g,w,27],D01:[m,160-m,w,.4]};
+  for(const [id,[x,y,width,height]] of Object.entries(boxes))result.layers![id]={x,y,width,height,...p.layers?.[id]};
+ }
+ return result;
+}

apps/studio/src/pages/_app.tsx

@@ -0,0 +1,3 @@
+import type { AppProps } from "next/app";
+import "../styles/globals.css";
+export default function App({Component,pageProps}:AppProps){return <Component {...pageProps}/>;}

apps/studio/src/pages/api/export/[slug].ts

@@ -1,12 +1,11 @@
-import {embedSvgMedia} from '../../../../studio/lib/layout-images';
 import {renderToStaticMarkup} from 'react-dom/server';
-import {serveApiDocumentation} from '../../../../studio/lib/api-documentation';
+import {serveApiDocumentation} from '../../../lib/api-documentation';
 import type {NextApiRequest,NextApiResponse} from 'next';
-import {ideas,ideaMarkdown} from '../../../../studio/content/ideas';
+import {ideas,ideaMarkdown} from '../../../content/ideas';
-import {selections} from '../../../../studio/components/SourceCover';
+import {selections} from '../../../components/SourceCover';
-import {renderCover} from '../../../../studio/lib/render-cover';
+import {renderCover} from '../../../lib/render-cover';
-import {tutorialPost} from '../../../../studio/content/tool-links';
+import {tutorialPost} from '../../../content/tool-links';
-export default async function handler(req:NextApiRequest,res:NextApiResponse){
+export default function handler(req:NextApiRequest,res:NextApiResponse){
  if(serveApiDocumentation(req,res,'/studio/api/export/{slug}'))return;
  if(!['GET','POST'].includes(req.method||'')){res.setHeader('Allow','GET, POST');return res.status(405).end();}
  const slug=String(req.query.slug||''),idea=ideas.find(i=>i.slug===slug);if(!idea)return res.status(404).end();
@@ -18,7 +17,7 @@ export default async function handler(req:NextApiRequest,res:NextApiResponse){
    const result=renderCover(slug,input);res.setHeader('Cache-Control','no-store');
    res.setHeader('Content-Disposition',`attachment; filename="${slug}.${req.query.format==='json'?'json':'svg'}"`);
    if(req.query.format==='json')return res.json(result.data);
-   res.setHeader('Content-Type','image/svg+xml; charset=utf-8');return res.send(await embedSvgMedia(req,renderToStaticMarkup(result.node)));
+   res.setHeader('Content-Type','image/svg+xml; charset=utf-8');return res.send(renderToStaticMarkup(result.node));
   }catch(error){return res.status(400).json({error:error instanceof Error?error.message:'无效参数'});}
  }
  if(req.query.format==='markdown'){res.setHeader('Content-Type','text/markdown; charset=utf-8');return res.send(ideaMarkdown(idea)+'\n\n使用教程：'+tutorialPost+(idea.tool?'\n\n```json\n'+JSON.stringify(selections,null,2)+'\n```':''));}

apps/studio/src/pages/api/health.ts

@@ -1,3 +1,3 @@
-import {serveApiDocumentation} from '../../../studio/lib/api-documentation';
+import {serveApiDocumentation} from '../../lib/api-documentation';
 import type {NextApiRequest,NextApiResponse} from "next";
 export default function handler(req:NextApiRequest,res:NextApiResponse){if(serveApiDocumentation(req,res,'/studio/api/health'))return;res.setHeader("Cache-Control","no-store");if(!["GET","HEAD"].includes(req.method||""))return res.status(405).end();return req.method==="HEAD"?res.status(200).end():res.status(200).json({status:"ok",service:"prompt-studio"});}

apps/studio/src/pages/api/index.ts

@@ -0,0 +1,3 @@
+import type {NextApiRequest,NextApiResponse} from 'next';
+import {ideas} from '../../content/ideas';
+export default function handler(_:NextApiRequest,res:NextApiResponse){res.setHeader('Content-Type','text/markdown; charset=utf-8');res.send('# 创作站\n\n- [27 套排版目录与 API](/studio/api/layouts?agent_mode=True)\n- [多页作品与统一视觉](/api/studio/series?agent_mode=True)\n- [按 ID 保存效果](/api/studio/designs?agent_mode=True)\n\n'+ideas.map(i=>`- [${i.title}](/studio/ideas/${i.slug}) · [正文](/studio/api/export/${i.slug}?format=markdown)`).join('\n'));}

apps/studio/src/pages/api/layouts/[id].ts

@@ -1,12 +1,11 @@
-import {embedSvgMedia} from '../../../../studio/lib/layout-images';
 import type {NextApiRequest,NextApiResponse} from 'next';
-import {embedLayoutImages} from '../../../../studio/lib/layout-images';
+import {embedLayoutImages} from '../../../lib/layout-images';
 import {createElement} from 'react';
 import {renderToStaticMarkup} from 'react-dom/server';
-import layouts from '../../../../studio/content/templates/layouts.json';
+import layouts from '../../../content/templates/layouts.json';
-import standardLayout from '../../../../studio/content/standard-layout.json';
+import standardLayout from '../../../content/standard-layout.json';
-import {LayoutCanvas} from '../../../../studio/components/LayoutCanvas';
+import {LayoutCanvas} from '../../../components/LayoutCanvas';
-import {parameters,LayoutParameterError} from '../../../../studio/lib/layout-parameters';
+import {parameters,LayoutParameterError} from '../../../lib/layout-parameters';
 const workspaceSchema={
  added:'可选数组，最多100项：{id:"user-唯一ID",kind:"text|image|decoration",role:"名称",box:[x,y,width,height],direction:"horizontal",text:"文字或null",reading:"custom",shape:"rectangle|ellipse（装饰可选）"}',
  layers:'按原生或新增元素ID索引：x/y -10000..10000，width/height 0.1..10000，rotation -360..360，opacity 0..1，radius 0..5000，z -1000..1000，hidden/locked 布尔值；坐标和字号均为模板单位',
@@ -26,6 +25,6 @@ export default async function handler(req:NextApiRequest,res:NextApiResponse){
   }catch(e){return res.status(400).json({error:e instanceof Error?e.message:'参数不合法'})}
  }
  if(!['GET','HEAD','POST'].includes(req.method||'')){res.setHeader('Allow','GET, HEAD, POST');return res.status(405).end()}const layout=layouts.find(l=>l.id===req.query.id);if(!layout)return res.status(404).json({error:'排版不存在'});
- try{if(req.query.format!==undefined&&!['svg','json'].includes(String(req.query.format)))throw new LayoutParameterError('format 为 svg 或 json');const params=parameters(layout,req.method==='POST'?req.body:{});if(req.method==='HEAD')return res.status(200).end();if(req.query.format==='json')return res.json({layoutId:layout.id,parameters:params});if(req.method==='POST'||req.query.format==='svg'){res.setHeader('Content-Type','image/svg+xml; charset=utf-8');return res.send(await embedSvgMedia(req,renderToStaticMarkup(createElement(LayoutCanvas,{layout,params,imageSources:await embedLayoutImages(req,params)}))))}return res.json({schemaVersion:1,family:'fixed',id:layout.id,name:layout.name,width:layout.width,height:layout.height,sourceSha256:layout.sourceSha256,tutorialUrl:layout.tutorialUrl,elements:layout.elements.map(({id,kind,role,box,direction,text,reading})=>({id,kind,role,box,direction,text,reading})),parameters:params,workspaceSchema,url:'/studio/layouts/'+layout.id})}catch(e){return res.status(400).json({error:e instanceof Error?e.message:'参数不合法'})}
+ try{if(req.query.format!==undefined&&!['svg','json'].includes(String(req.query.format)))throw new LayoutParameterError('format 为 svg 或 json');const params=parameters(layout,req.method==='POST'?req.body:{});if(req.method==='HEAD')return res.status(200).end();if(req.query.format==='json')return res.json({layoutId:layout.id,parameters:params});if(req.method==='POST'||req.query.format==='svg'){res.setHeader('Content-Type','image/svg+xml; charset=utf-8');return res.send(renderToStaticMarkup(createElement(LayoutCanvas,{layout,params,imageSources:await embedLayoutImages(req,params)})))}return res.json({schemaVersion:1,family:'fixed',id:layout.id,name:layout.name,width:layout.width,height:layout.height,sourceSha256:layout.sourceSha256,tutorialUrl:layout.tutorialUrl,elements:layout.elements.map(({id,kind,role,box,direction,text,reading})=>({id,kind,role,box,direction,text,reading})),parameters:params,workspaceSchema,url:'/studio/layouts/'+layout.id})}catch(e){return res.status(400).json({error:e instanceof Error?e.message:'参数不合法'})}
 }
 export const config={api:{bodyParser:{sizeLimit:'64kb'}}};

