@oj-module/cli 0.2.53 → 0.2.56

package/templates/tests/tenant-forgery.spec.ts

@@ -14,11 +14,11 @@
 /* eslint-disable test/prefer-lowercase-title -- 用例标题带端点路径，保留原样更易检索 */
 import { afterEach, beforeAll, describe, expect, it } from "vitest";
 
-import { invalidateUser } from "../src/_platform/api/_shared/service/infra/access";
-import notification from "../src/notification/api/api";
-import notificationDel from "../src/notification/api/del/api";
-import profile from "../src/personal-center/api/profile/api";
-import upload from "../src/personal-center/api/upload/api";
+import { invalidateUser } from "../src/app/api/_platform/_shared/service/infra/access";
+import notification from "../src/app/api/notification/api";
+import notificationDel from "../src/app/api/notification/del/api";
+import profile from "../src/app/api/personal-center/profile/api";
+import upload from "../src/app/api/personal-center/upload/api";
 import { installDb } from "./fixture";
 
 const g = globalThis as any;

package/templates/tests/tenant-isolation.spec.ts

@@ -80,14 +80,15 @@ describe("§5.7-6 读写自动按当前租户过滤", () => {
 	});
 
 	it("truncate 只清本租户（A 组表）", async () => {
+		// 用 home_pie 而非旧 demo 的 todos：后者已随示例模块删除，迁移里没有这张表。
 		asTenant("acme");
-		await db.table("todos").insert({ title: "acme-todo" }).run();
+		await db.table("home_pie").insert({ category: "acme-pie", value: 1 }).run();
 		asTenant("globex");
-		await db.table("todos").insert({ title: "globex-todo" }).run();
+		await db.table("home_pie").insert({ category: "globex-pie", value: 2 }).run();
 
 		asTenant("acme");
-		await db.table("todos").truncate().run();
-		expect(rows("SELECT title FROM todos")).toEqual([{ title: "globex-todo" }]);
+		await db.table("home_pie").truncate().run();
+		expect(rows("SELECT category FROM home_pie")).toEqual([{ category: "globex-pie" }]);
 	});
 
 	it("refresh token 换票：别家的 token_hash 在本租户查不到", async () => {

package/templates/tests/username-namespace.spec.ts

@@ -16,9 +16,9 @@
 //   · 端到端：改名被拒之后，真正的外部成员 JIT 登录拿到的是**新建**的那一行。
 
 import { afterEach, beforeAll, beforeEach, describe, expect, it } from "vitest";
-import { invalidateAllUsers } from "../src/_platform/api/_shared/service/infra/access";
-import { ensureWecomUser, externalUsername } from "../src/auth/api/_shared/wecom/login";
-import profile from "../src/personal-center/api/profile/api";
+import { invalidateAllUsers } from "../src/app/api/_platform/_shared/service/infra/access";
+import { ensureWecomUser, externalUsername } from "../src/app/api/auth/_shared/wecom/login";
+import profile from "../src/app/api/personal-center/profile/api";
 import { installDb } from "./fixture";
 
 const g = globalThis as any;

package/templates/tests/users-page.spec.ts

@@ -0,0 +1,39 @@
+// BDD：/system/users 行级门禁——只有 superadmin 能改 superadmin 账号。
+//
+// 与 tests/rbac-users.spec.ts 的 assertCanManageTarget 用例互为两面：那边钉服务端 403，
+// 这边钉「前端不给会 403 的按钮」（置灰）。两处都测同一个判定口径，改名必须一起改。
+import { describe, expect, it } from "vitest";
+
+import { canManageUser, PLATFORM_ROLE } from "../src/app/web/system/pages/users/can-manage";
+
+describe("用户管理页：superadmin 行对非超管置灰", () => {
+	it("admin 看普通用户 → 可操作", () => {
+		expect(canManageUser(["admin"], ["editor"])).toBe(true);
+		expect(canManageUser(["admin"], [])).toBe(true);
+	});
+
+	it("admin 看 superadmin → 灰（口令/状态/成员资格一律禁用）", () => {
+		expect(canManageUser(["admin"], ["superadmin"])).toBe(false);
+		// 兼有 admin + editor 也不够：这条红线只认 superadmin
+		expect(canManageUser(["admin", "editor", "viewer"], ["superadmin", "editor"])).toBe(false);
+	});
+
+	it("superadmin 看 superadmin → 可操作（红线是限定谁能改，不是禁止改）", () => {
+		expect(canManageUser(["superadmin"], ["superadmin"])).toBe(true);
+		expect(canManageUser(["superadmin"], ["admin"])).toBe(true);
+	});
+
+	it("不看自己：本人行的禁用由页面另外用 uid 判，别混进来", () => {
+		// 空角色 + 空目标 = 可操作，说明本函数不承担 assertNotSelf 的职责
+		expect(canManageUser([], [])).toBe(true);
+	});
+
+	it("角色名精确匹配：superadmin.readonly 不是平台超管", () => {
+		expect(canManageUser(["admin"], ["superadmin.readonly"])).toBe(true);
+		expect(canManageUser(["SuperAdmin"], ["superadmin"])).toBe(false);
+	});
+
+	it("门禁常量与后端保留角色名同值（改名必须两处一起改）", () => {
+		expect(PLATFORM_ROLE).toBe("superadmin");
+	});
+});

