build: release

build: publish
build: trigger build image
2026-10-14 01:46:00 +08:00 · 2026-10-03 02:47:15 +08:00 · 2026-10-03 01:01:10 +08:00 · 2026-10-03 01:01:00 +08:00 · 2026-10-03 01:00:08 +08:00 · 2026-10-03 00:51:15 +08:00
166 changed files with 5545 additions and 520 deletions
@@ -3,7 +3,7 @@ on:
  workflow_dispatch:
    inputs:
      version:
-        description: "版本号（如 v1.42.5）"
+        description: "版本号（如 1.42.5）"
        required: true
        type: string

@@ -42,4 +42,5 @@ output/
 .uploads/
 .certd-plugin-history/
 .tmp
-.plugin-dev/
+.plugin-dev/
+.tmp_chunks/
@@ -392,6 +392,66 @@ export class OAuthDemoAccess extends BaseAccess {
 }
 ```

+## 字段动态显隐（mergeScript）
+
+多种鉴权方式共用一个授权时，用 `@AccessInput` 上的 `mergeScript` 按所选方式显隐字段：
+
+```typescript
+@AccessInput({
+  title: '鉴权方式',
+  value: 'apikey',
+  component: {
+    name: 'a-select',
+    vModel: 'value',
+    options: [
+      { label: 'AccessKey签名', value: 'aksk' },
+      { label: 'ApiKey', value: 'apikey' },
+    ],
+  },
+  required: true,
+})
+authType = 'apikey';
+
+@AccessInput({
+  title: 'accessKeyId',
+  component: { name: 'a-input', vModel: 'value' },
+  required: true,
+  mergeScript: `
+    return {
+      show: ctx.compute(({form})=>{
+        return !form.access.authType || form.access.authType === 'aksk';
+      })
+    }
+  `,
+})
+accessKeyId = '';
+```
+
+要点：
+
+- `mergeScript` 返回的对象会深合并进本字段定义，可动态化的属性有 `show`、`required`、`helper`、
+  `component` 下的属性（`options`、`placeholder` 等）以及 `component.on` 事件。
+- **动态判断必须写在 `ctx.compute(({form})=>{ ... })` 回调里**。`mergeScript` 本身在插件类
+  定义阶段就被拼成字符串，那时表单还没打开，用参数在服务端判断字段值没有意义。
+- 授权表单字段值在 `form.access.xxx`（任务表单才是 `form.xxx`）。
+- 历史授权没有新字段，条件里要用 `!form.access.authType || ...` 兜底走旧逻辑，保证老授权还能编辑保存。
+- 联动其他字段用 `component.on` 事件回调，回调参数是 `{ form }`：
+
+  ```typescript
+  mergeScript: `
+    return {
+      component: {
+        on: {
+          selectedChange: (scope) => {
+            const form = scope.form;
+            form.acmeAccountAccessId = null;
+          },
+        },
+      },
+    }
+  `,
+  ```
+
 ## 注意事项

 1. **插件命名**：插件名称应简洁明了，反映其功能。
@@ -9,7 +9,7 @@ description: 用于通过 Certd API 开发、修改、读取、保存和恢复

 本 Skill 使用 Certd HTTP API，不使用 WebSocket，也不依赖浏览器传递代码草稿。

- 前端只生成包含需求、API 地址和认证 Token 的启动提示词。
+- 前端只生成包含需求、插件作者、API 地址和认证 Token 的启动提示词。
 - Agent 直接调用 Certd API 读取和保存插件 YAML。
 - Agent 的进度、日志和代码修改在 Codex/Trae 中查看。
 - 插件开发临时文件和修改历史统一保存在 Agent 工作区的 `.plugin-dev/` 下，不保存到浏览器或 Certd 后端。
@@ -43,15 +43,13 @@ Certd 插件按来源分为三类：

 ## API 认证

-提示词会提供 Certd API 地址和仅限 AI 插件开发接口的受限 Token。调用 API 时使用：
+提示词会提供 Certd API 地址和仅限 AI 插件开发接口的受限的短时效的 Token。调用 API 时使用：

 ```http
 Authorization: <token>
 Content-Type: application/json
 ```

-不要把 Token 写入代码、历史摘要、日志、提交信息或插件 YAML。
-
 所有 Certd API 请求统一使用 Node.js 的 `fetch`。不要使用 PowerShell 的 `Invoke-RestMethod`、`Invoke-WebRequest` 或 .NET HTTP 客户端发送插件 YAML/JSON；它们在 Windows 上可能造成中文乱码或使完整 YAML 导入请求长时间无响应。

 Node 请求须直接读取 UTF-8 文件或在 Node 内构造 JSON，并使用 `JSON.stringify`：
@@ -118,6 +116,7 @@ const response = await fetch(`${apiBase}/scoped/sys/ai/plugin/find`, {
 - 修改后保存修改摘要。
 - 恢复前再次备份当前版本。
 - 不上传历史文件，不保存 Token、证书、私钥或真实授权值。
+- 修改完一版后立即提交更新到certd，但不要发布到市场。

 详细格式见 `references/local-history.md`。

@@ -125,6 +124,7 @@ const response = await fetch(`${apiBase}/scoped/sys/ai/plugin/find`, {

 插件始终以完整 YAML 传递和保存，脚本源码放在顶层 `content` 字段。

+- 新插件的 `author` 必须使用启动提示词中给出的插件作者，不要自行编造作者名；修改已有插件时保留原 `author`，不要改成其他作者。
 - 统一使用 `await _ctx.import(...)` 引用模块。
 - `"/@/..."` 表示以绝对路径引用 `server/src/` 下的模块。
 - 最后返回继承目标基类的 class。
@@ -135,6 +135,28 @@ const response = await fetch(`${apiBase}/scoped/sys/ai/plugin/find`, {

 需要字段格式时读取 `references/online-yaml-format.md`。
 需要组件示例时读取 `references/component-examples.md`。
+需要按其他字段动态显隐/必填/联动时读取 `references/merge-script.md`。
+
+### 字段动态显隐（mergeScript）
+
+字段定义支持 `mergeScript`：脚本 `return` 的对象会合并进本字段，用来做「选了 A 才显示 B」这类联动。
+
+```yaml
+    mergeScript: |2-
+
+          return {
+            show: ctx.compute(({form})=>{
+              return form.access.authType === 'apikey';
+            })
+          }
+```
+
+- 动态逻辑必须写在 `ctx.compute(({form})=>{ ... })` 回调里；`mergeScript` 本身在插件类定义阶段就
+  被拼成字符串，那时表单还没打开，用参数在 node 侧判断字段值没有任何意义。
+- 授权表单字段值在 `form.access.xxx`，任务表单字段值在 `form.xxx`。
+- 新增可选字段时要给历史数据兜底，例如 `!form.access.authType || form.access.authType === 'aksk'`。
+
+完整用法（能力、可动态化的属性、事件联动、常见错误、验证方式）见 `references/merge-script.md`。

 ## 示例插件

@@ -1,6 +1,6 @@
 name: DemoAccess
 icon: logos:airflow-icon
-title: Demo-授权插件示例  # 模块-插件名
+title: Demo-授权插件示例  # 格式：平台-功能 ，例如： 网宿-授权 ； 阿里云-授权 ； 天翼云-授权
 group: null
 desc: 这只是一个示例
 version: 1.0.0
@@ -1,6 +1,6 @@
 name: DemoDeploy
 icon: logos:amp-icon
-title: Demo-部署插件示例  # 模块-插件名
+title: Demo-部署插件示例  # 格式：平台-功能 ，例如： 网宿-更新CDNpro证书 ； 阿里云-上传到CAS证书管理服务 ； 天翼云-更新CDN证书
 group: cdn
 desc: 这仅仅是一个示例
 version: 1.0.0
@@ -1,6 +1,6 @@
 name: DemoDnsProvider
 icon: fa-solid:frog
-title: Demo-Dns提供商插件示例  # 模块-插件名
+title: Demo-Dns提供商插件示例  # 格式：平台-功能 ，例如： 阿里云-DNS提供商 ；腾讯云-DNS提供商
 desc: 这只是一个示例
 type: custom
 version: 1.0.0
@@ -0,0 +1,181 @@
+# mergeScript 用法
+
+来源：前端 `packages/ui/certd-client/src/use/use-refrence.tsx`，类型定义来自 `@fast-crud/fast-crud`。
+
+`mergeScript` 用来让输入字段的定义**依赖当前表单里的其他字段值动态变化**，例如：
+选了某个鉴权方式才显示对应字段、切换类型后清空已选值、下拉选项跟着另一个字段变。
+
+它写成字符串放在字段定义上（内置插件放在 `@AccessInput` / `@TaskInput` 里，在线插件放在 `input.<字段>` 下）：
+
+```ts
+@AccessInput({
+  title: "API Key",
+  component: { name: "a-input", vModel: "value" },
+  mergeScript: `
+    return {
+      show: ctx.compute(({form})=>{
+        //access里面 要用 form.access.[字段名]
+        return form.access.authType === 'apikey';
+        //deploy插件里面要用form.[字段名]
+        return form.authType === 'apikey';
+      })
+    }
+  `,
+})
+apiKey = "";
+```
+
+## 执行时机
+
+字段定义被前端加载时，对**每一个字段**执行一次：
+
+```js
+const func = new Function('ctx', formItem.mergeScript);
+const merged = func(ctx); // 字段脚本只执行这一次
+merge(formItem, merged); // 返回值深合并进该字段的定义
+delete formItem.mergeScript; // 执行完就删掉，最终定义里不再有 mergeScript
+```
+
+要点：
+
+- 脚本体内**必须 `return` 一个对象**，返回的对象会深合并到本字段的定义上。
+- 脚本本身只在加载字段时跑一次，**拿不到、也不应该判断用户填了什么值**。
+- 真正的动态逻辑写在返回对象里的 `ctx.compute(...)` 回调中，由 fast-crud 在渲染时求值。
+
+## ctx 提供的能力
+
+| 能力                        | 说明                                                                                                                                        |
+| --------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------- |
+| `ctx.compute(fn)`           | 最常用。返回一个响应式的计算值：`fn` 里读到的表单字段会被自动追踪，字段变化时重新计算，视图跟着刷新                                         |
+
+`ctx.compute` 的回调参数是一个 context 对象，常用字段：
+
+- `form`：当前表单数据。**这是唯一常用的一个**。
+- `row`：行数据。
+- `mode`：表单模式 `add` / `edit` / `view`。
+- `getComponentRef(key)`：取其他字段组件的 ref。
+
+注意：Certd 在把 `form` 传进回调前做过一次兼容处理（`form.input || form.body || form`），
+所以两种表单取值路径不同：
+
+- **授权（Access）表单**：字段值在 `form.access.xxx`（字段 key 会被加上 `access.` 前缀）。
+- **任务（Task）表单**：字段值直接是 `form.xxx`。
+
+## 可以动态化的属性
+
+返回的对象里，任何字段定义属性都可以用 `ctx.compute`，常用的有：
+
+| 属性                 | 用途                                                                                              |
+| -------------------- | ------------------------------------------------------------------------------------------------- |
+| `show`               | 显隐（最常用）                                                                                    |
+| `required`           | 动态必填，例如 `required: ctx.compute(({form}) => form.targetType === 'ingress')`                 |
+| `disabled`           | 动态禁用，例如账号已创建后不允许再改：`disabled: ctx.compute(({form}) => !!form.access?.account)` |
+| `helper`             | 动态帮助文案，回调里按条件 `return` 不同字符串                                                    |
+| `value`              | 动态默认值                                                                                        |
+| `component` 下的属性 | 动态 `options`、`placeholder`、`inputKey`、`type`、`disabled` 等                                  |
+| `component.on`       | 事件处理，见下面「联动」                                                                          |
+| `col` / `order`      | 布局与排序                                                                                        |
+
+只写了一层 `show` 时最简形式就是本文开头的例子。
+
+## 联动（监听事件并改动其他字段）
+
+`component.on` 的事件回调**不**用 `ctx.compute` 包，它本身就是回调，参数是
+`{ form, $event, ... }`；`form` 同样做过 `form.input || form.body || form` 的兼容处理。
+事件名按组件而定，例如 `selectedChange`。
+
+```ts
+mergeScript: `
+  return {
+    component: {
+      on: {
+        selectedChange: (scope) => {
+          const form = scope.form;
+          // 切换颁发机构后清空 ACME 账号，避免账号与机构不匹配
+          form.acmeAccountAccessId = null;
+        },
+      },
+    },
+  }
+`,
+```
+
+另一种写法是把回调也做成计算值（需要用到组件上配置的 `onSelectedChange` / `onChange` 属性）：
+
+```ts
+mergeScript: `
+  return {
+    component: {
+      onSelectedChange: ctx.compute(({form}) => {
+        return ($event) => {
+          form.dnsProviderAccessType = $event.accessType;
+        };
+      }),
+    },
+  }
+`,
+```
+
+两种写法都能用，优先参考同目录已有插件的写法，保持一致。
+
+## 常见错误
+
+- **不要用 node 侧变量决定条件**。`mergeScript` 是在插件类定义阶段（node 侧）拼出来的字符串，
+  此时表单还没打开，拿不到任何用户输入；用参数拼条件等于把逻辑写死在服务端。
+  条件必须原样落到 `ctx.compute` 回调里。
+- **不要用 `if` 直接判断字段值**。回调必须 `return` 一个值，写成
+  `show: ctx.compute(({form}) => { if (...) { return true } })` 也可以，但不要漏掉 `return`。
+- **不要漏掉历史数据兼容**。新增可选字段时，历史数据里没有这个字段（值为 `undefined`），
+  条件要按旧行为兜底，例如 `!form.access.authType || form.access.authType === 'aksk'`。
+- **不要访问 `form.access` 以外的路径**去读授权字段，也不要在授权表单里按任务表单的路径取值。
+- **不要依赖脚本执行时的副作用**（打印日志、改全局状态），它在每次打开表单时都会重新执行。
+
+## YAML 写法（在线插件）
+
+`mergeScript` 是含换行的脚本字符串，必须用 YAML 块标量：
+
+```yaml
+input:
+  apiKey:
+    title: API Key
+    component:
+      name: a-input
+      vModel: value
+    mergeScript: |2-
+
+          return {
+            show: ctx.compute(({form})=>{
+              return form.access.authType === 'apikey';
+            })
+          }
+```
+
+导出生成的缩进比较特殊（块标量内容统一缩进），**不要手工调整缩进**：
+用脚本生成 YAML，并保证导出后再导入内容一致。转换成 block scalar 时注意：
+
+- `|` / `|2-` 等块标量不需要转义换行，不要把脚本写成带 `\n` 的单行。
+- 脚本里不要出现 `??` 这类容易被误判为乱码的写法，用显式 `if (x == null)` 代替。
+
+## 验证方式
+
+前端表单没法在插件开发流程里直接断言，可以在后端加一个 `src/**/*.test.ts`，
+按前端 `useReference` 的路径执行字段上的 `mergeScript`：
+
+```ts
+const computedGetters = [];
+const ctx = {
+  compute: getter => {
+    computedGetters.push(getter);
+    return getter;
+  },
+  asyncCompute: () => undefined,
+  computed: () => undefined,
+};
+new Function('ctx', mergeScript)(ctx);
+// 用假的 form 求值，断言显隐结果
+const show = computedGetters[0]({ form: { access: { authType: 'apikey' } } });
+```
+
+参考实现：`packages/ui/certd-server/src/plugins/plugin-wangsu/access-input.test.ts`。
+要点是断言「同一个 show 函数换 `authType` 结果会变」，证明显隐确实是运行时算的，
+而不是在 node 侧定死的。
@@ -7,7 +7,7 @@
 ```yaml
 name: DemoTask
 author: demo
-title: Demo 任务
+title: Demo-插件名称 # 格式：平台-功能 ，例如： 网宿-更新CDNpro证书 ； 阿里云-上传到CAS证书管理服务 ； 天翼云-更新CDN证书
 desc: 插件说明
 icon: clarity:plugin-line
 pluginType: task
@@ -61,6 +61,8 @@ content: |
 ### 编辑规则

 - 修改已有插件时保留 `name`、`author`、`pluginType` 和已有兼容字段。
+- 新插件的 `author` 使用启动提示词中给出的插件作者，不要自行编造作者名；启动提示词未给出作者时先向用户确认。
+- `fullName` 由 `author/name` 组成，作者变化会导致插件身份变化，不要随意修改。
 - 只修改需求涉及的字段，避免删除未知的 YAML 字段。
 - 脚本过长时仍放在同一个 `content` block scalar 中。
 - 提交前检查 YAML 可解析、`content` 非空、版本和插件类型没有被意外修改。
@@ -57,4 +57,41 @@ return class DemoAccess extends BaseAccess {
 - `onTestRequest` 应调用实际 API 方法并在失败时抛出异常。
 - 对外 API 方法应统一处理分页、错误和返回字段。
 - 使用 `this.logger` 或框架提供的 logger，禁止 `console.log`。
- 一般将API接口方法封装到Access中，其他plugin调用access的方法当做client sdk使用
+- 一般将API接口方法封装到Access中，其他plugin调用access的方法当做client sdk使用
+
+## 字段动态显隐
+
+多种鉴权方式（例如「ApiKey」和「AccessKey签名」）共用一个授权时，
+用字段上的 `mergeScript` 按所选方式显隐对应字段，只让用户看到当前方式需要的字段：
+
+```yaml
+input:
+  authType:
+    title: 鉴权方式
+    value: apikey
+    component:
+      name: a-select
+      vModel: value
+      options:
+        - { label: AccessKey签名, value: aksk }
+        - { label: ApiKey, value: apikey }
+  accessKeyId:
+    title: accessKeyId
+    component:
+      name: a-input
+      vModel: value
+    mergeScript: |2-
+
+          return {
+            show: ctx.compute(({form})=>{
+              return !form.access.authType || form.access.authType === 'aksk';
+            })
+          }
+```
+
+- 判断必须写在 `ctx.compute(({form})=>{ ... })` 回调里；脚本本身在插件定义阶段就拼好了，
+  那时表单还没打开，用参数在服务端判断字段值没有意义。
+- 授权表单的字段值在 `form.access.xxx`（任务表单才是 `form.xxx`）。
+- 历史授权没有 `authType` 字段，条件里要用 `!form.access.authType || ...` 兜底走旧逻辑。
+
+完整用法见父 Skill 的 `references/merge-script.md`。
@@ -75,7 +75,7 @@ Certd 是可私有化部署的 SSL/TLS 证书自动化管理平台，提供 Web
 - 只有真正机械化的大批量替换、格式化或生成任务才考虑脚本/工具。若必须使用临时脚本，应放在临时目录并在同一个受控步骤内完成创建、执行、删除；不要把临时脚本落在仓库里跨多步工具调用执行。
 - 不要主动运行 `pnpm install`；缺依赖、TTY、网络导致安装或测试失败时，停止尝试并说明环境问题。
 - 优先沿用现有模块、插件、service、页面模式；不要为形式上的复用制造过度抽象。
- 代码可读性优先于短写法。尽量少用三元表达式，优先使用完整的 `if/else`；复杂条件、链式调用、内联对象和多层 helper 调用要拆成命名清晰的中间变量或小方法。
+- 【重要重要重要】代码可读性优先于短写法。尽量少用三元表达式，优先使用完整的 `if/else`【其他技能与此条要求冲突的，以此条要求为准】；复杂条件、链式调用、内联对象和多层 helper 调用要拆成命名清晰的中间变量或小方法。
 - 方法调用链不要直接塞进另一个方法参数；先用有意义的局部变量承接返回值，再传入下一步。
 - 不要在单一表达式内嵌套分支、对象构造与方法调用。优先使用清晰的 `if/else` 分支；仅在确实能降低复杂度时才提取有意义的中间变量，避免为拆分而增加阅读跳转。
 - 注释优先使用中文，尤其是业务规则、兼容逻辑、协议细节和隐藏风险；文件已有英文风格或引用外部术语时可保持一致。
@@ -3,6 +3,53 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.