apps/studio/src/pages/api/layouts/index.ts

@@ -1,6 +1,6 @@
 import type {NextApiRequest,NextApiResponse} from 'next';
-import fixed from '../../../../studio/content/templates/layouts.json';
+import fixed from '../../../content/templates/layouts.json';
-import standard from '../../../../studio/content/standard-layout.json';
+import standard from '../../../content/standard-layout.json';
 export default function handler(req:NextApiRequest,res:NextApiResponse){
  if(!['GET','HEAD'].includes(req.method||'')){res.setHeader('Allow','GET, HEAD');return res.status(405).end()}
  const entries=[standard,...fixed].map(l=>({id:l.id,name:l.name,family:l.id==='standard-01'?'standard':'fixed',url:'/studio/layouts/'+l.id,api:'/studio/api/layouts/'+l.id}));

apps/studio/src/pages/designs/[id].tsx

@@ -1,11 +1,11 @@
 import type {GetServerSideProps} from 'next';
-import {readDesign} from '../../../studio/lib/design-server';
+import {readDesign} from '../../lib/design-server';
-import {designUrl} from '../../../studio/lib/native-layout';
+import {designUrl} from '../../lib/native-layout';
 export default function DesignPage(){return null}
 export const getServerSideProps:GetServerSideProps=async({params,req,res})=>{
  res.setHeader('Cache-Control','private, no-store');
  const design=await readDesign(params?.id,req);
  if(!design)return {notFound:true};
- // The unified application has no basePath; keep the full historical URL.
+ // Next adds the configured /studio basePath to server redirects.
- return {redirect:{destination:designUrl(design.layoutId,design.id),permanent:false}};
+ return {redirect:{destination:designUrl(design.layoutId,design.id).slice('/studio'.length),permanent:false}};
 };

apps/studio/src/pages/ideas/[slug].tsx

@@ -0,0 +1,10 @@
+import type {GetStaticPaths,GetStaticProps} from 'next';
+import Head from 'next/head';
+import Link from 'next/link';
+import {LayoutSelection} from '../../components/LayoutSelection';
+import {tutorialPost} from '../../content/tool-links';
+import {TemplateTrial} from '../../components/TemplateTrial';
+import {ideas,type Idea} from '../../content/ideas';
+export default function IdeaPage({idea}:{idea:Idea}){if(idea.tool==='layout-selection')return <LayoutSelection/>;if(idea.template)return <TemplateTrial idea={idea}/>;return <main className="editor"><Head><title>{idea.title} · 创作站</title><link rel="alternate" type="text/markdown" href={'/studio/api/export/'+idea.slug+'?format=markdown'}/></Head><header><a href={tutorialPost}>← PROMPT 使用教程</a><a href={'/studio/api/export/'+idea.slug}>导出内容包 ↓</a><a href={'/studio/api/export/'+idea.slug+'?format=markdown'}>Markdown ↓</a><button onClick={()=>window.print()}>打印 / PDF</button></header><h1>{idea.title}</h1><p>{idea.summary}</p><div className="slides">{idea.slides.map((s,i)=><article className="slide" key={i} style={{background:s.color}}><small>PROMPT STUDIO / {String(i+1).padStart(2,'0')}</small><h2>{s.heading}</h2><p>{s.body}</p><footer>记录灵感 · 自由表达</footer></article>)}</div></main>}
+export const getStaticPaths:GetStaticPaths=async()=>({paths:ideas.map(i=>({params:{slug:i.slug}})),fallback:false});
+export const getStaticProps:GetStaticProps=async({params})=>{const idea=ideas.find(i=>i.slug===params?.slug);return idea?{props:{idea}}:{notFound:true}};

apps/studio/src/pages/index.tsx

@@ -0,0 +1,6 @@
+import Head from 'next/head';
+import fixed from '../content/templates/layouts.json';
+import standard from '../content/standard-layout.json';
+import {nativeLayout} from '../lib/native-layout';
+import {NativePreview as Preview} from '../components/NativePreview';
+export default function StudioEntry(){return <main className="studio-library"><Head><title>Studio · 可视化排版 API 库</title></Head><nav className="library-nav"><a href="/">PROMPT / STUDIO</a><a href="/explore/8eb8c76500580f7a4b56ba3c">使用文档与工具箱</a><a href="/api/studio/designs?agent_mode=True">API 契约</a></nav><h1>用参数，编排画面。</h1><p className="library-intro">给 coding agent 文字、图片与创作意图。选择标准图文或固定构图，通过 HTTP 保存渲染描述，得到一个可持续更新的原生页面。</p><div className="library-heading"><h2>标准排版</h2><a href="/studio/api/layouts/standard-01">参数</a></div><div className="library-standard"><a href="/studio/layouts/standard-01"><Preview layout={standard}/></a><div><h2>一页，一件事。</h2><p>沿用 Studio 标题、正文与页脚的图文结构，增加可配置图片位。文字、颜色、图片和几何坐标共用一套参数，也可添加原生元素。</p><code>layoutId: standard-01</code><p><a href="/studio/layouts/standard-01">打开原生页面</a></p></div></div><div className="library-heading"><h2>固定排版 · 27 套</h2><a href="/explore/8eb8c76500580f7a4b56ba3c">使用文档</a></div><div className="library-grid">{fixed.map(l=><article className="library-item" key={l.id}><a href={'/studio/layouts/'+l.id}><Preview layout={nativeLayout(l)}/><h3>{l.name}</h3><p>{l.id.toUpperCase()}</p></a></article>)}</div></main>}

