feat: replace dashboard with Solid SPA

Replace the legacy dashboard with the Solid.js SPA, add frontend build fallback support, and add required PR checks.

Author: EterUltimate

.github/workflows/codeql.yml

@@ -0,0 +1,32 @@
+name: CodeQL
+
+on:
+  pull_request:
+    types: [opened, synchronize, reopened]
+  push:
+    branches: [main]
+  schedule:
+    - cron: "24 3 * * 1"
+
+permissions:
+  actions: read
+  contents: read
+  security-events: write
+
+jobs:
+  analyze:
+    name: Analyze (python)
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+
+      - name: Initialize CodeQL
+        uses: github/codeql-action/init@v4
+        with:
+          languages: python
+
+      - name: Perform CodeQL analysis
+        uses: github/codeql-action/analyze@v4
+        with:
+          category: "/language:python"

.github/workflows/dashboard-ci.yml

@@ -0,0 +1,47 @@
+name: Dashboard CI
+
+on:
+  pull_request:
+    types: [opened, synchronize, reopened]
+
+permissions:
+  contents: read
+
+jobs:
+  build:
+    name: build
+    runs-on: ubuntu-latest
+    defaults:
+      run:
+        working-directory: web_src
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+
+      - name: Set up pnpm
+        uses: pnpm/action-setup@v4
+        with:
+          version: 10
+
+      - name: Set up Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: "22"
+          cache: pnpm
+          cache-dependency-path: web_src/pnpm-lock.yaml
+
+      - name: Install dashboard dependencies
+        run: pnpm install --frozen-lockfile
+
+      - name: Type-check dashboard
+        run: pnpm typecheck
+
+      - name: Test dashboard
+        run: pnpm test
+
+      - name: Build dashboard
+        run: pnpm build
+
+      - name: Verify committed dashboard artifacts
+        working-directory: .
+        run: git diff --exit-code -- web_res/static/dashboard

.github/workflows/format-check.yml

@@ -0,0 +1,21 @@
+name: Code Format Check
+
+on:
+  pull_request:
+    types: [opened, synchronize, reopened]
+
+permissions:
+  contents: read
+
+jobs:
+  format-check:
+    name: format-check
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+
+      - name: Check whitespace formatting
+        run: git diff --check "${{ github.event.pull_request.base.sha }}" "${{ github.sha }}"

.github/workflows/smoke-test.yml

@@ -0,0 +1,63 @@
+name: Smoke Test
+
+on:
+  pull_request:
+    types: [opened, synchronize, reopened]
+
+permissions:
+  contents: read
+
+jobs:
+  smoke-test:
+    name: Smoke test (${{ matrix.os }}, Python ${{ matrix.python-version }})
+    runs-on: ${{ matrix.os }}
+    env:
+      PYTHONPATH: ${{ github.workspace }}/..
+    strategy:
+      fail-fast: false
+      matrix:
+        os: [ubuntu-latest, windows-latest]
+        python-version: ["3.10", "3.11", "3.12", "3.13", "3.14"]
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+
+      - name: Expose legacy package import path
+        if: runner.os != 'Windows'
+        run: ln -sfn "$GITHUB_WORKSPACE" "$(dirname "$GITHUB_WORKSPACE")/self_learning_EterU"
+
+      - name: Expose legacy package import path on Windows
+        if: runner.os == 'Windows'
+        shell: pwsh
+        run: |
+          $aliasPath = Join-Path (Split-Path $env:GITHUB_WORKSPACE -Parent) "self_learning_EterU"
+          if (-not (Test-Path $aliasPath)) {
+            New-Item -ItemType Junction -Path $aliasPath -Target $env:GITHUB_WORKSPACE | Out-Null
+          }
+
+      - name: Set up Python
+        uses: actions/setup-python@v5
+        with:
+          python-version: ${{ matrix.python-version }}
+          cache: pip
+          cache-dependency-path: requirements-test.txt
+
+      - name: Install smoke test dependencies
+        if: matrix.python-version != '3.14'
+        run: |
+          python -m pip install --upgrade pip
+          python -m pip install -r requirements-test.txt
+          python -m pip install "astrbot>=4.14,<4.15" aiohttp "emoji==2.14.1" "hypercorn==0.17.3" jieba quart "quart_cors==0.8.0" pydantic "sqlalchemy[asyncio]" aiosqlite asyncpg "cachetools>=5.3.0" apscheduler "defusedxml>=0.7.1"
+
+      - name: Install smoke test dependencies for Python 3.14
+        if: matrix.python-version == '3.14'
+        run: |
+          python -m pip install --upgrade pip
+          python -m pip install -r requirements-test.txt
+          python -m pip install "astrbot>=4.24,<5" aiohttp "emoji==2.14.1" "hypercorn==0.17.3" jieba quart "quart_cors==0.8.0" pydantic "sqlalchemy[asyncio]" aiosqlite asyncpg "cachetools>=5.3.0" apscheduler "defusedxml>=0.7.1"
+
+      - name: Compile Python files
+        run: python -m compileall .
+
+      - name: Run smoke tests
+        run: python -m pytest tests/integration/test_package_imports.py tests/integration/test_webui_static_assets.py --no-cov

