@oj-module/cli 0.2.69 → 0.2.71

package/devkit/wecom-customer-reauth-guide.md

@@ -0,0 +1,110 @@
+---
+title: 企业微信重新授权与数据恢复操作单
+audience: 客户企业微信管理员（可直接转发）
+---
+
+# 企业微信重新授权与数据恢复操作单
+
+> 致：________________ 企业微信管理员
+>
+> **本页由服务商填写下方「本次信息」后转发给客户管理员。** 带 ☐ 的项请逐项完成并打勾。
+
+---
+
+## 本次信息（服务商填写后再发送）
+
+| 项目 | 值 |
+|---|---|
+| 站点地址 | `https://exp.wiz.top` |
+| 贵司企业代码 | `wpnOCvCwAABvYHmfoHSOjY2OAZC-lTug` |
+| 员工登录链接 | `https://exp.wiz.top/login?corp=<企业代码>&agent=<应用ID>` |
+| 应用开通链接 / 二维码 | （服务商生成，有时效；粘贴链接或附二维码） |
+| 管理后台账号 | `admin` |
+| 管理后台初始口令 | （服务商**单独**发送，请勿写在本页、勿转发） |
+| 服务联系人 / 电话 | ________________ |
+
+> 「员工登录链接」中的 `<应用ID>` 由服务商在重新授权后确认填入；请勿自行修改或删减链接参数。
+
+---
+
+## 为什么要做这一次
+
+站点近期重新部署，本地数据需要重建。**贵司在企业微信里的部门与成员数据是完整的**，重新完成一次应用授权并同步即可恢复。
+
+- 预计用时：约 10–20 分钟（企业规模越大，第 3 步越久）
+- 影响范围：操作期间员工暂时无法登录，完成后恢复
+- 需要重新设置的：站内的**角色权限**、个性化设置、操作记录（这些属于本站管理数据，企业微信不保存，无法自动恢复，见第 5 步）
+
+---
+
+## 操作步骤
+
+### 第 1 步　重新授权应用（约 2 分钟）
+
+- ☐ 使用**企业微信管理员**账号，扫描服务商提供的开通二维码（或打开开通链接）
+- ☐ 授权模式选择「**管理员授权**」
+  > **请务必不要选「成员授权」**。选错后应用读不到部门与成员，第 3 步的同步会直接失败。
+- ☐ 应用可见范围设置为「**全公司**」
+- ☐ 确认页面提示「授权成功」
+- ☐ 若提示「应用安装失败，联系服务商」：稍等 1 分钟后重试一次；仍失败请联系服务商
+
+### 第 2 步　首次登录管理后台（约 2 分钟）
+
+- ☐ 打开站点登录页，切到「**账号密码**」页签
+- ☐ 账号填 `admin`，口令用服务商单独发送的初始口令
+- ☐ 首次登录会要求**修改密码**，请设置新密码并妥善保存
+- ☐ 登录后左侧能看到「**系统管理**」菜单，即表示管理员权限正常
+
+### 第 3 步　同步组织架构（约 5–15 分钟，视企业规模）
+
+- ☐ 进入 **系统管理 → 组织架构**
+- ☐ 点击页面顶部的「**立即同步**」
+- ☐ 等待状态变成「**同步完成：X 个部门 / Y 名成员**」，期间**不要关闭页面**
+  - 过程中显示「正在同步：已处理 X/Y 个部门」属正常
+  - 若中途暂停，点「**继续同步**」接着跑，已完成的进度不会丢
+- ☐ 核对部门数、成员数与贵司企业微信通讯录一致
+- ☐ 若页面提示「该企业为「成员授权」模式」或同步报错：回到第 1 步，在企业微信后台把授权模式改为「管理员授权」后重新授权
+
+> 同步只拉取贵司自己的组织架构，不会影响其他企业的数据。
+
+### 第 4 步　通知员工重新登录
+
+- ☐ 将「员工登录链接」发给全员
+- ☐ 员工二选一进入：
+  - 在**企业微信工作台**点击本应用 → 直接免登进入；
+  - 或在浏览器打开员工登录链接 → 用企业微信「**扫一扫**」扫码进入
+- ☐ 首次登录自动建立账号，**不需要注册、不需要设置密码**
+
+### 第 5 步　重新配置角色权限（重要，无法自动恢复）
+
+> 角色权限属于本站的管理设置，企业微信不保存。原来给成员分配过的 `admin` / `editor` 等角色需要重新分配。
+
+- ☐ 进入 **系统管理 → 用户管理**，找到需要管理权限的成员
+- ☐ 通过「**成员资格**」重新分配角色
+- ☐ 在 **系统管理 → 角色权限** 核对自定义角色配置
+
+### 第 6 步　验收
+
+- ☐ 管理员能登录管理后台
+- ☐ 组织架构的部门数 / 成员数与企业微信通讯录一致
+- ☐ 员工能正常扫码进入
+- ☐ 需要管理权限的成员已重新赋权
+- ☐ 首页图表显示正常
+
+---
+
+## 遇到问题怎么办
+
+| 现象 | 处理方式 |
+|---|---|
+| 授权页提示「应用安装失败，联系服务商」 | 等待 1 分钟后重试一次；仍失败联系服务商 |
+| 同步页提示「该企业为「成员授权」模式」 | 在企业微信后台改为「管理员授权」后，重做第 1 步 |
+| 同步后部门 / 成员数明显偏少 | 检查应用可见范围是否为「全公司」，然后重新同步 |
+| 员工扫码提示「登录凭据无效或不在应用可见范围内」 | 将该成员加入应用可见范围 |
+| 登录页没有「企业微信」页签 | 联系服务商检查登录方式开关 |
+| 管理员忘记口令 | 联系服务商重设 |
+| 其他情况 | 联系服务联系人，并附上**页面截图**与**完整错误提示文字** |
+
+---
+
+> 本页仅涉及贵司在企业微信侧与本站管理后台的操作。服务端配置、开通链接生成、初始口令下发由服务商完成，无需客户管理员处理。

