zen_admin 0.9.2

data/app/policies/zen_admin/application_policy.rb

@@ -0,0 +1,53 @@
+module ZenAdmin
+  class ApplicationPolicy
+    attr_reader :user, :record
+
+    def initialize(user, record)
+      @user = user
+      @record = record
+    end
+
+    def index?
+      false
+    end
+
+    def show?
+      false
+    end
+
+    def create?
+      false
+    end
+
+    def new?
+      create?
+    end
+
+    def update?
+      false
+    end
+
+    def edit?
+      update?
+    end
+
+    def destroy?
+      false
+    end
+
+    class Scope
+      def initialize(user, scope)
+        @user = user
+        @scope = scope
+      end
+
+      def resolve
+        scope.all
+      end
+
+      private
+
+      attr_reader :user, :scope
+    end
+  end
+end

data/app/policies/zen_admin/resource_policy.rb

@@ -0,0 +1,48 @@
+module ZenAdmin
+  class ResourcePolicy < ApplicationPolicy
+    def index?
+      check_permission("index")
+    end
+
+    def show?
+      check_permission("show")
+    end
+
+    def create?
+      check_permission("create")
+    end
+
+    def new?
+      create?
+    end
+
+    def update?
+      check_permission("update")
+    end
+
+    def edit?
+      update?
+    end
+
+    def destroy?
+      check_permission("destroy")
+    end
+
+    private
+
+    def check_permission(action)
+      return true if user.respond_to?(:super_admin?) && user.super_admin?
+      
+      # Handle both class (index) and instance (member)
+      klass = record.is_a?(Class) ? record : record.class
+      resource_name = klass.name.underscore.pluralize.gsub('/', '_')
+      
+      permission = "#{resource_name}:#{action}"
+      result = user.can?(permission)
+      
+      Rails.logger.debug "[ZenAdmin] Auth Check: User=#{user.username} | Permission=#{permission} | Result=#{result}"
+      
+      result
+    end
+  end
+end

data/app/views/layouts/zen_admin/_flash.html.erb

@@ -0,0 +1,9 @@
+<% flash.each do |key, value| %>
+  <% alert_class = key.to_s == 'notice' ? 'success' : 'danger' %>
+  <% icon_class = key.to_s == 'notice' ? 'check' : 'ban' %>
+  <div class="alert alert-<%= alert_class %> alert-dismissible" data-controller="toast" data-toast-target="element">
+    <button type="button" class="close" data-dismiss="alert" aria-hidden="true">&times;</button>
+    <h5><i class="icon fas fa-<%= icon_class %>"></i> <%= key.to_s.humanize %>!</h5>
+    <%= value %>
+  </div>
+<% end %>

