@oj-module/cli 0.2.54 → 0.2.56

package/templates/src/app/web/system/pages/users/index.tsx

@@ -1,4 +1,4 @@
-import type { SystemUsersGetData } from "../../__client/api";
+import type { SystemUsersGetData } from "../../__client";
 
 import { PlusOutlined } from "@ant-design/icons";
 import { useUserStore } from "@oj-module/runtime";
@@ -9,16 +9,19 @@ import { useTranslation } from "react-i18next";
 
 import { useNavigate } from "react-router";
 
-import { systemDepartmentsGet, systemUsersForbiddenPut, systemUsersGet, systemUsersPasswordPut, systemUsersPost } from "../../__client/api";
+import { systemDepartmentsGet, systemUsersForbiddenPut, systemUsersGet, systemUsersPasswordPut, systemUsersPost } from "../../__client";
 import { buildTreeData, subtreeIds } from "../departments/tree";
 import { explainError, isForbidden } from "../errors";
 import { ForbiddenPanel } from "../forbidden";
+import { canManageUser } from "./can-manage";
 
 type UserRow = SystemUsersGetData[number];
 
 /**
  * 用户管理（C1）：GET /system/users 列表 + 建号 / 禁用切换 / 重置口令。
  * 本人行禁用一切自操作（后端 assertNotSelf 400 兜底，前端不给会失败的按钮，R3）；
+ * superadmin 行也禁用一切操作，除非当前登录者是 superadmin（红线：只有 superadmin 能改
+ * superadmin——后端 assertCanManageTarget 403 兜底，前端把按钮置灰）；
  * 成员资格入口：superadmin 与 **本租户 admin** 均可见（授予 admin 已下放到租户内，
  * 但授予 superadmin 仍只许 superadmin——见 domain/users.ts::assertMembershipAllowed）。
  * 部门列标出主部门，顶部可按部门筛选（含子部门）——筛选在前端做，名单本来就是一页全量。
@@ -117,8 +120,10 @@ export default function UsersPage() {
 						title={t("system:users.forbidden")}
 						description={`${row.username} → ${forbidden ? "false" : "true"}`}
 						onConfirm={() => forbiddenMut.mutate({ uid: row.id, forbidden: !forbidden })}
+						// 置灰的 Switch 不会触发 Popconfirm，这里只是把「为什么点不了」挡在确认框之前
+						disabled={String(row.id) === me || !canManageUser(myRoles, row.roles)}
 					>
-						<Switch size="small" checked={forbidden} disabled={String(row.id) === me} />
+						<Switch size="small" checked={forbidden} disabled={String(row.id) === me || !canManageUser(myRoles, row.roles)} />
 					</Popconfirm>
 					{row.must_change ? <Tag color="orange">{t("system:users.firstLoginHint")}</Tag> : null}
 				</Space>
@@ -127,20 +132,23 @@ export default function UsersPage() {
 		{
 			title: t("system:users.columns.actions"),
 			key: "actions",
-			render: (_: unknown, row: UserRow) => (
-				<Space>
-					<Button size="small" disabled={String(row.id) === me} onClick={() => setPwdTarget(row)}>
-						{t("system:users.resetPwd")}
-					</Button>
-					{canManageMembership
-						? (
-							<Button size="small" type="link" onClick={() => navigate(`/system/users/${row.id}/roles`)}>
-								{t("system:users.membership")}
-							</Button>
-						)
-						: null}
-				</Space>
-			),
+			render: (_: unknown, row: UserRow) => {
+				const manageable = canManageUser(myRoles, row.roles);
+				return (
+					<Space>
+						<Button size="small" disabled={String(row.id) === me || !manageable} onClick={() => setPwdTarget(row)}>
+							{t("system:users.resetPwd")}
+						</Button>
+						{canManageMembership
+							? (
+								<Button size="small" type="link" disabled={!manageable} onClick={() => navigate(`/system/users/${row.id}/roles`)}>
+									{t("system:users.membership")}
+								</Button>
+							)
+							: null}
+					</Space>
+				);
+			},
 		},
 	];
 

package/templates/src/app/web/system/pages/users/roles.tsx

@@ -6,7 +6,7 @@ import { useTranslation } from "react-i18next";
 
 import { useNavigate, useParams } from "react-router";
 
-import { systemRolesGet, systemUsersGet, systemUsersRolesPut } from "../../__client/api";
+import { systemRolesGet, systemUsersGet, systemUsersRolesPut } from "../../__client";
 import { explainError, isForbidden } from "../errors";
 import { ForbiddenPanel } from "../forbidden";
 

package/templates/src/app/web/system/routes.ts

@@ -4,7 +4,7 @@ import { SettingOutlined } from "@ant-design/icons";
 
 import { createElement, lazy } from "react";
 
-import { createSystemClient } from "./__client/api";
+import { createSystemClient } from "./__client";
 
 const Users = lazy(() => import("./pages/users"));
 const UserRoles = lazy(() => import("./pages/users/roles"));

package/templates/src/{web/web/__client/api.ts → app/web/web/__client/index.ts}

@@ -17,6 +17,9 @@ export const API_PREFIX = "/web";
 /** 认领身份前缀（契约 apiPrefix，字面等于模块目录名）：跨模块认领护栏对比基准 */
 export const MODULE_PREFIX = "/web";
 
