zero-ai 1.0.83 → 1.0.84

package/src/commander-ai/fn.ex.api.js

@@ -12,6 +12,7 @@ const CONFIG_DIR = ".r2mo/task/command/ex-api";
 const REQUIRED_ENV_DB = ["Z_DB_TYPE", "Z_DB_HOST", "Z_DB_PORT", "Z_DBS_INSTANCE", "Z_DB_APP_USER", "Z_DB_APP_PASS"];
 const REQUIRED_ENV_APP = ["Z_APP_ID", "Z_TENANT", "Z_SIGMA"];
 const R2_BY_UUID = "9a0d5018-33ad-4c64-80bf-8ae7947c482f";
+const REFERENCE_ROLE_ID = "e501b47a-c08b-4c83-b12b-95ad82873e96";
 
 /** 全局列（开发时按 RBAC Flyway 建表固定，执行时仅 DML，不查元数据）：S_RESOURCE/S_ACTION/S_PERMISSION 写入，Excel 不写入 */
 const GLOBAL_COLUMNS = [
@@ -383,28 +384,46 @@ async function runOneExApi(cwd, conn, config, requestRaw, skip) {
         }
 
         let roleIds = [];
+        let roleIdToCode = {}; // roleId -> CODE，供输出路径分流使用
+        let roleIdToName = {}; // roleId -> NAME，供汇总输出使用
         if (!skip) {
             const [roleRows] = await conn.execute("SELECT ID, NAME, CODE FROM S_ROLE ORDER BY NAME");
             if (!roleRows || roleRows.length === 0) {
                 Ec.info("[ex-api] S_ROLE 中无角色，跳过授权");
             } else {
-                const answer = await inquirer.prompt([
-                    {
-                        type: "checkbox",
-                        name: "selectedRoles",
-                        message: "选择要授权当前 API 的角色（可多选）",
-                        choices: roleRows.map((r) => ({ name: `${r.NAME || r.CODE} (${r.ID})`, value: String(r.ID != null ? r.ID : r.id) }))
+                // 建立 roleId -> CODE/NAME 映射（所有角色）
+                roleRows.forEach((r) => {
+                    const id = String(r.ID != null ? r.ID : r.id);
+                    roleIdToCode[id] = r.CODE || "";
+                    roleIdToName[id] = r.NAME || "";
+                });
+
+                // 过滤掉超级管理员角色（固定输出，不需要用户选择）
+                const selectableRoles = roleRows.filter((r) => {
+                    const id = String(r.ID != null ? r.ID : r.id);
+                    return id !== REFERENCE_ROLE_ID;
+                });
+
+                if (selectableRoles.length > 0) {
+                    const answer = await inquirer.prompt([
+                        {
+                            type: "checkbox",
+                            name: "selectedRoles",
+                            message: "选择要授权当前 API 的角色（可多选，超级管理员已自动包含）",
+                            choices: selectableRoles.map((r) => ({ name: `${r.NAME || r.CODE} (${r.CODE || '-'})`, value: String(r.ID != null ? r.ID : r.id) })),
+                            pageSize: 999
+                        }
+                    ]);
+                    const raw = answer.selectedRoles;
+                    if (Array.isArray(raw)) {
+                        roleIds = raw.map((id) => (id != null ? String(id) : id));
+                    } else if (raw != null && raw !== "") {
+                        roleIds = [String(raw)];
+                    } else {
+                        roleIds = [];
                     }
-                ]);
-                const raw = answer.selectedRoles;
-                if (Array.isArray(raw)) {
-                    roleIds = raw.map((id) => (id != null ? String(id) : id));
-                } else if (raw != null && raw !== "") {
-                    roleIds = [String(raw)];
-                } else {
-                    roleIds = [];
                 }
-                Ec.info("[ex-api] 已选角色数：" + roleIds.length + (roleIds.length > 0 ? "，ID=" + roleIds.slice(0, 5).join(",") + (roleIds.length > 5 ? "..." : "") : ""));
+                Ec.info("[ex-api] 已选角色数（不含超级管理员）：" + roleIds.length + (roleIds.length > 0 ? "，ID=" + roleIds.slice(0, 5).join(",") + (roleIds.length > 5 ? "..." : "") : ""));
             }
         }
 
@@ -450,6 +469,10 @@ async function runOneExApi(cwd, conn, config, requestRaw, skip) {
                 Ec.info("[ex-api] R_ROLE_PERM 查询失败: " + e.message);
             }
         }
+