apps/studio/src/pages/layouts/[layoutId].tsx

@@ -1,11 +1,11 @@
 import type {GetServerSideProps} from 'next';
-import {NativeResult} from '../../../studio/components/NativeResult';
+import {NativeResult} from '../../components/NativeResult';
-import type {Layout} from '../../../studio/lib/layout-parameters';
+import type {Layout} from '../../lib/layout-parameters';
-import fixedLayouts from '../../../studio/content/templates/layouts.json';
+import fixedLayouts from '../../content/templates/layouts.json';
-import standardLayout from '../../../studio/content/standard-layout.json';
+import standardLayout from '../../content/standard-layout.json';
 const layouts=[...fixedLayouts,standardLayout];
-import {nativeLayout,designUrl} from '../../../studio/lib/native-layout';
+import {nativeLayout,designUrl} from '../../lib/native-layout';
-import {readDesign} from '../../../studio/lib/design-server';
+import {readDesign} from '../../lib/design-server';
 export default function LayoutPage({layout}:{layout:Layout}){return <NativeResult layout={layout} design={null}/>}
 export const getServerSideProps:GetServerSideProps<{layout:Layout}>=async({params,query,req,res})=>{
  res.setHeader('Cache-Control','private, no-store');

apps/studio/src/pages/template-layout.tsx

@@ -1,11 +1,11 @@
 import type {GetServerSideProps} from 'next';
-import {NativeSeries} from '../../studio/components/NativeSeries';
+import {NativeSeries} from '../components/NativeSeries';
-import {NativeResult} from '../../studio/components/NativeResult';
+import {NativeResult} from '../components/NativeResult';
-import fixedLayouts from '../../studio/content/templates/layouts.json';
+import fixedLayouts from '../content/templates/layouts.json';
-import standardLayout from '../../studio/content/standard-layout.json';
+import standardLayout from '../content/standard-layout.json';
-import {readDesign} from '../../studio/lib/design-server';
+import {readDesign} from '../lib/design-server';
-import {nativeLayout,type Design} from '../../studio/lib/native-layout';
+import {nativeLayout,type Design} from '../lib/native-layout';
-import type {Layout} from '../../studio/lib/layout-parameters';
+import type {Layout} from '../lib/layout-parameters';
 
 type Props={layout:Layout;design:Design;page:number|null;quality:boolean};
 export default function TemplateLayout(props:Props){return props.design.document?<NativeSeries design={props.design} page={props.page} quality={props.quality}/>:<NativeResult {...props}/>}

apps/studio/tests/layout-parameters.test.mjs

@@ -0,0 +1,7 @@
+import {test} from 'node:test';import assert from 'node:assert/strict';import {readFileSync} from 'node:fs';
+import {parameters} from '../src/lib/layout-parameters.ts';
+const layouts=JSON.parse(readFileSync(new URL('../src/content/templates/layouts.json',import.meta.url)));
+test('27 layouts preserve unique typed source slots and complete shapes',()=>{assert.equal(layouts.length,27);for(const [i,l] of layouts.entries()){assert.equal(l.id,'ref-'+String(i+1).padStart(2,'0'));assert.equal(new Set(l.elements.map(s=>s.id)).size,l.elements.length);for(const s of l.elements){assert.match(s.id,/^[TID]\d{2}$/);assert.equal(s.kind,({T:'text',I:'image',D:'decoration'})[s.id[0]]);assert.ok(s.box[0]>=0&&s.box[1]>=0&&s.box[0]+s.box[2]<=l.width&&s.box[1]+s.box[3]<=l.height);assert.match(s.raster,/^data:image\/png;base64,/);if(s.kind==='image')assert.match(s.shape,/^data:image\/png;base64,/)}assert.deepEqual(parameters(l,{}),{texts:{},images:{},decorations:{}})}});
+test('parameters reject mismatched slots, unsafe URLs and excessive text',()=>{const l=layouts[0];for(const input of [{texts:{I01:{value:'bad'}}},{images:{I01:{url:'https://evil.test'}}},{texts:{T01:{value:'x',scale:3}}},{texts:{T01:{value:'x'.repeat(501)}}},{paper:'url(x)'},{decorations:{D01:{hidden:'true'}}},null,[]])assert.throws(()=>parameters(l,input));const p=parameters(l,{texts:{T01:{value:'<script>not markup</script>',scale:1.2,align:'middle'}},images:{I01:{color:'#abcdef',fit:'contain'}},decorations:{D01:{hidden:true}}});assert.equal(p.texts.T01.value,'<script>not markup</script>');assert.equal(p.decorations.D01.hidden,true)});
+test('workspace parameters round-trip identically through Studio and Wiki validation',async()=>{const {parameters:wiki}=await import('../../waterfall-wiki/src/lib/layout-parameters.ts');for(const l of layouts){const added={id:'user-example',kind:'text',role:'Added text',box:[3,4,20,12],direction:'horizontal',text:'Hello',reading:'custom'};const input={added:[added],layers:{T01:{x:2,y:4,width:15,height:10,rotation:25,opacity:.7,radius:2,z:10,hidden:false,locked:true},'user-example':{x:8,z:20}},texts:{T01:{value:'Updated',fontFamily:'serif',fontSize:4,fontWeight:700,lineHeight:1.6,letterSpacing:.2},'user-example':{value:'Hello'}},images:{I01:{fit:'cover',cropX:15,cropY:85,zoom:2}}};assert.deepEqual(parameters(l,input),wiki(l,input));assert.deepEqual(parameters(l,parameters(l,input)),parameters(l,input))}});
+test('workspace validation rejects unbounded, mismatched and executable properties',()=>{const l=layouts[0];for(const input of [{layers:{unknown:{x:2}}},{layers:{T01:{rotation:Infinity}}},{layers:{T01:{width:0}}},{layers:{T01:{opacity:2}}},{layers:{T01:{locked:'yes'}}},{texts:{T01:{value:'x',fontFamily:'url(evil)'}}},{images:{I01:{cropX:101}}},{images:{I01:{zoom:0}}},{added:[{id:'T01'}]},{added:Array(101).fill({})},{layers:{T01:{onClick:'evil'}}}])assert.throws(()=>parameters(l,input))});