+/** 认领方模块（web.config clientOwners 指定）：跨模块认领护栏对比基准 */
+export const MODULE_OWNER = "/app";
+
 /**
  * 模块 entry 的 onInit 里一行创建（构造即 install）：完成 apiPrefix 登记 +
  * scoped request 绑定，返回绑好前缀的端点函数集合。一模块一 client；
@@ -28,8 +31,8 @@ export function createWebClient(ctx: ModuleContext) {
 	// 单槽、卸载互相耦合；跨模块需求应由本模块创建后经 provider 暴露。
 	// 注意对比基准是 MODULE_PREFIX（目录名）而非 API_PREFIX——D-M8 映射时线上前缀
 	// 属于别的命名空间，认领身份仍按目录名。
-	if (import.meta.env.DEV && ctx.module.name !== MODULE_PREFIX.slice(1)) {
-		console.warn(`[ojm-api] 模块 "${ctx.module.name}" 正在认领 ${MODULE_PREFIX} 的 client——跨模块认领会共享 request 单槽、卸载互相耦合；应由 "${MODULE_PREFIX.slice(1)}" 模块在自身 onInit 创建，跨模块需求经 provider 暴露。`);
+	if (import.meta.env.DEV && ctx.module.name !== MODULE_OWNER.slice(1)) {
+		console.warn(`[ojm-api] 模块 "${ctx.module.name}" 正在认领 ${MODULE_PREFIX} 的 client——跨模块认领会共享 request 单槽、卸载互相耦合；应由 "${MODULE_OWNER.slice(1)}" 模块在自身 onInit 创建，跨模块需求经 provider 暴露。`);
 	}
 	ctx.register.apiPrefix(API_PREFIX);
 	bindRequest(ctx.utils.request);

package/templates/src/oj-market/web/api/defaultClient.ts

@@ -28,7 +28,7 @@ import {
 	platformMarketTrustPost,
 	platformMarketUninstallImpactGet,
 	platformMarketUninstallPost,
-} from "../../../_platform/web/__client/api";
+} from "../../../app/web/_platform/__client";
 
 // 绑定运行时 request 到生成 client 的模块级单槽（生成 client 是静态单例，必须由某处
 // bindRequest；此处兜底确保市场子应用无论挂载顺序都能拿到请求实例）。与 _platform 模块

package/templates/tests/auth-ldap.spec.ts

@@ -4,8 +4,8 @@
 /* eslint-disable test/prefer-lowercase-title -- AC 编号是验收锚点，保留大写 */
 import { afterEach, beforeAll, describe, expect, it } from "vitest";
 
-import { esc, firstAttr } from "../src/auth/api/_shared/ldap";
-import { createLdapLogin } from "../src/auth/api/_shared/ldap-login";
+import { esc, firstAttr } from "../src/app/api/auth/_shared/ldap";
+import { createLdapLogin } from "../src/app/api/auth/_shared/ldap-login";
 import { installDb } from "./fixture";
 
 let dbo: ReturnType<typeof installDb>;

package/templates/tests/auth-session.spec.ts

@@ -1,11 +1,11 @@
 // BDD：登录链——B1 登录顺序（D14 统一 401）、B2 首登改密（AC1-27）、B3 refresh 轮换/reuse 检测（AC1-13）、B4 JWT 仅 sub。
 // deps 全注入（Node 侧 crypto 只读不可 stub，设计 §9.1）；fake bcrypt 以 `hashed:<pw>` 为口令哈希约定。
 /* eslint-disable test/prefer-lowercase-title -- AC 编号是验收锚点，保留大写 */
-import type { SessionDeps } from "../src/auth/api/_shared/session";
+import type { SessionDeps } from "../src/app/api/auth/_shared/session";
 
 import { afterEach, beforeAll, describe, expect, it } from "vitest";
-import { assertPermission } from "../src/_platform/api/_shared/service/infra/access";
-import { createSession } from "../src/auth/api/_shared/session";
+import { assertPermission } from "../src/app/api/_platform/_shared/service/infra/access";
+import { createSession } from "../src/app/api/auth/_shared/session";
 import { installDb } from "./fixture";
 
 let dbo: ReturnType<typeof installDb>;

package/templates/tests/auth-throttle.spec.ts

@@ -5,7 +5,7 @@
 /* eslint-disable test/prefer-lowercase-title -- AC 编号是验收锚点，保留大写 */
 import { afterEach, beforeAll, describe, expect, it } from "vitest";
 
-import { loginBlocked, loginFailed, loginSucceeded, resetLoginThrottle } from "../src/_platform/api/_shared/service/infra/rate";
+import { loginBlocked, loginFailed, loginSucceeded, resetLoginThrottle } from "../src/app/api/_platform/_shared/service/infra/rate";
 import { installDb } from "./fixture";
 
 let dbo: ReturnType<typeof installDb>;