.github/workflows/unit-tests.yml

@@ -0,0 +1,37 @@
+name: Unit Tests
+
+on:
+  pull_request:
+    types: [opened, synchronize, reopened]
+
+permissions:
+  contents: read
+
+jobs:
+  pytest:
+    name: Run pytest suite
+    runs-on: ubuntu-latest
+    env:
+      PYTHONPATH: ${{ github.workspace }}/..
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+
+      - name: Expose legacy package import path
+        run: ln -sfn "$GITHUB_WORKSPACE" "$(dirname "$GITHUB_WORKSPACE")/self_learning_EterU"
+
+      - name: Set up Python
+        uses: actions/setup-python@v5
+        with:
+          python-version: "3.11"
+          cache: pip
+          cache-dependency-path: requirements-test.txt
+
+      - name: Install test dependencies
+        run: |
+          python -m pip install --upgrade pip
+          python -m pip install -r requirements-test.txt
+          python -m pip install "astrbot>=4.14,<4.15" aiohttp "emoji==2.14.1" "hypercorn==0.17.3" jieba quart "quart_cors==0.8.0" pydantic "sqlalchemy[asyncio]" aiosqlite asyncpg "cachetools>=5.3.0" apscheduler "defusedxml>=0.7.1" psutil aiomysql "prometheus_client>=0.20.0" "prometheus-async>=22.2.0" "networkx>=3.2,<3.5" "numpy>=1.26,<2.3" "pandas>=2.1,<2.4" "scikit_learn>=1.4,<1.8"
+
+      - name: Run pytest suite
+        run: python -m pytest --no-cov

main.py

@@ -178,6 +178,7 @@ def __init__(self, context: Context, config: AstrBotConfig = None) -> None:
             self.plugin_config, self.context, self.group_id_to_unified_origin
         )
         self._register_official_page_api_if_available()
+        self._trigger_dashboard_autobuild()
 
         logger.info(StatusMessages.PLUGIN_INITIALIZED)
 
@@ -202,6 +203,35 @@ def _register_official_page_api_if_available(self) -> None:
             self.page_api = None
             logger.warning(f"官方插件页面 API 注册失败，已跳过: {exc}", exc_info=True)
 
+    def _trigger_dashboard_autobuild(self) -> None:
+        """后台检测并自动构建 Dashboard 前端（仅在产物缺失时触发）。
+
+        - 产物已就绪则直接跳过（生产环境随仓库分发，开箱即用）。
+        - 缺失时以 ``asyncio.create_task`` 后台执行，绝不阻塞插件启动，
+          任何异常仅记录日志，不影响插件加载。
+        """
+        try:
+            plugin_root = os.path.dirname(os.path.abspath(__file__))
+            from .webui.frontend_builder import (
+                dashboard_artifact_exists,
+                ensure_dashboard_built,
+            )
+
+            if dashboard_artifact_exists(plugin_root):
+                return
+
+            loop = asyncio.get_running_loop()
+            _t = loop.create_task(ensure_dashboard_built(plugin_root))
+            bg = getattr(self, "background_tasks", None)
+            if bg is not None:
+                bg.add(_t)
+                _t.add_done_callback(bg.discard)
+        except Exception as exc:
+            logger.warning(
+                f"[WebUI] Dashboard 自动构建触发失败（不影响插件运行）：{exc}",
+                exc_info=True,
+            )
+
     async def initialize(self):
         """AstrBot 在完成 handler 绑定后调用此方法"""
         await self._lifecycle.on_load()

pytest.ini

@@ -50,6 +50,7 @@ markers =
     config: Configuration tests
     utils: Utility module tests
     quality: Quality monitoring tests
+    security: Security-related tests
 
 # Log output
 log_cli = true

statics/messages.py

@@ -240,7 +240,6 @@ class FileNames:
 class TemplateNames:
     """HTML 模板名称"""
     LOGIN = "login.html"
-    INDEX = "index.html"
     CHANGE_PASSWORD = "change_password.html"