` 只写 `XHSX`）。不是工具导航站，是一整套**多租户 AI 内容创作 SaaS**：AI 对话、绘图、口型同步、小说、短剧分镜、数字人、课程/学校、积分商城、市场分成、支付充值、平台管理后台，一应俱全。\n\n| 维度 | 情况 |\n| --- | --- |\n| 前端 | Vite + React 18 SPA，Tailwind 系样式，axios（`baseURL: \"/api\"`），285 个懒加载分包 |\n| 服务端 | nginx 反代，响应统一为 `{code, message, data, timestamp}`（典型 Java/Spring 风格） |\n| 鉴权 | 短信验证码 + 微信登录（`emailPassword`/`emailCode`/`schoolLogin` 均为 `false`），JWT + refresh token |\n| 商业模式 | `commerceEnabled: true`，有会员套餐、充值、订单、提现、对账、卡密兑换 |\n| 多租户 | 有 `tenants`（租户）、`teams`（团队）、`school`（学校/班级/院系）三套组织体系 |\n\n## 扒到了什么\n\n| 项目 | 数量 | 说明 |\n| --- | --- | --- |\n| 前端文件 | **287** | HTML 壳 + 285 个 JS 分包 + 1 个 CSS，共 4.38 MB，全部存进本 val 的 blob（键前缀 `mirror/`） |\n| 接口 | **634** | 带 HTTP 方法：GET 287 / POST 288 / DELETE 76 / PUT 74 / PATCH 42 |\n| 公开接口 | **4** | 无需登录，见下 |\n| 其余接口 | 630 | 一律 `401 Unauthorized` |\n\n> 那 634 条不是靠猜路径试出来的，是从每个分包的 axios 调用点里正则提取的，所以每条都带**出处分包**（报告页每条下面都标了）。\n\n## 公开的 4 个接口\n\n| 接口 | 返回 |\n| --- | --- |\n| `/api/public/site-info` | 站名、图标、`commerceEnabled`、`homeEnabled`、模板名 |\n| `/api/auth/methods` | 开启的登录方式：短信验证码 ✅、微信 ✅，其余 ❌ |\n| `/api/auth/register/info` | `isFirstUser`、`needCode` |\n| `/api/drama/art-styles` | **15 条画风预设**，每条带完整提示词（`prompt`）和缩略图 |\n\n`/api/drama/art-styles` 是唯一漏出来的业务数据，含 15 条完整画风提示词（古装真人、赛博朋克、国风水墨、迪士尼、韩漫唯美…），报告页「公开数据」标签页里有全文。\n\n## 配置监控（每天自动跑）\n\n`monitor.ts` 是个 interval 任务，每天 **09:00（北京时间）** 跑一次：只读那 4 个公开接口，存一份当前快照，和上一次比对，有变化就记进历史。\n\n盯的是这几项：\n\n| 项目 | 为什么值得盯 |\n| --- | --- |\n| 登录方式开关 | 邮箱 / 短信 / 微信什么时候被关掉或打开 |\n| 注册是否需要邀请码 | `needCode` 变化说明在收紧还是放开注册 |\n| 站点名 / 模板 / 商城开关 | `commerceEnabled` 变 false 说明停售 |\n| 画风预设 | 新增、删除，或某条画风的提示词被改写 |\n\n数据落在 blob：\n\n```\nmonitor/latest.json ← 当前快照\nmonitor/history.json ← 变更历史（只在有变化时追加，最多 500 条）\nmonitor/status.json ← 每次运行的状态，用来确认 cron 还活着\n```\n\n报告页「配置监控」标签页有可视化：当前登录方式开关、累计运行次数、变更时间线。\n\n抓取失败时**不会覆盖** `latest.json`，只记错误 —— 避免一次网络抖动把好数据冲掉。\n\n## 接口地图（按模块）\n\n| 模块 | 前缀 | 内容 |\n| --- | --- | --- |\n| 登录注册 | `/auth/*` | 邮箱/短信/微信/学校登录、注册、改密、refresh |\n| 用户 | `/user/*`、`/member/*`、`/points/*` | 资料、会员、积分、签到、等级 |\n| 短剧（最重） | `/drama/*` | 项目、剧集、画布节点、**Seedance 2 分镜映射**、音频槽位、合成导出 |\n| 小说 | `/novel/*` | 项目、章节、续写 |\n| 陪练/教练 | `/coach-sessions/*`、`/coach-templates/*` | 会话、流式对话、记忆、模板短语/片段 |\n| 课程 | `/courses/*` | 课程、章节、课时、进度、看板、异常 |\n| 市场 | `/market/*` | 作品包上架、审核、举报、分成 |\n| 卡密 | `/cards/*` | 批次、兑换、导出 |\n| 管理后台 | `/admin/*` | 用户、订单、会员、租户、团队、学校、积分、提现、日志、错误中心、内容同步 |\n| 控制台 | `/console/*` | 站点配置、菜单、套餐、支付、对账、登录方式、功能开关、模型厂商 |\n| 其他 | `/gallery/*`、`/blog/*`、`/ai-models/*`、`/asset/*`、`/knowledge/*`、`/memory/*`、`/canvas/*`、`/user-robots/*` | 画廊、博客、模型、素材、知识库、记忆、画布、机器人 |\n\n完整 634 条见报告页「接口地图」标签页，支持按方法筛选和路径搜索。