fix(misc): vite base 动态导入 504 / 流式路径正则 / mcpEnv 转义 / AuthGuard 依赖修正

- vite.config base 仅 Electron 构建产物用 ./，dev 模式保持 /（修复预构建依赖 504 动态导入失败）
- streamHandler 流式路径白名单正则去转义冗余
- mcpEnv Windows 注册表读取转义修正
- AuthGuard useEffect 依赖数组修正
- framer-motion 12.42.2→12.43.0（修复 React 18.3 ref 警告 issue 3745）

Author: Aparencia

client/electron/ai/streamHandler.ts

@@ -58,7 +58,7 @@ export function registerStreamHandler(): void {
 
       // CL-M1: API 路径白名单校验——method 实为路径，直接拼入 URL 可访问
       // 网关任意端点（含 ?/# 注入参数）；仅允许受信任的 AI 功能路径
-      const VALID_STREAM_PATH = /^\/api\/v1\/(ai|multimodal)\/[A-Za-z0-9_\/-]+$/;
+      const VALID_STREAM_PATH = /^\/api\/v1\/(ai|multimodal)\/[A-Za-z0-9_/-]+$/;
       if (
         typeof method !== 'string' ||
         method.includes('?') ||

client/electron/mcpEnv.ts

@@ -65,7 +65,7 @@ function readWindowsRegistryEnv(): Record<string, string> {
     const output = execSync(
       'powershell -NoProfile -Command "' +
       '$e = [Environment]::GetEnvironmentVariables();' +
-      'foreach ($k in $e.Keys) { Write-Output \"$k=$($e[$k])\" }"',
+      'foreach ($k in $e.Keys) { Write-Output "$k=$($e[$k])" }"',
       {
         encoding: 'utf-8',
         timeout: 10000,

client/package-lock.json

@@ -12,7 +12,7 @@
     "build": "tsc -b && vite build",
     "lint": "oxlint",
     "preview": "vite preview",
-    "electron:dev": "concurrently -k -n vite,electron \"cross-env ELECTRON_BUILD=1 vite --mode test\" \"wait-on http://localhost:5173 && tsc -p electron/tsconfig.json && cross-env ELECTRON_BUILD=1 NODE_ENV=development NODE_OPTIONS=--use-system-ca electron .\"",
+    "electron:dev": "concurrently -k -n vite,electron \"vite --mode test\" \"wait-on http://localhost:5173 && tsc -p electron/tsconfig.json && cross-env ELECTRON_BUILD=1 NODE_ENV=development NODE_OPTIONS=--use-system-ca electron .\"",
     "electron:build": "cross-env ELECTRON_BUILD=1 vite build && tsc -p electron/tsconfig.json && electron-builder",
     "native:build": "node native/process-audio/build.mjs",
     "native:install": "npm --prefix native/process-audio install --no-audit --no-fund",
@@ -66,7 +66,7 @@
     "dexie": "^4.4.4",
     "dompurify": "^3.4.12",
     "electron-updater": "^6.3.9",
-    "framer-motion": "^12.42.2",
+    "framer-motion": "^12.43.0",
     "lucide-react": "^1.23.0",
     "lxgw-wenkai-lite-webfont": "^1.7.0",
     "node-edge-tts": "^1.2.10",

client/package.json

@@ -50,7 +50,12 @@ export function AuthGuard({ children }: AuthGuardProps) {
     if (location.pathname === '/login' || location.pathname === '/register') return;
 
     navigate('/login', { replace: true });
-  }, [isPlaceholder, loading, isAuthenticated, location.pathname, navigate]);
+  }, [
+	loading,
+	isAuthenticated,
+	location.pathname,
+	navigate
+]);
 
   return <>{children}</>;
 }

client/src/lib/auth/AuthGuard.tsx

@@ -48,8 +48,12 @@ function electronBuildConfigPlugin(): Plugin {
   };
 }
 
-export default defineConfig({
-  base: isElectronBuild ? './' : '/',
+export default defineConfig(({ command }) => ({
+  // base 仅在 Electron 构建产物时使用 './'（file:// 协议加载需要）；
+  // dev 模式必须保持 '/'——否则 Vite 预构建依赖 URL 解析异常，
+  // 全部 optimizeDeps 产物持续 504，lazy 页面动态导入失败
+  // （曾因 ELECTRON_BUILD=1 vite --mode test 启动 dev server 触发）
+  base: isElectronBuild && command === 'build' ? './' : '/',
   plugins: [
     react(),
     // Electron 构建时生成 build-config.json，供主进程运行时读取环境变量
@@ -185,4 +189,4 @@ export default defineConfig({
   optimizeDeps: {
     exclude: ['electron-updater', 'better-sqlite3', '@automerge/automerge'],
   },
-})
+}))