package/templates/tests/fixture.ts

@@ -1,6 +1,6 @@
 // 后端 BDD 夹具：node:sqlite 内存库 + **真实迁移文件**建表，装到 globalThis.db——
 // 与 oj 运行时注入的全局同名同面，service 代码不改一行即可被测。
-// 夹具直接读 src/<模块>/api/migrations/*.sql，与迁移不可能漂移（沿用 oj-wiki 先例）。
+// 夹具直接读 src/app/api/<模块>/migrations/*.sql，与迁移不可能漂移（沿用 oj-wiki 先例）。
 //
 // **构造器垫片（db.table / listTables）**：oj 的构造器是二进制内的 Rust 实现，Node 侧无可复用
 // 模块，故这里按手册契约（oj-api-dev api-manual「查询构造器」）写一层**最小 JS 渲染层**——
@@ -33,6 +33,8 @@ const { join, dirname } = req("node:path");
 const { fileURLToPath } = req("node:url");
 
 const SRC = join(dirname(fileURLToPath(import.meta.url)), "..", "src");
+/** 后端模块根（0.2.55 布局：`src/app/api/<模块>`）；迁移按目录发现，不在夹具里抄模块清单。 */
+const API_ROOT = join(SRC, "app", "api");
 
 export const ADMIN = 1;
 
@@ -465,9 +467,9 @@ function listTables(dbo: any, prefix?: string): string[] {
 /** 建内存库 + 注入全局；返回 DatabaseSync 供用例直插数据/断言。 */
 export function installDb(): any {
 	const dbo = new DatabaseSync(":memory:");
-	// 重放 src 下全部模块的迁移（方言专属文件除外）
-	for (const mod of readdirSync(SRC)) {
-		const dir = join(SRC, mod, "api", "migrations");
+	// 重放 src/app/api 下全部模块的迁移（方言专属文件除外）
+	for (const mod of readdirSync(API_ROOT)) {
+		const dir = join(API_ROOT, mod, "migrations");
 		if (!existsSync(dir))
 			continue;
 		for (const f of readdirSync(dir).filter((f: string) => f.endsWith(".sql") && !/\.(?:mysql|pg)\.sql$/.test(f)).sort())

package/templates/tests/guard.spec.ts

@@ -3,7 +3,7 @@
 // （真实迁移建表 / 运行时全局 db 同面 / 事务往返）——S0 spike 的「一条真实判权 AC + 形态证明」。
 import { beforeAll, describe, expect, it } from "vitest";
 
-import { decideAccess, moduleOf } from "../src/_platform/api/_shared/service/infra/guard";
+import { decideAccess, moduleOf } from "../src/app/api/_platform/_shared/service/infra/guard";
 import { ADMIN, installDb } from "./fixture";
 
 const as = (roles: string[], bindings: Record<string, string[]> = {}) => ({ roles, bindings });

package/templates/tests/lifecycle/atomic-state.spec.ts

@@ -4,14 +4,14 @@
 // 只保证读回自己写出的内容；任何不符格式的字节一律视为损坏 → 空状态，损坏上下文并入
 // 读结果（corruptNote 出口，禁 console——release isolate console 抛 BadResource，Finding A）。
 // fs 依赖经 globalThis.fs 注入（平台 isolate 注入 FsApi；测试注入 node:fs/promises 适配）。
-import type { FsFace } from "../../src/_platform/api/_lifecycle/atomic";
+import type { FsFace } from "../../src/app/api/_platform/_lifecycle/atomic";
 import * as fsp from "node:fs/promises";
 import { tmpdir } from "node:os";
 import { join } from "node:path";
 
 import { afterEach, beforeEach, describe, expect, it, vi } from "vitest";
-import { atomicWriteText } from "../../src/_platform/api/_lifecycle/atomic";
-import { createStateStore } from "../../src/_platform/api/_lifecycle/state";
+import { atomicWriteText } from "../../src/app/api/_platform/_lifecycle/atomic";
+import { createStateStore } from "../../src/app/api/_platform/_lifecycle/state";
 
 const g = globalThis as any;
 

package/templates/tests/lifecycle/bootstrap.spec.ts

@@ -5,14 +5,14 @@
 //    与 PEM 私钥块实体（header 后跟 ≥100 字符 base64 体；tasks.ts redact 正则与测试假体
 //    体长 <100 不误伤）双口径扫描。
 // ③ 集成（market-api.spec）：信任库为空 + bootstrapKey 注入 → cdn 安装直达 done 不落 needs_trust。
-import type { FsFace } from "../../src/_platform/api/_lifecycle/atomic";
+import type { FsFace } from "../../src/app/api/_platform/_lifecycle/atomic";
 import * as fsp from "node:fs/promises";
 import { tmpdir } from "node:os";
 import { dirname, join } from "node:path";
 import { fileURLToPath } from "node:url";
 import { afterEach, beforeEach, describe, expect, it } from "vitest";
-import { createTrustStore } from "../../src/_platform/api/_lifecycle/trust";
-import { BOOTSTRAP_KEY, seedBootstrapKey } from "../../src/_platform/api/market/bootstrap";
+import { createTrustStore } from "../../src/app/api/_platform/_lifecycle/trust";
+import { BOOTSTRAP_KEY, seedBootstrapKey } from "../../src/app/api/_platform/market/bootstrap";
 
 const g = globalThis as any;
 