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@oj-module/cli",
   "type": "module",
-  "version": "0.2.69",
+  "version": "0.2.71",
   "description": "React Antd 模块工程命令行工具（含预构建宿主 shell-dist）",
   "license": "MIT",
   "exports": {
@@ -49,7 +49,7 @@
   ],
   "dependencies": {
     "@faker-js/faker": "^10.4.0",
-    "@oj-module/runtime": "0.2.69",
+    "@oj-module/runtime": "0.2.71",
     "@redocly/cli": "^2.51.0",
     "@tailwindcss/vite": "^4.3.0",
     "cac": "^6.7.14",

package/shell-dist/assets/{runtime.zrv2zhj9j0.js → runtime.7x99hmm020.js}

@@ -200,10 +200,10 @@ function hr() {
 	return {
 		pkg: {
 			name: "@oj-module/runtime",
-			version: "0.2.69",
+			version: "0.2.71",
 			license: "MIT"
 		},
-		lastBuildTime: "2026-11-06 13:26:56"
+		lastBuildTime: "2026-11-07 11:30:02"
 	};
 }
 var gr = w((() => {}));

package/shell-dist/bundles/oj-market-0.2.0.tgz.sig

@@ -0,0 +1,8 @@
+{
+  "alg": "Ed25519",
+  "key_id": "platform.release",
+  "public_key": "af47abfea1c735e29ed1a00e367fbfbfdfc2264262202dc1185f9af79ede358a",
+  "value": "/DLWQjlkaCGmSzRsQtj+UaN+5J1W6OSC5nbPlFiRMua2FQEOmMfjNZsBL6/3wTjkhs4O6wk3QavVhg8IJDxyBA==",
+  "canon": "v2",
+  "registry_id": "oj-registry"
+}