+                Ec.info("[ex-api] R_ROLE_PERM 查询失败: " + e.message);
+            }
+        }
         // 四张表行数据（Excel 列名与模板英文表头一致）；S_PERM_SET 的 name/type 来自配置 pname/ptype
         const resRow = resourceId && (insertedResource || existingResource) ? (insertedResource || existingResource) : null;
         const actRow = actionId && (insertedAction || existingAction) ? (insertedAction || existingAction) : null;
@@ -489,47 +512,60 @@ async function runOneExApi(cwd, conn, config, requestRaw, skip) {
                 identifier: permRow.IDENTIFIER
             }
             : null;
-        // S_PERM_SET：name/type 必须从配置 pname/ptype 提取，key/code 与资源一致
-        const rowS_PERM_SET = resourceId && resRow
+        // S_PERM_SET：name/type 必须从配置 pname/ptype 提取，key 与资源一致，code 与权限一致
+        const rowS_PERM_SET = resourceId && resRow && permRow
             ? {
                 key: resourceId,
-                code: resRow.CODE,
+                code: permRow.CODE,
                 name: (metadata.pname != null && metadata.pname !== "") ? metadata.pname : resRow.NAME,
                 type: (metadata.ptype != null && metadata.ptype !== "") ? metadata.ptype : resRow.TYPE
             }
             : null;
-        // 写入 Excel 的数据（仅用于写 Excel，不写库）：有 permissionId + 本次选中的 roleIds 则用其组合；否则用本次插入的；否则用库中已有的
-        let rolePermsToWrite =
-            permissionId && roleIds && roleIds.length > 0
-                ? roleIds.map((rid) => ({ ROLE_ID: rid, PERM_ID: permissionId }))
-                : insertedRolePerms.length > 0
-                ? insertedRolePerms
-                : existingRolePerms.length > 0
-                ? existingRolePerms
-                : [];
+        // 写入 Excel 的数据（仅用于写 Excel，不写库）：
+        // 1. 超级管理员角色（REFERENCE_ROLE_ID）始终包含（如果有 permissionId）
+        // 2. 用户选中的其他角色
+        let rolePermsToWrite = [];
+
+        // 始终添加超级管理员角色
+        if (permissionId) {
+            rolePermsToWrite.push({ ROLE_ID: REFERENCE_ROLE_ID, PERM_ID: permissionId });
+        }
+
+        // 添加用户选中的角色
+        if (permissionId && roleIds && roleIds.length > 0) {
+            roleIds.forEach((rid) => {
+                rolePermsToWrite.push({ ROLE_ID: rid, PERM_ID: permissionId });
+            });
+        }
+
+        // 如果本次有插入记录（R_ROLE_PERM），也合并进来（去重）
+        if (insertedRolePerms.length > 0) {
+            insertedRolePerms.forEach((rp) => {
+                const rid = rp.ROLE_ID != null ? String(rp.ROLE_ID) : String(rp.role_id);
+                const pid = rp.PERM_ID != null ? String(rp.PERM_ID) : String(rp.perm_id);
+                const exists = rolePermsToWrite.some((p) => String(p.ROLE_ID) === rid && String(p.PERM_ID) === pid);
+                if (!exists) {
+                    rolePermsToWrite.push({ ROLE_ID: rid, PERM_ID: pid });
+                }
+            });
+        }
+
+        // 如果库中已有记录（existingRolePerms），也合并进来（去重）
+        if (existingRolePerms.length > 0) {
+            existingRolePerms.forEach((rp) => {
+                const rid = rp.ROLE_ID != null ? String(rp.ROLE_ID) : String(rp.role_id);
+                const pid = rp.PERM_ID != null ? String(rp.PERM_ID) : String(rp.perm_id);
+                const exists = rolePermsToWrite.some((p) => String(p.ROLE_ID) === rid && String(p.PERM_ID) === pid);
+                if (!exists) {
+                    rolePermsToWrite.push({ ROLE_ID: rid, PERM_ID: pid });
+                }
+            });
+        }
+
         rolePermsToWrite = rolePermsToWrite.map((p) => ({
             ROLE_ID: p.ROLE_ID != null ? p.ROLE_ID : p.role_id,
             PERM_ID: p.PERM_ID != null ? p.PERM_ID : p.perm_id
         }));
-        // 有 permissionId 但仍无一条可写时，从 S_ROLE 取一个角色，保证 Excel 至少有一行（仅写 Excel，不写库）；优先超级管理员
-        if (permissionId && rolePermsToWrite.length === 0) {
-            try {
-                let [oneRole] = await conn.execute(
