feat: add certd ECC bundle (.claude/homunculus/instincts/inherited/certd-instincts.yaml)

.agents/skills/certd/SKILL.md

@@ -0,0 +1,133 @@
+```markdown
+# certd Development Patterns
+
+> Auto-generated skill from repository analysis
+
+## Overview
+
+This skill teaches the core development patterns and workflows for the `certd` TypeScript codebase. It covers coding conventions, file organization, commit patterns, and detailed step-by-step instructions for extending user preferences—a common feature workflow. The repository is structured for modularity, with clear separation between UI and backend logic, and emphasizes maintainable, convention-driven development.
+
+## Coding Conventions
+
+### File Naming
+
+- **CamelCase** is used for file names.
+  - Example: `userPreferences.ts`, `preferencesDrawer.vue`
+
+### Import Style
+
+- **Absolute imports** are preferred.
+  - Example:
+    ```typescript
+    import { getUserPreferences } from 'packages/ui/certd-client/src/vben/layouts/widgets/preferences/api';
+    ```
+
+### Export Style
+
+- **Named exports** are used throughout the codebase.
+  - Example:
+    ```typescript
+    export function getUserPreferences() { ... }
+    export const PREFERENCE_KEYS = [ ... ];
+    ```
+
+### Commit Patterns
+
+- **Conventional commits** are used, with the `feat` prefix for new features.
+  - Example:
+    ```
+    feat: add account sync to preferences
+    ```
+
+## Workflows
+
+### Extend Preferences Feature
+
+**Trigger:** When someone wants to add or enhance a user preference feature (e.g., import/export, sync to account).  
+**Command:** `/extend-preferences`
+
+Follow these steps to extend user preferences functionality:
+
+1. **Update localization files**  
+   Add or modify strings in:
+   - `packages/ui/certd-client/src/locales/langs/en-US/preferences.ts`
+   - `packages/ui/certd-client/src/locales/langs/zh-CN/preferences.ts`
+   ```typescript
+   // en-US/preferences.ts
+   export default {
+     sync: "Sync Preferences",
+     import: "Import Preferences",
+     // ...
+   };
+   ```
+
+2. **Modify or add Vue components for preferences UI**  
+   Update or create components such as:
+   - `preferences-drawer.vue`
+   - `account-sync.ts`
+   ```vue
+   <!-- preferences-drawer.vue -->
+   <template>
+     <div>
+       <button @click="syncPreferences">{{ $t('preferences.sync') }}</button>
+     </div>
+   </template>
+   ```
+
+3. **Update or add supporting icon definitions**  
+   Edit:
+   - `packages/ui/certd-client/src/vben/icons/lucide.ts`
+   ```typescript
+   export const SyncIcon = { /* icon definition */ };
+   ```
+
+4. **Implement or update store logic for settings**  
+   Update:
+   - `packages/ui/certd-client/src/store/settings/index.tsx`
+   ```typescript
+   export function syncPreferencesToAccount() { ... }
+   ```
+
+5. **Add or update backend API/controller for user preferences**  
+   Edit or add:
+   - `packages/ui/certd-client/src/vben/layouts/widgets/preferences/api.ts`
+   - `packages/ui/certd-server/src/controller/user/mine/user-preferences.ts`
+   ```typescript
+   // user-preferences.ts
+   export async function updateUserPreferences(req, res) { ... }
+   ```
+
+6. **Write or update backend tests for new preference logic**  
+   Add or update:
+   - `packages/ui/certd-server/src/controller/user/mine/user-preferences.test.ts`
+   ```typescript
+   test('should sync preferences', async () => { ... });
+   ```
+
+7. **Update backend models if necessary**  
+   Edit:
+   - `packages/ui/certd-server/src/modules/mine/service/models.ts`
+   ```typescript
+   export interface UserPreferences { ... }
+   ```
+
+## Testing Patterns
+
+- **Test files** follow the `*.test.*` naming convention.
+  - Example: `user-preferences.test.ts`
+- **Testing framework** is not explicitly detected, but tests are written in TypeScript and likely use a standard Node.js testing library (e.g., Jest or Mocha).
+- **Test Example:**
+  ```typescript
+  test('should update preferences', async () => {
+    // Arrange
+    // Act
+    // Assert
+  });
+  ```
+
+## Commands
+
+| Command              | Purpose                                                      |
+|----------------------|--------------------------------------------------------------|
+| /extend-preferences  | Guide to extend or enhance user preference functionality     |
+```

.agents/skills/certd/agents/openai.yaml

@@ -0,0 +1,6 @@
+interface:
+  display_name: "Certd"
+  short_description: "Repo-specific patterns and workflows for certd"
+  default_prompt: "Use the certd repo skill to follow existing architecture, testing, and workflow conventions."
+policy:
+  allow_implicit_invocation: true

.claude/ecc-tools.json

@@ -0,0 +1,227 @@
+{
+  "version": "1.3",
+  "schemaVersion": "1.0",
+  "generatedBy": "ecc-tools",
+  "generatedAt": "2026-07-30T02:07:44.046Z",
+  "repo": "https://github.com/certd/certd",
+  "referenceSetReadiness": {
+    "score": 0,
+    "present": 0,
+    "total": 7,
+    "items": [
+      {
+        "id": "deep-analyzer-corpus",
+        "label": "Deep analyzer corpus",
+        "status": "missing",
+        "evidence": [],
+        "recommendation": "Add analyzer fixture, golden, benchmark, or reference-set files that can catch analyzer regressions."
+      },
+      {
+        "id": "rag-evaluator",
+        "label": "RAG/evaluator comparison",
+        "status": "missing",
+        "evidence": [],
+        "recommendation": "Add retrieval or evaluator reference-set comparison fixtures with expected ranking behavior."
+      },
+      {
+        "id": "pr-salvage",
+        "label": "PR salvage/review corpus",
+        "status": "missing",
+        "evidence": [],
+        "recommendation": "Add stale-PR, review-thread, reopen-flow, or salvage reference cases for queue cleanup automation."
+      },
+      {
+        "id": "discussion-triage",
+        "label": "Discussion triage corpus",
+        "status": "missing",
+        "evidence": [],
+        "recommendation": "Add public discussion triage fixtures, golden cases, or reference sets for informational, answered, and no-response classifications."
+      },
+      {
+        "id": "harness-compatibility",
+        "label": "Harness compatibility",
+        "status": "missing",
+        "evidence": [],
+        "recommendation": "Add cross-harness, adapter-compliance, or harness-audit evidence for Claude, Codex, OpenCode, Zed, dmux, and agent surfaces."
+      },
+      {
+        "id": "security-evidence",
+        "label": "Security evidence",
+        "status": "missing",
+        "evidence": [],
+        "recommendation": "Attach security evidence such as SBOMs, SARIF, audit reports, or AgentShield evidence packs."
+      },
+      {
+        "id": "ci-failure-mode",
+        "label": "CI failure-mode evidence",
+        "status": "missing",
+        "evidence": [],
+        "recommendation": "Add captured CI failure logs, dry-run fixtures, or troubleshooting docs for common workflow failure modes."
+      }
+    ]
+  },
+  "profiles": {
+    "requested": "core",
+    "recommended": "core",
+    "effective": "core",
+    "requestedAlias": "core",
+    "recommendedAlias": "core",
+    "effectiveAlias": "core"
+  },
+  "requestedProfile": "core",
+  "profile": "core",
+  "recommendedProfile": "core",
+  "effectiveProfile": "core",
+  "tier": "free",
+  "requestedComponents": [
+    "repo-baseline"
+  ],
+  "selectedComponents": [
+    "repo-baseline"
+  ],
+  "requestedAddComponents": [],
+  "requestedRemoveComponents": [],
+  "blockedRemovalComponents": [],
+  "tierFilteredComponents": [],
+  "requestedRootPackages": [
+    "runtime-core"
+  ],
+  "selectedRootPackages": [
+    "runtime-core"
+  ],
+  "requestedPackages": [
+    "runtime-core"
+  ],
+  "requestedAddPackages": [],
+  "requestedRemovePackages": [],
+  "selectedPackages": [
+    "runtime-core"
+  ],
+  "packages": [
+    "runtime-core"
+  ],
+  "blockedRemovalPackages": [],
+  "tierFilteredRootPackages": [],
+  "tierFilteredPackages": [],
+  "conflictingPackages": [],
+  "dependencyGraph": {
+    "runtime-core": []
+  },
+  "resolutionOrder": [
+    "runtime-core"
+  ],
+  "requestedModules": [
+    "runtime-core"
+  ],
+  "selectedModules": [
+    "runtime-core"
+  ],
+  "modules": [
+    "runtime-core"
+  ],
+  "managedFiles": [
+    ".claude/skills/certd/SKILL.md",
+    ".agents/skills/certd/SKILL.md",
+    ".agents/skills/certd/agents/openai.yaml",
+    ".claude/identity.json",
+    ".codex/config.toml",
+    ".codex/AGENTS.md",
+    ".codex/agents/explorer.toml",
+    ".codex/agents/reviewer.toml",
+    ".codex/agents/docs-researcher.toml",
+    ".claude/homunculus/instincts/inherited/certd-instincts.yaml"
+  ],
+  "packageFiles": {
+    "runtime-core": [
+      ".claude/skills/certd/SKILL.md",
+      ".agents/skills/certd/SKILL.md",
+      ".agents/skills/certd/agents/openai.yaml",
+      ".claude/identity.json",
+      ".codex/config.toml",
+      ".codex/AGENTS.md",
+      ".codex/agents/explorer.toml",
+      ".codex/agents/reviewer.toml",
+      ".codex/agents/docs-researcher.toml",
+      ".claude/homunculus/instincts/inherited/certd-instincts.yaml"
+    ]
+  },
+  "moduleFiles": {
+    "runtime-core": [
+      ".claude/skills/certd/SKILL.md",
+      ".agents/skills/certd/SKILL.md",
+      ".agents/skills/certd/agents/openai.yaml",
+      ".claude/identity.json",
+      ".codex/config.toml",
+      ".codex/AGENTS.md",
+      ".codex/agents/explorer.toml",
+      ".codex/agents/reviewer.toml",
+      ".codex/agents/docs-researcher.toml",
+      ".claude/homunculus/instincts/inherited/certd-instincts.yaml"
+    ]
+  },
+  "files": [
+    {
+      "moduleId": "runtime-core",
+      "path": ".claude/skills/certd/SKILL.md",
+      "description": "Repository-specific Claude Code skill generated from git history."
+    },
+    {
+      "moduleId": "runtime-core",
+      "path": ".agents/skills/certd/SKILL.md",
+      "description": "Codex-facing copy of the generated repository skill."
+    },
+    {
+      "moduleId": "runtime-core",
+      "path": ".agents/skills/certd/agents/openai.yaml",
+      "description": "Codex skill metadata so the repo skill appears cleanly in the skill interface."
+    },
+    {
+      "moduleId": "runtime-core",
+      "path": ".claude/identity.json",
+      "description": "Suggested identity.json baseline derived from repository conventions."
+    },
+    {
+      "moduleId": "runtime-core",
+      "path": ".codex/config.toml",
+      "description": "Repo-local Codex MCP and multi-agent baseline aligned with ECC defaults."
+    },
+    {
+      "moduleId": "runtime-core",
+      "path": ".codex/AGENTS.md",
+      "description": "Codex usage guide that points at the generated repo skill and workflow bundle."
+    },
+    {
+      "moduleId": "runtime-core",
+      "path": ".codex/agents/explorer.toml",
+      "description": "Read-only explorer role config for Codex multi-agent work."
+    },
+    {
+      "moduleId": "runtime-core",
+      "path": ".codex/agents/reviewer.toml",
+      "description": "Read-only reviewer role config focused on correctness and security."
+    },
+    {
+      "moduleId": "runtime-core",
+      "path": ".codex/agents/docs-researcher.toml",
+      "description": "Read-only docs researcher role config for API verification."
+    },
+    {
+      "moduleId": "runtime-core",
+      "path": ".claude/homunculus/instincts/inherited/certd-instincts.yaml",
+      "description": "Continuous-learning instincts derived from repository patterns."
+    }
+  ],
+  "workflows": [],
+  "adapters": {
+    "claudeCode": {
+      "skillPath": ".claude/skills/certd/SKILL.md",
+      "identityPath": ".claude/identity.json",
+      "commandPaths": []
+    },
+    "codex": {
+      "configPath": ".codex/config.toml",
+      "agentsGuidePath": ".codex/AGENTS.md",
+      "skillPath": ".agents/skills/certd/SKILL.md"
+    }
+  }
+}

.claude/homunculus/instincts/inherited/certd-instincts.yaml

@@ -0,0 +1,486 @@
+# Instincts generated from https://github.com/certd/certd
+# Generated: 2026-07-30T02:08:05.402Z
+# Version: 2.0
+# NOTE: This file supplements (does not replace) any existing curated instincts.
+# High-confidence manually curated instincts should be preserved alongside these.
+
+---
+id: certd-commit-conventional
+trigger: "when writing a commit message"
+confidence: 0.85
+domain: git
+source: repo-analysis
+source_repo: https://github.com/certd/certd
+---
+
+# Certd Commit Conventional
+
+## Action
+
+Use conventional commit format with prefixes: feat
+
+## Evidence
+
+- 2 commits analyzed
+- Detected conventional commit pattern
+- Examples: feat: 偏好设置支持从剪切板导入, feat: 偏好设置支持保存到账号并在登录后自动同步
+
+---
+id: certd-commit-length
+trigger: "when writing a commit message"
+confidence: 0.6
+domain: git
+source: repo-analysis
+source_repo: https://github.com/certd/certd
+---
+
+# Certd Commit Length
+
+## Action
+
+Keep commit messages concise (~22 characters)
+
+## Evidence
+
+- Average commit message length: 22 chars
+- Based on 2 commits
+
+---
+id: certd-naming-files
+trigger: "when creating a new file"
+confidence: 0.8
+domain: code-style
+source: repo-analysis
+source_repo: https://github.com/certd/certd
+---
+
+# Certd Naming Files
+
+## Action
+
+Use camelCase naming convention
+
+## Evidence
+
+- Analyzed file naming patterns in repository
+- Dominant pattern: camelCase
+
+---
+id: certd-export-style
+trigger: "when exporting from a module"
+confidence: 0.7
+domain: code-style
+source: repo-analysis
+source_repo: https://github.com/certd/certd
+---
+
+# Certd Export Style
+
+## Action
+
+Prefer named exports
+
+## Evidence
+
+- Export pattern analysis
+- Dominant style: named
+
+---
+id: certd-arch-feature-based
+trigger: "when adding a new feature"
+confidence: 0.85
+domain: architecture
+source: repo-analysis
+source_repo: https://github.com/certd/certd
+---
+
+# Certd Arch Feature Based
+
+## Action
+
+Create a new folder in src/features/ with all related code colocated
+
+## Evidence
+
+- Feature-based module organization detected
+- Structure: src/features/[feature-name]/
+
+---
+id: certd-workflow-extend-preferences-feature
+trigger: "when doing extend preferences feature"
+confidence: 0.6
+domain: workflow
+source: repo-analysis
+source_repo: https://github.com/certd/certd
+---
+
+# Certd Workflow Extend Preferences Feature
+
+## Action
+
+Follow the extend-preferences-feature workflow:
+1. Update localization files for new preference-related strings
+2. Modify or add Vue components for preferences UI
+3. Update or add supporting icon definitions
+4. Implement or update store logic for settings
+5. Add or update backend API/controller for user preferences
+6. Write or update backend tests for new preference logic
+7. Update backend models if necessary
+
+## Evidence
+
+- Workflow detected from commit patterns
+- Frequency: ~2x per month
+- Files: packages/ui/certd-client/src/locales/langs/en-US/preferences.ts, packages/ui/certd-client/src/locales/langs/zh-CN/preferences.ts, packages/ui/certd-client/src/vben/layouts/widgets/preferences/preferences-drawer.vue
+
+---
+id: certd-instinct-file-naming
+trigger: "When creating a new file in the codebase"
+confidence: 0.9
+domain: code-style
+source: repo-analysis
+source_repo: certd/certd
+---
+
+# Certd Instinct File Naming
+
+## Action
+
+Name the file using camelCase
+
+## Evidence
+
+- Pattern in codeStyle.namingConventions.files
+
+---
+id: certd-instinct-function-naming
+trigger: "When defining a new function"
+confidence: 0.9
+domain: code-style
+source: repo-analysis
+source_repo: certd/certd
+---
+
+# Certd Instinct Function Naming
+
+## Action
+
+Use camelCase for function names
+
+## Evidence
+
+- Pattern in codeStyle.namingConventions.functions
+
+---
+id: certd-instinct-class-naming
+trigger: "When defining a new class"
+confidence: 0.9
+domain: code-style
+source: repo-analysis
+source_repo: certd/certd
+---
+
+# Certd Instinct Class Naming
+
+## Action
+
+Use PascalCase for class names
+
+## Evidence
+
+- Pattern in codeStyle.namingConventions.classes
+
+---
+id: certd-instinct-constant-naming
+trigger: "When declaring a constant"
+confidence: 0.9
+domain: code-style
+source: repo-analysis
+source_repo: certd/certd
+---
+
+# Certd Instinct Constant Naming
+
+## Action
+
+Use SCREAMING_SNAKE_CASE for constant names
+
+## Evidence
+
+- Pattern in codeStyle.namingConventions.constants
+
+---
+id: certd-instinct-import-style
+trigger: "When importing modules"
+confidence: 0.8
+domain: code-style
+source: repo-analysis
+source_repo: certd/certd
+---
+
+# Certd Instinct Import Style
+
+## Action
+
+Use absolute import paths
+
+## Evidence
+
+- Pattern in codeStyle.importStyle
+
+---
+id: certd-instinct-export-style
+trigger: "When exporting from a module"
+confidence: 0.8
+domain: code-style
+source: repo-analysis
+source_repo: certd/certd
+---
+
+# Certd Instinct Export Style
+
+## Action
+
+Use named exports
+
+## Evidence
+
+- Pattern in codeStyle.exportStyle
+
+---
+id: certd-instinct-try-catch
+trigger: "When handling errors in code"
+confidence: 0.8
+domain: code-style
+source: repo-analysis
+source_repo: certd/certd
+---
+
+# Certd Instinct Try Catch
+
+## Action
+
+Use try-catch blocks for error handling
+
+## Evidence
+
+- Pattern in errorHandling.style
+
+---
+id: certd-instinct-test-location
+trigger: "When adding or updating tests"
+confidence: 0.7
+domain: testing
+source: repo-analysis
+source_repo: certd/certd
+---
+
+# Certd Instinct Test Location
+
+## Action
+
+Place tests in both source and test-specific folders as appropriate (mixed location)
+
+## Evidence
+
+- Pattern in architecture.folderStructure.testLocation
+- Seen in files like packages/ui/certd-server/src/controller/user/mine/user-preferences.test.ts
+
+---
+id: certd-instinct-backend-test-pattern
+trigger: "When adding backend logic for user preferences"
+confidence: 0.8
+domain: testing
+source: repo-analysis
+source_repo: certd/certd
+---
+
+# Certd Instinct Backend Test Pattern
+
+## Action
+
+Create or update a corresponding .test.ts file in the same directory
+
+## Evidence
+
+- Seen in packages/ui/certd-server/src/controller/user/mine/user-preferences.test.ts
+
+---
+id: certd-instinct-conventional-commits
+trigger: "When writing a commit message"
+confidence: 0.9
+domain: git
+source: repo-analysis
+source_repo: certd/certd
+---
+
+# Certd Instinct Conventional Commits
+
+## Action
+
+Use the conventional commit format with a type prefix (e.g., feat: ...)
+
+## Evidence
+
+- Pattern in commits.type
+- Examples: feat: 偏好设置支持从剪切板导入
+
+---
+id: certd-instinct-commit-length
+trigger: "When writing a commit message"
+confidence: 0.7
+domain: git
+source: repo-analysis
+source_repo: certd/certd
+---
+
+# Certd Instinct Commit Length
+
+## Action
+
+Keep the commit message concise, around 22 characters on average
+
+## Evidence
+
+- Pattern in commits.averageLength
+
+---
+id: certd-instinct-extend-preferences-localization
+trigger: "When extending or adding a user preference feature"
+confidence: 0.9
+domain: workflow
+source: repo-analysis
+source_repo: certd/certd
+---
+
+# Certd Instinct Extend Preferences Localization
+
+## Action
+
+Update localization files for new preference-related strings
+
+## Evidence
+
+- Workflow: extend-preferences-feature
+- Files: packages/ui/certd-client/src/locales/langs/en-US/preferences.ts, packages/ui/certd-client/src/locales/langs/zh-CN/preferences.ts
+
+---
+id: certd-instinct-extend-preferences-ui
+trigger: "When extending or adding a user preference feature"
+confidence: 0.9
+domain: workflow
+source: repo-analysis
+source_repo: certd/certd
+---
+
+# Certd Instinct Extend Preferences Ui
+
+## Action
+
+Modify or add Vue components for the preferences UI
+
+## Evidence
+
+- Workflow: extend-preferences-feature
+- Files: packages/ui/certd-client/src/vben/layouts/widgets/preferences/preferences-drawer.vue
+
+---
+id: certd-instinct-extend-preferences-icons
+trigger: "When extending or adding a user preference feature"
+confidence: 0.8
+domain: workflow
+source: repo-analysis
+source_repo: certd/certd
+---
+
+# Certd Instinct Extend Preferences Icons
+
+## Action
+
+Update or add supporting icon definitions
+
+## Evidence
+
+- Workflow: extend-preferences-feature
+- File: packages/ui/certd-client/src/vben/icons/lucide.ts
+
+---
+id: certd-instinct-extend-preferences-store
+trigger: "When extending or adding a user preference feature"
+confidence: 0.9
+domain: workflow
+source: repo-analysis
+source_repo: certd/certd
+---
+
+# Certd Instinct Extend Preferences Store
+
+## Action
+
+Implement or update store logic for settings
+
+## Evidence
+
+- Workflow: extend-preferences-feature
+- File: packages/ui/certd-client/src/store/settings/index.tsx
+
+---
+id: certd-instinct-extend-preferences-backend-api
+trigger: "When extending or adding a user preference feature"
+confidence: 0.9
+domain: workflow
+source: repo-analysis
+source_repo: certd/certd
+---
+
+# Certd Instinct Extend Preferences Backend Api
+
+## Action
+
+Add or update backend API/controller for user preferences
+
+## Evidence
+
+- Workflow: extend-preferences-feature
+- Files: packages/ui/certd-server/src/controller/user/mine/user-preferences.ts, packages/ui/certd-server/src/controller/user/mine/user-settings-controller.ts
+
+---
+id: certd-instinct-extend-preferences-backend-test
+trigger: "When extending or adding a user preference feature"
+confidence: 0.9
+domain: workflow
+source: repo-analysis
+source_repo: certd/certd
+---
+
+# Certd Instinct Extend Preferences Backend Test
+
+## Action
+
+Write or update backend tests for new preference logic
+
+## Evidence
+
+- Workflow: extend-preferences-feature
+- File: packages/ui/certd-server/src/controller/user/mine/user-preferences.test.ts
+
+---
+id: certd-instinct-extend-preferences-models
+trigger: "When extending or adding a user preference feature and new data is needed"
+confidence: 0.8
+domain: workflow
+source: repo-analysis
+source_repo: certd/certd
+---
+
+# Certd Instinct Extend Preferences Models
+
+## Action
+
+Update backend models if necessary
+
+## Evidence
+
+- Workflow: extend-preferences-feature
+- File: packages/ui/certd-server/src/modules/mine/service/models.ts
+