apps/studio/tests/native-layout.test.mjs

@@ -0,0 +1,19 @@
+import {test} from 'node:test';
+import assert from 'node:assert/strict';
+import {readFileSync} from 'node:fs';
+import {nativeLayout,defaultText,textSize,imageShape,designUrl,newElementId} from '../src/lib/native-layout.ts';
+const layouts=JSON.parse(readFileSync(new URL('../src/content/templates/layouts.json',import.meta.url)));
+test('all 27 native pages are independent of source images and supply actual text',()=>{
+ for(const original of layouts){const layout=nativeLayout(original),serialized=JSON.stringify(layout);assert.ok(!serialized.includes('data:image'));assert.ok(!serialized.includes('raster'));assert.ok(!serialized.includes('source'));assert.ok(serialized.length<7000);
+  for(const slot of layout.elements.filter(s=>s.kind==='text')){assert.ok(defaultText(layout,slot).length);for(const text of [defaultText(layout,slot),'','新的文字\n第二行','<script>plain text</script>']){const size=textSize(layout,slot,text);assert.ok(Number.isFinite(size)&&size>0)}}
+ }
+});
+test('geometric templates retain their distinct silhouettes without bitmap masks',()=>{
+ assert.equal(imageShape(layouts[4],layouts[4].elements.find(s=>s.id==='I03')).borderRadius,'50%');
+ assert.ok(imageShape(layouts[21],layouts[21].elements.find(s=>s.id==='I02')).clipPath.startsWith('polygon('));
+ assert.notEqual(imageShape(layouts[21],layouts[21].elements.find(s=>s.id==='I02')).clipPath,imageShape(layouts[26],layouts[26].elements.find(s=>s.id==='I02')).clipPath);
+ assert.equal(designUrl('ref-01','abc'),'/studio/template-layout?id=abc');
+ assert.equal(designUrl('standard-01','abc'),'/studio/template-layout?id=abc');
+});
+
+test('element IDs work on HTTP origins without secure-context randomUUID',()=>{const saved=Object.getOwnPropertyDescriptor(globalThis,'crypto');let calls=0;Object.defineProperty(globalThis,'crypto',{configurable:true,value:{getRandomValues(array){for(let i=0;i<array.length;i++)array[i]=++calls;return array}}});try{const first=newElementId(),second=newElementId();assert.match(first,/^user-[a-f0-9]{32}$/);assert.notEqual(first,second)}finally{Object.defineProperty(globalThis,'crypto',saved)}});

apps/studio/tests/series.test.mjs

@@ -0,0 +1,12 @@
+import {test} from 'node:test';
+import assert from 'node:assert/strict';
+import {readFileSync} from 'node:fs';
+import {registerHooks} from 'node:module';
+registerHooks({resolve(specifier,context,next){try{return next(specifier,context)}catch(e){if(e.code==='ERR_MODULE_NOT_FOUND'&&specifier.startsWith('.'))return next(specifier+'.ts',context);throw e}}});
+const {series,pageParameters}=await import('../src/lib/series.ts');
+const layout=JSON.parse(readFileSync(new URL('../src/content/standard-layout.json',import.meta.url)));
+// Fixture copied into the CI image; no build is performed by these tests.
+const input=JSON.parse(readFileSync(new URL('../fixtures/autumn-journal.json',import.meta.url)));
+test('a complete three-page document preserves copy and resolves shared visual tokens',()=>{const d=series(input.document,[layout]);assert.equal(d.pages.length,3);for(const page of d.pages){const p=pageParameters(d,page,layout);assert.equal(p.paper,d.style.palette.paper);assert.equal(p.texts.T01.fontFamily,'serif');assert.equal(p.texts.T01.value,page.parameters.texts.T01.value);assert.equal(p.layers.T01.x,10)}const change=structuredClone(d);change.style.palette.ink='#112233';change.style.spacing.margin=8;for(const page of change.pages){const p=pageParameters(change,page,layout);assert.equal(p.texts.T02.color,'#112233');assert.equal(p.layers.T01.x,8)}change.pages[1].parameters.texts.T01.color='#ABCDEF';assert.equal(pageParameters(change,change.pages[1],layout).texts.T01.color,'#ABCDEF')});
+test('invalid page order, stale template placeholders, untracked images and unsafe fields fail',()=>{for(const mutate of [d=>d.pages.reverse(),d=>d.pages[1].key=d.pages[0].key,d=>delete d.pages[0].parameters.texts.T02,d=>d.pages[0].parameters.images.I01.assetId='f76134e7-6e4f-4261-b90c-3c523dc16307',d=>d.style.palette.ink='url(evil)',d=>d.style.spacing.gap=10,d=>d.pages[0].bindings.I01='title',d=>d.pages[0].parameters.images.I01.url='https://evil.test']){const d=structuredClone(input.document);mutate(d);assert.throws(()=>series(d,[layout]))}});
+test('persistence and renderer use byte-identical series contracts',()=>assert.equal(readFileSync(new URL('../src/lib/series.ts',import.meta.url),'utf8'),readFileSync(new URL('../../waterfall-wiki/src/lib/series.ts',import.meta.url),'utf8')));

apps/studio/tsconfig.json

@@ -0,0 +1,21 @@
+{
+  "compilerOptions": {
+    "target": "ES2022",
+    "lib": ["dom", "dom.iterable", "esnext"],
+    "allowJs": true,
+    "skipLibCheck": true,
+    "strict": true,
+    "noEmit": true,
+    "esModuleInterop": true,
+    "module": "esnext",
+    "moduleResolution": "bundler",
+    "resolveJsonModule": true,
+    "isolatedModules": true,
+    "jsx": "react-jsx",
+    "incremental": true,
+    "baseUrl": ".",
+    "paths": { "@/*": ["./src/*"] }
+  },
+  "include": ["next-env.d.ts", "**/*.ts", "**/*.tsx", ".next/types/**/*.ts"],
+  "exclude": ["node_modules"]
+}

apps/waterfall-wiki/.env.example

@@ -1,18 +1,22 @@
-# Export to the web, storage bootstrap and worker processes.
+# Replace all three placeholders before starting Docker Compose.
-DATABASE_URL=postgresql://endoleap:replace-me@127.0.0.1:5432/endoleap
+POSTGRES_PASSWORD=replace-with-a-long-random-password
-S3_ENDPOINT=http://127.0.0.1:9000
+S3_ACCESS_KEY=replace-with-a-unique-access-key
-S3_ACCESS_KEY=replace-me
+S3_SECRET_KEY=replace-with-a-long-random-secret
-S3_SECRET_KEY=replace-me
 S3_BUCKET=prompt
-PORT=3000
+WEB_BIND_ADDRESS=0.0.0.0
-AUTH_CONFIG_FILE=/path/to/private/auth.json
+WEB_PORT=18131
-AUTH_COOKIE_SECURE=true
+PG_PORT=18132
-ACCOUNT_PUBLIC_ORIGIN=https://endoleap.example
+S3_PORT=18133
-ACCOUNT_TRUST_PROXY=false
+PROMPT_IMAGE=prompt:local
+RELEASE_SHA=development
 