+# [1.45.0](https://github.com/certd/certd/compare/v1.44.4...v1.45.0) (2026-10-02)
+
+### Bug Fixes
+
+* [BUG]使用天翼云CDN部署证书时无法匹配域名 ([bb1f232](https://github.com/certd/certd/commit/bb1f232f415c522851dede979f5d609dda844fd3))
+* 缺失运行时嵌套依赖时添加清除缓存提示 ([2d0b85b](https://github.com/certd/certd/commit/2d0b85b3054fc1aa82b3ab5db34a2a56308f71f2))
+* 支持google persist校验方式 ([97d2b50](https://github.com/certd/certd/commit/97d2b5007409ec79ea864d437c473a2f9b5dfae4))
+* **config:** 修复环境变量加载逻辑并更新配置文件 ([07f0d3b](https://github.com/certd/certd/commit/07f0d3b4d626628a0e3dfc7e5c52e8c4a98bad47))
+* **ctyun-cdn:** 修复天翼云CDN部署插件的域名选择问题 ([ea7d14c](https://github.com/certd/certd/commit/ea7d14c289b8720781bf101bfef59eac7bb03765))
+* **webhook:** 修复模版转义换行符，避免手动上传的证书报错 ([2735feb](https://github.com/certd/certd/commit/2735feb3302f8308708dafc8b295adcd4b91d7f0))
+
+### Features
+
+* **client:** 新增客户端管理功能 ([3dbbe72](https://github.com/certd/certd/commit/3dbbe72fc15c114ca6b5e8ff45cb21f258b80650))
+
+### Performance Improvements
+
+* 宝塔站点列表支持搜索和排序 ([4420472](https://github.com/certd/certd/commit/4420472f8fac272d30fb8ccb1cc2ee9763989001))
+* 网宿插件双鉴权支持 ([241b2e5](https://github.com/certd/certd/commit/241b2e55848471e61b5d2be0c87a7dc9a0d29557))
+* **monitor:** 站点证书监控支持手动选中触发检查 ([f60e63f](https://github.com/certd/certd/commit/f60e63fbaf00460d5050cd7705bd75d57dec202d))
+* **open-api:** openkey增加用途备注 ([bbeaf61](https://github.com/certd/certd/commit/bbeaf617d19750515f6eca51863e74e23bc1de50))
+* **tencent clb:** 修改所有CLB地域的endpoint为就近接入 ([c427735](https://github.com/certd/certd/commit/c4277350bcc8cf034cf4e76db2a6daa1842bc5d7))
+
+## [1.44.4](https://github.com/certd/certd/compare/v1.44.3...v1.44.4) (2026-09-12)
+
+### Bug Fixes
+
+* 修复添加步骤会修改所有步骤标题的bug ([51e83e4](https://github.com/certd/certd/commit/51e83e4c38f7f319314fdc38ef33cf5720b2dde0))
+* 修复证书插件配置无法打开的bug ([5563abb](https://github.com/certd/certd/commit/5563abb13a62140f4dee668ab768cf4ff9371ddb))
+
+### Performance Improvements
+
+* 新增余额管理，管理员充值功能 ([bded368](https://github.com/certd/certd/commit/bded368cbb8974b6937ae260e448c25fae5c33ad))
+* **acme-account-access:** AcmeAccount授权允许修改eab，重新生成account ([6a649aa](https://github.com/certd/certd/commit/6a649aaca083ccd3b517f7d676a58220aa33b37d))
+* **ui:** 商业版套餐购买不要求设置支付方式 ([e971145](https://github.com/certd/certd/commit/e9711456860d7db40914a0c295534f7bca56f83c))
+
+## [1.44.3](https://github.com/certd/certd/compare/v1.44.2...v1.44.3) (2026-09-06)
+
+### Bug Fixes
+
+* **plugin-service:** 修复同步自己开发的云端插件不显示已安装状态问题 ([dac94b6](https://github.com/certd/certd/commit/dac94b64f0ceb7176e2cf07ce220be0aa5ed98d2))
+* **plugin:** 修复插件配置保存与加载的相关问题 ([bd94334](https://github.com/certd/certd/commit/bd9433478a43d5d64ce6370386d0fe0aaff07d2e))
+
+### Performance Improvements
+
+* **plugin:** add Fastly custom TLS certificates integration ([#797](https://github.com/certd/certd/issues/797)) [@szhu25](https://github.com/szhu25) ([2a2e963](https://github.com/certd/certd/commit/2a2e963914c4dfc192cbe0a4bbb9c115e626da01))
+
 ## [1.44.2](https://github.com/certd/certd/compare/v1.44.1...v1.44.2) (2026-09-03)

 ### Bug Fixes
@@ -105,14 +105,17 @@ https://certd.handfree.work/

 #### Docker镜像说明：

-##### 1. 镜像地址格式：
+##### 1. 镜像地址：

-```
-registry.cn-shenzhen.aliyuncs.com/certd/certd:[version-][system-][latest/stable]  
------------ ↑ 镜像地址 ------------- ↑ 镜像名 -- ↑指定版本- ↑基础系统- ↑最新版本类型 (中括号表示可选)       
+| 镜像仓库 | 最新预览版  | 稳定版 | slim版 | armv7版 | 
+| --- | --- | --- | --- | --- | 
+| 阿里云【默认】 | `registry.cn-shenzhen.aliyuncs.com/certd/certd:latest` | `certd:stable` | `certd:slim` | `certd:armv7` |
+| Docker Hub | `certd/certd:latest` | `certd:stable` | `certd:slim` | `certd:armv7` |
+| GitHub Packages | `ghcr.io/certd/certd:latest` | `certd:stable` | `certd:slim` | `certd:armv7` |

-```
-##### 2. 版本标签：
+> 后面的各个版本省略了镜像地址，使用时需要将镜像地址拼接完整。
+
+##### 2. 版本标签说明：

 **最新版本标签：**

@@ -131,16 +134,8 @@ registry.cn-shenzhen.aliyuncs.com/certd/certd:[version-][system-][latest/stable]
 | slim | `certd:slim` |  Debian slim | 基于glibc，dns解析兼容性好 | `certd:slim-stable` | `certd:1.43.0-slim` |
 | armv7 | `certd:armv7` |  Alpine Linux | ARMv7 架构专用版本 | `certd:armv7-stable` | `certd:1.43.0-armv7` |

-##### 3. 镜像地址：

-| 镜像仓库 | 最新预览版  | slim | armv7 | 
-| --- | --- | --- | --- | 
-| 阿里云【默认】 | `registry.cn-shenzhen.aliyuncs.com/certd/certd:latest` | `certd:slim` | `certd:armv7` |
-| Docker Hub | `certd/certd:latest` | `certd:slim` |
-| GitHub Packages | `ghcr.io/certd/certd:latest` | `certd:slim` | `certd:armv7` |
-
-> 1. 后面的各个版本省略了镜像地址，使用时需要将镜像地址拼接完整。
-> 2. 如果您不确定使用哪个版本，请使用默认的 `certd:latest` 版本。
+> 如果您不确定使用哪个版本，请使用默认的 `certd:latest` 版本。

 最新版本号：
 ![GitHub release (latest by date)](https://img.shields.io/github/v/release/certd/certd?label=Latest%20Release&sort=semver)
@@ -3,6 +3,60 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.

+# [1.45.0](https://github.com/certd/certd/compare/v1.44.4...v1.45.0) (2026-10-02)
+
+### Bug Fixes
+
+* [BUG]使用天翼云CDN部署证书时无法匹配域名 ([bb1f232](https://github.com/certd/certd/commit/bb1f232f415c522851dede979f5d609dda844fd3))
+* 缺失运行时嵌套依赖时添加清除缓存提示 ([2d0b85b](https://github.com/certd/certd/commit/2d0b85b3054fc1aa82b3ab5db34a2a56308f71f2))
+* 支持google persist校验方式 ([97d2b50](https://github.com/certd/certd/commit/97d2b5007409ec79ea864d437c473a2f9b5dfae4))
+* **config:** 修复环境变量加载逻辑并更新配置文件 ([07f0d3b](https://github.com/certd/certd/commit/07f0d3b4d626628a0e3dfc7e5c52e8c4a98bad47))
+* **ctyun-cdn:** 修复天翼云CDN部署插件的域名选择问题 ([ea7d14c](https://github.com/certd/certd/commit/ea7d14c289b8720781bf101bfef59eac7bb03765))
+* **webhook:** 修复模版转义换行符，避免手动上传的证书报错 ([2735feb](https://github.com/certd/certd/commit/2735feb3302f8308708dafc8b295adcd4b91d7f0))
+
+### Features
+
+* **client:** 新增客户端管理功能 ([3dbbe72](https://github.com/certd/certd/commit/3dbbe72fc15c114ca6b5e8ff45cb21f258b80650))
+
+### Performance Improvements
+
+* 宝塔站点列表支持搜索和排序 ([4420472](https://github.com/certd/certd/commit/4420472f8fac272d30fb8ccb1cc2ee9763989001))
+* 网宿插件双鉴权支持 ([241b2e5](https://github.com/certd/certd/commit/241b2e55848471e61b5d2be0c87a7dc9a0d29557))
+* **monitor:** 站点证书监控支持手动选中触发检查 ([f60e63f](https://github.com/certd/certd/commit/f60e63fbaf00460d5050cd7705bd75d57dec202d))
+* **open-api:** openkey增加用途备注 ([bbeaf61](https://github.com/certd/certd/commit/bbeaf617d19750515f6eca51863e74e23bc1de50))
+* **tencent clb:** 修改所有CLB地域的endpoint为就近接入 ([c427735](https://github.com/certd/certd/commit/c4277350bcc8cf034cf4e76db2a6daa1842bc5d7))
+
+## [1.44.4](https://github.com/certd/certd/compare/v1.44.3...v1.44.4) (2026-09-12)
+
+### Bug Fixes
+
+* 修复添加步骤会修改所有步骤标题的bug ([51e83e4](https://github.com/certd/certd/commit/51e83e4c38f7f319314fdc38ef33cf5720b2dde0))
+* 修复证书插件配置无法打开的bug ([5563abb](https://github.com/certd/certd/commit/5563abb13a62140f4dee668ab768cf4ff9371ddb))
+
+### Performance Improvements
+
+* 新增余额管理，管理员充值功能 ([bded368](https://github.com/certd/certd/commit/bded368cbb8974b6937ae260e448c25fae5c33ad))
+* **acme-account-access:** AcmeAccount授权允许修改eab，重新生成account ([6a649aa](https://github.com/certd/certd/commit/6a649aaca083ccd3b517f7d676a58220aa33b37d))
+* **ui:** 商业版套餐购买不要求设置支付方式 ([e971145](https://github.com/certd/certd/commit/e9711456860d7db40914a0c295534f7bca56f83c))
+
+## [1.44.3](https://github.com/certd/certd/compare/v1.44.2...v1.44.3) (2026-09-06)
+
+### Bug Fixes
+
+* **plugin-service:** 修复同步自己开发的云端插件不显示已安装状态问题 ([dac94b6](https://github.com/certd/certd/commit/dac94b64f0ceb7176e2cf07ce220be0aa5ed98d2))
+* **plugin:** 修复插件配置保存与加载的相关问题 ([bd94334](https://github.com/certd/certd/commit/bd9433478a43d5d64ce6370386d0fe0aaff07d2e))
+
+### Performance Improvements
+
+* **plugin:** add Fastly custom TLS certificates integration ([#797](https://github.com/certd/certd/issues/797)) [@szhu25](https://github.com/szhu25) ([2a2e963](https://github.com/certd/certd/commit/2a2e963914c4dfc192cbe0a4bbb9c115e626da01))
+
+## [1.44.2](https://github.com/certd/certd/compare/v1.44.1...v1.44.2) (2026-09-03)
+
+### Bug Fixes
+
+* 修复插件市场插件安装无效的bug ([15d2bd8](https://github.com/certd/certd/commit/15d2bd8484a9ddd142bf4ef03d839c74405f9e6d))
+* preserve Route53 TXT record values ([#791](https://github.com/certd/certd/issues/791)) ([f5430a8](https://github.com/certd/certd/commit/f5430a8925cf6cf4e16c75f2358fbd78437e6705))
+
 ## [1.44.1](https://github.com/certd/certd/compare/v1.44.0...v1.44.1) (2026-09-02)

 ### Bug Fixes
@@ -6,13 +6,17 @@

 Certd 提供多种 Docker 镜像版本，您可以根据需要选择：

-#### 1. 镜像地址格式：
+#### 1. 镜像地址：

-```
-registry.cn-shenzhen.aliyuncs.com/certd/certd:[version-][system-][latest/stable]  
------------ ↑ 镜像地址 ------------- ↑ 镜像名 -- ↑指定版本- ↑基础系统- ↑最新版本类型             
-```
-#### 2. 版本标签：
+| 镜像仓库 | 最新预览版  | 稳定版 | slim版 | armv7版 | 
+| --- | --- | --- | --- | --- | 
+| 阿里云【默认】 | `registry.cn-shenzhen.aliyuncs.com/certd/certd:latest` | `certd:stable` | `certd:slim` | `certd:armv7` |
+| Docker Hub | `certd/certd:latest` | `certd:stable` | `certd:slim` | `certd:armv7` |
+| GitHub Packages | `ghcr.io/certd/certd:latest` | `certd:stable` | `certd:slim` | `certd:armv7` |
+
+> 后面的各个版本省略了镜像地址，使用时需要将镜像地址拼接完整。
+
+#### 2. 版本标签说明：

 **最新版本标签：**

@@ -25,22 +29,14 @@ registry.cn-shenzhen.aliyuncs.com/certd/certd:[version-][system-][latest/stable]

 > 根据基础镜像不同，分为如下三个分支版本，没有特殊需求选择默认的即可（他们功能是一样的）

-| 系统版本 | 版本标签 |  基础系统 | 说明 | 稳定版标签 | 指定版本 |
-| --- | --- | --- | --- | --- | --- | 
-| alpine【默认】 | `certd:latest` |  Alpine Linux | 默认版本，镜像体积小，支持x86、ARM架构  | `certd:stable` | `certd:1.43.0` |
+| 系统版本 | 版本标签 |   基础系统 | 说明 | 稳定版标签 | 指定版本 |
+| --- | --- | --- | --- | --- | --- |
+| alpine【默认】 | `certd:latest` |  Alpine Linux | 默认版本，镜像体积小  | `certd:stable` | `certd:1.43.0` |
 | slim | `certd:slim` |  Debian slim | 基于glibc，dns解析兼容性好 | `certd:slim-stable` | `certd:1.43.0-slim` |
 | armv7 | `certd:armv7` |  Alpine Linux | ARMv7 架构专用版本 | `certd:armv7-stable` | `certd:1.43.0-armv7` |

-#### 3. 镜像地址：

-| 镜像仓库 | 最新预览版  | slim版 | armv7版 | 
-| --- | --- | --- |  --- |    
-| 阿里云【默认】 | `registry.cn-shenzhen.aliyuncs.com/certd/certd:latest` | `certd:slim` | `certd:armv7` |
-| Docker Hub | `certd/certd:latest` | `certd:slim` | `certd:armv7` |
-| GitHub Packages | `ghcr.io/certd/certd:latest` | `certd:slim` | `certd:armv7` |
-
-> 1. 后面的各个版本省略了镜像地址，使用时需要将镜像地址拼接完整。
-> 2. 如果您不确定使用哪个版本，请使用默认的 `certd:latest` 版本。
+> 如果您不确定使用哪个版本，请使用默认的 `certd:latest` 版本。