package/shell-dist/index.html

@@ -5,8 +5,8 @@
 		<meta name="viewport" content="width=device-width, initial-scale=1.0" />
 		<link rel="icon" href="/favicon.ico" />
 		<title>React Antd Admin · Shell</title>
-		<meta http-equiv="Content-Security-Policy" content="default-src 'none'; script-src 'self' https://modules.cdn.example.com 'wasm-unsafe-eval' 'nonce-tifpCLPY1fTUzXJs6I+vIg=='; script-src-attr 'none'; connect-src 'self' data: https://modules.cdn.example.com; style-src 'self' https://modules.cdn.example.com 'unsafe-inline'; img-src 'self' data: https:; font-src 'self' data:; frame-src https://ant.design https://react.dev https://condorheroblog.github.io; form-action 'none'; base-uri 'none'; object-src 'none'; upgrade-insecure-requests" />
-		<script type="importmap" nonce="tifpCLPY1fTUzXJs6I+vIg==">{
+		<meta http-equiv="Content-Security-Policy" content="default-src 'none'; script-src 'self' https://modules.cdn.example.com 'wasm-unsafe-eval' 'nonce-vSU6jmm6pmNOfU+t4LVx6A=='; script-src-attr 'none'; connect-src 'self' data: https://modules.cdn.example.com; style-src 'self' https://modules.cdn.example.com 'unsafe-inline'; img-src 'self' data: https:; font-src 'self' data:; frame-src https://ant.design https://react.dev https://condorheroblog.github.io; form-action 'none'; base-uri 'none'; object-src 'none'; upgrade-insecure-requests" />
+		<script type="importmap" nonce="vSU6jmm6pmNOfU+t4LVx6A==">{
   "imports": {
     "react": "/assets/react.1ew63mwts0.js",
     "react/jsx-runtime": "/assets/jsx-runtime.h40xu4o5b0.js",
@@ -16,7 +16,7 @@
     "react-router": "/assets/react-router.2h9rebcv50.js",
     "react-router/dom": "/assets/react-router-dom.3c6zld8h40.js",
     "@tanstack/react-query": "/assets/react-query.3rln45ow00.js",
-    "@oj-module/runtime": "/assets/runtime.zrv2zhj9j0.js",
+    "@oj-module/runtime": "/assets/runtime.7x99hmm020.js",
     "@oj-module/runtime/contract": "/assets/contract.3h327o3mj0.js",
     "@oj-module/runtime/contract/errors": "/assets/contract-errors.2o17vz9u50.js",
     "@plane/kit": "/assets/kit.37kr8ui390.js",
@@ -79,7 +79,7 @@
 			.boot-skeleton:after{content:"";width:18px;height:18px;margin-left:8px;border:2px solid #d9d9d9;border-top-color:#1677ff;border-radius:50%;animation:bs-spin .8s linear infinite}
 			@keyframes bs-spin{to{transform:rotate(360deg)}}
 		</style>
-		<script nonce="tifpCLPY1fTUzXJs6I+vIg==" data-ojm-preload="/assets/cssinjs.atgmhan7m0.js,/assets/pro-components.2kyot1vcl0.js,/assets/runtime.zrv2zhj9j0.js,/assets/react-query.3rln45ow00.js,/assets/antd.uw1coq15l0.js,/assets/react.1ew63mwts0.js,/assets/react-dom-client.ick0v05ob0.js,/assets/react-i18next.auhvjhqv00.js,/assets/react-router.2h9rebcv50.js,/assets/jsx-runtime.h40xu4o5b0.js,/assets/react-dom.2so9uxg3f0.js,/assets/clsx.jotilrt2e0.js,/assets/antd-es-locale-zh_CN.1gjjsvxbf0.js,/assets/dayjs.pa60l6wjo0.js,/assets/ojm-dayjs-locale-zh-cn.3vr3beiyp0.js,/assets/use-sync-external-store-shim.1nz1pi9bb0.js,/assets/icons.159wjwals0.js,/assets/dayjs-plugin-quarterOfYear.2oqo1lcx80.js,/assets/dayjs-plugin-customParseFormat.13xhghv1d0.js,/assets/dayjs-plugin-advancedFormat.3vsyd2eis0.js,/assets/dayjs-plugin-isoWeek.1fn1tw82p0.js,/assets/dayjs-plugin-localeData.2rwbjp9nk0.js,/assets/dayjs-plugin-weekday.2d56a4tml0.js,/assets/dayjs-plugin-weekOfYear.gvn9iph080.js,/assets/dayjs-plugin-relativeTime.2pqs3et4y0.js,/assets/dnd-kit-core.1xyreig6r0.js,/assets/dnd-kit-utilities.1umw4xphb0.js,/assets/dnd-kit-sortable.s94qciuft0.js,/assets/ky.1cgch7gu60.js,/assets/zustand.3gjgzlnqo0.js,/assets/zustand-middleware.1xaxjueme0.js,/assets/react-error-boundary.2dncdfj3b0.js,/assets/antd-locale-en_US.561tozx860.js,/assets/antd-locale-zh_CN.1cmpmgzh70.js,/assets/i18next.33zqofapj0.js,/assets/tailwind-merge.125ehiqjw0.js,/assets/nprogress.2nz76n9ny0.js,/assets/nprogress-css.1cq2pzkre0.js,/assets/react-jss.1ei6dr9e00.js,/assets/ahooks.2l850ymmh0.js,/assets/spin-delay.yjeyj6iwp0.js,/assets/simplebar-react.2g739uvai0.js,/assets/keepalive-for-react.xenu5vam70.js,/assets/zustand-shallow.6cz0yyv9x0.js,/assets/contract-errors.2o17vz9u50.js,/assets/antd-img-crop.196rkty480.js,/assets/icons-es-components-Context.365qmflwg0.js,/assets/dayjs-plugin-weekYear.2u78l3ex10.js,/assets/zustand-vanilla.1mo3ka3g30.js,/assets/zustand-react.9fsl9brxy0.js,/assets/zustand-vanilla-shallow.3424monv50.js,/assets/zustand-react-shallow.pybayv1hx0.js,/assets/ojm-antd-es-modal.bf3tgdh8v0.js,/assets/ojm-antd-es-upload.13gx45e0g0.js,/assets/ojm-antd-es-button.2uriphio50.js,/assets/ojm-antd-es-slider.xyvptuhid0.js" data-ojm-entry="/assets/index.6alqyx6ae0.js">(function(){var cs=document.currentScript;try{var ua=(navigator.userAgent||"").toLowerCase(),p=location.pathname;while(p.length>1&&p.charAt(p.length-1)==="/")p=p.slice(0,-1);if(ua.indexOf("wxwork")>=0&&p.slice(-6)==="/login"&&!new URLSearchParams(location.search).get("wecom_ticket")){var a=(typeof window.__OJ_API_BASE__==="string"&&window.__OJ_API_BASE__.trim())||"/api";while(a.length>1&&a.charAt(a.length-1)==="/")a=a.slice(0,-1);var q=new URLSearchParams(location.search),w=new URLSearchParams(),k=["corp","agent"];for(var i=0;i<k.length;i++){var v=(q.get(k[i])||"").trim();if(v)w.set(k[i],v)}var qs=w.toString();location.replace(a+"/auth/wecom/login"+(qs?"?"+qs:""));return}}catch(e){}var pl=cs.getAttribute("data-ojm-preload");if(pl){var ps=pl.split(",");for(var i=0;i<ps.length;i++){var l=document.createElement("link");l.rel="modulepreload";l.href=ps[i];document.head.appendChild(l);}}var s=document.createElement("script");s.type="module";s.src=cs.getAttribute("data-ojm-entry");document.head.appendChild(s);})();</script>
+		<script nonce="vSU6jmm6pmNOfU+t4LVx6A==" data-ojm-preload="/assets/cssinjs.atgmhan7m0.js,/assets/pro-components.2kyot1vcl0.js,/assets/runtime.7x99hmm020.js,/assets/react-query.3rln45ow00.js,/assets/antd.uw1coq15l0.js,/assets/react.1ew63mwts0.js,/assets/react-dom-client.ick0v05ob0.js,/assets/react-i18next.auhvjhqv00.js,/assets/react-router.2h9rebcv50.js,/assets/jsx-runtime.h40xu4o5b0.js,/assets/react-dom.2so9uxg3f0.js,/assets/clsx.jotilrt2e0.js,/assets/antd-es-locale-zh_CN.1gjjsvxbf0.js,/assets/dayjs.pa60l6wjo0.js,/assets/ojm-dayjs-locale-zh-cn.3vr3beiyp0.js,/assets/use-sync-external-store-shim.1nz1pi9bb0.js,/assets/icons.159wjwals0.js,/assets/dayjs-plugin-quarterOfYear.2oqo1lcx80.js,/assets/dayjs-plugin-customParseFormat.13xhghv1d0.js,/assets/dayjs-plugin-advancedFormat.3vsyd2eis0.js,/assets/dayjs-plugin-isoWeek.1fn1tw82p0.js,/assets/dayjs-plugin-localeData.2rwbjp9nk0.js,/assets/dayjs-plugin-weekday.2d56a4tml0.js,/assets/dayjs-plugin-weekOfYear.gvn9iph080.js,/assets/dayjs-plugin-relativeTime.2pqs3et4y0.js,/assets/dnd-kit-core.1xyreig6r0.js,/assets/dnd-kit-utilities.1umw4xphb0.js,/assets/dnd-kit-sortable.s94qciuft0.js,/assets/ky.1cgch7gu60.js,/assets/zustand.3gjgzlnqo0.js,/assets/zustand-middleware.1xaxjueme0.js,/assets/react-error-boundary.2dncdfj3b0.js,/assets/antd-locale-en_US.561tozx860.js,/assets/antd-locale-zh_CN.1cmpmgzh70.js,/assets/i18next.33zqofapj0.js,/assets/tailwind-merge.125ehiqjw0.js,/assets/nprogress.2nz76n9ny0.js,/assets/nprogress-css.1cq2pzkre0.js,/assets/react-jss.1ei6dr9e00.js,/assets/ahooks.2l850ymmh0.js,/assets/spin-delay.yjeyj6iwp0.js,/assets/simplebar-react.2g739uvai0.js,/assets/keepalive-for-react.xenu5vam70.js,/assets/zustand-shallow.6cz0yyv9x0.js,/assets/contract-errors.2o17vz9u50.js,/assets/antd-img-crop.196rkty480.js,/assets/icons-es-components-Context.365qmflwg0.js,/assets/dayjs-plugin-weekYear.2u78l3ex10.js,/assets/zustand-vanilla.1mo3ka3g30.js,/assets/zustand-react.9fsl9brxy0.js,/assets/zustand-vanilla-shallow.3424monv50.js,/assets/zustand-react-shallow.pybayv1hx0.js,/assets/ojm-antd-es-modal.bf3tgdh8v0.js,/assets/ojm-antd-es-upload.13gx45e0g0.js,/assets/ojm-antd-es-button.2uriphio50.js,/assets/ojm-antd-es-slider.xyvptuhid0.js" data-ojm-entry="/assets/index.6alqyx6ae0.js">(function(){var cs=document.currentScript;try{var ua=(navigator.userAgent||"").toLowerCase(),p=location.pathname;while(p.length>1&&p.charAt(p.length-1)==="/")p=p.slice(0,-1);if(ua.indexOf("wxwork")>=0&&p.slice(-6)==="/login"&&!new URLSearchParams(location.search).get("wecom_ticket")){var a=(typeof window.__OJ_API_BASE__==="string"&&window.__OJ_API_BASE__.trim())||"/api";while(a.length>1&&a.charAt(a.length-1)==="/")a=a.slice(0,-1);var q=new URLSearchParams(location.search),w=new URLSearchParams(),k=["corp","agent"];for(var i=0;i<k.length;i++){var v=(q.get(k[i])||"").trim();if(v)w.set(k[i],v)}var qs=w.toString();location.replace(a+"/auth/wecom/login"+(qs?"?"+qs:""));return}}catch(e){}var pl=cs.getAttribute("data-ojm-preload");if(pl){var ps=pl.split(",");for(var i=0;i<ps.length;i++){var l=document.createElement("link");l.rel="modulepreload";l.href=ps[i];document.head.appendChild(l);}}var s=document.createElement("script");s.type="module";s.src=cs.getAttribute("data-ojm-entry");document.head.appendChild(s);})();</script>
 	</head>
 	<body>
 		<div id="root"><div class="boot-skeleton">加载中…</div></div>