\n\n## 前端路由（从 bundle 的路由表提取）\n\n```\nc/:slug c/:slug/:id chat embed/:id image lipsync assets knowledge\ndrama drama/:projectId drama/:projectId/canvas novel novel/:projectId\nmember blog blog/:id courses course/:id course/:id/dashboard\npoint-rank profile profile/robots/:robotId/workbench profile/orders\nprofile/points profile/training memories robots robots/new\nrobots/:id robots/:id/edit skill-store market market/:id\nprofile/market profile/market/publish teams/join/:inviteCode teacher\nchange-password login wechat-callback home school-site gallery\ncanvas-templates version-logs coach-lab market-review console site\nlogin-methods home-config payment plans models features recharge\nreconciliation audit-logs menus liveness/callback admin users orders\nmembers tenants school points teams ai-models withdrawals content\nsystem system-monitor error-center logs\n```\n\n## 没扒到的，和为什么\n\n除上面 4 个接口外，**全部返回 401**。也就是说：博客文章、课程内容、画廊作品、市场作品包、模型列表、套餐价格、用户数据、短剧项目 —— 这些**都在登录墙后面**，没有账号拿不到。\n\n想继续往下扒，两条路：\n\n1. **给我一个已登录的 token。** 在浏览器登录后打开 DevTools → Network，随便点一个请求，把 `Authorization: Bearer eyJ...` 的值发我（或者直接给 `access_token` 的 localStorage 值）。有它我就能把 `/api/blog/posts`、`/api/courses`、`/api/market/packs`、`/api/ai-models`、`/api/console/plans` 这些全量拉下来归档。\n2. **自己跑。** `harvest.ts` 里 `get()` 加一个 `Authorization` 头，把 `publicPaths` 换成想拉的路径，重跑即可。\n\n> ⚠️ token 等同于账号密码，只在你自己信任的环境里用；我不会把它写进代码或存进 val。\n\n## 架构\n\n```mermaid\ngraph LR\n Browser -->|\"GET /\"| Hono[\"index.ts<br/>(Hono server)\"]\n Hono -->|serves| HTML[\"frontend/root.tsx\"]\n HTML -->|loads| Entry[\"frontend/index.tsx\"]\n Entry -->|renders| App[\"components/App.tsx\"]\n Hono -->|\"/api/summary\"| Blob[(\"blob 存储<br/>manifest.json<br/>public-data.json\")]\n Hono -->|\"/api/endpoints\"| ApiMap[(\"api-map.json<br/>634 条\")]\n Hono -->|\"/api/file\"| Mirror[(\"mirror/*<br/>287 个前端文件\")]\n Harvest[\"harvest.ts<br/>(抓取脚本)\"] -->|写入| Blob\n Harvest -->|写入| ApiMap\n Harvest -->|写入| Mirror\n Harvest -->|\"fetch\"| Target[\"ai.xinhuoshixiao.com\"]\n Monitor[\"monitor.ts<br/>(每日 09:00 CST)\"] -->|\"fetch 4 个公开接口\"| Target\n Monitor -->|写入| Mon[(\"monitor/latest.json<br/>history.json<br/>status.json\")]\n Hono -->|\"/api/monitor\"| Mon\n```\n\n## 文件结构\n\n```\nindex.ts ← Hono 后端：报告页 + 4 个数据接口\nharvest.ts ← 抓取脚本（可重跑，会覆盖）\nmonitor.ts ← 定时监控（interval，每天 09:00 CST）\nfrontend/\n root.tsx ← HTML 壳\n index.tsx ← React 入口\n components/\n App.tsx ← 报告 UI（概览 / 接口地图 / 归档文件 / 配置监控 / 公开数据）\n```\n\nblob 存储（本 val 私有）：\n\n```\nmanifest.json ← 归档清单：287 个文件的路径与体积\napi-map.json ← 634 条接口：路径 + 方法 + 出处分包\npublic-data.json ← 4 个公开接口的完整原始 JSON\nmirror/index.html ← 原站 HTML 壳\nmirror/assets/* ← 285 个 JS 分包 + 1 个 CSS\nmonitor/latest.json ← 当前配置快照\nmonitor/history.json ← 配置变更历史\nmonitor/status.json ← 监控运行状态\n```\n\n## 重跑\n\n直接 Run `harvest.ts`。它会重新拉一遍原站、覆盖归档和接口地图。原站前端文件名带哈希，**发版后哈希会变**，重跑就能跟上。\n\n## 合规提醒\n\n这份归档是**公开可访问的前端静态资源**（任何人打开浏览器都能拿到）和**接口路径清单**，不含任何用户数据或密钥。