.claude/identity.json

@@ -0,0 +1,14 @@
+{
+  "version": "2.0",
+  "technicalLevel": "technical",
+  "preferredStyle": {
+    "verbosity": "detailed",
+    "codeComments": true,
+    "explanations": true
+  },
+  "domains": [
+    "typescript"
+  ],
+  "suggestedBy": "ecc-tools-repo-analysis",
+  "createdAt": "2026-07-30T02:08:05.402Z"
+}

.claude/skills/certd/SKILL.md

@@ -0,0 +1,133 @@
+```markdown
+# certd Development Patterns
+
+> Auto-generated skill from repository analysis
+
+## Overview
+
+This skill teaches the core development patterns and workflows for the `certd` TypeScript codebase. It covers coding conventions, file organization, commit patterns, and detailed step-by-step instructions for extending user preferences—a common feature workflow. The repository is structured for modularity, with clear separation between UI and backend logic, and emphasizes maintainable, convention-driven development.
+
+## Coding Conventions
+
+### File Naming
+
+- **CamelCase** is used for file names.
+  - Example: `userPreferences.ts`, `preferencesDrawer.vue`
+
+### Import Style
+
+- **Absolute imports** are preferred.
+  - Example:
+    ```typescript
+    import { getUserPreferences } from 'packages/ui/certd-client/src/vben/layouts/widgets/preferences/api';
+    ```
+
+### Export Style
+
+- **Named exports** are used throughout the codebase.
+  - Example:
+    ```typescript
+    export function getUserPreferences() { ... }
+    export const PREFERENCE_KEYS = [ ... ];
+    ```
+
+### Commit Patterns
+
+- **Conventional commits** are used, with the `feat` prefix for new features.
+  - Example:
+    ```
+    feat: add account sync to preferences
+    ```
+
+## Workflows
+
+### Extend Preferences Feature
+
+**Trigger:** When someone wants to add or enhance a user preference feature (e.g., import/export, sync to account).  
+**Command:** `/extend-preferences`
+
+Follow these steps to extend user preferences functionality:
+
+1. **Update localization files**  
+   Add or modify strings in:
+   - `packages/ui/certd-client/src/locales/langs/en-US/preferences.ts`
+   - `packages/ui/certd-client/src/locales/langs/zh-CN/preferences.ts`
+   ```typescript
+   // en-US/preferences.ts
+   export default {
+     sync: "Sync Preferences",
+     import: "Import Preferences",
+     // ...
+   };
+   ```
+
+2. **Modify or add Vue components for preferences UI**  
+   Update or create components such as:
+   - `preferences-drawer.vue`
+   - `account-sync.ts`
+   ```vue
+   <!-- preferences-drawer.vue -->
+   <template>
+     <div>
+       <button @click="syncPreferences">{{ $t('preferences.sync') }}</button>
+     </div>
+   </template>
+   ```
+
+3. **Update or add supporting icon definitions**  
+   Edit:
+   - `packages/ui/certd-client/src/vben/icons/lucide.ts`
+   ```typescript
+   export const SyncIcon = { /* icon definition */ };
+   ```
+
+4. **Implement or update store logic for settings**  
+   Update:
+   - `packages/ui/certd-client/src/store/settings/index.tsx`
+   ```typescript
+   export function syncPreferencesToAccount() { ... }
+   ```
+
+5. **Add or update backend API/controller for user preferences**  
+   Edit or add:
+   - `packages/ui/certd-client/src/vben/layouts/widgets/preferences/api.ts`
+   - `packages/ui/certd-server/src/controller/user/mine/user-preferences.ts`
+   ```typescript
+   // user-preferences.ts
+   export async function updateUserPreferences(req, res) { ... }
+   ```
+
+6. **Write or update backend tests for new preference logic**  
+   Add or update:
+   - `packages/ui/certd-server/src/controller/user/mine/user-preferences.test.ts`
+   ```typescript
+   test('should sync preferences', async () => { ... });
+   ```
+
+7. **Update backend models if necessary**  
+   Edit:
+   - `packages/ui/certd-server/src/modules/mine/service/models.ts`
+   ```typescript
+   export interface UserPreferences { ... }
+   ```
+
+## Testing Patterns
+
+- **Test files** follow the `*.test.*` naming convention.
+  - Example: `user-preferences.test.ts`
+- **Testing framework** is not explicitly detected, but tests are written in TypeScript and likely use a standard Node.js testing library (e.g., Jest or Mocha).
+- **Test Example:**
+  ```typescript
+  test('should update preferences', async () => {
+    // Arrange
+    // Act
+    // Assert
+  });
+  ```
+
+## Commands
+
+| Command              | Purpose                                                      |
+|----------------------|--------------------------------------------------------------|
+| /extend-preferences  | Guide to extend or enhance user preference functionality     |
+```

.codex/AGENTS.md

@@ -0,0 +1,26 @@
+# ECC for Codex CLI
+
+This supplements the root `AGENTS.md` with a repo-local ECC baseline.
+
+## Repo Skill
+
+- Repo-generated Codex skill: `.agents/skills/certd/SKILL.md`
+- Claude-facing companion skill: `.claude/skills/certd/SKILL.md`
+- Keep user-specific credentials and private MCPs in `~/.codex/config.toml`, not in this repo.
+
+## MCP Baseline
+
+Treat `.codex/config.toml` as the default ECC-safe baseline for work in this repository.
+The generated baseline enables GitHub, Context7, Exa, Memory, Playwright, and Sequential Thinking.
+
+## Multi-Agent Support
+
+- Explorer: read-only evidence gathering
+- Reviewer: correctness, security, and regression review
+- Docs researcher: API and release-note verification
+
+## Workflow Files
+
+- No dedicated workflow command files were generated for this repo.
+
+Use these workflow files as reusable task scaffolds when the detected repository workflows recur.

.codex/agents/docs-researcher.toml

@@ -0,0 +1,9 @@
+model = "gpt-5.4"
+model_reasoning_effort = "medium"
+sandbox_mode = "read-only"
+
+developer_instructions = """
+Verify APIs, framework behavior, and release-note claims against primary documentation before changes land.
+Cite the exact docs or file paths that support each claim.
+Do not invent undocumented behavior.
+"""

.codex/agents/explorer.toml

@@ -0,0 +1,9 @@
+model = "gpt-5.4"
+model_reasoning_effort = "medium"
+sandbox_mode = "read-only"
+
+developer_instructions = """
+Stay in exploration mode.
+Trace the real execution path, cite files and symbols, and avoid proposing fixes unless the parent agent asks for them.
+Prefer targeted search and file reads over broad scans.
+"""

.codex/agents/reviewer.toml

@@ -0,0 +1,9 @@
+model = "gpt-5.4"
+model_reasoning_effort = "high"
+sandbox_mode = "read-only"
+
+developer_instructions = """
+Review like an owner.
+Prioritize correctness, security, behavioral regressions, and missing tests.
+Lead with concrete findings and avoid style-only feedback unless it hides a real bug.
+"""

.codex/config.toml

@@ -0,0 +1,48 @@
+#:schema https://developers.openai.com/codex/config-schema.json
+
+# ECC Tools generated Codex baseline
+approval_policy = "on-request"
+sandbox_mode = "workspace-write"
+web_search = "live"
+
+[mcp_servers.github]
+command = "npx"
+args = ["-y", "@modelcontextprotocol/server-github"]
+
+[mcp_servers.context7]
+command = "npx"
+args = ["-y", "@upstash/context7-mcp@latest"]
+
+[mcp_servers.exa]
+url = "https://mcp.exa.ai/mcp"
+
+[mcp_servers.memory]
+command = "npx"
+args = ["-y", "@modelcontextprotocol/server-memory"]
+
+[mcp_servers.playwright]
+command = "npx"
+args = ["-y", "@playwright/mcp@latest", "--extension"]
+
+[mcp_servers.sequential-thinking]
+command = "npx"
+args = ["-y", "@modelcontextprotocol/server-sequential-thinking"]
+
+[features]
+multi_agent = true
+
+[agents]
+max_threads = 6
+max_depth = 1
+
+[agents.explorer]
+description = "Read-only codebase explorer for gathering evidence before changes are proposed."
+config_file = "agents/explorer.toml"
+
+[agents.reviewer]
+description = "PR reviewer focused on correctness, security, and missing tests."
+config_file = "agents/reviewer.toml"
+
+[agents.docs_researcher]
+description = "Documentation specialist that verifies APIs, framework behavior, and release notes."
+config_file = "agents/docs-researcher.toml"

.github/workflows/release-image.yml

@@ -105,10 +105,8 @@ jobs:
           tags: |
             registry.cn-shenzhen.aliyuncs.com/handsfree/certd:slim
             registry.cn-shenzhen.aliyuncs.com/handsfree/certd:${{steps.get_certd_version.outputs.result}}-slim
-            registry.cn-shenzhen.aliyuncs.com/certd/certd:slim
-            registry.cn-shenzhen.aliyuncs.com/certd/certd:${{steps.get_certd_version.outputs.result}}-slim
-            certd/certd:slim
-            certd/certd:${{steps.get_certd_version.outputs.result}}-slim
+            greper/certd:slim
+            greper/certd:${{steps.get_certd_version.outputs.result}}-slim
             ghcr.io/${{ github.repository }}:slim
             ghcr.io/${{ github.repository }}:${{steps.get_certd_version.outputs.result}}-slim
 
@@ -121,10 +119,8 @@ jobs:
           tags: |
             registry.cn-shenzhen.aliyuncs.com/handsfree/certd:armv7
             registry.cn-shenzhen.aliyuncs.com/handsfree/certd:${{steps.get_certd_version.outputs.result}}-armv7
-            registry.cn-shenzhen.aliyuncs.com/certd/certd:armv7
-            registry.cn-shenzhen.aliyuncs.com/certd/certd:${{steps.get_certd_version.outputs.result}}-armv7
-            certd/certd:armv7
-            certd/certd:${{steps.get_certd_version.outputs.result}}-armv7
+            greper/certd:armv7
+            greper/certd:${{steps.get_certd_version.outputs.result}}-armv7
             ghcr.io/${{ github.repository }}:armv7
             ghcr.io/${{ github.repository }}:${{steps.get_certd_version.outputs.result}}-armv7
 

.github/workflows/stable-release.yml

@@ -1,88 +0,0 @@
-name: stable-release
-on:
-  workflow_dispatch:
-    inputs:
-      version:
-        description: "版本号（如 v1.42.5）"
-        required: true
-        type: string
-
-permissions:
-  contents: read
-  packages: write
-
-jobs:
-  make-stable:
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@v4
-
-      - name: Set up QEMU
-        uses: docker/setup-qemu-action@v3
-
-      - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v3
-
-      - name: Login to aliyun container Registry
-        uses: docker/login-action@v3
-        with:
-          registry: registry.cn-shenzhen.aliyuncs.com
-          username: ${{ secrets.aliyun_cs_username }}
-          password: ${{ secrets.aliyun_cs_password }}
-
-      - name: Login to GitHub Packages
-        uses: docker/login-action@v3
-        with:
-          registry: ghcr.io
-          username: ${{ github.actor }}
-          password: ${{ secrets.GITHUB_TOKEN }}
-
-      - name: Login to Docker Hub
-        uses: docker/login-action@v3
-        with:
-          username: ${{ secrets.dockerhub_username }}
-          password: ${{ secrets.dockerhub_password }}
-
-      # stable 镜像：叠加 ENV 层
-      - name: Build and push stable images
-        run: |
-          echo "FROM greper/certd:${{ inputs.version }}
-          ENV certd_release_mode=stable" > Dockerfile.stable
-          docker buildx build \
-            --platform linux/amd64,linux/arm64 \
-            --push \
-            -f Dockerfile.stable \
-            -t registry.cn-shenzhen.aliyuncs.com/handsfree/certd:stable \
-            -t registry.cn-shenzhen.aliyuncs.com/handsfree/certd:${{ inputs.version }}-stable \
-            -t registry.cn-shenzhen.aliyuncs.com/certd/certd:stable \
-            -t registry.cn-shenzhen.aliyuncs.com/certd/certd:${{ inputs.version }}-stable \
-            -t certd/certd:stable \
-            -t certd/certd:${{ inputs.version }}-stable \
-            -t ghcr.io/${{ github.repository }}:stable \
-            -t ghcr.io/${{ github.repository }}:${{ inputs.version }}-stable \
-            .
-
-      # slim-stable 镜像
-      - name: Build and push slim-stable images
-        run: |
-          echo "FROM greper/certd:${{ inputs.version }}-slim
-          ENV certd_release_mode=stable" > Dockerfile.slim-stable
-          docker buildx build \
-            --platform linux/amd64,linux/arm64 \
-            --push \
-            -f Dockerfile.slim-stable \
-            -t registry.cn-shenzhen.aliyuncs.com/handsfree/certd:slim-stable \
-            -t registry.cn-shenzhen.aliyuncs.com/handsfree/certd:${{ inputs.version }}-slim-stable \
-            -t registry.cn-shenzhen.aliyuncs.com/certd/certd:slim-stable \
-            -t registry.cn-shenzhen.aliyuncs.com/certd/certd:${{ inputs.version }}-slim-stable \
-            -t certd/certd:slim-stable \
-            -t certd/certd:${{ inputs.version }}-slim-stable \
-            -t ghcr.io/${{ github.repository }}:slim-stable \
-            -t ghcr.io/${{ github.repository }}:${{ inputs.version }}-slim-stable \
-            .
-
-      - name: Set AtomGit release as stable
-        run: |
-          export ATOMGIT_TOKEN=${{ secrets.ATOMGIT_TOKEN }}
-          export VERSION=${{ inputs.version }}
-          npm run set-release-stable