package/templates/tests/wecom-admin.spec.ts

@@ -12,10 +12,10 @@
 import { Buffer } from "node:buffer";
 import { webcrypto } from "node:crypto";
 import { afterEach, beforeAll, beforeEach, describe, expect, it } from "vitest";
-import { assertSuperAdmin, invalidateAllUsers } from "../src/_platform/api/_shared/service/infra/access";
-import { listApps, setAppStatus } from "../src/auth/api/_shared/wecom/admin";
-import { createWecomClient, runtimeCache, runtimeHttp } from "../src/auth/api/_shared/wecom/client";
-import { readSuiteConfig } from "../src/auth/api/_shared/wecom/config";
+import { assertSuperAdmin, invalidateAllUsers } from "../src/app/api/_platform/_shared/service/infra/access";
+import { listApps, setAppStatus } from "../src/app/api/auth/_shared/wecom/admin";
+import { createWecomClient, runtimeCache, runtimeHttp } from "../src/app/api/auth/_shared/wecom/client";
+import { readSuiteConfig } from "../src/app/api/auth/_shared/wecom/config";
 import { installDb } from "./fixture";
 
 const g = globalThis as any;
@@ -124,11 +124,11 @@ const deps = { store: { encrypt: (p: string) => `gcm(${p})`, decrypt: (b: string
 
 /** createInstall 的薄包装：省掉动态 import 的样板 */
 async function createInstallForTest(cfg: ReturnType<typeof readSuiteConfig>, client: ReturnType<typeof createWecomClient>, state: string) {
-	const { createInstall } = await import("../src/auth/api/_shared/wecom/admin");
+	const { createInstall } = await import("../src/app/api/auth/_shared/wecom/admin");
 	return createInstall(cfg, client, state);
 }
 
-const api = async () => (await import("../src/auth/api/wecom/admin/api")).default;
+const api = async () => (await import("../src/app/api/auth/wecom/admin/api")).default;
 
 beforeAll(() => {
 	dbo = installDb();

package/templates/tests/wecom-client-timeout.spec.ts

@@ -11,7 +11,7 @@
 //   4. tasks 缺失 → 安全降级为「不超时」，快速请求正常返回。
 
 import { afterEach, beforeEach, describe, expect, it, vi } from "vitest";
-import { runtimeHttp } from "../src/auth/api/_shared/wecom/client";
+import { runtimeHttp } from "../src/app/api/auth/_shared/wecom/client";
 
 const g = globalThis as any;
 

package/templates/tests/wecom-connector.spec.ts

@@ -10,12 +10,12 @@
 // deps 全注入：store 用 `enc:` 前后缀假加密（Node 侧 crypto 只读，设计 §9.1），
 // client 的 http/kv 用内存桩——真实网络与 AES 已由 wecom-crypt.spec / 运行时保证。
 /* eslint-disable test/prefer-lowercase-title -- D/AC 编号是验收锚点，保留大写 */
-import type { WecomCache, WecomHttp } from "../src/auth/api/_shared/wecom/client";
-import type { WecomConfig } from "../src/auth/api/_shared/wecom/config";
-import type { WecomStoreDeps } from "../src/auth/api/_shared/wecom/store";
+import type { WecomCache, WecomHttp } from "../src/app/api/auth/_shared/wecom/client";
+import type { WecomConfig } from "../src/app/api/auth/_shared/wecom/config";
+import type { WecomStoreDeps } from "../src/app/api/auth/_shared/wecom/store";
 
