mirror of
https://github.com/labring/FastGPT.git
synced 2026-05-02 01:02:05 +08:00
6b61359516
* fix(sandbox): 重构代码沙盒,支持内置函数和网络请求 (#6462) * feat(sandbox): 重写代码沙盒 - Bun + Hono + 统一子进程模型 - 运行时: Node.js → Bun - HTTP 框架: NestJS + Fastify → Hono - JS 执行: isolated-vm → Bun 子进程(与 Python 统一) - 架构: 统一子进程模型,JS 和 Python 共享同一套执行引擎 - SubprocessRunner 基类,JS/Python 各自继承 - ProcessPool 进程池预热(SANDBOX_JS_POOL_SIZE / SANDBOX_PYTHON_POOL_SIZE) - SystemHelper 命名空间(JS 端保留向后兼容全局函数) - 临时文件系统隔离 + 路径遍历防护 + 磁盘配额 - 请求级资源限制(timeoutMs / memoryMB / diskMB) - JS: 原型链冻结 + Bun API 禁用 + Function 构造器注入 safe require(模块白名单) - Python: 宿主侧正则预检 + __import__ 拦截 + resource 限制 - 移除: @nestjs/*(6个包)、fastify、isolated-vm、node-gyp、reflect-metadata、rxjs - 新增: hono - 保留: tiktoken - 新增用户可用包: lodash、dayjs、axios、moment、uuid、crypto-js、qs - 67 个测试全部通过(单元测试 + 安全测试 + 集成测试) - vitest 独立配置,不影响全局 * fix(sandbox): 安全加固 - 扩展 Bun API 封锁、清理 process.env、闭包封装 Python import 拦截 - JS: 扩展 Bun 危险 API 封锁列表(serve/connect/listen/udpSocket/dns/plugin/build/Transpiler) - JS: 清理 process.env,仅保留沙箱必要变量,防止泄露敏感环境变量 - Python: 用闭包封装 _safe_import,del 掉 _original_import/_make_safe_import/_BLOCKED_MODULES 防止用户代码恢复原始 __import__ - Dockerfile: 复制 bun.lock 并使用 --frozen-lockfile 确保构建可复现 * fix(sandbox): 将 sandbox 从 pnpm workspace 中移除,独立管理依赖 * fix(sandbox): 从全局 vitest 移除 sandbox 测试,集成测试无 SANDBOX_URL 时跳过 * ci(sandbox): 添加独立测试 workflow,仅 sandbox 代码变更时触发 * refactor(sandbox): 使用 export default 启动方式,与 sandbox_server 保持一致 * fix: sandbox security hardening & comprehensive test suite Security fixes: - JS: freeze Function constructor to block constructor.constructor escape - JS: handle undefined return from main() (serialize as null) - Python: fix http_request using from-import after __import__ interception - Python: __import__ whitelist mode blocks exec/eval import bypasses New tests (223 passing): - security/escape-attacks: JS/Python escape attack vectors - security/network-security: IP blacklist, protocol restrictions, httpRequest - compat/legacy-js: 18 backward compatibility tests - compat/legacy-python: 21 backward compatibility tests - boundary: timeout, memory, disk, edge cases - examples: common user code patterns * feat(sandbox): env vars for all limits + rewrite README - Network limits configurable via env: SANDBOX_MAX_REQUESTS, SANDBOX_REQUEST_TIMEOUT, SANDBOX_MAX_RESPONSE_SIZE - Resource upper bounds configurable: SANDBOX_MAX_TIMEOUT, SANDBOX_MAX_MEMORY_MB, SANDBOX_MAX_DISK_MB - README: architecture, API docs, env var reference, how to add JS/Python packages, security overview, built-in functions * refactor(sandbox): extract env.ts with dotenv for typed env loading - New env.ts: dotenv.config() + typed helpers (str/int/bool) - config.ts re-exports env for backward compatibility - index.ts imports env first to ensure .env loaded before anything else * refactor(sandbox): use zod for env validation and type coercion - Replace manual parseInt/str helpers with zod schema + coerce - Invalid env vars now fail fast with formatted error on startup - dotenv + zod, clean and declarative * chore(sandbox): remove unused process pool code - Delete pool.ts and pool.test.ts (pool was never wired into runners) - Remove PoolConfig/PooledProcess types - Remove pool env vars from env.ts - Clean up README * feat(sandbox): add concurrency limiter with semaphore - New Semaphore utility for max concurrent subprocess control - SANDBOX_MAX_CONCURRENCY env var (default 50) - Excess requests queue instead of spawning unbounded processes - Health endpoint exposes concurrency stats (current/queued/max) * test(sandbox): add semaphore tests and expand coverage to 292 cases - New semaphore.test.ts (11 tests): acquire/release, queuing, FIFO, stats, serial execution - JS runner: blank code, template literals, primitive returns, more modules, unicode, partial limits - Python runner: blank code, triple quotes, primitive returns, unicode, null vars, division errors - JS security: process.exit, globalThis, Symbol.unscopables, Proxy, dynamic import, path traversal - Python security: pickle/multiprocessing/threading/ctypes/signal, exec bypass, __subclasses__ - Escape attacks: type() class creation, __builtins__ tampering, getattr access - Boundary: long vars, special JSON chars, float precision, big ints, circular refs, Promise.reject * test(sandbox): test-master review - add 31 tests, coverage report - base-runner.test.ts (10): BaseRunner precheck, temp dir, semaphore integration - semaphore-race.test.ts (5): race conditions, rapid acquire/release, stress test - coverage-gaps.test.ts (16): security coverage gaps found during review - REVIEW-REPORT.md: full test audit report Total: 323 passed, 0 failed * fix(sandbox): address PR #6439 review issues Security fixes: - Intercept Python builtins.open(), restrict file access to sandbox tmpdir - Remove unused pool.ts, warmup.mjs, warmup.py (security risk) - Fix DNS rebinding TOCTOU: use resolved IP for HTTP connections - Fix symlink path traversal: use realpath instead of normpath - Add try/finally cleanup for __import__ hook Robustness: - Add __SANDBOX_RESULT__ prefix to stdout parsing, prevent user output interference - Fix disk quota tracking: deduct old file size on overwrite - Add __import__() pattern scanning in Python precheck Tests: - Fix eval+__import__ test assertion (accept both catch and fail paths) All 323 tests passing. * fix(sandbox): remove warmup scripts COPY from Dockerfile * docs(sandbox): add technical design document * feat(sandbox): configurable module allowlist/blocklist via env vars - SANDBOX_JS_ALLOWED_MODULES: JS require whitelist (comma-separated) - SANDBOX_PYTHON_BLOCKED_MODULES: Python import blacklist (comma-separated) - Defaults unchanged, fully backward compatible * fix(sandbox): 修复多个安全漏洞 1. Python HTTPS DNS rebinding: HTTPS 请求现在也使用 resolved IP 发起连接 2. Python __import__ hook 恢复漏洞: 移除 finally 块中恢复原始 __import__ 的代码 3. Python 内部变量泄露: 用户代码执行前删除 _os, _socket 等内部模块引用 4. JS process 危险 API: 禁用 process.binding/dlopen/kill/chdir 等,冻结 process.env 5. Python open() fd 绕过: 阻止通过整数文件描述符绕过路径检查 6. API 输入校验: 使用 zod schema 校验请求体,限制代码大小 1MB 7. 无认证警告: SANDBOX_TOKEN 未设置时输出生产环境警告 新增 security-fixes.test.ts 包含所有修复的回归测试 * test: consolidate security tests + add integration test suite - Merge 6 security test files into 1 consolidated security.test.ts (109 tests) - JS/Python module interception (precheck + runtime) - JS escape attacks (prototype, constructor, Reflect, globalThis) - Python escape attacks (__import__ hook, exec/eval, internal vars, __subclasses__) - SSRF protection (private IPs, cloud metadata, file protocol) - File system isolation (path traversal, fd, disk quota) - Variable injection attacks - API input validation - Add black-box integration test suite functional.test.ts (56 tests) - Basic operations (math, string, array, JSON, regex, Date, Promise, Map/Set) - Variable passing (string, number, complex objects, empty, multiple) - Whitelisted modules (crypto-js, moment, lodash) - SystemHelper/system_helper (fs, delay, strToBase64, httpRequest) - Error handling (syntax, runtime, undefined var, timeout) - Network requests (GET, POST) - Complex scenarios (CSV pipeline, recursion, class definition) - Remove 34 duplicate test cases across merged files - Total: 363 passed, 8 skipped (integration API tests need server) * fix(sandbox): z.record() zod v4 compatibility - add key type param * feat(sandbox): add .env.template with all config options and comments * refactor(sandbox): remove disk write support and temp filesystem * test(sandbox): remove all fs-related tests and add test case inventory - Remove fs read/write tests from unit, integration, boundary, examples - Remove path traversal, absolute path, open fd, builtins.open tests from security - Add comprehensive test/case.md with all 344 test cases categorized - All tests pass: 344 passed, 8 skipped, 0 failed * feat(sandbox): add GET /sandbox/modules API to list available packages