.trae/documents/plugin-on-demand-dependency-loading.md

@@ -0,0 +1,412 @@
+# 插件依赖按需加载方案
+
+## 背景与目标
+
+### 当前问题
+- `packages/ui/certd-server/node_modules` 包含 50+ 个插件的所有依赖，体积庞大
+- 大量云厂商 SDK（AWS、阿里云、腾讯云、华为云等）只在特定插件中使用
+- 用户通常只使用少数几个插件，但必须安装所有依赖
+
+### 目标
+实现依赖的按需下载和加载：
+1. 插件依赖独立管理，不占用主 `node_modules` 空间
+2. 只有当用户首次使用某插件时，才动态下载该插件需要的依赖
+3. 依赖安装完成后，通过 `await import()` 从独立路径加载
+4. 保持现有插件代码的最小改动
+
+## 当前架构分析
+
+### 插件加载机制
+- 插件位于 `packages/ui/certd-server/src/plugins/` 下（50+ 个插件目录）
+- `AutoLoadPlugins` 类在启动时扫描 `dist/plugins` 目录并动态导入
+- 插件注册到不同的 registry：`accessRegistry`, `pluginRegistry`, `dnsProviderRegistry` 等
+- 插件代码已经使用 `await import()` 进行懒加载（如 `await import("@aws-sdk/client-acm")`）
+
+### 重型依赖分布
+从 `packages/ui/certd-server/package.json` 分析，以下依赖体积大且仅特定插件使用：
+
+**云厂商 SDK（按插件分组）：**
+- **AWS 插件**：`@aws-sdk/client-acm`, `@aws-sdk/client-cloudfront`, `@aws-sdk/client-iam`, `@aws-sdk/client-route-53`, `@aws-sdk/client-s3`, `@aws-sdk/client-sts`
+- **阿里云插件**：`@alicloud/openapi-client`, `@alicloud/pop-core`, `@alicloud/tea-typescript`, `@alicloud/fc20230330` 等
+- **腾讯云插件**：`tencentcloud-sdk-nodejs`, `cos-nodejs-sdk-v5`
+- **华为云插件**：`@huaweicloud/huaweicloud-sdk-cdn`, `@huaweicloud/huaweicloud-sdk-core` 等
+- **Azure 插件**：`@azure/arm-dns`, `@azure/identity`
+- **Google Cloud 插件**：`@google-cloud/dns`, `@google-cloud/publicca`
+- **火山引擎插件**：`@volcengine/openapi`, `@volcengine/tos-sdk`
+
+**网络/工具库：**
+- `ssh2`, `socks`, `socks-proxy-agent`（SSH 相关插件）
+- `ali-oss`, `qiniu`, `basic-ftp`（存储/传输插件）
+- `nodemailer`（邮件通知插件）
+
+**通用依赖（保留在主 package.json）：**
+- `@midwayjs/*` 系列（框架核心）
+- `@certd/*` 系列（项目内部包）
+- `axios`, `lodash-es`, `dayjs`, `js-yaml` 等基础工具
+
+## 设计方案
+
+### 架构概览
+
+```
+packages/ui/certd-server/
+├── package.json                    # 主依赖（框架、通用工具）
+├── node_modules/                   # 主依赖安装目录
+├── optional-deps/                  # 新增：可选依赖管理目录
+│   ├── package.json                # 可选依赖总配置（用于 pnpm install）
+│   ├── pnpm-lock.yaml              # 可选依赖锁文件
+│   └── node_modules/               # 可选依赖安装目录
+├── src/
+│   └── modules/
+│       └── dependency/             # 新增：依赖管理模块
+│           ├── dependency-manager.ts    # 核心：依赖管理器
+│           ├── dependency-registry.ts   # 依赖注册表（插件 -> 依赖映射）
+│           └── types.ts                 # 类型定义
+```
+
+### 核心组件
+
+#### 1. 依赖管理器（DependencyManager）
+
+**职责：**
+- 检查依赖是否已安装
+- 动态执行 `pnpm install` 安装缺失依赖
+- 提供从 `optional-deps/node_modules` 加载依赖的方法
+- 并发控制：避免多个插件同时触发安装
+
+**关键方法：**
+```typescript
+class DependencyManager {
+  // 确保依赖已安装，返回依赖模块
+  async ensureAndImport<T>(packageName: string): Promise<T>
+  
+  // 检查依赖是否已安装
+  async isInstalled(packageName: string): Promise<boolean>
+  
+  // 安装依赖（带锁，避免并发）
+  async installDependencies(packages: string[]): Promise<void>
+  
+  // 从 optional-deps/node_modules 加载依赖
+  async loadModule<T>(packageName: string): Promise<T>
+}
+```
+
+**实现要点：**
+- 使用文件锁（如 `proper-lockfile`）防止并发安装
+- 安装前检查 `optional-deps/node_modules/{packageName}` 是否存在
+- 安装命令：`pnpm install --dir optional-deps --ignore-workspace`
+- 加载时使用绝对路径：`import('file:///absolute/path/to/optional-deps/node_modules/package')`
+
+#### 2. 依赖注册表（DependencyRegistry）
+
+**职责：**
+- 维护插件名称到依赖列表的映射
+- 提供依赖查询接口
+
+**数据结构：**
+```typescript
+interface PluginDependencyConfig {
+  pluginName: string;
+  dependencies: {
+    packageName: string;
+    version: string;
+    optional?: boolean;  // 是否可选（安装失败不阻塞）
+  }[];
+}
+
+// 示例注册
+dependencyRegistry.register('plugin-aws', [
+  { packageName: '@aws-sdk/client-acm', version: '^3.964.0' },
+  { packageName: '@aws-sdk/client-cloudfront', version: '^3.964.0' },
+  { packageName: '@aws-sdk/client-route-53', version: '^3.964.0' },
+]);
+```
+
+#### 3. 插件集成
+
+**改造现有插件代码：**
+
+改造前（`plugin-aws/libs/aws-client.ts`）：
+```typescript
+const { ACMClient, ImportCertificateCommand } = await import("@aws-sdk/client-acm");
+```
+
+改造后：
+```typescript
+import { DependencyManager } from "../../../modules/dependency/dependency-manager.js";
+
+const depManager = new DependencyManager();
+const { ACMClient, ImportCertificateCommand } = await depManager.ensureAndImport("@aws-sdk/client-acm");
+```
+
+**简化方案（推荐）：**
+
+创建辅助函数，减少改动量：
+```typescript
+// src/modules/dependency/import-helper.ts
+export async function importOptionalDep<T>(packageName: string): Promise<T> {
+  const depManager = new DependencyManager();
+  return await depManager.ensureAndImport<T>(packageName);
+}
+
+// 插件中使用
+import { importOptionalDep } from "../../../modules/dependency/import-helper.js";
+const { ACMClient } = await importOptionalDep("@aws-sdk/client-acm");
+```
+
+### 实施步骤
+
+#### 阶段一：基础设施搭建
+1. 创建 `optional-deps/` 目录结构
+2. 生成 `optional-deps/package.json`（包含所有可选依赖）
+3. 实现 `DependencyManager` 核心逻辑
+4. 实现依赖安装锁机制
+5. 编写单元测试
+
+#### 阶段二：依赖迁移
+6. 从主 `package.json` 移除可选依赖
+7. 将依赖添加到 `optional-deps/package.json`
+8. 创建依赖注册表，映射插件到依赖
+
+#### 阶段三：插件改造
+9. 创建 `import-helper.ts` 辅助函数
+10. 逐步改造插件代码，使用 `importOptionalDep` 加载依赖
+11. 优先改造重型依赖（AWS、阿里云、腾讯云等）
+
+#### 阶段四：测试与优化
+12. 端到端测试：验证依赖按需安装和加载
+13. 性能优化：缓存已加载的模块
+14. 错误处理：安装失败时的降级策略
+15. 文档：编写使用说明和迁移指南
+
+## 关键技术决策
+
+### 1. 依赖分组策略
+**选择：按插件分组**
+- 每个插件声明自己需要的依赖
+- 优点：职责清晰，易于维护
+- 缺点：可能有重复依赖（但 pnpm 会去重）
+
+**备选：按功能分组**
+- 将依赖按功能分组（如 "aws-deps", "aliyun-deps"）
+- 优点：更细粒度控制
+- 缺点：增加复杂度
+
+### 2. 安装触发时机
+**选择：首次使用时触发**
+- 在插件的 `execute()` 或 `getClient()` 方法中触发安装
+- 优点：真正的按需加载
+- 缺点：首次使用有延迟
+
+**备选：启动时预检查**
+- 启动时扫描启用的插件，预安装依赖
+- 优点：避免运行时延迟
+- 缺点：可能安装不需要的依赖
+
+### 3. 依赖路径解析
+**选择：使用绝对路径 + `file://` 协议**
+```typescript
+const modulePath = path.resolve(__dirname, '../../optional-deps/node_modules', packageName);
+return await import(`file://${modulePath}/index.js`);
+```
+
+**原因：**
+- Node.js ESM 要求明确的 URL 格式
+- 避免模块解析冲突
+
+### 4. 并发控制
+**选择：文件锁 + 内存锁双重保护**
+- 使用 `proper-lockfile` 锁定 `optional-deps/` 目录
+- 内存中使用 `Map` 记录正在安装的依赖
+- 避免多个插件同时触发安装
+
+### 5. 错误处理
+**策略：**
+- 安装失败时记录日志，抛出明确的错误信息
+- 提供手动安装命令提示：`请运行: cd optional-deps && pnpm install`
+- 支持降级：某些非核心依赖安装失败时，插件可以部分功能可用
+
+## 验证方案
+
+### 单元测试
+1. 测试 `DependencyManager.isInstalled()` 正确检测依赖状态
+2. 测试 `DependencyManager.installDependencies()` 成功安装依赖
+3. 测试并发安装时的锁机制
+4. 测试从 `optional-deps/node_modules` 加载模块
+
+### 集成测试
+1. 清空 `optional-deps/node_modules`
+2. 启动服务，验证不触发安装
+3. 调用 AWS 插件，验证触发安装并成功加载
+4. 再次调用，验证不重复安装
+5. 验证主 `node_modules` 体积减少
+
+### 性能测试
+1. 测量首次安装依赖的耗时
+2. 测量后续加载的耗时（应该与正常 import 相近）
+3. 对比改造前后的 `node_modules` 大小
+
+## 风险与挑战
+
+### 1. 首次使用延迟
+**风险：** 用户首次使用插件时需要等待依赖安装（可能几十秒）
+**缓解：**
+- 在 UI 上显示安装进度
+- 提供预安装命令：`pnpm run install-optional-deps`
+- 文档说明首次使用会有延迟
+
+### 2. 离线环境
+**风险：** 离线环境无法下载依赖
+**缓解：**
+- 提供完整安装包（包含所有可选依赖）
+- 支持手动复制 `node_modules`
+
+### 3. 版本冲突
+**风险：** 可选依赖与主依赖版本冲突
+**缓解：**
+- 使用 `--ignore-workspace` 隔离安装
+- 定期同步主依赖版本
+
+### 4. TypeScript 类型
+**风险：** 动态导入的类型推断
+**缓解：**
+- 保留 `@types/*` 在主 `devDependencies`
+- 使用泛型和类型断言
+
+## 预期收益
+
+1. **空间节省：** 主 `node_modules` 体积减少 60-70%（估算）
+2. **安装速度：** 初始 `pnpm install` 速度提升 3-5 倍
+3. **用户体验：** 不使用的插件不占用空间，按需加载
+4. **维护性：** 依赖分组清晰，易于管理
+
+## 后续优化
+
+1. **依赖预热：** 在后台预安装常用插件依赖
+2. **依赖缓存：** 支持从 CDN 或本地缓存安装
+3. **依赖更新：** 提供命令批量更新可选依赖
+4. **插件市场：** 支持从远程下载插件及其依赖配置
+
+## 附录：依赖分类清单
+
+### 可选依赖（迁移到 optional-deps/package.json）
+
+**AWS 相关（plugin-aws, plugin-aws-cn）：**
+```json
+{
+  "@aws-sdk/client-acm": "^3.964.0",
+  "@aws-sdk/client-cloudfront": "^3.964.0",
+  "@aws-sdk/client-iam": "^3.964.0",
+  "@aws-sdk/client-route-53": "^3.964.0",
+  "@aws-sdk/client-s3": "^3.964.0",
+  "@aws-sdk/client-sts": "^3.990.0"
+}
+```
+
+**阿里云相关（plugin-aliyun, plugin-lib/aliyun）：**
+```json
+{
+  "@alicloud/fc20230330": "^4.1.7",
+  "@alicloud/openapi-client": "^0.4.12",
+  "@alicloud/openapi-util": "^0.3.2",
+  "@alicloud/pop-core": "^1.7.10",
+  "@alicloud/sts-sdk": "^1.0.2",
+  "@alicloud/tea-typescript": "^1.8.0",
+  "@alicloud/tea-util": "^1.4.10",
+  "ali-oss": "^6.21.0"
+}
+```
+
+**腾讯云相关（plugin-tencent, plugin-lib/tencent）：**
+```json
+{
+  "tencentcloud-sdk-nodejs": "^4.1.112",
+  "cos-nodejs-sdk-v5": "^2.14.6"
+}
+```
+
+**华为云相关（plugin-huawei）：**
+```json
+{
+  "@huaweicloud/huaweicloud-sdk-cdn": "3.1.185",
+  "@huaweicloud/huaweicloud-sdk-core": "3.1.185",
+  "@huaweicloud/huaweicloud-sdk-elb": "3.1.185",
+  "@huaweicloud/huaweicloud-sdk-iam": "3.1.185",
+  "esdk-obs-nodejs": "^3.25.6"
+}
+```
+
+**Azure 相关（plugin-azure）：**
+```json
+{
+  "@azure/arm-dns": "^5.1.0",
+  "@azure/identity": "^4.13.1"
+}
+```
+
+**Google Cloud 相关（plugin-google, plugin-cert/google）：**
+```json
+{
+  "@google-cloud/dns": "^5.3.1",
+  "@google-cloud/publicca": "^1.3.0"
+}
+```
+
+**火山引擎相关（plugin-volcengine）：**
+```json
+{
+  "@volcengine/openapi": "^1.28.1",
+  "@volcengine/tos-sdk": "^2.9.1"
+}
+```
+
+**SSH/网络相关（plugin-host, plugin-lib/ssh）：**
+```json
+{
+  "ssh2": "^1.17.0",
+  "socks": "^2.8.3",
+  "socks-proxy-agent": "^8.0.4",
+  "basic-ftp": "^5.0.5"
+}
+```
+
+**其他存储/传输（plugin-qiniu, plugin-lib/qiniu）：**
+```json
+{
+  "qiniu": "^7.12.0"
+}
+```
+
+**邮件通知（plugin-notification/email）：**
+```json
+{
+  "nodemailer": "^6.9.16"
+}
+```
+
+### 主依赖（保留在主 package.json）
+
+**框架核心：**
+- `@midwayjs/*` 系列
+- `@koa/cors`
+- `typeorm`, `better-sqlite3`, `mysql2`, `pg`
+
+**项目内部包：**
+- `@certd/*` 系列
+
+**通用工具：**
+- `axios`, `lodash-es`, `dayjs`, `js-yaml`
+- `crypto-js`, `jsonwebtoken`, `bcryptjs`
+- `reflect-metadata`, `uuid`, `nanoid`
+- 等等
+
+## 总结
+
+本方案通过引入独立的可选依赖管理机制，实现了插件依赖的按需下载和加载。核心思路是：
+
+1. **隔离管理：** 在 `optional-deps/` 目录下维护独立的 `package.json` 和 `node_modules`
+2. **动态安装：** 通过 `DependencyManager` 在首次使用时触发 `pnpm install`
+3. **路径加载：** 使用绝对路径从独立目录加载依赖模块
+4. **最小改动：** 通过辅助函数 `importOptionalDep` 简化插件代码改造
+
+该方案可以显著减少主 `node_modules` 体积，提升初始安装速度，同时保持现有架构的兼容性和可维护性。

AGENTS.md

@@ -217,18 +217,3 @@ Certd 是可私有化部署的 SSL/TLS 证书自动化管理平台，提供 Web
 ### 旧版数据兼容
 
 - 新增插件参数时，必须要考虑旧版数据兼容，比如新增一个deployType参数，有两种值：`default`和`custom`，需要在使用时判空，走旧版逻辑。
-
-## 前端路由与国际化
-
-- 路由 `meta.title` 是 **i18n 国际化 key**，必须在 `src/locales/langs/zh-CN/` 和 `src/locales/langs/en-US/` 对应的模块文件中添加翻译。
-- 示例：路由 `title: "certd.auditLog"` 需要在中英 locales 文件中有对应 key（`"certd.auditLog": "操作日志"` / `"certd.auditLog": "Audit Log"`）。
-- 菜单通过路由自动生成，需设置 `meta.isMenu: true` 才会出现在左侧菜单。
-- Plus 版功能菜单需设置 `meta.show: () => { const settingStore = useSettingStore(); return settingStore.isPlus; }`。
-
-## 审计日志
-
-- 审计日志是 Plus 版功能，非 Plus 版不会写入。
-- Controller 继承 `BaseController`，通过 `this.auditLog({ content: "xxx" })` 记录日志。
-- Controller 中的 `@Post("/add", {  summary: "xxxx" })`, 这个summary是必须要的，他是日志action字段的来源
-- `getAuditType()` 返回类型常量，中间件自动从 ctx.path 判定 scope（`/api/sys/` → system，其他 → user）。
-- 操作日志有系统级（scope=system）和用户级（scope=user）区分。

CHANGELOG.md

@@ -3,6 +3,16 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
 
+## [1.42.6](https://github.com/certd/certd/compare/v1.42.5...v1.42.6) (2026-07-18)
+
+### Bug Fixes
+
+* 修复正常批量删除流水线报权限不足的bug ([5b50083](https://github.com/certd/certd/commit/5b500830a122c6c42dab054e57fed509050f94da))
+
+### Performance Improvements
+
+* 优化动态加载依赖镜像地址，多次重试 ([5f53b81](https://github.com/certd/certd/commit/5f53b81c75dd242b4260ac08cae14c6d1a08a883))
+
 ## [1.42.5](https://github.com/certd/certd/compare/v1.42.4...v1.42.5) (2026-07-15)
 
 ### Bug Fixes

README.md

@@ -1,4 +1,4 @@
-# Certd
+# Certd
 
 中文 | [English](./README_en.md)
 
@@ -105,56 +105,33 @@ https://certd.handfree.work/
 
 #### Docker镜像说明：
 
-##### 1. 镜像地址格式：
-
-```
-registry.cn-shenzhen.aliyuncs.com/certd/certd:[version-][system-][latest/stable]  
------------- ↑ 镜像地址 ------------- ↑ 镜像名 -- ↑指定版本- ↑基础系统- ↑最新版本类型             
-```
-##### 2. 版本标签：
-
-**最新版本标签：**
-
-| 版本 | 标签 | 说明 |
-| --- | --- | --- |
-| 最新预览版【默认】 | `certd:latest` | 指向最新开发版本，包含最新功能，但稳定性不如稳定版  | 
-| 最新稳定版 | `certd:stable` | 指向经过充分测试的生产就绪版本，推荐生产环境使用  |  
-
-**系统分支版本：**
-
-> 根据基础镜像不同，分为如下三个分支版本，没有特殊需求选择默认的即可（他们功能是一样的）
-
-| 系统版本 | 版本标签 |   基础系统 | 说明 | 稳定版标签 | 
-| --- | --- | --- | --- | --- | 
-| alpine【默认】 | `certd:latest` |  Alpine Linux | 默认版本，镜像体积小  | `certd:stable` |
-| slim | `certd:slim` |  Debian slim | 基于glibc，dns解析兼容性好 | `certd:slim-stable` |
-| armv7 | `certd:armv7` |  Alpine Linux | ARMv7 架构专用版本 | `certd:armv7-stable` |
-
-##### 2. 镜像地址：
-
-| 镜像仓库 | 最新预览版  | slim | armv7 | 
-| --- | --- | --- | --- | 
-| 阿里云【默认】 | `registry.cn-shenzhen.aliyuncs.com/certd/certd:latest` | `certd:slim` | `certd:armv7` |
-| Docker Hub | `greper/certd:latest` | `certd:slim` |
-| GitHub Packages | `ghcr.io/certd/certd:latest` | `certd:slim` | `certd:armv7` |
+**镜像版本：**
 
 
-> 注意： 
-> 1. 后面的各个版本省略了镜像地址，使用时需要将镜像地址拼接完整。
-> 2. 稳定版在后面加 `-stable` 即可。
-> 3. 如需指定具体的版本号，在冒号后面加 `version-`即可，例如 `certd:1.42.1-stable`。
+| 标签 | 指定版本 | 基础系统  | 说明 |   
+| ---  | ---  | --- | --- |   
+| `latest` |  `[version]` | Alpine Linux  | 默认版本，镜像体积小 |    
+| `slim` |  `[version]-slim` | Debian slim  | 基于glibc，dns解析兼容性好（可能需要配置security_opt -seccomp=unconfined） |
+| `armv7` |  `[version]-armv7` | Alpine Linux | ARMv7 架构专用版本 |
 
 
-##### 3. 镜像构建说明：
+**镜像地址：**
+
+| 镜像仓库 | latest | slim | armv7 |
+| --- | --- | --- | --- |
+| 阿里云 | `registry.cn-shenzhen.aliyuncs.com/handsfree/certd:latest` | `registry.cn-shenzhen.aliyuncs.com/handsfree/certd:slim` | `registry.cn-shenzhen.aliyuncs.com/handsfree/certd:armv7` |
+| Docker Hub | `greper/certd:latest` | `greper/certd:slim` | `greper/certd:armv7` |
+| GitHub Packages | `ghcr.io/certd/certd:latest` | `ghcr.io/certd/certd:slim` | `ghcr.io/certd/certd:armv7` |
+
+> 带版本号的标签请将 `latest` / `slim` / `armv7` 替换为 `[version]` / `[version]-slim` / `[version]-armv7`
 
 - 镜像构建通过`Actions`自动执行，过程公开透明，请放心使用
-  - [点我查看预览版构建日志](https://github.com/certd/certd/actions/workflows/release-image.yml)
-  - [点我查看稳定版发布日志](https://github.com/certd/certd/actions/workflows/stable-release.yml)
+  - [点我查看镜像构建日志](https://github.com/certd/certd/actions/workflows/build-image.yml)
 
 ![](./docs/images/action/action-build.jpg)
 
-##### 4. 安全注意事项：
-
+> 注意：
+>
 > - 本应用存储的证书、授权信息等属于高度敏感数据，请做好安全防护
 > - 请务必使用HTTPS协议访问本应用，避免被中间人攻击
 > - 请务必使用web应用防火墙防护本应用，防止XSS、SQL注入等攻击

README_en.md

@@ -1,4 +1,4 @@
-# Certd
+# Certd
 
 [中文](./README.md) | English
 
@@ -95,44 +95,21 @@ You can choose one of the following deployment methods based on your needs:
 
 #### Docker Image Information:
 
-**Release channels:**
+- Domestic Image Addresses:
+  - `registry.cn-shenzhen.aliyuncs.com/handsfree/certd:latest`
+  - `registry.cn-shenzhen.aliyuncs.com/handsfree/certd:armv7`, `[version]-armv7`
+- DockerHub Addresses:
+  - `https://hub.docker.com/r/greper/certd`
+  - `greper/certd:latest`
+  - `greper/certd:armv7`, `greper/certd:[version]-armv7`
+- GitHub Packages Addresses:
 
-| Channel | Description |
-| --- | --- |
-| `stable` / `slim-stable` | **Stable version**, production-ready and fully tested, recommended for production environments |
-| `latest` / `slim` / `armv7` | **Preview version**, latest development build with newest features but potentially less stable |
-
-**Image tags:**
-
-| Channel | Tag | Versioned Tag | Base System | Description |
-| --- | --- | --- | --- | --- |
-| **Stable** | `stable` | `[version]-stable` | Alpine Linux | Recommended for production |
-| | `slim-stable` | `[version]-slim-stable` | Debian slim | Better DNS resolution compatibility |
-| **Preview** | `latest` | `[version]` | Alpine Linux | Default, small image size |
-| | `slim` | `[version]-slim` | Debian slim | Better DNS resolution compatibility |
-| | `armv7` | `[version]-armv7` | Alpine Linux | ARMv7 architecture |
-
-**Stable version image addresses:**
-
-| Registry | `stable` | `slim-stable` |
-| --- | --- | --- |
-| Aliyun | `registry.cn-shenzhen.aliyuncs.com/handsfree/certd:stable` | `registry.cn-shenzhen.aliyuncs.com/handsfree/certd:slim-stable` |
-| Docker Hub | `greper/certd:stable` | `greper/certd:slim-stable` |
-| GitHub Packages | `ghcr.io/certd/certd:stable` | `ghcr.io/certd/certd:slim-stable` |
-
-**Preview version image addresses:**
-
-| Registry | `latest` | `slim` | `armv7` |
-| --- | --- | --- | --- |
-| Aliyun | `registry.cn-shenzhen.aliyuncs.com/handsfree/certd:latest` | `registry.cn-shenzhen.aliyuncs.com/handsfree/certd:slim` | `registry.cn-shenzhen.aliyuncs.com/handsfree/certd:armv7` |
-| Docker Hub | `greper/certd:latest` | `greper/certd:slim` | `greper/certd:armv7` |
-| GitHub Packages | `ghcr.io/certd/certd:latest` | `ghcr.io/certd/certd:slim` | `ghcr.io/certd/certd:armv7` |
-
-> For versioned tags, replace tag name with `[version]-tag`, e.g. replace `stable` with `[version]-stable`
+  - `ghcr.io/certd/certd:latest`
+  - `ghcr.io/certd/certd:armv7`, `ghcr.io/certd/certd:[version]-armv7`
 
