From 9a92984568a3270c2dae6557a4d5e8e10a125838 Mon Sep 17 00:00:00 2001
From: Hsukqi Lee <team@tsinbei.com>
Date: Wed, 11 Nov 2026 06:05:56 +0800
Subject: [PATCH 1/3] refactor: use shared UI in identity forms

Use immutable public release artifacts and retain product-specific behavior. Independent review and real release installation recorded in the sharing handoff.
---
 web/FASTUI.md      |  5 +++++
 web/package.json   |  2 ++
 web/pnpm-lock.yaml | 25 +++++++++++++++++++++++++
 web/src/Guest.tsx  | 11 ++++++-----
 web/src/main.tsx   |  8 ++++++--
 web/src/style.css  | 21 +++++++++++++++++----
 6 files changed, 61 insertions(+), 11 deletions(-)
 create mode 100644 web/FASTUI.md

diff --git a/web/FASTUI.md b/web/FASTUI.md
new file mode 100644
index 0000000..f117793
--- /dev/null
+++ b/web/FASTUI.md
@@ -0,0 +1,5 @@
+# FastUI console
+
+`@fastrd/ui-react` 与直接使用的 `@fastrd/ui-foundation` 固定消费 GitHub release `v0.1.0`，锁文件保留制品完整性。安装后 `pnpm run build` 将 CSS/JS 打入本地控制台输出，运行时不访问包下载站点。
+
+console 的加载和成功/错误反馈使用真实 `Loading` / `Alert` React 组件，邀请/恢复表单使用 `TextField` / `Button`；安全表单、导航、管理表格保留业务结构，以 foundation token 替换原绿色色板。`fastcas-theme` 默认为 system；切换系统外观不会重挂载 React 树。业务请求、凭证、CSRF 与管理员权限仍由现有组件管理。
diff --git a/web/package.json b/web/package.json
index 0728bcd..87c8ef1 100644
--- a/web/package.json
+++ b/web/package.json
@@ -8,6 +8,8 @@
     "dev": "vite --host 127.0.0.1"
   },
   "dependencies": {
+    "@fastrd/ui-foundation": "https://github.com/FastR-D/FastUI/releases/download/v0.1.0/fastrd-ui-foundation-0.1.0.tgz",
+    "@fastrd/ui-react": "https://github.com/FastR-D/FastUI/releases/download/v0.1.0/fastrd-ui-react-0.1.0.tgz",
     "react": "19.2.4",
     "react-dom": "19.2.4"
   },
diff --git a/web/pnpm-lock.yaml b/web/pnpm-lock.yaml
index 119584e..6e65741 100644
--- a/web/pnpm-lock.yaml
+++ b/web/pnpm-lock.yaml
@@ -8,6 +8,12 @@ importers:
 
   .:
     dependencies:
+      '@fastrd/ui-foundation':
+        specifier: https://github.com/FastR-D/FastUI/releases/download/v0.1.0/fastrd-ui-foundation-0.1.0.tgz
+        version: https://github.com/FastR-D/FastUI/releases/download/v0.1.0/fastrd-ui-foundation-0.1.0.tgz
+      '@fastrd/ui-react':
+        specifier: https://github.com/FastR-D/FastUI/releases/download/v0.1.0/fastrd-ui-react-0.1.0.tgz
+        version: https://github.com/FastR-D/FastUI/releases/download/v0.1.0/fastrd-ui-react-0.1.0.tgz(react-dom@19.2.4(react@19.2.4))(react@19.2.4)
       react:
         specifier: 19.2.4
         version: 19.2.4
@@ -189,6 +195,17 @@ packages:
     cpu: [x64]
     os: [win32]
 