and builtins * test(sandbox): add unit tests for GET /sandbox/modules API * refactor(test): rewrite api.test.ts to use app.request() - no external server needed * feat(sandbox): validate SANDBOX_TOKEN charset in env schema (ASCII printable only) * chore(sandbox): remove DESIGN.md and package-lock.json from PR * feat(sandbox): replace spawn-per-request with process pool architecture - Add ProcessPool (JS) and PythonProcessPool with long-lived worker processes - Workers communicate via stdin/stdout line-based JSON protocol - Pool size configurable via SANDBOX_POOL_SIZE env var (default 20) - Auto-respawn workers on crash - Semaphore-based queueing when requests exceed pool size Performance gains (simple functions): - JS: 22 QPS → 1,328 QPS (60x improvement) - Python: 14.7 QPS → 3,395 QPS (231x improvement) - Fix import.meta.dir compatibility for vitest (Node) environments - Export poolReady promise for test initialization - Add benchmark scripts to test/benchmark/ - All 354 tests passing (12 test files) * chore(sandbox): clean up unused files, update README with pool architecture - Remove test/REVIEW-REPORT.md, test/case.md, test/benchmark.ts (obsolete) - Rewrite README: pool architecture diagram, performance benchmarks, SANDBOX_POOL_SIZE config, project structure, health endpoint format * fix(sandbox): 修复进程池超时后 worker respawn 竞态条件 根因:超时 kill worker 后,exit 事件是异步的,release() 先执行时 worker 还在列表里,死 worker 被放回 idle 池,后续请求发给死进程。 修复: - 超时回调中先 removeWorker 再 kill,防止 release 归还死 worker - removeWorker 返回 bool,exit 事件中避免重复 respawn - 超时回调主动触发 spawnWorker 补充池 - release 检查 worker 是否仍在池中 - spawnWorker 完成时检查 waitQueue 直接分配 * fix: security hardening & test migration to process pool - JS worker: harden process object (kill/chdir/env freeze/binding/dlopen) - Python worker: stack-frame based __import__ hook to block exec/eval bypass - Python worker: BuiltinsProxy to prevent __import__ override via builtins module - Python worker: restricted __builtins__ dict in exec_globals (no internal refs) - Python worker: restore __import__ before each execution - Migrate all 9 test files from JsRunner/PythonRunner to ProcessPool/PythonProcessPool - Configure vitest for serial execution (pool size=1, fileParallelism: false) - Fix security test assertion for builtins tampering (success=true with escaped=false) - All 102 security tests passing * docs(sandbox): update README with accurate benchmark data, remove non-existent features - Update performance table with latest benchmark results (JS 1414 QPS, Python 4247 QPS) - Remove SANDBOX_DISK_MB/SANDBOX_MAX_DISK_MB env vars (not implemented) - Remove SystemHelper.fs.* / system_helper.fs.* docs (not implemented in workers) - Fix security section to match actual implementation - Update test count to 351 * refactor(sandbox): remove legacy runner/sandbox/template code - Delete src/runner/ (base.ts, js-runner.ts, python-runner.ts) - Delete src/sandbox/ (js-template.ts, python-template.ts, network-config.ts) - Delete test/unit/js-runner.test.ts, test/unit/python-runner.test.ts - Keep src/utils/semaphore.ts (generic utility, has its own tests) - Update README project structure and test count (297 cases) All functionality is now in src/pool/ (process-pool architecture). 297 tests passing, 0 failures. * test(sandbox): add process pool lifecycle/respawn/concurrency tests - ProcessPool: init/shutdown/stats, worker crash respawn, timeout respawn, pool-full queuing, concurrent crash isolation - PythonProcessPool: init/shutdown/stats, timeout respawn, queuing - 14 new test cases, total 311 passing * fix(sandbox): ping/pong health check, replace httpbin.org with baidu.com - Worker health check: send actual ping message and verify pong response instead of only checking stdin.writable (detects stuck workers) - JS worker.ts: handle {type:'ping'} → reply {type:'pong'} - Python worker.py: handle {type:'ping'} → reply {type:'pong'} - ProcessPool/PythonProcessPool: rewrite pingWorker to send