 - Images are built automatically by `Actions`, with a transparent process. Please use them with confidence.
-  - [Click here to view preview version build logs](https://github.com/certd/certd/actions/workflows/release-image.yml)
-  - [Click here to view stable version release logs](https://github.com/certd/certd/actions/workflows/stable-release.yml)
+  - [Click here to view image build logs](https://github.com/certd/certd/actions/workflows/build-image.yml)
+
 ![](./docs/images/action/action-build.jpg)
 
 > Note:

docker/run/docker-compose.yaml

@@ -2,13 +2,9 @@ version: '3.3' # 兼容旧版docker-compose
 services:
   certd:
     # 镜像                                                  #  ↓↓↓↓↓ ---- 镜像版本号，建议改成固定版本号,例如：certd:1.29.0
-    image: registry.cn-shenzhen.aliyuncs.com/certd/certd:latest
+    image: registry.cn-shenzhen.aliyuncs.com/handsfree/certd:latest
     # image: ghcr.io/certd/certd:latest                    #   --------- 如果 报镜像not found，可以尝试其他镜像源
     # image: greper/certd:latest
-                                                           #   --------- 生产建议使用稳定版， latest改成stable即可
-    # image: registry.cn-shenzhen.aliyuncs.com/certd/certd:stable  
-
-
     # security_opt:                                        #   --------- 如果slim镜像下启动报错，尝试去掉这两行注释
     #   - seccomp=unconfined       # 解决slim镜像下WorkerThreadsTaskRunner::DelayedTaskScheduler::Start() 报错问题
     container_name: certd # 容器名

docs/guide/changelogs/CHANGELOG.md

@@ -3,6 +3,16 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
 
+## [1.42.6](https://github.com/certd/certd/compare/v1.42.5...v1.42.6) (2026-07-18)
+
+### Bug Fixes
+
+* 修复正常批量删除流水线报权限不足的bug ([5b50083](https://github.com/certd/certd/commit/5b500830a122c6c42dab054e57fed509050f94da))
+
+### Performance Improvements
+
+* 优化动态加载依赖镜像地址，多次重试 ([5f53b81](https://github.com/certd/certd/commit/5f53b81c75dd242b4260ac08cae14c6d1a08a883))
+
 ## [1.42.5](https://github.com/certd/certd/compare/v1.42.4...v1.42.5) (2026-07-15)
 
 ### Bug Fixes

docs/guide/install/docker/index.md

@@ -6,22 +6,13 @@
 
 Certd 提供多种 Docker 镜像版本，您可以根据需要选择：
 
-**最新版本：**   
+| 版本标签 | 基础系统  | 说明 |
+| --- | --- | --- | --- |
+| `latest` / `[version]` | Alpine Linux  | 默认版本，镜像体积小 |
+| `slim` / `[version]-slim` | Debian slim | glibc版本，dns解析兼容性更好（可能需要配置security_opt -seccomp=unconfined）|
+| `armv7` / `[version]-armv7` | Alpine Linux | ARMv7 架构专用版本 |
 
-| 版本 | 标签 | 说明 |
-| --- | --- | --- |
-| 预览版【默认】 | `certd:latest` | 指向最新开发版本，包含最新功能，但稳定性不如稳定版  | 
-| 稳定版 | `certd:stable` | 指向经过充分测试的生产就绪版本，推荐生产环境使用  |  
-
-**系统版本分支：**
-
-| 分支版本标签 | 基础系统  | 说明 | 指定版本 |  稳定版 | 
-| --- | --- | --- | --- | --- |
-| `certd:latest` 【默认】 | Alpine Linux  | 默认版本，镜像体积小 | `certd:[version]` | `certd:[version-]stable` |
-| `certd:slim`  | Debian slim | glibc版本，dns解析兼容性更好（可能需要配置security_opt -seccomp=unconfined）| `certd:[version-]slim` | `certd:[version-]slim-stable` |
-| `certd:armv7`  | Alpine Linux | ARMv7 架构专用版本 | `certd:[version]-armv7` | `certd:[version-]armv7-ststable` |  
-
-> 如果您不确定使用哪个版本，请使用默认的 `certd:latest` 版本。
+> 如果您不确定使用哪个版本，请使用默认的 `latest` 版本。
 
 ### 一键脚本安装（推荐）
 

lerna.json

@@ -9,5 +9,5 @@
     }
   },
   "npmClient": "pnpm",
-  "version": "1.42.5"
+  "version": "1.42.6"
 }

package.json

@@ -19,7 +19,7 @@
     "devb": "lerna run dev-build",
     "i-all": "lerna link && lerna exec npm install  ",
     "publish": "pnpm run prepublishOnly2  && lerna publish --force-publish=pro/plus-core --conventional-commits && pnpm run afterpublishOnly ",
-    "publish2": " npm run pub_all && pnpm run afterpublishOnly",
+    "publish2":" npm run pub_all && pnpm run afterpublishOnly",
     "afterpublishOnly": "pnpm run copylogs && time /t >trigger/build.trigger && git add ./trigger/build.trigger && git commit -m \"build: trigger build image\" && TIMEOUT /T 10 && pnpm run commitAll",
     "transform-sql": "cd ./packages/ui/certd-server/db/ && node --experimental-json-modules transform.js",
     "plugin-doc-gen": "cd ./packages/ui/certd-server/ && pnpm run export-metadata",
@@ -45,9 +45,7 @@
     "publish_to_atomgit": "node --experimental-json-modules ./scripts/publish-atomgit.js",
     "publish_to_gitee": "node --experimental-json-modules ./scripts/publish-gitee.js",
     "publish_to_github": "node --experimental-json-modules ./scripts/publish-github.js",
-    "get_version": "node --experimental-json-modules ./scripts/version.js",
-    "stable": "node ./scripts/stable.js",
-    "set-release-stable": "node ./scripts/set-release-stable.js"
+    "get_version": "node --experimental-json-modules ./scripts/version.js"
   },
   "license": "AGPL-3.0",
   "dependencies": {

packages/core/acme-client/CHANGELOG.md

@@ -3,6 +3,10 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
 
+## [1.42.6](https://github.com/publishlab/node-acme-client/compare/v1.42.5...v1.42.6) (2026-07-18)
+
+**Note:** Version bump only for package @certd/acme-client
+
 ## [1.42.5](https://github.com/publishlab/node-acme-client/compare/v1.42.4...v1.42.5) (2026-07-15)
 
 **Note:** Version bump only for package @certd/acme-client

packages/core/acme-client/package.json

@@ -3,7 +3,7 @@
     "description": "Simple and unopinionated ACME client",
     "private": false,
     "author": "nmorsman",
-    "version": "1.42.5",
+    "version": "1.42.6",
     "type": "module",
     "module": "./dist/index.js",
     "main": "./dist/index.js",
@@ -18,7 +18,7 @@
         "types"
     ],
     "dependencies": {
-        "@certd/basic": "^1.42.5",
+        "@certd/basic": "^1.42.6",
         "@peculiar/x509": "^1.11.0",
         "asn1js": "^3.0.5",
         "axios": "^1.9.0",
@@ -75,5 +75,5 @@
     "bugs": {
         "url": "https://github.com/publishlab/node-acme-client/issues"
     },
-    "gitHead": "83495b32138cf831b4ea02054d12981d9787ebf0"
+    "gitHead": "246ee83015bf5589adc2a5fa3d1388c8d9a2a252"
 }

packages/core/basic/CHANGELOG.md

@@ -3,6 +3,10 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
 
+## [1.42.6](https://github.com/certd/certd/compare/v1.42.5...v1.42.6) (2026-07-18)
+
+**Note:** Version bump only for package @certd/basic
+
 ## [1.42.5](https://github.com/certd/certd/compare/v1.42.4...v1.42.5) (2026-07-15)
 
 **Note:** Version bump only for package @certd/basic

packages/core/basic/build.md

@@ -1 +1 @@
-23:31
+01:12

packages/core/basic/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@certd/basic",
   "private": false,
-  "version": "1.42.5",
+  "version": "1.42.6",
   "type": "module",
   "main": "./dist/index.js",
   "module": "./dist/index.js",
@@ -54,5 +54,5 @@
     "tslib": "^2.8.1",
     "typescript": "^5.4.2"
   },
-  "gitHead": "83495b32138cf831b4ea02054d12981d9787ebf0"
+  "gitHead": "246ee83015bf5589adc2a5fa3d1388c8d9a2a252"
 }

packages/core/pipeline/CHANGELOG.md

@@ -3,6 +3,12 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
 
+## [1.42.6](https://github.com/certd/certd/compare/v1.42.5...v1.42.6) (2026-07-18)
+
+### Performance Improvements
+
+* 优化动态加载依赖镜像地址，多次重试 ([5f53b81](https://github.com/certd/certd/commit/5f53b81c75dd242b4260ac08cae14c6d1a08a883))
+
 ## [1.42.5](https://github.com/certd/certd/compare/v1.42.4...v1.42.5) (2026-07-15)
 
 ### Bug Fixes

packages/core/pipeline/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@certd/pipeline",
   "private": false,
-  "version": "1.42.5",
+  "version": "1.42.6",
   "type": "module",
   "main": "./dist/index.js",
   "module": "./dist/index.js",
@@ -21,8 +21,8 @@
     "lint": "eslint --fix"
   },
   "dependencies": {
-    "@certd/basic": "^1.42.5",
-    "@certd/plus-core": "^1.42.5",
+    "@certd/basic": "^1.42.6",
+    "@certd/plus-core": "^1.42.6",
     "dayjs": "^1.11.7",
     "lodash-es": "^4.17.21",
     "reflect-metadata": "^0.2.2"
@@ -51,5 +51,5 @@
     "tslib": "^2.8.1",
     "typescript": "^5.4.2"
   },
-  "gitHead": "83495b32138cf831b4ea02054d12981d9787ebf0"
+  "gitHead": "246ee83015bf5589adc2a5fa3d1388c8d9a2a252"
 }

packages/libs/lib-huawei/CHANGELOG.md

@@ -3,6 +3,10 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
 
+## [1.42.6](https://github.com/certd/certd/compare/v1.42.5...v1.42.6) (2026-07-18)
+
+**Note:** Version bump only for package @certd/lib-huawei
+
 ## [1.42.5](https://github.com/certd/certd/compare/v1.42.4...v1.42.5) (2026-07-15)
 
 **Note:** Version bump only for package @certd/lib-huawei

packages/libs/lib-huawei/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@certd/lib-huawei",
   "private": false,
-  "version": "1.42.5",
+  "version": "1.42.6",
   "main": "./dist/bundle.js",
   "module": "./dist/bundle.js",
   "types": "./dist/d/index.d.ts",
@@ -31,5 +31,5 @@
     "prettier": "3.3.3",
     "tslib": "^2.8.1"
   },
-  "gitHead": "83495b32138cf831b4ea02054d12981d9787ebf0"
+  "gitHead": "246ee83015bf5589adc2a5fa3d1388c8d9a2a252"
 }

packages/libs/lib-iframe/CHANGELOG.md

@@ -3,6 +3,10 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
 
+## [1.42.6](https://github.com/certd/certd/compare/v1.42.5...v1.42.6) (2026-07-18)
+
+**Note:** Version bump only for package @certd/lib-iframe
+
 ## [1.42.5](https://github.com/certd/certd/compare/v1.42.4...v1.42.5) (2026-07-15)
 
 **Note:** Version bump only for package @certd/lib-iframe

packages/libs/lib-iframe/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@certd/lib-iframe",
   "private": false,
-  "version": "1.42.5",
+  "version": "1.42.6",
   "type": "module",
   "main": "./dist/index.js",
   "module": "./dist/index.js",
@@ -37,5 +37,5 @@
     "tslib": "^2.8.1",
     "typescript": "^5.4.2"
   },
-  "gitHead": "83495b32138cf831b4ea02054d12981d9787ebf0"
+  "gitHead": "246ee83015bf5589adc2a5fa3d1388c8d9a2a252"
 }

packages/libs/lib-jdcloud/CHANGELOG.md

@@ -3,6 +3,10 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
 
+## [1.42.6](https://github.com/certd/certd/compare/v1.42.5...v1.42.6) (2026-07-18)
+
+**Note:** Version bump only for package @certd/jdcloud
+
 ## [1.42.5](https://github.com/certd/certd/compare/v1.42.4...v1.42.5) (2026-07-15)
 
 **Note:** Version bump only for package @certd/jdcloud

packages/libs/lib-jdcloud/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@certd/jdcloud",
-  "version": "1.42.5",
+  "version": "1.42.6",
   "description": "jdcloud openApi sdk",
   "main": "./dist/bundle.js",
   "module": "./dist/bundle.js",
@@ -63,5 +63,5 @@
       "fetch"
     ]
   },
-  "gitHead": "83495b32138cf831b4ea02054d12981d9787ebf0"
+  "gitHead": "246ee83015bf5589adc2a5fa3d1388c8d9a2a252"
 }

packages/libs/lib-k8s/CHANGELOG.md

@@ -3,6 +3,10 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
 
+## [1.42.6](https://github.com/certd/certd/compare/v1.42.5...v1.42.6) (2026-07-18)
+
+**Note:** Version bump only for package @certd/lib-k8s
+
 ## [1.42.5](https://github.com/certd/certd/compare/v1.42.4...v1.42.5) (2026-07-15)
 
 **Note:** Version bump only for package @certd/lib-k8s

packages/libs/lib-k8s/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@certd/lib-k8s",
   "private": false,
-  "version": "1.42.5",
+  "version": "1.42.6",
   "type": "module",
   "main": "./dist/index.js",
   "module": "./dist/index.js",
@@ -21,7 +21,7 @@
     "lint": "eslint --fix"
   },
   "dependencies": {
-    "@certd/basic": "^1.42.5",
+    "@certd/basic": "^1.42.6",
     "@kubernetes/client-node": "0.21.0"
   },
   "devDependencies": {
@@ -38,5 +38,5 @@
     "tslib": "^2.8.1",
     "typescript": "^5.4.2"
   },
-  "gitHead": "83495b32138cf831b4ea02054d12981d9787ebf0"
+  "gitHead": "246ee83015bf5589adc2a5fa3d1388c8d9a2a252"
 }

packages/libs/lib-server/CHANGELOG.md

@@ -3,6 +3,12 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
 
+## [1.42.6](https://github.com/certd/certd/compare/v1.42.5...v1.42.6) (2026-07-18)
+
+### Bug Fixes
+
+* 修复正常批量删除流水线报权限不足的bug ([5b50083](https://github.com/certd/certd/commit/5b500830a122c6c42dab054e57fed509050f94da))
+
 ## [1.42.5](https://github.com/certd/certd/compare/v1.42.4...v1.42.5) (2026-07-15)
 
 ### Bug Fixes

packages/libs/lib-server/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@certd/lib-server",
-  "version": "1.42.5",
+  "version": "1.42.6",
   "description": "midway with flyway, sql upgrade way ",
   "private": false,
   "type": "module",
@@ -29,11 +29,11 @@
   ],
   "license": "AGPL",
   "dependencies": {
-    "@certd/acme-client": "^1.42.5",
-    "@certd/basic": "^1.42.5",
-    "@certd/pipeline": "^1.42.5",
-    "@certd/plugin-lib": "^1.42.5",
-    "@certd/plus-core": "^1.42.5",
+    "@certd/acme-client": "^1.42.6",
+    "@certd/basic": "^1.42.6",
+    "@certd/pipeline": "^1.42.6",
+    "@certd/plugin-lib": "^1.42.6",
+    "@certd/plus-core": "^1.42.6",
     "@midwayjs/cache": "3.14.0",
     "@midwayjs/core": "3.20.11",
     "@midwayjs/i18n": "3.20.13",
@@ -69,5 +69,5 @@
     "typeorm": "^0.3.20",
     "typescript": "^5.4.2"
   },
-  "gitHead": "83495b32138cf831b4ea02054d12981d9787ebf0"
+  "gitHead": "246ee83015bf5589adc2a5fa3d1388c8d9a2a252"
 }

packages/libs/lib-server/src/basic/audit.test.ts

@@ -1,34 +0,0 @@
-/// <reference types="mocha" />
-
-import assert from "node:assert/strict";
-import { AuditLogContext } from "./audit.js";
-
-// AuditLog decorator and getAuditLogOptions are removed since auditLog()
-// now signals audit intent directly via ctx.auditLog.enabled
-
-describe("AuditLogContext type", () => {
-  it("supports enabled flag", () => {
-    const ctx: AuditLogContext = {
-      type: "pipeline",
-      action: "删除流水线",
-      append: ["ID:5"],
-      content: "删除了流水线(ID:5)",
-      projectId: 3,
-      enabled: true,
-    };
-
-    assert.equal(ctx.enabled, true);
-    assert.equal(ctx.type, "pipeline");
-    assert.equal(ctx.content, "删除了流水线(ID:5)");
-    assert.equal(ctx.projectId, 3);
-  });
-
-  it("works with minimal fields", () => {
-    const ctx: AuditLogContext = {
-      enabled: true,
-      append: ["提交2条"],
-    };
-
-    assert.equal(ctx.enabled, true);
-  });
-});

packages/libs/lib-server/src/basic/audit.ts

@@ -1,44 +0,0 @@
-export type AuditLogOptions = {
-  type?: string;
-  action?: string;
-  content?: string;
-  template?: string;
-  disabled?: boolean;
-};
-
-export type AuditLogContext = {
-  type?: string;
-  action?: string;
-  append?: string | string[];
-  content?: string;
-  projectId?: number;
-  enabled?: boolean;
-  scope?: string;
-  userId?: number;
-  username?: string;
-  success?: boolean;
-};
-
-/** 审计日志方法的参数类型 */
-export type AuditLogParam = {
-  type?: string;
-  action?: string;
-  content?: string;
-  append?: string | string[];
-  projectId?: number;
-  userId?: number;
-  username?: string;
-};
-
-/** AuditService.log() 参数类型 */
-export type AuditLogWriteParam = {
-  userId: number;
-  type: string;
-  action: string;
-  content: string;
-  username?: string;
-  projectId?: number;
-  ipAddress?: string;
-  scope?: string;
-  success?: boolean;
-};

packages/libs/lib-server/src/basic/base-controller.ts

@@ -3,7 +3,6 @@ import type { IMidwayContainer } from "@midwayjs/core";
 import * as koa from "@midwayjs/koa";
 import { Constants } from "./constants.js";
 import { isEnterprise } from "./mode.js";
-import type { AuditLogContext, AuditLogParam } from "./audit.js";
 
 export abstract class BaseController {
   @Inject()
@@ -128,43 +127,4 @@ export abstract class BaseController {
     }
     return { projectId, userId };
   }
-
-  getAuditType(): string {
-    return "unknown";
-  }
-
-  auditLog(bean: AuditLogParam = {}) {
-    const auditLog = this.ensureAuditLogContext();
-    auditLog.enabled = true;
-    if (bean.userId != null) {
-      auditLog.userId = bean.userId;
-    }
-    if (bean.username != null) {
-      auditLog.username = bean.username;
-    }
-    if (bean.type != null) {
-      auditLog.type = bean.type;
-    }
-    if (bean.action != null) {
-      auditLog.action = bean.action;
-    }
-    if (bean.projectId != null) {
-      auditLog.projectId = bean.projectId;
-    }
-    if (bean.content) {
-      auditLog.content = bean.content;
-    }
-    if (bean.append) {
-      const items = Array.isArray(bean.append) ? bean.append : [bean.append];
-      const old = Array.isArray(auditLog.append) ? auditLog.append : auditLog.append ? [auditLog.append] : [];
-      auditLog.append = [...old, ...items].filter(item => item && String(item).trim());
-    }
-  }
-
-  private ensureAuditLogContext(): AuditLogContext {
-    if (!this.ctx.auditLog) {
-      this.ctx.auditLog = {};
-    }
-    return this.ctx.auditLog;
-  }
 }

packages/libs/lib-server/src/basic/base-service.ts

@@ -253,7 +253,6 @@ export abstract class BaseService<T> {
     if (!Array.isArray(ids)) {
       ids = [ids];
     }
-    ids = this.filterIds(ids);
     const res = await this.getRepository().find({
       // eslint-disable-next-line @typescript-eslint/ban-ts-comment
       // @ts-ignore
@@ -266,7 +265,7 @@ export abstract class BaseService<T> {
       },
     });
     if (!res || res.length === ids.length) {
-      return;
+      return ids;
     }
     throw new PermissionException("权限不足");
   }
@@ -280,6 +279,12 @@ export abstract class BaseService<T> {
     });
   }
   async batchDelete(ids: number[], userId: number, projectId?: number): Promise<number> {
+    if (!ids || ids.length === 0) {
+      throw new ValidateException("ids不能为空");
+    }
+    if (!Array.isArray(ids)) {
+      ids = [ids];
+    }
     ids = this.filterIds(ids);
     if (userId != null) {
       const userProjectQuery = this.buildUserProjectQuery(userId, projectId);

packages/libs/lib-server/src/basic/constants.ts

@@ -1,21 +1,21 @@
 export const Constants = {
-  dataDir: "./data",
+  dataDir: './data',
   role: {
     defaultUser: 3,
   },
   per: {
     //无需登录
-    guest: "_guest_",
+    guest: '_guest_',
     //无需登录
-    anonymous: "_guest_",
+    anonymous: '_guest_',
     //无需登录，有 token 时解析当前用户
-    guestOptionalAuth: "_guestOptionalAuth_",
+    guestOptionalAuth: '_guestOptionalAuth_',
     //仅需要登录
-    authOnly: "_authOnly_",
+    authOnly: '_authOnly_',
     //仅需要登录
-    loginOnly: "_authOnly_",
+    loginOnly: '_authOnly_',
 
