fix(web): stale-closure + focus trap + 去边界强转 + a11y/性能打磨 + 类型化客户端

P1-6 useStyleLearn/useKimiOauth 修 stale-closure 依赖。
P1-7 CommandPalette/Drawer 加 focus trap（新 lib/a11y/focusTrap）。
P1-8 SSE 解析与 server.ts 去 as 强转改类型守卫/运行时校验。
P2 删冗余强转、开 noUncheckedIndexedAccess、Toast 清理+稳定 key、列表 key 稳定化、
  rel=noopener、useMemo 大文本、ConflictCard role=group、useInjection 加锁、
  client.test 真断言。
codegen 重生成 schema.d.ts + 消费 DimensionEntry/ReviewConflictView 强类型。

apps/web/lib/review/sse.test.ts

@@ -82,6 +82,49 @@ describe("parseReviewBlock", () => {
     expect(parseReviewBlock('event:token\ndata:{"text":"x"}')).toBeNull();
     expect(parseReviewBlock("event:conflict\ndata:{not json")).toBeNull();
   });
+
+  // P1-8：逐事件类型守卫——已知事件但 data 形状不符也拒绝（不再强转放行）。
+  it("returns null when conflict frame lacks required string fields", () => {
+    expect(
+      parseReviewBlock('event:conflict\ndata:{"type":"设定违例","refs":[]}'),
+    ).toBeNull();
+  });
+
+  it("returns null when section status is invalid", () => {
+    expect(
+      parseReviewBlock('event:section\ndata:{"name":"c","status":"bogus"}'),
+    ).toBeNull();
+  });
+
+  it("drops non-string refs and coerces nullable foreshadow fields", () => {
+    expect(
+      parseReviewBlock(
+        'event:conflict\ndata:{"type":"设定违例","where":"第1段","refs":["第3章",7],"suggestion":"s"}',
+      ),
+    ).toEqual({
+      event: "conflict",
+      data: {
+        type: "设定违例",
+        where: "第1段",
+        refs: ["第3章"],
+        suggestion: "s",
+      },
+    });
+    expect(
+      parseReviewBlock(
+        'event:foreshadow\ndata:{"kind":"planted","title":"残图"}',
+      ),
+    ).toEqual({
+      event: "foreshadow",
+      data: {
+        kind: "planted",
+        code: null,
+        title: "残图",
+        where: null,
+        note: null,
+      },
+    });
+  });
 });
 
 describe("ReviewFrameBuffer", () => {