+  '@fastrd/ui-foundation@https://github.com/FastR-D/FastUI/releases/download/v0.1.0/fastrd-ui-foundation-0.1.0.tgz':
+    resolution: {integrity: sha512-5O4s9BXXHXWk7GbzPfMYX6HjNi0DKryfWLRPYMZINNb4ew3arjCKbJvxFaSvqcCvhHxmrf8OZDg9GPmfvdnRtw==, tarball: https://github.com/FastR-D/FastUI/releases/download/v0.1.0/fastrd-ui-foundation-0.1.0.tgz}
+    version: 0.1.0
+
+  '@fastrd/ui-react@https://github.com/FastR-D/FastUI/releases/download/v0.1.0/fastrd-ui-react-0.1.0.tgz':
+    resolution: {integrity: sha512-zsnN8Afm889TyhPX0ZQQ4hIn5Bj1EsFbEZ857CQXDgmCIOEfY3369bCFn1VEelR/EWjU5Lpyjj6D1E9lVtQ5uw==, tarball: https://github.com/FastR-D/FastUI/releases/download/v0.1.0/fastrd-ui-react-0.1.0.tgz}
+    version: 0.1.0
+    peerDependencies:
+      react: ^18.3.0 || ^19.0.0
+      react-dom: ^18.3.0 || ^19.0.0
+
   '@napi-rs/lzma-linux-x64-gnu@1.5.1':
     resolution: {integrity: sha512-oTXEIha4SsuXdTA4Iyskj0kpdx2yVXdhd75c2v3xGrHFfVMsbhTPZU/nMPL4sWKo4pBHm3aucLaqGlF696dTyQ==}
     engines: {node: ^22.20 || ^24.12 || >=25}
@@ -538,6 +555,14 @@ snapshots:
   '@esbuild/win32-x64@0.25.12':
     optional: true
 
+  '@fastrd/ui-foundation@https://github.com/FastR-D/FastUI/releases/download/v0.1.0/fastrd-ui-foundation-0.1.0.tgz': {}
+
+  '@fastrd/ui-react@https://github.com/FastR-D/FastUI/releases/download/v0.1.0/fastrd-ui-react-0.1.0.tgz(react-dom@19.2.4(react@19.2.4))(react@19.2.4)':
+    dependencies:
+      '@fastrd/ui-foundation': https://github.com/FastR-D/FastUI/releases/download/v0.1.0/fastrd-ui-foundation-0.1.0.tgz
+      react: 19.2.4
+      react-dom: 19.2.4(react@19.2.4)
+
   '@napi-rs/lzma-linux-x64-gnu@1.5.1':
     optional: true
 
diff --git a/web/src/Guest.tsx b/web/src/Guest.tsx
index 9e4b786..f1e639a 100644
--- a/web/src/Guest.tsx
+++ b/web/src/Guest.tsx
@@ -1,4 +1,5 @@
 import {useState} from 'react';
+import {Alert,Button,TextField} from '@fastrd/ui-react';
 