 最新版本号：
 ![GitHub release (latest by date)](https://img.shields.io/github/v/release/certd/certd?label=Latest%20Release&sort=semver)
@@ -36,52 +36,53 @@
 | 32.| **Dokploy授权** |  | 
 | 33.| **Dynadot授权** |  | 
 | 34.| **farcdn授权** |  | 
-| 35.| **FlexCDN授权** |  | 
-| 36.| **Gcore** | Gcore | 
-| 37.| **Github授权** |  | 
-| 38.| **godaddy授权** |  | 
-| 39.| **HiPM DNSMgr** | HiPM DNSMgr API Token 授权 | 
-| 40.| **金山云授权** |  | 
-| 41.| **FTP授权** |  | 
-| 42.| **七牛OSS授权** |  | 
-| 43.| **腾讯云COS授权** | 腾讯云对象存储授权，包含地域和存储桶 | 
-| 44.| **s3/minio授权** | S3/minio oss授权 | 
-| 45.| **namesilo授权** |  | 
-| 46.| **Next Terminal 授权** | 用于访问 Next Terminal API 的授权配置 | 
-| 47.| **Nginx Proxy Manager 授权** | 用于登录 Nginx Proxy Manager，并为代理主机证书部署提供授权。 | 
-| 48.| **1panel授权** | 账号和密码 | 
-| 49.| **支付宝** |  | 
-| 50.| **白山云授权** |  | 
-| 51.| **宝塔云WAF授权** | 用于连接和管理宝塔云WAF服务的授权配置 | 
-| 52.| **cdnfly授权** |  | 
-| 53.| **k8s授权** |  | 
-| 54.| **括彩云cdn授权** | 括彩云CDN，每月免费30G，[注册即领](https://kuocaicdn.com/register?code=8mn536rrzfbf8) | 
-| 55.| **LeCDN授权** |  | 
-| 56.| **lucky** |  | 
-| 57.| **猫云授权** |  | 
-| 58.| **plesk授权** |  | 
-| 59.| **长亭雷池授权** |  | 
-| 60.| **群晖登录授权** |  | 
-| 61.| **uniCloud** | unicloud授权 | 
-| 62.| **微信支付** |  | 
-| 63.| **易盾rcdn授权** | 易盾CDN，每月免费30G，[注册即领](https://rhcdn.yiduncdn.com/register?code=8mn536rrzfbf8) | 
-| 64.| **易发云短信** | sms.yfyidc.cn/ | 
-| 65.| **易盾DCDN授权** | https://user.yiduncdn.com | 
-| 66.| **易支付** |  | 
-| 67.| **proxmox** |  | 
-| 68.| **Spaceship.com 授权** | Spaceship.com API 授权插件 | 
-| 69.| **Technitium DNS Server** | Technitium DNS Server 自建DNS服务器授权 | 
-| 70.| **UCloud授权** | 优刻得授权 | 
-| 71.| **又拍云** |  | 
-| 72.| **网宿授权** |  | 
-| 73.| **西部数码授权** |  | 
-| 74.| **我爱云授权** | 我爱云CDN | 
-| 75.| **新网授权（代理方式）** |  | 
-| 76.| **新网授权** |  | 
-| 77.| **新网互联授权** | 仅支持代理账号，ip需要加入白名单 | 
-| 78.| **Zenlayer授权** | Zenlayer授权 | 
-| 79.| **GoEdge授权** |  | 
-| 80.| **雨云授权** | https://app.rainyun.com/ | 
+| 35.| **Fastly授权** | Fastly CDN / TLS Custom Certificates API 授权 | 
+| 36.| **FlexCDN授权** |  | 
+| 37.| **Gcore** | Gcore | 
+| 38.| **Github授权** |  | 
+| 39.| **godaddy授权** |  | 
+| 40.| **HiPM DNSMgr** | HiPM DNSMgr API Token 授权 | 
+| 41.| **金山云授权** |  | 
+| 42.| **FTP授权** |  | 
+| 43.| **七牛OSS授权** |  | 
+| 44.| **腾讯云COS授权** | 腾讯云对象存储授权，包含地域和存储桶 | 
+| 45.| **s3/minio授权** | S3/minio oss授权 | 
+| 46.| **namesilo授权** |  | 
+| 47.| **Next Terminal 授权** | 用于访问 Next Terminal API 的授权配置 | 
+| 48.| **Nginx Proxy Manager 授权** | 用于登录 Nginx Proxy Manager，并为代理主机证书部署提供授权。 | 
+| 49.| **1panel授权** | 账号和密码 | 
+| 50.| **支付宝** |  | 
+| 51.| **白山云授权** |  | 
+| 52.| **宝塔云WAF授权** | 用于连接和管理宝塔云WAF服务的授权配置 | 
+| 53.| **cdnfly授权** |  | 
+| 54.| **k8s授权** |  | 
+| 55.| **括彩云cdn授权** | 括彩云CDN，每月免费30G，[注册即领](https://kuocaicdn.com/register?code=8mn536rrzfbf8) | 
+| 56.| **LeCDN授权** |  | 
+| 57.| **lucky** |  | 
+| 58.| **猫云授权** |  | 
+| 59.| **plesk授权** |  | 
+| 60.| **长亭雷池授权** |  | 
+| 61.| **群晖登录授权** |  | 
+| 62.| **uniCloud** | unicloud授权 | 
+| 63.| **微信支付** |  | 
+| 64.| **易盾rcdn授权** | 易盾CDN，每月免费30G，[注册即领](https://rhcdn.yiduncdn.com/register?code=8mn536rrzfbf8) | 
+| 65.| **易发云短信** | sms.yfyidc.cn/ | 
+| 66.| **易盾DCDN授权** | https://user.yiduncdn.com | 
+| 67.| **易支付** |  | 
+| 68.| **proxmox** |  | 
+| 69.| **Spaceship.com 授权** | Spaceship.com API 授权插件 | 
+| 70.| **Technitium DNS Server** | Technitium DNS Server 自建DNS服务器授权 | 
+| 71.| **UCloud授权** | 优刻得授权 | 
+| 72.| **又拍云** |  | 
+| 73.| **网宿授权** |  | 
+| 74.| **西部数码授权** |  | 
+| 75.| **我爱云授权** | 我爱云CDN | 
+| 76.| **新网授权（代理方式）** |  | 
+| 77.| **新网授权** |  | 
+| 78.| **新网互联授权** | 仅支持代理账号，ip需要加入白名单 | 
+| 79.| **Zenlayer授权** | Zenlayer授权 | 
+| 80.| **GoEdge授权** |  | 
+| 81.| **雨云授权** | https://app.rainyun.com/ | 

 <style module>
 table th:first-of-type {
@@ -1,5 +1,5 @@
 # 任务插件
-共 `135` 款任务插件    
+共 `139` 款任务插件    
 ## 1. 证书申请

 | 序号 | 名称 | 说明 |
@@ -31,26 +31,30 @@
 | 4.| **中国移动-部署证书到CDN** | 中国移动自动部署证书到CDN | 
 | 5.| **多吉云-部署到多吉云CDN** |  | 
 | 6.| **farcdn-更新证书** | www.farcdn.net | 
-| 7.| **FlexCDN-更新证书** |  | 
-| 8.| **Gcore-刷新Gcore证书** | 刷新现有的证书 | 
-| 9.| **Gcore-部署证书到Gcore** | 仅上传 并不会部署到cdn | 
-| 10.| **GoEdge-更新证书** | GoEdge | 
-| 11.| **金山云-更新CDN证书** | 金山云自动更新CDN证书 | 
-| 12.| **白山云-更新证书** |  | 
-| 13.| **cdnfly-部署证书到cdnfly** | cdnfly | 
-| 14.| **天翼云-部署证书到CDN** | 部署证书到天翼云CDN和全站加速 | 
-| 15.| **括彩云-部署到括彩云CDN** | 括彩云CDN，每月免费30G，[注册即领](https://kuocaicdn.com/register?code=8mn536rrzfbf8) | 
-| 16.| **LeCDN-更新证书V2** | 支持新版本LeCDN | 
-| 17.| **LeCDN-更新证书** |  | 
-| 18.| **Maoyun-更新猫云CDN证书** |  | 
-| 19.| **易盾-部署到易盾DCDN** | 主要是防御，http://user.yiduncdn.com/ | 
-| 20.| **易盾-部署到易盾RCDN** | 易盾CDN，每月免费30G，[注册即领](https://rhcdn.yiduncdn.com/register?code=8mn536rrzfbf8) | 
-| 21.| **雨云-更新证书** | app.rainyun.com | 
-| 22.| **又拍云-部署证书到CDN/USS** | 支持又拍云CDN，又拍云云存储USS | 
-| 23.| **网宿-更新证书** | 网宿证书自动更新 | 
-| 24.| **西数-部署到虚拟主机** | 西部数码部署证书到虚拟主机 | 
-| 25.| **我爱云-部署证书到我爱云CDN** | 部署证书到我爱云CDN | 
-| 26.| **Zenlayer-刷新证书** | 刷新Zenlayer CDN证书 | 
+| 7.| **Fastly-部署TLS激活** | 部署 Fastly 证书 (创建 TLS Activation 绑定证书到域名) | 
+| 8.| **Fastly-清除缓存** | 清除 Fastly 指定 Service 的所有缓存 (Purge All) | 
+| 9.| **Fastly-更新证书** | 自动更新 Fastly CDN 上的已有自定义证书 | 
+| 10.| **Fastly-上传证书到Fastly** | 部署 / 上传 SSL/TLS 自定义证书到 Fastly CDN | 
+| 11.| **FlexCDN-更新证书** |  | 
+| 12.| **Gcore-刷新Gcore证书** | 刷新现有的证书 | 
+| 13.| **Gcore-部署证书到Gcore** | 仅上传 并不会部署到cdn | 
+| 14.| **GoEdge-更新证书** | GoEdge | 
+| 15.| **金山云-更新CDN证书** | 金山云自动更新CDN证书 | 
+| 16.| **白山云-更新证书** |  | 
+| 17.| **cdnfly-部署证书到cdnfly** | cdnfly | 
+| 18.| **天翼云-部署证书到CDN** | 部署证书到天翼云CDN和全站加速 | 
+| 19.| **括彩云-部署到括彩云CDN** | 括彩云CDN，每月免费30G，[注册即领](https://kuocaicdn.com/register?code=8mn536rrzfbf8) | 
+| 20.| **LeCDN-更新证书V2** | 支持新版本LeCDN | 
+| 21.| **LeCDN-更新证书** |  | 
+| 22.| **Maoyun-更新猫云CDN证书** |  | 
+| 23.| **易盾-部署到易盾DCDN** | 主要是防御，http://user.yiduncdn.com/ | 
+| 24.| **易盾-部署到易盾RCDN** | 易盾CDN，每月免费30G，[注册即领](https://rhcdn.yiduncdn.com/register?code=8mn536rrzfbf8) | 
+| 25.| **雨云-更新证书** | app.rainyun.com | 
+| 26.| **又拍云-部署证书到CDN/USS** | 支持又拍云CDN，又拍云云存储USS | 
+| 27.| **网宿-更新证书** | 网宿证书自动更新 | 
+| 28.| **西数-部署到虚拟主机** | 西部数码部署证书到虚拟主机 | 
+| 29.| **我爱云-部署证书到我爱云CDN** | 部署证书到我爱云CDN | 
+| 30.| **Zenlayer-刷新证书** | 刷新Zenlayer CDN证书 | 
 ## 4. 面板

 | 序号 | 名称 | 说明 |
@@ -5,8 +5,8 @@
 `Certd`默认启用https，监听7002端口    
 如果你想关闭https，或者修改端口，可以在环境变量中配置
 ```shell
-CERTD_HTTPS_ENABLE=true
-CERTD_HTTPS_port=7002
+certd_https_enabled=true
+certd_https_port=7002

 ```

@@ -9,5 +9,5 @@
    }
  },
  "npmClient": "pnpm",
-  "version": "1.44.2"
+  "version": "1.45.0"
 }
@@ -3,6 +3,20 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.

+# [1.45.0](https://github.com/publishlab/node-acme-client/compare/v1.44.4...v1.45.0) (2026-10-02)
+
+### Bug Fixes
+
+* 支持google persist校验方式 ([97d2b50](https://github.com/publishlab/node-acme-client/commit/97d2b5007409ec79ea864d437c473a2f9b5dfae4))
+
+## [1.44.4](https://github.com/publishlab/node-acme-client/compare/v1.44.3...v1.44.4) (2026-09-12)
+
+**Note:** Version bump only for package @certd/acme-client
+
+## [1.44.3](https://github.com/publishlab/node-acme-client/compare/v1.44.2...v1.44.3) (2026-09-06)
+
+**Note:** Version bump only for package @certd/acme-client
+
 ## [1.44.2](https://github.com/publishlab/node-acme-client/compare/v1.44.1...v1.44.2) (2026-09-03)

 **Note:** Version bump only for package @certd/acme-client
@@ -3,7 +3,7 @@
    "description": "Simple and unopinionated ACME client",
    "private": false,
    "author": "nmorsman",
-    "version": "1.44.2",
+    "version": "1.45.0",
    "type": "module",
    "module": "./dist/index.js",
    "main": "./dist/index.js",
@@ -18,7 +18,7 @@
        "types"
    ],
    "dependencies": {
-        "@certd/basic": "^1.44.2",
+        "@certd/basic": "^1.45.0",
        "@peculiar/x509": "^1.11.0",
        "asn1js": "^3.0.5",
        "axios": "^1.9.0",
@@ -27,6 +27,7 @@
        "https-proxy-agent": "^7.0.5",
        "lodash-es": "^4.17.21",
        "node-forge": "^1.3.1",
+        "psl": "^1.15.0",
        "punycode.js": "^2.3.1"
    },
    "devDependencies": {
@@ -76,5 +77,5 @@
    "bugs": {
        "url": "https://github.com/publishlab/node-acme-client/issues"
    },
-    "gitHead": "fe738fa7d4622016ed7d506c501df85393b6c857"
+    "gitHead": "fcbf1045fe3806fa1a0bebf5038a6f67aec283d0"
 }
@@ -0,0 +1,21 @@
+// @ts-ignore
+import psl from "psl";
+
+export function getDnsPersistIssuer(directoryUrl?: string) {
+  if (!directoryUrl) {
+    return "letsencrypt.org";
+  }
+
+  let directory: URL;
+  try {
+    directory = new URL(directoryUrl);
+  } catch {
+    throw new Error(`ACME Directory URL无效，无法生成DNS持久验证Issuer：${directoryUrl}`);
+  }
+
+  const issuer = psl.get(directory.hostname);
+  if (!issuer) {
+    throw new Error(`无法从ACME Directory URL获取可注册主域名：${directory.hostname}`);
+  }
+  return issuer;
+}
@@ -79,3 +79,4 @@ export * from './verify.js'
 export * from './error.js'

 export * from './util.js'
+export * from './dns-persist.js'
@@ -3,6 +3,20 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.

+# [1.45.0](https://github.com/certd/certd/compare/v1.44.4...v1.45.0) (2026-10-02)
+
+### Bug Fixes
+
+* **webhook:** 修复模版转义换行符，避免手动上传的证书报错 ([2735feb](https://github.com/certd/certd/commit/2735feb3302f8308708dafc8b295adcd4b91d7f0))
+
+## [1.44.4](https://github.com/certd/certd/compare/v1.44.3...v1.44.4) (2026-09-12)
+
+**Note:** Version bump only for package @certd/basic
+
+## [1.44.3](https://github.com/certd/certd/compare/v1.44.2...v1.44.3) (2026-09-06)
+
+**Note:** Version bump only for package @certd/basic
+
 ## [1.44.2](https://github.com/certd/certd/compare/v1.44.1...v1.44.2) (2026-09-03)

 **Note:** Version bump only for package @certd/basic
@@ -1 +1 @@
-21:57
+00:51
@@ -1,7 +1,7 @@
 {
  "name": "@certd/basic",
  "private": false,
-  "version": "1.44.2",
+  "version": "1.45.0",
  "type": "module",
  "main": "./dist/index.js",
  "module": "./dist/index.js",
@@ -54,5 +54,5 @@
    "tslib": "^2.8.1",
    "typescript": "^5.4.2"
  },
-  "gitHead": "fe738fa7d4622016ed7d506c501df85393b6c857"
+  "gitHead": "fcbf1045fe3806fa1a0bebf5038a6f67aec283d0"
 }
@@ -1,6 +1,21 @@
 import dayjs from "dayjs";

 export const stringUtils = {
+  replaceTemplate(target: string, body: Record<string, unknown>, urlEncode = false) {
+    let bodyStr = target;
+    for (const key of Object.keys(body)) {
+      const rawValue = body[key] == null ? "" : String(body[key]);
+      let value = urlEncode ? encodeURIComponent(rawValue) : rawValue;
+      value = value.replace(/[\u0000-\u001f]/g, char => {
+        const escapes: Record<string, string> = { "\b": "\\b", "\f": "\\f", "\n": "\\n", "\r": "\\r", "\t": "\\t" };
+        return escapes[char] ?? `\\u${char.charCodeAt(0).toString(16).padStart(4, "0")}`;
+      });
+      bodyStr = bodyStr.replaceAll(`\${${key}}`, value);
+      bodyStr = bodyStr.replaceAll(`{${key}}`, value);
+    }
+    return bodyStr;
+  },
+
  maxLength(str?: string, length = 100) {
    if (str) {
      return str.length > length ? str.slice(0, length) + "..." : str;
@@ -3,6 +3,20 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.