-    open: "_open_",
+    open: '_open_',
   },
   res: {
     serverError(message: string) {
@@ -26,102 +26,102 @@ export const Constants = {
     },
     error: {
       code: 1,
-      message: "Internal server error",
+      message: 'Internal server error',
     },
     success: {
       code: 0,
-      message: "success",
+      message: 'success',
     },
     validation: {
       code: 10,
-      message: "参数错误",
+      message: '参数错误',
     },
     needvip: {
       code: 88,
-      message: "需要VIP",
+      message: '需要VIP',
     },
     needsuite: {
       code: 89,
-      message: "需要购买或升级套餐",
+      message: '需要购买或升级套餐',
     },
     loginError: {
       code: 2,
-      message: "登录失败",
+      message: '登录失败',
     },
     codeError: {
       code: 3,
-      message: "验证码错误",
+      message: '验证码错误',
     },
     auth: {
       code: 401,
-      message: "您还未登录或token已过期",
+      message: '您还未登录或token已过期',
     },
     permission: {
       code: 402,
-      message: "您没有权限",
+      message: '您没有权限',
     },
     param: {
       code: 400,
-      message: "参数错误",
+      message: '参数错误',
     },
     notFound: {
       code: 404,
-      message: "页面/文件/资源不存在",
+      message: '页面/文件/资源不存在',
     },
 
     preview: {
       code: 10001,
-      message: "对不起，预览环境不允许修改此数据",
+      message: '对不起，预览环境不允许修改此数据',
     },
-    siteOff: {
+    siteOff:{
       code: 10010,
-      message: "站点已关闭",
+      message: '站点已关闭',
     },
-    need2fa: {
+    need2fa:{
       code: 10020,
-      message: "需要2FA认证",
+      message: '需要2FA认证',
     },
     openKeyError: {
       code: 20000,
-      message: "ApiToken错误",
+      message: 'ApiToken错误',
     },
     openKeySignError: {
       code: 20001,
-      message: "ApiToken签名错误",
+      message: 'ApiToken签名错误',
     },
     openKeyExpiresError: {
       code: 20002,
-      message: "ApiToken时间戳错误",
+      message: 'ApiToken时间戳错误',
     },
     openKeySignTypeError: {
       code: 20003,
-      message: "ApiToken签名类型不支持",
+      message: 'ApiToken签名类型不支持',
     },
     openParamError: {
       code: 20010,
-      message: "请求参数错误",
+      message: '请求参数错误',
     },
     openCertNotFound: {
       code: 20011,
-      message: "证书不存在",
+      message: '证书不存在',
     },
     openCertNotReady: {
       code: 20012,
-      message: "证书还未生成",
+      message: '证书还未生成',
     },
     openCertApplying: {
       code: 20013,
-      message: "证书正在申请中，请稍后重新获取",
+      message: '证书正在申请中，请稍后重新获取',
     },
-    openDomainNoVerifier: {
+    openDomainNoVerifier:{
       code: 20014,
-      message: "域名校验方式未配置",
+      message: '域名校验方式未配置',
     },
     openEmailNotFound: {
       code: 20021,
-      message: "用户邮箱还未配置",
+      message: '用户邮箱还未配置',
     },
   },
   systemUserId: 0, // 系统级别userid固定为0
-  enterpriseUserId: -1, // 企业模式用户id固定为-1
+  enterpriseUserId:  -1 // 企业模式用户id固定为-1
 };

packages/libs/lib-server/src/basic/core/decoractor.ts

@@ -1,20 +0,0 @@
-import { createRequestParamDecorator } from "@midwayjs/core";
-
-export const AuditLog = (opts: { type?: string; action?: string; content?: string; enabled?: boolean } = {}) => {
-  return createRequestParamDecorator(ctx => {
-    if (!ctx.auditLog) {
-      ctx.auditLog = {};
-    }
-    ctx.auditLog.enabled = opts.enabled !== false;
-    if (opts.type != null) {
-      ctx.auditLog.type = opts.type;
-    }
-    if (opts.action != null) {
-      ctx.auditLog.action = opts.action;
-    }
-    if (opts.content != null) {
-      ctx.auditLog.content = opts.content;
-    }
-    return ctx.auditLog;
-  });
-};

packages/libs/lib-server/src/basic/core/index.ts

@@ -1 +0,0 @@
-export * from "./decoractor.js";

packages/libs/lib-server/src/basic/crud-controller.ts

@@ -1,11 +1,11 @@
-import { ALL, Body, Post, Query } from "@midwayjs/core";
-import { BaseController } from "./base-controller.js";
+import { ALL, Body, Post, Query } from '@midwayjs/core';
+import { BaseController } from './base-controller.js';
 
 export abstract class CrudController<T> extends BaseController {
   // eslint-disable-next-line @typescript-eslint/no-unused-vars
   abstract getService<T>();
 
-  @Post("/page")
+  @Post('/page')
   async page(@Body(ALL) body: any) {
     const pageRet = await this.getService().page({
       query: body.query ?? {},
@@ -16,7 +16,7 @@ export abstract class CrudController<T> extends BaseController {
     return this.ok(pageRet);
   }
 
-  @Post("/list")
+  @Post('/list')
   async list(@Body(ALL) body: any) {
     const listRet = await this.getService().list({
       query: body.query ?? {},
@@ -25,33 +25,33 @@ export abstract class CrudController<T> extends BaseController {
     return this.ok(listRet);
   }
 
-  @Post("/add")
+  @Post('/add')
   async add(@Body(ALL) bean: any) {
     delete bean.id;
     const id = await this.getService().add(bean);
     return this.ok(id);
   }
 
-  @Post("/info")
-  async info(@Query("id") id: number) {
+  @Post('/info')
+  async info(@Query('id') id: number) {
     const bean = await this.getService().info(id);
     return this.ok(bean);
   }
 
-  @Post("/update")
+  @Post('/update')
   async update(@Body(ALL) bean: any) {
     await this.getService().update(bean);
     return this.ok(null);
   }
 
-  @Post("/delete")
-  async delete(@Query("id") id: number) {
+  @Post('/delete')
+  async delete(@Query('id') id: number) {
     await this.getService().delete([id]);
     return this.ok(null);
   }
 
-  @Post("/deleteByIds")
-  async deleteByIds(@Body("ids") ids: number[]) {
+  @Post('/deleteByIds')
+  async deleteByIds(@Body('ids') ids: number[]) {
     await this.getService().delete(ids);
     return this.ok(null);
   }

packages/libs/lib-server/src/basic/exception/login-error-exception.ts

@@ -1,14 +1,12 @@
-import { Constants } from "../constants.js";
-import { BaseException } from "./base-exception.js";
+import { Constants } from '../constants.js';
+import { BaseException } from './base-exception.js';
 /**
  * 通用异常
  */
 export class LoginErrorException extends BaseException {
   leftCount: number;
-  userId?: number;
-  constructor(message, leftCount: number, userId?: number) {
-    super("LoginErrorException", Constants.res.loginError.code, message ? message : Constants.res.loginError.message);
+  constructor(message, leftCount: number) {
+    super('LoginErrorException', Constants.res.loginError.code, message ? message : Constants.res.loginError.message);
     this.leftCount = leftCount;
-    this.userId = userId;
   }
 }

packages/libs/lib-server/src/basic/index.ts

@@ -1,10 +1,8 @@
-export * from "./base-controller.js";
-export * from "./constants.js";
-export * from "./crud-controller.js";
-export * from "./enum-item.js";
-export * from "./exception/index.js";
-export * from "./result.js";
-export * from "./base-service.js";
-export * from "./audit.js";
-export * from "./mode.js";
-export * from "./core/index.js";
+export * from './base-controller.js';
+export * from './constants.js';
+export * from './crud-controller.js';
+export * from './enum-item.js';
+export * from './exception/index.js';
+export * from './result.js';
+export * from './base-service.js';
+export * from "./mode.js"

packages/libs/lib-server/src/basic/mode.ts

@@ -1,12 +1,12 @@
-let adminMode = "saas";
+let adminMode = "saas"
 
-export function setAdminMode(mode: string = "saas") {
-  adminMode = mode;
+export function setAdminMode(mode:string = "saas"){
+  adminMode = mode
 }
-export function getAdminMode() {
-  return adminMode;
+export function getAdminMode(){
+  return adminMode
 }
 
-export function isEnterprise() {
-  return adminMode === "enterprise";
-}
+export function isEnterprise(){
+  return adminMode === "enterprise"
+}

packages/libs/midway-flyway-js/CHANGELOG.md

@@ -3,6 +3,10 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
 
+## [1.42.6](https://github.com/certd/certd/compare/v1.42.5...v1.42.6) (2026-07-18)
+
+**Note:** Version bump only for package @certd/midway-flyway-js
+
 ## [1.42.5](https://github.com/certd/certd/compare/v1.42.4...v1.42.5) (2026-07-15)
 
 ### Performance Improvements

packages/libs/midway-flyway-js/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@certd/midway-flyway-js",
-  "version": "1.42.5",
+  "version": "1.42.6",
   "description": "midway with flyway, sql upgrade way ",
   "private": false,
   "type": "module",
@@ -52,5 +52,5 @@
     "typeorm": "^0.3.20",
     "typescript": "^5.4.2"
   },
-  "gitHead": "83495b32138cf831b4ea02054d12981d9787ebf0"
+  "gitHead": "246ee83015bf5589adc2a5fa3d1388c8d9a2a252"
 }

packages/plugins/plugin-cert/CHANGELOG.md

@@ -3,6 +3,10 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
 
+## [1.42.6](https://github.com/certd/certd/compare/v1.42.5...v1.42.6) (2026-07-18)
+
+**Note:** Version bump only for package @certd/plugin-cert
+
 ## [1.42.5](https://github.com/certd/certd/compare/v1.42.4...v1.42.5) (2026-07-15)
 
 **Note:** Version bump only for package @certd/plugin-cert

packages/plugins/plugin-cert/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@certd/plugin-cert",
   "private": false,
-  "version": "1.42.5",
+  "version": "1.42.6",
   "type": "module",
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",
@@ -20,7 +20,7 @@
     "lint": "eslint --fix"
   },
   "dependencies": {
-    "@certd/plugin-lib": "^1.42.5"
+    "@certd/plugin-lib": "^1.42.6"
   },
   "devDependencies": {
     "@types/chai": "^4.3.12",
@@ -38,5 +38,5 @@
     "tslib": "^2.8.1",
     "typescript": "^5.4.2"
   },
-  "gitHead": "83495b32138cf831b4ea02054d12981d9787ebf0"
+  "gitHead": "246ee83015bf5589adc2a5fa3d1388c8d9a2a252"
 }

packages/plugins/plugin-lib/CHANGELOG.md

@@ -3,6 +3,10 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
 
+## [1.42.6](https://github.com/certd/certd/compare/v1.42.5...v1.42.6) (2026-07-18)
+
+**Note:** Version bump only for package @certd/plugin-lib
+
 ## [1.42.5](https://github.com/certd/certd/compare/v1.42.4...v1.42.5) (2026-07-15)
 
 ### Bug Fixes

packages/plugins/plugin-lib/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@certd/plugin-lib",
   "private": false,
-  "version": "1.42.5",
+  "version": "1.42.6",
   "type": "module",
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",
@@ -17,9 +17,9 @@
     "lint": "eslint --fix"
   },
   "dependencies": {
-    "@certd/acme-client": "^1.42.5",
-    "@certd/basic": "^1.42.5",
-    "@certd/pipeline": "^1.42.5",
+    "@certd/acme-client": "^1.42.6",
+    "@certd/basic": "^1.42.6",
+    "@certd/pipeline": "^1.42.6",
     "dayjs": "^1.11.7",
     "jszip": "^3.10.1",
     "lodash-es": "^4.17.21",
@@ -45,5 +45,5 @@
     "tslib": "^2.8.1",
     "typescript": "^5.4.2"
   },
-  "gitHead": "83495b32138cf831b4ea02054d12981d9787ebf0"
+  "gitHead": "246ee83015bf5589adc2a5fa3d1388c8d9a2a252"
 }

packages/ui/Dockerfile

@@ -1,4 +1,4 @@
-ARG base_type=alpine
+ARG base_type=alpine
 
 # 根据 base_type 参数选择基础镜像系列
 FROM --platform=linux/amd64 node:22-alpine AS base-amd64-alpine
@@ -99,7 +99,6 @@ RUN ARCH=$(uname -m) && \
 
 ENV TZ=Asia/Shanghai
 ENV NODE_ENV=production
-ENV certd_release_mode=latest
 ENV MIDWAY_SERVER_ENV=production
 
 RUN npm install -g pnpm@10.33.4

packages/ui/certd-client/CHANGELOG.md

@@ -3,6 +3,10 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
 
+## [1.42.6](https://github.com/certd/certd/compare/v1.42.5...v1.42.6) (2026-07-18)
+
+**Note:** Version bump only for package @certd/ui-client
+
 ## [1.42.5](https://github.com/certd/certd/compare/v1.42.4...v1.42.5) (2026-07-15)
 
 ### Bug Fixes

packages/ui/certd-client/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@certd/ui-client",
-  "version": "1.42.5",
+  "version": "1.42.6",
   "private": true,
   "scripts": {
     "dev": "vite --open",
@@ -104,8 +104,8 @@
     "zod-defaults": "^0.1.3"
   },
   "devDependencies": {
-    "@certd/lib-iframe": "^1.42.5",
-    "@certd/pipeline": "^1.42.5",
+    "@certd/lib-iframe": "^1.42.6",
+    "@certd/pipeline": "^1.42.6",
     "@rollup/plugin-commonjs": "^25.0.7",
     "@rollup/plugin-node-resolve": "^15.2.3",
     "@types/chai": "^4.3.12",

packages/ui/certd-client/src/components/vip-button/vip-modal-content.vue

@@ -139,7 +139,7 @@ async function doActive() {
       title: t("vip.successTitle"),
       content: t("vip.successContent", {
         vipLabel,
-        expireDate: settingStore.plusInfo.expireTime === -1 ? t("vip.permanent") : dayjs(settingStore.plusInfo.expireTime).format("YYYY-MM-DD"),
+        expireDate: dayjs(settingStore.plusInfo.expireTime).format("YYYY-MM-DD"),
       }),
       onOk() {
         if (!(settingStore.installInfo.bindUserId > 0)) {

packages/ui/certd-client/src/locales/langs/en-US/certd/dashboard.ts

@@ -25,7 +25,5 @@ export default {
     expiringCerts: "Soon-to-Expire Certificates",
     supportedTasks: "Overview of Supported Deployment Tasks",
     changeLog: "Change Log",
-    stableRelease: "Stable",
-    latestRelease: "Preview",
   },
 };

packages/ui/certd-client/src/locales/langs/en-US/certd/navigation.ts

@@ -18,7 +18,6 @@ export default {
   openKey: "Open API Key",
   notification: "Notification Settings",
   siteMonitorSetting: "Site Monitor Settings",
-  auditLog: "Audit Log",
   userSecurity: "Security Settings",
   userProfile: "Account Info",
   userGrant: "Grant Delegation",
@@ -68,7 +67,6 @@ export default {
     projectJoin: "Join Project",
     currentProject: "Current Project",
     projectMemberManager: "Project Member",
-    auditLog: "Audit Log",
     domainMonitorSetting: "Domain Monitor Settings",
   },
 };

packages/ui/certd-client/src/locales/langs/en-US/vip.ts

@@ -104,5 +104,4 @@ export default {
   not_effective: "Not effective or duration not sync?",
   learn_more: "More privileges",
   question: "More VIP related questions",
-  permanent: "Permanent",
 };

packages/ui/certd-client/src/locales/langs/zh-CN/certd/dashboard.ts

@@ -26,7 +26,5 @@ export default {
     expiringCerts: "最快到期证书",
     supportedTasks: "已支持的部署任务总览",
     changeLog: "更新日志",
-    stableRelease: "稳定版",
-    latestRelease: "预览版",
   },
 };

packages/ui/certd-client/src/locales/langs/zh-CN/certd/navigation.ts

@@ -18,7 +18,6 @@ export default {
   openKey: "开放接口密钥",
   notification: "通知设置",
   siteMonitorSetting: "站点监控设置",
-  auditLog: "操作日志",
   userSecurity: "认证安全设置",
   userProfile: "账号信息",
   userGrant: "授权委托",
@@ -68,7 +67,6 @@ export default {
     projectJoin: "加入项目",
     currentProject: "当前项目",
     projectMemberManager: "项目成员管理",
-    auditLog: "审计日志",
     domainMonitorSetting: "域名监控设置",
     jobHistory: "监控执行记录",
   },

packages/ui/certd-client/src/locales/langs/zh-CN/vip.ts

@@ -103,5 +103,4 @@ export default {
   not_effective: "VIP没有生效/时长未同步?",
   learn_more: "更多特权(加VIP群等)",
   question: "更多VIP相关问题",
-  permanent: "永久",
 };

packages/ui/certd-client/src/router/source/modules/certd.ts

@@ -287,22 +287,6 @@ export const certdResources = [
               isMenu: true,
             },
           },
-          {
-            title: "certd.auditLog",
-            name: "AuditLog",
-            path: "/certd/audit",
-            component: "/certd/audit/index.vue",
-            meta: {
-              icon: "ion:document-text-outline",
-              auth: true,
-              keepAlive: true,
-              isMenu: true,
-              show: () => {
-                const settingStore = useSettingStore();
-                return settingStore.isPlus;
-              },
-            },
-          },
           {
             title: "certd.userSecurity",
             name: "UserSecurity",

packages/ui/certd-client/src/router/source/modules/sys.ts

@@ -410,22 +410,6 @@ export const sysResources = [
           },
         ],
       },
-      {
-        title: "certd.sysResources.auditLog",
-        name: "SysAuditLog",
-        path: "/sys/enterprise/audit",
-        component: "/sys/enterprise/audit/index.vue",
-        meta: {
-          icon: "ion:document-text-outline",
-          keepAlive: true,
-          auth: true,
-          isMenu: true,
-          show: () => {
-            const settingStore = useSettingStore();
-            return settingStore.isPlus;
-          },
-        },
-      },
       {
         title: "certd.sysResources.netTest",
         name: "NetTest",

packages/ui/certd-client/src/store/settings/api.basic.ts

@@ -11,7 +11,6 @@ export type AppInfo = {
   version?: string;
   time?: number;
   deltaTime?: number;
-  releaseMode?: string;
 };
 export type SiteInfo = {
   title?: string;

packages/ui/certd-client/src/store/settings/index.tsx

@@ -35,7 +35,6 @@ export interface SettingState {
     version?: string;
     time?: number;
     deltaTime?: number;
-    releaseMode?: string;
   };
   productInfo: {
     notice?: string;
@@ -110,7 +109,6 @@ export const useSettingStore = defineStore({
       version: "",
       time: 0,
       deltaTime: 0,
-      releaseMode: "latest",
     },
     productInfo: {
       notice: "",
@@ -231,9 +229,6 @@ export const useSettingStore = defineStore({
       this.app.time = appInfo.time;
       this.app.version = appInfo.version;
       this.app.deltaTime = new Date().getTime() - this.app.time;
-      if (appInfo.releaseMode) {
-        this.app.releaseMode = appInfo.releaseMode;
-      }
     },
     initSiteInfo(siteInfo: SiteInfo) {
       //@ts-ignore