package/templates/tests/lifecycle/deploy-smoke.spec.ts

@@ -8,19 +8,19 @@
 // 快照逐数组 ⊇ 声明，少 = 注册丢失判失败）collect-all 全败齐报。
 // entry 浏览器加载不在安装器验（Node import 必假绿——设计 §4.1），注释钉口径。
 // fetch/sha384/query/reload 面经 ctx 注入 stub（同 steps-fs 范式），fs 为 globalThis.fs 面。
-import type { FsFace } from "../../src/_platform/api/_lifecycle/atomic";
-import type { StateStore } from "../../src/_platform/api/_lifecycle/state";
-import type { DeployWebContext, ModuleEntry } from "../../src/_platform/api/_lifecycle/steps/deploy-web";
-import type { ReloadContext, ReloadFace, ReloadResult } from "../../src/_platform/api/_lifecycle/steps/reload";
-import type { SmokeContext } from "../../src/_platform/api/_lifecycle/steps/smoke";
+import type { FsFace } from "../../src/app/api/_platform/_lifecycle/atomic";
+import type { StateStore } from "../../src/app/api/_platform/_lifecycle/state";
+import type { DeployWebContext, ModuleEntry } from "../../src/app/api/_platform/_lifecycle/steps/deploy-web";
+import type { ReloadContext, ReloadFace, ReloadResult } from "../../src/app/api/_platform/_lifecycle/steps/reload";
+import type { SmokeContext } from "../../src/app/api/_platform/_lifecycle/steps/smoke";
 import { createHash } from "node:crypto";
 import * as fsp from "node:fs/promises";
 import { tmpdir } from "node:os";
 import { join } from "node:path";
 import { afterEach, beforeEach, describe, expect, it } from "vitest";
-import { deployWeb, posixPath, upsertModulesJson } from "../../src/_platform/api/_lifecycle/steps/deploy-web";
-import { reloadAndAssert } from "../../src/_platform/api/_lifecycle/steps/reload";
-import { probeUrlOf, smoke } from "../../src/_platform/api/_lifecycle/steps/smoke";
+import { deployWeb, posixPath, upsertModulesJson } from "../../src/app/api/_platform/_lifecycle/steps/deploy-web";
+import { reloadAndAssert } from "../../src/app/api/_platform/_lifecycle/steps/reload";
+import { probeUrlOf, smoke } from "../../src/app/api/_platform/_lifecycle/steps/smoke";
 
 const g = globalThis as any;
 

package/templates/tests/lifecycle/installer.spec.ts

@@ -12,22 +12,22 @@
 // 过期（30min）可接管。setEnabled 四处同写（D12/AC-P1-6）：锁摘除/恢复 + sidecar + route + modules。
 // 步骤面全 stub 注入（DIP）：fetch/exec/tar/reload 不真跑；register/smoke/audit 走真实内存库夹具。
 /* eslint-disable test/prefer-lowercase-title -- 任务/AC 编号是验收锚点，保留大写（register.spec 同约定） */
-import type { FsFace } from "../../src/_platform/api/_lifecycle/atomic";
-import type { InstallRequest } from "../../src/_platform/api/_lifecycle/installer";
-import type { StateStore } from "../../src/_platform/api/_lifecycle/state";
-import type { ExecFace } from "../../src/_platform/api/_lifecycle/steps/extract";
+import type { FsFace } from "../../src/app/api/_platform/_lifecycle/atomic";
+import type { InstallRequest } from "../../src/app/api/_platform/_lifecycle/installer";
+import type { StateStore } from "../../src/app/api/_platform/_lifecycle/state";
+import type { ExecFace } from "../../src/app/api/_platform/_lifecycle/steps/extract";
 import { createHash } from "node:crypto";
 import * as fsp from "node:fs/promises";
 import { tmpdir } from "node:os";
 import { join } from "node:path";
 import { afterEach, beforeEach, describe, expect, it, vi } from "vitest";
 import { defaultTestKey, nodeVerifyEd25519, signedArchiveFor } from "../../../src/lifecycle/__tests__/helpers";
-import { atomicWriteText } from "../../src/_platform/api/_lifecycle/atomic";
-import { gcVersions, reconcile, runInstall, setEnabled, STAGES } from "../../src/_platform/api/_lifecycle/installer";
-import { acquireTaskLock, commitLockEntry, parseLock, readLock, serializeLock, writeLock } from "../../src/_platform/api/_lifecycle/lock";
-import { createStateStore } from "../../src/_platform/api/_lifecycle/state";
-import { getTask, readTasks, redact, sweepTimedOut, writeTask } from "../../src/_platform/api/_lifecycle/tasks";
-import { createTrustStore } from "../../src/_platform/api/_lifecycle/trust";
+import { atomicWriteText } from "../../src/app/api/_platform/_lifecycle/atomic";
+import { gcVersions, reconcile, runInstall, setEnabled, STAGES } from "../../src/app/api/_platform/_lifecycle/installer";
+import { acquireTaskLock, commitLockEntry, parseLock, readLock, serializeLock, writeLock } from "../../src/app/api/_platform/_lifecycle/lock";
+import { createStateStore } from "../../src/app/api/_platform/_lifecycle/state";
+import { getTask, readTasks, redact, sweepTimedOut, writeTask } from "../../src/app/api/_platform/_lifecycle/tasks";
+import { createTrustStore } from "../../src/app/api/_platform/_lifecycle/trust";
 import { installDb } from "../fixture";
 
 const g = globalThis as any;