 import { afterEach, beforeAll, beforeEach, describe, expect, it } from "vitest";
-import { createWecomClient, runtimeCache } from "../src/auth/api/_shared/wecom/client";
+import { createWecomClient, runtimeCache } from "../src/app/api/auth/_shared/wecom/client";
 import {
 	assertEncKey,
 	eventUrlOf,
@@ -23,8 +23,8 @@ import {
 	readCallbackConfig,
 	readSuiteConfig,
 	siteRootOf,
-} from "../src/auth/api/_shared/wecom/config";
-import { envOfState, handleSuiteEvent } from "../src/auth/api/_shared/wecom/events";
+} from "../src/app/api/auth/_shared/wecom/config";
+import { envOfState, handleSuiteEvent } from "../src/app/api/auth/_shared/wecom/events";
 import {
 	assertUserActive,
 	buildAuthorizeUrl,
@@ -36,8 +36,8 @@ import {
 	loginLandingUrl,
 	putLoginState,
 	takeLoginState,
-} from "../src/auth/api/_shared/wecom/login";
-import { callbackFields, field } from "../src/auth/api/_shared/wecom/payload";
+} from "../src/app/api/auth/_shared/wecom/login";
+import { callbackFields, field } from "../src/app/api/auth/_shared/wecom/payload";
 import {
 	claimLoginTicket,
 	ensureTenant,
@@ -48,7 +48,7 @@ import {
 	saveProfile,
 	setProfileStatus,
 	tenantOfCorp,
-} from "../src/auth/api/_shared/wecom/store";
+} from "../src/app/api/auth/_shared/wecom/store";
 import { installDb } from "./fixture";
 
 let dbo: ReturnType<typeof installDb>;

package/templates/tests/wecom-corp.spec.ts

@@ -15,16 +15,16 @@
 //
 // 夹具即真实库（真迁移 + 真 sqlite）：0003__credential_kind 的默认值也一起被这层覆盖到。
 /* eslint-disable test/prefer-lowercase-title -- AC 编号是验收锚点，保留大写 */
-import type { WecomStoreDeps } from "../src/auth/api/_shared/wecom/store";
+import type { WecomStoreDeps } from "../src/app/api/auth/_shared/wecom/store";
 import { Buffer } from "node:buffer";
 import { createCipheriv, webcrypto } from "node:crypto";
 import { afterEach, beforeAll, beforeEach, describe, expect, it } from "vitest";
-import { connectCorp } from "../src/auth/api/_shared/wecom/admin";
-import { createWecomClient, runtimeCache, runtimeHttp } from "../src/auth/api/_shared/wecom/client";
-import { callbackCreds, configuredKinds, corpIdentity, readBase, readCorpConfig, readSuiteConfig, wecomKinds } from "../src/auth/api/_shared/wecom/config";
-import { bytesToB64, utf8Bytes, wecomSignature } from "../src/auth/api/_shared/wecom/crypt";
-import { handleSuiteEvent } from "../src/auth/api/_shared/wecom/events";
-import { findCorpAuth, findProfile, probeProfile, saveProfile } from "../src/auth/api/_shared/wecom/store";
+import { connectCorp } from "../src/app/api/auth/_shared/wecom/admin";
+import { createWecomClient, runtimeCache, runtimeHttp } from "../src/app/api/auth/_shared/wecom/client";
+import { callbackCreds, configuredKinds, corpIdentity, readBase, readCorpConfig, readSuiteConfig, wecomKinds } from "../src/app/api/auth/_shared/wecom/config";
+import { bytesToB64, utf8Bytes, wecomSignature } from "../src/app/api/auth/_shared/wecom/crypt";
+import { handleSuiteEvent } from "../src/app/api/auth/_shared/wecom/events";
+import { findCorpAuth, findProfile, probeProfile, saveProfile } from "../src/app/api/auth/_shared/wecom/store";
 import { installDb } from "./fixture";
 
 const g = globalThis as any;
@@ -209,8 +209,8 @@ function stubUpstream(opts: { depts?: Array<{ id: string, name?: string }>, memb
 	return { calls };
 }
 
-const wecomApi = async () => (await import("../src/auth/api/wecom/api")).default;
-const adminApi = async () => (await import("../src/auth/api/wecom/admin/api")).default;
+const wecomApi = async () => (await import("../src/app/api/auth/wecom/api")).default;
+const adminApi = async () => (await import("../src/app/api/auth/wecom/admin/api")).default;
 
