create-bubbles 0.1.27 → 0.1.28

package/template-pnpm-vp-monorepo/apps/playground/vite.config.ts

@@ -0,0 +1,29 @@
+import { fileURLToPath, URL } from "node:url";
+
+import vue from "@vitejs/plugin-vue";
+import { defineConfig } from "vite-plus";
+
+export default defineConfig({
+  plugins: [vue()],
+  resolve: {
+    alias: {
+      "@bubblesjs/utils": fileURLToPath(
+        new URL("../../packages/utils/src/index.ts", import.meta.url),
+      ),
+    },
+  },
+  server: {
+    port: 5173,
+    strictPort: true,
+  },
+  run: {
+    tasks: {
+      bundle: {
+        command: "vp build",
+        cache: {
+          env: ["NODE_ENV"],
+        },
+      },
+    },
+  },
+});

package/template-pnpm-vp-monorepo/commitlint.config.mjs

@@ -0,0 +1,3 @@
+export default {
+  extends: ["@commitlint/config-conventional"],
+};

package/template-pnpm-vp-monorepo/eslint.config.mjs

@@ -0,0 +1,22 @@
+import antfu from "@antfu/eslint-config";
+
+export default antfu(
+  {
+    formatters: false,
+    lessOpinionated: true,
+    stylistic: false,
+    typescript: true,
+    vue: true,
+    ignores: ["**/dist/**", "**/coverage/**", "**/.vitepress/cache/**", "**/.vitepress/dist/**"],
+  },
+  {
+    files: ["**/*.vue"],
+    rules: {
+      "vue/html-indent": "off",
+      "vue/html-self-closing": "off",
+      "vue/html-closing-bracket-newline": "off",
+      "vue/singleline-html-element-content-newline": "off",
+      "vue/multiline-html-element-content-newline": "off",
+    },
+  },
+);

package/template-pnpm-vp-monorepo/mise.toml

@@ -0,0 +1,3 @@
+[tools]
+node = "24.21.0"
+pnpm = "12.10.1"

package/template-pnpm-vp-monorepo/package.json

@@ -0,0 +1,40 @@
+{
+  "name": "pnpm-vp-monorepo",
+  "version": "0.0.0",
+  "private": true,
+  "type": "module",
+  "scripts": {
+    "build": "vp run -r build",
+    "changeset": "changeset",
+    "check": "vp run quality",
+    "ci": "pnpm check && pnpm build && pnpm verify:packages",
+    "dev": "vp run playground#dev",
+    "docs:build": "vp run docs#build",
+    "docs:dev": "vp run docs#dev",
+    "docs:preview": "vp run docs#preview",
+    "format": "vp fmt --write .",
+    "format:check": "vp fmt --check .",
+    "hooks:install": "vp config --hooks-dir .vite-hooks --no-agent",
+    "lint": "pnpm lint:ox && pnpm lint:vue",
+    "lint:ox": "vp lint .",
+    "lint:vue": "eslint \"apps/**/*.vue\" \"packages/**/*.vue\" --no-error-on-unmatched-pattern --max-warnings=0",
+    "preview": "vp run playground#preview",
+    "ready": "pnpm run ci",
+    "release": "pnpm ready && changeset publish",
+    "test": "vp run -r test",
+    "typecheck": "tsc -p tsconfig.json --noEmit && vp run -r typecheck",
+    "verify:packages": "vp run -r verify:package",
+    "version-packages": "changeset version && pnpm install --lockfile-only --no-frozen-lockfile"
+  },
+  "devDependencies": {
+    "@antfu/eslint-config": "catalog:",
+    "@changesets/cli": "catalog:",
+    "@commitlint/cli": "catalog:",
+    "@commitlint/config-conventional": "catalog:",
+    "@types/node": "catalog:",
+    "eslint": "catalog:",
+    "typescript": "catalog:",
+    "vite": "catalog:",
+    "vite-plus": "catalog:"
+  }
+}

package/template-pnpm-vp-monorepo/packages/utils/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) [year] [copyright holder]
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/template-pnpm-vp-monorepo/packages/utils/README.md