ping, wait for pong with timeout, replace worker on failure - Replace all httpbin.org URLs with www.baidu.com in tests (httpbin.org unreachable from China/Sealos Devbox) - Add 4 new health check tests (ping/pong for JS and Python pools) - All 318 tests passing, 0 failures * docs: add test report (test/README.md) and update README testing section - test/README.md: detailed report with 315 passed / 3 skipped / 0 failed - README.md: updated test section with coverage dimensions table and link to report * docs: add functional test cases checklist (110 cases) * fix(sandbox): fix Dockerfile Python env and import detection 1. Dockerfile: Remove broken multi-stage Python 3.11 copy. - The previous approach copied python3 binary from python:3.11-alpine but missed libpython3.11.so.1.0, causing Python pool init failure. - Now uses system Python from apk and installs pip packages directly. 2. worker.py: Fix false positive import blocking for third-party packages. - numpy/pandas were blocked because their internal 'import os' was detected as user-initiated (full stack scan found user code frames). - Changed to check only the direct caller frame: if the import comes from site-packages (third-party lib internals), allow it. - Direct user imports of blocked modules are still properly rejected. * fix(sandbox): block dynamic import() and restrict file system access Security fixes found during deep review: 1. JS: Block import() dynamic imports that bypass require whitelist. - import('fs') could read arbitrary files on the container. - Added static regex check to reject code containing import(). 2. Python: Restrict open() to prevent user code from reading files. - open('/etc/passwd') was accessible from user code. - Added _restricted_open() that checks caller frame: only allows stdlib/site-packages internal calls, blocks user code (<string>). 3. Python: Remove duplicate return statement in _safe_import. All 315 tests pass (3 skipped). * test(sandbox): add regression tests for import() and open() security fixes - JS: import('fs'), import('child_process'), import('os') blocked - JS: string containing 'import' not false-positive - Python: open('/etc/passwd'), open('/proc/self/environ'), open('/tmp/evil.txt', 'w') blocked - Python: numpy internal open() not affected (conditional on numpy availability) Total: 322 passed | 3 skipped (was 315 passed) * docs(sandbox): rewrite sandbox documentation with JS + Python coverage - Add Python language support documentation - Add httpRequest/http_request function docs - Add available modules list (JS whitelist + Python safe modules) - Add security restrictions section - Add practical examples (data processing, date calc, webhook signing) - Add JS/Python function name mapping table * docs(sandbox): use SystemHelper/system_helper for built-in functions Direct calls (countToken, delay, etc.) are deprecated (kept for compat). All examples now use SystemHelper.xxx() / system_helper.xxx(). * docs(sandbox): Python only show named-params style as recommended * feat(sandbox): unify Python SystemHelper API with camelCase aliases - Add camelCase aliases to Python SystemHelper: countToken, strToBase64, createHmac, httpRequest (matching JS API exactly) - Update docs to use SystemHelper uniformly for both JS and Python - snake_case methods (count_token, etc.) still work for backward compat * feat(sandbox): add matplotlib and increase HTTP timeout to 60s - Add matplotlib to Python dependencies - Increase HTTP request timeout from 10s to 60s (both JS and Python) - Update docs accordingly * docs(sandbox): split docs for old/new sandbox versions - sandbox.mdx → '代码运行(旧版)' for FastGPT ≤ 4.14.7 (URL unchanged) - sandbox-v5.mdx → '代码运行' for FastGPT ≥ 4.14.8 - Both pages cross-link to each other - meta.json updated: sandbox-v5 listed before sandbox * docs: rename old sandbox doc to 代码运行(弃) * refactor(sandbox): remove SANDBOX_TIMEOUT, use SANDBOX_MAX_TIMEOUT as unified timeout * fix(sandbox): add