package/templates/tests/lifecycle/market-api.spec.ts

@@ -7,11 +7,11 @@
 // 简报 `task/:id` 段参数形态在模板 http 面无先例（contacts/detail?id= 同款 query 惯例），备案于任务报告。
 // 步骤面全 stub 注入（DIP）：fetch/exec/reload 不真跑；register/smoke/audit 走真实内存库夹具。
 /* eslint-disable test/prefer-lowercase-title -- 端点动词/路径是验收锚点，保留大写（installer.spec 同约定） */
-import type { FsFace } from "../../src/_platform/api/_lifecycle/atomic";
-import type { FetchFace } from "../../src/_platform/api/_lifecycle/steps/download";
-import type { ExecFace } from "../../src/_platform/api/_lifecycle/steps/extract";
-import type { ReloadFace } from "../../src/_platform/api/_lifecycle/steps/reload";
-import type { MarketEnv } from "../../src/_platform/api/market/api";
+import type { FsFace } from "../../src/app/api/_platform/_lifecycle/atomic";
+import type { FetchFace } from "../../src/app/api/_platform/_lifecycle/steps/download";
+import type { ExecFace } from "../../src/app/api/_platform/_lifecycle/steps/extract";
+import type { ReloadFace } from "../../src/app/api/_platform/_lifecycle/steps/reload";
+import type { MarketEnv } from "../../src/app/api/_platform/market/api";
 import { createHash } from "node:crypto";
 import { readFileSync } from "node:fs";
 import * as fsp from "node:fs/promises";
@@ -22,14 +22,14 @@ import { afterEach, beforeEach, describe, expect, it, vi } from "vitest";
 import { parse } from "yaml";
 import { defaultTestKey, nodeVerifyEd25519, signedArchiveFor } from "../../../src/lifecycle/__tests__/helpers";
 import { signIndex } from "../../../src/publish";
-import { readLock, writeLock } from "../../src/_platform/api/_lifecycle/lock";
-import { compareVersions } from "../../src/_platform/api/_lifecycle/semver";
-import { createStateStore } from "../../src/_platform/api/_lifecycle/state";
-import { getTask, writeTask } from "../../src/_platform/api/_lifecycle/tasks";
-import { createTrustStore } from "../../src/_platform/api/_lifecycle/trust";
-import { invalidateAllUsers } from "../../src/_platform/api/_shared/service/infra/access";
-import { createMarketApi, marketEnv, parseVersionsJson, versionsJsonPathOf } from "../../src/_platform/api/market/api";
-import { localIndexSource } from "../../src/_platform/api/market/index-source";
+import { readLock, writeLock } from "../../src/app/api/_platform/_lifecycle/lock";
+import { compareVersions } from "../../src/app/api/_platform/_lifecycle/semver";
+import { createStateStore } from "../../src/app/api/_platform/_lifecycle/state";
+import { getTask, writeTask } from "../../src/app/api/_platform/_lifecycle/tasks";
+import { createTrustStore } from "../../src/app/api/_platform/_lifecycle/trust";
+import { invalidateAllUsers } from "../../src/app/api/_platform/_shared/service/infra/access";
+import { createMarketApi, marketEnv, parseVersionsJson, versionsJsonPathOf } from "../../src/app/api/_platform/market/api";
+import { localIndexSource } from "../../src/app/api/_platform/market/index-source";
 import { installDb } from "../fixture";
 
 function hexToBytes(hex: string): Uint8Array {
@@ -305,7 +305,7 @@ describe("权限门（R9：市场编排 superadmin 独占，meta 登录即可）
 	it("pair-pin：meta apiVersion === _platform/manifest.yaml version（手工镜像漂移防护，P2-9）", async () => {
 		// API_VERSION（market/api.ts）与 _platform/manifest.yaml version 为手工同步的双真源；
 		// 本测试经 meta 端点间接钉住 API_VERSION，漂移即红（peerPlatform 预检口径失真）。
-		const manifestPath = join(dirname(fileURLToPath(import.meta.url)), "../../src/_platform/api/manifest.yaml");
+		const manifestPath = join(dirname(fileURLToPath(import.meta.url)), "../../src/app/api/_platform/manifest.yaml");
 		const manifestVersion = (parse(readFileSync(manifestPath, "utf8")) as { version: string }).version;
 		const api = createMarketApi(makeEnv());
 		g.http = { user: { id: 1 } };

package/templates/tests/lifecycle/migrate.spec.ts

@@ -7,16 +7,16 @@
 // rollbackGuard 纯函数：目标产物 max seq < 账本 head = 降版部署，禁止（OJ-9/M003 同源红线）；
 // seq 为数值非版本号，直接数值比较（semver.ts 不适用）。
 // exec/fs 面注入 stub（同 steps-fs 范式），不真跑 oj/sqlite。
-import type { FsFace } from "../../src/_platform/api/_lifecycle/atomic";
-import type { StateStore } from "../../src/_platform/api/_lifecycle/state";
-import type { ExecFace } from "../../src/_platform/api/_lifecycle/steps/extract";
-import type { MigrateContext } from "../../src/_platform/api/_lifecycle/steps/migrate";
+import type { FsFace } from "../../src/app/api/_platform/_lifecycle/atomic";
+import type { StateStore } from "../../src/app/api/_platform/_lifecycle/state";
+import type { ExecFace } from "../../src/app/api/_platform/_lifecycle/steps/extract";
+import type { MigrateContext } from "../../src/app/api/_platform/_lifecycle/steps/migrate";
 import * as fsp from "node:fs/promises";
 import { tmpdir } from "node:os";
 import { join } from "node:path";
 import { afterEach, beforeEach, describe, expect, it, vi } from "vitest";
-import { parseLock } from "../../src/_platform/api/_lifecycle/lock";
-import { buildMigrateCmd, maxAppliedSeq, migrate, migrateSvcDirOf, parseMigrateOutput, rollbackGuard } from "../../src/_platform/api/_lifecycle/steps/migrate";
+import { parseLock } from "../../src/app/api/_platform/_lifecycle/lock";
+import { buildMigrateCmd, maxAppliedSeq, migrate, migrateSvcDirOf, parseMigrateOutput, rollbackGuard } from "../../src/app/api/_platform/_lifecycle/steps/migrate";
 