@@ -0,0 +1,26 @@
+# @bubblesjs/utils
+
+模板中的内部共享 TypeScript 工具包，设置了 `private: true`，不发布到 npm。包名 `@bubblesjs/utils` 保留为工作区内部标识。通过 Vite+ Pack 输出 ESM、CommonJS 和对应的类型声明；应用通过 `workspace:*` 依赖它。
+
+```ts
+import { clamp } from "@bubblesjs/utils";
+
+clamp(125, 0, 100); // 100
+clamp(-20, 0, 100); // 0
+clamp(42, 0, 100); // 42
+```
+
+`clamp(value, min, max)` 要求参数均为有限数值，且 `min <= max`，否则抛出 `RangeError`。原有 `fn()` 导出保留，返回 `Hello, tsdown!`。
+
+在仓库根目录运行：
+
+```bash
+pnpm --filter @bubblesjs/utils test
+pnpm --filter @bubblesjs/utils build
+pnpm --filter @bubblesjs/utils typecheck
+pnpm --filter @bubblesjs/utils verify:package
+```
+
+`verify:package` 以及根目录的 `pnpm verify:packages` 仅检查本地 ESM/CJS、类型声明和打包文件，不执行 npm 发布。
+
+复制为内部共享包时保留 `private: true`。若将来复制为公开包，例如 `@bubblesjs/math`，须显式移除 `private: true`，设置 `publishConfig.access` 为 `public` 并完善发布元信息。发布到 npm 的账户需拥有 `@bubblesjs` scope 或对应组织的包发布权限。维护 `tests/consumer` 中的双格式消费类型测试和 `scripts/verify-package.mjs` 中的运行验证；仅在更换 scope 时同步替换 `@bubblesjs` 的引用。

package/template-pnpm-vp-monorepo/packages/utils/_gitignore

@@ -0,0 +1,4 @@
+node_modules
+dist
+*.log
+.DS_Store

package/template-pnpm-vp-monorepo/packages/utils/package.json

@@ -0,0 +1,42 @@
+{
+  "name": "@bubblesjs/utils",
+  "version": "0.0.0",
+  "private": true,
+  "description": "Monorepo 模板中的共享 TypeScript 工具包示例。",
+  "license": "MIT",
+  "files": [
+    "dist",
+    "README.md",
+    "LICENSE"
+  ],
+  "type": "module",
+  "sideEffects": false,
+  "main": "./dist/index.cjs",
+  "module": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "import": {
+        "types": "./dist/index.d.ts",
+        "default": "./dist/index.js"
+      },
+      "require": {
+        "types": "./dist/index.d.cts",
+        "default": "./dist/index.cjs"
+      }
+    },
+    "./package.json": "./package.json"
+  },
+  "scripts": {
+    "build": "vp run bundle",
+    "dev": "vp pack --watch",
+    "test": "vp test run",
+    "typecheck": "tsc -p tsconfig.json --noEmit",
+    "verify:package": "vp pack && tsc -p tests/consumer/tsconfig.json --noEmit && node scripts/verify-package.mjs"
+  },
+  "devDependencies": {
+    "@types/node": "catalog:",
+    "typescript": "catalog:",
+    "vite-plus": "catalog:"
+  }
+}