+# [1.45.0](https://github.com/certd/certd/compare/v1.44.4...v1.45.0) (2026-10-02)
+
+### Bug Fixes
+
+* 缺失运行时嵌套依赖时添加清除缓存提示 ([2d0b85b](https://github.com/certd/certd/commit/2d0b85b3054fc1aa82b3ab5db34a2a56308f71f2))
+
+## [1.44.4](https://github.com/certd/certd/compare/v1.44.3...v1.44.4) (2026-09-12)
+
+**Note:** Version bump only for package @certd/pipeline
+
+## [1.44.3](https://github.com/certd/certd/compare/v1.44.2...v1.44.3) (2026-09-06)
+
+**Note:** Version bump only for package @certd/pipeline
+
 ## [1.44.2](https://github.com/certd/certd/compare/v1.44.1...v1.44.2) (2026-09-03)

 **Note:** Version bump only for package @certd/pipeline
@@ -1,7 +1,7 @@
 {
  "name": "@certd/pipeline",
  "private": false,
-  "version": "1.44.2",
+  "version": "1.45.0",
  "type": "module",
  "main": "./dist/index.js",
  "module": "./dist/index.js",
@@ -21,8 +21,8 @@
    "lint": "eslint --fix --ext .ts src"
  },
  "dependencies": {
-    "@certd/basic": "^1.44.2",
-    "@certd/plus-core": "^1.44.2",
+    "@certd/basic": "^1.45.0",
+    "@certd/plus-core": "^1.45.0",
    "dayjs": "^1.11.7",
    "lodash-es": "^4.17.21",
    "reflect-metadata": "^0.2.2"
@@ -51,5 +51,5 @@
    "tslib": "^2.8.1",
    "typescript": "^5.4.2"
  },
-  "gitHead": "fe738fa7d4622016ed7d506c501df85393b6c857"
+  "gitHead": "fcbf1045fe3806fa1a0bebf5038a6f67aec283d0"
 }
@@ -64,6 +64,28 @@ describe("RuntimeDepsService", () => {
    assert.equal(mod.value, 42);
  });

+  it("logs a cache clearing hint when a nested runtime dependency is missing", async () => {
+    const rootDir = fs.mkdtempSync(path.join(os.tmpdir(), "certd-runtime-deps-missing-nested-"));
+    const packageDir = path.join(rootDir, "node_modules", "runtime-only");
+    fs.mkdirSync(packageDir, { recursive: true });
+    fs.writeFileSync(path.join(rootDir, "package.json"), JSON.stringify({ name: "runtime-root", type: "module" }), "utf8");
+    fs.writeFileSync(path.join(packageDir, "package.json"), JSON.stringify({ name: "runtime-only", main: "index.js" }), "utf8");
+    fs.writeFileSync(path.join(packageDir, "index.js"), "module.exports = require('missing-nested');\n", "utf8");
+    const logs: string[] = [];
+    const logger = {
+      info() {},
+      warn() {},
+      error(message: string, ...args: any[]) {
+        logs.push([message, ...args.map(item => item?.message || String(item))].join(" "));
+      },
+    };
+    const service = new RuntimeDepsService({ rootDir }, null);
+
+    await assert.rejects(() => service.importRuntime("runtime-only", logger));
+    assert.ok(logs.some(message => message.includes("Cannot find module 'missing-nested'")));
+    assert.ok(logs.some(message => message.includes("插件管理页面->清除缓存依赖->重启certd")));
+  });
+
  it("installs configured lazy dependency when import target is missing", async () => {
    const rootDir = fs.mkdtempSync(path.join(os.tmpdir(), "certd-runtime-deps-lazy-"));
    const service = new RuntimeDepsService({ rootDir, lazyDependencies: { "lazy-pkg": "^1.2.3" } }, null);
@@ -251,6 +251,7 @@ export class RuntimeDepsService {
    }

    let resolved: string;
+    let fromRuntimeDeps = false;
    try {
      //尝试加载本项目依赖
      resolved = this.resolveProjectSpecifier(specifier).resolved;
@@ -258,13 +259,22 @@ export class RuntimeDepsService {
      if (!this.isModuleNotFoundError(error)) {
        throw error;
      }
+      fromRuntimeDeps = true;
      resolved = await this.resolveLazyOrInstallSpecifier(specifier, logger);
    }
    if (!resolved) {
      throw new Error(`依赖未安装成功: ${specifier}`);
    }

-    return await import(pathToFileURL(resolved).href);
+    try {
+      return await import(pathToFileURL(resolved).href);
+    } catch (error: any) {
+      if (fromRuntimeDeps && this.isModuleNotFoundError(error)) {
+        logger.error?.("动态依赖加载失败:", error);
+        logger.error?.("动态依赖加载失败，请前往插件管理页面->清除缓存依赖->重启certd后重试");
+      }
+      throw error;
+    }
  }

  //动态获取模块解析
@@ -3,6 +3,18 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.

+# [1.45.0](https://github.com/certd/certd/compare/v1.44.4...v1.45.0) (2026-10-02)
+
+**Note:** Version bump only for package @certd/lib-huawei
+
+## [1.44.4](https://github.com/certd/certd/compare/v1.44.3...v1.44.4) (2026-09-12)
+
+**Note:** Version bump only for package @certd/lib-huawei
+
+## [1.44.3](https://github.com/certd/certd/compare/v1.44.2...v1.44.3) (2026-09-06)
+
+**Note:** Version bump only for package @certd/lib-huawei
+
 ## [1.44.2](https://github.com/certd/certd/compare/v1.44.1...v1.44.2) (2026-09-03)

 **Note:** Version bump only for package @certd/lib-huawei
@@ -1,7 +1,7 @@
 {
  "name": "@certd/lib-huawei",
  "private": false,
-  "version": "1.44.2",
+  "version": "1.45.0",
  "main": "./dist/bundle.js",
  "module": "./dist/bundle.js",
  "types": "./dist/d/index.d.ts",
@@ -31,5 +31,5 @@
    "prettier": "3.3.3",
    "tslib": "^2.8.1"
  },
-  "gitHead": "fe738fa7d4622016ed7d506c501df85393b6c857"
+  "gitHead": "fcbf1045fe3806fa1a0bebf5038a6f67aec283d0"
 }
@@ -3,6 +3,18 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.

+# [1.45.0](https://github.com/certd/certd/compare/v1.44.4...v1.45.0) (2026-10-02)
+
+**Note:** Version bump only for package @certd/lib-iframe
+
+## [1.44.4](https://github.com/certd/certd/compare/v1.44.3...v1.44.4) (2026-09-12)
+
+**Note:** Version bump only for package @certd/lib-iframe
+
+## [1.44.3](https://github.com/certd/certd/compare/v1.44.2...v1.44.3) (2026-09-06)
+
+**Note:** Version bump only for package @certd/lib-iframe
+
 ## [1.44.2](https://github.com/certd/certd/compare/v1.44.1...v1.44.2) (2026-09-03)

 **Note:** Version bump only for package @certd/lib-iframe
@@ -1,7 +1,7 @@
 {
  "name": "@certd/lib-iframe",
  "private": false,
-  "version": "1.44.2",
+  "version": "1.45.0",
  "type": "module",
  "main": "./dist/index.js",
  "module": "./dist/index.js",
@@ -37,5 +37,5 @@
    "tslib": "^2.8.1",
    "typescript": "^5.4.2"
  },
-  "gitHead": "fe738fa7d4622016ed7d506c501df85393b6c857"
+  "gitHead": "fcbf1045fe3806fa1a0bebf5038a6f67aec283d0"
 }
@@ -3,6 +3,18 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.

+# [1.45.0](https://github.com/certd/certd/compare/v1.44.4...v1.45.0) (2026-10-02)
+
+**Note:** Version bump only for package @certd/jdcloud
+
+## [1.44.4](https://github.com/certd/certd/compare/v1.44.3...v1.44.4) (2026-09-12)
+
+**Note:** Version bump only for package @certd/jdcloud
+
+## [1.44.3](https://github.com/certd/certd/compare/v1.44.2...v1.44.3) (2026-09-06)
+
+**Note:** Version bump only for package @certd/jdcloud
+
 ## [1.44.2](https://github.com/certd/certd/compare/v1.44.1...v1.44.2) (2026-09-03)

 **Note:** Version bump only for package @certd/jdcloud
@@ -1,6 +1,6 @@
 {
  "name": "@certd/jdcloud",
-  "version": "1.44.2",
+  "version": "1.45.0",
  "description": "jdcloud openApi sdk",
  "main": "./dist/bundle.js",
  "module": "./dist/bundle.js",
@@ -63,5 +63,5 @@
      "fetch"
    ]
  },
-  "gitHead": "fe738fa7d4622016ed7d506c501df85393b6c857"
+  "gitHead": "fcbf1045fe3806fa1a0bebf5038a6f67aec283d0"
 }
@@ -3,6 +3,18 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.

+# [1.45.0](https://github.com/certd/certd/compare/v1.44.4...v1.45.0) (2026-10-02)
+
+**Note:** Version bump only for package @certd/lib-k8s
+
+## [1.44.4](https://github.com/certd/certd/compare/v1.44.3...v1.44.4) (2026-09-12)
+
+**Note:** Version bump only for package @certd/lib-k8s
+
+## [1.44.3](https://github.com/certd/certd/compare/v1.44.2...v1.44.3) (2026-09-06)
+
+**Note:** Version bump only for package @certd/lib-k8s
+
 ## [1.44.2](https://github.com/certd/certd/compare/v1.44.1...v1.44.2) (2026-09-03)

 **Note:** Version bump only for package @certd/lib-k8s
@@ -1,7 +1,7 @@
 {
  "name": "@certd/lib-k8s",
  "private": false,
-  "version": "1.44.2",
+  "version": "1.45.0",
  "type": "module",
  "main": "./dist/index.js",
  "module": "./dist/index.js",
@@ -21,7 +21,7 @@
    "lint": "eslint --fix --ext .ts src"
  },
  "dependencies": {
-    "@certd/basic": "^1.44.2",
+    "@certd/basic": "^1.45.0",
    "@kubernetes/client-node": "0.21.0"
  },
  "devDependencies": {
@@ -38,5 +38,5 @@
    "tslib": "^2.8.1",
    "typescript": "^5.4.2"
  },
-  "gitHead": "fe738fa7d4622016ed7d506c501df85393b6c857"
+  "gitHead": "fcbf1045fe3806fa1a0bebf5038a6f67aec283d0"
 }
@@ -3,6 +3,22 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.

+# [1.45.0](https://github.com/certd/certd/compare/v1.44.4...v1.45.0) (2026-10-02)
+
+### Features
+
+* **client:** 新增客户端管理功能 ([3dbbe72](https://github.com/certd/certd/commit/3dbbe72fc15c114ca6b5e8ff45cb21f258b80650))
+
+## [1.44.4](https://github.com/certd/certd/compare/v1.44.3...v1.44.4) (2026-09-12)
+
+### Bug Fixes
+
+* 修复证书插件配置无法打开的bug ([5563abb](https://github.com/certd/certd/commit/5563abb13a62140f4dee668ab768cf4ff9371ddb))
+
+## [1.44.3](https://github.com/certd/certd/compare/v1.44.2...v1.44.3) (2026-09-06)
+
+**Note:** Version bump only for package @certd/lib-server
+
 ## [1.44.2](https://github.com/certd/certd/compare/v1.44.1...v1.44.2) (2026-09-03)

 **Note:** Version bump only for package @certd/lib-server
@@ -1,6 +1,6 @@
 {
  "name": "@certd/lib-server",
-  "version": "1.44.2",
+  "version": "1.45.0",
  "description": "midway with flyway, sql upgrade way ",
  "private": false,
  "type": "module",
@@ -29,11 +29,11 @@
  ],
  "license": "AGPL",
  "dependencies": {
-    "@certd/acme-client": "^1.44.2",
-    "@certd/basic": "^1.44.2",
-    "@certd/pipeline": "^1.44.2",
-    "@certd/plugin-lib": "^1.44.2",
-    "@certd/plus-core": "^1.44.2",
+    "@certd/acme-client": "^1.45.0",
+    "@certd/basic": "^1.45.0",
+    "@certd/pipeline": "^1.45.0",
+    "@certd/plugin-lib": "^1.45.0",
+    "@certd/plus-core": "^1.45.0",
    "@midwayjs/cache": "3.14.0",
    "@midwayjs/core": "3.20.11",
    "@midwayjs/i18n": "3.20.13",
@@ -69,5 +69,5 @@
    "typeorm": "^0.3.20",
    "typescript": "^5.4.2"
  },
-  "gitHead": "fe738fa7d4622016ed7d506c501df85393b6c857"
+  "gitHead": "fcbf1045fe3806fa1a0bebf5038a6f67aec283d0"
 }
@@ -133,12 +133,12 @@ export class SysPrivateSettings extends BaseSettings {
  // 内置项不在此配置 Directory URL：其端点由运行时按加密算法（pkType）通过 acme.getDirectoryUrl 获取，
  // 例如 ZeroSSL、SSL.com 的 RSA 与 EC 证书使用不同的端点，写死单一 URL 会导致 EC 申请走错端点。
  customAcmeProviders?: CustomAcmeProvider[] = [
-    { sslProvider: "letsencrypt", title: "Let's Encrypt", directoryUrl: "", needEAB: false, builtIn: true },
-    { sslProvider: "letsencrypt_staging", title: "Let's Encrypt测试环境", directoryUrl: "", needEAB: false, builtIn: true },
+    { sslProvider: "letsencrypt", title: "Let's Encrypt（支持7天IP证书）", directoryUrl: "", needEAB: false, builtIn: true },
    { sslProvider: "google", title: "Google", directoryUrl: "", needEAB: true, builtIn: true },
    { sslProvider: "zerossl", title: "ZeroSSL", directoryUrl: "", needEAB: true, builtIn: true },
-    { sslProvider: "litessl", title: "litessl", directoryUrl: "", needEAB: true, builtIn: true },
+    { sslProvider: "litessl", title: "Litessl", directoryUrl: "", needEAB: true, builtIn: true },
    { sslProvider: "sslcom", title: "SSL.com", directoryUrl: "", needEAB: true, builtIn: true },
+    { sslProvider: "letsencrypt_staging", title: "Let's Encrypt测试环境(只能生成测试证书)", directoryUrl: "", needEAB: false, builtIn: true },
  ];

  removeSecret() {
@@ -174,11 +174,11 @@ export class AccessService extends BaseService<AccessEntity> {
        throw new ValidateException("userId不能为空");
      }
      if (userId !== entity.userId) {
-        throw new PermissionException("您对该Access授权无访问权限");
+        throw new PermissionException(`您对该Access授权${entity.name}(${entity.id})无访问权限`);
      }
    }
    if (projectId != null && projectId !== entity.projectId) {
-      throw new PermissionException("您对该Access授权无访问权限");
+      throw new PermissionException(`您对该Access授权${entity.name}(${entity.id})无访问权限`);
    }

    // const access = accessRegistry.get(entity.type);
@@ -3,6 +3,18 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.

+# [1.45.0](https://github.com/certd/certd/compare/v1.44.4...v1.45.0) (2026-10-02)
+
+**Note:** Version bump only for package @certd/midway-flyway-js
+
+## [1.44.4](https://github.com/certd/certd/compare/v1.44.3...v1.44.4) (2026-09-12)
+
+**Note:** Version bump only for package @certd/midway-flyway-js
+
+## [1.44.3](https://github.com/certd/certd/compare/v1.44.2...v1.44.3) (2026-09-06)
+
+**Note:** Version bump only for package @certd/midway-flyway-js
+
 ## [1.44.2](https://github.com/certd/certd/compare/v1.44.1...v1.44.2) (2026-09-03)

 **Note:** Version bump only for package @certd/midway-flyway-js
@@ -1,6 +1,6 @@
 {
  "name": "@certd/midway-flyway-js",
-  "version": "1.44.2",
+  "version": "1.45.0",
  "description": "midway with flyway, sql upgrade way ",
  "private": false,
  "type": "module",
@@ -52,5 +52,5 @@
    "typeorm": "^0.3.20",
    "typescript": "^5.4.2"
  },
-  "gitHead": "fe738fa7d4622016ed7d506c501df85393b6c857"
+  "gitHead": "fcbf1045fe3806fa1a0bebf5038a6f67aec283d0"
 }
@@ -3,6 +3,18 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.

+# [1.45.0](https://github.com/certd/certd/compare/v1.44.4...v1.45.0) (2026-10-02)
+
+**Note:** Version bump only for package @certd/plugin-cert
+
+## [1.44.4](https://github.com/certd/certd/compare/v1.44.3...v1.44.4) (2026-09-12)
+
+**Note:** Version bump only for package @certd/plugin-cert
+
+## [1.44.3](https://github.com/certd/certd/compare/v1.44.2...v1.44.3) (2026-09-06)
+
+**Note:** Version bump only for package @certd/plugin-cert
+
 ## [1.44.2](https://github.com/certd/certd/compare/v1.44.1...v1.44.2) (2026-09-03)

 **Note:** Version bump only for package @certd/plugin-cert
@@ -1,7 +1,7 @@
 {
  "name": "@certd/plugin-cert",
  "private": false,
-  "version": "1.44.2",
+  "version": "1.45.0",
  "type": "module",
  "main": "./dist/index.js",
  "types": "./dist/index.d.ts",
@@ -20,7 +20,7 @@
    "lint": "eslint --fix --ext .ts src"
  },
  "dependencies": {
-    "@certd/plugin-lib": "^1.44.2"
+    "@certd/plugin-lib": "^1.45.0"
  },
  "devDependencies": {
    "@types/chai": "^4.3.12",
@@ -38,5 +38,5 @@
    "tslib": "^2.8.1",
    "typescript": "^5.4.2"
  },
-  "gitHead": "fe738fa7d4622016ed7d506c501df85393b6c857"
+  "gitHead": "fcbf1045fe3806fa1a0bebf5038a6f67aec283d0"
 }
@@ -3,6 +3,18 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.