-                    "SELECT ID FROM S_ROLE WHERE NAME = ? OR CODE = ? OR CODE = ? LIMIT 1",
-                    ["超级管理员", "ADMIN.SUPER", "ADMIN_SUPER"]
-                );
-                if (!oneRole || !oneRole[0]) {
-                    [oneRole] = await conn.execute("SELECT ID FROM S_ROLE ORDER BY NAME LIMIT 1", []);
-                }
-                if (oneRole && oneRole[0]) {
-                    const rid = oneRole[0].ID != null ? String(oneRole[0].ID) : String(oneRole[0].id);
-                    rolePermsToWrite = [{ ROLE_ID: rid, PERM_ID: permissionId }];
-                    Ec.info("[ex-api] R_ROLE_PERM 无选中/库中记录，已用 S_ROLE 补一条写 Excel（ROLE_ID=" + rid + "）");
-                }
-            } catch (e) {
-                Ec.info("[ex-api] S_ROLE 取角色失败: " + e.message);
-            }
-        }
 
         Ec.info("[ex-api] 📋 R_ROLE_PERM 写入前数据：");
         Ec.info("[ex-api]   insertedRolePerms.length = " + insertedRolePerms.length);
@@ -649,68 +685,130 @@ async function runOneExApi(cwd, conn, config, requestRaw, skip) {
         await workbook.xlsx.writeFile(outResPath);
         Ec.info("[ex-api] 已写入 RBAC_RESOURCE：" + outResPath);
 
-        let roleWorkbook;
-        if (fs.existsSync(templateRolePath)) {
-            roleWorkbook = await new ExcelJS.Workbook().xlsx.readFile(templateRolePath);
-            const wsRole = roleWorkbook.getWorksheet(defRole.sheetName || "DATA-PERM") || roleWorkbook.worksheets[0];
-            if (wsRole) {
-                const regionsRole = scanTableRegions(wsRole);
-                Ec.info("[ex-api] 📋 R_ROLE_PERM 模板区域：");
-                Ec.info("[ex-api]   templateRolePath = " + templateRolePath);
-                Ec.info("[ex-api]   sheetName = " + (defRole.sheetName || "DATA-PERM"));
-                Ec.info("[ex-api]   tableNameRole(查找用) = " + tableNameRole);
-                Ec.info("[ex-api]   regionsRole.length = " + regionsRole.length);
-                regionsRole.forEach((r, i) => {
-                    Ec.info("[ex-api]   regionsRole[" + i + "].tableName = " + JSON.stringify(r.tableName) + ", dataStartRow = " + r.dataStartRow + ", columnIndex keys = " + (r.columnIndex ? Object.keys(r.columnIndex).join(", ") : "—"));
-                });
-                const region = regionsRole.find((r) => String(r.tableName).trim() === String(tableNameRole).trim());
-                if (region) {
-                    const colRole = region.columnIndex["roleId"] || region.columnIndex["ROLE_ID"] || 1;
-                    const colPerm = region.columnIndex["permId"] || region.columnIndex["PERM_ID"] || 2;
-                    Ec.info("[ex-api]   找到 R_ROLE_PERM 区域：dataStartRow = " + region.dataStartRow + ", colRole = " + colRole + ", colPerm = " + colPerm);
-                    if (rolePermsToWrite.length > 0) {
-                        Ec.info("[ex-api]   即将写入 " + rolePermsToWrite.length + " 行到 wsRole 行 " + region.dataStartRow + " 起，列 " + colRole + "(ROLE_ID)、" + colPerm + "(PERM_ID)");
-                        rolePermsToWrite.forEach((pair, idx) => {
+        const roleFileName = "falcon-" + fileName;
+        const roleWritePaths = [];
+
+        // 固定参考角色输出：维持原目录规则
+        const hasReferenceRole = rolePermsToWrite.some((p) => String(p.ROLE_ID) === REFERENCE_ROLE_ID);
+        if (hasReferenceRole) {
+            const refPerms = rolePermsToWrite.filter((p) => String(p.ROLE_ID) === REFERENCE_ROLE_ID);
+            if (refPerms.length > 0) {
+                let refWorkbook;
+                if (fs.existsSync(templateRolePath)) {
+                    refWorkbook = await new ExcelJS.Workbook().xlsx.readFile(templateRolePath);
+                    const wsRole = refWorkbook.getWorksheet(defRole.sheetName || "DATA-PERM") || refWorkbook.worksheets[0];
+                    if (wsRole) {
+                        const regionsRole = scanTableRegions(wsRole);