package/template-pnpm-vp-monorepo/packages/utils/scripts/verify-package.mjs

@@ -0,0 +1,127 @@
+import assert from "node:assert/strict";
+import { spawnSync } from "node:child_process";
+import { existsSync, readFileSync } from "node:fs";
+import { createRequire } from "node:module";
+import { delimiter, dirname, extname, isAbsolute, join, relative, resolve } from "node:path";
+import { fileURLToPath } from "node:url";
+
+const packageRoot = fileURLToPath(new URL("../", import.meta.url));
+const manifest = JSON.parse(readFileSync(join(packageRoot, "package.json"), "utf8"));
+const requiredFiles = new Set(["package.json"]);
+
+assert.ok(manifest.name, "Package must have a name");
+
+function verifyFile(target, field) {
+  assert.equal(typeof target, "string", `${field} must reference a file`);
+  const absolutePath = resolve(packageRoot, target);
+  const relativePath = relative(packageRoot, absolutePath);
+  assert.ok(
+    relativePath && !relativePath.startsWith("..") && !isAbsolute(relativePath),
+    `${field} must stay inside the package`,
+  );
+  assert.ok(existsSync(absolutePath), `${field} references a missing file: ${target}`);
+  requiredFiles.add(relativePath.replaceAll("\\", "/"));
+}
+
+for (const field of ["main", "module", "types"]) {
+  verifyFile(manifest[field], field);
+}
+
+function verifyExports(value, field = "exports") {
+  if (typeof value === "string") {
+    verifyFile(value, field);
+    return;
+  }
+  assert.ok(value && typeof value === "object", `${field} must define export targets`);
+  for (const [condition, target] of Object.entries(value)) {
+    verifyExports(target, `${field}.${condition}`);
+  }
+}
+
+verifyExports(manifest.exports);
+const entry = manifest.exports["."];
+assert.ok(entry?.import?.types?.endsWith(".d.ts"), "ESM exports must declare .d.ts types");
+assert.ok(entry?.require?.types?.endsWith(".d.cts"), "CommonJS exports must declare .d.cts types");
+assert.equal(manifest.type, "module", "ESM .js output requires type: module");
+assert.ok(entry?.import?.default?.endsWith(".js"), "ESM exports must reference .js output");
+assert.ok(entry?.require?.default?.endsWith(".cjs"), "CommonJS exports must reference .cjs output");
+
+function verifyRuntime(module, format) {
+  assert.equal(module.fn(), "Hello, tsdown!", `${format}: fn()`);
+  assert.equal(module.clamp(5, 0, 10), 5, `${format}: value inside bounds`);
+  assert.equal(module.clamp(-2, 0, 10), 0, `${format}: lower bound`);
+  assert.equal(module.clamp(12, 0, 10), 10, `${format}: upper bound`);
+  assert.equal(module.clamp(3, 2, 2), 2, `${format}: equal bounds`);
+  for (const args of [
+    [NaN, 0, 10],
+    [Infinity, 0, 10],
+    [1, -Infinity, 10],
+    [1, 0, Infinity],
+    [1, 10, 0],
+  ]) {
+    assert.throws(() => module.clamp(...args), RangeError, `${format}: invalid bounds or value`);
+  }
+}
+
+verifyRuntime(await import(manifest.name), "ESM");
+verifyRuntime(createRequire(import.meta.url)(manifest.name), "CommonJS");
+
+// Invoke npm's JavaScript CLI directly when npm is installed as a Windows .cmd
+// wrapper. Passing arguments to Node avoids shell quoting and interpolation.
+function npmCommand() {
+  const cliCandidates = [
+    process.env.npm_execpath,
+    join(dirname(process.execPath), "node_modules", "npm", "bin", "npm-cli.js"),
+  ];
+  for (const candidate of cliCandidates) {
+    if (candidate?.endsWith("npm-cli.js") && existsSync(candidate)) {
+      return { command: process.execPath, prefix: [candidate] };
+    }
+  }
+
+  const extensions = process.platform === "win32" ? [".exe", ".cmd", ".bat"] : [""];
+  const pathValue = process.env.PATH ?? process.env.Path ?? "";
+  for (const directory of pathValue.split(delimiter).filter(Boolean)) {
+    for (const extension of extensions) {
+      const candidate = join(directory.replace(/^"|"$/g, ""), `npm${extension}`);
+      if (!existsSync(candidate)) continue;
+      if ([".cmd", ".bat"].includes(extname(candidate).toLowerCase())) {
+        const cli = join(dirname(candidate), "node_modules", "npm", "bin", "npm-cli.js");
+        if (existsSync(cli)) return { command: process.execPath, prefix: [cli] };
+        continue;
+      }
+      return { command: candidate, prefix: [] };
+    }
+  }
+  throw new Error("Cannot locate npm's executable or npm-cli.js; install Node.js with npm first.");
+}
+
+const { command, prefix } = npmCommand();
+const result = spawnSync(command, [...prefix, "pack", "--dry-run", "--json", "--ignore-scripts"], {
+  cwd: packageRoot,
+  encoding: "utf8",
+  shell: false,
+  windowsHide: true,
+  timeout: 60_000,
+});
+if (result.error) throw result.error;
+assert.equal(result.status, 0, `npm pack failed:\n${result.stderr || result.stdout}`);
+const [packed] = JSON.parse(result.stdout);
+assert.ok(packed?.files?.length, "npm pack must report publishable files");
+const publishedFiles = new Set(packed.files.map(({ path }) => path.replaceAll("\\", "/")));
+for (const target of requiredFiles) {
+  assert.ok(publishedFiles.has(target), `Published package is missing ${target}`);
+}
+for (const target of publishedFiles) {
+  assert.ok(!/^(src|tests)\//.test(target), `Source or tests must not be published: ${target}`);
+}
+assert.ok(
+  [...publishedFiles].some((target) => target.endsWith(".d.ts")),
+  "Published package must include ESM declarations",
+);
+assert.ok(
+  [...publishedFiles].some((target) => target.endsWith(".d.cts")),
+  "Published package must include CommonJS declarations",
+);
+
+console.log(`Verified ${manifest.name}: ESM, CommonJS, declarations, and npm package contents.`);

