feat(collaboration): 完善在线文档协作与通知闭环

- 新增协作文件夹、文件、不可变修订、成员、会话、回调回执、编辑申请与分享链接数据模型。

- 补齐新建、导入、复制、下载、回收站、恢复、成员授权、所有权转让及文件级权限接口。

- 接入 ONLYOFFICE 共同编辑、历史版本预览与恢复、修订另存副本、导出下载审计和幂等回调保存。

- 增加编辑权限申请、审批通知、项目提醒聚合、通知 Feed、已读处理及历史待办数据回填。

- 支持公开分享的查看或编辑模式、有效期、密码哈希、失败锁定、短时访问凭证与固定分享地址。

- 增加协作者导出、申请编辑、工作表结构保护和所有权管理策略，并纳入项目接口权限矩阵。

- 新增协作文件库、编辑工作区、公开分享页、下载与另存为对话框，以及导航、路由和权限入口。

- 统一网页端与桌面端通知布局，增加沉浸式工作区和浏览器、Tauri 双端全屏能力。

- 扩展运行时文件下载适配、Tauri 环境识别和原生全屏命令，继续保持业务代码运行时边界。

- 加固 ONLYOFFICE 消息桥的同源下载、签名地址隔离和保存为能力校验，并更新桌面发布检查。

- 增加连续数据库迁移、50MB 上传限制、OnlyOffice 中文文案与开发启动路由校验。

- 补充协作、通知、权限、路由、运行时、布局和 OnlyOffice 相关测试及模块说明文档。

frontend/src/router.test.ts

@@ -12,11 +12,35 @@ describe("admin project route permissions", () => {
     expect(source).toContain('name: "OfficeAttachmentPreview"');
     expect(source).toContain('path: "office-preview/version/:id"');
     expect(source).toContain('name: "OfficeVersionPreview"');
-    expect(source.match(/component: OfficePreviewWorkspace/g)).toHaveLength(2);
+    expect(source).toContain('path: "office-preview/collaboration/:fileId/revision/:id"');
+    expect(source).toContain('name: "OfficeCollaborationRevisionPreview"');
+    expect(source.match(/component: OfficePreviewWorkspace/g)).toHaveLength(3);
     expect(source.match(/fullBleed: true/g)?.length).toBeGreaterThanOrEqual(2);
     expect(source.match(/transientWorkspaceTask: true/g)?.length).toBeGreaterThanOrEqual(2);
   });
 
+  it("registers the independent collaboration library and transient editor workspace", () => {
+    const source = readRouter();
+
+    expect(source).toContain('path: "knowledge/collaboration"');
+    expect(source).toContain('name: "KnowledgeCollaboration"');
+    expect(source).toContain('meta: { title: TEXT.menu.knowledgeCollaboration, requiresStudy: true, fullBleed: true }');
+    expect(source).toContain('path: "knowledge/collaboration/:fileId"');
+    expect(source).toContain('name: "KnowledgeCollaborationWorkspace"');
+    expect(source).toContain("component: CollaborationWorkspace");
+    expect(source).toContain("immersiveWorkspace: true");
+    expect(source).toContain("workspaceTaskGroup: TEXT.menu.knowledgeCollaboration");
+  });
+
+  it("registers the collaboration share page outside authenticated project layout", () => {
+    const source = readRouter();
+    expect(source).toContain('path: "/collaboration/share"');
+    expect(source).toContain('name: "CollaborationPublicShare"');
+    expect(source).toContain("component: CollaborationShareWorkspace");
+    expect(source).toContain('meta: { public: true, title: "共享协作文件" }');
+    expect(source).toContain("!to.meta.public && !auth.user");
+  });
+
   it("lets any authorized project role open the project management detail page", () => {
     const source = readRouter();
 
@@ -138,7 +162,7 @@ describe("admin project route permissions", () => {
 
   it("validates restored session tokens through /me before entering protected routes", () => {
     const source = readRouter();
-    const restoreGuardIndex = source.indexOf("if (!auth.user && getToken() && !isDesktopSessionRestoreRoute)");
+    const restoreGuardIndex = source.indexOf("if (!to.meta.public && !auth.user && getToken() && !isDesktopSessionRestoreRoute)");
     const fetchMeIndex = source.indexOf("await auth.fetchMe({ disableNetworkRetry: true, suppressErrorMessage: true })", restoreGuardIndex);
     const preserveIndex = source.indexOf("shouldPreserveDesktopSessionOnAuthCheckFailure(error)", fetchMeIndex);
     const restoreRedirectIndex = source.indexOf("next({ path: DESKTOP_SESSION_RESTORE_PATH", preserveIndex);