package/shell-dist/versions.json

@@ -7,9 +7,9 @@
   "react-router": "7.18.2",
   "react-router/dom": "7.18.2",
   "@tanstack/react-query": "5.102.8",
-  "@oj-module/runtime": "0.2.69",
-  "@oj-module/runtime/contract": "0.2.69",
-  "@oj-module/runtime/contract/errors": "0.2.69",
+  "@oj-module/runtime": "0.2.71",
+  "@oj-module/runtime/contract": "0.2.71",
+  "@oj-module/runtime/contract/errors": "0.2.71",
   "@plane/kit": "0.1.20",
   "@plane/editor": "0.1.20",
   "antd": "6.6.1",

package/src/__tests__/list.test.ts

@@ -53,7 +53,7 @@ describe("listCommand：已装清单", () => {
 	it("scenario: 缺省只列已装，按名字排序，upgradable / trust_state 原样透出", async () => {
 		const { fetchFn, calls } = fetchStub({
 			"/api/auth/login": LOGIN,
-			"/api/_platform/market/index": () => ok(ROWS),
+			"/api/oj-market/index": () => ok(ROWS),
 		});
 		const rows = await listCommand({ siteUrl: "http://x", user: "u", pass: "p", fetchFn });
 
@@ -67,7 +67,7 @@ describe("listCommand：已装清单", () => {
 			trustState: "trusted",
 		});
 		// 登录用的是站点寻址（Bearer 由 callApi 注入，这里只断言两次调用与顺序）
-		expect(calls).toEqual(["http://x/api/auth/login", "http://x/api/_platform/market/index"]);
+		expect(calls).toEqual(["http://x/api/auth/login", "http://x/api/oj-market/index"]);
 
 		const text = logs.join("\n");
 		expect(text).toContain("已装 2 个方案");
@@ -80,7 +80,7 @@ describe("listCommand：已装清单", () => {
 	it("scenario: --all 连未装行一起列（installed 显示 -），人话里给两个计数", async () => {
 		const { fetchFn } = fetchStub({
 			"/api/auth/login": LOGIN,
-			"/api/_platform/market/index": () => ok(ROWS),
+			"/api/oj-market/index": () => ok(ROWS),
 		});
 		const rows = await listCommand({ siteUrl: "http://x", user: "u", pass: "p", fetchFn, all: true });
 
@@ -94,7 +94,7 @@ describe("listCommand：已装清单", () => {
 	it("scenario: 站点上一个方案都没装 → 成功（exit 0 语义），人话指路 --all", async () => {
 		const { fetchFn } = fetchStub({
 			"/api/auth/login": LOGIN,
-			"/api/_platform/market/index": () => ok([ROWS[2]]),
+			"/api/oj-market/index": () => ok([ROWS[2]]),
 		});
 		const rows = await listCommand({ siteUrl: "http://x", user: "u", pass: "p", fetchFn });
 		expect(rows).toEqual([]);
@@ -140,7 +140,7 @@ describe("list：CLI 接线与信封", () => {
 	it("scenario: --json → stdout 只有一行信封，data.solutions 是过滤后的已装行", async () => {
 		const { fetchFn } = fetchStub({
 			"/api/auth/login": LOGIN,
-			"/api/_platform/market/index": () => ok(ROWS),
+			"/api/oj-market/index": () => ok(ROWS),
 		});
 		const r = await run(["list", "--site-url", "http://x", "--user", "u", "--pass", "p", "--json"], fetchFn);
 