+# [1.45.0](https://github.com/certd/certd/compare/v1.44.4...v1.45.0) (2026-10-02)
+
+**Note:** Version bump only for package @certd/plugin-lib
+
+## [1.44.4](https://github.com/certd/certd/compare/v1.44.3...v1.44.4) (2026-09-12)
+
+**Note:** Version bump only for package @certd/plugin-lib
+
+## [1.44.3](https://github.com/certd/certd/compare/v1.44.2...v1.44.3) (2026-09-06)
+
+**Note:** Version bump only for package @certd/plugin-lib
+
 ## [1.44.2](https://github.com/certd/certd/compare/v1.44.1...v1.44.2) (2026-09-03)

 **Note:** Version bump only for package @certd/plugin-lib
@@ -1,7 +1,7 @@
 {
  "name": "@certd/plugin-lib",
  "private": false,
-  "version": "1.44.2",
+  "version": "1.45.0",
  "type": "module",
  "main": "./dist/index.js",
  "types": "./dist/index.d.ts",
@@ -17,9 +17,9 @@
    "lint": "eslint --fix --ext .ts src"
  },
  "dependencies": {
-    "@certd/acme-client": "^1.44.2",
-    "@certd/basic": "^1.44.2",
-    "@certd/pipeline": "^1.44.2",
+    "@certd/acme-client": "^1.45.0",
+    "@certd/basic": "^1.45.0",
+    "@certd/pipeline": "^1.45.0",
    "dayjs": "^1.11.7",
    "jszip": "^3.10.1",
    "lodash-es": "^4.17.21",
@@ -45,5 +45,5 @@
    "tslib": "^2.8.1",
    "typescript": "^5.4.2"
  },
-  "gitHead": "fe738fa7d4622016ed7d506c501df85393b6c857"
+  "gitHead": "fcbf1045fe3806fa1a0bebf5038a6f67aec283d0"
 }
@@ -3,6 +3,35 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.

+# [1.45.0](https://github.com/certd/certd/compare/v1.44.4...v1.45.0) (2026-10-02)
+
+### Features
+
+* **client:** 新增客户端管理功能 ([3dbbe72](https://github.com/certd/certd/commit/3dbbe72fc15c114ca6b5e8ff45cb21f258b80650))
+
+### Performance Improvements
+
+* **monitor:** 站点证书监控支持手动选中触发检查 ([f60e63f](https://github.com/certd/certd/commit/f60e63fbaf00460d5050cd7705bd75d57dec202d))
+* **open-api:** openkey增加用途备注 ([bbeaf61](https://github.com/certd/certd/commit/bbeaf617d19750515f6eca51863e74e23bc1de50))
+
+## [1.44.4](https://github.com/certd/certd/compare/v1.44.3...v1.44.4) (2026-09-12)
+
+### Bug Fixes
+
+* 修复添加步骤会修改所有步骤标题的bug ([51e83e4](https://github.com/certd/certd/commit/51e83e4c38f7f319314fdc38ef33cf5720b2dde0))
+* 修复证书插件配置无法打开的bug ([5563abb](https://github.com/certd/certd/commit/5563abb13a62140f4dee668ab768cf4ff9371ddb))
+
+### Performance Improvements
+
+* 新增余额管理，管理员充值功能 ([bded368](https://github.com/certd/certd/commit/bded368cbb8974b6937ae260e448c25fae5c33ad))
+* **ui:** 商业版套餐购买不要求设置支付方式 ([e971145](https://github.com/certd/certd/commit/e9711456860d7db40914a0c295534f7bca56f83c))
+
+## [1.44.3](https://github.com/certd/certd/compare/v1.44.2...v1.44.3) (2026-09-06)
+
+### Bug Fixes
+
+* **plugin:** 修复插件配置保存与加载的相关问题 ([bd94334](https://github.com/certd/certd/commit/bd9433478a43d5d64ce6370386d0fe0aaff07d2e))
+
 ## [1.44.2](https://github.com/certd/certd/compare/v1.44.1...v1.44.2) (2026-09-03)

 ### Bug Fixes
@@ -1,6 +1,6 @@
 {
  "name": "@certd/ui-client",
-  "version": "1.44.2",
+  "version": "1.45.0",
  "private": true,
  "scripts": {
    "dev": "vite --open",
@@ -104,8 +104,8 @@
    "zod-defaults": "^0.1.3"
  },
  "devDependencies": {
-    "@certd/lib-iframe": "^1.44.2",
-    "@certd/pipeline": "^1.44.2",
+    "@certd/lib-iframe": "^1.45.0",
+    "@certd/pipeline": "^1.45.0",
    "@rollup/plugin-commonjs": "^25.0.7",
    "@rollup/plugin-node-resolve": "^15.2.3",
    "@types/chai": "^4.3.12",
@@ -19,6 +19,7 @@ import sysauthority from "./certd/sys-authority";
 import syscname from "./certd/sys-cname";
 import tutorial from "./certd/tutorial";
 import cron from "./certd/cron";
+import client from "./certd/client";

 // Note: @ is reserved in locale messages; use {'@'} when needed.
 export default {
@@ -43,4 +44,5 @@ export default {
  ...syscname,
  ...tutorial,
  ...cron,
+  ...client,
 };
@@ -19,6 +19,7 @@ export default {
    subdomainConfirmContent: "{domain} appears to be a subdomain. Only delegated subdomains and free second-level subdomains need to be maintained here. Otherwise certificate application may fail. Continue?",
    importFromProvider: "Import from Domain Provider",
    importFromResolveRecords: "Import from DNS Records",
+    importFromResolveRecordsTooltip: "Import DNS records as monitoring sites",
    syncExpirationDate: "Sync Domain Expiration Time",
    syncTaskSubmitted: "Sync task submitted",
    syncExpirationProgress: "Sync Domain Expiration Progress",
@@ -0,0 +1,20 @@
+export default {
+  clientManager: "Client Manager",
+  client: {
+    title: "Client Manager",
+    description: "View online status and managed site count of connected Certd clients. Clients report a heartbeat every 10 minutes and are marked offline if no heartbeat arrives for 30 minutes.",
+    plusRequired: "This feature requires the Pro edition",
+    machineName: "Machine",
+    clientId: "Client ID",
+    version: "Version",
+    os: "OS",
+    status: "Status",
+    online: "Online",
+    offline: "Offline",
+    siteCount: "Sites",
+    httpsSiteCount: "HTTPS Sites",
+    syncedSiteCount: "Synced",
+    failedSiteCount: "Failed",
+    lastHeartbeatAt: "Last Heartbeat",
+  },
+};
@@ -53,6 +53,8 @@ export default {
    suiteSetting: "Suite Settings",
    orderManager: "Order Management",
    userSuites: "User Suites",
+    balanceManager: "Balance Management",
+    balanceLog: "Balance Change Records",
    inviteCommissionSetting: "Incentive Plan Settings",
    inviteLevel: "Promotion Levels",
    inviteUserLevel: "User Promotion Levels",
@@ -3,6 +3,9 @@ export default {
  scopeOpenApiOnly: "Open API Only",
  scopeFullAccount: "Full Account Permissions",
  scopeHelper: "Open API only allows access to open APIs; full account permissions allow access to all APIs",
+  keyRemark: "Key Purpose",
+  keyRemarkHelper: "Describe the purpose of this key for easier identification",
+  keyRemarkMaxChars: "Maximum 512 characters",
  gen: {
    text: "API Test",
    title: "x-certd-token",
@@ -7,6 +7,8 @@ export default {
  settingLink: "Site Monitoring Settings",
  limitInfo: "Basic edition limited to 1, professional and above unlimited, current",
  checkAll: "Check All",
+  checkBatch: "Check Selected",
+  batchCheckConfirm: "Check the {count} selected sites now?",
  checkNow: "Check Now",
  batchDelete: "Batch Delete",
  confirmTitle: "Confirm",
@@ -19,6 +19,7 @@ import sysauthority from "./certd/sys-authority";
 import syscname from "./certd/sys-cname";
 import tutorial from "./certd/tutorial";
 import cron from "./certd/cron";
+import client from "./certd/client";

 // Note: @ is reserved in locale messages; use {'@'} when needed.
 export default {
@@ -43,4 +44,5 @@ export default {
  ...syscname,
  ...tutorial,
  ...cron,
+  ...client,
 };
@@ -19,6 +19,7 @@ export default {
    subdomainConfirmContent: "检测到{domain}为子域名，只有托管子域名和免费二级子域名才需要在此处维护，否则会导致申请证书失败，请确认是否继续？",
    importFromProvider: "从域名提供商导入",
    importFromResolveRecords: "从解析记录导入",
+    importFromResolveRecordsTooltip: "从域名的解析记录中导入并作为监控站点",
    syncExpirationDate: "同步域名过期时间",
    syncTaskSubmitted: "同步任务已提交",
    syncExpirationProgress: "同步域名过期时间进度",
@@ -0,0 +1,20 @@
+export default {
+  clientManager: "客户端管理",
+  client: {
+    title: "客户端管理",
+    description: "查看已接入的 Certd 客户端在线状态与管理的站点数量；客户端每 10 分钟上报一次心跳，超过 30 分钟未上报则标记为离线",
+    plusRequired: "此功能需要专业版",
+    machineName: "机器名",
+    clientId: "客户端ID",
+    version: "版本",
+    os: "系统",
+    status: "在线状态",
+    online: "在线",
+    offline: "离线",
+    siteCount: "站点数",
+    httpsSiteCount: "HTTPS站点",
+    syncedSiteCount: "已同步",
+    failedSiteCount: "异常",
+    lastHeartbeatAt: "上次心跳",
+  },
+};
@@ -54,6 +54,8 @@ export default {
    suiteSetting: "套餐设置",
    orderManager: "订单管理",
    userSuites: "用户套餐",
+    balanceManager: "余额管理",
+    balanceLog: "余额变更记录",
    inviteCommissionSetting: "激励计划设置",
    inviteLevel: "推广等级",
    inviteUserLevel: "用户推广等级",
@@ -3,6 +3,9 @@ export default {
  scopeOpenApiOnly: "仅开放接口",
  scopeFullAccount: "账户所有权限",
  scopeHelper: "仅开放接口只可以访问开放接口，账户所有权限可以访问所有接口",
+  keyRemark: "密钥用途",
+  keyRemarkHelper: "说明该密钥的用途，便于区分和查找",
+  keyRemarkMaxChars: "最大512个字符",
  gen: {
    text: "接口测试",
    title: "x-certd-token",
@@ -7,6 +7,8 @@ export default {
  settingLink: "站点监控设置",
  limitInfo: "基础版限制1条，专业版以上无限制，当前",
  checkAll: "检查全部",
+  checkBatch: "检查选中",
+  batchCheckConfirm: "确认触发检查选中的{count}个站点吗?",
  checkNow: "立即检查",
  batchDelete: "批量删除",
  confirmTitle: "确认",
@@ -1,4 +1,4 @@
-import { useProjectStore } from "/@/store/project";
+import { useProjectStore } from "/@/store/project";
 import { useSettingStore } from "/@/store/settings";

 export const certdResources = [
@@ -128,6 +128,17 @@ export const certdResources = [
          keepAlive: true,
        },
      },
+      {
+        title: "certd.clientManager",
+        name: "ClientManager",
+        path: "/cert/client",
+        component: "/certd/client/index.vue",
+        meta: {
+          icon: "ion:desktop-outline",
+          auth: true,
+          keepAlive: true,
+        },
+      },
      {
        title: "certd.sysResources.currentProject",
        name: "ProjectMemberManager",
@@ -317,6 +317,34 @@ export const sysResources = [
              keepAlive: true,
            },
          },
+          {
+            title: "certd.sysResources.balanceManager",
+            name: "SysWallet",
+            path: "/sys/suite/wallet",
+            component: "/sys/suite/wallet/index.vue",
+            meta: {
+              show: () => {
+                const settingStore = useSettingStore();
+                return settingStore.isComm;
+              },
+              icon: "ion:wallet-outline",
+              permission: "sys:settings:edit",
+              auth: true,
+              keepAlive: true,
+            },
+          },
+          {
+            title: "certd.sysResources.balanceLog",
+            name: "SysWalletLog",
+            path: "/sys/suite/wallet-log",
+            component: "/sys/suite/wallet/log/index.vue",
+            meta: {
+              isMenu: false,
+              permission: "sys:settings:view",
+              auth: true,
+              keepAlive: false,
+            },
+          },
          {
            title: "certd.sysResources.inviteCommissionSetting",
            name: "SysInviteCommissionSetting",
@@ -26,6 +26,14 @@ export function fillPluginDefine(plugin: any) {

  if (plugin.sysSetting?.metadata) {
    merge(plugin.input, plugin.sysSetting.metadata?.input || {});
+    const keys = Object.keys(plugin.input);
+    for (const key of keys) {
+      //修复旧版本错误引入的key导致报错的问题 【多引入进了一个type=CertApply】
+      const column = plugin.input[key];
+      if (typeof column != "object") {
+        delete plugin.input[key];
+      }
+    }
    // 应用选项映射
    for (const key of Object.keys(plugin.input)) {
      const inputDef = plugin.input[key];
@@ -51,10 +51,11 @@ export default function ({ crudExpose, context }: CreateCrudOptionsProps): Creat
      rowHandle: {
        width: 120,
        fixed: "right",
+        show: false,
        buttons: {
          view: { show: false },
          edit: { show: false },
-          remove: { show: true },
+          remove: { show: false },
          copy: { show: false },
        },
      },
@@ -3,7 +3,7 @@
    <template #header>
      <div class="title">
        DNS持久验证记录
-        <span class="red sub" style="color: red">当前仅 Let's Encrypt 测试环境 可以申请 DNS 持久验证证书。</span>
+        <span class="red sub" style="color: red">当前仅 Google证书 可以申请 DNS 持久验证。</span>
      </div>
    </template>
    <fs-crud ref="crudRef" v-bind="crudBinding"></fs-crud>
@@ -235,7 +235,7 @@ export default function ({ crudExpose, context }: CreateCrudOptionsProps): Creat
              } else if (value === "dns-persist") {
                Modal.confirm({
                  title: "请前往DNS持久验证记录页面添加记录",
-                  content: "DNS持久验证需要先配置ACME账号和_validation-persist持久TXT记录，续期时不再增删DNS记录；当前仅 Let's Encrypt 测试环境 可以申请。",
+                  content: "DNS持久验证需要先配置ACME账号和_validation-persist持久TXT记录，续期时不再增删DNS记录；当前仅 Google证书 可以申请。",
                  async onOk() {
                    router.push({
                      path: "/cert/cert/dns-persist",
@@ -0,0 +1,29 @@
+import { request } from "/src/api/service";
+
+const apiPrefix = "/client";
+
+export const clientApi = {
+  async GetList(query: any) {
+    return await request({
+      url: apiPrefix + "/page",
+      method: "post",
+      data: query,
+    });
+  },
+
+  async GetObj(id: number) {
+    return await request({
+      url: apiPrefix + "/info",
+      method: "post",
+      params: { id },
+    });
+  },
+
+  async DelObj(id: number) {
+    return await request({
+      url: apiPrefix + "/delete",
+      method: "post",
+      params: { id },
+    });
+  },
+};
@@ -0,0 +1,243 @@
+// @ts-ignore
+import { AddReq, CreateCrudOptionsProps, CreateCrudOptionsRet, DelReq, EditReq, UserPageQuery, UserPageRes } from "@fast-crud/fast-crud";
+import dayjs from "dayjs";
+import { useDicts } from "../dicts";
+import { useProjectStore } from "/@/store/project";
+import { useI18n } from "/src/locales";
+import { clientApi } from "./api";
+
+export default function ({ crudExpose, context }: CreateCrudOptionsProps): CreateCrudOptionsRet {
+  const { t } = useI18n();
+  const api = clientApi;
+  const pageRequest = async (query: UserPageQuery): Promise<UserPageRes> => {
+    return await api.GetList(query);
+  };
+  const delRequest = async (req: DelReq) => {
+    const { row } = req;
+    return await api.DelObj(row.id);
+  };
+  const editRequest = async (req: EditReq) => {};
+  const addRequest = async (req: AddReq) => {};
+
+  const { myProjectDict } = useDicts();
+  const projectStore = useProjectStore();
+
+  return {
+    id: "clientCrud",
+    crudOptions: {
+      request: {
+        pageRequest,
+        addRequest,
+        editRequest,
+        delRequest,
+      },
+      pagination: {
+        pageSizeOptions: ["10", "20", "50", "100", "200"],
+      },
+      actionbar: {
+        buttons: {
+          add: {
+            show: false,
+          },
+        },
+      },
+      rowHandle: {
+        fixed: "right",
+        width: 120,
+        buttons: {
+          view: {
+            show: false,
+          },
+          edit: {
+            show: false,
+          },
+        },
+      },
+      search: {
+        initialForm: {
+          ...projectStore.getSearchForm(),
+        },
+      },
+      columns: {
+        id: {
+          title: "ID",
+          key: "id",
+          type: "number",
+          search: {
+            show: false,
+          },
+          column: {
+            width: 70,
+            align: "center",
+          },
+          form: {
+            show: false,
+          },
+        },
+        machineName: {
+          title: t("certd.client.machineName"),
+          search: {
+            show: true,
+          },
+          type: "text",
+          form: {
+            show: false,
+          },
+          column: {
+            width: 180,
+            ellipsis: true,
+          },
+        },
+        clientId: {
+          title: t("certd.client.clientId"),
+          search: {
+            show: true,
+          },
+          type: "text",
+          form: {
+            show: false,
+          },
+          column: {
+            width: 220,
+            ellipsis: true,
+          },
+        },
+        version: {
+          title: t("certd.client.version"),
+          search: {
+            show: false,
+          },
+          type: "text",
+          form: {
+            show: false,
+          },
+          column: {
+            width: 90,
+            align: "center",
+          },
+        },
+        os: {
+          title: t("certd.client.os"),
+          search: {
+            show: false,
+          },
+          type: "text",
+          form: {
+            show: false,
+          },
+          column: {
+            width: 100,
+            align: "center",
+          },
+        },
+        online: {
+          title: t("certd.client.status"),
+          search: {
+            show: false,
+          },
+          type: "text",
+          form: {
+            show: false,
+          },
+          column: {
+            width: 100,
+            align: "center",
+            cellRender({ value, row }) {
+              const online = value === true;
+              const heartbeat = row.lastHeartbeatAt ? dayjs(row.lastHeartbeatAt).format("YYYY-MM-DD HH:mm:ss") : "";
+              return (
+                <a-tooltip title={heartbeat}>
+                  <a-tag color={online ? "green" : "red"}>{online ? t("certd.client.online") : t("certd.client.offline")}</a-tag>
+                </a-tooltip>
+              );
+            },
+          },
+        },
+        siteCount: {
+          title: t("certd.client.siteCount"),
+          search: {
+            show: false,
+          },
+          type: "number",
+          form: {
+            show: false,
+          },
+          column: {
+            width: 90,
+            align: "center",
+          },
+        },
+        httpsSiteCount: {
+          title: t("certd.client.httpsSiteCount"),
+          search: {
+            show: false,
+          },
+          type: "number",
+          form: {
+            show: false,
+          },
+          column: {
+            width: 110,
+            align: "center",
+          },
+        },
+        syncedSiteCount: {
+          title: t("certd.client.syncedSiteCount"),
+          search: {
+            show: false,
+          },
+          type: "number",
+          form: {
+            show: false,
+          },
+          column: {
+            width: 90,
+            align: "center",
+          },
+        },
+        failedSiteCount: {
+          title: t("certd.client.failedSiteCount"),
+          search: {
+            show: false,
+          },
+          type: "number",
+          form: {
+            show: false,
+          },
+          column: {
+            width: 80,
+            align: "center",
+          },
+        },
+        lastHeartbeatAt: {
+          title: t("certd.client.lastHeartbeatAt"),
+          search: {
+            show: false,
+          },
+          type: "text",
+          form: {
+            show: false,
+          },
+          column: {
+            width: 170,
+            sorter: true,
+            cellRender({ value }) {
+              if (!value) {
+                return "-";
+              }
+              return dayjs(value).format("YYYY-MM-DD HH:mm:ss");
+            },
+          },
+        },
+        projectId: {
+          title: t("certd.fields.projectName"),
+          type: "dict-select",
+          dict: myProjectDict,
+          form: {
+            show: false,
+          },
+        },
+      },
+    },
+  };
+}
@@ -0,0 +1,37 @@
+<template>
+  <fs-page>
+    <template #header>
+      <div class="title flex items-center">
+        {{ t("certd.client.title") }}
+        <div class="sub flex items-center flex-1">
+          <div>
+            {{ t("certd.client.description") }}
+          </div>
+          <vip-button class="ml-5" mode="button"></vip-button>
+        </div>
+      </div>
+    </template>
+    <fs-crud ref="crudRef" v-bind="crudBinding"></fs-crud>
+  </fs-page>
+</template>
+
+<script lang="ts" setup>
+import { useFs } from "@fast-crud/fast-crud";
+import createCrudOptions from "./crud";
+import { useMounted } from "/@/use/use-mounted";
+import { useSettingStore } from "/@/store/settings";
+import { useI18n } from "/src/locales";
+const { t } = useI18n();
+const settingStore = useSettingStore();
+defineOptions({
+  name: "ClientManager",
+});
+const context: any = {
+  permission: {
+    isProjectPermission: true,
+  },
+};
+const { crudBinding, crudRef, crudExpose } = useFs({ createCrudOptions, context });
+
+useMounted(() => crudExpose.doRefresh());
+</script>
@@ -63,6 +63,13 @@ export const siteInfoApi = {
      method: "post",
    });
  },
+  async CheckBatch(ids: number[]) {
+    return await request({
+      url: apiPrefix + "/checkBatch",
+      method: "post",
+      data: { ids },
+    });
+  },