 type Flow='invite'|'recovery'|'mfa_reset';
 export type InitialCredential={flow:Flow;token:string}|null;
@@ -35,10 +36,10 @@ export function Guest({initial}:{initial:InitialCredential}){
  <section><h2>{flow==='invite'?'接受邀请':flow==='recovery'?'恢复 FastCAS 密码':'重置 FastCAS 双重验证'}</h2>{complete?<><p role="status">{flow==='invite'?'账号已创建':flow==='recovery'?'密码已更新':'双重验证已重置'}。现在可以登录 FastCAS。</p><a href="/login">前往登录</a></>:<>
  <p>此操作仅针对 FastCAS 身份。各项目账号和本地登录保持独立。</p>
  <div className="flow-choices"><button type="button" aria-current={flow==='invite'?'page':undefined} onClick={()=>{setFlow('invite');setError('')}}>邀请注册</button><button type="button" aria-current={flow==='recovery'?'page':undefined} onClick={()=>{setFlow('recovery');setError('')}}>密码恢复</button><button type="button" aria-current={flow==='mfa_reset'?'page':undefined} onClick={()=>{setFlow('mfa_reset');setError('')}}>双重验证重置</button></div>
- <form onSubmit={e=>void redeem(e)}><label>一次性凭证<input autoComplete="off" required value={token} onChange={e=>setToken(e.target.value)}/></label>
- {flow==='invite'&&<label>姓名<input autoComplete="name" required value={name} onChange={e=>setName(e.target.value)}/></label>}
- <label>{flow==='mfa_reset'?'当前 FastCAS 密码':'新密码'}<input type="password" autoComplete={flow==='mfa_reset'?'current-password':'new-password'} required minLength={12} value={password} onChange={e=>setPassword(e.target.value)}/></label>
- {flow!=='mfa_reset'&&<label>确认新密码<input type="password" autoComplete="new-password" required minLength={12} value={confirmation} onChange={e=>setConfirmation(e.target.value)}/></label>}
- {error&&<p role="alert" className="error">{error}</p>}<button className="primary" disabled={busy}>{busy?'正在提交…':flow==='invite'?'创建 FastCAS 账号':flow==='recovery'?'更新 FastCAS 密码':'重置双重验证'}</button></form>
+  <form onSubmit={e=>void redeem(e)}><label>一次性凭证<TextField autoComplete="off" required value={token} onChange={e=>setToken(e.target.value)}/></label>
+  {flow==='invite'&&<label>姓名<TextField autoComplete="name" required value={name} onChange={e=>setName(e.target.value)}/></label>}
+  <label>{flow==='mfa_reset'?'当前 FastCAS 密码':'新密码'}<TextField type="password" autoComplete={flow==='mfa_reset'?'current-password':'new-password'} required minLength={12} value={password} onChange={e=>setPassword(e.target.value)}/></label>
+  {flow!=='mfa_reset'&&<label>确认新密码<TextField type="password" autoComplete="new-password" required minLength={12} value={confirmation} onChange={e=>setConfirmation(e.target.value)}/></label>}
+  {error&&<Alert tone="danger">{error}</Alert>}<Button type="submit" variant="primary" loading={busy}>{busy?'正在提交…':flow==='invite'?'创建 FastCAS 账号':flow==='recovery'?'更新 FastCAS 密码':'重置双重验证'}</Button></form>
  </>}</section></div>
 }
diff --git a/web/src/main.tsx b/web/src/main.tsx
index 3f23de5..712573e 100644
--- a/web/src/main.tsx
+++ b/web/src/main.tsx
@@ -1,4 +1,7 @@
 import React, {useEffect,useState} from 'react';
+import {Alert, Loading} from '@fastrd/ui-react';
+import {initColorMode} from '@fastrd/ui-foundation';
+import '@fastrd/ui-react/styles.css';
 import {createRoot} from 'react-dom/client';
 import './style.css';
 import {Admin} from './Admin';
@@ -6,6 +9,7 @@ import {Delegations} from './Delegations';
 import {Integration} from './Integration';
 import {Guest,takeInitialCredential} from './Guest';
 const initialCredential=takeInitialCredential();
+initColorMode({storageKey:'fastcas-theme'});
 type Me={user:{name:string;email:string;role:string};csrf:string;mfa_enabled:boolean;session:{id:string}};
 type Link={id:string;client_id:string;local_account_ref:string;state:string;version:number};
 type Installation={id:string;client_id:string;client_name:string;installation_id:string;created_at:string;revoked_at:string|null};
@@ -26,8 +30,8 @@ function App(){
  async function loadEvents(before=''){const data=await api<{events:Event[];next_cursor:string}>('/admin/outbox'+(before?'?before='+encodeURIComponent(before):''));setEvents(before?old=>[...old,...data.events]:data.events);setCursor(data.next_cursor)}
  return <div className="shell"><header><a className="brand" href="/console/">FastCAS<span>账号与安全</span></a>{me&&<button disabled={busy} onClick={()=>void run(async()=>{await api('/logout',{});setMe(undefined);setNotice('已退出 FastCAS')})}>退出</button>}</header>