+                        const region = regionsRole.find((r) => String(r.tableName).trim() === String(tableNameRole).trim());
+                        if (region) {
+                            const colRole = region.columnIndex["roleId"] || region.columnIndex["ROLE_ID"] || 1;
+                            const colPerm = region.columnIndex["permId"] || region.columnIndex["PERM_ID"] || 2;
+                            refPerms.forEach((pair, idx) => {
+                                const row = wsRole.getRow(region.dataStartRow + idx);
+                                row.getCell(colRole).value = pair.ROLE_ID;
+                                row.getCell(colPerm).value = pair.PERM_ID;
+                            });
+                        }
+                    }
+                } else {
+                    refWorkbook = new ExcelJS.Workbook();
+                    const wsRole = refWorkbook.addWorksheet(defRole.sheetName || "DATA-PERM");
+                    wsRole.addRow([]);
+                    wsRole.addRow([]);
+                    wsRole.addRow(["{TABLE}", tableNameRole, "角色和权限关系", "", ""]);
+                    wsRole.addRow(["角色ID", "权限ID"]);
+                    wsRole.addRow(["roleId", "permId"]);
+                    refPerms.forEach((p) => wsRole.addRow([p.ROLE_ID, p.PERM_ID]));
+                }
+                const outRefRolePath = path.join(rbacRoleDir, roleFileName);
+                await refWorkbook.xlsx.writeFile(outRefRolePath);
+                roleWritePaths.push(outRefRolePath);
+                Ec.info("[ex-api] 已写入 RBAC_ROLE/ADMIN.SUPER（参考角色）:" + outRefRolePath);
+            }
+        }
+
+        // 其他角色输出：当前工作目录下 src/main/resources/init/oob/role/{CODE}/ 目录
+        const nonReferenceRoleIds = roleIds.filter((rid) => String(rid) !== REFERENCE_ROLE_ID);
+        for (const rid of nonReferenceRoleIds) {
+            const code = roleIdToCode[String(rid)] || "";
+            if (!code) {
+                Ec.info("[ex-api] ⚠️ 警告：角色 ID=" + rid + " 缺少 CODE，跳过输出");
+                continue;
+            }
+            const targetRoleDir = path.join(cwd, "src", "main", "resources", "init", "oob", "role", code);
+            if (!fs.existsSync(targetRoleDir)) {
+                Ec.info("[ex-api] ⚠️ 警告：未找到输出目录 " + targetRoleDir + "，跳过输出");
+                continue;
+            }
+
+            const oneRolePerms = rolePermsToWrite.filter((p) => String(p.ROLE_ID) === String(rid));
+            if (oneRolePerms.length === 0) continue;
+
+            let oneRoleWorkbook;
+            if (fs.existsSync(templateRolePath)) {
+                oneRoleWorkbook = await new ExcelJS.Workbook().xlsx.readFile(templateRolePath);
+                const wsRole = oneRoleWorkbook.getWorksheet(defRole.sheetName || "DATA-PERM") || oneRoleWorkbook.worksheets[0];
+                if (wsRole) {
+                    const regionsRole = scanTableRegions(wsRole);
+                    const region = regionsRole.find((r) => String(r.tableName).trim() === String(tableNameRole).trim());
+                    if (region) {
+                        const colRole = region.columnIndex["roleId"] || region.columnIndex["ROLE_ID"] || 1;
+                        const colPerm = region.columnIndex["permId"] || region.columnIndex["PERM_ID"] || 2;
+                        oneRolePerms.forEach((pair, idx) => {
                             const row = wsRole.getRow(region.dataStartRow + idx);
-                            const roleId = pair.ROLE_ID != null ? pair.ROLE_ID : pair.role_id;
-                            const permId = pair.PERM_ID != null ? pair.PERM_ID : pair.perm_id;
-                            row.getCell(colRole).value = roleId;
-                            row.getCell(colPerm).value = permId;
-                            if (idx < 3) Ec.info("[ex-api]      row[" + (region.dataStartRow + idx) + "] 已设 列" + colRole + "=" + roleId + " 列" + colPerm + "=" + permId);