package/template-pnpm-vp-monorepo/packages/utils/src/index.ts

@@ -0,0 +1,12 @@
+export function fn() {
+  return "Hello, tsdown!";
+}
+
+/** 将有限数值限制在闭区间 [min, max] 内。 */
+export function clamp(value: number, min: number, max: number): number {
+  if (![value, min, max].every(Number.isFinite) || min > max) {
+    throw new RangeError("clamp 需要有限数值，且 min 不能大于 max。");
+  }
+
+  return Math.min(max, Math.max(min, value));
+}

package/template-pnpm-vp-monorepo/packages/utils/tests/consumer/commonjs.cts

@@ -0,0 +1,20 @@
+import utils = require("@bubblesjs/utils");
+
+const message: string = utils.fn();
+const value: number = utils.clamp(5, 0, 10);
+void message;
+void value;
+
+// @ts-expect-error Values must be numbers.
+utils.clamp("5", 0, 10);
+// @ts-expect-error Lower bounds must be numbers.
+utils.clamp(5, "0", 10);
+// @ts-expect-error Upper bounds must be numbers.
+utils.clamp(5, 0, "10");
+// @ts-expect-error All three arguments are required.
+utils.clamp(5, 0);
+// @ts-expect-error fn does not accept arguments.
+utils.fn("extra");
+// @ts-expect-error clamp returns a number.
+const wrongResult: string = utils.clamp(5, 0, 10);
+void wrongResult;

package/template-pnpm-vp-monorepo/packages/utils/tests/consumer/esm.mts

@@ -0,0 +1,20 @@
+import { clamp, fn } from "@bubblesjs/utils";
+
+const message: string = fn();
+const value: number = clamp(5, 0, 10);
+void message;
+void value;
+
+// @ts-expect-error Values must be numbers.
+clamp("5", 0, 10);
+// @ts-expect-error Lower bounds must be numbers.
+clamp(5, "0", 10);
+// @ts-expect-error Upper bounds must be numbers.
+clamp(5, 0, "10");
+// @ts-expect-error All three arguments are required.
+clamp(5, 0);
+// @ts-expect-error fn does not accept arguments.
+fn("extra");
+// @ts-expect-error clamp returns a number.
+const wrongResult: string = clamp(5, 0, 10);
+void wrongResult;