  async Import(form: any) {
    return await request({
@@ -100,6 +100,23 @@ export default function ({ crudExpose, context }: CreateCrudOptionsProps): Creat
    });
  }

+  function checkBatch() {
+    if (selectedRowKeys.value.length === 0) {
+      notification.error({ message: t("monitor.selectRecordsFirst") });
+      return;
+    }
+    Modal.confirm({
+      title: t("monitor.confirmTitle"),
+      content: t("monitor.batchCheckConfirm", { count: selectedRowKeys.value.length }),
+      onOk: async () => {
+        await siteInfoApi.CheckBatch(selectedRowKeys.value);
+        notification.success({ message: t("monitor.checkSubmitted") });
+        selectedRowKeys.value = [];
+        await crudExpose.doRefresh();
+      },
+    });
+  }
+
  const GroupTypeSite = "site";
  const groupDictRef = createGroupDictRef(GroupTypeSite);

@@ -253,6 +270,7 @@ export default function ({ crudExpose, context }: CreateCrudOptionsProps): Creat
            show: hasActionPermission("write"),
            title: t("certd.domain.importFromResolveRecords"),
            text: t("certd.domain.importFromResolveRecords"),
+            tooltip: { title: t("certd.domain.importFromResolveRecordsTooltip") },
            type: "primary",
            // needPlus: true,
            color: "gold",
@@ -274,6 +292,15 @@ export default function ({ crudExpose, context }: CreateCrudOptionsProps): Creat
              checkAll();
            },
          },
+          checkBatch: {
+            show: true,
+            text: t("monitor.checkBatch"),
+            type: "primary",
+            icon: "ion:play-forward-outline",
+            click() {
+              checkBatch();
+            },
+          },
        },
      },
      rowHandle: {
@@ -13,10 +13,15 @@ export default function ({ crudExpose, context }: CreateCrudOptionsProps): Creat
  const pageRequest = async (query: UserPageQuery): Promise<UserPageRes> => {
    return await api.GetList(query);
  };
+  // 编辑允许修改备注与权限范围。
+  // keyId/keySecret 属于密钥本体，列表中 keySecret 是脱敏串，误提交会把真实密钥写坏，故不提交。
  const editRequest = async (req: EditReq) => {
    const { form, row } = req;
-    form.id = row.id;
-    const res = await api.UpdateObj(form);
+    const res = await api.UpdateObj({
+      id: row.id,
+      remark: form.remark,
+      scope: form.scope,
+    });
    return res;
  };
  const delRequest = async (req: DelReq) => {
@@ -68,7 +73,7 @@ export default function ({ crudExpose, context }: CreateCrudOptionsProps): Creat
        buttons: {
          view: { show: true },
          copy: { show: false },
-          edit: { show: false },
+          edit: { show: true },
          remove: { show: true },
          gen: {
            text: t("certd.gen.text"),
@@ -193,6 +198,22 @@ export default function ({ crudExpose, context }: CreateCrudOptionsProps): Creat
            sorter: true,
          },
        },
+        remark: {
+          title: t("certd.keyRemark"),
+          type: "text",
+          search: {
+            show: true,
+          },
+          column: {
+            width: 200,
+            sorter: true,
+          },
+          form: {
+            show: true,
+            helper: t("certd.keyRemarkHelper"),
+            rules: [{ max: 512, message: t("certd.keyRemarkMaxChars") }],
+          },
+        },
        projectId: {
          title: t("certd.fields.projectName"),
          type: "dict-select",
@@ -280,7 +280,10 @@ function useStepForm() {
      return;
    }

-    callback.value("save", currentStep);
+    // currentStep 是复用同一份 reactive 对象，直接传给回调会被 task.steps 保存同一引用，
+    // 后续再次 stepOpen 会 delete 掉其属性，导致已保存的步骤（如第一个步骤）被覆盖。
+    // 这里深拷贝一份再传出，保证每个步骤是独立对象。
+    callback.value("save", cloneDeep(currentStep));
    stepDrawerClose();
  };

@@ -53,9 +53,14 @@

      <div class="flex-o mt-5">
        <span class="label">{{ $t("certd.order.paymentMethod") }}：</span>
-        <div v-if="durationSelected.price === 0 || expectedThirdPartyAmount === 0">{{ $t("certd.order.free") }}</div>
+        <div v-if="durationSelected.price === 0 || expectedThirdPartyAmount === 0">0元</div>
+        <div v-else-if="noPaymentMethod">当前仅支持余额支付</div>
        <fs-dict-select v-else v-model:value="formRef.payType" :dict="paymentsDictRef" style="width: 200px"> </fs-dict-select>
      </div>
+
+      <div v-if="showBalanceInsufficientTip" class="flex-o mt-5">
+        <span class="color-red">余额不足，请联系管理员，充值或设置套餐</span>
+      </div>
    </div>
  </a-modal>
 </template>
@@ -88,12 +93,17 @@ async function open(opts: OrderModalOpenReq) {
  formRef.value.productId = opts.product.id;
  formRef.value.duration = opts.duration;
  formRef.value.num = opts.num ?? 1;
-  formRef.value.useRebateBalance = false;
+  formRef.value.useRebateBalance = true;
  try {
    wallet.value = await GetWalletSummary();
  } catch (e) {
    wallet.value = { availableAmount: 0 };
  }
+  try {
+    await paymentsDictRef.loadDict();
+  } catch (e) {
+    // 支付方式加载失败时按无可用支付方式处理
+  }
 }
 const paymentsDictRef = dict({
  async getData() {
@@ -119,6 +129,23 @@ const expectedThirdPartyAmount = computed(() => {
  return Math.max(0, (durationSelected.value?.price || 0) - expectedRebateAmount.value);
 });

+const noPaymentMethod = computed(() => {
+  return paymentsDictRef.data.length === 0;
+});
+
+const balanceInsufficient = computed(() => {
+  const price = durationSelected.value?.price || 0;
+  if (price <= 0) {
+    return false;
+  }
+  const availableAmount = wallet.value?.availableAmount || 0;
+  return availableAmount < price;
+});
+
+const showBalanceInsufficientTip = computed(() => {
+  return noPaymentMethod.value && balanceInsufficient.value;
+});
+
 function amountToYuan(amount: number) {
  return util.amount.toYuan(amount || 0);
 }
@@ -21,7 +21,17 @@
        </div>
      </template>
      <template v-else-if="step === 1"
-        ><label class="plugin-ai-dev__label">开发需求</label><a-textarea v-model:value="requirement" :rows="6" /><a-button
+        ><div v-if="mode === 'new'" class="plugin-ai-dev__field">
+          <label>插件作者</label>
+          <PluginAuthorField v-model="author" editable />
+          <div class="plugin-ai-dev__hint">自动读取绑定账号已注册的插件作者，也可以手动输入作者名称。</div>
+        </div>
+        <div v-else class="plugin-ai-dev__field">
+          <label>插件作者</label>
+          <a-input :value="author" disabled />
+          <div class="plugin-ai-dev__hint">修改已有插件时沿用该插件当前作者，作者变化会导致插件身份变化。</div>
+        </div>
+        <label class="plugin-ai-dev__label">开发需求</label><a-textarea v-model:value="requirement" :rows="6" /><a-button
          class="plugin-ai-dev__generate"
          type="primary"
          :loading="creating"
@@ -120,6 +130,7 @@ import * as api from "../api";
 import * as pipelineApi from "/@/views/certd/pipeline/api";
 import * as historyApi from "/@/views/certd/pipeline/api.history";
 import DependPluginsInput from "./depend-plugins-input.vue";
+import PluginAuthorField from "./plugin-author-field.vue";
 import PluginEditDialogBody from "./plugin-edit-dialog-body.vue";
 import PipelineEditDialog from "/@/views/certd/pipeline/components/pipeline-edit-dialog.vue";
 import { useFormDialog } from "/@/use/use-dialog";
@@ -135,6 +146,7 @@ const pluginTypeOptions = [
  { value: "notification", label: "通知插件", desc: "通过消息、邮件等方式发送通知" },
  // { value: "addon", label: "Addon", desc: "扩展流水线的通用辅助能力" },
 ];
+const author = ref("");
 const requirement = ref(
  "例如：开发一个部署证书到阿里云DCDN的插件\nAPI接口请参考：https://help.aliyun.com/zh/edge-security-acceleration/dcdn/developer-reference/api-dcdn-2018-01-15-overview。\n要求： \n1、能够引用上传到阿里云CAS步骤输出的证书。\n2、支持在UI上选择账户下某区域下的DCDN的域名列表。\n3、支持一次性选择多个域名进行部署"
 );
@@ -183,7 +195,33 @@ async function createPrompt() {
  try {
    const token = await api.GetScopedAccessToken(["sys/ai"]);
    accessToken.value = token.token;
-    prompt.value = `你是 Certd 在线插件开发 Agent。\n\n开发模式：${mode.value === "new" ? "开发新插件" : "修改已有插件"}\n插件类型：${pluginType.value || "按已有插件类型"}\n插件 ID：${pluginPath.value.at(-1) || "无"}\n用户需求：\n${requirement.value.trim()}\n\n如果用户需求描述与他选择的插件类型有冲突，你需要跟用户确认是否选错插件类型。 \nCertd 地址：${window.location.origin}\n受限 AccessToken（6小时有效）：${token.token}\n\n请先读取 .trae/skills/certd-online-plugin-dev/SKILL.md，按插件类型开发并提交版本。仅调用 /scoped/sys/ai/plugin/ 前缀接口，完成后报告提交结果，不自动发布。\n如果当前工作目录不是 Certd 项目，或缺少 certd-online-plugin-dev Skill，先拉取 Certd 仓库代码并切换到仓库内工作(git clone https://atomgit.com/certd/certd --depth 1 )`;
+    const authorName = author.value.trim();
+    let authorText = authorName;
+    if (!authorText && mode.value === "edit") {
+      // 修改已有插件时作者保持原样，不能凭空补一个作者出来
+      authorText = "无（保持原插件的 author 字段不变，不要新增作者）";
+    }
+    if (!authorText) {
+      authorText = "未指定（请先向用户确认作者名称，不要自行编造作者名）";
+    }
+    prompt.value = `
+你是 Certd 在线插件开发 Agent。
+
+开发模式：${mode.value === "new" ? "开发新插件" : "修改已有插件"}
+插件类型：${pluginType.value || "按已有插件类型"}
+插件 ID：${pluginPath.value.at(-1) || "无"}
+插件作者：${authorText}
+用户需求：
+${requirement.value.trim()}
+
+如果用户需求描述与他选择的插件类型有冲突，你需要跟用户确认是否选错插件类型。 
+Certd 地址：${window.location.origin}
+受限 AccessToken（6小时有效）：${token.token}
+
+请先读取 .trae/skills/certd-online-plugin-dev/SKILL.md，按插件类型开发并提交版本。仅调用 /scoped/sys/ai/plugin/ 前缀接口，完成后报告提交结果，不自动发布。
+如果当前工作目录不是 Certd 项目，或缺少 certd-online-plugin-dev Skill，先拉取 Certd 仓库代码并切换到仓库内工作(git clone https://atomgit.com/certd/certd --depth 1 )
+本次开发的在线插件无需写单元测试。
+`;
    notification.success({ message: "启动提示词已生成" });
  } finally {
    creating.value = false;
@@ -259,24 +297,31 @@ async function loadRecentPlugins(force = false) {
 async function loadSelectedPlugin() {
  const selectedValue = pluginPath.value.at(-1);
  if (!selectedValue) {
-    recentPlugins.value = [];
+    setSelectedPlugin(null);
    return;
  }
  if (props.pluginId && selectedValue === String(props.pluginId)) {
    const selected = await api.GetObj(props.pluginId);
-    recentPlugins.value = selected ? [selected] : [];
+    setSelectedPlugin(selected);
    return;
  }
  let selected = await api.GetObj(selectedValue);
-  if (selected) {
-    recentPlugins.value = [selected];
-    return;
+  if (!selected) {
+    const fullName = selectedValue.includes(":") ? selectedValue.slice(selectedValue.indexOf(":") + 1) : selectedValue;
+    const result: any = await api.FindPlugins({ includeBuiltIn: true, includeStore: true, keyword: fullName });
+    const records: any[] = Array.isArray(result) ? result : result?.records || [];
+    selected = records.find(item => String(item.fullName || item.name) === fullName) || records[0];
+  }
+  setSelectedPlugin(selected);
+}
+
+function setSelectedPlugin(plugin: any) {
+  recentPlugins.value = plugin ? [plugin] : [];
+  const pluginAuthor = String(plugin?.author || "").trim();
+  if (pluginAuthor) {
+    // 修改已有插件时，作者默认沿用该插件当前作者，避免插件身份被改错
+    author.value = pluginAuthor;
  }
-  const fullName = selectedValue.includes(":") ? selectedValue.slice(selectedValue.indexOf(":") + 1) : selectedValue;
-  const result: any = await api.FindPlugins({ includeBuiltIn: true, includeStore: true, keyword: fullName });
-  const records: any[] = Array.isArray(result) ? result : result?.records || [];
-  selected = records.find(item => String(item.fullName || item.name) === fullName) || records[0];
-  recentPlugins.value = selected ? [selected] : [];
 }

 function formatTime(value: any) {
@@ -361,9 +406,9 @@ watch(mode, value => {
 <style lang="less">
 .plugin-ai-dev {
  display: flex;
-  height: 60vh;
+  height: 65vh;
  flex-direction: column;
-  gap: 20px;
+  gap: 10px;