但整站复制他人前端代码用于公开发布，涉及对方著作权；接口地图用于对自己账号下的数据做备份没问题，用来批量抓取他人数据则可能违反对方条款。自己评估用途。",[148],"6e7eb539-4cd6-416b-b4e6-db4a6a2b18b6","frontend","01a0aa5a-affc-75b2-9998-9d64f2480573",1,["D",1789564465090],"directory",[156],"pulls","branches","forks","envVars",{"_169":42,"_171":42},"connections",{"_169":42,"_170":42},"count","unfilledCount","emptyCount",{"_18":155,"_20":156,"_116":157,"_118":-5,"_119":71,"_120":158,"_122":38,"_22":231,"_68":42,"_124":160,"_126":-5,"_128":26,"_129":-5,"_183":232,"_88":233},{"_18":227,"_20":226,"_116":220,"_118":157,"_119":71,"_120":158,"_122":38,"_22":228,"_68":42,"_124":160,"_126":-5,"_128":26,"_129":-5,"_183":229,"_88":230},{"_18":217,"_20":218,"_116":219,"_118":220,"_119":71,"_120":221,"_122":38,"_22":222,"_68":135,"_124":144,"_126":223,"_128":26,"_129":-5,"_183":224,"_88":225},{"_18":210,"_20":211,"_116":212,"_118":157,"_119":71,"_120":158,"_122":38,"_22":213,"_68":42,"_124":98,"_126":214,"_128":26,"_129":-5,"_183":215,"_88":216},{"_18":203,"_20":204,"_116":205,"_118":157,"_119":71,"_120":158,"_122":38,"_22":206,"_68":42,"_124":144,"_126":207,"_128":26,"_129":-5,"_183":208,"_88":209},{"_18":195,"_20":196,"_116":197,"_118":157,"_119":71,"_120":198,"_122":38,"_22":199,"_68":158,"_124":144,"_126":200,"_128":26,"_129":-5,"_183":201,"_88":202},{"_18":147,"_20":148,"_116":149,"_118":-5,"_119":71,"_120":150,"_122":38,"_22":192,"_68":152,"_124":98,"_126":153,"_128":26,"_129":-5,"_183":193,"_88":194},{"_18":140,"_20":141,"_116":142,"_118":-5,"_119":71,"_120":135,"_122":38,"_22":189,"_68":42,"_124":144,"_126":145,"_128":26,"_129":-5,"_183":190,"_88":191},{"_18":131,"_20":132,"_116":36,"_118":-5,"_119":71,"_120":133,"_122":38,"_22":186,"_68":135,"_124":136,"_126":137,"_128":26,"_129":138,"_183":187,"_88":188},{"_18":114,"_20":115,"_116":117,"_118":-5,"_119":71,"_120":121,"_122":38,"_22":182,"_68":42,"_124":125,"_126":127,"_128":26,"_129":-5,"_183":184,"_88":185},["D",1789565183348],"children",[],[115],["D",1789565214580],[],[132],["D",1789564476010],[],[141],["D",1789565233898],[],[148],"3b104498-dac6-4be5-814a-2c8011f01ffd","root.tsx","01a0aa5a-affc-75b2-9998-9a31bcbf93da",4,["D",1789564512255],"/** @jsxImportSource npm:hono@4/jsx */\nimport { raw } from \"npm:hono@4/html\";\nimport { immutableFileUrl } from \"https://esm.town/v/std/utils/index.ts\";\n\n// The HTML shell for the app. It is never cached, so immutableFileUrl can stamp\n// the current val version into each asset URL — the browser caches those\n// immutably, and publishing the val changes the URLs, refetching exactly once.\nexport function Root() {\n return (\n <>\n {raw(\"<!DOCTYPE html>\")}\n <html lang=\"en\">\n <head>\n <meta charSet=\"UTF-8\" />\n <meta name=\"viewport\" content=\"width=device-width, initial-scale=1.0\" />\n <title>薪火AI创作平台

Search