 /** 回调 timestamp 必须新鲜：重放守卫拒 ±5 分钟以外的报文，用固定值会让整段用例假红 */
 const nowSecs = () => String(Math.floor(Date.now() / 1000));

package/templates/tests/wecom-crypt.spec.ts

@@ -17,7 +17,7 @@ import {
 	unwrapWecomMessage,
 	utf8Bytes,
 	wecomSignature,
-} from "../src/auth/api/_shared/wecom/crypt";
+} from "../src/app/api/auth/_shared/wecom/crypt";
 
 const req = createRequire(import.meta.url);
 const nodeCrypto = req("node:crypto") as typeof import("node:crypto");

package/templates/tests/wecom-endpoints.spec.ts

@@ -11,7 +11,7 @@
 import { Buffer } from "node:buffer";
 import { createCipheriv, webcrypto } from "node:crypto";
 import { afterEach, beforeAll, beforeEach, describe, expect, it } from "vitest";
-import { bytesToB64, sha1Hex, utf8Bytes, wecomSignature } from "../src/auth/api/_shared/wecom/crypt";
+import { bytesToB64, sha1Hex, utf8Bytes, wecomSignature } from "../src/app/api/auth/_shared/wecom/crypt";
 import { installDb } from "./fixture";
 
 const g = globalThis as any;
@@ -147,7 +147,7 @@ function seedCorp(corpId = "ww_corp_a", agentId = "100001"): void {
 		.run(SUITE, corpId, agentId, corpId, `gcm(perm_${corpId})`);
 }
 
-const api = async () => (await import("../src/auth/api/wecom/api")).default;
+const api = async () => (await import("../src/app/api/auth/wecom/api")).default;
 
 beforeAll(() => {
 	dbo = installDb();

package/templates/tests/wecom-landing.spec.ts

@@ -5,7 +5,7 @@
 //   · 参数要裁剪、要能容忍少了 tenant（此时沿用本地租户，不是登录失败）；
 //   · 授权入口即使没填企业代码也要跳（后端会回 400 说明缺什么，比前端静默不动好排查）。
 import { describe, expect, it } from "vitest";
-import { parseWecomLanding, wecomAuthorizePath } from "../src/login/web/wecom";
+import { parseWecomLanding, wecomAuthorizePath } from "../src/app/web/login/wecom";
 
 describe("p2-A：回跳落地参数解析", () => {
 	it("带齐 ticket 与 tenant → 解析出两者", () => {

package/templates/tests/wecom-org-sync.spec.ts

@@ -9,15 +9,15 @@
 //   · **登录自更新节流**：上万员工每天登录，不节流就是把 user/get 打成常驻流量；
 //     但 `user/get` 拿不到（无权限/不在可见范围）时**不能**写节流键，否则这一整天都补不上资料。
 //   · **D10 不建占位部门**：登录路径若能顺手建部门，任何成员都能凭空造出组织节点。
-import type { WecomCache, WecomHttp } from "../src/auth/api/_shared/wecom/client";
-import type { WecomStoreDeps } from "../src/auth/api/_shared/wecom/store";
+import type { WecomCache, WecomHttp } from "../src/app/api/auth/_shared/wecom/client";
+import type { WecomStoreDeps } from "../src/app/api/auth/_shared/wecom/store";
 
 import { afterEach, beforeAll, beforeEach, describe, expect, it } from "vitest";
-import { upsertDepartment } from "../src/_platform/api/_shared/service/domain/org";
-import { createWecomClient, WecomApiError } from "../src/auth/api/_shared/wecom/client";
-import { handleSuiteEvent } from "../src/auth/api/_shared/wecom/events";
-import { SELF_UPDATE_TTL_SECS, selfUpdate } from "../src/auth/api/_shared/wecom/login";
-import { findProfile, probeProfile, putSuiteTicket, saveProfile, setProfileStatus } from "../src/auth/api/_shared/wecom/store";
+import { upsertDepartment } from "../src/app/api/_platform/_shared/service/domain/org";
+import { createWecomClient, WecomApiError } from "../src/app/api/auth/_shared/wecom/client";
+import { handleSuiteEvent } from "../src/app/api/auth/_shared/wecom/events";
+import { SELF_UPDATE_TTL_SECS, selfUpdate } from "../src/app/api/auth/_shared/wecom/login";
+import { findProfile, probeProfile, putSuiteTicket, saveProfile, setProfileStatus } from "../src/app/api/auth/_shared/wecom/store";
 import { installDb } from "./fixture";
 