-# Email verification and recovery
+# Use HTTPS and secure cookies in production; HTTP acceptance requires explicit false.
-SMTP_HOST=
+AUTH_COOKIE_SECURE=true
+ACCOUNT_PUBLIC_ORIGIN=http://8.211.154.134:18131
+# Enable only behind an ingress that overwrites x-forwarded-for.
+ACCOUNT_TRUST_PROXY=false
+SMTP_HOST=smtpdm.aliyun.com
 SMTP_PORT=465
-SMTP_USERNAME=
+SMTP_USERNAME=noreply@notice.entroia.com
-SMTP_FROM=
+SMTP_FROM=noreply@notice.entroia.com
 SMTP_PASSWORD=

apps/waterfall-wiki/Dockerfile

@@ -0,0 +1,37 @@
+FROM node:24-bookworm-slim AS base
+ENV NEXT_TELEMETRY_DISABLED=1
+WORKDIR /app
+RUN apt-get update \
+    && apt-get install -y --no-install-recommends ffmpeg ca-certificates chromium fonts-noto-cjk \
+    && rm -rf /var/lib/apt/lists/*
+
+FROM base AS dependencies
+RUN corepack enable && corepack prepare pnpm@11.25.0 --activate
+COPY apps/waterfall-wiki/pnpm-lock.yaml ./
+COPY pnpm-workspace.yaml /tmp/monorepo-policy.yaml
+RUN node -e "const fs=require('fs');const text=fs.readFileSync('/tmp/monorepo-policy.yaml','utf8');fs.writeFileSync('pnpm-workspace.yaml', text.slice(text.indexOf('allowBuilds:')));"
+RUN pnpm fetch --frozen-lockfile --fetch-timeout=300000 --network-concurrency=8
+COPY apps/waterfall-wiki/package.json ./
+RUN pnpm install --offline --frozen-lockfile
+
+FROM dependencies AS build
+# .dockerignore excludes docs and operational notes without extra legacy COPY snapshots.
+COPY apps/waterfall-wiki/ .
+RUN pnpm typecheck && pnpm test && pnpm build && pnpm test:smoke
+
+FROM build AS integration
+USER node
+CMD ["npm", "run", "test:integration"]
+
+FROM base AS runtime
+ENV NODE_ENV=production HOSTNAME=0.0.0.0 PORT=3000 \
+    FFMPEG_PATH=/usr/bin/ffmpeg FFPROBE_PATH=/usr/bin/ffprobe
+COPY --from=build --chown=node:node /app/.next/standalone/ ./
+COPY --from=build --chown=node:node /app/dist/worker.cjs /app/dist/bootstrap.cjs /app/dist/publish-learning-series.cjs /app/dist/auth-cli.cjs ./
+COPY --from=build --chown=node:node /app/db/ ./db/
+COPY --chown=node:node apps/waterfall-wiki/scripts/container-health.mjs ./
+COPY --chown=node:node apps/waterfall-wiki/scripts/import-character-packs.mjs apps/waterfall-wiki/scripts/verify-character-pack.mjs ./scripts/
+COPY --chown=node:node apps/waterfall-wiki/seed/characters/ ./seed/characters/
+USER node
+EXPOSE 3000
+CMD ["node", "server.js"]

apps/waterfall-wiki/db/015_guidance_documents.sql

@@ -1,7 +0,0 @@
-BEGIN;
-CREATE TABLE guidance_documents(id text PRIMARY KEY CHECK(id ~ '^user-[a-z0-9-]{1,74}$'), owner_id uuid NOT NULL REFERENCES account_users(id), latest integer NOT NULL DEFAULT 0, deleted_at timestamptz, CHECK(id LIKE 'user-' || owner_id::text || '-%'));
-CREATE TABLE guidance_revisions(document_id text NOT NULL REFERENCES guidance_documents(id), revision integer NOT NULL CHECK(revision>0), content jsonb NOT NULL, created_at timestamptz NOT NULL DEFAULT now(), PRIMARY KEY(document_id,revision));
-CREATE FUNCTION guidance_immutable() RETURNS trigger LANGUAGE plpgsql AS $$ BEGIN RAISE EXCEPTION 'Published revisions are immutable'; END $$;
-CREATE TRIGGER guidance_immutable BEFORE UPDATE OR DELETE ON guidance_revisions FOR EACH ROW EXECUTE FUNCTION guidance_immutable();
-INSERT INTO schema_migrations(version) VALUES('015_guidance_documents');
-COMMIT;

apps/waterfall-wiki/db/016_canvas_workspace.sql

@@ -1,23 +0,0 @@
-BEGIN;
-CREATE TABLE canvas_documents (
- id uuid PRIMARY KEY, owner_id uuid NOT NULL REFERENCES account_users(id) ON DELETE CASCADE,
- name text NOT NULL DEFAULT '未命名画布' CHECK(length(name) BETWEEN 1 AND 200),
- revision integer NOT NULL DEFAULT 1 CHECK(revision>0), document_key text NOT NULL,
- updated_at timestamptz NOT NULL DEFAULT now()
-);
-CREATE INDEX canvas_owner_updated ON canvas_documents(owner_id,updated_at DESC);
-CREATE TABLE canvas_agent_links (
- digest text PRIMARY KEY, canvas_id uuid NOT NULL REFERENCES canvas_documents(id) ON DELETE CASCADE,
- expires_at timestamptz NOT NULL, last_seen_at timestamptz
-);
-CREATE INDEX canvas_link_expiry ON canvas_agent_links(canvas_id,expires_at);
-CREATE TABLE canvas_tasks (
- id uuid PRIMARY KEY, canvas_id uuid NOT NULL REFERENCES canvas_documents(id) ON DELETE CASCADE,
- target_id text NOT NULL, source_revision integer NOT NULL,
- status text NOT NULL DEFAULT 'queued' CHECK(status IN ('queued','running','succeeded','failed')),
- request_key text NOT NULL, result_digest text, error text,
- created_at timestamptz NOT NULL DEFAULT now(), updated_at timestamptz NOT NULL DEFAULT now()
-);
-CREATE UNIQUE INDEX canvas_target_active_task ON canvas_tasks(canvas_id,target_id) WHERE status IN ('queued','running');
-INSERT INTO schema_migrations(version) VALUES ('016_canvas_workspace');
-COMMIT;

apps/waterfall-wiki/db/017_password_reset.sql

@@ -1,5 +0,0 @@
-BEGIN;
-ALTER TABLE account_tokens DROP CONSTRAINT account_tokens_kind_check;
-ALTER TABLE account_tokens ADD CONSTRAINT account_tokens_kind_check CHECK (kind IN ('verify','session','reset'));
-INSERT INTO schema_migrations(version) VALUES ('017_password_reset');
-COMMIT;