package/template-pnpm-vp-monorepo/packages/utils/tests/consumer/tsconfig.json

@@ -0,0 +1,10 @@
+{
+  "extends": "../../../../tsconfig/node.json",
+  "compilerOptions": {
+    "module": "NodeNext",
+    "moduleResolution": "NodeNext",
+    "noEmit": true,
+    "paths": {}
+  },
+  "include": ["*.mts", "*.cts"]
+}

package/template-pnpm-vp-monorepo/packages/utils/tests/index.test.ts

@@ -0,0 +1,30 @@
+import { describe, expect, test } from "vite-plus/test";
+import { clamp, fn } from "../src/index.ts";
+
+test("fn", () => {
+  expect(fn()).toBe("Hello, tsdown!");
+});
+
+describe("clamp", () => {
+  test.each([
+    [5, 0, 10, 5],
+    [-5, 0, 10, 0],
+    [15, 0, 10, 10],
+    [0, 0, 10, 0],
+    [10, 0, 10, 10],
+    [8, 3, 3, 3],
+    [-2.5, -5, -1, -2.5],
+  ])("限制 %s 到 [%s, %s] 得到 %s", (value, min, max, expected) => {
+    expect(clamp(value, min, max)).toBe(expected);
+  });
+
+  test.each([
+    [5, 10, 0],
+    [NaN, 0, 10],
+    [Infinity, 0, 10],
+    [5, -Infinity, 10],
+    [5, 0, Infinity],
+  ])("拒绝非法输入 (%s, %s, %s)", (value, min, max) => {
+    expect(() => clamp(value, min, max)).toThrow(RangeError);
+  });
+});

package/template-pnpm-vp-monorepo/packages/utils/tsconfig.json

@@ -0,0 +1,4 @@
+{
+  "extends": "../../tsconfig/node.json",
+  "include": ["src/**/*.ts", "tests/**/*.test.ts", "vite.config.ts"]
+}

package/template-pnpm-vp-monorepo/packages/utils/vite.config.ts

@@ -0,0 +1,20 @@
+import { defineConfig } from "vite-plus";
+
+export default defineConfig({
+  pack: {
+    entry: ["src/index.ts"],
+    format: ["esm", "cjs"],
+    dts: { generator: "tsc" },
+    platform: "neutral",
+    sourcemap: true,
+  },
+  test: {
+    include: ["tests/**/*.test.ts"],
+    environment: "node",
+  },
+  run: {
+    tasks: {
+      bundle: { command: "vp pack", cache: { env: ["NODE_ENV"] } },
+    },
+  },
+});

package/template-pnpm-vp-monorepo/pnpm-workspace.yaml

@@ -0,0 +1,27 @@
+packages:
+  - apps/*
+  - packages/*
+
+catalogMode: prefer
+
+catalog:
+  "@antfu/eslint-config": ^9.5.1
+  "@changesets/cli": ^3.0.3
+  "@commitlint/cli": ^21.2.2
+  "@commitlint/config-conventional": ^21.2.2
+  "@types/node": ^26
+  "@vitejs/plugin-vue": ^6.0.9
+  eslint: ^10.9.0
+  typescript: ^6.0.3
+  vite: npm:@voidzero-dev/vite-plus-core@1.1.0
+  vite-plus: 1.1.0
+  vitepress: 2.0.0-alpha.20
+  vue: ^3.5.43
+  vue-tsc: ^3.3.12
+overrides:
+  vite@*: "catalog:"
+peerDependencyRules:
+  allowAny:
+    - vite
+  allowedVersions:
+    vite: "*"

package/template-pnpm-vp-monorepo/tsconfig/base.json

@@ -0,0 +1,22 @@
+{
+  "$schema": "https://json.schemastore.org/tsconfig",
+  "compilerOptions": {
+    "allowImportingTsExtensions": true,
+    "esModuleInterop": true,
+    "forceConsistentCasingInFileNames": true,
+    "isolatedModules": true,
+    "lib": ["ES2022"],
+    "module": "ESNext",
+    "moduleDetection": "force",
+    "moduleResolution": "Bundler",
+    "noEmit": true,
+    "noUncheckedIndexedAccess": true,
+    "noUnusedLocals": true,
+    "noUnusedParameters": true,
+    "resolveJsonModule": true,
+    "skipLibCheck": true,
+    "strict": true,
+    "target": "ES2022",
+    "verbatimModuleSyntax": true
+  }
+}