 const g = globalThis as any;
 const DB_BYTES = new TextEncoder().encode("sqlite-header-bytes\n");

package/templates/tests/lifecycle/preflight.spec.ts

@@ -1,5 +1,5 @@
-import type { SolutionState, StateStore } from "../../src/_platform/api/_lifecycle/state";
-import type { InstallContext } from "../../src/_platform/api/_lifecycle/steps/preflight";
+import type { SolutionState, StateStore } from "../../src/app/api/_platform/_lifecycle/state";
+import type { InstallContext } from "../../src/app/api/_platform/_lifecycle/steps/preflight";
 // BDD：安装预检规则引擎（P1-5，R7/R8/R9/R24，十阶段状态机 stage 1）。
 // 规则真源：docs/prd/solution/202610171254-lifecycle-manifest-contract.md（C2-01~33 安装列）；
 // 期望真源：packages/cli/src/lifecycle/__tests__/fixtures/（fixture-valid 零违规、fixture-invalid 七码齐报）。
@@ -12,7 +12,7 @@ import { fileURLToPath } from "node:url";
 
 import { describe, expect, it } from "vitest";
 import { parse } from "yaml";
-import { preflight } from "../../src/_platform/api/_lifecycle/steps/preflight";
+import { preflight } from "../../src/app/api/_platform/_lifecycle/steps/preflight";
 
 const FIXTURES = join(dirname(fileURLToPath(import.meta.url)), "../../../src/lifecycle/__tests__/fixtures");
 const VALID = parse(readFileSync(join(FIXTURES, "fixture-valid/manifest.yaml"), "utf8")) as any;

package/templates/tests/lifecycle/register.spec.ts

@@ -8,7 +8,7 @@
 /* eslint-disable test/prefer-lowercase-title -- 任务/AC 编号是验收锚点，保留大写（DB/P1-5） */
 import { afterEach, beforeAll, describe, expect, it, vi } from "vitest";
 
-import { checkOccupancy, queryAllRegistered, queryRegistered, registerSolution } from "../../src/_platform/api/_lifecycle/steps/register";
+import { checkOccupancy, queryAllRegistered, queryRegistered, registerSolution } from "../../src/app/api/_platform/_lifecycle/steps/register";
 import { installDb } from "../fixture";
 
 let dbo: ReturnType<typeof installDb>;

package/templates/tests/lifecycle/semver.spec.ts

@@ -3,7 +3,7 @@
 // 无 prerelease > 有 prerelease；「1.0」「1.0.0」「1.0.0.0」视为相等（安装器容错口径）。
 import { describe, expect, it } from "vitest";
 
-import { compareVersions } from "../../src/_platform/api/_lifecycle/semver";
+import { compareVersions } from "../../src/app/api/_platform/_lifecycle/semver";
 
 const cases: Array<[a: string, b: string, expected: -1 | 0 | 1]> = [
 	// 主版本数值比较（非字典序）

package/templates/tests/lifecycle/sha384.spec.ts

@@ -4,7 +4,7 @@
 import { Buffer } from "node:buffer";
 import { createHash } from "node:crypto";
 import { describe, expect, it } from "vitest";
-import { bytesToBase64, sha384B64, sha384Bytes } from "../../src/_platform/api/_lifecycle/sha384";
+import { bytesToBase64, sha384B64, sha384Bytes } from "../../src/app/api/_platform/_lifecycle/sha384";
 
 const hex = (bytes: Uint8Array): string => Array.from(bytes, b => b.toString(16).padStart(2, "0")).join("");
 

package/templates/tests/lifecycle/solutions-api.spec.ts

@@ -5,7 +5,7 @@
 /* eslint-disable test/prefer-lowercase-title -- 端点路径是验收锚点 */
 import { afterEach, beforeEach, describe, expect, it } from "vitest";
 