  <main><div className="intro"><p className="eyebrow">FAST R&D · IDENTITY</p><h1>{me?`你好，${me.user.name}`:'你的科研账号安全中心'}</h1><p>管理关联身份与登录安全。各项目的本地账号、内容和权限由项目独立管理。</p></div>
- {error&&<p role="alert" className="error">{error}</p>}{notice&&<p role="status" className="notice">{notice}</p>}
- {loading?<p>正在读取账号…</p>:!me?<Guest initial={initialCredential}/>:<>
+  {error&&<Alert tone="danger">{error}</Alert>}{notice&&<Alert tone="success">{notice}</Alert>}
+  {loading?<Loading label="正在读取账号…"/>:!me?<Guest initial={initialCredential}/>:<>
  <nav aria-label="账号导航">{[['security','安全设置'],['links','关联项目'],['installations','本机安装'],['delegations','跨项目委托'],['sessions','登录会话'],...(me.user.role==='admin'?[['integration','开发者接入'],['identities','身份管理'],['applications','应用管理'],['services','服务身份'],['exchange-policies','调用策略'],['credentials','邀请与恢复'],['audit','审计'],['outbox','失败投递']]:[])].map(([key,label])=><button key={key} aria-current={page===key?'page':undefined} disabled={busy} onClick={()=>void select(key)}>{label}</button>)}</nav>
  {page==='security'&&<div className="grid"><section><h2>身份验证</h2><p>{me.user.email}</p><p>双重验证：{me.mfa_enabled?'已启用':'未启用'}</p><form onSubmit={e=>{e.preventDefault();void run(async()=>{await api('/me/reauthenticate',{password,code});setPassword('');setCode('');setNotice('身份已重新验证');await refresh()})}}><label>当前密码<input type="password" autoComplete="current-password" required value={password} onChange={e=>setPassword(e.target.value)}/></label><label>动态验证码或恢复码<input autoComplete="one-time-code" value={code} onChange={e=>setCode(e.target.value)}/></label><button className="primary" disabled={busy}>重新验证身份</button></form></section>
  <section><h2>双重验证</h2><p>使用认证器生成动态验证码。开启后请妥善保存一次性恢复码。</p>{me.mfa_enabled&&<><p>更新恢复码前，请先用上方表单重新验证密码和动态验证码；旧恢复码会立即失效。</p><button disabled={busy} onClick={()=>{if(window.confirm('生成新的恢复码并使所有旧恢复码失效？'))void run(async()=>{const result=await api<{recovery_codes:string[]}>('/me/mfa/recovery-codes',{});setRecovery(result.recovery_codes);setNotice('恢复码已更新，旧码已失效')})}}>更新恢复码</button></>}{!me.mfa_enabled&&!uri&&<button disabled={busy} onClick={()=>void run(async()=>setUri((await api<{otpauth_uri:string}>('/me/mfa/enroll',{})).otpauth_uri))}>设置认证器</button>}{uri&&<><p>将以下 URI 导入你的认证器。此密钥只应由你保存。</p><textarea aria-label="认证器配置" readOnly value={uri}/><button disabled={busy||!code} onClick={()=>void run(async()=>{const result=await api<{recovery_codes:string[]}>('/me/mfa/confirm',{code});setRecovery(result.recovery_codes);setUri('');setCode('');await refresh()})}>确认验证码并开启</button></>}{recovery.length>0&&<><p>请现在保存恢复码，离开页面后不再显示。</p><pre>{recovery.join('\n')}</pre><button onClick={()=>setRecovery([])}>已保存，隐藏恢复码</button></>}</section>
diff --git a/web/src/style.css b/web/src/style.css
index 9918366..6d2c35f 100644
--- a/web/src/style.css
+++ b/web/src/style.css
@@ -1,4 +1,17 @@
-:root{font-family:Inter,"Noto Sans SC",system-ui,sans-serif;color:#172e36;background:#f3f6f4;font-synthesis:none}*{box-sizing:border-box}body{margin:0}button,input,textarea{font:inherit}button,.primary{border:1px solid #bccac7;border-radius:8px;background:white;color:#173e39;padding:10px 16px;cursor:pointer;text-decoration:none;display:inline-block}button:disabled{opacity:.5;cursor:wait}button:hover,.primary:hover{background:#e4eeea}button:focus-visible,a:focus-visible,input:focus-visible{outline:3px solid #50aa94;outline-offset:3px}.primary{background:#146653;color:white;border-color:#146653}.shell{max-width:1120px;margin:auto;padding:0 28px}header{display:flex;align-items:center;justify-content:space-between;padding:24px 0;border-bottom:1px solid #d7e1dd}.brand{font-size:24px;font-weight:750;color:#145346;text-decoration:none}.brand span{font-size:13px;margin-left:16px;font-weight:400;color:#5b726c}.intro{margin:48px 0 28px}.eyebrow{font-size:12px;letter-spacing:.18em;color:#477c6b}h1{font-size:32px;letter-spacing:-.03em}h2{font-size:20px;margin-top:0}p,small{line-height:1.7;color:#567068}nav{display:flex;gap:10px;flex-wrap:wrap;margin-bottom:24px}nav [aria-current]{background:#173e39;color:white}.grid{display:grid;grid-template-columns:1fr 1fr;gap:22px}section{background:white;padding:28px;border:1px