+                            row.getCell(colRole).value = pair.ROLE_ID;
+                            row.getCell(colPerm).value = pair.PERM_ID;
                         });
-                        const checkRow = wsRole.getRow(region.dataStartRow);
-                        Ec.info("[ex-api] 已写入 R_ROLE_PERM " + rolePermsToWrite.length + " 行（dataStartRow=" + region.dataStartRow + "）；写回读首行 列" + colRole + "=" + (checkRow.getCell(colRole).value) + " 列" + colPerm + "=" + (checkRow.getCell(colPerm).value));
-                    } else {
-                        Ec.info("[ex-api] R_ROLE_PERM 无数据可写（rolePermsToWrite.length=0，permissionId=" + (permissionId || "—") + "）");
                     }
-                } else {
-                    Ec.info("[ex-api] 未找到 R_ROLE_PERM 区域（tableName=" + tableNameRole + "），跳过写入");
                 }
+            } else {
+                oneRoleWorkbook = new ExcelJS.Workbook();
+                const wsRole = oneRoleWorkbook.addWorksheet(defRole.sheetName || "DATA-PERM");
+                wsRole.addRow([]);
+                wsRole.addRow([]);
+                wsRole.addRow(["{TABLE}", tableNameRole, "角色和权限关系", "", ""]);
+                wsRole.addRow(["角色ID", "权限ID"]);
+                wsRole.addRow(["roleId", "permId"]);
+                oneRolePerms.forEach((p) => wsRole.addRow([p.ROLE_ID, p.PERM_ID]));
             }
-        } else {
-            Ec.info("[ex-api] 未找到模板 " + templateRolePath + "，使用固定表头格式（可被解析）");
-            roleWorkbook = new ExcelJS.Workbook();
-            const wsRole = roleWorkbook.addWorksheet(defRole.sheetName || "DATA-PERM");
-            wsRole.addRow([]);
-            wsRole.addRow([]);
-            wsRole.addRow(["{TABLE}", tableNameRole, "角色和权限关系", "", ""]);
-            wsRole.addRow(["角色ID", "权限ID"]);
-            wsRole.addRow(["roleId", "permId"]);
-            rolePermsToWrite.forEach((p) => wsRole.addRow([p.ROLE_ID, p.PERM_ID]));
+
+            const outOneRolePath = path.join(targetRoleDir, roleFileName);
+            await oneRoleWorkbook.xlsx.writeFile(outOneRolePath);
+            roleWritePaths.push(outOneRolePath);
+            Ec.info("[ex-api] 已写入角色目录（" + code + "）:" + outOneRolePath);
+        }
+
+        if (roleWritePaths.length === 0) {
+            Ec.info("[ex-api] RBAC_ROLE 未输出任何文件（可能角色未选中或目标目录不存在）");
         }
-        const roleFileName = "falcon-" + fileName;
-        const outRolePath = path.join(rbacRoleDir, roleFileName);
-        await roleWorkbook.xlsx.writeFile(outRolePath);
-        Ec.info("[ex-api] 已写入 RBAC_ROLE/ADMIN.SUPER：" + outRolePath);
 
         Ec.info("[ex-api] ✅ 执行完成（幂等）");
         Ec.info("[ex-api] 📋 汇总：");
         Ec.info("[ex-api]   🔑 ACTION_ID     = " + (actionId || "—"));
         Ec.info("[ex-api]   🔑 RESOURCE_ID  = " + (resourceId || "—"));
         Ec.info("[ex-api]   🔑 PERMISSION_ID = " + (permissionId || "—"));
-        Ec.info("[ex-api]   👥 授权角色数   = " + (roleIds ? roleIds.length : 0));
+        Ec.info("[ex-api]   👥 授权角色总数 = " + (rolePermsToWrite.length > 0 ? rolePermsToWrite.length : 0));
+
+        // 固定输出：超级管理员角色
+        const refRoleName = roleIdToName[REFERENCE_ROLE_ID] || "超级管理员";
+        const refRoleCode = roleIdToCode[REFERENCE_ROLE_ID] || "ADMIN.SUPER";
+        Ec.info("[ex-api]   🔒 固定输出角色：");
+        Ec.info("[ex-api]      [1] " + refRoleName + " (CODE: " + refRoleCode + ", ID: " + REFERENCE_ROLE_ID + ")");
+
+        // 用户选择的角色
+        if (roleIds && roleIds.length > 0) {
+            Ec.info("[ex-api]   👤 用户选择角色：");
+            roleIds.forEach((rid, idx) => {
+                const code = roleIdToCode[rid] || "—";
+                const name = roleIdToName[rid] || "—";
+                Ec.info("[ex-api]      [" + (idx + 1) + "] " + name + " (CODE: " + code + ", ID: " + rid + ")");
+            });
+        } else {
+            Ec.info("[ex-api]   👤 用户选择角色：无");
+        }
