@oj-module/cli 0.2.28 → 0.2.29

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@oj-module/cli",
   "type": "module",
-  "version": "0.2.28",
+  "version": "0.2.29",
   "description": "React Antd 模块工程命令行工具（含预构建宿主 shell-dist）",
   "license": "MIT",
   "exports": {
@@ -49,7 +49,7 @@
   ],
   "dependencies": {
     "@faker-js/faker": "^10.4.0",
-    "@oj-module/runtime": "0.2.28",
+    "@oj-module/runtime": "0.2.29",
     "@redocly/cli": "^2.51.0",
     "@tailwindcss/vite": "^4.3.0",
     "cac": "^6.7.14",

package/shell-dist/assets/{index-CtTVbohp.js → index-CnJsHOe-.js}

@@ -1,5 +1,5 @@
 import { StyleProvider } from "@ant-design/cssinjs";
-import { AntdApp, ErrorBoundary, LayoutEffects, PageError, getHostRoutes, loadAll, setupI18n, useAuthStore, usePreferences, useUserStore } from "@oj-module/runtime";
+import { AntdApp, ErrorBoundary, LayoutEffects, PageError, getHostRoutes, getRoutes, loadAll, setupI18n, useAccessStore, useAuthStore, usePreferences, useUserStore } from "@oj-module/runtime";
 import { QueryClient, QueryClientProvider } from "@tanstack/react-query";
 import { ConfigProvider, theme } from "antd";
 import { useEffect, useState } from "react";
@@ -231,12 +231,11 @@ async function hydrateUser() {
 /**
 * 登录/登出都会经 auth store reset() 清空 user store（宿主链无 AuthGuard 重新
 * 拉取），token 变化即重新定角色。
-*
-* 已知偏差：角色变化只影响渲染期判断，侧栏菜单是 Boot 期按当时角色登记的，
-* 不登录直接进站再登录的场景菜单需刷新一次才对（后端 403 硬兜底，不是权限泄漏）。
 */
 useAuthStore.subscribe((state, prev) => {
-	if (state.token !== prev.token) hydrateUser();
+	if (state.token !== prev.token) hydrateUser().then(() => {
+		useAccessStore.getState().setAccessStore(getRoutes());
+	});
 });
 /**
 * 直链兜底页（catch-all 路由元素）。无匹配路由时渲染框架 `PageError`，