@@ -156,7 +156,7 @@ describe("list：CLI 接线与信封", () => {
 	it("scenario: --all 也进信封（all = true 且包含未装行）", async () => {
 		const { fetchFn } = fetchStub({
 			"/api/auth/login": LOGIN,
-			"/api/_platform/market/index": () => ok(ROWS),
+			"/api/oj-market/index": () => ok(ROWS),
 		});
 		const r = await run(["list", "--site-url", "http://x", "--user", "u", "--pass", "p", "--all", "--json"], fetchFn);
 		const envelope = JSON.parse(r.out[0]!) as { data: { all: boolean, solutions: SolutionRow[] } };
@@ -167,7 +167,7 @@ describe("list：CLI 接线与信封", () => {
 	it("scenario: 站点报错（索引 503）→ 业务失败（1），错误话说清楚", async () => {
 		const { fetchFn } = fetchStub({
 			"/api/auth/login": LOGIN,
-			"/api/_platform/market/index": () => ({ ok: false, status: 503, text: async () => JSON.stringify({ code: 503, msg: "未配置市场地址" }) }),
+			"/api/oj-market/index": () => ({ ok: false, status: 503, text: async () => JSON.stringify({ code: 503, msg: "未配置市场地址" }) }),
 		});
 		const r = await run(["list", "--site-url", "http://x", "--user", "u", "--pass", "p"], fetchFn);
 		expect(r.exitCode).toBe(1);

package/src/__tests__/oj-health-host.test.ts

@@ -0,0 +1,19 @@
+/**
+ * oj.ts 的 healthHostOf：健康轮询跟随 server.host，通配/缺省回退回环。
+ * （preview 改绑局域网 IP 时，回环硬编码会让就绪轮询永不成功。）
+ */
+import { describe, expect, it } from "vitest";
+import { healthHostOf } from "../oj";
+
+describe("healthHostOf", () => {
+	it.each([
+		[undefined, "127.0.0.1"],
+		["", "127.0.0.1"],
+		["0.0.0.0", "127.0.0.1"],
+		["::", "127.0.0.1"],
+		["127.0.0.1", "127.0.0.1"],
+		["192.168.1.10", "192.168.1.10"],
+	])("host=%j → 轮询 %j", (host, expected) => {
+		expect(healthHostOf(host)).toBe(expected);
+	});
+});

package/src/__tests__/site-tenant-header.test.ts

@@ -44,8 +44,8 @@ describe("站点客户端租户头（v3 Phase 0）", () => {
 	it("scenario: 带 Bearer 的 GET / POST 都带租户头，且不干扰原有头", async () => {
 		const { fetchFn, requests } = recordingFetch({ ok: true });
 
-		await callApi<{ ok: boolean }>(fetchFn, "http://x", "tok", "GET", "/api/_platform/market/trust");
-		await callApi<{ ok: boolean }>(fetchFn, "http://x", "tok", "POST", "/api/_platform/market/install", { name: "demo" });
+		await callApi<{ ok: boolean }>(fetchFn, "http://x", "tok", "GET", "/api/oj-market/trust");
+		await callApi<{ ok: boolean }>(fetchFn, "http://x", "tok", "POST", "/api/oj-market/install", { name: "demo" });
 
 		expect(headers(requests[0]!)).toEqual({ authorization: "Bearer tok", [TENANT_HEADER]: DEFAULT_TENANT });
 		expect(headers(requests[1]!)[TENANT_HEADER]).toBe(DEFAULT_TENANT);

package/src/__tests__/templates-builtin-list.test.ts

@@ -0,0 +1,47 @@
+/**
+ * 漂移守卫：templates 自带模块名单（src/.ojm-builtin.json）必须与
+ * init.include.yaml 白名单的派生结果一致（单一真源是白名单，builtin.ts）。
+ *
+ * templates 是脚手架源工程自身：ojm init 只给目标工程生成名单文件，
+ * 源工程这份是手工补录的（2026-11-06），缺守卫就会与白名单漂移——
+ * 白名单新增模块后构建会再次冒出「缺方案契约」误报。
+ *
+ * Phase B 例外（2026-11-07 裁决）：oj-market 在**模板工程**名单里被刻意移除——
+ * 市场 UI 模块化后它是第一方方案包（`ojm build --bundle oj-market`，契约
+ * src/oj-market/solution.yaml），名单在场会被内置排除拒打包。用户工程名单由
+ * init 按白名单派生仍含 oj-market（api 编排面随脚手架内置）——两侧分歧即本测试
+ * 钉住的语义，勿「顺手对齐」。
+ */
+import { dirname, resolve } from "node:path";
+import { fileURLToPath } from "node:url";
+import { describe, expect, it } from "vitest";
+import { BUILTIN_LIST_FILE, deriveBuiltinModules, readBuiltinModules } from "../builtin";
+import { collectDefaultModuleDrift, readInitInclude } from "../scaffold-guard";
+
+const templatesRoot = resolve(dirname(fileURLToPath(import.meta.url)), "../../templates");
+/** Phase B：第一方打包放行的刻意分歧（见文件头） */
+const FIRST_PARTY_PACKAGE_EXCEPTIONS = ["oj-market"];
+
+describe("templates 自带模块名单", () => {
+	it("src/.ojm-builtin.json 存在且 = 白名单派生 − 第一方打包例外", () => {
+		const derived = [...deriveBuiltinModules(readInitInclude(templatesRoot))]
+			.filter(m => !FIRST_PARTY_PACKAGE_EXCEPTIONS.includes(m));
+		const actual = readBuiltinModules(templatesRoot);
+		expect([...actual].sort()).toEqual([...derived].sort());
+		expect(actual.size).toBeGreaterThan(0);
+	});
+
+	it("覆盖误报当事模块 app；oj-market 被第一方打包例外移除（用户工程名单仍含）", () => {
+		const actual = readBuiltinModules(templatesRoot);
+		expect(actual.has("app")).toBe(true);
+		expect(actual.has("oj-market")).toBe(false);
+	});
+
+	it("名单文件名与 builtin.ts 约定一致", () => {
+		expect(BUILTIN_LIST_FILE).toBe(".ojm-builtin.json");
+	});
+
+	it("工程即 templates 自身时脚手架门禁放行（基线 == 自身，demo-only 不算漂移）", () => {
+		expect(collectDefaultModuleDrift(templatesRoot)).toBeNull();
+	});
+});

package/src/__tests__/templates-schema-columns.test.ts

@@ -88,7 +88,7 @@ describe("templates 后端 schema.yaml 列白名单", () => {
 		expect(violations).toEqual([]);
 	});
 