data/app/views/layouts/zen_admin/_sidebar.html.erb

@@ -0,0 +1,115 @@
+<aside class="main-sidebar sidebar-dark-primary elevation-4">
+  <!-- Brand Logo -->
+  <a href="<%= zen_admin.root_path %>" class="brand-link">
+    <span class="brand-text font-weight-light px-3">ZenAdmin</span>
+  </a>
+
+  <!-- Sidebar -->
+  <div class="sidebar">
+    <!-- Sidebar user panel -->
+    <div class="user-panel mt-3 pb-3 mb-3 d-flex align-items-center">
+      <div class="image">
+        <img src="https://ui-avatars.com/api/?name=<%= current_admin_user.username %>&background=random" class="img-circle elevation-2" alt="User Image">
+      </div>
+      <div class="info flex-grow-1">
+        <a href="#" class="d-block text-truncate"><%= current_admin_user.username %></a>
+      </div>
+      <div class="logout-btn pr-3">
+        <%= link_to zen_admin.logout_path, data: { turbo_method: :delete }, class: "text-danger", title: "退出登录" do %>
+          <i class="fas fa-sign-out-alt"></i>
+        <% end %>
+      </div>
+    </div>
+
+    <!-- Sidebar Menu -->
+    <nav class="mt-2">
+      <ul class="nav nav-pills nav-sidebar flex-column" data-widget="treeview" role="menu" data-accordion="false">
+        
+        <li class="nav-item">
+          <a href="<%= zen_admin.root_path %>" class="nav-link <%= 'active' if request.path == zen_admin.root_path %>">
+            <i class="nav-icon fas fa-tachometer-alt"></i>
+            <p>Dashboard</p>
+          </a>
+        </li>
+
+        <li class="nav-header">MENU</li>
+
+        <% ZenAdmin::Registry.instance.menu_items.each do |item| %>
+          <% next unless menu_item_visible?(item, current_admin_user) %>
+          
+          <% if item[:type] == :group %>
+            <li class="nav-item" data-controller="menu-group">
+              <a href="#" class="nav-link" data-action="click->menu-group#toggle">
+                <i class="nav-icon fas fa-folder"></i>
+                <p>
+                  <%= item[:label] %>
+                  <i class="right fas fa-angle-left"></i>
+                </p>
+              </a>
+              <ul class="nav nav-treeview" data-menu-group-target="treeview" style="display: none;">
+                <% item[:items].each do |sub_item| %>
+                  <% next unless menu_item_visible?(sub_item, current_admin_user) %>
+                  
+                  <% if sub_item[:type] == :resource %>
+                    <% resource = sub_item[:object] %>
+                    <li class="nav-item">
+                      <a href="<%= zen_admin.ui_resource_index_path(resource.name) %>" class="nav-link <%= 'active' if params[:resource_name] == resource.name %>">
+                        <i class="nav-icon <%= resource.menu_options[:icon] || 'far fa-circle' %>"></i>
+                        <p>
+                          <% 
+                            menu_label = resource.menu_options[:label]
+                            label = if menu_label.present?
+                              menu_label.is_a?(Symbol) ? t(menu_label) : menu_label
+                            else
+                              resource.label_plural
+                            end
+                          %>
+                          <%= label %>
+                        </p>
+                      </a>
+                    </li>
+                  <% elsif sub_item[:type] == :link %>
+                    <% link = sub_item[:object] %>
+                    <li class="nav-item">
+                      <a href="<%= link[:path] %>" class="nav-link">
+                        <i class="nav-icon <%= link[:icon] %>"></i>
+                        <p><%= link[:label] %></p>
+                      </a>
+                    </li>
+                  <% end %>
+                <% end %>
+              </ul>
+            </li>
+          <% elsif item[:type] == :resource %>
+            <% resource = item[:object] %>
+            <li class="nav-item">
+              <a href="<%= zen_admin.ui_resource_index_path(resource.name) %>" class="nav-link <%= 'active' if params[:resource_name] == resource.name %>">
+                <i class="nav-icon <%= resource.menu_options[:icon] || 'fas fa-circle' %>"></i>
+                <p>
+                  <% 
+                    menu_label = resource.menu_options[:label]
+                    label = if menu_label.present?
+                      menu_label.is_a?(Symbol) ? t(menu_label) : menu_label
+                    else
+                      resource.label_plural
+                    end
+                  %>
+                  <%= label %>
+                </p>
+              </a>
+            </li>
+          <% else %>
+            <% link = item[:object] %>
+            <li class="nav-item">
+              <a href="<%= link[:path] %>" class="nav-link">
+                <i class="nav-icon <%= link[:icon] %>"></i>
+                <p><%= link[:label] %></p>
+              </a>
+            </li>
+          <% end %>
+        <% end %>
+
+      </ul>
+    </nav>
+  </div>
+</aside>