package/shell-dist/assets/runtime.js

@@ -304,10 +304,10 @@ function getAppInfo() {
 	return {
 		"pkg": {
 			"name": "@oj-module/runtime",
-			"version": "0.2.28",
+			"version": "0.2.29",
 			"license": "MIT"
 		},
-		"lastBuildTime": "2026-10-24 18:30:15"
+		"lastBuildTime": "2026-10-24 20:31:54"
 	};
 }
 var init_get_app_info = __esmMin((() => {}));
@@ -28190,6 +28190,7 @@ init_layout_effects();
 init_locales();
 init_module_loader();
 init_slots();
+init_access();
 init_auth();
 init_tabs();
 init_user();
@@ -28203,4 +28204,4 @@ init_ri();
 init_menu_icons();
 init_tree();
 //#endregion
-export { AccessControl, AccessControlRoles, AntdApp, BasicButton, BasicContent, BasicTable, EmbeddedIcon, ErrorBoundary, ExternalIcon, FormAvatarItem, FormTreeItem, Iframe, LayoutCenterIcon, LayoutEffects, LayoutLeftIcon, LayoutRightIcon, MixedNavigationIcon, OutsidePageIcon, PageError, ProfileCardIcon, RiAccountCircleLine, RiContrastFill, RiFullscreenExitLine, RiFullscreenLine, RiMailCheckLine, RiMoonIcon, RiReactjsLine, RiSunIcon, RiUserSettingsLine, ServerErrorIcon, SideNavigationIcon, TopNavigationIcon, TwoColumnNavigationIcon, accessControlCodes, bindingDiff, canAssignRole, canDeleteRole, canEditRoleBindings, defineModule, fetchAddMenuItem, fetchAddRoleItem, fetchAsyncRoutes, fetchChangePassword, fetchDeleteMenuItem, fetchDeleteRoleItem, fetchLdapLogin, fetchLogin, fetchLoginMethods, fetchLogout, fetchMenuByRoleId, fetchMenuList, fetchRbacAdminResetPassword, fetchRbacContactDetail, fetchRbacContacts, fetchRbacCreateRole, fetchRbacCreateUser, fetchRbacDeleteRole, fetchRbacOplog, fetchRbacOplogPost, fetchRbacPermissionList, fetchRbacRoleList, fetchRbacSetForbidden, fetchRbacSettings, fetchRbacUpdateBindings, fetchRbacUpdateSetting, fetchRbacUpdateUserRoles, fetchRbacUserList, fetchRefreshToken, fetchRoleList, fetchRoleMenu, fetchSolutionRoutes, fetchUpdateMenuItem, fetchUpdateRoleItem, fetchUserInfo, filterTree, getAllExpandedKeys, getAppInfo, getBooleanOptions, getHostRoutes, getModule, getModuleRoutePrefix, getModules, getRedirectPath, getRegisteredApiPrefix, getRegisteredStore, getRoutes, getYesNoOptions, groupByModule, groupSettingsByModule, handleTree, loadAll, mapTree, menuIcons, notify, permissionPrefix, request, resolveSiteBase, roleLabel, setupI18n, traverseTreeValues, unloadModule, useAccess, useAuthStore, usePreferences, useSlotNodes, useSolutionRoutes, useTabKey, useTabsStore, useUserStore, withSiteBase, external_exports as z };
+export { AccessControl, AccessControlRoles, AntdApp, BasicButton, BasicContent, BasicTable, EmbeddedIcon, ErrorBoundary, ExternalIcon, FormAvatarItem, FormTreeItem, Iframe, LayoutCenterIcon, LayoutEffects, LayoutLeftIcon, LayoutRightIcon, MixedNavigationIcon, OutsidePageIcon, PageError, ProfileCardIcon, RiAccountCircleLine, RiContrastFill, RiFullscreenExitLine, RiFullscreenLine, RiMailCheckLine, RiMoonIcon, RiReactjsLine, RiSunIcon, RiUserSettingsLine, ServerErrorIcon, SideNavigationIcon, TopNavigationIcon, TwoColumnNavigationIcon, accessControlCodes, bindingDiff, canAssignRole, canDeleteRole, canEditRoleBindings, defineModule, fetchAddMenuItem, fetchAddRoleItem, fetchAsyncRoutes, fetchChangePassword, fetchDeleteMenuItem, fetchDeleteRoleItem, fetchLdapLogin, fetchLogin, fetchLoginMethods, fetchLogout, fetchMenuByRoleId, fetchMenuList, fetchRbacAdminResetPassword, fetchRbacContactDetail, fetchRbacContacts, fetchRbacCreateRole, fetchRbacCreateUser, fetchRbacDeleteRole, fetchRbacOplog, fetchRbacOplogPost, fetchRbacPermissionList, fetchRbacRoleList, fetchRbacSetForbidden, fetchRbacSettings, fetchRbacUpdateBindings, fetchRbacUpdateSetting, fetchRbacUpdateUserRoles, fetchRbacUserList, fetchRefreshToken, fetchRoleList, fetchRoleMenu, fetchSolutionRoutes, fetchUpdateMenuItem, fetchUpdateRoleItem, fetchUserInfo, filterTree, getAllExpandedKeys, getAppInfo, getBooleanOptions, getHostRoutes, getModule, getModuleRoutePrefix, getModules, getRedirectPath, getRegisteredApiPrefix, getRegisteredStore, getRoutes, getYesNoOptions, groupByModule, groupSettingsByModule, handleTree, loadAll, mapTree, menuIcons, notify, permissionPrefix, request, resolveSiteBase, roleLabel, setupI18n, traverseTreeValues, unloadModule, useAccess, useAccessStore, useAuthStore, usePreferences, useSlotNodes, useSolutionRoutes, useTabKey, useTabsStore, useUserStore, withSiteBase, external_exports as z };

package/shell-dist/index.html

@@ -5,9 +5,9 @@
 		<meta name="viewport" content="width=device-width, initial-scale=1.0" />
 		<link rel="icon" href="/favicon.ico" />
 		<title>React Antd Admin · Shell</title>
-		<meta http-equiv="Content-Security-Policy" content="default-src 'none'; script-src 'self' https://modules.cdn.example.com 'wasm-unsafe-eval' 'nonce-mh43xEkINEUP2sZNPLqVdA=='; script-src-attr 'none'; connect-src 'self' data: https://modules.cdn.example.com; style-src 'self' https://modules.cdn.example.com 'unsafe-inline'; img-src 'self' data: https:; font-src 'self' data:; frame-src https://ant.design https://react.dev https://condorheroblog.github.io; form-action 'none'; base-uri 'none'; object-src 'none'; upgrade-insecure-requests" />
+		<meta http-equiv="Content-Security-Policy" content="default-src 'none'; script-src 'self' https://modules.cdn.example.com 'wasm-unsafe-eval' 'nonce-5zLHUGQHePNQzqOPB7RBQA=='; script-src-attr 'none'; connect-src 'self' data: https://modules.cdn.example.com; style-src 'self' https://modules.cdn.example.com 'unsafe-inline'; img-src 'self' data: https:; font-src 'self' data:; frame-src https://ant.design https://react.dev https://condorheroblog.github.io; form-action 'none'; base-uri 'none'; object-src 'none'; upgrade-insecure-requests" />
 