packages/ui/certd-client/src/views/certd/audit/api.ts

@@ -1,28 +0,0 @@
-import { request } from "/src/api/service";
-
-const apiPrefix = "/pi/audit";
-
-export function createAuditApi() {
-  return {
-    async GetList(query: any) {
-      return await request({
-        url: apiPrefix + "/page",
-        method: "post",
-        data: query,
-      });
-    },
-    async DelObj(id: number) {
-      return await request({
-        url: apiPrefix + "/delete",
-        method: "post",
-        params: { id },
-      });
-    },
-    async GetDict() {
-      return await request({
-        url: apiPrefix + "/dict",
-        method: "post",
-      });
-    },
-  };
-}

packages/ui/certd-client/src/views/certd/audit/crud.tsx

@@ -1,132 +0,0 @@
-import { ColumnProps, DataFormatterContext, CreateCrudOptionsProps, CreateCrudOptionsRet, DelReq, UserPageQuery, UserPageRes, dict } from "@fast-crud/fast-crud";
-import { useI18n } from "/src/locales";
-import { useDicts } from "../dicts";
-
-const typeDict = dict({
-  url: "/pi/audit/dict",
-  getData: async () => {
-    const { createAuditApi } = await import("./api");
-    const api = createAuditApi();
-    const res = await api.GetDict();
-    return res.types || [];
-  },
-});
-
-export default function ({ crudExpose, context }: CreateCrudOptionsProps): CreateCrudOptionsRet {
-  const { t } = useI18n();
-  const { myProjectDict } = useDicts();
-  const api = context.api;
-
-  const pageRequest = async (query: UserPageQuery): Promise<UserPageRes> => {
-    return await api.GetList(query);
-  };
-  const delRequest = async (req: DelReq) => {
-    return await api.DelObj(req.row.id);
-  };
-
-  return {
-    crudOptions: {
-      request: { pageRequest, delRequest },
-      toolbar: {
-        buttons: {
-          export: { show: true },
-        },
-        export: {
-          dataFrom: "search",
-          columnFilter: (col: ColumnProps) => col.show === true,
-          dataFormatter: (opts: DataFormatterContext) => {
-            const { row, originalRow, col } = opts;
-            const key = col.key;
-            if (key === "createTime" && originalRow[key]) {
-              row[key] = new Date(originalRow[key]).toLocaleString();
-            }
-          },
-        },
-      },
-      actionbar: {
-        buttons: {
-          add: { show: false },
-        },
-      },
-      rowHandle: {
-        width: 120,
-        fixed: "right",
-        buttons: {
-          view: { show: false },
-          edit: { show: false },
-          remove: { show: true },
-          copy: { show: false },
-        },
-      },
-      columns: {
-        id: {
-          title: "ID",
-          type: "number",
-          column: { width: 80 },
-          form: { show: false },
-        },
-        createTime: {
-          title: "操作时间",
-          type: "datetime",
-          search: {
-            show: true,
-            component: {
-              name: "a-range-picker",
-            },
-          },
-          column: { width: 170, sorter: true },
-          form: { show: false },
-        },
-        type: {
-          title: "操作类型",
-          type: "dict-select",
-          dict: typeDict,
-          search: { show: true },
-          column: { width: 120 },
-          form: { show: false },
-        },
-        action: {
-          title: "操作动作",
-          type: "text",
-          search: { show: true },
-          column: { width: 200, tooltip: true },
-          form: { show: false },
-        },
-        success: {
-          title: "结果",
-          type: "dict-switch",
-          dict: dict({
-            data: [
-              { value: true, label: "成功", color: "success" },
-              { value: false, label: "失败", color: "error" },
-            ],
-          }),
-          column: { width: 100, align: "center" },
-          form: { show: false },
-          search: { show: true },
-        },
-        content: {
-          title: "备注",
-          type: "text",
-          search: { show: true },
-          column: { width: 700, tooltip: true },
-          form: { show: false },
-        },
-        ipAddress: {
-          title: "IP地址",
-          type: "text",
-          column: { width: 140 },
-          form: { show: false },
-        },
-        projectId: {
-          title: t("certd.fields.projectName"),
-          type: "dict-select",
-          dict: myProjectDict,
-          form: {
-            show: false,
-          },
-        },
-      },
-    },
-  };
-}

packages/ui/certd-client/src/views/certd/audit/index.vue

@@ -1,24 +0,0 @@
-<template>
-  <fs-page>
-    <template #header>
-      <div class="title">
-        操作日志
-        <span class="sub">查看您的操作记录</span>
-      </div>
-    </template>
-    <fs-crud ref="crudRef" v-bind="crudBinding" />
-  </fs-page>
-</template>
-
-<script lang="ts" setup>
-import { useFs } from "@fast-crud/fast-crud";
-import createCrudOptions from "./crud";
-import { createAuditApi } from "./api";
-import { useMounted } from "/@/use/use-mounted";
-
-defineOptions({ name: "AuditLog" });
-
-const api = createAuditApi();
-const { crudBinding, crudRef, crudExpose } = useFs({ createCrudOptions, context: { api } });
-useMounted(() => crudExpose.doRefresh());
-</script>

packages/ui/certd-client/src/views/framework/home/dashboard/index.vue

@@ -1,4 +1,4 @@
-<template>
+<template>
   <div class="dashboard-user">
     <div class="header-profile flex-wrap bg-white dark:bg-black">
       <div class="flex flex-1">
@@ -23,9 +23,9 @@
               <template v-if="userStore.isAdmin">
                 <a-divider type="vertical" />
                 <a-badge :dot="hasNewVersion">
-                  <a-tag color="blue" class="flex-inline pointer mr-0" :title="'v' + version + ' ' + (settingsStore.app.releaseMode === 'stable' ? '稳定版' : '')" @click="openUpgradeUrl()">
+                  <a-tag color="blue" class="flex-inline pointer mr-0" :title="t('certd.dashboard.latestVersion', { version: latestVersion })" @click="openUpgradeUrl()">
                     <fs-icon icon="ion:rocket-outline" class="mr-5"></fs-icon>
-                    v{{ version }} {{ settingsStore.app.releaseMode === "stable" ? "stable" : "" }}
+                    v{{ version }}
                   </a-tag>
                 </a-badge>
                 <a-divider type="vertical" />
@@ -179,6 +179,7 @@ defineOptions({
 
 const version = ref(import.meta.env.VITE_APP_VERSION);
 const latestVersion = ref("");
+
 function isNewVersion(version: string, latestVersion: string) {
   if (!latestVersion) {
     return false;

packages/ui/certd-client/src/views/sys/audit/api.ts

@@ -1,35 +0,0 @@
-import { request } from "/src/api/service";
-
-const apiPrefix = "/sys/audit";
-
-export function createSysAuditApi() {
-  return {
-    async GetList(query: any) {
-      return await request({
-        url: apiPrefix + "/page",
-        method: "post",
-        data: query,
-      });
-    },
-    async DelObj(id: number) {
-      return await request({
-        url: apiPrefix + "/delete",
-        method: "post",
-        params: { id },
-      });
-    },
-    async Clean(retentionDays: number) {
-      return await request({
-        url: apiPrefix + "/clean",
-        method: "post",
-        data: { retentionDays },
-      });
-    },
-    async GetDict() {
-      return await request({
-        url: apiPrefix + "/dict",
-        method: "post",
-      });
-    },
-  };
-}

packages/ui/certd-client/src/views/sys/audit/crud.tsx

@@ -1,180 +0,0 @@
-import { CreateCrudOptionsProps, CreateCrudOptionsRet, DelReq, UserPageQuery, UserPageRes, dict } from "@fast-crud/fast-crud";
-import { Modal } from "ant-design-vue";
-import { useI18n } from "/src/locales";
-import { useDicts } from "/@/views/certd/dicts";
-
-const typeDict = dict({
-  url: "/sys/audit/dict",
-  getData: async () => {
-    const { createSysAuditApi } = await import("./api");
-    const api = createSysAuditApi();
-    const res = await api.GetDict();
-    return res.types || [];
-  },
-});
-
-const actionDict = dict({
-  url: "/sys/audit/dict",
-  getData: async () => {
-    const { createSysAuditApi } = await import("./api");
-    const api = createSysAuditApi();
-    const res = await api.GetDict();
-    return res.actions || [];
-  },
-});
-
-export default function ({ crudExpose, context }: CreateCrudOptionsProps): CreateCrudOptionsRet {
-  const { t } = useI18n();
-  const { myProjectDict } = useDicts();
-  const api = context.api;
-
-  const pageRequest = async (query: UserPageQuery): Promise<UserPageRes> => {
-    return await api.GetList(query);
-  };
-  const delRequest = async (req: DelReq) => {
-    return await api.DelObj(req.row.id);
-  };
-
-  const cleanExpired = async () => {
-    Modal.confirm({
-      title: "确认清理",
-      content: "确定要清理90天前的审计日志吗？此操作不可撤销。",
-      okText: "确认清理",
-      okType: "danger",
-      cancelText: "取消",
-      async onOk() {
-        await api.Clean(90);
-        crudExpose.doRefresh();
-      },
-    });
-  };
-
-  return {
-    crudOptions: {
-      request: { pageRequest, delRequest },
-      tabs: {
-        name: "scope",
-        show: true,
-        dict: {
-          data: [
-            { value: "system", label: "系统级", color: "red" },
-            { value: "user", label: "用户级", color: "blue" },
-          ],
-        },
-      },
-      actionbar: {
-        buttons: {
-          add: { show: false },
-          clean: {
-            text: "清理过期日志(90天)",
-            type: "primary",
-            danger: true,
-            click: cleanExpired,
-          },
-        },
-      },
-      rowHandle: {
-        width: 120,
-        fixed: "right",
-        buttons: {
-          view: { show: false },
-          edit: { show: false },
-          remove: { show: true },
-          copy: { show: false },
-        },
-      },
-      search: {
-        initialForm: { scope: "system" },
-      },
-      columns: {
-        id: {
-          title: "ID",
-          type: "number",
-          column: { width: 80 },
-          form: { show: false },
-        },
-        createTime: {
-          title: "操作时间",
-          type: "datetime",
-          search: {
-            show: true,
-            component: {
-              name: "a-range-picker",
-            },
-          },
-          column: { width: 170, sorter: true },
-          form: { show: false },
-        },
-        username: {
-          title: "操作人",
-          type: "text",
-          search: { show: true },
-          column: { width: 120 },
-          form: { show: false },
-        },
-        type: {
-          title: "类型",
-          type: "dict-select",
-          dict: typeDict,
-          search: { show: true },
-          column: { width: 120 },
-          form: { show: false },
-        },
-        action: {
-          title: "操作",
-          type: "text",
-          search: { show: true },
-          column: { width: 200, tooltip: true },
-          form: { show: false },
-        },
-        success: {
-          title: "结果",
-          type: "dict-switch",
-          dict: dict({
-            data: [
-              { value: true, label: "成功", color: "success" },
-              { value: false, label: "失败", color: "error" },
-            ],
-          }),
-          column: { width: 100, align: "center" },
-          form: { show: false },
-          search: { show: true },
-        },
-        content: {
-          title: "备注",
-          type: "text",
-          search: { show: true },
-          column: { width: 500, tooltip: true },
-          form: { show: false },
-        },
-        ipAddress: {
-          title: "IP地址",
-          type: "text",
-          column: { width: 140 },
-          form: { show: false },
-        },
-        projectId: {
-          title: t("certd.fields.projectName"),
-          type: "dict-select",
-          dict: myProjectDict,
-          form: {
-            show: false,
-          },
-        },
-        scope: {
-          title: "范围",
-          type: "dict-select",
-          dict: dict({
-            data: [
-              { value: "system", label: "系统级", color: "blue" },
-              { value: "user", label: "用户级", color: "green" },
-            ],
-          }),
-          search: { show: true },
-          column: { width: 100 },
-          form: { show: false },
-        },
-      },
-    },
-  };
-}

packages/ui/certd-client/src/views/sys/audit/index.vue

@@ -1,24 +0,0 @@
-<template>
-  <fs-page>
-    <template #header>
-      <div class="title">
-        操作日志
-        <span class="sub">查看所有用户的操作记录</span>
-      </div>
-    </template>
-    <fs-crud ref="crudRef" v-bind="crudBinding" />
-  </fs-page>
-</template>
-
-<script lang="ts" setup>
-import { useFs } from "@fast-crud/fast-crud";
-import createCrudOptions from "./crud";
-import { createSysAuditApi } from "./api";
-import { useMounted } from "/@/use/use-mounted";
-
-defineOptions({ name: "SysAuditLog" });
-
-const api = createSysAuditApi();
-const { crudBinding, crudRef, crudExpose } = useFs({ createCrudOptions, context: { api } });
-useMounted(() => crudExpose.doRefresh());
-</script>

packages/ui/certd-client/src/views/sys/enterprise/audit/api.ts

@@ -1,35 +1,75 @@
 import { request } from "/src/api/service";
 
-const apiPrefix = "/sys/audit";
+const apiPrefix = "/sys/project/provider";
 
-export function createSysAuditApi() {
-  return {
-    async GetList(query: any) {
-      return await request({
-        url: apiPrefix + "/page",
-        method: "post",
-        data: query,
-      });
-    },
-    async DelObj(id: number) {
-      return await request({
-        url: apiPrefix + "/delete",
-        method: "post",
-        params: { id },
-      });
-    },
-    async Clean(retentionDays: number) {
-      return await request({
-        url: apiPrefix + "/clean",
-        method: "post",
-        data: { retentionDays },
-      });
-    },
-    async GetDict() {
-      return await request({
-        url: apiPrefix + "/dict",
-        method: "post",
-      });
-    },
-  };
+export async function GetList(query: any) {
+  return await request({
+    url: apiPrefix + "/page",
+    method: "post",
+    data: query,
+  });
+}
+
+export async function AddObj(obj: any) {
+  return await request({
+    url: apiPrefix + "/add",
+    method: "post",
+    data: obj,
+  });
+}
+
+export async function UpdateObj(obj: any) {
+  return await request({
+    url: apiPrefix + "/update",
+    method: "post",
+    data: obj,
+  });
+}
+
+export async function DelObj(id: any) {
+  return await request({
+    url: apiPrefix + "/delete",
+    method: "post",
+    params: { id },
+  });
+}
+
+export async function GetObj(id: any) {
+  return await request({
+    url: apiPrefix + "/info",
+    method: "post",
+    params: { id },
+  });
+}
+
+export async function GetDetail(id: any) {
+  return await request({
+    url: apiPrefix + "/detail",
+    method: "post",
+    params: { id },
+  });
+}
+
+export async function DeleteBatch(ids: any[]) {
+  return await request({
+    url: apiPrefix + "/deleteByIds",
+    method: "post",
+    data: { ids },
+  });
+}
+
+export async function SetDefault(id: any) {
+  return await request({
+    url: apiPrefix + "/setDefault",
+    method: "post",
+    data: { id },
+  });
+}
+
+export async function SetDisabled(id: any, disabled: boolean) {
+  return await request({
+    url: apiPrefix + "/setDisabled",
+    method: "post",
+    data: { id, disabled },
+  });
 }

packages/ui/certd-client/src/views/sys/enterprise/audit/crud.tsx

@@ -1,194 +1,252 @@
-import { ColumnProps, DataFormatterContext, CreateCrudOptionsProps, CreateCrudOptionsRet, DelReq, UserPageQuery, UserPageRes, dict } from "@fast-crud/fast-crud";
-import { Modal } from "ant-design-vue";
+import * as api from "./api";
 import { useI18n } from "/src/locales";
-import { useDicts } from "/@/views/certd/dicts";
-
-const typeDict = dict({
-  url: "/sys/audit/dict",
-  getData: async () => {
-    const { createSysAuditApi } = await import("./api");
-    const api = createSysAuditApi();
-    const res = await api.GetDict();
-    return res.types || [];
-  },
-});
-
-const actionDict = dict({
-  url: "/sys/audit/dict",
-  getData: async () => {
-    const { createSysAuditApi } = await import("./api");
-    const api = createSysAuditApi();
-    const res = await api.GetDict();
-    return res.actions || [];
-  },
-});
+import { computed, Ref, ref } from "vue";
+import { useRouter } from "vue-router";
+import { AddReq, compute, CreateCrudOptionsProps, CreateCrudOptionsRet, DelReq, dict, EditReq, UserPageQuery, UserPageRes, utils } from "@fast-crud/fast-crud";
+import { useUserStore } from "/@/store/user";
+import { useSettingStore } from "/@/store/settings";
+import { Modal } from "ant-design-vue";
 
 export default function ({ crudExpose, context }: CreateCrudOptionsProps): CreateCrudOptionsRet {
+  const router = useRouter();
   const { t } = useI18n();
-  const { myProjectDict } = useDicts();
-  const api = context.api;
-
   const pageRequest = async (query: UserPageQuery): Promise<UserPageRes> => {
     return await api.GetList(query);
   };
-  const delRequest = async (req: DelReq) => {
-    return await api.DelObj(req.row.id);
+  const editRequest = async ({ form, row }: EditReq) => {
+    form.id = row.id;
+    const res = await api.UpdateObj(form);
+    return res;
+  };
+  const delRequest = async ({ row }: DelReq) => {
+    return await api.DelObj(row.id);
   };
 
-  const cleanExpired = async () => {
-    Modal.confirm({
-      title: "确认清理",
-      content: "确定要清理90天前的审计日志吗？此操作不可撤销。",
-      okText: "确认清理",
-      okType: "danger",
-      cancelText: "取消",
-      async onOk() {
-        await api.Clean(90);
-        crudExpose.doRefresh();
-      },
-    });
+  const addRequest = async ({ form }: AddReq) => {
+    const res = await api.AddObj(form);
+    return res;
   };
 