build dependencies for matplotlib in Dockerfile * refactor(sandbox): migrate Python from blocklist to allowlist for module control - Change SANDBOX_PYTHON_BLOCKED_MODULES to SANDBOX_PYTHON_ALLOWED_MODULES - Update Python worker to use allowlist instead of blocklist - Add comprehensive safe module list: math, json, datetime, numpy, pandas, etc. - Improve error message: 'Module X is not in the allowlist' - Consistent with JS allowlist approach for better security * fix(sandbox): add _strptime to allowlist and update test assertions - Add _strptime module (required by datetime.strptime) - Update test assertions for Python module import errors - All 325 tests now pass (322 passed, 3 skipped) * fix(docs): center SVG icon in size-5 container on medium screens * docs(sandbox): simplify built-in functions and improve module documentation - Remove delay, countToken, strToBase64, createHmac functions (keep only httpRequest) - Convert Python module list to table format (10 tables by category) - Reorganize usage examples with collapsible sections (JS and Python) - Fix icon alignment in desktop/mobile sidebar navigation - All 325 tests passing --------- Co-authored-by: Lobster 3 <lobster3@sandbox.dev> Co-authored-by: OpenClaw Bot <bot@openclaw.ai> Co-authored-by: Archer <c121914yu@gmail.com> Co-authored-by: archer <archer@archerdeMac-mini.local> * perf: code sandbox * update action * Update projects/app/src/components/core/chat/ChatContainer/ChatBox/index.tsx Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com> * update timeout * update memory limit function * sandbox * perf: process poll * env template * feat: code tip * fix: code sandbox error tip * update memory limit fn * update memory limit fn * fix: test * fix: test * fix: sandbox --------- Co-authored-by: Archer <archer@fastgpt.io> Co-authored-by: Lobster 3 <lobster3@sandbox.dev> Co-authored-by: OpenClaw Bot <bot@openclaw.ai> Co-authored-by: Archer <c121914yu@gmail.com> Co-authored-by: archer <archer@archerdeMac-mini.local> Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
555 lines
12 KiB
CSS
555 lines
12 KiB
CSS
@import 'tailwindcss';
|
|
@import 'fumadocs-ui/css/preset.css';
|
|
|
|
@font-face {
|
|
font-family: 'Alef';
|
|
src: url('/fonts/Alef-Regular.ttf') format('truetype');
|
|
}
|
|
|
|
/* 在文件开头添加这些基础变量 */
|
|
:root {
|
|
/* 基础颜色 */
|
|
--primary-50-hsl: 210, 40%, 98%;
|
|
--primary-hsl: 217, 91%, 60%;
|
|
--emerald-50-hsl: 152, 81%, 96%;
|
|
--emerald-500-hsl: 152, 76%, 40%;
|
|
--cardinal-50-hsl: 0, 86%, 97%;
|
|
--cardinal-500-hsl: 0, 74%, 42%;
|
|
--yellow-50-hsl: 55, 92%, 95%;
|
|
--yellow-500-hsl: 45, 93%, 47%;
|
|
--blue-500-hsl: 217, 91%, 60%;
|
|
--fd-layout-width: 1400px;
|
|
|
|
/* 文本颜色 */
|
|
--text-default: #374151;
|
|
--text-default-inv: #ffffff;
|
|
--text-muted: #6b7280;
|
|
--content-link-color: #2563eb;
|
|
|
|
/* 其他变量 */
|
|
--font-size-sm: 0.875rem;
|
|
--gray-200: #e5e7eb;
|
|
--gray-700: #374151;
|
|
--gray-800: #1f2937;
|
|
--gray-900: #111827;
|
|
|
|
/* 组件颜色 */
|
|
--primary-200: #bfdbfe;
|
|
--blue-200: #bfdbfe;
|
|
--blue-800: #1e40af;
|
|
--emerald-200: #a7f3d0;
|
|
--emerald-800: #065f46;
|
|
--cardinal-200: #fecaca;
|
|
--cardinal-800: #991b1b;
|
|
--yellow-200: #fde68a;
|
|
--yellow-800: #92400e;
|
|
|
|
/* Tabs 样式 */
|
|
--nav-tabs-border-width: none;
|
|
--nav-tabs-link-active-bg: none;
|
|
--nav-tabs-link-active-color: var(--text-default);
|
|
--nav-tabs-border-color: var(--gray-400);
|
|
}
|
|
|
|
[data-dark-mode] {
|
|
/* Tabs 样式 */
|
|
--nav-tabs-border-color: var(--gray-800);
|
|
|
|
--text-muted: #9ca3af;
|
|
--content-link-color: #60a5fa;
|
|
}
|
|
|
|
/* 全局代码块样式 */
|
|
pre,
|
|
code {
|
|
border-radius: 16px;
|
|
background: #f5f6f7;
|
|
font-family: Alef;
|
|
font-size: 1rem;
|
|
font-weight: 400;
|
|
line-height: 16px;
|
|
letter-spacing: 0.48px;
|
|
}
|
|
|
|
div[role='tabpanel'] figure:has(+ p) pre,
|
|
div[role='tabpanel'] figure:has(+ p) pre code {
|
|