solid #dce5e0;border-radius:14px;margin-bottom:24px}label{display:block;font-size:14px;margin:18px 0}input,textarea{display:block;width:100%;padding:12px;border:1px solid #acbeb6;border-radius:7px;margin-top:8px}textarea{height:100px;overflow-wrap:anywhere}article{display:flex;justify-content:space-between;align-items:center;gap:20px;padding:20px 0;border-top:1px solid #e2e9e5}article p{overflow-wrap:anywhere;font-size:13px}article button{flex-shrink:0}.error,.notice{padding:14px 18px;border-radius:8px;background:#fce8e4;color:#892f23}.notice{background:#dff1e6;color:#225d3d}pre{background:#edf4ef;padding:16px;white-space:pre-wrap}footer{padding:28px 0;color:#71847c;font-size:12px}@media(max-width:650px){.shell{padding:0 18px}.grid{grid-template-columns:1fr}.intro{margin-top:30px}h1{font-size:27px}section{padding:20px}article{align-items:flex-start;flex-direction:column}.brand span{display:none}}
-select{display:block;width:100%;padding:12px;border:1px solid #acbeb6;border-radius:7px;margin-top:8px}input[type=checkbox]{display:inline-block;width:auto;margin-right:8px}article small{overflow-wrap:anywhere}
-
-.flow-choices{display:flex;gap:8px;flex-wrap:wrap;margin:18px 0}.flow-choices [aria-current]{background:#173e39;color:#fff}
+:root{font-family:Inter,"Noto Sans SC",system-ui,sans-serif;color:var(--fastui-text);background:var(--fastui-page);font-synthesis:none}
+*{box-sizing:border-box}body{margin:0}button,input,textarea,select{font:inherit}
+button,.primary{border:1px solid var(--fastui-border-strong);border-radius:6px;background:var(--fastui-surface);color:var(--fastui-text);padding:10px 16px;cursor:pointer;text-decoration:none;display:inline-block}
+button:disabled{opacity:.5;cursor:not-allowed}button:hover,.primary:hover{background:var(--fastui-selected)}
+button:focus-visible,a:focus-visible,input:focus-visible,textarea:focus-visible,select:focus-visible{outline:2px solid var(--fastui-focus);outline-offset:3px}
+.primary{background:var(--fastui-primary);color:var(--fastui-on-primary);border-color:var(--fastui-primary)}.primary:hover{background:var(--fastui-primary-hover)}
+.shell{max-width:1120px;margin:auto;padding:0 28px}header{display:flex;align-items:center;justify-content:space-between;padding:24px 0;border-bottom:1px solid var(--fastui-border)}
+.brand{font-size:24px;font-weight:750;color:var(--fastui-focus);text-decoration:none}.brand span{font-size:13px;margin-left:16px;font-weight:400;color:var(--fastui-secondary)}
+.intro{margin:48px 0 28px}.eyebrow{font-size:12px;letter-spacing:.08em;color:var(--fastui-muted)}h1{font-size:32px;letter-spacing:-.03em}h2{font-size:20px;margin-top:0}p,small{line-height:1.7;color:var(--fastui-secondary)}
+nav{display:flex;gap:10px;flex-wrap:wrap;margin-bottom:24px}nav [aria-current],.flow-choices [aria-current]{background:var(--fastui-primary);color:var(--fastui-on-primary)}
+.grid{display:grid;grid-template-columns:1fr 1fr;gap:22px}section{background:var(--fastui-surface);padding:28px;border:1px solid var(--fastui-border);border-radius:8px;margin-bottom:24px}
+label{display:block;font-size:14px;margin:18px 0}input,textarea,select{display:block;width:100%;padding:12px;border:1px solid var(--fastui-border-strong);border-radius:5px;margin-top:8px;background:var(--fastui-surface);color:var(--fastui-text)}
+textarea{height:100px;overflow-wrap:anywhere}input[type=checkbox]{display:inline-block;width:auto;margin-right:8px}
+article{display:flex;justify-content:space-between;align-items:center;gap:20px;padding:20px 0;border-top:1px solid var(--fastui-border)}article p{overflow-wrap:anywhere;font-size:13px}article small{overflow-wrap:anywhere}article button{flex-shrink:0}
+.error,.notice{padding:14px 18px;border-radius:6px;background:var(--fastui-danger-fill);color:var(--fastui-danger)}.notice{background:var(--fastui-selected);color:var(--fastui-success)}
+pre{background:var(--fastui-workspace);padding:16px;white-space:pre-wrap}footer{padding:28px 0;color:var(--fastui-muted);font-size:13px}.flow-choices{display:flex;gap:8px;flex-wrap:wrap;margin:18px 0}
+@media(max-width:700px){.shell{padding:0 16px}.grid{grid-template-columns:1fr}section{padding:20px}article{align-items:flex-start;flex-wrap:wrap}h1{font-size:26px}}