+  const userStore = useUserStore();
+  const settingStore = useSettingStore();
+  const selectedRowKeys: Ref<any[]> = ref([]);
+  context.selectedRowKeys = selectedRowKeys;
+
   return {
     crudOptions: {
-      request: { pageRequest, delRequest },
-      tabs: {
-        name: "scope",
-        show: true,
-        dict: {
-          data: [
-            { value: "system", label: "系统级", color: "red" },
-            { value: "user", label: "用户级", color: "blue" },
-          ],
-        },
-      },
-      toolbar: {
-        buttons: {
-          export: { show: true },
-        },
-        export: {
-          dataFrom: "search",
-          columnFilter: (col: ColumnProps) => col.show === true,
-          dataFormatter: (opts: DataFormatterContext) => {
-            const { row, originalRow, col } = opts;
-            const key = col.key;
-            if (key === "createTime" && originalRow[key]) {
-              row[key] = new Date(originalRow[key]).toLocaleString();
-            }
+      settings: {
+        plugins: {
+          //这里使用行选择插件，生成行选择crudOptions配置，最终会与crudOptions合并
+          rowSelection: {
+            enabled: true,
+            order: -2,
+            before: true,
+            // handle: (pluginProps,useCrudProps)=>CrudOptions,
+            props: {
+              multiple: true,
+              crossPage: true,
+              selectedRowKeys,
+            },
           },
         },
       },
-      actionbar: {
-        buttons: {
-          add: { show: false },
-          clean: {
-            text: "清理过期日志(90天)",
-            type: "primary",
-            danger: true,
-            click: cleanExpired,
-          },
-        },
+      request: {
+        pageRequest,
+        addRequest,
+        editRequest,
+        delRequest,
       },
       rowHandle: {
-        width: 120,
+        minWidth: 200,
         fixed: "right",
-        buttons: {
-          view: { show: false },
-          edit: { show: false },
-          remove: { show: true },
-          copy: { show: false },
-        },
-      },
-      search: {
-        initialForm: { scope: "system" },
       },
       columns: {
         id: {
           title: "ID",
+          key: "id",
           type: "number",
-          column: { width: 80 },
-          form: { show: false },
-        },
-        createTime: {
-          title: "操作时间",
-          type: "datetime",
-          search: {
-            show: true,
-            component: {
-              name: "a-range-picker",
-            },
+          column: {
+            width: 100,
           },
-          column: { width: 170, sorter: true },
-          form: { show: false },
-        },
-        username: {
-          title: "操作人",
-          type: "text",
-          search: { show: true },
-          column: { width: 120 },
-          form: { show: false },
-        },
-        type: {
-          title: "类型",
-          type: "dict-select",
-          dict: typeDict,
-          search: { show: true },
-          column: { width: 120 },
-          form: { show: false },
-        },
-        action: {
-          title: "操作",
-          type: "text",
-          search: { show: true },
-          column: { width: 200, tooltip: true },
-          form: { show: false },
-        },
-        success: {
-          title: "结果",
-          type: "dict-switch",
-          dict: dict({
-            data: [
-              { value: true, label: "成功", color: "success" },
-              { value: false, label: "失败", color: "error" },
-            ],
-          }),
-          column: { width: 100, align: "center" },
-          form: { show: false },
-          search: { show: true },
-        },
-        content: {
-          title: "备注",
-          type: "text",
-          search: { show: true },
-          column: { width: 500, tooltip: true },
-          form: { show: false },
-        },
-        ipAddress: {
-          title: "IP地址",
-          type: "text",
-          column: { width: 140 },
-          form: { show: false },
-        },
-        projectId: {
-          title: t("certd.fields.projectName"),
-          type: "dict-select",
-          dict: myProjectDict,
           form: {
             show: false,
           },
         },
-        scope: {
-          title: "范围",
+        domain: {
+          title: t("certd.cnameDomain"),
+          type: "text",
+          editForm: {
+            component: {
+              disabled: true,
+            },
+          },
+          search: {
+            show: true,
+          },
+          form: {
+            component: {
+              placeholder: t("certd.cnameDomainPlaceholder"),
+            },
+            helper: t("certd.cnameDomainHelper"),
+            rules: [
+              { required: true, message: t("certd.requiredField") },
+              { pattern: /^[^*]+$/, message: t("certd.cnameDomainPattern") },
+            ],
+          },
+          column: {
+            width: 200,
+          },
+        },
+        dnsProviderType: {
+          title: t("certd.dnsProvider"),
+          type: "dict-select",
+          search: {
+            show: true,
+          },
+          dict: dict({
+            url: "pi/dnsProvider/list",
+            value: "key",
+            label: "title",
+          }),
+          form: {
+            rules: [{ required: true, message: t("certd.requiredField") }],
+          },
+          column: {
+            width: 150,
+            component: {
+              color: "auto",
+            },
+          },
+        },
+        accessId: {
+          title: t("certd.dnsProviderAuthorization"),
           type: "dict-select",
+          dict: dict({
+            url: "/pi/access/list",
+            value: "id",
+            label: "name",
+          }),
+          form: {
+            component: {
+              name: "access-selector",
+              vModel: "modelValue",
+              type: compute(({ form }) => {
+                return form.dnsProviderType;
+              }),
+            },
+            rules: [{ required: true, message: t("certd.requiredField") }],
+          },
+          column: {
+            width: 150,
+            component: {
+              color: "auto",
+            },
+          },
+        },
+        isDefault: {
+          title: t("certd.isDefault"),
+          type: "dict-switch",
           dict: dict({
             data: [
-              { value: "system", label: "系统级", color: "blue" },
-              { value: "user", label: "用户级", color: "green" },
+              { label: t("certd.yes"), value: true, color: "success" },
+              { label: t("certd.no"), value: false, color: "default" },
             ],
           }),
-          search: { show: true },
-          column: { width: 100 },
-          form: { show: false },
+          form: {
+            value: false,
+            rules: [{ required: true, message: t("certd.selectIsDefault") }],
+          },
+          column: {
+            align: "center",
+            width: 100,
+          },
+        },
+        setDefault: {
+          title: t("certd.setDefault"),
+          type: "text",
+          form: {
+            show: false,
+          },
+          column: {
+            width: 100,
+            align: "center",
+            conditionalRenderDisabled: true,
+            cellRender: ({ row }) => {
+              if (row.isDefault) {
+                return;
+              }
+              const onClick = async () => {
+                Modal.confirm({
+                  title: t("certd.prompt"),
+                  content: t("certd.confirmSetDefault"),
+                  onOk: async () => {
+                    await api.SetDefault(row.id);
+                    await crudExpose.doRefresh();
+                  },
+                });
+              };
+
+              return (
+                <a-button type={"link"} size={"small"} onClick={onClick}>
+                  {t("certd.setAsDefault")}
+                </a-button>
+              );
+            },
+          },
+        },
+        disabled: {
+          title: t("certd.disabled"),
+          type: "dict-switch",
+          dict: dict({
+            data: [
+              { label: t("certd.enabled"), value: false, color: "success" },
+              { label: t("certd.disabledLabel"), value: true, color: "error" },
+            ],
+          }),
+          form: {
+            value: false,
+          },
+          column: {
+            width: 100,
+            component: {
+              title: t("certd.clickToToggle"),
+              on: {
+                async click({ value, row }) {
+                  Modal.confirm({
+                    title: t("certd.prompt"),
+                    content: t("certd.confirmToggleStatus", { action: !value ? t("certd.disable") : t("certd.enable") }),
+                    onOk: async () => {
+                      await api.SetDisabled(row.id, !value);
+                      await crudExpose.doRefresh();
+                    },
+                  });
+                },
+              },
+            },
+          },
+        },
+        createTime: {
+          title: t("certd.createTime"),
+          type: "datetime",
+          form: {
+            show: false,
+          },
+          column: {
+            sorter: true,
+            width: 160,
+            align: "center",
+          },
+        },
+        updateTime: {
+          title: t("certd.updateTime"),
+          type: "datetime",
+          form: {
+            show: false,
+          },
+          column: {
+            show: true,
+            width: 160,
+          },
         },
       },
     },

packages/ui/certd-client/src/views/sys/enterprise/audit/index.vue

@@ -1,24 +1,63 @@
 <template>
-  <fs-page>
+  <fs-page class="page-cert">
     <template #header>
       <div class="title">
-        操作日志
-        <span class="sub">查看所有用户的操作记录</span>
+        {{ t("certd.cnameTitle") }}
+        <span class="sub">
+          {{ t("certd.cnameDescription") }}
+          <a href="https://certd.docmirror.cn/guide/feature/cname/" target="_blank">
+            {{ t("certd.cnameLinkText") }}
+          </a>
+        </span>
       </div>
     </template>
-    <fs-crud ref="crudRef" v-bind="crudBinding" />
+    <fs-crud ref="crudRef" v-bind="crudBinding">
+      <template #pagination-left>
+        <a-tooltip :title="t('certd.batchDelete')">
+          <fs-button icon="DeleteOutlined" @click="handleBatchDelete"></fs-button>
+        </a-tooltip>
+      </template>
+    </fs-crud>
   </fs-page>
 </template>
 
 <script lang="ts" setup>
+import { useMounted } from "/@/use/use-mounted";
 import { useFs } from "@fast-crud/fast-crud";
 import createCrudOptions from "./crud";
-import { createSysAuditApi } from "./api";
-import { useMounted } from "/@/use/use-mounted";
+import { message, Modal } from "ant-design-vue";
+import { DeleteBatch } from "./api";
+import { useI18n } from "/src/locales";
+import { useCrudPermission } from "/@/plugin/permission";
 
-defineOptions({ name: "SysAuditLog" });
+const { t } = useI18n();
 
-const api = createSysAuditApi();
-const { crudBinding, crudRef, crudExpose } = useFs({ createCrudOptions, context: { api } });
-useMounted(() => crudExpose.doRefresh());
+defineOptions({
+  name: "CnameProvider",
+});
+const { crudBinding, crudRef, crudExpose, context } = useFs({ createCrudOptions });
+
+const selectedRowKeys = context.selectedRowKeys;
+const handleBatchDelete = () => {
+  if (selectedRowKeys.value?.length > 0) {
+    Modal.confirm({
+      title: t("certd.confirmTitle"),
+      content: t("certd.confirmDeleteBatch", { count: selectedRowKeys.value.length }),
+      async onOk() {
+        await DeleteBatch(selectedRowKeys.value);
+        message.info(t("certd.deleteSuccess"));
+        crudExpose.doRefresh();
+        selectedRowKeys.value = [];
+      },
+    });
+  } else {
+    message.error(t("certd.selectRecordsFirst"));
+  }
+};
+
+// 页面打开后获取列表数据
+useMounted(async () => {
+  await crudExpose.doRefresh();
+});
 </script>
+<style lang="less"></style>

packages/ui/certd-server/.env

@@ -1,4 +1,3 @@
 LEGO_VERSION=4.30.1
 JKS_GO_VERSION=1.0.3
-certd_plugin_loadmode=dev
-# certd_release_mode=stable
+certd_plugin_loadmode=dev

packages/ui/certd-server/CHANGELOG.md

@@ -3,6 +3,12 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
 
+## [1.42.6](https://github.com/certd/certd/compare/v1.42.5...v1.42.6) (2026-07-18)
+
+### Bug Fixes
+
+* 修复正常批量删除流水线报权限不足的bug ([5b50083](https://github.com/certd/certd/commit/5b500830a122c6c42dab054e57fed509050f94da))
+
 ## [1.42.5](https://github.com/certd/certd/compare/v1.42.4...v1.42.5) (2026-07-15)
 
 ### Bug Fixes

packages/ui/certd-server/db/migration-mysql/v10051__audit_log_scope.sql

@@ -1,8 +0,0 @@
-ALTER TABLE `cd_audit_log` ADD COLUMN `scope` varchar(32) NOT NULL DEFAULT 'user';
-CREATE INDEX `index_audit_log_scope` ON `cd_audit_log` (`scope`);
-
-ALTER TABLE `cd_audit_log` ADD COLUMN `success` tinyint(1) NOT NULL DEFAULT 1;
-
--- 审计日志表索引
-CREATE INDEX `index_audit_log_type` ON `cd_audit_log` (`type`);
-CREATE INDEX `index_audit_log_create_time` ON `cd_audit_log` (`create_time`);

packages/ui/certd-server/db/migration-pg/v10051__audit_log_scope.sql

@@ -1,8 +0,0 @@
-ALTER TABLE "cd_audit_log" ADD COLUMN "scope" varchar(32) NOT NULL DEFAULT ('user');
-CREATE INDEX "index_audit_log_scope" ON "cd_audit_log" ("scope");
-
-ALTER TABLE "cd_audit_log" ADD COLUMN "success" boolean NOT NULL DEFAULT true;
-
--- 审计日志表索引
-CREATE INDEX "index_audit_log_type" ON "cd_audit_log" ("type");
-CREATE INDEX "index_audit_log_create_time" ON "cd_audit_log" ("create_time");

packages/ui/certd-server/db/migration/v10051__audit_log_scope.sql

@@ -1,8 +0,0 @@
-ALTER TABLE "cd_audit_log" ADD COLUMN "scope" varchar(32) NOT NULL DEFAULT ('user');
-CREATE INDEX "index_audit_log_scope" ON "cd_audit_log" ("scope");
-
-ALTER TABLE "cd_audit_log" ADD COLUMN "success" boolean NOT NULL DEFAULT (1);
-
--- 审计日志表索引
-CREATE INDEX "index_audit_log_type" ON "cd_audit_log" ("type");
-CREATE INDEX "index_audit_log_create_time" ON "cd_audit_log" ("create_time");

packages/ui/certd-server/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@certd/ui-server",
-  "version": "1.42.5",
+  "version": "1.42.6",
   "description": "fast-server base midway",
   "private": true,
   "type": "module",
@@ -42,20 +42,20 @@
     "lint1": "eslint --fix"
   },
   "dependencies": {
-    "@certd/acme-client": "^1.42.5",
-    "@certd/basic": "^1.42.5",
-    "@certd/commercial-core": "^1.42.5",
+    "@certd/acme-client": "^1.42.6",
+    "@certd/basic": "^1.42.6",
+    "@certd/commercial-core": "^1.42.6",
     "@certd/cv4pve-api-javascript": "^8.4.2",
-    "@certd/jdcloud": "^1.42.5",
-    "@certd/lib-huawei": "^1.42.5",
-    "@certd/lib-k8s": "^1.42.5",
-    "@certd/lib-server": "^1.42.5",
-    "@certd/midway-flyway-js": "^1.42.5",
-    "@certd/pipeline": "^1.42.5",
-    "@certd/plugin-cert": "^1.42.5",
-    "@certd/plugin-lib": "^1.42.5",
-    "@certd/plugin-plus": "^1.42.5",
-    "@certd/plus-core": "^1.42.5",
+    "@certd/jdcloud": "^1.42.6",
+    "@certd/lib-huawei": "^1.42.6",
+    "@certd/lib-k8s": "^1.42.6",
+    "@certd/lib-server": "^1.42.6",
+    "@certd/midway-flyway-js": "^1.42.6",
+    "@certd/pipeline": "^1.42.6",
+    "@certd/plugin-cert": "^1.42.6",
+    "@certd/plugin-lib": "^1.42.6",
+    "@certd/plugin-plus": "^1.42.6",
+    "@certd/plus-core": "^1.42.6",
     "@koa/cors": "^5.0.0",
     "@midwayjs/bootstrap": "3.20.11",
     "@midwayjs/cache": "3.14.0",

packages/ui/certd-server/src/configuration.ts

@@ -12,7 +12,6 @@ import cors from "@koa/cors";
 import { GlobalExceptionMiddleware } from "./middleware/global-exception.js";
 import { PreviewMiddleware } from "./middleware/preview.js";
 import { AuthorityMiddleware } from "./middleware/authority.js";
-import { AuditLogMiddleware } from "./middleware/audit-log.js";
 import { logger } from "@certd/basic";
 import { ResetPasswdMiddleware } from "./middleware/reset-passwd/middleware.js";
 import DefaultConfig from "./config/config.default.js";
@@ -114,7 +113,6 @@ export class MainConfiguration {
       PreviewMiddleware,
       //授权处理
       AuthorityMiddleware,
-      AuditLogMiddleware,
 
       //resetPasswd,重置密码模式下不提供服务
       ResetPasswdMiddleware,

packages/ui/certd-server/src/controller/basic/app-controller.test.ts

@@ -3,7 +3,7 @@
 
 import assert from "node:assert/strict";
 
-import { getReleaseMode, normalizeReleaseVersion } from "./app-controller.js";
+import { normalizeReleaseVersion } from "./app-controller.js";
 
 describe("AppController.normalizeReleaseVersion", () => {
   it("normalizes AtomGit release tag names", () => {
@@ -15,29 +15,3 @@ describe("AppController.normalizeReleaseVersion", () => {
     assert.equal(normalizeReleaseVersion({ name: "v1.40.0" }), "1.40.0");
   });
 });
-
-describe("AppController.getReleaseMode", () => {
-  it("returns 'latest' when env var is not set", () => {
-    delete process.env.certd_release_mode;
-    assert.equal(getReleaseMode(), "latest");
-  });
-
-  it("returns 'latest' when env var is empty", () => {
-    process.env.certd_release_mode = "";
-    assert.equal(getReleaseMode(), "latest");
-  });
-
-  it("returns 'stable' when env var is 'stable'", () => {
-    process.env.certd_release_mode = "stable";
-    assert.equal(getReleaseMode(), "stable");
-  });
-
-  it("returns 'latest' when env var is an unknown value", () => {
-    process.env.certd_release_mode = "unknown";
-    assert.equal(getReleaseMode(), "latest");
-  });
-
-  after(() => {
-    delete process.env.certd_release_mode;
-  });
-});

packages/ui/certd-server/src/controller/basic/app-controller.ts

@@ -8,10 +8,6 @@ export function normalizeReleaseVersion(release: { tag_name?: string; name?: str
   return version.replace(/^v/i, "");
 }
 
-export function getReleaseMode(): "stable" | "latest" {
-  return process.env.certd_release_mode === "stable" ? "stable" : "latest";
-}
-
 /**
  */
 @Provide()
@@ -24,30 +20,14 @@ export class AppController extends BaseController {
 
   @Get("/latest", { description: Constants.per.authOnly })
   async latest(): Promise<any> {
-    const mode = getReleaseMode();
     try {
-      let latest = "";
-      if (mode === "stable") {
-        // 稳定版: 查询被设为 latest 的正式版本
-        const res = await http.request({
-          url: "https://api.atomgit.com/api/v5/repos/certd/certd/releases/latest?type=latest",
-          method: "get",
-          logRes: false,
-          timeout: 5000,
-        });
-        latest = normalizeReleaseVersion(res);
-      } else {
-        // 预览版: 获取最新一条 release（可能包含 pre-release）
-        const list = await http.request({
-          url: "https://api.atomgit.com/api/v5/repos/certd/certd/releases/?direction=desc&per_page=1",
-          method: "get",
-          logRes: false,
-          timeout: 5000,
-        });
-        if (Array.isArray(list) && list.length > 0) {
-          latest = normalizeReleaseVersion(list[0]);
-        }
-      }
+      const res = await http.request({
+        url: "https://api.atomgit.com/api/v5/repos/certd/certd/releases/latest",
+        method: "get",
+        logRes: false,
+        timeout: 5000,
+      });
+      const latest = normalizeReleaseVersion(res);
       return this.ok(latest);
     } catch (e: any) {
       logger.error(e);

packages/ui/certd-server/src/controller/basic/login/forgot-password-controller.ts

@@ -3,7 +3,6 @@ import { BaseController, CommonException, Constants, SysSettingsService } from "
 import { CodeService } from "../../../modules/basic/service/code-service.js";
 import { UserService } from "../../../modules/sys/authority/service/user-service.js";
 import { LoginService } from "../../../modules/login/service/login-service.js";
-import { AuditType } from "../../../modules/sys/enterprise/service/audit-constants.js";
 
 /**
  */
@@ -20,11 +19,7 @@ export class ForgotPasswordController extends BaseController {
   @Inject()
   sysSettingsService: SysSettingsService;
 
-  getAuditType(): string {
-    return AuditType.login.value;
-  }
-
-  @Post("/forgotPassword", { description: Constants.per.guest, summary: "找回密码" })
+  @Post("/forgotPassword", { description: Constants.per.guest })
   public async forgotPassword(
     @Body(ALL)
     body: any
@@ -33,13 +28,15 @@ export class ForgotPasswordController extends BaseController {
     if (!sysSettings.selfServicePasswordRetrievalEnabled) {
       throw new CommonException("暂未开启自助找回");
     }
+    // 找回密码的验证码允许错误次数
+    const maxErrorCount = 5;
 
     if (body.type === "email") {
       this.codeService.checkEmailCode({
         verificationType: "forgotPassword",
         email: body.input,
         validateCode: body.validateCode,
-        maxErrorCount: 5,
+        maxErrorCount: maxErrorCount,
         throwError: true,
       });
     } else if (body.type === "mobile") {
@@ -48,15 +45,14 @@ export class ForgotPasswordController extends BaseController {
         mobile: body.input,
         phoneCode: body.phoneCode,
         smsCode: body.validateCode,
-        maxErrorCount: 5,
+        maxErrorCount: maxErrorCount,
         throwError: true,
       });
     } else {
       throw new CommonException("暂不支持的找回类型,请联系管理员找回");
     }
-    const { id, username } = await this.userService.forgotPassword(body);
+    const username = await this.userService.forgotPassword(body);
     username && this.loginService.clearCacheOnSuccess(username);
-    this.auditLog({ userId: id, content: "用户请求找回密码" });
     return this.ok();
   }
 }

packages/ui/certd-server/src/controller/basic/login/login-controller.ts

@@ -5,8 +5,9 @@ import { CodeService } from "../../../modules/basic/service/code-service.js";
 import { checkComm } from "@certd/plus-core";
 import { CaptchaService } from "../../../modules/basic/service/captcha-service.js";
 import { PasskeyService } from "../../../modules/login/service/passkey-service.js";
-import { AuditType } from "../../../modules/sys/enterprise/service/audit-constants.js";
 
+/**
+ */
 @Provide()
 @Controller("/api/")
 export class LoginController extends BaseController {
@@ -26,11 +27,7 @@ export class LoginController extends BaseController {
   @Inject()
   passkeyService: PasskeyService;
 
-  getAuditType(): string {
-    return AuditType.login.value;
-  }
-
-  @Post("/login", { description: Constants.per.guest, summary: "用户名密码登录" })
+  @Post("/login", { description: Constants.per.guest })
   public async login(
     @Body(ALL)
     body: any,
@@ -41,22 +38,16 @@ export class LoginController extends BaseController {
     if (settings.captchaEnabled === true) {
       await this.captchaService.doValidate({ form: body.captcha, must: false, captchaAddonId: settings.captchaAddonId, req: { remoteIp } });
     }
-    try {
-      const token = await this.loginService.loginByPassword(body);
-      this.writeTokenCookie(token);
-      this.auditLog({ userId: token.userId, username: token.username, content: `用户「${body.username}」登录成功` });
-      return this.ok(token);
-    } catch (err: any) {
-      this.auditLog({ userId: err.userId, username: body.username, content: `用户「${body.username}」登录失败：${err.message}` });
-      throw err;
-    }
+    const token = await this.loginService.loginByPassword(body);
+    this.writeTokenCookie(token);
+    return this.ok(token);
   }
 
   private writeTokenCookie(token: { expire: any; token: any }) {
     // this.loginService.writeTokenCookie(this.ctx,token);
   }
 
-  @Post("/loginBySms", { description: Constants.per.guest, summary: "短信验证码登录" })
+  @Post("/loginBySms", { description: Constants.per.guest })
   public async loginBySms(
     @Body(ALL)
     body: any
@@ -67,42 +58,31 @@ export class LoginController extends BaseController {
     }
     checkComm();
 