-		<script type="importmap" nonce="mh43xEkINEUP2sZNPLqVdA==">{
+		<script type="importmap" nonce="5zLHUGQHePNQzqOPB7RBQA==">{
   "imports": {
     "react": "/assets/react.js",
     "react/jsx-runtime": "/assets/jsx-runtime.js",
@@ -133,7 +133,7 @@
     "dayjs/locale/zh-cn": "/assets/ojm-dayjs-locale-zh-cn.js"
   }
 }</script>
-		<script type="module" crossorigin src="/assets/index-CtTVbohp.js"></script>
+		<script type="module" crossorigin src="/assets/index-CnJsHOe-.js"></script>
 	</head>
 	<body>
 		<div id="root"></div>

package/shell-dist/versions.json

@@ -7,9 +7,9 @@
   "react-router": "7.18.2",
   "react-router/dom": "7.18.2",
   "@tanstack/react-query": "5.102.8",
-  "@oj-module/runtime": "0.2.28",
-  "@oj-module/runtime/contract": "0.2.28",
-  "@oj-module/runtime/contract/errors": "0.2.28",
+  "@oj-module/runtime": "0.2.29",
+  "@oj-module/runtime/contract": "0.2.29",
+  "@oj-module/runtime/contract/errors": "0.2.29",
   "@plane/kit": "0.1.20",
   "@plane/editor": "0.1.20",
   "antd": "6.6.1",

package/src/__tests__/listen-on-free-port.test.ts

@@ -0,0 +1,39 @@
+import type { Server } from "node:http";
+import type { AddressInfo } from "node:net";
+
+import http from "node:http";
+import { afterEach, describe, expect, it } from "vitest";
+
+import { listenOnFreePort } from "../static-handler";
+
+// 回归：listen(port, cb) 的 cb 在重试成功后以旧端口先 resolve——
+// 日志「改用 5175」与「已启动 5174」并存且实际监听在 5175（2026-10-24）。
+describe("listenOnFreePort", () => {
+	const cleanup: Server[] = [];
+
+	afterEach(() => {
+		for (const s of cleanup.splice(0))
+			s.close();
+	});
+
+	it("占用首端口时顺延，返回端口与实际监听端口一致", async () => {
+		const occupier = http.createServer(() => {}).listen(0);
+		cleanup.push(occupier);
+		await new Promise<void>(r => occupier.on("listening", r));
+		const busy = (occupier.address() as AddressInfo).port;
+
+		const server = http.createServer(() => {});
+		cleanup.push(server);
+		const port = await listenOnFreePort(server, busy);
+		expect(port).toBe(busy + 1);
+		// 旧 bug 在此暴露：resolve 的是 busy，实际却监听在 busy+1
+		expect((server.address() as AddressInfo).port).toBe(port);
+	});
+
+	it("首端口空闲时原样监听", async () => {
+		const server = http.createServer(() => {});
+		cleanup.push(server);
+		const port = await listenOnFreePort(server, 0);
+		expect((server.address() as AddressInfo).port).toBe(port);
+	});
+});

package/src/build.ts

@@ -106,6 +106,7 @@ export const accessControlCodes = _obj;
 export const AccessControlRoles = _obj;
 export const permissionPrefix = "permission:button";
 // store
+export const useAccessStore = _fn;
 export const useAuthStore = _fn;
 // 方案路由归并 store（token 就绪自动重拉，R21）
 export const useSolutionRoutes = _fn;

package/src/static-handler.ts

@@ -229,7 +229,14 @@ export function createStaticHandler(opts: StaticHandlerOptions): (req: http.Inco
 export function listenOnFreePort(server: http.Server, startPort: number, maxTries = 10): Promise<number> {
 	return new Promise((resolve, reject) => {
 		const attempt = (port: number) => {
-			server.once("error", (err: NodeJS.ErrnoException) => {
+			// 回调手动挂/摘（listen(port, cb) 的 cb 摘不掉前次失败的滞留闭包，
+			// 重试成功时会以旧端口先 resolve——日志与实listen端口漂移，2026-10-24 实测）
+			function cleanup() {
+				server.off("error", onError);
+				server.off("listening", onListen);
+			}
+			function onError(err: NodeJS.ErrnoException) {
+				cleanup();
 				if (err.code === "EADDRINUSE" && port - startPort < maxTries) {
 					console.warn(`[ojm] 端口 ${port} 已被占用，改用 ${port + 1}`);
 					attempt(port + 1);
@@ -237,8 +244,16 @@ export function listenOnFreePort(server: http.Server, startPort: number, maxTrie
 				else {
 					reject(err);
 				}
-			});
-			server.listen(port, () => resolve(port));
+			}
+			function onListen() {
+				cleanup();
+				// 取实绑端口（startPort=0 时 OS 自分随机端口，闭包 port 不可信）
+				const addr = server.address();
+				resolve(typeof addr === "object" && addr ? addr.port : port);
+			}
+			server.once("error", onError);
+			server.once("listening", onListen);
+			server.listen(port);
 		};
 		attempt(startPort);
 	});

package/vendor/host-versions.json

@@ -8,9 +8,9 @@
 		"react-router": "7.18.2",
 		"react-router/dom": "7.18.2",
 		"@tanstack/react-query": "5.102.8",
-		"@oj-module/runtime": "0.2.28",
-		"@oj-module/runtime/contract": "0.2.28",
-		"@oj-module/runtime/contract/errors": "0.2.28",
+		"@oj-module/runtime": "0.2.29",
+		"@oj-module/runtime/contract": "0.2.29",
+		"@oj-module/runtime/contract/errors": "0.2.29",
 		"@plane/kit": "0.1.20",
 		"@plane/editor": "0.1.20",
 		"antd": "6.6.1",