+
         Ec.info("[ex-api]   📁 RBAC_RESOURCE = " + outResPath);
-        Ec.info("[ex-api]   📁 RBAC_ROLE     = " + outRolePath);
+        roleWritePaths.forEach((p) => Ec.info("[ex-api]   📁 RBAC_ROLE     = " + p));
         if (insertedResource) {
             Ec.info("[ex-api]   📦 S_RESOURCE 本次插入字段：");
             Object.keys(insertedResource).forEach((k) => Ec.info("[ex-api]      " + k + " = " + (insertedResource[k] != null ? insertedResource[k] : "—")));
@@ -756,7 +854,7 @@ async function runOneExApi(cwd, conn, config, requestRaw, skip) {
             permissionId: permissionId || "—",
             roleCount: roleIds ? roleIds.length : 0,
             outResPath: outResPath || "—",
-            outRolePath: outRolePath || "—",
+            outRolePaths: roleWritePaths || [],
             ok: true
         };
     } catch (err) {

package/src/commander-ai/fn.ex.menu.js

@@ -0,0 +1,259 @@
+"use strict";
+
+const Ec = require("../epic");
+const fs = require("fs");
+const path = require("path");
+const Ut = require("../commander-shared");
+const inquirer = require("inquirer");
+
+const REQUIRED_ENV_DB = ["Z_DB_HOST", "Z_DB_PORT", "Z_DBS_INSTANCE", "Z_DB_APP_USER", "Z_DB_APP_PASS"];
+
+/**
+ * 从 pom.xml 读取当前项目的 artifactId（排除 <parent> 内的）
+ */
+function getArtifactIdFromPom(cwd) {
+    const pomPath = path.resolve(cwd, "pom.xml");
+    if (!fs.existsSync(pomPath)) return null;
+    let content = fs.readFileSync(pomPath, "utf-8");
+    content = content.replace(/<parent>[\s\S]*?<\/parent>/i, "");
+    const m = content.match(/<artifactId>([^<]+)<\/artifactId>/);
+    return m ? m[1].trim() : null;
+}
+
+/**
+ * 解析 app.env：export KEY="value" 或 export KEY='value'，写入 process.env
+ */
+function loadAppEnv(filePath) {
+    if (!fs.existsSync(filePath)) return false;
+    const content = fs.readFileSync(filePath, "utf-8");
+    const lines = content.split(/\r?\n/);
+    for (const line of lines) {
+        const trimmed = line.trim();
+        if (trimmed.startsWith("#") || !trimmed.startsWith("export ")) continue;
+        const match = trimmed.match(/^export\s+([A-Za-z0-9_]+)=["']?([^"'\n]*)["']?/);
+        if (match) process.env[match[1]] = match[2].trim();
+    }
+    return true;
+}
+
+/**
+ * 解析 .r2mo/app.env 路径：
+ * ONE：当前目录 .r2mo/app.env
+ * DPA：{id}-api/.r2mo/app.env，id 来自 pom.xml 或当前目录名
+ * 支持两种布局：api 在项目内 (cwd/{id}-api) 或 与项目并列 (cwd/../{id}-api)
+ */
+function resolveAppEnvPath(cwd) {
+    const primary = path.resolve(cwd, ".r2mo", "app.env");
+    if (fs.existsSync(primary)) return primary;
+
+    let artifactId = getArtifactIdFromPom(cwd);
+    if (!artifactId) {
+        const base = path.basename(cwd);
+        if (base && base !== ".") artifactId = base;
+    }
+    if (artifactId) {
+        const apiDir = `${artifactId}-api`;
+        const nested = path.resolve(cwd, apiDir, ".r2mo", "app.env");
+        if (fs.existsSync(nested)) return nested;
+        const sibling = path.resolve(cwd, "..", apiDir, ".r2mo", "app.env");
+        if (fs.existsSync(sibling)) return sibling;
+    }
+    return null;
+}
+
+module.exports = async (options) => {
+    try {
+        Ec.execute("ai ex-menu：从数据库 X_MENU 表生成角色菜单权限 JSON 文件");
+
+        const cwd = process.cwd();
+
+        // 1. 加载 .r2mo/app.env 环境变量
+        const appEnvPath = resolveAppEnvPath(cwd);
+        if (!appEnvPath) {
+            const tried = [path.resolve(cwd, ".r2mo", "app.env")];
+            const id = getArtifactIdFromPom(cwd) || path.basename(cwd);
+            if (id) {
+                tried.push(path.resolve(cwd, `${id}-api`, ".r2mo", "app.env"));
+                tried.push(path.resolve(cwd, "..", `${id}-api`, ".r2mo", "app.env"));
+            }
+            Ec.error(".r2mo/app.env 不存在；DPA 下也未找到 {id}-api/.r2mo/app.env");
+            Ec.info("已尝试路径（id=" + (id || "未解析") + "）：");
+            tried.forEach((p) => Ec.info(`  - ${p}`));