-	it("s-2 回归锚点：_platform 基线为 0001、增量 0002（发布历史）三方言齐备，且基线里确有 users.employee_no", () => {
+	it("s-2 回归锚点：_platform 基线为 0001、增量 0002（发布历史）/ 0003（市场目录扩列）/ 0004（退役 reg_source_seq）/ 0005（sig_registry_id）三方言齐备，且基线里确有 users.employee_no", () => {
 		const migDir = join(srcRoot, "app", "api", "_platform", "migrations");
 		for (const file of [
 			"0001__baseline.sql",
@@ -97,13 +97,22 @@ describe("templates 后端 schema.yaml 列白名单", () => {
 			"0002__market_release.sql",
 			"0002__market_release.mysql.sql",
 			"0002__market_release.pg.sql",
+			"0003__market_catalog.sql",
+			"0003__market_catalog.mysql.sql",
+			"0003__market_catalog.pg.sql",
+			"0004__market_drop_source_seq.sql",
+			"0004__market_drop_source_seq.mysql.sql",
+			"0004__market_drop_source_seq.pg.sql",
+			"0005__market_sig_registry.sql",
+			"0005__market_sig_registry.mysql.sql",
+			"0005__market_sig_registry.pg.sql",
 		])
 			expect(existsSync(join(migDir, file)), `缺迁移 ${file}`).toBe(true);
 
 		// 0001 是压平后的结构基线，已应用过的库不会重跑——新增结构只能追加新序号，
 		// 不得回改基线（否则老库拿不到）。序号必须从 0001 起连续、无空洞。
 		const seqs = [...new Set(readdirSync(migDir).map(f => f.slice(0, 4)))].sort();
-		expect(seqs).toEqual(["0001", "0002"]);
+		expect(seqs).toEqual(["0001", "0002", "0003", "0004", "0005"]);
 
 		const schema = parse(readFileSync(join(srcRoot, "app", "api", "_platform", "schema.yaml"), "utf-8")) as SchemaDoc;
 		expect(schema.tables?.users?.columns?.employee_no).toMatchObject({ type: "text" });

package/src/__tests__/templates-tenant-scope.test.ts

@@ -115,7 +115,7 @@ describe("templates 租户定性（A 租户表 / B 共享表）", () => {
 		expect(unknown).toEqual([]);
 	});
 
-	it("t-4 29 张表的 A/B 分组与方案 v3 §5.2 一致（新增表须先定性）", () => {
+	it("t-4 28 张表的 A/B 分组与方案 v3 §5.2 一致（新增表须先定性）", () => {
 		const { tables } = loadSchemaTables();
 		const shared = [...tables].filter(([, d]) => d.tenant === false).map(([n]) => n).sort();
 		// Phase 0 落地 21 张（11 A + 10 B）；Phase 1 加企微三表，全部 B 组（D9：查它们时必然还没有租户上下文）
@@ -127,13 +127,12 @@ describe("templates 租户定性（A 租户表 / B 共享表）", () => {
 		// 2026-11-02 demo 模块下线（ecc7b35e）删掉 demo/api/schema.yaml 的 todos 表，28 → 27。
 		// 2026-11 发布凭证加 publish_credential：共享表（CLI 兑换无租户语义，归属走 owner_tenant），27 → 28。
 		// 2026-11 发布历史加 market_release：共享表（发布物落在站点级 CDN，历史按站点归口），28 → 29。
-		expect(tables.size).toBe(29);
+		expect(tables.size).toBe(28);
 		expect(shared).toEqual([
 			"_oj_migrations",
 			"market_history",
 			"market_release",
 			"publish_credential",
-			"reg_source_seq",
 			"sys_login_throttle",
 			"sys_permission",
 			"sys_rate_window",