 /* eslint-disable test/prefer-lowercase-title -- D/AC 编号是验收锚点，保留大写 */

package/templates/tests/wecom-sync.spec.ts

@@ -5,11 +5,11 @@
 //   · 权限类错码是「跳过并计数」——一旦有跳过就**不许回收**（否则一次上游抖会被读成「部门被删」）；
 //   · 限流/可恢复致命错要停在原部门（游标不前进），下一次重试同一部门；
 //   · 本地建的部门/成员一根毛都不碰（D13 归属权）。
-import type { WecomClient, WecomMember } from "../src/auth/api/_shared/wecom/client";
+import type { WecomClient, WecomMember } from "../src/app/api/auth/_shared/wecom/client";
 
 import { afterEach, beforeAll, beforeEach, describe, expect, it } from "vitest";
-import { WecomApiError } from "../src/auth/api/_shared/wecom/client";
-import { attachProfile, cancelSync, emptyView, startSync, syncStatus } from "../src/auth/api/_shared/wecom/sync";
+import { WecomApiError } from "../src/app/api/auth/_shared/wecom/client";
+import { attachProfile, cancelSync, emptyView, startSync, syncStatus } from "../src/app/api/auth/_shared/wecom/sync";
 import { installDb } from "./fixture";
 
 /* eslint-disable test/prefer-lowercase-title -- D/AC 编号是验收锚点，保留大写 */

package/templates/tsconfig.paths.json

@@ -1,18 +1,18 @@
-// 由 ojm 生成：ojm init / ojm build / ojm dev 会按 src/*/api/manifest.yaml 重写本文件，请勿手改。
+// 由 ojm 生成：ojm init / ojm build / ojm dev 会按模块清单重写本文件，请勿手改。
 //
-// oj 别名 `#/<模块名>/…` 锚在目标模块根（本布局下即 src/<模块名>/api）。tsconfig 的
-// paths 只能静态全局映射，且每条规则的替换值只允许一个 `*`（`./src/*/api/*` 会被 TS
-// 以 TS5062 拒掉），故按模块逐条枚举。
+// oj 别名 `#/<模块名>/…` 锚在目标模块根（src/<模块名>/api 或 src/app/api/<模块名>）。
+// tsconfig 的 paths 只能静态全局映射，且每条规则的替换值只允许一个 `*`（`./src/*/api/*`
+// 会被 TS 以 TS5062 拒掉），故按模块逐条枚举。
 {
 	"compilerOptions": {
 		"paths": {
-			"#/_platform/*": ["./src/_platform/api/*"],
-			"#/auth/*": ["./src/auth/api/*"],
-			"#/home/*": ["./src/home/api/*"],
-			"#/notification/*": ["./src/notification/api/*"],
-			"#/personal-center/*": ["./src/personal-center/api/*"],
-			"#/system/*": ["./src/system/api/*"],
-			"#/web/*": ["./src/web/api/*"]
+			"#/_platform/*": ["./src/app/api/_platform/*"],
+			"#/auth/*": ["./src/app/api/auth/*"],
+			"#/home/*": ["./src/app/api/home/*"],
+			"#/notification/*": ["./src/app/api/notification/*"],
+			"#/personal-center/*": ["./src/app/api/personal-center/*"],
+			"#/system/*": ["./src/app/api/system/*"],
+			"#/web/*": ["./src/app/api/web/*"]
 		}
 	}
 }

package/templates/vitest.config.ts

@@ -7,13 +7,13 @@ const srcDir = fileURLToPath(new URL("./src", import.meta.url));
 
 export default defineConfig({
 	root: fileURLToPath(new URL(".", import.meta.url)),
-	// `#/<模块名>/…` 是 oj 的模块别名（锚在目标模块根，本布局下即 `src/<模块名>/api`）。
+	// `#/<模块名>/…` 是 oj 的模块别名（锚在目标模块根，0.2.55 布局下即 `src/app/api/<模块名>`）。
 	// oj build / ojm dev 在打包器里解析它，vitest 走 vite 的 resolve，必须在此显式映射，
 	// 否则跨模块 import 的后端 spec 会以「Cannot find module」整文件跳过。
 	// 形如 `#x`（锚本模块根）与导入方相对，静态 alias 表达不了——模板后端不用这种形态，
 	// 一旦引入需先补 vitest 侧解析（或改写成 `#/<模块名>/…`）。
 	resolve: {
-		alias: [{ find: /^#\/([^/]+)\/(.*)$/, replacement: `${srcDir}/$1/api/$2` }],
+		alias: [{ find: /^#\/([^/]+)\/(.*)$/, replacement: `${srcDir}/app/api/$1/$2` }],
 	},
 	test: {
 		include: ["tests/**/*.spec.ts"],