-import api from "../../src/_platform/api/solutions/api";
+import api from "../../src/app/api/_platform/solutions/api";
 import { installDb } from "../fixture";
 
 let dbo: ReturnType<typeof installDb>;

package/templates/tests/lifecycle/source-seq.spec.ts

@@ -4,7 +4,7 @@
 // 四条负向是 G7 的重点：水位写坏 / 表不存在 / 值非法都必须**拒**，不能静默当「第一次见」——
 // 静默重置等于把「防回放」降级成「每次都当第一次见」，攻击者先破坏状态再回放即可穿透。
 import { beforeEach, describe, expect, it } from "vitest";
-import { guardAndRecordSourceSeq, readSourceSeq, SOURCE_SEQ_TABLE } from "../../src/_platform/api/_lifecycle/source-seq";
+import { guardAndRecordSourceSeq, readSourceSeq, SOURCE_SEQ_TABLE } from "../../src/app/api/_platform/_lifecycle/source-seq";
 import { installDb } from "../fixture";
 
 const SRC = "https://cdn.example.com/solutions";

package/templates/tests/lifecycle/steps-fs.spec.ts

@@ -6,11 +6,11 @@
 // 命令构造为纯函数，argv 逐字断言（与平台 exec 白名单逐字对齐，S1-2 基座）；
 // exec/fetch/sha256 面经 ctx 注入 stub，不真跑网络；合法夹具集成用例的 exec stub 落到真实系统 tar
 // （与生产同路径：isolate 不内嵌解压，exec.run 系统 tar）。
-import type { FsFace } from "../../src/_platform/api/_lifecycle/atomic";
-import type { StateStore } from "../../src/_platform/api/_lifecycle/state";
-import type { DownloadContext } from "../../src/_platform/api/_lifecycle/steps/download";
-import type { ExecFace, ExtractContext } from "../../src/_platform/api/_lifecycle/steps/extract";
-import type { VerifyContext } from "../../src/_platform/api/_lifecycle/steps/verify";
+import type { FsFace } from "../../src/app/api/_platform/_lifecycle/atomic";
+import type { StateStore } from "../../src/app/api/_platform/_lifecycle/state";
+import type { DownloadContext } from "../../src/app/api/_platform/_lifecycle/steps/download";
+import type { ExecFace, ExtractContext } from "../../src/app/api/_platform/_lifecycle/steps/extract";
+import type { VerifyContext } from "../../src/app/api/_platform/_lifecycle/steps/verify";
 import { execFile as execFileCb } from "node:child_process";
 import { createHash } from "node:crypto";
 import * as fsp from "node:fs/promises";
@@ -19,10 +19,10 @@ import { join } from "node:path";
 import { promisify } from "node:util";
 import { afterEach, beforeEach, describe, expect, it } from "vitest";
 import { defaultTestKey, nodeVerifyEd25519, signedArchiveFor } from "../../../src/lifecycle/__tests__/helpers";
-import { archiveFileOf, download } from "../../src/_platform/api/_lifecycle/steps/download";
-import { buildExtractCmd, buildListCmd, checkModuleManifest, extract } from "../../src/_platform/api/_lifecycle/steps/extract";
-import { verify } from "../../src/_platform/api/_lifecycle/steps/verify";
-import { createTrustStore } from "../../src/_platform/api/_lifecycle/trust";
+import { archiveFileOf, download } from "../../src/app/api/_platform/_lifecycle/steps/download";
+import { buildExtractCmd, buildListCmd, checkModuleManifest, extract } from "../../src/app/api/_platform/_lifecycle/steps/extract";
+import { verify } from "../../src/app/api/_platform/_lifecycle/steps/verify";
+import { createTrustStore } from "../../src/app/api/_platform/_lifecycle/trust";
 
 const execFileP = promisify(execFileCb);
 const g = globalThis as any;

package/templates/tests/lifecycle/text-edit.spec.ts

@@ -5,7 +5,7 @@
 import * as fsp from "node:fs/promises";
 import { describe, expect, it } from "vitest";
 
-import { appendAnonymousPaths, bumpInstallSeq, ensureReloadApi, hasAnchor, insertAnchor } from "../../src/_platform/api/_lifecycle/text-edit";
+import { appendAnonymousPaths, bumpInstallSeq, ensureReloadApi, hasAnchor, insertAnchor } from "../../src/app/api/_platform/_lifecycle/text-edit";
 
 describe("insertAnchor（R18）", () => {
 	it("带注释的 config.yaml 插入后注释/缩进/空行/键序逐字保留", () => {

package/templates/tests/lifecycle/tgz-guard.spec.ts

@@ -4,8 +4,8 @@
 // 拒绝：绝对路径、任何 `..` 段、l/h 条目、空成员名、反斜杠路径；`./` 前缀相对合法。
 import { describe, expect, it } from "vitest";
 
-import { MAX_ENTRIES, MAX_PACKAGE_BYTES, MAX_SINGLE_ENTRY_BYTES, MAX_UNPACKED_BYTES } from "../../src/_platform/api/_lifecycle/limits";
-import { accumulateTarVolume, checkTarVolumeLimits, extractTarEntrySize, validateTarListing } from "../../src/_platform/api/_lifecycle/tgz-guard";
+import { MAX_ENTRIES, MAX_PACKAGE_BYTES, MAX_SINGLE_ENTRY_BYTES, MAX_UNPACKED_BYTES } from "../../src/app/api/_platform/_lifecycle/limits";
+import { accumulateTarVolume, checkTarVolumeLimits, extractTarEntrySize, validateTarListing } from "../../src/app/api/_platform/_lifecycle/tgz-guard";
 