From 468ca13d395c6b00069c9ee0a892b80657c56648 Mon Sep 17 00:00:00 2001
From: Hsukqi Lee <team@tsinbei.com>
Date: Wed, 11 Nov 2026 14:44:02 +0800
Subject: [PATCH 2/3] chore: consume verified npm UI and transport releases

---
 web/FASTUI.md      |  2 +-
 web/package.json   |  4 ++--
 web/pnpm-lock.yaml | 24 +++++++++++-------------
 3 files changed, 14 insertions(+), 16 deletions(-)

diff --git a/web/FASTUI.md b/web/FASTUI.md
index f117793..1022e13 100644
--- a/web/FASTUI.md
+++ b/web/FASTUI.md
@@ -1,5 +1,5 @@
 # FastUI console
 
-`@fastrd/ui-react` 与直接使用的 `@fastrd/ui-foundation` 固定消费 GitHub release `v0.1.0`，锁文件保留制品完整性。安装后 `pnpm run build` 将 CSS/JS 打入本地控制台输出，运行时不访问包下载站点。
+`@fastrd/ui-react` 与直接使用的 `@fastrd/ui-foundation` 精确固定消费官方 npm `0.1.2`，锁文件保留制品完整性。安装后 `pnpm run build` 将 CSS/JS 打入本地控制台输出，运行时不访问包下载站点。
 
 console 的加载和成功/错误反馈使用真实 `Loading` / `Alert` React 组件，邀请/恢复表单使用 `TextField` / `Button`；安全表单、导航、管理表格保留业务结构，以 foundation token 替换原绿色色板。`fastcas-theme` 默认为 system；切换系统外观不会重挂载 React 树。业务请求、凭证、CSRF 与管理员权限仍由现有组件管理。
diff --git a/web/package.json b/web/package.json
index 87c8ef1..82dce6e 100644
--- a/web/package.json
+++ b/web/package.json
@@ -8,8 +8,8 @@
     "dev": "vite --host 127.0.0.1"
   },
   "dependencies": {
-    "@fastrd/ui-foundation": "https://github.com/FastR-D/FastUI/releases/download/v0.1.0/fastrd-ui-foundation-0.1.0.tgz",
-    "@fastrd/ui-react": "https://github.com/FastR-D/FastUI/releases/download/v0.1.0/fastrd-ui-react-0.1.0.tgz",
+    "@fastrd/ui-foundation": "0.1.2",
+    "@fastrd/ui-react": "0.1.2",
     "react": "19.2.4",
     "react-dom": "19.2.4"
   },
diff --git a/web/pnpm-lock.yaml b/web/pnpm-lock.yaml
index 6e65741..8f8b0d7 100644
--- a/web/pnpm-lock.yaml
+++ b/web/pnpm-lock.yaml
@@ -9,11 +9,11 @@ importers:
   .:
     dependencies:
       '@fastrd/ui-foundation':
-        specifier: https://github.com/FastR-D/FastUI/releases/download/v0.1.0/fastrd-ui-foundation-0.1.0.tgz
-        version: https://github.com/FastR-D/FastUI/releases/download/v0.1.0/fastrd-ui-foundation-0.1.0.tgz
+        specifier: 0.1.2
+        version: 0.1.2
       '@fastrd/ui-react':
-        specifier: https://github.com/FastR-D/FastUI/releases/download/v0.1.0/fastrd-ui-react-0.1.0.tgz
-        version: https://github.com/FastR-D/FastUI/releases/download/v0.1.0/fastrd-ui-react-0.1.0.tgz(react-dom@19.2.4(react@19.2.4))(react@19.2.4)
+        specifier: 0.1.2
+        version: 0.1.2(react-dom@19.2.4(react@19.2.4))(react@19.2.4)
       react:
         specifier: 19.2.4
         version: 19.2.4
@@ -195,13 +195,11 @@ packages:
     cpu: [x64]
     os: [win32]
 
-  '@fastrd/ui-foundation@https://github.com/FastR-D/FastUI/releases/download/v0.1.0/fastrd-ui-foundation-0.1.0.tgz':
-    resolution: {integrity: sha512-5O4s9BXXHXWk7GbzPfMYX6HjNi0DKryfWLRPYMZINNb4ew3arjCKbJvxFaSvqcCvhHxmrf8OZDg9GPmfvdnRtw==, tarball: https://github.com/FastR-D/FastUI/releases/download/v0.1.0/fastrd-ui-foundation-0.1.0.tgz}
-    version: 0.1.0
+  '@fastrd/ui-foundation@0.1.2':
+    resolution: {integrity: sha512-Jobx7DanQOejVRFfsT5DFXND7rtcvSUzZ5Zui+lY3oAuretz8vwkzqHh1Gd0+ezJubw82WeFsnsXdvbWB4t1YA==}
 