package/templates/web.config.ts

@@ -10,24 +10,17 @@
  * 登记了不存在的前端入口才报错。
  *
  * 注意：这里的登记顺序只影响模块加载顺序，**不决定侧边栏导航顺序**——
- * 菜单顺序由各模块 entry 路由的 handle.order 决定（≥0 主菜单区升序；
- * <0 底部固定区，pin 在侧边栏底部；同 order 按根 path 字母序）。
- * `home` 必须第一个登记（shell 的 "/" 重定向到它）。
+ * 菜单顺序由各根路由的 handle.order 决定（≥0 主菜单区升序；<0 底部固定区，
+ * pin 在侧边栏底部；同 order 按根 path 字母序）。
  */
 const allModules = [
-	// /home 必须是首个模块：shell 的 "/" → VITE_BASE_HOME_PATH（=/home）重定向
-	{ name: "home", entry: "src/home/web/entry.ts" },
-	// /login 路由由模块提供：shell 宿主不挂 runtime 内置 baseRoutes
-	{ name: "login", entry: "src/login/web/entry.ts" },
-	// 个人中心：runtime 用户菜单固定导航 /personal-center/my-profile，缺则点击落空
-	{ name: "personal-center", entry: "src/personal-center/web/entry.ts" },
-	// 通知：onInit 注册 notificationsApi provider（四方法全必填），
-	// 通知铃的互动（单条已读/全部已读/清空）由此生效；未登记则永远回落内置只读兜底
-	{ name: "notification", entry: "src/notification/web/entry.ts" },
-	// 系统管理：用户/成员资格/角色权限/操作日志/站点设置/登录方式（oj 后端 /api/system/*）
-	{ name: "system", entry: "src/system/web/entry.ts" },
+	// 框架内置页面：首页/登录/个人中心/通知/系统管理聚合成**一个多根模块**。
+	// 各根按 handle.order 排序（/home 1、/personal-center 110、/system -100 底部），
+	// 与拆分时的菜单逐项一致；/login、/change-password、/notification-center 走 hideInMenu。
+	{ name: "app", entry: "src/app/web/entry.ts" },
 	// 解决方案市场：第一方能力（消费 _platform 编排面 /api/_platform/market/*，
-	// R29：第三方方案不得仿照此调用面），默认随脚手架下发
+	// R29：第三方方案不得仿照此调用面），默认随脚手架下发。保持独立模块——
+	// 可选能力，删目录即可下线。
 	{ name: "oj-market", entry: "src/oj-market/web/entry.ts" },
 	// #region demo-only
 	// 以下为模板内置的演示模块（about/access/exception/outside/route-nest），
@@ -49,4 +42,20 @@ export default {
 	/** 产物 URL 前缀，留空表示同源相对路径 */
 	baseUrl: "",
 	modules: allModules,
+	/**
+	 * 生成 client 的归属模块：`api 前缀 → 承载其 __client 的 web 模块`。
+	 *
+	 * 框架内置后端全部收在 `src/app/api/<前缀>`（模块名即 URL 前缀），前端页面收在
+	 * `src/app/web`；生成物统一落 `src/app/web/<api 前缀>/__client`，页面相对导入不变。
+	 * 不配则回落同名模块（`src/<api 前缀>/web/__client`，历史行为）。
+	 */
+	clientOwners: {
+		"_platform": "app",
+		"auth": "app",
+		"home": "app",
+		"personal-center": "app",
+		"notification": "app",
+		"system": "app",
+		"web": "app",
+	},
 };

package/vendor/host-versions.json

@@ -8,9 +8,9 @@
 		"react-router": "7.18.2",
 		"react-router/dom": "7.18.2",
 		"@tanstack/react-query": "5.102.8",
-		"@oj-module/runtime": "0.2.53",
-		"@oj-module/runtime/contract": "0.2.53",
-		"@oj-module/runtime/contract/errors": "0.2.53",
+		"@oj-module/runtime": "0.2.56",
+		"@oj-module/runtime/contract": "0.2.56",
+		"@oj-module/runtime/contract/errors": "0.2.56",
 		"@plane/kit": "0.1.20",
 		"@plane/editor": "0.1.20",
 		"antd": "6.6.1",