+            Ec.info("请确认：1) 在项目根执行  2) 存在 .r2mo/app.env 或 {id}-api/.r2mo/app.env（嵌套或与项目并列）");
+            process.exit(1);
+        }
+
+        loadAppEnv(appEnvPath);
+        Ec.info(`✓ 已加载环境变量：${appEnvPath}`);
+
+        // 2. 检查数据库核心环境变量
+        const missing = REQUIRED_ENV_DB.filter((k) => !process.env[k] || !String(process.env[k]).trim());
+        if (missing.length > 0) {
+            Ec.error("环境变量不齐，以下前置条件必须全部已设置，否则不执行。");
+            Ec.info("当前缺失的环境变量：" + missing.join(", "));
+            Ec.info("请确保以下环境变量已设置（可在 .r2mo/app.env 中 export）：");
+            Ec.info("  Z_DB_HOST         # 数据库主机，如 127.0.0.1");
+            Ec.info("  Z_DB_PORT         # 数据库端口，如 3306");
+            Ec.info("  Z_DBS_INSTANCE    # 业务数据库实例名");
+            Ec.info("  Z_DB_APP_USER     # 数据库用户");
+            Ec.info("  Z_DB_APP_PASS     # 数据库密码");
+            process.exit(1);
+        }
+        Ec.info(`✓ 环境变量检查通过：${REQUIRED_ENV_DB.join(", ")}`);
+
+        // 3. 连接数据库
+        const mysql = require("mysql2/promise");
+        const dbConfig = {
+            host: process.env.Z_DB_HOST || "localhost",
+            port: parseInt(process.env.Z_DB_PORT || "3306", 10),
+            user: process.env.Z_DB_APP_USER,
+            password: process.env.Z_DB_APP_PASS,
+            database: process.env.Z_DBS_INSTANCE
+        };
+
+        Ec.execute(`连接数据库：${dbConfig.database} @ ${dbConfig.host}:${dbConfig.port}（用户 ${dbConfig.user}）`);
+
+        const conn = await mysql.createConnection(dbConfig);
+
+        try {
+            // 4. 查询 S_ROLE 表，列出所有角色
+            Ec.execute("查询 S_ROLE 表，列出所有角色…");
+            const [roleRows] = await conn.execute("SELECT ID, NAME, CODE FROM S_ROLE ORDER BY NAME");
+
+            if (!roleRows || roleRows.length === 0) {
+                Ec.error("S_ROLE 表中无角色，无法继续");
+                process.exit(1);
+            }
+
+            Ec.info(`✓ 查询到 ${roleRows.length} 个角色`);
+
+            // 5. 用户单选角色（提示：菜单全开放模式，建议选择开发人员角色）
+            const roleChoices = roleRows.map((r) => ({
+                name: `${r.NAME || r.CODE || r.ID} (CODE: ${r.CODE || "-"})`,
+                value: r
+            }));
+
+            const { selectedRole } = await inquirer.prompt([
+                {
+                    type: "list",
+                    name: "selectedRole",
+                    message: "⚠️  菜单全开放模式：请选择一个角色（建议选择开发人员角色 ADMIN.DEVELOPER）",
+                    choices: roleChoices
+                }
+            ]);
+
+            const roleCode = selectedRole.CODE;
+            if (!roleCode || !roleCode.trim()) {
+                Ec.error("所选角色的 CODE 为空，无法继续");
+                process.exit(1);
+            }
+
+            Ec.info(`✓ 已选择角色：${selectedRole.NAME || "-"} (CODE: ${roleCode})`);
+
+            // 6. 查询 X_MENU 表，生成 NAME 数组
+            Ec.execute("查询 X_MENU 表，生成 NAME 数组…");
+            const [menuRows] = await conn.execute(
+                "SELECT NAME FROM X_MENU ORDER BY `ORDER`, LEVEL, NAME"
+            );
+
+            const nameArray = menuRows.map((row) => row.NAME).filter((name) => name && name.trim());
+            Ec.info(`✓ 查询到 ${nameArray.length} 个菜单项`);
+
+            // 7. 查询 X_MENU 表，生成层级文本数组
+            Ec.execute("查询 X_MENU 表，生成层级文本数组…");
+            const [hierarchyRows] = await conn.execute(
+                "SELECT ID, IFNULL(PARENT_ID,'') AS PARENT_ID, NAME, IFNULL(TEXT,NAME) AS TEXT, IFNULL(`ORDER`,0) AS `ORDER` FROM X_MENU"
+            );
+
+            // 构建菜单字典（按 ID 索引）
+            const byId = {};
+            hierarchyRows.forEach((row) => {
+                byId[row.ID] = {
+                    id: row.ID,
+                    pid: row.PARENT_ID || null,
+                    name: row.NAME,
+                    text: row.TEXT,
+                    order: parseInt(row.ORDER, 10) || 0
+                };
+            });
+
+            // 构建父子关系映射