background-color: #ececec;
|
|
}
|
|
|
|
.dark div[role='tabpanel'] figure:has(+ p) pre,
|
|
.dark div[role='tabpanel'] figure:has(+ p) pre code {
|
|
background-color: #3d3d3d;
|
|
}
|
|
|
|
.dark pre,
|
|
.dark code {
|
|
background: #1e1e1e;
|
|
}
|
|
|
|
pre {
|
|
padding: 24px 30px 24px 24px;
|
|
}
|
|
|
|
pre code {
|
|
gap: 20px;
|
|
}
|
|
|
|
code span {
|
|
padding-left: 0 !important;
|
|
}
|
|
|
|
/* 去除代码块内层边框 */
|
|
.bg-fd-secondary.border {
|
|
border: none;
|
|
}
|
|
|
|
/* 去除代码块外层边框 */
|
|
.shiki {
|
|
border: none;
|
|
padding: 0;
|
|
}
|
|
|
|
/* 行内代码样式 */
|
|
/* 行内代码样式 */
|
|
:not(pre) > code {
|
|
display: inline-block;
|
|
height: 25px;
|
|
padding: 0 10px;
|
|
margin: 0 0.2em;
|
|
color: #272727;
|
|
background: #f5f6f7;
|
|
font-family: 'PingFang SC';
|
|
font-size: 14px;
|
|
font-style: normal;
|
|
font-weight: 500;
|
|
line-height: 180%;
|
|
letter-spacing: 0.056px;
|
|
border: none;
|
|
border-radius: 8px;
|
|
}
|
|
|
|
.dark :not(pre) > code {
|
|
color: #e6e6e6 !important;
|
|
background: #282828 !important;
|
|
}
|
|
|
|
div[role='tablist'] ~ div:has(figure, p, ul) {
|
|
border-radius: 0 !important;
|
|
border: solid 1.5px #e5e5e5;
|
|
border-radius: 0.75rem !important;
|
|
}
|
|
|
|
.dark div[role='tablist'] ~ div:has(figure, p, ul) {
|
|
border: solid 1.5px #535353;
|
|
}
|
|
|
|
.dark div[role='tablist'] {
|
|
background-color: #1e1e1e;
|
|
}
|
|
|
|
/* 代码块下方的滚动条样式 */
|
|
div.bg-fd-secondary:has(pre) {
|
|
padding: 0;
|
|
}
|
|
|
|
.dark div.bg-fd-secondary:has(pre) {
|
|
background-color: #1e1e1e;
|
|
}
|
|
|
|
div.bg-fd-secondary:has(pre)::-webkit-scrollbar-track {
|
|
background: #e8e8e8;
|
|
}
|
|
|
|
div.bg-fd-secondary:has(pre)::-webkit-scrollbar-thumb {
|
|
background: #b0b0b0;
|
|
}
|
|
|
|
div.bg-fd-secondary:has(pre)::-webkit-scrollbar-thumb:hover {
|
|
background: #909090;
|
|
}
|
|
|
|
.dark div.bg-fd-secondary:has(pre)::-webkit-scrollbar-track {
|
|
background: #1a1a1a;
|
|
}
|
|
|
|
.dark div.bg-fd-secondary:has(pre)::-webkit-scrollbar-thumb {
|
|
background: #404040;
|
|
}
|
|
|
|
.dark div.bg-fd-secondary:has(pre)::-webkit-scrollbar-thumb:hover {
|
|
background: #606060;
|
|
}
|
|
|
|
/* 代码块中的滚动条样式优化 */
|
|
|
|
/* 图片居中显示 */
|
|
.fumadocs-content img,
|
|
.mdx-content img,
|
|
.prose img,
|
|
img {
|
|
display: block !important;
|
|
margin-left: auto !important;
|
|
margin-right: auto !important;
|
|
max-width: 100% !important;
|
|
height: auto !important;
|
|
border-radius: 8px !important;
|
|
box-shadow:
|
|
0 4px 6px -1px rgba(0, 0, 0, 0.1),
|
|
0 2px 4px -1px rgba(0, 0, 0, 0.06) !important;
|
|
}
|
|
|
|
/* MDX 表格样式 */
|
|
.fumadocs-content table,
|
|
.mdx-content table,
|
|
.prose table {
|
|
width: 100% !important;
|
|
border-collapse: separate !important;
|
|
margin: 1rem 0 !important;
|
|
}
|
|
|
|
.fumadocs-content table td,
|
|
.fumadocs-content table th,
|
|
.mdx-content table td,
|
|
.mdx-content table th,
|
|
.prose table td,
|
|
.prose table th {
|
|
padding: 0.75rem 1rem !important;
|
|
text-align: left !important;
|
|
}
|
|
|
|
/* Tabs 样式 */
|
|
.nav-tabs {
|
|
display: flex;
|
|
gap: 0.5rem;
|
|
border-bottom: 1px solid var(--nav-tabs-border-color);
|
|
margin-bottom: 0.8rem;
|
|
}
|
|
|
|
.nav-tabs .nav-link {
|
|
color: var(--text-muted) !important;
|
|
margin-bottom: -1px;
|
|
padding: 0.75rem 1.5rem;
|
|
border: none;
|
|
background: none;
|
|
cursor: pointer;
|
|
font-size: 1rem;
|
|
transition: all 0.2s ease;
|
|
}
|
|
|
|
.nav-tabs .nav-link:hover {
|
|
text-decoration: none !important;
|
|
}
|
|
|
|
.nav-tabs .nav-link.active {
|
|
border-bottom: 2px solid var(--content-link-color);
|
|
color: var(--content-link-color) !important;
|
|
}
|
|
|
|
.tab-content {
|
|
margin-bottom: 0.8rem;
|
|
padding: 1rem 0;
|
|
}
|
|
|
|
div[data-state='open'].fixed.inset-0.z-50 {
|
|
background-color: rgba(255, 255, 255, 0.4) !important;
|
|
}
|
|
|
|
#nd-subnav > div:nth-of-type(1) button:nth-of-type(1) {
|
|
box-shadow:
|
|