apps/waterfall-wiki/fixtures/autumn-journal.json

@@ -0,0 +1,163 @@
+{
+  "schemaVersion": 2,
+  "name": "把秋天装进一页 · 银杏观察手记",
+  "document": {
+    "version": 1,
+    "brief": {
+      "topic": "银杏与秋日观察手记",
+      "audience": "喜欢日常摄影与视觉手帐的小红书读者",
+      "intent": "以封面、观察方法和行动结尾组成三页可发布图文",
+      "designIntent": "奶油纸底、森林墨色、银杏金点缀；宋体大标题与克制的无衬线正文；所有页面保留相同页边距和节奏",
+      "imageStrategy": "生成一幅原创银杏静物插画作为系列母图；每页复用素材，保留裁切配置，不把正文烘焙进图片"
+    },
+    "style": {
+      "version": "autumn-journal/1",
+      "palette": {
+        "paper": "#F3EFE5",
+        "ink": "#253C32",
+        "muted": "#718074",
+        "accent": "#C3A050"
+      },
+      "typography": {
+        "title": {
+          "fontFamily": "serif",
+          "fontSize": 8.4,
+          "fontWeight": 600,
+          "lineHeight": 1.15,
+          "letterSpacing": 0
+        },
+        "body": {
+          "fontFamily": "sans",
+          "fontSize": 3.1,
+          "fontWeight": 400,
+          "lineHeight": 1.65,
+          "letterSpacing": 0
+        },
+        "caption": {
+          "fontFamily": "sans",
+          "fontSize": 1.7,
+          "fontWeight": 500,
+          "lineHeight": 1.2,
+          "letterSpacing": 0
+        }
+      },
+      "spacing": {
+        "margin": 10,
+        "gap": 4
+      }
+    },
+    "sources": [],
+    "pages": [
+      {
+        "key": "cover",
+        "role": "cover",
+        "layoutId": "standard-01",
+        "intent": "用银杏静物与两行大标题建立主题",
+        "bindings": {
+          "T01": "title",
+          "T02": "body",
+          "T03": "caption"
+        },
+        "parameters": {
+          "texts": {
+            "T01": {
+              "value": "把秋天\n装进一页"
+            },
+            "T02": {
+              "value": "不必走很远。\n一片银杏，就是今天的风景。"
+            },
+            "T03": {
+              "value": "SEASONAL NOTES / 01"
+            }
+          },
+          "images": {
+            "I01": {
+              "fit": "cover",
+              "cropX": 50,
+              "cropY": 50,
+              "zoom": 1
+            }
+          },
+          "decorations": {}
+        }
+      },
+      {
+        "key": "observe",
+        "role": "body",
+        "layoutId": "standard-01",
+        "intent": "用三个观察动作提供可实践的方法",
+        "bindings": {
+          "T01": "title",
+          "T02": "body",
+          "T03": "caption"
+        },
+        "parameters": {
+          "texts": {
+            "T01": {
+              "value": "先看见\n再记录"
+            },
+            "T02": {
+              "value": "看叶脉，看光落下的方向。\n留住一片金黄，也留出一半空白。\n把感受写成短句，画面就有了呼吸。"
+            },
+            "T03": {
+              "value": "FIELD NOTES / 02"
+            }
+          },
+          "images": {
+            "I01": {
+              "fit": "cover",
+              "cropX": 65,
+              "cropY": 40,
+              "zoom": 1.25
+            }
+          },
+          "decorations": {}
+        }
+      },
+      {
+        "key": "ending",
+        "role": "ending",
+        "layoutId": "standard-01",
+        "intent": "以轻量行动和提问收尾",
+        "bindings": {
+          "T01": "title",
+          "T02": "body",
+          "T03": "caption"
+        },
+        "parameters": {
+          "texts": {
+            "T01": {
+              "value": "留一点白\n给下一次",
+              "align": "middle"
+            },
+            "T02": {
+              "value": "今天，捡起一片叶子。\n用三个词记录它的颜色、纹理与心情。\n你的秋天，会从哪一页开始？",
+              "align": "middle"
+            },
+            "T03": {
+              "value": "YOUR TURN / 03"
+            }
+          },
+          "images": {
+            "I01": {
+              "fit": "cover",
+              "cropX": 65,
+              "cropY": 50,
+              "zoom": 1
+            }
+          },
+          "decorations": {},
+          "layers": {
+            "I01": {
+              "x": 40,
+              "y": 55,
+              "width": 40,
+              "height": 40,
+              "radius": 20
+            }
+          }
+        }
+      }
+    ]
+  }
+}

apps/waterfall-wiki/next.config.ts

@@ -1,28 +1,18 @@
-import { resolve } from "node:path";
 import type { NextConfig } from "next";
-import managedMedia from "./src/content/managed-media.json";
 
 const nextConfig: NextConfig = {
-  turbopack: { root: resolve(process.cwd(), "../..") },
   serverExternalPackages: ["playwright-core"],
-  async redirects(){return [
-    {source:'/studio/graphic',destination:'/graphic',permanent:true},
-    {source:'/studio/infinite_canvas',destination:'/infinite_canvas',permanent:true},
-    {source:'/studio',destination:'/workspace',permanent:false},
-  ]},
   async rewrites(){return [
-    ...Object.entries(managedMedia).filter(([path])=>path.startsWith("apps/waterfall-wiki/public/")).map(([path,asset])=>({source:"/"+path.slice("apps/waterfall-wiki/public/".length),destination:"/api/media/"+asset.id})),
+    {source:"/studio/:path*",destination:"http://prompt-studio:3000/studio/:path*"},
-    {source:"/studio/api/:path*",destination:"/api/studio-ui/:path*"},
+    {source:"/index.md",destination:"/api/guidance"},
-    {source:"/studio/brand/:path*",destination:"/brand/:path*"},
-    {source:"/studio/favicon.ico",destination:"/favicon.ico"},
-    {source:"/studio/apple-touch-icon.png",destination:"/apple-touch-icon.png"},
-    {source:"/index.md",destination:"/api/agent-index"},
     {source:"/skills/index.md",destination:"/api/guidance/skills"},
     {source:"/skills/:path+/index.md",destination:"/api/guidance/skills/:path+"},
     {source:"/agent",destination:"/api/agent-index"},
     {source:"/agent/index.md",destination:"/api/agent-index"},
     {source:"/skills/:skill/:doc.md",destination:"/api/skill-docs/:skill/:doc"},
   ]},
+  output: "standalone", outputFileTracingRoot: process.cwd(),
+  outputFileTracingIncludes: {"/*":["./node_modules/playwright-core/**/*"]},
   poweredByHeader: false,
 };
 