-  '@fastrd/ui-react@https://github.com/FastR-D/FastUI/releases/download/v0.1.0/fastrd-ui-react-0.1.0.tgz':
-    resolution: {integrity: sha512-zsnN8Afm889TyhPX0ZQQ4hIn5Bj1EsFbEZ857CQXDgmCIOEfY3369bCFn1VEelR/EWjU5Lpyjj6D1E9lVtQ5uw==, tarball: https://github.com/FastR-D/FastUI/releases/download/v0.1.0/fastrd-ui-react-0.1.0.tgz}
-    version: 0.1.0
+  '@fastrd/ui-react@0.1.2':
+    resolution: {integrity: sha512-/7WrTu/LrsMWcJKQglQBmpe+sXWj0hGUt66mgrZ3f6B/5dZfb03xdrbPSKRRGFmCA8H6O8stmU9oOFMSuW7YHQ==}
     peerDependencies:
       react: ^18.3.0 || ^19.0.0
       react-dom: ^18.3.0 || ^19.0.0
@@ -555,11 +553,11 @@ snapshots:
   '@esbuild/win32-x64@0.25.12':
     optional: true
 
-  '@fastrd/ui-foundation@https://github.com/FastR-D/FastUI/releases/download/v0.1.0/fastrd-ui-foundation-0.1.0.tgz': {}
+  '@fastrd/ui-foundation@0.1.2': {}
 
-  '@fastrd/ui-react@https://github.com/FastR-D/FastUI/releases/download/v0.1.0/fastrd-ui-react-0.1.0.tgz(react-dom@19.2.4(react@19.2.4))(react@19.2.4)':
+  '@fastrd/ui-react@0.1.2(react-dom@19.2.4(react@19.2.4))(react@19.2.4)':
     dependencies:
-      '@fastrd/ui-foundation': https://github.com/FastR-D/FastUI/releases/download/v0.1.0/fastrd-ui-foundation-0.1.0.tgz
+      '@fastrd/ui-foundation': 0.1.2
       react: 19.2.4
       react-dom: 19.2.4(react@19.2.4)
 

From cdda8089e5e445e4a1d2c7fffc7567fe0cc542b2 Mon Sep 17 00:00:00 2001
From: GuGuMur <2221533105@qq.com>
Date: Wed, 11 Nov 2026 23:25:05 +0800
Subject: [PATCH 3/3] Prepare FastDeploy v2.0.2 production deployment

---
 .github/workflows/publish.yml    | 3 ++-
 .github/workflows/rollback.yml   | 2 +-
 .github/workflows/tag-ci.yml     | 4 ++--
 docs/fastdeploy.md               | 2 +-
 internal/httpapi/console.go      | 4 ++++
 internal/httpapi/console_test.go | 2 +-
 6 files changed, 11 insertions(+), 6 deletions(-)

diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 7b4acd4..9b72835 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -2,7 +2,8 @@ name: Publish SDKs
 
 on:
   push:
-    tags: ['v*']
+    # Server deployments must not publish language packages.
+    tags: ['v*', '!v*-deploy.*']
   workflow_dispatch:
     inputs:
       release_tag:
diff --git a/.github/workflows/rollback.yml b/.github/workflows/rollback.yml
index 7a9ecb0..4401bc6 100644
--- a/.github/workflows/rollback.yml
+++ b/.github/workflows/rollback.yml
@@ -14,7 +14,7 @@ permissions:
 jobs:
   rollback:
     if: github.ref == 'refs/heads/main'
-    uses: FastR-D/FastDeploy/.github/workflows/rollback.yml@cc223a0b83b0ef2389974dd70a4b74148cd1af87
+    uses: FastR-D/FastDeploy/.github/workflows/rollback.yml@9a2c51dcd63f47a0e6c8f6bb07bd22ea589abbd2
     with:
       app: fastcas
       expected-release: ${{ inputs.expected-release }}
diff --git a/.github/workflows/tag-ci.yml b/.github/workflows/tag-ci.yml
index 2ddb513..8834101 100644
--- a/.github/workflows/tag-ci.yml
+++ b/.github/workflows/tag-ci.yml
@@ -39,7 +39,7 @@ jobs:
         uses: actions/checkout@v4
         with:
           repository: FastR-D/FastDeploy
-          ref: cc223a0b83b0ef2389974dd70a4b74148cd1af87
+          ref: 9a2c51dcd63f47a0e6c8f6bb07bd22ea589abbd2
           path: .fastdeploy-tools
           persist-credentials: false
       - name: Package the tested runtime
@@ -54,7 +54,7 @@ jobs:
   deploy:
     needs: validate
     if: startsWith(github.ref, 'refs/tags/v')
-    uses: FastR-D/FastDeploy/.github/workflows/deploy.yml@cc223a0b83b0ef2389974dd70a4b74148cd1af87
+    uses: FastR-D/FastDeploy/.github/workflows/deploy.yml@9a2c51dcd63f47a0e6c8f6bb07bd22ea589abbd2
     with:
       app: fastcas
       artifact-name: release-${{ github.sha }}
diff --git a/docs/fastdeploy.md b/docs/fastdeploy.md
index 14d0bb8..114de8b 100644
--- a/docs/fastdeploy.md
+++ b/docs/fastdeploy.md
@@ -4,7 +4,7 @@
 