package/template-pnpm-vp-monorepo/tsconfig/node.json

@@ -0,0 +1,8 @@
+{
+  "extends": "./base.json",
+  "compilerOptions": {
+    "module": "NodeNext",
+    "moduleResolution": "NodeNext",
+    "types": ["node"]
+  }
+}

package/template-pnpm-vp-monorepo/tsconfig/vue.json

@@ -0,0 +1,7 @@
+{
+  "extends": "./base.json",
+  "compilerOptions": {
+    "lib": ["ES2022", "DOM", "DOM.Iterable"],
+    "types": ["node", "vite/client"]
+  }
+}

package/template-pnpm-vp-monorepo/tsconfig.json

@@ -0,0 +1,4 @@
+{
+  "extends": "./tsconfig/node.json",
+  "include": ["vite.config.ts"]
+}

package/template-pnpm-vp-monorepo/vite.config.ts

@@ -0,0 +1,38 @@
+import { defineConfig } from "vite-plus";
+
+export default defineConfig({
+  staged: {
+    "*.{js,jsx,ts,tsx,mjs,cjs,mts,cts,json,jsonc,yaml,yml,md,css,scss}": "vp check --fix",
+    "*.vue": ["vp fmt --write", "eslint --fix --max-warnings=0"],
+  },
+  fmt: {
+    ignorePatterns: [
+      "**/dist/**",
+      "**/coverage/**",
+      "**/.vitepress/cache/**",
+      "**/.vitepress/dist/**",
+    ],
+  },
+  lint: {
+    ignorePatterns: [
+      "**/dist/**",
+      "**/coverage/**",
+      "**/.vitepress/cache/**",
+      "**/.vitepress/dist/**",
+      "**/*.vue",
+      "packages/utils/tests/consumer/**",
+    ],
+    jsPlugins: [{ name: "vite-plus", specifier: "vite-plus/oxlint-plugin" }],
+    rules: { "vite-plus/prefer-vite-plus-imports": "error" },
+    options: { typeAware: true, typeCheck: true },
+  },
+  run: {
+    cache: { scripts: false, tasks: true },
+    tasks: {
+      quality: {
+        command: ["pnpm format:check", "pnpm lint", "pnpm typecheck", "pnpm test"],
+        cache: false,
+      },
+    },
+  },
+});

package/template-vp-monorepo-react-nestjs/.spaces/01./344/274/201/344/270/232/347/272/247/351/241/271/347/233/256/347/272/247//346/235/203/351/231/220/344/270/216/350/217/234/345/215/225//346/212/200/346/234/257/345/245/221/347/272/246.md