package/templates/src/home/web/entry.ts

@@ -1,49 +0,0 @@
-import { HomeOutlined } from "@ant-design/icons";
-import { defineModule } from "@oj-module/runtime";
-import { createElement, lazy } from "react";
-
-const Home = lazy(() => import("./pages/index"));
-
-/**
- * 首页模块：提供 `/home` 路由。
- *
- * 为什么必须有：shell 预构建产物把 `VITE_BASE_HOME_PATH` 定为 `/home`
- * （登录成功回跳、logo 点击、tabbar 首页、403/404 回首页都指向它）。
- * 工程缺 `/home` 路由时这些跳转会落到错误边界。
- *
- * 结构对齐 apps/playground-oj/web/src/home；页面用统计卡片 + 折线/柱/饼图
- * 演示宿主共享依赖矩阵（echarts / echarts-for-react / react-countup / dayjs /
- * antd / @ant-design/icons / react-i18next，均由宿主 importmap 提供单例）。
- * 图表数据为静态演示值——真实业务走模块契约 + `ojm api` 生成的 client。
- */
-export default defineModule({
-	name: "home",
-	description: "首页模块",
-	version: "0.1.0",
-	peerRuntime: ">=0.0.0",
-	routes: [
-		{
-			path: "/home",
-			handle: {
-				layout: "container",
-				order: 1,
-				title: "home:menu.home",
-				icon: createElement(HomeOutlined),
-			},
-			children: [
-				{
-					index: true,
-					Component: Home,
-					handle: {
-						title: "home:menu.home",
-						icon: createElement(HomeOutlined),
-					},
-				},
-			],
-		},
-	],
-	i18n: {
-		"zh-CN": () => import("./locales/zh-CN.json"),
-		"en-US": () => import("./locales/en-US.json"),
-	},
-});

package/templates/src/login/web/entry.ts

@@ -1,79 +0,0 @@
-import { defineModule, useAuthStore, useTenantStore } from "@oj-module/runtime";
-import { lazy } from "react";
-import { authProvider } from "./auth-provider";
-
-/**
- * 登录模块：提供 `/login` 路由与内容区。
- *
- * shell 宿主只消费模块路由（`getRoutes()`），**不挂 runtime 的内置 baseRoutes**，
- * 因此缺少本模块时 `/login` 无路由可跳（登出/回跳登录会落空）。本模块补上该路由：
- * 登录链路仍回落到 runtime 默认链（`fetchLogin` → 后端内置 `auth/login` +
- * 守卫 `getUserInfo` → `web/user-info`），模块只负责「内容区」。
- *
- * `handle.login: true` 让框架识别为登录页（`resolveLoginRoute` 校验路径必须是
- * `/login`）；`handle.layout: "fullscreen"` 由框架注入全屏外壳。
- */
-export default defineModule({
-	name: "login",
-	description: "登录模块（内容区由模块提供，外壳由框架提供）",
-	version: "0.1.0",
-	peerRuntime: ">=0.0.0",
-	routes: [
-		{
-			path: "/login",
-			handle: {
-				layout: "fullscreen",
-				login: true,
-				hideInMenu: true,
-				title: "login:page.title",
-			},
-			children: [
-				{
-					index: true,
-					Component: lazy(() => import("./pages/login")),
-					handle: { title: "login:page.title" },
-				},
-			],
-		},
-		{
-			// 首登/重置后强制改密（must_change 悬挂期唯一可用写端）；
-			// 管理面 403 msg=password change required 时也引导至此
-			path: "/change-password",
-			handle: {
-				layout: "fullscreen",
-				hideInMenu: true,
-				title: "login:page.changePwd.title",
-			},
-			children: [
-				{
-					index: true,
-					Component: lazy(() => import("./pages/change-password")),
-					handle: { title: "login:page.changePwd.title", hideInMenu: true },
-				},
-			],
-		},
-	],
-	i18n: {
-		"zh-CN": () => import("./locales/zh-CN.json"),
-		"en-US": () => import("./locales/en-US.json"),
-	},
-	lifecycle: {
-		/**
-		 * 租户上下文（L2）：请求头由**运行时**注入（`runtime/store/tenant.ts`），模块不再注册
-		 * headerProvider——宿主 shell 的 hydrateUser / solution-routes 都在任何模块 onInit 之前
-		 * 就发请求，模块注册必然晚一步（2026-10-30 冷启动 e2e 实测两个 400 missing tenant header）。
-		 * 模块这里只保留「登出清租户」这一业务语义。
-		 */
-		async onInit(ctx) {
-			// 认证 provider：仅接管「企微票据换会话」，其余方式原样委托内置链（见 auth-provider.ts）。
-			// 注册时机必须在任何登录动作之前——onInit 先于路由渲染。
-			ctx.register.authProvider(authProvider);
-			// 登出必须清租户：否则下一个用户会带着上一个用户的租户头（跨租户请求 fail-closed 403，
-			// 但单租户部署会静默落到别人的 default 视图）。token 由非空转空即视为登出。
-			useAuthStore.subscribe((state, prev) => {
-				if (prev.token && !state.token)
-					useTenantStore.getState().clear();
-			});
-		},
-	},
-});