+            const children = {};
+            Object.values(byId).forEach((node) => {
+                if (!children[node.pid]) children[node.pid] = [];
+                children[node.pid].push(node);
+            });
+
+            // 对每个父节点的子节点按 ORDER 和 NAME 排序
+            Object.keys(children).forEach((pid) => {
+                children[pid].sort((a, b) => {
+                    if (a.order !== b.order) return a.order - b.order;
+                    return a.name.localeCompare(b.name);
+                });
+            });
+
+            // 递归遍历生成带缩进的文本数组
+            const hierarchyArray = [];
+            function walk(pid, depth) {
+                const nodes = children[pid] || [];
+                nodes.forEach((node) => {
+                    const indent = " ".repeat(4 * (depth - 1));
+                    hierarchyArray.push(indent + node.text);
+                    walk(node.id, depth + 1);
+                });
+            }
+            walk(null, 1);
+
+            Ec.info(`✓ 生成层级文本数组，共 ${hierarchyArray.length} 项`);
+
+            // 8. 写入文件
+            const targetDir = path.resolve(cwd, "src", "main", "resources", "init", "permission", "ui.menu");
+            const roleDir = path.join(targetDir, "role");
+
+            if (!fs.existsSync(targetDir)) {
+                fs.mkdirSync(targetDir, { recursive: true });
+            }
+            if (!fs.existsSync(roleDir)) {
+                fs.mkdirSync(roleDir, { recursive: true });
+            }
+
+            const nameJsonPath = path.join(targetDir, `${roleCode}.json`);
+            const hierarchyJsonPath = path.join(roleDir, `${roleCode}.json`);
+
+            const nameJson = { name: nameArray };
+            fs.writeFileSync(nameJsonPath, JSON.stringify(nameJson, null, 2), "utf-8");
+            Ec.info(`✓ 已写入 NAME 数组：${nameJsonPath}`);
+
+            fs.writeFileSync(hierarchyJsonPath, JSON.stringify(hierarchyArray, null, 2), "utf-8");
+            Ec.info(`✓ 已写入层级文本数组：${hierarchyJsonPath}`);
+
+            // 9. 汇总报告
+            const sep = "----------------------------------------";
+            Ec.info(sep);
+            Ec.info("  ai ex-menu 执行报告");
+            Ec.info(sep);
+            Ec.info("  ⚙️  环境");
+            Ec.info(`    app.env     : ${appEnvPath}`);
+            Ec.info(`    数据库实例  : ${dbConfig.database}`);
+            Ec.info(`    连接地址    : ${dbConfig.host}:${dbConfig.port}`);
+            Ec.info(`    数据库用户  : ${dbConfig.user}`);
+            Ec.info("  👤  目标角色");
+            Ec.info(`    NAME       : ${selectedRole.NAME || "-"}`);
+            Ec.info(`    CODE       : ${roleCode}`);
+            Ec.info(`    ID         : ${selectedRole.ID}`);
+            Ec.info("  📋  菜单数据");
+            Ec.info(`    X_MENU 总数 : ${nameArray.length} 项`);
+            Ec.info("  ✅  生成文件");
+            Ec.info(`    NAME 数组   : ${nameJsonPath}`);
+            Ec.info(`    层级文本数组 : ${hierarchyJsonPath}`);
+            Ec.info(sep);
+        } finally {
+            await conn.end();
+        }
+    } catch (err) {
+        Ec.error(`执行失败：${err.message}`);
+        if (err.code) Ec.info(`错误码：${err.code}`);
+        if (err.stack) Ec.info(err.stack);
+        process.exit(1);
+    }
+};

package/src/commander-ai/index.js

@@ -12,6 +12,7 @@ const executeExPerm = require('./fn.ex.perm');
 const executeExApi = require('./fn.ex.api');
 const executeExCrud = require('./fn.ex.crud');
 const executeExApp = require('./fn.ex.app');
+const executeExMenu = require('./fn.ex.menu');
 const exported = {
     executeUuid,                // ai uuid
     executeString,              // ai str
@@ -29,6 +30,7 @@ const exported = {
     executeExApi,               // ai ex-api
     executeExCrud,              // ai ex-crud
     executeExApp,               // ai ex-app
+    executeExMenu,              // ai ex-menu
 };
 module.exports = exported;
 /**