-    try {
-      const token = await this.loginService.loginBySmsCode({
-        phoneCode: body.phoneCode,
-        mobile: body.mobile,
-        smsCode: body.smsCode,
-        randomStr: body.randomStr,
-        inviteCode: body.inviteCode,
-      });
+    const token = await this.loginService.loginBySmsCode({
+      phoneCode: body.phoneCode,
+      mobile: body.mobile,
+      smsCode: body.smsCode,
+      randomStr: body.randomStr,
+      inviteCode: body.inviteCode,
+    });
 
-      this.writeTokenCookie(token);
-      this.auditLog({ userId: token.userId, username: token.username, content: `用户「${body.mobile}」短信登录成功` });
-      return this.ok(token);
-    } catch (err: any) {
-      this.auditLog({ userId: err.userId, username: body.mobile, content: `用户「${body.mobile}」短信登录失败：${err.message}` });
-      throw err;
-    }
+    this.writeTokenCookie(token);
+
+    return this.ok(token);
   }
 
-  @Post("/loginByTwoFactor", { description: Constants.per.guest, summary: "两步验证登录" })
+  @Post("/loginByTwoFactor", { description: Constants.per.guest })
   public async loginByTwoFactor(
     @Body(ALL)
     body: any
   ) {
-    try {
-      const token = await this.loginService.loginByTwoFactor({
-        loginId: body.loginId,
-        verifyCode: body.verifyCode,
-      });
+    const token = await this.loginService.loginByTwoFactor({
+      loginId: body.loginId,
+      verifyCode: body.verifyCode,
+    });
 
-      this.writeTokenCookie(token);
-      this.auditLog({ userId: token.userId, username: token.username, content: `用户「${body.loginId}」两步验证登录成功` });
-      return this.ok(token);
-    } catch (err: any) {
-      this.auditLog({ userId: err.userId, username: body.loginId, content: `用户「${body.loginId}」两步验证登录失败：${err.message}` });
-      throw err;
-    }
+    this.writeTokenCookie(token);
+    return this.ok(token);
   }
 
   @Post("/passkey/generateAuthentication", { description: Constants.per.guest })
@@ -112,30 +92,24 @@ export class LoginController extends BaseController {
     return this.ok(options);
   }
 
-  @Post("/loginByPasskey", { description: Constants.per.guest, summary: "Passkey登录" })
+  @Post("/loginByPasskey", { description: Constants.per.guest })
   public async loginByPasskey(
     @Body(ALL)
     body: any
   ) {
-    try {
-      const credential = body.credential;
-      const challenge = body.challenge;
+    const credential = body.credential;
+    const challenge = body.challenge;
 
-      const token = await this.loginService.loginByPasskey(
-        {
-          credential,
-          challenge,
-        },
-        this.ctx
-      );
+    const token = await this.loginService.loginByPasskey(
+      {
+        credential,
+        challenge,
+      },
+      this.ctx
+    );
 
-      this.writeTokenCookie(token);
-      this.auditLog({ userId: token.userId, username: token.username, content: "用户Passkey登录成功" });
-      return this.ok(token);
-    } catch (err: any) {
-      this.auditLog({ userId: err.userId, username: body.credential, content: `用户Passkey登录失败：${err.message}` });
-      throw err;
-    }
+    // this.writeTokenCookie(token);
+    return this.ok(token);
   }
 
   @Post("/logout", { description: Constants.per.authOnly })

packages/ui/certd-server/src/controller/basic/login/oauth-controller.ts

@@ -8,7 +8,6 @@ import { LoginService } from "../../../modules/login/service/login-service.js";
 import { OauthBoundService } from "../../../modules/login/service/oauth-bound-service.js";
 import { AddonGetterService } from "../../../modules/pipeline/service/addon-getter-service.js";
 import { UserEntity } from "../../../modules/sys/authority/entity/user.js";
-import { AuditType } from "../../../modules/sys/enterprise/service/audit-constants.js";
 import { IOauthProvider } from "../../../plugins/plugin-oauth/api.js";
 
 type OauthProviderSetting = {
@@ -49,10 +48,6 @@ export class ConnectController extends BaseController {
   @Inject()
   addonService: AddonService;
 
-  getAuditType(): string {
-    return AuditType.login.value;
-  }
-
   private async getOauthProvider(type: string) {
     const publicSettings = await this.sysSettingsService.getPublicSettings();
     if (!publicSettings?.oauthEnabled) {
@@ -73,11 +68,12 @@ export class ConnectController extends BaseController {
     };
   }
 
-  @Post("/login", { description: Constants.per.guest, summary: "第三方登录" })
+  @Post("/login", { description: Constants.per.guest })
   public async login(@Body(ALL) body: { type: string; subtype?: string; forType?: string; from?: string }) {
     const oauthProvider = await this.getOauthProvider(body.type);
     const installInfo = await this.sysSettingsService.getSetting<SysInstallInfo>(SysInstallInfo);
     const bindUrl = installInfo?.bindUrl || "";
+    //构造登录url
     const redirectUrl = `${bindUrl}api/oauth/callback/${body.type}`;
 
     const stateObj = {
@@ -99,6 +95,8 @@ export class ConnectController extends BaseController {
     });
     this.ctx.cookies.set("oauth_ticket", ticket, {
       httpOnly: true,
+      // secure: true,
+      // sameSite: "strict",
     });
     return this.ok({ loginUrl, ticket });
   }
@@ -155,7 +153,7 @@ export class ConnectController extends BaseController {
     }
   }
 
-  @Post("/getLogoutUrl", { description: Constants.per.guest, summary: "第三方登出" })
+  @Post("/getLogoutUrl", { description: Constants.per.guest })
   public async logout(@Body(ALL) body: any) {
     checkPlus();
     const oauthProvider = await this.getOauthProvider(body.type);
@@ -197,7 +195,7 @@ export class ConnectController extends BaseController {
     // this.loginService.writeTokenCookie(this.ctx,token);
   }
 
-  @Post("/autoRegister", { description: Constants.per.guest, summary: "第三方自动注册" })
+  @Post("/autoRegister", { description: Constants.per.guest })
   public async autoRegister(@Body(ALL) body: { validationCode: string; type: string; inviteCode?: string }) {
     const validationValue = this.codeService.getValidationValue(body.validationCode);
     if (!validationValue) {
@@ -221,12 +219,12 @@ export class ConnectController extends BaseController {
 
     const loginRes = await this.loginService.generateToken(newUser);
     this.writeTokenCookie(loginRes);
-    this.auditLog({ userId: newUser.id, content: `第三方账号自动注册,类型: ${body.type}` });
     return this.ok(loginRes);
   }
 
-  @Post("/bind", { description: Constants.per.loginOnly, summary: "绑定第三方账号" })
+  @Post("/bind", { description: Constants.per.loginOnly })
   public async bind(@Body(ALL) body: any) {
+    //需要已登录
     const userId = this.getUserId();
     const validationValue = this.codeService.getValidationValue(body.validationCode);
     if (!validationValue) {
@@ -240,18 +238,17 @@ export class ConnectController extends BaseController {
       type,
       openId,
     });
-    this.auditLog({ userId, content: `第三方账号绑定,类型: ${body.type}` });
     return this.ok(1);
   }
 
-  @Post("/unbind", { description: Constants.per.loginOnly, summary: "解绑第三方账号" })
+  @Post("/unbind", { description: Constants.per.loginOnly })
   public async unbind(@Body(ALL) body: any) {
+    //需要已登录
     const userId = this.getUserId();
     await this.oauthBoundService.unbind({
       userId,
       type: body.type,
     });
-    this.auditLog({ userId, content: `第三方账号解绑,类型: ${body.type}` });
     return this.ok(1);
   }
 

packages/ui/certd-server/src/controller/basic/login/register-controller.ts

@@ -4,7 +4,6 @@ import { RegisterType } from "../../../modules/sys/authority/service/user-servic
 import { CodeService } from "../../../modules/basic/service/code-service.js";
 import { checkComm, checkPlus } from "@certd/plus-core";
 import { LoginService } from "../../../modules/login/service/login-service.js";
-import { AuditType } from "../../../modules/sys/enterprise/service/audit-constants.js";
 
 export type RegisterReq = {
   type: RegisterType;
@@ -32,11 +31,7 @@ export class RegisterController extends BaseController {
   @Inject()
   sysSettingsService: SysSettingsService;
 
-  getAuditType(): string {
-    return AuditType.login.value;
-  }
-
-  @Post("/register", { description: Constants.per.guest, summary: "用户注册" })
+  @Post("/register", { description: Constants.per.guest })
   public async register(
     @Body(ALL)
     body: RegisterReq,
@@ -65,7 +60,6 @@ export class RegisterController extends BaseController {
         password: body.password,
       } as any;
       const newUser = await this.loginService.register(body.type, registerUser, body.inviteCode);
-      this.auditLog({ userId: newUser.id, username: body.username, content: `用户「${body.username}」注册成功` });
       return this.ok(newUser);
     } else if (body.type === "mobile") {
       if (sysPublicSettings.mobileRegisterEnabled === false) {
@@ -86,7 +80,6 @@ export class RegisterController extends BaseController {
         password: body.password,
       } as any;
       const newUser = await this.loginService.register(body.type, registerUser, body.inviteCode);
-      this.auditLog({ userId: newUser.id, username: body.mobile, content: `用户「${body.mobile}」注册成功` });
       return this.ok(newUser);
     } else if (body.type === "email") {
       if (sysPublicSettings.emailRegisterEnabled === false) {
@@ -104,7 +97,6 @@ export class RegisterController extends BaseController {
         password: body.password,
       } as any;
       const newUser = await this.loginService.register(body.type, registerUser, body.inviteCode);
-      this.auditLog({ userId: newUser.id, username: body.email, content: `用户「${body.email}」注册成功` });
       return this.ok(newUser);
     }
   }

packages/ui/certd-server/src/controller/basic/settings-controller.ts

@@ -5,7 +5,6 @@ import { SysInviteCommissionSetting } from "@certd/commercial-core";
 import { cloneDeep } from "lodash-es";
 import { getVersion } from "../../utils/version.js";
 import { http } from "@certd/basic";
-import { getReleaseMode } from "./app-controller.js";
 
 /**
  */
@@ -109,7 +108,6 @@ export class BasicSettingsController extends BaseController {
       app: {
         time: new Date().getTime(),
         version,
-        releaseMode: getReleaseMode(),
       },
     });
   }

packages/ui/certd-server/src/controller/sys/access/access-controller.ts

@@ -37,12 +37,12 @@ export class SysAccessController extends AccessController {
     return await super.list(body);
   }
 
-  @Post("/add", { description: "sys:settings:edit", summary: "添加系统授权配置" })
+  @Post("/add", { description: "sys:settings:edit" })
   async add(@Body(ALL) bean: any) {
     return await super.add(bean);
   }
 
-  @Post("/update", { description: "sys:settings:edit", summary: "更新系统授权配置" })
+  @Post("/update", { description: "sys:settings:edit" })
   async update(@Body(ALL) bean: any) {
     return await super.update(bean);
   }
@@ -51,7 +51,7 @@ export class SysAccessController extends AccessController {
     return await super.info(id);
   }
 
-  @Post("/delete", { description: "sys:settings:edit", summary: "删除系统授权配置" })
+  @Post("/delete", { description: "sys:settings:edit" })
   async delete(@Query("id") id: number) {
     return await super.delete(id);
   }

packages/ui/certd-server/src/controller/sys/account/account-controller.ts

@@ -1,6 +1,5 @@
 import { ALL, Body, Controller, Inject, Post, Provide } from "@midwayjs/core";
 import { BaseController, PlusService, SysInstallInfo, SysSettingsService } from "@certd/lib-server";
-import { AuditType } from "../../../modules/sys/enterprise/service/audit-constants.js";
 
 export type PreBindUserReq = {
   userId: number;
@@ -19,12 +18,9 @@ export class BasicController extends BaseController {
   @Inject()
   sysSettingsService: SysSettingsService;
 
-  getAuditType(): string {
-    return AuditType.account.value;
-  }
-
-  @Post("/preBindUser", { description: "sys:settings:edit", summary: "预绑定用户" })
+  @Post("/preBindUser", { description: "sys:settings:edit" })
   public async preBindUser(@Body(ALL) body: PreBindUserReq) {
+    // 设置缓存内容
     if (body.userId == null || body.userId <= 0) {
       throw new Error("用户ID不能为空");
     }
@@ -32,7 +28,7 @@ export class BasicController extends BaseController {
     return this.ok({});
   }
 
-  @Post("/bindUser", { description: "sys:settings:edit", summary: "绑定用户" })
+  @Post("/bindUser", { description: "sys:settings:edit" })
   public async bindUser(@Body(ALL) body: BindUserReq) {
     if (body.userId == null || body.userId <= 0) {
       throw new Error("用户ID不能为空");
@@ -40,20 +36,18 @@ export class BasicController extends BaseController {
     const installInfo: SysInstallInfo = await this.sysSettingsService.getSetting(SysInstallInfo);
     installInfo.bindUserId = body.userId;
     await this.sysSettingsService.saveSetting(installInfo);
-    await this.auditLog({ content: `绑定了袖手科技用户(ID:${body.userId})` });
     return this.ok({});
   }
 
-  @Post("/unbindUser", { description: "sys:settings:edit", summary: "解绑用户" })
+  @Post("/unbindUser", { description: "sys:settings:edit" })
   public async unbindUser() {
     const installInfo: SysInstallInfo = await this.sysSettingsService.getSetting(SysInstallInfo);
     installInfo.bindUserId = null;
     await this.sysSettingsService.saveSetting(installInfo);
-    await this.auditLog({ content: "解绑了袖手科技用户" });
     return this.ok({});
   }
 
-  @Post("/updateLicense", { description: "sys:settings:edit", summary: "更新许可证" })
+  @Post("/updateLicense", { description: "sys:settings:edit" })
   public async updateLicense(@Body(ALL) body: { license: string }) {
     await this.plusService.updateLicense(body.license);
     return this.ok(true);

packages/ui/certd-server/src/controller/sys/audit/audit-controller.ts

@@ -1,42 +0,0 @@
-import { BaseController, Constants } from "@certd/lib-server";
-import { ALL, Body, Controller, Inject, Post, Provide, Query } from "@midwayjs/core";
-import { ApiTags } from "@midwayjs/swagger";
-import { AuditService } from "../../../modules/sys/enterprise/service/audit-service.js";
-import { buildAuditTypeDict, buildAuditActionDict } from "../../../modules/sys/enterprise/service/audit-constants.js";
-
-@Provide()
-@ApiTags(["audit"])
-@Controller("/api/sys/audit")
-export class SysAuditLogController extends BaseController {
-  @Inject()
-  auditService: AuditService;
-
-  @Post("/page", { description: Constants.per.authOnly, summary: "分页查询审计日志" })
-  async page(@Body(ALL) body: any) {
-    if (body.query?.scope) {
-      delete body.query.userId;
-    }
-    const pageRet = await this.auditService.page(body);
-    return this.ok(pageRet);
-  }
-
-  @Post("/delete", { description: Constants.per.authOnly, summary: "删除审计日志" })
-  async delete(@Query("id") id: number) {
-    await this.auditService.delete([id]);
-    return this.ok({});
-  }
-
-  @Post("/clean", { description: Constants.per.authOnly, summary: "清理过期审计日志" })
-  async clean(@Body("retentionDays") retentionDays: number) {
-    const count = await this.auditService.cleanExpired(retentionDays || 90);
-    return this.ok({ deletedCount: count });
-  }
-
-  @Post("/dict", { description: Constants.per.authOnly, summary: "获取审计类型和动作字典" })
-  async getDict() {
-    return this.ok({
-      types: buildAuditTypeDict(),
-      actions: buildAuditActionDict(),
-    });
-  }
-}

packages/ui/certd-server/src/controller/sys/authority/permission-controller.ts

@@ -1,7 +1,6 @@
 import { ALL, Body, Controller, Inject, Post, Provide, Query } from "@midwayjs/core";
 import { CrudController } from "@certd/lib-server";
 import { PermissionService } from "../../../modules/sys/authority/service/permission-service.js";
-import { AuditType } from "../../../modules/sys/enterprise/service/audit-constants.js";
 
 /**
  * 权限资源
@@ -15,11 +14,8 @@ export class PermissionController extends CrudController<PermissionService> {
   getService() {
     return this.service;
   }
-  getAuditType(): string {
-    return AuditType.permission.value;
-  }
 
-  @Post("/page", { description: "sys:auth:per:view", summary: "查询权限分页列表" })
+  @Post("/page", { description: "sys:auth:per:view" })
   async page(
     @Body(ALL)
     body
@@ -27,42 +23,30 @@ export class PermissionController extends CrudController<PermissionService> {
     return await super.page(body);
   }
 
-  @Post("/add", { description: "sys:auth:per:add", summary: "添加权限" })
+  @Post("/add", { description: "sys:auth:per:add" })
   async add(
     @Body(ALL)
     bean
   ) {
-    const res = await super.add(bean);
-    await this.auditLog({
-      content: `新增了权限「${bean.name}」(ID:${res.data})`,
-    });
-    return res;
+    return await super.add(bean);
   }
 
-  @Post("/update", { description: "sys:auth:per:edit", summary: "更新权限" })
+  @Post("/update", { description: "sys:auth:per:edit" })
   async update(
     @Body(ALL)
     bean
   ) {
-    const res = await super.update(bean);
-    await this.auditLog({
-      content: `修改了权限「${bean.name}」(ID:${bean.id})`,
-    });
-    return res;
+    return await super.update(bean);
   }
-  @Post("/delete", { description: "sys:auth:per:remove", summary: "删除权限" })
+  @Post("/delete", { description: "sys:auth:per:remove" })
   async delete(
     @Query("id")
     id: number
   ) {
-    const res = await super.delete(id);
-    await this.auditLog({
-      content: `删除了权限(ID:${id})`,
-    });
-    return res;
+    return await super.delete(id);
   }
 
-  @Post("/tree", { description: "sys:auth:per:view", summary: "查询权限树" })
+  @Post("/tree", { description: "sys:auth:per:view" })
   async tree() {
     const tree = await this.service.tree({});
     return this.ok(tree);

packages/ui/certd-server/src/controller/sys/authority/role-controller.ts

@@ -1,7 +1,6 @@
 import { ALL, Body, Controller, Inject, Post, Provide, Query } from "@midwayjs/core";
 import { CrudController } from "@certd/lib-server";
 import { RoleService } from "../../../modules/sys/authority/service/role-service.js";
-import { AuditType } from "../../../modules/sys/enterprise/service/audit-constants.js";
 
 /**
  * 系统用户
@@ -16,10 +15,6 @@ export class RoleController extends CrudController<RoleService> {
     return this.service;
   }
 
-  getAuditType(): string {
-    return AuditType.role.value;
-  }
-
   @Post("/page", { description: "sys:auth:role:view" })
   async page(
     @Body(ALL)
@@ -34,30 +29,22 @@ export class RoleController extends CrudController<RoleService> {
     return this.ok(ret);
   }
 
-  @Post("/add", { description: "sys:auth:role:add", summary: "新增角色" })
+  @Post("/add", { description: "sys:auth:role:add" })
   async add(
     @Body(ALL)
     bean
   ) {
-    const res = await super.add(bean);
-    await this.auditLog({
-      content: `新增了角色「${bean.name}」(ID:${res.data})`,
-    });
-    return res;
+    return await super.add(bean);
   }
 
-  @Post("/update", { description: "sys:auth:role:edit", summary: "修改角色" })
+  @Post("/update", { description: "sys:auth:role:edit" })
   async update(
     @Body(ALL)
     bean
   ) {
-    const res = await super.update(bean);
-    await this.auditLog({
-      content: `修改了角色「${bean.name}」(ID:${bean.id})`,
-    });
-    return res;
+    return await super.update(bean);
   }
-  @Post("/delete", { description: "sys:auth:role:remove", summary: "删除角色" })
+  @Post("/delete", { description: "sys:auth:role:remove" })
   async delete(
     @Query("id")
     id: number
@@ -65,11 +52,7 @@ export class RoleController extends CrudController<RoleService> {
     if (id === 1) {
       throw new Error("不能删除默认的管理员角色");
     }
-    const res = await super.delete(id);
-    await this.auditLog({
-      content: `删除了角色(ID:${id})`,
-    });
-    return res;
+    return await super.delete(id);
   }
 
   @Post("/getPermissionTree", { description: "sys:auth:role:view" })
@@ -95,10 +78,9 @@ export class RoleController extends CrudController<RoleService> {
    * @param roleId
    * @param permissionIds
    */
-  @Post("/authz", { description: "sys:auth:role:edit", summary: "角色授权" })
+  @Post("/authz", { description: "sys:auth:role:edit" })
   async authz(@Body("roleId") roleId, @Body("permissionIds") permissionIds) {
     await this.service.authz(roleId, permissionIds);
-    await this.auditLog({ content: `为角色(ID:${roleId})进行了授权` });
     return this.ok(null);
   }
 }