@@ -197,7 +197,7 @@ interface PermissionTreeResult {
 | -------- | -------------------- | --------------------------------------------------- | ------------ | ------------------------------------------- |
 | platform | `platform.home`      | `/platform`                                         | 平台工作台   | —                                           |
 | platform | `platform.companies` | `/platform/companies`                               | 企业管理     | `create*`, `status`, `administrator*`       |
-| platform | `platform.accounts`  | `/platform/accounts`                                | 全局账号     | `status`, `roles`                           |
+| platform | `platform.accounts`  | `/platform/accounts`                                | 全局账号     | `status`, `roles`, `reset-password*`        |
 | platform | `platform.roles`     | `/platform/roles`                                   | 平台角色     | `create`, `update`, `delete`, `permissions` |
 | platform | `platform.menus`     | `/platform/menus`                                   | 菜单管理     | `create`, `update`, `delete`, `cleanup*`    |
 | platform | `platform.audit`     | `/platform/audit`                                   | 平台操作日志 | —                                           |
@@ -268,6 +268,7 @@ interface AssignPlatformRolesRequest {
 | GET `/platform/accounts`                                       | 查询 → `PageResult<AccountRecord>`                          | `platform.accounts.read`                                                                                         |
 | PATCH `/platform/accounts/:userId/status`                      | `AccountStatusRequest` → `AccountRecord`                    | `platform.accounts.status`；禁用最后企业管理员必须是平台内置管理员，最后平台管理员不可禁用                       |
 | PUT `/platform/accounts/:userId/roles`                         | `AssignPlatformRolesRequest` → `AccountRecord`              | `platform.accounts.roles`；全量替换该用户平台角色，不触碰企业／项目角色                                          |
+| POST `/platform/accounts/:userId/reset-password`               | `ResetAccountPasswordRequest` → `ResetAccountPasswordResult` | `platform.accounts.reset-password` + 平台内置管理员；只能重置他人，成功撤销目标全部终端会话；详见[修改密码技术契约](../../06.认证与会话/修改密码/技术契约.md) |
 | GET `/companies/:companyId`                                    | → `CompanyDetail`                                           | `company.profile.read`                                                                                           |
 | PATCH `/companies/:companyId`                                  | `UpdateProfileRequest` → `CompanyRecord`                    | `company.profile.update`                                                                                         |
 | GET `/companies/:companyId/projects`                           | 查询 → `PageResult<ProjectRecord>`                          | `company.projects.read`；企业管理员所有项目，其他成员仅本人显式加入的项目，允许看到这些项目的停用状态            |
@@ -479,7 +480,7 @@ interface AuditQuery extends PageQuery {
 
 GET `/platform/audit-logs`、`/companies/:companyId/audit-logs`、`/companies/:companyId/projects/:projectId/audit-logs` 返回 `PageResult<AuditRecord>`，分别要求 `platform.audit.read`、`company.audit.read`、`project.audit.read`。日期为 ISO 字符串，`from <= to`；默认不额外限制日期。平台只看 scopeType=platform，企业看本企业 company+project，项目只看本项目。query 搜索 action/objectType/objectId 的公开标识，不提供任意 JSON SQL 筛选。
 
-action 使用固定 `company.create/company.status/company.administrator.set/project.create/project.status/project.administrator.set/account.status/member.add/member.status/member.remove/member.roles/role.create/role.update/role.permissions/role.delete/menu.create/menu.update/menu.delete/permission.cleanup`。同一 action 的实际范围从 scope 区分。平台侧企业创建、账号启停、企业管理员设置、菜单和清理写平台事件；内部公司/项目变更写自身事件，目标企业 ID 可以进入平台事件的 summary，但不能据此把该事件归入企业审计。企业邀请审计动作及字段待产品确认，不属于当前固定 action 集合。
+action 使用固定 `company.create/company.status/company.administrator.set/project.create/project.status/project.administrator.set/account.status/account.password.reset/member.add/member.status/member.remove/member.roles/role.create/role.update/role.permissions/role.delete/menu.create/menu.update/menu.delete/permission.cleanup`。同一 action 的实际范围从 scope 区分。平台侧企业创建、账号启停、企业管理员设置、管理员重置密码、菜单和清理写平台事件；内部公司/项目变更写自身事件，目标企业 ID 可以进入平台事件的 summary，但不能据此把该事件归入企业审计。`account.password.reset` 仅在成功时写入，`summary` 只含 `{ result: 'success' }`；两种密码操作的成功与失败安全事件见[修改密码技术契约](../../06.认证与会话/修改密码/技术契约.md)。企业邀请审计动作及字段待产品确认，不属于当前固定 action 集合。
 
 摘要只记录字段白名单，例如 `changedFields`, `fromStatus`, `toStatus`, `roleIds`, `permissionKeys`, `targetUserId`, `companyId`, `replacedUserId`；不记录完整请求体、密码或令牌。操作者姓名/账号保存当时快照，防止后续变化破坏审计可读性。本期记录成功管理变更，失败交由现有异常/服务日志处理，不增加失败审计产品。
 
@@ -564,10 +565,11 @@ scope CHECK 精确为：platform 两个 ID 均 NULL；company company_id 非 NUL
 ## 13. 后续扩展与变更记录
 
