前端：React 19 + Vite 8 + Tailwind 4 博客与管理后台 SPA

- 渲染管线（§8.2）：react-markdown + remark-gfm + rehype-sanitize
  （GitHub schema 扩展 hljs class 与 checked）+ rehype-highlight 纯 class
  高亮；链接强制 target=_blank + rel=nofollow noopener noreferrer；
  schema 快照与恶意 Markdown 冒烟测试（vitest 6 用例）
- 编辑器：CodeMirror 6 源码编辑 + 分屏实时预览 + 工具栏 +
  粘贴/拖拽图片上传；slug 首存定稿（冲突 409 就地高亮）、
  摘要留空自动截取、2s 防抖自动保存
- 页面：博客首页（置顶/分页/标签云）、详情（面包屑/上一篇下一篇）、
  标签页、登录、管理列表/回收站/设置/改密、404
- lib：api 客户端（统一包络 + 内存态 CSRF，禁 localStorage）、
  AuthContext（/api/me 重取）、暗色主题（class 切换 + 系统跟随）
- index.html 内嵌 Go template 占位符供服务端 meta 注入；
  vite base 固定 '/'（防深链白屏）；/api 代理 127.0.0.1:8080

web/package.json

@@ -0,0 +1,41 @@
+{
+  "name": "pure-note-web",
+  "private": true,
+  "version": "1.0.0",
+  "type": "module",
+  "scripts": {
+    "dev": "vite",
+    "build": "tsc --noEmit && vite build",
+    "preview": "vite preview",
+    "test": "vitest run",
+    "test:watch": "vitest"
+  },
+  "dependencies": {
+    "@codemirror/lang-markdown": "^6.5.2",
+    "@tanstack/react-query": "^5.102.8",
+    "@uiw/react-codemirror": "^4.25.11",
+    "lucide-react": "^1.42.0",
+    "react": "^19.2.8",
+    "react-dom": "^19.2.8",
+    "react-markdown": "^10.1.0",
+    "react-router": "^8.3.1",
+    "rehype-highlight": "^7.0.2",
+    "rehype-sanitize": "^6.0.0",
+    "remark-gfm": "^4.0.1"
+  },
+  "devDependencies": {
+    "@tailwindcss/typography": "^0.5.19",
+    "@tailwindcss/vite": "^4.3.3",
+    "@testing-library/dom": "^10.4.0",
+    "@testing-library/react": "^16.3.0",
+    "@types/react": "^19.2.0",
+    "@types/react-dom": "^19.2.0",
+    "@vitejs/plugin-react": "^5.0.0",
+    "highlight.js": "^11.11.1",
+    "tailwindcss": "^4.3.3",
+    "typescript": "^5.9.2",
+    "vite": "^8.2.2",
+    "vitest": "^3.2.4",
+    "jsdom": "^26.1.0"
+  }
+}