0px 1px 2px 0px rgba(19, 51, 107, 0.05),
|
|
0px 0px 1px 0px rgba(19, 51, 107, 0.08) !important;
|
|
background-color: none !important;
|
|
&:hover {
|
|
cursor: pointer;
|
|
}
|
|
}
|
|
|
|
/* 复制按钮容器和按钮样式 */
|
|
div[class*='bg-fd-card']:has(button[aria-label='Copy Text']),
|
|
div[class*='bg-fd-card']:has(button[aria-label='Copied Text']) {
|
|
right: 26px;
|
|
top: 24px;
|
|
display: flex;
|
|
align-items: center;
|
|
justify-content: center;
|
|
background-color: #818181;
|
|
color: #818181;
|
|
border: none;
|
|
border-radius: 4px;
|
|
background: rgba(0, 0, 0, 0.01);
|
|
-webkit-backdrop-filter: blur(5px);
|
|
backdrop-filter: blur(5px);
|
|
&:hover {
|
|
cursor: pointer;
|
|
}
|
|
}
|
|
|
|
/* 按钮内部样式 */
|
|
button[aria-label='Copy Text'],
|
|
button[aria-label='Copied Text'] {
|
|
color: #818181;
|
|
background-color: transparent;
|
|
border: none;
|
|
padding: 0;
|
|
&:hover {
|
|
cursor: pointer;
|
|
}
|
|
}
|
|
|
|
button[aria-label='Copy Text'] svg {
|
|
display: none;
|
|
}
|
|
|
|
button[aria-label='Copy Text']::before {
|
|
content: '';
|
|
background-image: url('../public/icons/copy.svg');
|
|
width: 26px;
|
|
height: 26px;
|
|
transition: filter 0.2s ease;
|
|
}
|
|
|
|
/* 鼠标悬停时使复制图标颜色变深 */
|
|
button[aria-label='Copy Text']:hover::before {
|
|
filter: brightness(0.7); /* 降低亮度使颜色变深 */
|
|
}
|
|
|
|
button[aria-label='Copied Text'] {
|
|
width: 26px;
|
|
height: 26px;
|
|
/* transition: filter 0.2s ease; */
|
|
}
|
|
|
|
button[aria-label='Copied Text'] svg {
|
|
width: 20px;
|
|
height: 20px;
|
|
transition: filter 0.2s ease;
|
|
}
|
|
|
|
#nd-subnav > div:nth-of-type(1) button {
|
|
&:hover {
|
|
cursor: pointer;
|
|
}
|
|
}
|
|
#nd-subnav > div:nth-of-type(1) {
|
|
border-bottom: 0.1px solid #e8ebf0 !important;
|
|
}
|
|
#nd-subnav > div:nth-of-type(2) {
|
|
border-bottom: 0.1px solid #e8ebf0 !important;
|
|
height: 100%;
|
|
}
|
|
.dark #nd-subnav > div:nth-of-type(1) {
|
|
border-bottom: 0.1px solid #363b4a58 !important;
|
|
}
|
|
.dark #nd-subnav > div:nth-of-type(2) {
|
|
border-bottom: 0.1px solid #363b4a58 !important;
|
|
}
|
|
|
|
div[data-rmiz-modal-content] {
|
|
background-color: none !important;
|
|
}
|
|
|
|
div[data-rmiz-modal-overlay='visible'] {
|
|
background-color: #ffffff00 !important;
|
|
backdrop-filter: blur(4px);
|
|
}
|
|
.dark div[data-rmiz-modal-overlay='visible'] {
|
|
background-color: #060c1a00 !important;
|
|
backdrop-filter: blur(4px);
|
|
}
|
|
.dark div[data-rmiz-modal-content] {
|
|
background-color: #060c1a00 !important;
|
|
}
|
|
|
|
#nd-tocnav {
|
|
border-bottom-color: #e8ebf0 !important;
|
|
}
|
|
.dark #nd-tocnav {
|
|
border-bottom-color: #1d2532 !important;
|
|
cursor: pointer !important;
|
|
}
|
|
|
|
#nd-subnav > div:nth-of-type(2) a {
|
|
text-decoration: none;
|
|
color: #485264;
|
|
transition: color 0.2s ease;
|
|
background-color: transparent !important;
|
|
font-weight: 400;
|
|
/* 先清除默认下划线 */
|
|
&:hover {
|
|
text-decoration: underline;
|
|
text-decoration-color: #dfe2ea;
|
|
text-decoration-thickness: 3px; /* 下划线粗细 */
|
|
text-underline-offset: 17px; /* 下划线与文字距离 */
|
|
}
|
|
&.text-fd-primary {
|
|
text-decoration: underline;
|
|
text-decoration-color: #3370ff;
|
|
text-decoration-thickness: 3px; /* 下划线粗细 */
|
|
text-underline-offset: 17px; /* 下划线与文字距离 */
|
|
background-color: transparent !important;
|
|
font-weight: 600;
|
|
color: #111824;
|
|
}
|
|
}
|
|
.dark #nd-subnav > div:nth-of-type(2) a {
|
|
color: #ffffff;
|
|
}
|
|
|
|
@theme {
|
|
--color-fd-muted: hsl(0, 0%, 96.1%);
|
|
--color-fd-popover: hsl(0, 0%, 100%);
|
|
--color-fd-popover-foreground: hsl(0, 0%, 15.1%);
|
|
--color-fd-card-foreground: hsl(0, 0%, 3.9%);
|
|
--color-fd-border: hsl(0, 0%, 89.8%);
|
|
--color-fd-primary-foreground: hsl(0, 0%, 98%);
|
|
--color-fd-secondary-foreground: hsl(0, 0%, 9%);
|
|
--color-fd-accent: hsl(0, 0%, 94.1%);
|
|
--color-fd-ring: hsl(0, 0%, 63.9%);
|
|
|
|
--color-fd-background: hsl(0, 0%, 100%);
|
|
--color-fd-card: hsl(0, 0%, 100%);