package/src/__tests__/users-roles-display.test.ts

@@ -0,0 +1,84 @@
+/**
+ * 用户管理两项特性的纯函数用例（BDD）：
+ * - matchUserKeyword：/system/users 关键词搜索（用户名 + 显示名）
+ * - roleLabel：成员资格/角色页共用的角色语言名解析（title_key → 内置 locale → title → name）
+ *
+ * 被测代码在 templates 脚手架源里（pages/users、pages/roles），此处经相对路径
+ * 直引纯函数文件（无 react/antd 依赖，cli vitest node 环境可直接跑）。
+ */
+import { describe, expect, it } from "vitest";
+import { roleLabel } from "../../templates/src/app/web/system/pages/roles/role-label";
+import { matchUserKeyword } from "../../templates/src/app/web/system/pages/users/match-keyword";
+
+// 测试桩：模拟 i18next 的 t（key 命中表 → 译文；否则 defaultValue ?? key）
+function makeT(dict: Record<string, string>) {
+	return (key: string, opts?: { defaultValue?: string }): string => dict[key] ?? opts?.defaultValue ?? key;
+}
+
+describe("matchUserKeyword：用户关键词搜索", () => {
+	const rows = [
+		{ username: "zhangsan", display_name: "张三" },
+		{ username: "lisi", display_name: null },
+		{ username: "admin", display_name: "Admin 张" },
+	];
+
+	it.each([
+		["zhang", 0], // 命中 username
+		["张", 0], // 命中 display_name（中文）
+		["张", 2], // display_name 含中文，username 不含
+		["ADMIN", 2], // 大小写不敏感
+	])("given 关键字 %j when 过滤 then 命中第 %i 行", (kw, idx) => {
+		expect(matchUserKeyword(rows[idx]!, kw)).toBe(true);
+	});
+
+	it.each([
+		["zhang", 1], // lisi 行不命中
+		["wang", 0],
+	])("given 关键字 %j when 过滤 then 第 %i 行不命中", (kw, idx) => {
+		expect(matchUserKeyword(rows[idx]!, kw)).toBe(false);
+	});
+
+	it("given display_name 为 null when 过滤 then 不抛错且不匹配", () => {
+		expect(matchUserKeyword(rows[1]!, "张")).toBe(false);
+	});
+
+	it.each([
+		["", true], // 空串 → 全可见
+		["   ", true], // 纯空白 trim 后为空 → 全可见
+	])("given 空白关键字 %j when 过滤 then %j", (kw, expected) => {
+		expect(matchUserKeyword(rows[0]!, kw)).toBe(expected);
+	});
+});
+
+describe("roleLabel：角色语言名解析", () => {
+	it("given title_key 且 t 命中 when roleLabel then 返回译文", () => {
+		const t = makeT({ "wiki:role.editor": "编辑者" });
+		expect(roleLabel({ name: "editor", title: "Editor", title_key: "wiki:role.editor", builtin: false }, t)).toBe("编辑者");
+	});
+
+	it("given title_key 但 t 未命中 when roleLabel then 回退 title", () => {
+		const t = makeT({});
+		expect(roleLabel({ name: "editor", title: "Editor", title_key: "wiki:role.editor", builtin: false }, t)).toBe("Editor");
+	});
+
+	it("given 内置角色无 title_key when roleLabel then 查 rolesPage.roleTitle locale 键", () => {
+		const t = makeT({ "system:rolesPage.roleTitle.admin": "系统管理员" });
+		expect(roleLabel({ name: "admin", title: "Admin", title_key: null, builtin: true }, t)).toBe("系统管理员");
+	});
+
+	it("given 内置角色 locale 键未命中 when roleLabel then 回退 title", () => {
+		const t = makeT({});
+		expect(roleLabel({ name: "boss", title: "Boss", title_key: null, builtin: true }, t)).toBe("Boss");
+	});
+
+	it("given 内置角色 locale 键未命中且 title 为空 when roleLabel then 回退 name", () => {
+		const t = makeT({});
+		expect(roleLabel({ name: "boss", title: null, title_key: null, builtin: true }, t)).toBe("boss");
+	});
+
+	it("given custom 角色（非内置、无 title_key）when roleLabel then 原样 title，title 空回退 name", () => {
+		const t = makeT({});
+		expect(roleLabel({ name: "custom.crm", title: "CRM 专员", title_key: null, builtin: false }, t)).toBe("CRM 专员");
+		expect(roleLabel({ name: "custom.crm", title: null, title_key: null, builtin: false }, t)).toBe("custom.crm");
+	});
+});

package/src/bundle.ts

@@ -17,7 +17,7 @@
 //                     零份用户契约 → 友好报错指向 `ojm new`
 //   模块级契约强校验 name === 目录名（B8；跨契约查重因 B8 不可达已不实现，见计划文档 B7 决策）。
 //   两段式：全部校验（纯读零写盘）先于全部组装——校验失败 dist/ 零增量，
-//   发布者不会把半截批次扫进 CDN 索引（build-index 全量收目录）。
+//   发布者不会把半截批次直接推上市场（remote-push 整包推送，服务端 pair 校验落库）。
 //
 // 组装映射（对齐 P1-9 staging copy 源一层定版，unpack 布局即安装器 extract 段消费面）：
 //   <project>/solution.yaml | manifest.yaml          → 工程根契约（旧单方案写法）

package/src/contract/__tests__/market-client.integration.test.ts

@@ -9,7 +9,7 @@ import type { ScopedRequestLike } from "@oj-module/runtime/contract/errors";
 // 不加载 @oj-module/runtime 重依赖（antd / pro-components 在 node 环境无法 import），仅桩 request、
 // 透传真实 zod（供生成 client 的 DEV 响应校验走真实路径）。ContractApiError 由轻量子路径提供。
 import { beforeEach, describe, expect, it, vi } from "vitest";
-import { bindRequest } from "../../../templates/src/app/web/_platform/__client";
+import { bindRequest } from "../../../templates/src/oj-market/web/__client";
 import { httpMarketClient } from "../../../templates/src/oj-market/web/api/defaultClient";
 
 // index() 直连 request（不走生成 client），故把桩 request 做成可变实现，测试内统一指向同一 mock。
@@ -78,39 +78,40 @@ describe("httpMarketClient · 统一委托生成 client 集成回归", () => {
 		bindMock(mock);
 	});
 
-	it("meta() → GET _platform/market/meta，返回 { apiVersion }", async () => {
+	it("meta() → GET oj-market/meta，返回 { apiVersion }", async () => {
 		mock = mockRequest(() => ({ data: { apiVersion: "1.2.3" } }));
 		bindMock(mock);
 		const r = await httpMarketClient.meta();
-		expect(mock.calls).toEqual([{ method: "get", url: "_platform/market/meta", opts: undefined }]);
+		expect(mock.calls).toEqual([{ method: "get", url: "oj-market/meta", opts: undefined }]);
 		expect(r).toEqual({ apiVersion: "1.2.3" });
 	});
 
-	it("index() → GET _platform/market/index，返回 IndexRow[]", async () => {
+	it("index() → GET oj-market/index，返回分页 IndexPage", async () => {
 		const rows = [{ name: "a", latest: "1.0", installed: "1.0", enabled: true, upgradable: false }];
-		mock = mockRequest(() => ({ data: rows }));
+		const page = { list: rows, total: 1, page: 1, size: 20 };
+		mock = mockRequest(() => ({ data: page }));
 		bindMock(mock);
 		const r = await httpMarketClient.index();
-		expect(mock.calls[0]).toMatchObject({ method: "get", url: "_platform/market/index" });
-		expect(r).toEqual(rows);
+		expect(mock.calls[0]).toMatchObject({ method: "get", url: "oj-market/index" });
+		expect(r).toEqual(page);
 	});
 