apps/waterfall-wiki/package.json

@@ -6,13 +6,16 @@
     "node": ">=24 <25"
   },
   "scripts": {
-    "dev": "pnpm brand:prepare && next dev",
+    "dev": "next dev",
-    "build": "pnpm brand:prepare && next build && esbuild src/worker.ts --bundle --platform=node --format=cjs --external:pg-native --external:playwright-core --outfile=dist/worker.cjs && esbuild scripts/bootstrap.ts --bundle --platform=node --format=cjs --external:pg-native --external:playwright-core --outfile=dist/bootstrap.cjs && esbuild scripts/auth-cli.ts --bundle --platform=node --format=cjs --external:pg-native --outfile=dist/auth-cli.cjs",
+    "build": "next build && esbuild src/worker.ts --bundle --platform=node --format=cjs --external:pg-native --external:playwright-core --outfile=dist/worker.cjs && esbuild scripts/bootstrap.ts --bundle --platform=node --format=cjs --external:pg-native --external:playwright-core --outfile=dist/bootstrap.cjs && esbuild scripts/publish-learning-series.ts --bundle --platform=node --format=cjs --external:pg-native --external:playwright-core --outfile=dist/publish-learning-series.cjs && esbuild scripts/auth-cli.ts --bundle --platform=node --format=cjs --external:pg-native --outfile=dist/auth-cli.cjs && node scripts/prepare-standalone.mjs",
     "start": "next start",
     "typecheck": "next typegen && tsc --noEmit",
+    "test": "tsx --test tests/api-documentation.test.ts tests/health.test.ts tests/model.test.ts tests/learning-series.test.ts tests/skill-docs.test.ts tests/wiki.test.ts tests/explore.test.ts tests/preview.test.ts tests/note-markdown.test.tsx tests/api-publication.test.ts tests/discovery.test.ts tests/auth.test.ts tests/account.test.ts tests/guidance.test.ts",
+    "test:smoke": "node scripts/smoke.mjs",
     "storage:prepare": "tsx scripts/bootstrap.ts",
+    "content:publish-learning": "tsx scripts/publish-learning-series.ts",
     "worker": "tsx src/worker.ts",
-    "brand:prepare": "node ../../packages/brand/scripts/prepare-app.mjs"
+    "test:integration": "tsx --test tests/integration.test.ts"
   },
   "dependencies": {
     "@aws-sdk/client-s3": "3.1155.0",
@@ -29,8 +32,7 @@
     "react-markdown": "10.1.0",
     "remark-gfm": "4.0.1",
     "sharp": "0.35.5",
-    "zod": "4.6.7",
+    "zod": "4.6.7"
-    "@endoleap/brand": "workspace:*"
   },
   "devDependencies": {
     "@tailwindcss/postcss": "4.3.3",

apps/waterfall-wiki/public/llms.txt

@@ -1,11 +1,9 @@
-# 织页 · Linked Guidance
+# PROMPT
 
-> 独立使用、按需连接的 Agent 指导文档。名称与 XML 协议仍处于实验阶段。
+> 创作素材与可相互引用的指导文档。
 
-- [Agent 阅读入口](/agent/index.md)
+- [网站 Markdown 入口](/index.md)
-- [真实用户文档摘要（JSON）](/api/documents)
+- [全部指导文档](/skills/index.md)
-- [协议样例摘要（JSON）](/api/guides)
-- [协议说明](/protocol)
 - [人类入口](/)
 
-从单篇文档开始；只有当前任务需要时才沿条件链接读取其他文档。固定版本引用，限制读取深度与篇数。集合不是强制安装包，链接不授予执行权限。
+每篇指导文档的网页地址加 /index.md，即为一一对应的 Markdown。沿文档链接继续阅读，可直接进入任意一篇，不必经过某个技能入口。

apps/waterfall-wiki/scripts/auth-cli.ts

@@ -47,16 +47,10 @@ async function main() {
  if (command === 'verify' || command === 'exercise') {
   const request = (path:string,init:RequestInit={}) => fetch(base+path,{...init,redirect:'manual'});
   const buildId = readFileSync('.next/BUILD_ID','utf8').trim();
-  for(const path of ['/','/workspace','/documents','/account'])assert.equal((await request(path)).status,200,'Public shell '+path);
+  assert.equal((await request('/')).status,200,'Public knowledge homepage');
-  for(const path of ['/favicon.ico','/brand/logo-light.svg','/brand/logo-dark.svg','/brand/icon-dark.svg','/apple-touch-icon.png']) assert.equal((await request(path)).status,200,'Public brand asset '+path);
-  const studio=await request('/studio');assert.equal(studio.status,307);assert.equal(studio.headers.get('location'),'/workspace');
-  for(const [from,to] of [['/studio/graphic','/graphic'],['/studio/infinite_canvas','/infinite_canvas']]){const r=await request(from);assert.equal(r.status,308);assert.equal(r.headers.get('location'),to)}
   assert.equal((await request('/account')).status,200,'Public account page');
-  const homeData = await request(`/_next/data/${buildId}/index.json`);
-  assert.ok([200,404].includes(homeData.status),'Public homepage data is readable or absent for static pages');
-  assert.ok(!isLoginRedirect(homeData.headers.get('location') || homeData.headers.get('x-nextjs-redirect'),base));
   assert.equal((await request('/api/posts',{method:'POST',headers:{Cookie:'wiki_account='+ 'a'.repeat(64)},body:'{}'})).status,401,'Account cookies never grant admin rights');
-  for (const path of ['/library/import','/skills/shadow-puppet/egret-example.png','/studio/layouts/ref-01',`/_next/data/${buildId}/library/import.json`]) {
+  for (const path of ['/library/import','/skills/shadow-puppet/egret-example.png','/studio',`/_next/data/${buildId}/index.json`]) {
    const response = await request(path); assert.equal(response.status,307,path); const destination = response.headers.get('location') || response.headers.get('x-nextjs-redirect'); assert.ok(isLoginRedirect(destination,base),path+' must redirect to login: '+destination);
   }
   for (const path of ['/api/feed','/api/upload','/studio/api/export/test','/api/media/missing']) assert.equal((await request(path)).status,401,path);

apps/waterfall-wiki/scripts/container-health.mjs

@@ -0,0 +1,9 @@
+try {
+  const port = process.env.PORT || '3000';
+  const [health, ready] = await Promise.all([
+    fetch(`http://127.0.0.1:${port}/api/health`, { signal: AbortSignal.timeout(5000) }),
+    fetch(`http://127.0.0.1:${port}/api/ready`, { signal: AbortSignal.timeout(5000) }),
+  ]);
+  const data = await health.json();
+  if (!health.ok || !ready.ok || data.service !== 'prompt' || data.release !== (process.env.RELEASE_SHA || 'development')) process.exit(1);
+} catch { process.exit(1); }