 普通运行参数直接写在该 workflow 的 `runtime-env`，使用字面 `KEY=value`，不要加 shell 引号。敏感值用该文件 `runtime-secrets` 中的同名仓库 Secrets，使用 `toJSON` 保留特殊字符。SSH 五项来自 FastR-D 组织的 `FASTRD_SSH_*` Secrets；请勿把凭证写入 YAML 或构建产物。
 
-构建 job 上传同一次运行的 `release.tar.gz` 和 `manifest.json`。FastDeploy 和打包器均固定到完整提交 `cc223a0b83b0ef2389974dd70a4b74148cd1af87`，服务器不拉源码或重新安装依赖。代码相对路径由 [FastDeploy 应用配置](https://github.com/FastR-D/FastDeploy/blob/cc223a0b83b0ef2389974dd70a4b74148cd1af87/config/apps.json) 注入，业务数据使用其中记录的原持久化路径。
+构建 job 上传同一次运行的 `release.tar.gz` 和 `manifest.json`。FastDeploy 和打包器均固定到完整提交 `9a2c51dcd63f47a0e6c8f6bb07bd22ea589abbd2`，服务器不拉源码或重新安装依赖。代码相对路径由 [FastDeploy 应用配置](https://github.com/FastR-D/FastDeploy/blob/9a2c51dcd63f47a0e6c8f6bb07bd22ea589abbd2/config/apps.json) 注入，业务数据使用其中记录的原持久化路径。
 
 发布示例（版本号每次必须唯一）：
 
diff --git a/internal/httpapi/console.go b/internal/httpapi/console.go
index b2657c9..e540993 100644
--- a/internal/httpapi/console.go
+++ b/internal/httpapi/console.go
@@ -22,6 +22,10 @@ func Console(api http.Handler, dir string) (http.Handler, error) {
 	}
 	files := http.StripPrefix("/console/", http.FileServer(http.Dir(dir)))
 	return http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
+		if r.URL.Path == "/" && (r.Method == "GET" || r.Method == "HEAD") {
+			http.Redirect(w, r, "/console/", http.StatusTemporaryRedirect)
+			return
+		}
 		if r.URL.Path == "/console" {
 			http.Redirect(w, r, "/console/", http.StatusTemporaryRedirect)
 			return
diff --git a/internal/httpapi/console_test.go b/internal/httpapi/console_test.go
index 409a11c..8b88132 100644
--- a/internal/httpapi/console_test.go
+++ b/internal/httpapi/console_test.go
@@ -29,7 +29,7 @@ func TestConsoleRoutingAndSecurityHeaders(t *testing.T) {
 	tests := []struct {
 		method, path string
 		want         int
-	}{{"GET", "/api/v1/me", 201}, {"GET", "/console", 307}, {"GET", "/console/", 200}, {"HEAD", "/console/assets/app.js", 200}, {"GET", "/console/assets/app.js", 200}, {"GET", "/console/other", 404}, {"GET", "/console/.vite/manifest.json", 404}, {"POST", "/console/", 405}}
+	}{{"GET", "/", 307}, {"HEAD", "/", 307}, {"GET", "/api/v1/me", 201}, {"GET", "/console", 307}, {"GET", "/console/", 200}, {"HEAD", "/console/assets/app.js", 200}, {"GET", "/console/assets/app.js", 200}, {"GET", "/console/other", 404}, {"GET", "/console/.vite/manifest.json", 404}, {"POST", "/console/", 405}}
 	for _, tc := range tests {
 		req := httptest.NewRequest(tc.method, tc.path, nil)
 		rec := httptest.NewRecorder()