  &__steps {
    flex: none;
@@ -373,7 +418,7 @@ watch(mode, value => {
    display: flex;
    flex: 1;
    flex-direction: column;
-    gap: 18px;
+    gap: 10px;
    padding: 8px 20px;
    overflow-y: auto;
  }
@@ -1,6 +1,6 @@
 <template>
  <div class="plugin-author-field">
-    <a-input :value="modelValue" placeholder="请输入作者名称" :disabled="authorRegistered" @update:value="emit('update:modelValue', $event)" />
+    <a-input :value="modelValue" placeholder="请输入作者名称" :disabled="inputDisabled" @update:value="emit('update:modelValue', $event)" />
    <a-button type="link" size="small" :loading="loading" @click="handleAuthorAction">
      {{ authorRegistered ? "修改邮箱" : "注册作者" }}
    </a-button>
@@ -14,12 +14,22 @@ import { usePluginPublish } from "../use-publish";

 defineOptions({ name: "PluginAuthorField" });

-const props = defineProps<{ modelValue?: string }>();
+const props = withDefaults(
+  defineProps<{
+    modelValue?: string;
+    // 允许手动输入作者名称，默认使用后端已注册作者且不可修改
+    editable?: boolean;
+  }>(),
+  {
+    editable: false,
+  }
+);
 const emit = defineEmits<{ (event: "update:modelValue", value: string): void }>();
 const loading = ref(false);
 const { registerPluginAuthor, updatePluginAuthorEmail } = usePluginPublish();
 const registeredAuthor = ref<api.OnlinePluginAuthorBean>();
 const authorRegistered = computed(() => !!registeredAuthor.value?.id);
+const inputDisabled = computed(() => authorRegistered.value && !props.editable);
 const isLocalAuthor = computed(() => {
  return (
    String(props.modelValue || "")
@@ -113,7 +113,8 @@ const onFinishFailed = (errorInfo: any) => {
 const { openConfigDialog } = usePluginConfig();

 async function doPluginConfig() {
-  const certApplyInfo = await getPluginSetting("CertApply");
+  const certApplyInfo: any = await getPluginSetting("CertApply");
+  certApplyInfo.pluginType = "plugin";
  await openConfigDialog({
    row: certApplyInfo,
    onSuccess: async () => {
@@ -45,7 +45,7 @@
 <script setup lang="tsx">
 import { dict, FsRender } from "@fast-crud/fast-crud";
 import { cloneDeep, merge, unset } from "lodash-es";
-import { computed, onMounted, reactive, ref } from "vue";
+import { computed, onMounted, provide, reactive, ref } from "vue";
 import { useRoute, useRouter } from "vue-router";
 import Rollbackable from "./rollbackable.vue";
 import { fillPluginDefine, usePluginStore } from "/@/store/plugin";
@@ -185,9 +185,11 @@ const optionsMappingKey = {
  },
  editRender(item: any) {
    return () => {
-      const options = item.component?.options || [];
-      if (options.length === 0) {
-        return <span class="text-gray-400">该组件没有预设选项</span>;
+      const options = reactive(cloneDeep(item.component?.options || []));
+
+      const showAdd = options.length === 0;
+      function addOption(opt: any) {
+        options.push(opt);
      }

      const onLabelChange = (optValue: string, newLabel: string) => {
@@ -233,6 +235,13 @@ const optionsMappingKey = {
              ))}
            </tbody>
          </table>
+          {showAdd && (
+            <div class="mt-2">
+              <a-button type="primary" size={() => addOption({ value: "", label: "" })}>
+                添加选项
+              </a-button>
+            </div>
+          )}
          <div class="helper mt-1">只需填写需要自定义的选项，留空则使用原始显示内容</div>
        </div>
      );
@@ -289,6 +298,16 @@ onMounted(async () => {
 defineExpose({
  getForm,
 });
+
+provide("getCurrentPluginDefine", () => {
+  return { value: props.plugin };
+});
+provide("get:scope", () => {
+  return getScope();
+});
+provide("get:plugin:type", () => {
+  return props.plugin.pluginType;
+});
 </script>

 <style lang="less">
@@ -14,10 +14,13 @@ import { usePluginStore } from "/@/store/plugin";
 import PluginAuthorField from "./components/plugin-author-field.vue";
 import { usePluginAiDev } from "./use-ai-dev";
 import { useOnlineInstall } from "./use-online-install";
+import dayjs from "dayjs";

 export default function ({ crudExpose, context }: CreateCrudOptionsProps): CreateCrudOptionsRet {
  const { t } = useI18n();
-
+  const lastSyncTime = context.lastSyncTime;
+  const syncLoading = context.syncLoading;
+  const syncOnlinePlugins = context.syncOnlinePlugins;
  let lastType = "";
  const pageRequest = async (query: UserPageQuery): Promise<UserPageRes> => {
    if (lastType && lastType != query?.query?.type) {
@@ -65,10 +68,8 @@ export default function ({ crudExpose, context }: CreateCrudOptionsProps): Creat

  const settingStore = useSettingStore();
  const pluginStore = usePluginStore();
-  const syncLoading = ref(false);
  const upgradeAllLoading = ref(false);
-  const lastSyncTime = ref(0);
-  const autoSyncInterval = 30 * 24 * 60 * 60 * 1000;
+
  const syncButtonTitle = computed(() => {
    if (!lastSyncTime.value) {
      return t("certd.onlinePluginNotSynced");
@@ -79,39 +80,13 @@ export default function ({ crudExpose, context }: CreateCrudOptionsProps): Creat
  });

  function formatSyncTime(time: number) {
-    return new Date(time).toLocaleString();
-  }
-
-  function needAutoSync(time: number) {
-    if (!time) {
-      return true;
-    }
-    return Date.now() - time > autoSyncInterval;
+    return dayjs(time).format("YYYY-MM-DD HH:mm:ss");
  }

  function isEditablePlugin(row: any) {
    return row.editable === true;
  }

-  async function syncOnlinePlugins(options?: { showSuccess?: boolean }) {
-    if (syncLoading.value) {
-      return;
-    }
-    syncLoading.value = true;
-    try {
-      await api.OnlinePluginSync();
-      const setting = await api.OnlinePluginSetting();
-      lastSyncTime.value = setting.lastSyncTime || Date.now();
-      await pluginStore.reload();
-      crudExpose.doRefresh();
-      if (options?.showSuccess !== false) {
-        notification.success({ message: t("certd.onlinePluginSyncSuccess") });
-      }
-    } finally {
-      syncLoading.value = false;
-    }
-  }
-
  async function upgradeAllOnlinePlugins() {
    if (upgradeAllLoading.value) {
      return;
@@ -157,18 +132,6 @@ export default function ({ crudExpose, context }: CreateCrudOptionsProps): Creat
      upgradeAllLoading.value = false;
    }
  }
-
-  async function loadOnlinePluginSetting() {
-    const setting = await api.OnlinePluginSetting();
-    lastSyncTime.value = setting.lastSyncTime || 0;
-    if (needAutoSync(lastSyncTime.value)) {
-      await syncOnlinePlugins({ showSuccess: false });
-    }
-  }
-
-  loadOnlinePluginSetting().catch(e => {
-    console.warn("load online plugin setting failed", e);
-  });
  return {
    crudOptions: {
      settings: {
@@ -22,18 +22,42 @@ import PluginItemCard from "./components/plugin-item-card.vue";
 import OnlinePluginDetail from "./components/online-plugin-detail.vue";
 import { useI18n } from "/src/locales";
 import { useMounted } from "/@/use/use-mounted";
-import { computed, onBeforeUnmount, onMounted } from "vue";
+import { computed, onBeforeUnmount, onMounted, ref } from "vue";
 import { usePluginStore } from "/@/store/plugin";
 import { useFormDialog } from "/@/use/use-dialog";
-
+import { notification } from "ant-design-vue";
+import * as api from "./api";
 const { t } = useI18n();
 const pluginStore = usePluginStore();
 const { openFormDialog } = useFormDialog();
-
+const lastSyncTime = ref<number>(0);
+const syncLoading = ref(false);
+const autoSyncInterval = 3 * 24 * 60 * 60 * 1000;
 defineOptions({
  name: "SysPlugin",
 });
-const { crudBinding, crudRef, crudExpose } = useFs({ createCrudOptions });
+
+async function syncOnlinePlugins(options?: { showSuccess?: boolean }) {
+  if (syncLoading.value) {
+    return;
+  }
+  syncLoading.value = true;
+  try {
+    await api.OnlinePluginSync();
+    const setting = await api.OnlinePluginSetting();
+    lastSyncTime.value = setting.lastSyncTime || Date.now();
+    await pluginStore.clear();
+    crudExpose.doRefresh();
+    if (options?.showSuccess !== false) {
+      notification.success({ message: t("certd.onlinePluginSyncSuccess") });
+    }
+  } finally {
+    syncLoading.value = false;
+  }
+}
+
+const context = { lastSyncTime, syncLoading, syncOnlinePlugins };
+const { crudBinding, crudRef, crudExpose } = useFs({ createCrudOptions, context });
 const pluginList = computed(() => {
  return crudBinding.value?.data || [];
 });
@@ -77,9 +101,25 @@ async function handlePluginChanged(payload: { action: string }) {
  crudExpose.doRefresh();
 }

+function needAutoSync(time: number) {
+  if (!time) {
+    return true;
+  }
+  return Date.now() - time > autoSyncInterval;
+}
+
+async function autoSyncOnlinePlugins() {
+  const setting = await api.OnlinePluginSetting();
+  lastSyncTime.value = setting.lastSyncTime || 0;
+  if (needAutoSync(lastSyncTime.value)) {
+    await syncOnlinePlugins({ showSuccess: false });
+  }
+}
+
 // 页面打开后获取列表数据
 useMounted(async () => {
-  await crudExpose.doRefresh();
+  autoSyncOnlinePlugins();
+  crudExpose.doRefresh();
 });

 onMounted(() => {
@@ -49,7 +49,7 @@ export function usePluginConfig() {
                }
              }
              const res = await api.savePluginSetting({
-                name: row.fullName,
+                name: row.fullName || row.name,
                sysSetting: {
                  metadata: {
                    input: newForm,
@@ -3,7 +3,7 @@
    <template #header>
      <div class="title">
        套餐设置
-        <span class="sub"> 需要<router-link :to="{ path: '/sys/settings', query: { tab: 'payment' } }">开启至少一种支付方式</router-link></span>
+        <span class="sub"> 建议<router-link :to="{ path: '/sys/settings', query: { tab: 'payment' } }">开启至少一种支付方式</router-link></span>
      </div>
    </template>

@@ -38,7 +38,7 @@

        <a-form-item label=" " :colon="false">
          <loading-button type="primary" html-type="button" :click="onClick">保存</loading-button>
-          <div class="helper">需要 <router-link :to="{ path: '/sys/settings', query: { tab: 'payment' } }">开启至少一种支付方式</router-link></div>
+          <div class="helper">建议 <router-link :to="{ path: '/sys/settings', query: { tab: 'payment' } }">开启至少一种支付方式</router-link></div>
        </a-form-item>
      </a-form>
    </div>
@@ -0,0 +1,35 @@
+import { request } from "/src/api/service";
+
+const apiPrefix = "/sys/wallet";
+
+export async function GetList(query: any) {
+  return await request({
+    url: apiPrefix + "/page",
+    method: "post",
+    data: query,
+  });
+}
+
+export async function Recharge(data: { userId: number; amount: number; remark?: string }) {
+  return await request({
+    url: apiPrefix + "/recharge",
+    method: "post",
+    data,
+  });
+}
+
+export async function GetWalletLogs(query: any) {
+  return await request({
+    url: apiPrefix + "/log/page",
+    method: "post",
+    data: query,
+  });
+}
+
+export async function GetSimpleUserByIds(ids: number[]) {
+  return await request({
+    url: "/sys/authority/user/getSimpleUserByIds",
+    method: "post",
+    data: { ids },
+  });
+}
@@ -0,0 +1,193 @@
+import { CreateCrudOptionsProps, CreateCrudOptionsRet, dict, UserPageQuery, UserPageRes } from "@fast-crud/fast-crud";
+import { notification } from "ant-design-vue";
+import { useRouter } from "vue-router";
+import { util } from "/@/utils";
+import { useFormDialog } from "/@/use/use-dialog";
+import createCrudOptionsUser from "/@/views/sys/authority/user/crud";
+import PriceInput from "/@/views/sys/suite/product/price-input.vue";
+import * as api from "./api";
+
+export default function ({ crudExpose }: CreateCrudOptionsProps): CreateCrudOptionsRet {
+  const { openFormDialog } = useFormDialog();
+  const router = useRouter();
+
+  const userDict = dict({
+    async getNodesByValues(ids: number[]) {
+      return await api.GetSimpleUserByIds(ids);
+    },
+    value: "id",
+    label: "nickName",
+  });
+
+  const pageRequest = async (query: UserPageQuery): Promise<UserPageRes> => {
+    return await api.GetList(query);
+  };
+
+  function moneyColumn(title: string) {
+    return {
+      title,
+      type: "number",
+      column: {
+        width: 120,
+        component: {
+          name: PriceInput,
+          vModel: "modelValue",
+          edit: false,
+        },
+      },
+    };
+  }
+
+  async function openRecharge(userId?: number) {
+    await openFormDialog({
+      title: "用户余额充值",
+      wrapper: { width: 520 },
+      initialForm: {
+        userId: userId ?? null,
+        amountYuan: null,
+        remark: "",
+      },
+      columns: {
+        userId: {
+          title: "用户",
+          type: "table-select",
+          dict: userDict,
+          form: {
+            col: { span: 24 },
+            rules: [{ required: true, message: "请选择用户" }],
+            component: {
+              disabled: userId != null,
+              crossPage: true,
+              multiple: false,
+              select: {
+                placeholder: "请选择用户",
+              },
+              createCrudOptions: createCrudOptionsUser,
+            },
+          },
+        },
+        amountYuan: {
+          title: "充值金额",
+          type: "number",
+          form: {
+            col: { span: 24 },
+            rules: [{ required: true, message: "请输入充值金额" }],
+            component: {
+              name: "a-input-number",
+              vModel: "value",
+              min: 0,
+              precision: 2,
+              addonAfter: "元",
+              style: { width: "100%" },
+            },
+          },
+        },
+        remark: {
+          title: "备注",
+          type: "text",
+          form: {
+            col: { span: 24 },
+            helper: "选填",
+          },
+        },
+      },
+      async onSubmit(form: any) {
+        await api.Recharge({
+          userId: form.userId,
+          amount: util.amount.toCent(form.amountYuan || 0),
+          remark: form.remark,
+        });
+        await crudExpose.doRefresh();
+        notification.success({ message: "充值成功" });
+      },
+    });
+  }
+
+  return {
+    crudOptions: {
+      request: {
+        pageRequest,
+      },
+      toolbar: { show: false },
+      actionbar: {
+        buttons: {
+          add: { show: false },
+          recharge: {
+            text: "余额充值",
+            type: "primary",
+            click: () => openRecharge(),
+          },
+          log: {
+            text: "余额变更记录",
+            type: "primary",
+            click: () => router.push("/sys/suite/wallet-log"),
+          },
+        },
+      },
+      rowHandle: {
+        width: 220,
+        fixed: "right",
+        buttons: {
+          view: { show: false },
+          edit: { show: false },
+          copy: { show: false },
+          remove: { show: false },
+          walletLog: {
+            text: "余额变更记录",
+            type: "link",
+            click: ({ row }) => router.push({ path: "/sys/suite/wallet-log", query: { userId: row.userId } }),
+          },
+          recharge: {
+            text: "充值",
+            type: "link",
+            click: ({ row }) => openRecharge(row.userId),
+          },
+        },
+      },
+      columns: {
+        id: {
+          title: "ID",
+          type: "number",
+          column: { width: 80 },
+          form: { show: false },
+        },
+        userId: {
+          title: "用户",
+          type: "table-select",
+          dict: userDict,
+          search: { show: true, col: { span: 3 } },
+          column: { width: 160 },
+          form: {
+            show: false,
+            component: {
+              crossPage: true,
+              multiple: false,
+              select: {
+                placeholder: "点击选择用户",
+              },
+              createCrudOptions: createCrudOptionsUser,
+            },
+          },
+        },
+        availableAmount: moneyColumn("可用余额"),
+        totalAmount: moneyColumn("总余额"),
+        frozenAmount: moneyColumn("冻结余额"),
+        totalIncomeAmount: moneyColumn("累计收入"),
+        totalConsumedAmount: moneyColumn("累计消费"),
+        totalWithdrawAmount: moneyColumn("累计提现"),
+        createTime: {
+          title: "创建时间",
+          type: "datetime",
+          form: { show: false },
+          column: { sorter: true, width: 160 },
+        },
+        updateTime: {
+          title: "更新时间",
+          type: "datetime",
+          form: { show: false },
+          column: { width: 160 },
+        },
+      },
+    },
+  };
+}
@@ -0,0 +1,28 @@
+<template>
+  <fs-page>
+    <template #header>
+      <div class="title">
+        余额管理
+        <span class="sub">管理用户余额，可给用户充值</span>
+      </div>
+    </template>
+    <fs-crud ref="crudRef" v-bind="crudBinding"> </fs-crud>
+  </fs-page>
+</template>
+
+<script lang="ts" setup>
+import { useFs } from "@fast-crud/fast-crud";
+import createCrudOptions from "./crud";
+import { useMounted } from "/@/use/use-mounted";
+
+defineOptions({
+  name: "SysWallet",
+});
+
+const { crudBinding, crudRef, crudExpose } = useFs({ createCrudOptions });
+
+// 页面打开后获取列表数据
+useMounted(async () => {
+  await crudExpose.doRefresh();
+});
+</script>
@@ -0,0 +1,100 @@
+import { CreateCrudOptionsRet, dict, UserPageQuery, UserPageRes } from "@fast-crud/fast-crud";
+import { useRoute } from "vue-router";
+import { util } from "/@/utils";
+import createCrudOptionsUser from "/@/views/sys/authority/user/crud";
+import * as api from "../api";
+
+function moneyText(amount: number) {
+  const yuan = util.amount.toYuan(Math.abs(amount || 0));
+  if (amount < 0) {
+    return `-¥${yuan}`;
+  }
+  return `¥${yuan}`;
+}
+
+export default function (): CreateCrudOptionsRet {
+  const route = useRoute();
+  const userIdFromQuery = route.query.userId ? Number(route.query.userId) : undefined;
+
+  const userDict = dict({
+    async getNodesByValues(ids: number[]) {
+      return await api.GetSimpleUserByIds(ids);
+    },
+    value: "id",
+    label: "nickName",
+  });
+
+  const pageRequest = async (query: UserPageQuery): Promise<UserPageRes> => {
+    return await api.GetWalletLogs(query);
+  };
+
+  return {
+    crudOptions: {
+      request: { pageRequest },
+      search: {
+        initialForm: { userId: userIdFromQuery },
+      },
+      actionbar: { show: false },
+      toolbar: { show: false },
+      rowHandle: { show: false },
+      columns: {
+        createTime: { title: "时间", type: "datetime", column: { width: 180 } },
+        userId: {
+          title: "用户",
+          type: "table-select",
+          dict: userDict,
+          search: { show: true, col: { span: 3 } },
+          column: { width: 160 },
+          form: {
+            show: false,
+            component: {
+              crossPage: true,
+              multiple: false,
+              select: { placeholder: "点击选择用户" },
+              createCrudOptions: createCrudOptionsUser,
+            },
+          },
+        },
+        type: {
+          title: "类型",
+          type: "dict-select",
+          dict: dict({
+            data: [
+              { label: "收益入账", value: "income", color: "success" },
+              { label: "余额抵扣", value: "consume", color: "default" },
+              { label: "提现扣减", value: "withdraw", color: "warning" },
+            ],
+          }),
+          search: { show: true, col: { span: 3 } },
+          column: { width: 120 },
+        },
+        amount: {
+          title: "变动金额",
+          type: "number",
+          column: {
+            width: 120,
+            cellRender({ value }) {
+              const amount = Number(value || 0);
+              return <span class={amount < 0 ? "text-green-500" : "text-red-500"}>{moneyText(amount)}</span>;
+            },
+          },
+        },
+        balanceAfter: {
+          title: "变动后余额",
+          type: "number",
+          column: {
+            width: 130,
+            cellRender({ value }) {
+              return <span class="text-red-500">{moneyText(Number(value || 0))}</span>;
+            },
+          },
+        },
+        remark: {
+          title: "备注",
+          type: "text",
+          column: { minWidth: 220 },
+        },
+      },
+    },
+  };
+}
@@ -0,0 +1,45 @@
+<template>
+  <fs-page>
+    <template #header>
+      <div class="title">
+        {{ pageTitle }}
+        <span class="sub">{{ pageSub }}</span>
+      </div>
+    </template>
+    <fs-crud ref="crudRef" v-bind="crudBinding"> </fs-crud>
+  </fs-page>
+</template>
+
+<script lang="ts" setup>
+import { computed } from "vue";
+import { useRoute } from "vue-router";
+import { useFs } from "@fast-crud/fast-crud";
+import createCrudOptions from "./crud";
+import { useMounted } from "/@/use/use-mounted";
+
+defineOptions({
+  name: "SysWalletLog",
+});
+
+const route = useRoute();
+const isUserLog = computed(() => route.query.userId != null);
+const pageTitle = computed(() => {
+  if (isUserLog.value) {
+    return "用户余额变更记录";
+  }
+  return "余额变更记录";
+});
+const pageSub = computed(() => {
+  if (isUserLog.value) {
+    return "查看该用户的余额变更明细";
+  }
+  return "查看所有用户的余额变更明细";
+});
+
+const { crudBinding, crudRef, crudExpose } = useFs({ createCrudOptions });
+
+// 页面打开后获取列表数据
+useMounted(async () => {
+  await crudExpose.doRefresh();
+});
+</script>
@@ -1 +1,2 @@
 certd_plugin_loadmode=metadata
+# certd_release_mode=dev
@@ -3,6 +3,46 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.

