1

src/services/apiClient.test.ts

@@ -142,12 +142,7 @@ describe('apiClient', () => {
         }),
       }),
     );
-    expect(dispatchEventMock).toHaveBeenCalledTimes(1);
-    expect(dispatchEventMock).toHaveBeenCalledWith(
-      expect.objectContaining({
-        type: AUTH_STATE_EVENT,
-      }),
-    );
+    expect(dispatchEventMock).not.toHaveBeenCalled();
     expect(getStoredAccessToken()).toBe('fresh-token');
   });
 
@@ -277,7 +272,7 @@ describe('apiClient', () => {
     expect(response.status).toBe(401);
     expect(fetchMock).toHaveBeenCalledTimes(3);
     expect(getStoredAccessToken()).toBe('fresh-token');
-    expect(dispatchEventMock).toHaveBeenCalledTimes(1);
+    expect(dispatchEventMock).not.toHaveBeenCalled();
   });
 
   it('rejects refresh responses that do not return a renewed bearer token', async () => {

src/services/apiClient.ts

@@ -614,9 +614,9 @@ export async function fetchWithApiAuth(
         try {
           await refreshAccessToken();
           refreshAttempted = true;
-          if (shouldNotifyAuthStateChange) {
-            emitAuthStateChange();
-          }
+          // refresh 成功只代表 access token 已补票成功，
+          // 不能把当前业务请求的首次 401 直接放大成全局鉴权变更，
+          // 否则像 Puzzle works 这类受保护列表会把单接口失败放大成整个平台重复 hydrate。
           continue;
         } catch {
           if (hasAuthHeader) {