 - 企业邀请只保留已确认的入口定位；邀请对象、载体、流程、状态及技术协议全部待产品确认。当前代码、页面、自动化测试及 `0004_company-member-invitations.sql` 只能作为未确认实现记录，不能替代产品确认或进入现行交付。
-- 平台全局账号的管理员重置密码属于[修改密码技术契约](../../06.认证与会话/修改密码/技术契约.md)的实施中增量：`platform.accounts` 页拟增加仅平台内置管理员可用的 `reset-password` 操作及对应接口。上文当前权限表、接口表和固定审计 action 清单仍描述现行基线；该增量实现与验收完成后，须同步把它纳入现行表格和审计清单。
+- 平台全局账号的管理员重置密码已在当前工作树实现，`platform.accounts.reset-password` 仅平台内置管理员可用，上文权限表、接口表和固定审计 action 清单已同步。业务错误、全端撤销和安全事件见[修改密码技术契约](../../06.认证与会话/修改密码/技术契约.md)，测试边界见[修改密码测试报告](../../06.认证与会话/修改密码/测试报告.md)。
 
 | 日期       | 变更摘要                                                                                                                                  | 原因                                              | 影响范围                                                               |
 | ---------- | ----------------------------------------------------------------------------------------------------------------------------------------- | ------------------------------------------------- | ---------------------------------------------------------------------- |
+| 2026-10-08 | 将管理员重置密码纳入当前平台账号操作、接口和固定审计清单，并链接测试边界 | 当前工作树已实现且完成自动化与隔离存储专项 | 平台账号权限、接口与审计清单 |
 | 2026-10-08 | 关联平台账号管理员重置密码的实施中增量，区分待实施权限与当前权限表 | 修改密码契约已确定新增平台管理员操作 | 平台账号权限、接口与审计清单 |
 | 2026-09-19 | 菜单图标契约由服务端图标名白名单调整为安全 SVG key；Web 自动发现本地图标并统一选择、解析和降级，补充旧图标及空值迁移和新菜单默认图标规则 | 前端资源不能由服务端重复维护清单，且需支持新增 SVG 自动进入选择器 | 共享类型、校验、种子、迁移、菜单管理、导航和兼容测试 |
 | 2026-09-18 | 菜单路由等待态保留旧页面视觉内容并隔离交互，目标路由提交后再替换                                                                                 | 过早卸载 `RouteTransition` 会丢失旧页面视图快照，导致过渡动画消失 | 前端布局、导航等待态、AC-05 与验证要求                                  |

package/template-vp-monorepo-react-nestjs/.spaces/04./347/225/214/351/235/242/344/270/216/344/270/273/351/242/230//345/233/275/351/231/205/345/214/226//344/272/244/344/273/230/350/256/260/345/275/225.md

@@ -10,3 +10,12 @@
 ## 状态
 
 已实现并完成构建、测试和 i18n 词条检查。当前语言范围仍为 `zh_CN` 与 `en_US`。
+
+独立包发布状态：2026-10-09 复验完成，当前版本仍不宜直接发布。用户修改的 React selector 快照缓存已通过真实渲染检查；本轮仅更新评估、复现工具及证据，未修改业务实现或执行远端发布。剩余发布条件见 [发布评估](./发布评估.md)。
+
+## CLI 调用边界注释修复（2026-10-08）
+
+- 扫描器允许调用名、左括号和静态字符串后的空白、行注释与块注释，支持 JavaScript 行终止符及准确的源码位置。
+- 保持字符串正文、动态参数过滤和注释内完整调用也会被识别的现有约定，未闭合块注释不会使当前调用匹配成功。
+- 新增扫描与实际 clean 回归，验证仍在使用的词条及既有译文得到保留；CLI 71 个测试、构建与修改文件检查通过，见 [测试报告](./测试报告.md)。
+- 本次仅交付该扫描缺陷修复；完整包发布仍需完成 [发布评估](./发布评估.md) 中的剩余整改。