+# [1.45.0](https://github.com/certd/certd/compare/v1.44.4...v1.45.0) (2026-10-02)
+
+### Bug Fixes
+
+* [BUG]使用天翼云CDN部署证书时无法匹配域名 ([bb1f232](https://github.com/certd/certd/commit/bb1f232f415c522851dede979f5d609dda844fd3))
+* 支持google persist校验方式 ([97d2b50](https://github.com/certd/certd/commit/97d2b5007409ec79ea864d437c473a2f9b5dfae4))
+* **config:** 修复环境变量加载逻辑并更新配置文件 ([07f0d3b](https://github.com/certd/certd/commit/07f0d3b4d626628a0e3dfc7e5c52e8c4a98bad47))
+* **ctyun-cdn:** 修复天翼云CDN部署插件的域名选择问题 ([ea7d14c](https://github.com/certd/certd/commit/ea7d14c289b8720781bf101bfef59eac7bb03765))
+* **webhook:** 修复模版转义换行符，避免手动上传的证书报错 ([2735feb](https://github.com/certd/certd/commit/2735feb3302f8308708dafc8b295adcd4b91d7f0))
+
+### Features
+
+* **client:** 新增客户端管理功能 ([3dbbe72](https://github.com/certd/certd/commit/3dbbe72fc15c114ca6b5e8ff45cb21f258b80650))
+
+### Performance Improvements
+
+* 宝塔站点列表支持搜索和排序 ([4420472](https://github.com/certd/certd/commit/4420472f8fac272d30fb8ccb1cc2ee9763989001))
+* 网宿插件双鉴权支持 ([241b2e5](https://github.com/certd/certd/commit/241b2e55848471e61b5d2be0c87a7dc9a0d29557))
+* **monitor:** 站点证书监控支持手动选中触发检查 ([f60e63f](https://github.com/certd/certd/commit/f60e63fbaf00460d5050cd7705bd75d57dec202d))
+* **open-api:** openkey增加用途备注 ([bbeaf61](https://github.com/certd/certd/commit/bbeaf617d19750515f6eca51863e74e23bc1de50))
+* **tencent clb:** 修改所有CLB地域的endpoint为就近接入 ([c427735](https://github.com/certd/certd/commit/c4277350bcc8cf034cf4e76db2a6daa1842bc5d7))
+
+## [1.44.4](https://github.com/certd/certd/compare/v1.44.3...v1.44.4) (2026-09-12)
+
+### Performance Improvements
+
+* 新增余额管理，管理员充值功能 ([bded368](https://github.com/certd/certd/commit/bded368cbb8974b6937ae260e448c25fae5c33ad))
+* **acme-account-access:** AcmeAccount授权允许修改eab，重新生成account ([6a649aa](https://github.com/certd/certd/commit/6a649aaca083ccd3b517f7d676a58220aa33b37d))
+
+## [1.44.3](https://github.com/certd/certd/compare/v1.44.2...v1.44.3) (2026-09-06)
+
+### Bug Fixes
+
+* **plugin-service:** 修复同步自己开发的云端插件不显示已安装状态问题 ([dac94b6](https://github.com/certd/certd/commit/dac94b64f0ceb7176e2cf07ce220be0aa5ed98d2))
+* **plugin:** 修复插件配置保存与加载的相关问题 ([bd94334](https://github.com/certd/certd/commit/bd9433478a43d5d64ce6370386d0fe0aaff07d2e))
+
+### Performance Improvements
+
+* **plugin:** add Fastly custom TLS certificates integration ([#797](https://github.com/certd/certd/issues/797)) [@szhu25](https://github.com/szhu25) ([2a2e963](https://github.com/certd/certd/commit/2a2e963914c4dfc192cbe0a4bbb9c115e626da01))
+
 ## [1.44.2](https://github.com/certd/certd/compare/v1.44.1...v1.44.2) (2026-09-03)

 ### Bug Fixes
@@ -0,0 +1,24 @@
+
+-- 客户端登记表：certd-client 心跳上报后记录在线状态；客户端自身信息保留独立列，站点统计等快照存 content JSON，后续扩展直接往 JSON 加字段。
+CREATE TABLE `cd_client`
+(
+  `id`                bigint PRIMARY KEY AUTO_INCREMENT NOT NULL,
+  `user_id`           bigint NOT NULL,
+  `project_id`        bigint,
+  `client_id`         varchar(64) NOT NULL,
+  `key_id`            varchar(64),
+  `machine_name`      varchar(255),
+  `version`           varchar(64),
+  `os`                varchar(64),
+  `content`           longtext,
+  `last_heartbeat_at` bigint NOT NULL,
+  `create_time`       timestamp NOT NULL DEFAULT CURRENT_TIMESTAMP,
+  `update_time`       timestamp NOT NULL DEFAULT CURRENT_TIMESTAMP
+) ENGINE = InnoDB ROW_FORMAT = DYNAMIC;
+
+CREATE INDEX `index_client_user_id` ON `cd_client` (`user_id`);
+CREATE INDEX `index_client_project_id` ON `cd_client` (`project_id`);
+CREATE UNIQUE INDEX `index_client_user_client` ON `cd_client` (`user_id`, `client_id`);
+
+-- 开放接口密钥用途备注
+ALTER TABLE cd_open_key ADD COLUMN `remark` varchar(512);
@@ -0,0 +1,24 @@
+
+-- 客户端登记表：certd-client 心跳上报后记录在线状态；客户端自身信息保留独立列，站点统计等快照存 content JSON，后续扩展直接往 JSON 加字段。
+CREATE TABLE "cd_client"
+(
+  "id"                bigint PRIMARY KEY GENERATED BY DEFAULT AS IDENTITY NOT NULL,
+  "user_id"           bigint NOT NULL,
+  "project_id"        bigint,
+  "client_id"         varchar(64) NOT NULL,
+  "key_id"            varchar(64),
+  "machine_name"      varchar(255),
+  "version"           varchar(64),
+  "os"                varchar(64),
+  "content"           text,
+  "last_heartbeat_at" bigint NOT NULL,
+  "create_time"       timestamp NOT NULL DEFAULT (CURRENT_TIMESTAMP),
+  "update_time"       timestamp NOT NULL DEFAULT (CURRENT_TIMESTAMP)
+);
+
+CREATE INDEX "index_client_user_id" ON "cd_client" ("user_id");
+CREATE INDEX "index_client_project_id" ON "cd_client" ("project_id");
+CREATE UNIQUE INDEX "index_client_user_client" ON "cd_client" ("user_id", "client_id");
+
+-- 开放接口密钥用途备注
+ALTER TABLE cd_open_key ADD COLUMN "remark" varchar(512);
@@ -0,0 +1,24 @@
+
+-- 客户端登记表：certd-client 心跳上报后记录在线状态；客户端自身信息保留独立列，站点统计等快照存 content JSON，后续扩展直接往 JSON 加字段。
+CREATE TABLE "cd_client"
+(
+  "id"                integer PRIMARY KEY AUTOINCREMENT NOT NULL,
+  "user_id"           integer NOT NULL,
+  "project_id"        integer,
+  "client_id"         varchar(64) NOT NULL,
+  "key_id"            varchar(64),
+  "machine_name"      varchar(255),
+  "version"           varchar(64),
+  "os"                varchar(64),
+  "content"           text,
+  "last_heartbeat_at" integer NOT NULL,
+  "create_time"       datetime NOT NULL DEFAULT (CURRENT_TIMESTAMP),
+  "update_time"       datetime NOT NULL DEFAULT (CURRENT_TIMESTAMP)
+);
+
+CREATE INDEX "index_client_user_id" ON "cd_client" ("user_id");
+CREATE INDEX "index_client_project_id" ON "cd_client" ("project_id");
+CREATE UNIQUE INDEX "index_client_user_client" ON "cd_client" ("user_id", "client_id");
+
+-- 开放接口密钥用途备注
+ALTER TABLE cd_open_key ADD COLUMN "remark" varchar(512);
@@ -76,15 +76,20 @@ async function genMetadata() {

  fs.rmSync("./metadata", { recursive: true });
  fs.mkdirSync("./metadata", { recursive: true });
+  const warnings = []
  for (const key in modules) {
    const module = modules[key];
    const entry = Object.entries(module);
-    if (entry.length > 1) {
-      console.log(`[warning] 文件 ${key} 导出了 ${entry.length} 个对象: ${entry.map(([name, value]) => name).join(", ")}`);
-    }
+    // if (entry.length > 1) {
+    //   warnings.push(`[warning] 文件 ${key} 导出了 ${entry.length} 个对象: ${entry.map(([name, value]) => name).join(", ")}`);
+    // }
+    const isManyExport = entry.length > 1;
    for (const [name, value] of entry) {
      //如果有define属性
      if (value.define) {
+        if (isManyExport) {
+          throw new Error(`插件文件禁止导出多个对象， ${key} 导出了 ${entry.length} 个对象: ${entry.map(([name, value]) => name).join(", ")}`);
+        }
        //那么就是插件
        let location = key.substring(4);
        location = location.substring(0, location.length - 3);
@@ -121,6 +126,11 @@ async function genMetadata() {
      }
    }
  }
+  if (warnings.length > 0) {
+    for (const warning of warnings) {
+      console.log(warning);
+    }
+  }
 }

 async function genPluginMd() {
@@ -43,7 +43,7 @@ input:

          return {
            component: {
-              disabled: ctx.compute(({form})=> !!form.access?.account)
+              disabled: ctx.compute(({form})=> !!form.access?.account && !form.access?.editAccount)
            }
          }
          
@@ -85,7 +85,7 @@ input:
              return form.access?._needEAB === true;
            }),
            component: {
-              disabled: ctx.compute(({form})=> !!form.access?.account)
+              disabled: ctx.compute(({form})=> !!form.access?.account && !form.access?.editAccount)
            }
          }
          
@@ -103,7 +103,7 @@ input:
              return form.access?._needEAB === true;
            }),
            component: {
-              disabled: ctx.compute(({form})=> !!form.access?.account)
+              disabled: ctx.compute(({form})=> !!form.access?.account && !form.access?.editAccount)
            }
          }
          
@@ -9,7 +9,9 @@ input:
      placeholder: api token，用户 API 令牌
    helper: |-
      前往 [获取API令牌](https://dash.cloudflare.com/profile/api-tokens)，注意是令牌，不是密钥。
-       token权限必须包含：[Zone区域-Zone区域-Edit编辑], [Zone区域-DNS-Edit编辑]
+       token权限必须包含两条：
+      [Zone区域-Zone区域-Edit编辑]
+      [Zone区域-DNS-Edit编辑]
    required: true
    encrypt: true
  proxy:
@@ -0,0 +1,28 @@
+name: fastly
+title: Fastly授权
+icon: simple-icons:fastly
+desc: Fastly CDN / TLS Custom Certificates API 授权
+input:
+  apiKey:
+    title: API Token
+    component:
+      placeholder: Fastly API Key / Token
+    helper: 前往 Fastly Account Settings -> Personal Access Tokens 创建 Token
+    required: true
+    encrypt: true
+  proxy:
+    title: HTTP代理
+    component:
+      placeholder: http://xxxx.xxx.xx:10811
+    helper: 可选：是否使用 HTTP 代理访问 Fastly API
+    required: false
+    encrypt: false
+  testRequest:
+    title: 测试
+    component:
+      name: api-test
+      action: TestRequest
+    helper: 测试授权是否正确
+pluginType: access
+type: builtIn
+scriptFilePath: /plugins/plugin-fastly/access.js
@@ -3,25 +3,87 @@ title: 网宿授权
 desc: ''
 icon: svg:icon-wangsu
 input:
+  authType:
+    title: 鉴权方式
+    value: aksk
+    component:
+      name: a-select
+      vModel: value
+      allowClear: false
+      options:
+        - label: AccessKey签名
+          value: aksk
+        - label: ApiKey（CDN Pro必须用这个）
+          value: apikey
+    helper: 网宿接口鉴权方式
+    required: false
  accessKeyId:
    title: accessKeyId
    component:
+      name: a-input
+      vModel: value
      placeholder: accessKeyId
-      component:
-        name: a-input
-        vModel: value
    helper: '[点击前往获取AccessKey](https://console.wangsu.com/account/accessKey?rsr=ws)'
    encrypt: false
    required: true
+    mergeScript: |2-
+
+          return {
+            show: ctx.compute(({form})=>{
+              return !form.access.authType || form.access.authType === 'aksk';
+            })
+          }
+          
  accessKeySecret:
    title: accessKeySecret
    component:
+      name: a-input
+      vModel: value
      placeholder: accessKeySecret
-      component:
-        name: a-input
-        vModel: value
    encrypt: true
    required: true
+    mergeScript: |2-
+
+          return {
+            show: ctx.compute(({form})=>{
+              return !form.access.authType || form.access.authType === 'aksk';
+            })
+          }
+          
+  apiUser:
+    title: API账号名
+    component:
+      name: a-input
+      vModel: value
+      placeholder: API账号名
+    helper: 控制台里的 API 账号名，与 API Key 配套使用
+    encrypt: false
+    required: false
+    mergeScript: |2-
+
+          return {
+            show: ctx.compute(({form})=>{
+              return form.access.authType === 'apikey';
+            })
+          }
+          
+  apiKey:
+    title: API Key
+    component:
+      name: a-input
+      vModel: value
+      placeholder: API Key
+    helper: 控制台里的 API Key，[点击前往获取](https://console.wangsu.com/account/apiManage)
+    encrypt: true
+    required: false
+    mergeScript: |2-
+
+          return {
+            show: ctx.compute(({form})=>{
+              return form.access.authType === 'apikey';
+            })
+          }
+          
  testRequest:
    title: 测试
    component:
--- a/Show More
+++ b/Show More
@@ -1 +1 @@
 :57
 :51