apps/waterfall-wiki/scripts/import-character-packs.mjs

@@ -0,0 +1,32 @@
+import {readFile,readdir} from 'node:fs/promises';
+import {fileURLToPath} from 'node:url';
+import {join,dirname} from 'node:path';
+import {createHash} from 'node:crypto';
+import {requiredPackImages} from './verify-character-pack.mjs';
+const root=join(dirname(fileURLToPath(import.meta.url)),'..','seed','characters');
+const base=process.env.PROMPT_IMPORT_BASE_URL||'http://127.0.0.1:3000';
+const packs=JSON.parse(await readFile(join(root,'packs.json'),'utf8'));
+async function verify(pack){
+ let cursor='',post;const seen=new Set();
+ do{const response=await fetch(base+'/api/feed?'+new URLSearchParams({section:'images',...(cursor?{cursor}:{})}));if(!response.ok)throw Error('Cannot verify character feed: '+response.status);const page=await response.json();post=page.posts.find(p=>p.slug===pack.slug);cursor=page.nextCursor||'';if(cursor&&seen.has(cursor))throw Error('Character feed cursor did not advance');seen.add(cursor);}while(!post&&cursor);
+ if(!post)throw Error('Character pack missing: '+pack.slug);
+ const files=(await readdir(join(root,pack.directory))).filter(n=>n.endsWith('.png')).sort();if(files.length!==pack.count)throw Error('Seed file count mismatch: '+pack.slug);
+ const hashes=await Promise.all(files.map(async file=>createHash('sha256').update(await readFile(join(root,pack.directory,file))).digest('hex')));
+ const originals=requiredPackImages(hashes,post.assets.filter(a=>a.kind==='image'));
+ for(const image of originals){const media=await fetch(`${base}/api/media/${image.id}`,{method:'HEAD'});if(!media.ok||media.headers.get('content-type')!=='image/png')throw Error('Original PNG unavailable');}
+ console.log(`Verified: /p/${pack.slug} (${originals.length} original PNGs preserved; editorial covers allowed)`);
+}
+for(const pack of packs){
+ const existing=await fetch(`${base}/p/${pack.slug}`);
+ if(existing.ok){console.log(`Already imported: /p/${pack.slug}`);await verify(pack);continue;}
+ if(existing.status!==404)throw new Error(`Cannot check pack ${pack.slug}: ${existing.status}`);
+ const files=(await readdir(join(root,pack.directory))).filter(n=>n.endsWith('.png')).sort();
+ if(files.length!==pack.count)throw new Error(`Expected ${pack.count} PNGs for ${pack.slug}, got ${files.length}`);
+ const data=new FormData();data.set('title',pack.title);data.set('slug',pack.slug);data.set('description',pack.description);
+ for(const file of files)data.append('files',new Blob([await readFile(join(root,pack.directory,file))],{type:'image/png'}),file);
+ const response=await fetch(`${base}/api/skills/street-people`,{method:'POST',body:data});
+ if(response.status!==201&&response.status!==409)throw new Error(`Import ${pack.slug}: ${response.status} ${await response.text()}`);
+ if(response.status===409&&!(await fetch(`${base}/p/${pack.slug}`)).ok)throw new Error(`Conflicting import ${pack.slug}`);
+ console.log(`Imported: /p/${pack.slug} (${files.length} transparent PNGs)`);
+ await verify(pack);
+}

apps/waterfall-wiki/scripts/prepare-standalone.mjs

@@ -0,0 +1,4 @@
+import { cp,mkdir,access } from 'node:fs/promises';
+await mkdir('.next/standalone/.next',{recursive:true});
+await cp('.next/static','.next/standalone/.next/static',{recursive:true});
+try{await access('public');await cp('public','.next/standalone/public',{recursive:true});}catch(e){if(e.code!=='ENOENT')throw e;}

apps/waterfall-wiki/scripts/publish-learning-series.ts

@@ -0,0 +1,5 @@
+import { db } from "../src/lib/db";
+import { publishLearningSeries } from "../src/lib/publish-learning-series";
+publishLearningSeries().then(result=>console.log(`Published learning series: ${result.published.join(", ")}; one shared cover: ${result.coverId}`))
+  .catch(error=>{console.error("Learning series publication failed:",error instanceof Error?error.message:"Unknown error");process.exitCode=1;})
+  .finally(()=>db().end());

apps/waterfall-wiki/scripts/smoke.mjs

@@ -0,0 +1,52 @@
+import { spawn } from "node:child_process";
+import assert from "node:assert/strict";
+import { setTimeout } from "node:timers/promises";
+import { createServer } from "node:net";
+import { once } from "node:events";
+
+async function availablePort() {
+  const server = createServer();
+  server.listen(0, "127.0.0.1");
+  await once(server, "listening");
+  const port = server.address().port;
+  await new Promise((resolve, reject) => server.close(error => error ? reject(error) : resolve()));
+  return String(port);
+}
+
+const port = process.env.SMOKE_PORT || await availablePort();
+const release = "smoke-test";
+const child = spawn(process.execPath, [".next/standalone/server.js"], {
+  env: { ...process.env, PORT: port, HOSTNAME: "127.0.0.1", RELEASE_SHA: release },
+  stdio: "inherit",
+});
+try {
+  let ready = false;
+  for (let i = 0; i < 40; i++) {
+    if (child.exitCode !== null) throw new Error(`Server exited: ${child.exitCode}`);
+    try {
+      const response = await fetch(`http://127.0.0.1:${port}/api/health`);
+      assert.equal(response.status, 200);
+      assert.deepEqual(await response.json(), { status: "ok", service: "prompt", release });
+      ready = true;
+      break;
+    } catch { await setTimeout(500); }
+  }
+  assert.ok(ready, "Standalone production server must be healthy");
+  const response = await fetch(`http://127.0.0.1:${port}/api/health`, { method: "POST" });
+  assert.equal(response.status, 405);
+  const indexResponse=await fetch(`http://127.0.0.1:${port}/api/wiki-index`);
+  assert.equal(indexResponse.status,200);
+  const indexText=await indexResponse.text();
+  const id=indexText.match(/\/explore\/([a-f0-9]{24})/)?.[1];assert.ok(id);
+  const agent=await fetch(`http://127.0.0.1:${port}/explore/${id}?agent_mode=True`);
+  assert.equal(agent.status,200);assert.match(agent.headers.get('content-type'),/text\/plain/);const agentText=await agent.text();assert.match(agentText,/^# /);assert.doesNotMatch(agentText,/^\s*(?:<!doctype html|<html)/i);
+  const preview=await fetch(`http://127.0.0.1:${port}/api/preview?source=${encodeURIComponent('/skills/shadow-puppet/egret-example.png')}&width=480`);
+  assert.equal(preview.status,200);assert.match(preview.headers.get('content-type'),/image\/webp/);assert.ok((await preview.arrayBuffer()).byteLength<=100000);
+  console.log("Production smoke test passed");
+} finally {
+  if (child.exitCode === null && child.signalCode === null) {
+    const exited = once(child, "exit");
+    child.kill("SIGTERM");
+    await exited;
+  }
+}

apps/waterfall-wiki/scripts/verify-character-pack.mjs

@@ -0,0 +1,6 @@
+/** Extra editorial covers are allowed; every original seed image must remain attached. */
+export function requiredPackImages(hashes,images){
+ const remaining=[...images],originals=[];
+ for(const hash of hashes){const index=remaining.findIndex(image=>image.sha256===hash);if(index<0)throw Error('Original seed image missing from character pack');originals.push(...remaining.splice(index,1));}
+ return originals;
+}