-	it("index() 遇 503（未配置市场地址）→ [] 空态，不抛（PRD §5.3）", async () => {
-		mock = mockRequest(c => (c.url === "_platform/market/index" ? { status: 503 } : { data: {} }));
+	it("index() 遇 503（未配置市场地址）→ 空分页空态，不抛（PRD §5.3）", async () => {
+		mock = mockRequest(c => (c.url === "oj-market/index" ? { status: 503 } : { data: {} }));
 		bindMock(mock);
 		const r = await httpMarketClient.index();
-		expect(r).toEqual([]);
+		expect(r).toEqual({ list: [], total: 0, page: 1, size: 20 });
 		// 503 是配置态而非故障：silentError 抑制全局 toast + retry:0 不重试（原
 		// market-client-unconfigured 用例的断言并入此处——工厂形态退役后唯一活口）
 		expect(mock.calls).toHaveLength(1);
 		expect(mock.calls[0].opts).toMatchObject({ silentError: true, retry: 0 });
 	});
 
-	it("install(input) → POST _platform/market/install，body 含 name/version/source", async () => {
+	it("install(input) → POST oj-market/install，body 含 name/version/source", async () => {
 		mock = mockRequest(() => ({ data: { task_id: "t-1" } }));
 		bindMock(mock);
 		const r = await httpMarketClient.install({ name: "alpha", version: "2.0", source: "file" });
-		expect(mock.calls[0]).toMatchObject({ method: "post", url: "_platform/market/install" });
+		expect(mock.calls[0]).toMatchObject({ method: "post", url: "oj-market/install" });
 		expect(mock.calls[0].opts?.json).toEqual({ name: "alpha", version: "2.0", source: "file" });
 		expect(r).toEqual({ task_id: "t-1" });
 	});
@@ -122,48 +123,48 @@ describe("httpMarketClient · 统一委托生成 client 集成回归", () => {
 		expect(mock.calls[0].opts?.json).toEqual({ name: "beta", version: null, source: "cdn" });
 	});
 
-	it("task(id) → GET _platform/market/task? 带 id", async () => {
+	it("task(id) → GET oj-market/task? 带 id", async () => {
 		const rec = { id: "t-1", name: "a", version: "1.0", status: "done", stage: "done", progress: 100, message: "ok", stages: [], startedAt: 1 };
 		mock = mockRequest(() => ({ data: rec }));
 		bindMock(mock);
 		const r = await httpMarketClient.task("t-1");
-		expect(mock.calls[0]).toMatchObject({ method: "get", url: "_platform/market/task" });
+		expect(mock.calls[0]).toMatchObject({ method: "get", url: "oj-market/task" });
 		expect(mock.calls[0].opts?.searchParams).toEqual({ id: "t-1" });
 		expect(r).toEqual(rec);
 	});
 
-	it("enable(input) → POST _platform/market/enable，body {name,enabled}", async () => {
+	it("enable(input) → POST oj-market/enable，body {name,enabled}", async () => {
 		mock = mockRequest(() => ({ data: { ok: true, message: "done" } }));
 		bindMock(mock);
 		const r = await httpMarketClient.enable({ name: "a", enabled: false });
-		expect(mock.calls[0]).toMatchObject({ method: "post", url: "_platform/market/enable" });
+		expect(mock.calls[0]).toMatchObject({ method: "post", url: "oj-market/enable" });
 		expect(mock.calls[0].opts?.json).toEqual({ name: "a", enabled: false });
 		expect(r).toEqual({ ok: true, message: "done" });
 	});
 
-	it("history() → GET _platform/market/history，返回 MarketHistory[]", async () => {
+	it("history() → GET oj-market/history，返回 MarketHistory[]", async () => {
 		const hist = [{ id: 1, solution: "a", version: "1.0", action: "install", status: "ok", operator: null, message: null, created_at: 1 }];
 		mock = mockRequest(() => ({ data: hist }));
 		bindMock(mock);
 		const r = await httpMarketClient.history();
-		expect(mock.calls[0]).toMatchObject({ method: "get", url: "_platform/market/history" });
+		expect(mock.calls[0]).toMatchObject({ method: "get", url: "oj-market/history" });
 		expect(r).toEqual(hist);
 	});
 
-	it("uninstallImpact(name) → GET _platform/market/uninstall-impact? 带 name", async () => {
+	it("uninstallImpact(name) → GET oj-market/uninstall-impact? 带 name", async () => {
 		mock = mockRequest(() => ({ data: { name: "a", affectedRoles: 2, affectedUsers: 5 } }));
 		bindMock(mock);
 		const r = await httpMarketClient.uninstallImpact("a");
-		expect(mock.calls[0]).toMatchObject({ method: "get", url: "_platform/market/uninstall-impact" });
+		expect(mock.calls[0]).toMatchObject({ method: "get", url: "oj-market/uninstall-impact" });
 		expect(mock.calls[0].opts?.searchParams).toEqual({ name: "a" });
 		expect(r).toEqual({ name: "a", affectedRoles: 2, affectedUsers: 5 });
 	});
 
-	it("uninstall(name) → POST _platform/market/uninstall，body {name}", async () => {
+	it("uninstall(name) → POST oj-market/uninstall，body {name}", async () => {
 		mock = mockRequest(() => ({ data: { ok: true, message: "removed" } }));
 		bindMock(mock);
 		const r = await httpMarketClient.uninstall("a");
-		expect(mock.calls[0]).toMatchObject({ method: "post", url: "_platform/market/uninstall" });
+		expect(mock.calls[0]).toMatchObject({ method: "post", url: "oj-market/uninstall" });
 		expect(mock.calls[0].opts?.json).toEqual({ name: "a" });
 		expect(r).toEqual({ ok: true, message: "removed" });
 	});