|
|
--color-fd-foreground: hsl(240, 6%, 25%);
|
|
--color-fd-muted-foreground: hsl(240, 6%, 50%);
|
|
--color-fd-secondary: hsl(240, 6%, 97%);
|
|
--color-fd-accent-foreground: hsl(240, 6%, 25%);
|
|
--color-fd-primary: hsl(226, 55%, 45%);
|
|
}
|
|
|
|
.dark {
|
|
--color-fd-background: #000000;
|
|
--color-fd-foreground: hsl(220, 60%, 94.5%);
|
|
--color-fd-muted: hsl(220, 50%, 10%);
|
|
--color-fd-muted-foreground: #b0b0b0;
|
|
--color-fd-popover: hsl(220, 50%, 10%);
|
|
--color-fd-popover-foreground: hsl(220, 60%, 94.5%);
|
|
--color-fd-card: hsla(220, 56%, 15%, 0.4);
|
|
--color-fd-card-foreground: hsl(220, 60%, 94.5%);
|
|
--color-fd-border: hsla(220, 50%, 50%, 0.2);
|
|
--color-fd-primary: #c2d3ff; /* 文本高亮色 */
|
|
--color-fd-primary-foreground: hsl(0, 0%, 9%);
|
|
--color-fd-secondary: hsl(220, 50%, 20%);
|
|
--color-fd-secondary-foreground: hsl(220, 80%, 90%);
|
|
--color-fd-accent: hsl(220, 40%, 20%);
|
|
--color-fd-accent-foreground: hsl(220, 80%, 90%);
|
|
--color-fd-ring: hsl(205, 100%, 85%);
|
|
}
|
|
|
|
#nd-sidebar {
|
|
border-color: transparent;
|
|
}
|
|
|
|
button[data-search-full] {
|
|
background-color: var(--color-fd-background);
|
|
}
|
|
|
|
.dark\:text-blue-400:where(.dark, .dark *) {
|
|
color: #c2d3ff;
|
|
background-color: #434548;
|
|
}
|
|
|
|
.dark div[role='tabpanel'].bg-fd-background {
|
|
background-color: #1e1e1e;
|
|
}
|
|
|
|
div[role='tabpanel'].bg-fd-background {
|
|
background-color: #f7f7f8;
|
|
}
|
|
|
|
div[role='tabpanel'].bg-fd-background > div > ul {
|
|
margin: 0;
|
|
display: flex;
|
|
flex-direction: column;
|
|
gap: 10px;
|
|
}
|
|
|
|
.dark div[role='tabpanel'].bg-fd-background > div > ul {
|
|
margin: 0;
|
|
background-color: #1e1e1e;
|
|
}
|
|
|
|
div[role='tabpanel'].bg-fd-background > div > ul > li {
|
|
margin: 0;
|
|
}
|
|
|
|
button[role='tab'] {
|
|
padding-top: 16px;
|
|
padding-bottom: 16px;
|
|
}
|
|
|
|
/* 移动端侧边栏左侧 padding 缩小 */
|
|
@media (max-width: 767px) {
|
|
#nd-sidebar-mobile [data-radix-scroll-area-viewport] {
|
|
padding-left: 8px;
|
|
padding-right: 8px;
|
|
padding-top: 0;
|
|
}
|
|
|
|
/* SidebarHeader 底部 padding */
|
|
#nd-sidebar-mobile > div:first-child {
|
|
padding-top: 8px;
|
|
padding-bottom: 22px;
|
|
}
|
|
|
|
/* 去掉 viewport 内部的顶部渐变遮罩 */
|
|
#nd-sidebar-mobile [data-radix-scroll-area-viewport] > div {
|
|
mask-image: linear-gradient(transparent, #fff 0px, #fff calc(100% - 12px), transparent) !important;
|
|
-webkit-mask-image: linear-gradient(transparent, #fff 0px, #fff calc(100% - 12px), transparent) !important;
|
|
}
|
|
}
|
|
|
|
/* RootToggle 图标容器:缩小到与图标匹配,修复对齐和间距 */
|
|
#nd-sidebar .size-9,
|
|
#nd-sidebar .size-5,
|
|
#nd-sidebar-mobile .size-9,
|
|
#nd-sidebar-mobile .size-5,
|
|
[data-radix-popper-content-wrapper] .size-9,
|
|
[data-radix-popper-content-wrapper] .size-5 {
|
|
width: 20px !important;
|
|
height: 20px !important;
|
|
flex-shrink: 0;
|
|
display: flex !important;
|
|
align-items: center;
|
|
justify-content: center;
|
|
}
|
|
|
|
/* RootToggle 下拉菜单:增加两侧 padding + 选中项浅蓝背景 */
|
|
[data-radix-popper-content-wrapper] > div {
|
|
padding: 6px 8px !important;
|
|
}
|
|
|
|
[data-radix-popper-content-wrapper] a {
|
|
padding-left: 12px !important;
|
|
padding-right: 12px !important;
|
|
border-radius: 8px;
|
|
display: flex !important;
|
|
align-items: center !important;
|
|
gap: 8px;
|
|
}
|
|
|
|
/* 移动端目录下拉框(TOC Popover Trigger):文本溢出省略号 */
|
|
@media (max-width: 767px) {
|
|
button[class*="tocnav"] {
|
|
max-width: 100vw;
|
|
overflow: hidden;
|
|
}
|
|
|
|
button[class*="tocnav"] > span.grid {
|
|
overflow: hidden;
|
|
min-width: 0;
|
|
}
|
|
|
|
/* 文章内超长链接/文本自动换行 */
|
|
article {
|
|
overflow-wrap: break-word;
|
|
word-break: break-word;
|
|
}
|
|
|
|
/* RootToggle 图标容器:缩小尺寸,对齐文字 */
|
|
#nd-sidebar-mobile [data-radix-popper-anchor] .size-9,
|
|
#nd-sidebar-mobile button .size-9 {
|
|
width: 20px !important;
|
|
height: 20px !important;
|
|
flex-shrink: 0;
|
|
}
|
|
}
|