package/templates/src/notification/web/entry.ts

@@ -1,84 +0,0 @@
-import type { AppRouteRecordRaw, NotificationsApiProvider } from "@oj-module/runtime";
-
-import { BellOutlined } from "@ant-design/icons";
-import { defineModule } from "@oj-module/runtime";
-
-import { createElement, lazy } from "react";
-
-import { createNotificationClient } from "./__client/api";
-
-const NotificationCenter = lazy(() => import("./pages/center"));
-
-/**
- * 通知中心页（N3）：全量消息 + 类型 Tab，铃铛弹层「查看全部」跳转至此。
- * hideInMenu——入口在铃铛，不占侧边导航。
- * 布局挂父路由 handle（resolveRouteLayouts 只给「无 Component 有 children」的
- * 父路由注入 layout，页面组件写父级上布局会被忽略、裸渲染无 chrome）。
- */
-const routes: AppRouteRecordRaw[] = [
-	{
-		path: "/notification-center",
-		handle: {
-			layout: "container",
-			title: "notification:menu.notificationCenter",
-			icon: createElement(BellOutlined),
-			hideInMenu: true,
-		},
-		children: [
-			{
-				index: true,
-				Component: NotificationCenter,
-				handle: {
-					title: "notification:menu.notificationCenter",
-					icon: createElement(BellOutlined),
-				},
-			},
-		],
-	},
-];
-
-/**
- * notification 模块（G5 模板形态）：通知聚合的唯一前端消费面。
- *
- * onInit 全量接管通知 API（D9 + G4）：把通知读/写收敛到本模块 `/notification`
- * 前缀下的 oj 后端，通知铃的互动（单条已读/全部已读/清空）由此生效；发射端
- * 三方法（push/pushBroadcast/del）使本模块同时作为跨模块通知原语的接收端
- * （前端 facade 委托至此）。
- */
-export default defineModule({
-	name: "notification",
-	description: "通知模块（D9/G4 注入通知读写 + 通知中心页）",
-	version: "0.1.0",
-	peerRuntime: ">=0.0.0",
-	routes,
-	i18n: {
-		"zh-CN": () => import("./locales/zh-CN.json"),
-		"en-US": () => import("./locales/en-US.json"),
-	},
-	lifecycle: {
-		async onInit(ctx) {
-			// 构造即接线：createNotificationClient 登记契约前缀 /notification
-			// （唯一真源在 __client/api.ts 的 API_PREFIX）+ 绑定圈好前缀的 scoped
-			// request（越界/穿越发请求前即拒绝，前缀收敛 D11），返回的 client
-			// 方法都自动带 /api/notification/ 前缀。
-			const notificationClient = createNotificationClient(ctx);
-			const provider: NotificationsApiProvider = {
-				// 端点函数名由 oj operationId 派生（camelCase 子路径 + 方法），
-				// 见 __client/api.ts；provider 方法名（fetchNotifications/markRead…）不变。
-				fetchNotifications: () => notificationClient.notificationNotificationsGet(),
-				// id 为命名空间串（"u:<id>" / "b:<id>"），原样透传
-				markRead: id => notificationClient.notificationNotificationsReadPost({ id: String(id) }).then(() => {}),
-				markAllRead: () => notificationClient.notificationNotificationsReadAllPost().then(() => {}),
-				clearAll: () => notificationClient.notificationNotificationsClearPost().then(() => {}),
-				push: input => notificationClient
-					.notificationPushPost({ userId: input.userId, title: input.title, message: input.message, link: input.link, avatar: input.avatar, category: input.category })
-					.then(r => String((r as { id: string }).id)),
-				pushBroadcast: input => notificationClient
-					.notificationPushBroadcastPost({ title: input.title, message: input.message, link: input.link, avatar: input.avatar, category: input.category })
-					.then(r => String((r as { id: string }).id)),
-				del: (id, userId) => notificationClient.notificationDelPost({ id: String(id), userId }).then(() => {}),
-			};
-			ctx.register.notificationsApi(provider);
-		},
-	},
-});