 describe("validateTarListing（R1）", () => {
 	it("正常成员列表通过", () => {

package/templates/tests/lifecycle/trust.spec.ts

@@ -2,17 +2,17 @@
 // store 层：空库/幂等/首次绑定不可改/多 key/吊销/损坏 fail-closed/.bak 回落/并发读不见半截/审计。
 // 端点层：GET /market/trust、POST /market/trust/key、DELETE /market/trust/key?key_id=（del 动词 + query，system/roles 同款先例）。
 /* eslint-disable test/prefer-lowercase-title -- 端点动词/路径是验收锚点，保留大写（market-api.spec 同约定） */
-import type { FsFace } from "../../src/_platform/api/_lifecycle/atomic";
-import type { MarketEnv } from "../../src/_platform/api/market/api";
+import type { FsFace } from "../../src/app/api/_platform/_lifecycle/atomic";
+import type { MarketEnv } from "../../src/app/api/_platform/market/api";
 import { Buffer } from "node:buffer";
 import { createHash } from "node:crypto";
 import * as fsp from "node:fs/promises";
 import { tmpdir } from "node:os";
 import { join } from "node:path";
 import { afterEach, beforeEach, describe, expect, it } from "vitest";
-import { createTrustStore, isValidKeyId } from "../../src/_platform/api/_lifecycle/trust";
-import { invalidateAllUsers } from "../../src/_platform/api/_shared/service/infra/access";
-import { createMarketApi, marketEnv } from "../../src/_platform/api/market/api";
+import { createTrustStore, isValidKeyId } from "../../src/app/api/_platform/_lifecycle/trust";
+import { invalidateAllUsers } from "../../src/app/api/_platform/_shared/service/infra/access";
+import { createMarketApi, marketEnv } from "../../src/app/api/_platform/market/api";
 import { installDb } from "../fixture";
 
 const g = globalThis as any;

package/templates/tests/lifecycle/uninstall.spec.ts

@@ -5,17 +5,17 @@
 // 夹具：本仓范式（node:sqlite 真实迁移建表 + 真实 fs 面 g.fs）；market_history 表由平台迁移
 // 0012（IF NOT EXISTS）随 installDb 重放建立，守卫语义（表不存在静默跳过）单列一例。
 /* eslint-disable test/prefer-lowercase-title -- 端点动词/路径是验收锚点，保留大写（market-api.spec 同约定） */
-import type { FsFace } from "../../src/_platform/api/_lifecycle/atomic";
-import type { MarketEnv } from "../../src/_platform/api/market/api";
+import type { FsFace } from "../../src/app/api/_platform/_lifecycle/atomic";
+import type { MarketEnv } from "../../src/app/api/_platform/market/api";
 import * as fsp from "node:fs/promises";
 import { tmpdir } from "node:os";
 import { dirname, join } from "node:path";
 import { afterEach, beforeEach, describe, expect, it } from "vitest";
-import { readLock, writeLock } from "../../src/_platform/api/_lifecycle/lock";
-import { createStateStore } from "../../src/_platform/api/_lifecycle/state";
-import { collectRetainedTables, moduleTablePrefix } from "../../src/_platform/api/_lifecycle/uninstall";
-import { invalidateAllUsers } from "../../src/_platform/api/_shared/service/infra/access";
-import { createMarketApi } from "../../src/_platform/api/market/api";
+import { readLock, writeLock } from "../../src/app/api/_platform/_lifecycle/lock";
+import { createStateStore } from "../../src/app/api/_platform/_lifecycle/state";
+import { collectRetainedTables, moduleTablePrefix } from "../../src/app/api/_platform/_lifecycle/uninstall";
+import { invalidateAllUsers } from "../../src/app/api/_platform/_shared/service/infra/access";
+import { createMarketApi } from "../../src/app/api/_platform/market/api";
 import { installDb } from "../fixture";
 
 const g = globalThis as any;

package/templates/tests/lifecycle/verify-checks.spec.ts

@@ -1,8 +1,8 @@
 // BDD：深检后端四项 + 端点（P2-7，C2-42）+ SSRF 三钉。
 // 纯 diff 函数 / 探针分类 / SSRF 钉（出站拦截 / header 清洗 / 不跟随重定向）+ 端点门（401/403/404）+ 编排。
 /* eslint-disable test/prefer-lowercase-title -- 端点动词/路径是验收锚点，保留大写（market-api.spec 同约定） */
-import type { FsFace } from "../../src/_platform/api/_lifecycle/atomic";
-import type { SolutionRouteRow } from "../../src/_platform/api/_lifecycle/verify-checks";
+import type { FsFace } from "../../src/app/api/_platform/_lifecycle/atomic";
+import type { SolutionRouteRow } from "../../src/app/api/_platform/_lifecycle/verify-checks";
 import * as fsp from "node:fs/promises";
 import { tmpdir } from "node:os";
 import { join } from "node:path";
@@ -18,9 +18,9 @@ import {
 	sha384B64,
 
 	verifyRouteReachability,
-} from "../../src/_platform/api/_lifecycle/verify-checks";
-import { siteOrigin } from "../../src/_platform/api/market/api";
-import { createSolutionsApi, solutionsEnv } from "../../src/_platform/api/solutions/api";
+} from "../../src/app/api/_platform/_lifecycle/verify-checks";
+import { siteOrigin } from "../../src/app/api/_platform/market/api";
+import { createSolutionsApi, solutionsEnv } from "../../src/app/api/_platform/solutions/api";
 import { installDb } from "../fixture";
 
 const g = globalThis as any;