data/app/views/layouts/zen_admin/application.html.erb

@@ -0,0 +1,98 @@
+<!DOCTYPE html>
+<html lang="<%= I18n.locale %>">
+<head>
+  <meta charset="utf-8">
+  <meta name="viewport" content="width=device-width, initial-scale=1">
+  <title>ZenAdmin</title>
+
+  <!-- Google Font & Icons -->
+  <link rel="stylesheet" href="https://fonts.googleapis.com/css?family=Source+Sans+Pro:300,400,400i,700&display=fallback">
+  <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.0/css/all.min.css">
+  
+  <!-- Theme style (AdminLTE) -->
+  <link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/admin-lte@3.2/dist/css/adminlte.min.css">
+  
+  <!-- Tom Select CSS -->
+  <link href="https://cdnjs.cloudflare.com/ajax/libs/tom-select/2.2.2/css/tom-select.bootstrap5.min.css" rel="stylesheet">
+  
+  <%= stylesheet_link_tag "actiontext", "data-turbo-track": "reload" %>
+  
+  <% # 核心：必须使用 Rails 标准标签来加载环境，确保 CSRF 和 Turbo 正常工作 %>
+  <%= csrf_meta_tags %>
+  <%= csp_meta_tag %>
+  
+  <%= javascript_importmap_tags "zen_admin/application" %>
+  <%= yield :head %>
+  
+  <style>
+    :root {
+      --primary-color: #165DFF; 
+      --text-color: #1D2129;
+      --text-secondary: #4E5969;
+      --border-color: #E5E6EB;
+      --bg-color: #F2F3F5;
+    }
+    body { font-family: 'Inter', -apple-system, BlinkMacSystemFont, 'PingFang SC', sans-serif; color: var(--text-color); background-color: var(--bg-color); }
+    .content-wrapper { background-color: var(--bg-color); }
+    .card { border: none; border-radius: 8px; box-shadow: 0 4px 10px rgba(0, 0, 0, 0.05); margin-bottom: 24px; border-top: 3px solid var(--primary-color); }
+    .btn-action { padding: 4px 8px; font-size: 12px; border-radius: 4px; }
+    
+    /* Hide logout button when sidebar is collapsed (but not hovered) */
+    body.sidebar-mini.sidebar-collapse .main-sidebar:not(:hover) .user-panel > .logout-btn {
+      display: none !important;
+    }
+  </style>
+</head>
+<body class="hold-transition sidebar-mini layout-fixed" data-controller="layout">
+<div class="wrapper">
+  
+  <div id="flash" style="position: fixed; top: 1rem; right: 1rem; z-index: 1050; width: 350px;">
+    <%= render "layouts/zen_admin/flash" %>
+  </div>
+
+  <!-- Navbar -->
+  <nav class="main-header navbar navbar-expand navbar-white navbar-light border-bottom-0 shadow-sm">
+    <ul class="navbar-nav">
+      <li class="nav-item">
+        <a class="nav-link" href="#" role="button" data-action="click->layout#toggleSidebar">
+          <i class="fas fa-bars text-muted"></i>
+        </a>
+      </li>
+    </ul>
+    <ul class="navbar-nav ml-auto">
+      <li class="nav-item">
+        <a class="nav-link" href="#" role="button" data-action="click->layout#toggleFullscreen">
+          <i class="fas fa-expand-arrows-alt text-muted"></i>
+        </a>
+      </li>
+    </ul>
+  </nav>
+
+  <%= render "layouts/zen_admin/sidebar" %>
+
+  <div class="content-wrapper pt-3">
+    <div class="content">
+      <div class="container-fluid">
+        <div class="d-flex align-items-center justify-content-between mb-4">
+          <h2 class="fw-bold mb-0"><%= content_for?(:title) ? yield(:title) : "Dashboard" %></h2>
+          <div class="page-actions">
+            <%= yield :page_actions %>
+          </div>
+        </div>
+        <%= yield %>
+      </div>
+    </div>
+  </div>
+
+  <footer class="main-footer border-top-0 small text-muted">
+    <strong>Copyright &copy; <%= Time.now.year %> <a href="#" class="text-decoration-none">ZenAdmin</a>.</strong>
+  </footer>
+
+  <%= turbo_frame_tag "modal" %>
+</div>
+
+<script src="https://cdnjs.cloudflare.com/ajax/libs/tom-select/2.2.2/js/tom-select.complete.min.js"></script>
+<script src="https://cdn.jsdelivr.net/npm/bootstrap@5.3.0/dist/js/bootstrap.bundle.min.js" data-turbo-track="reload"></script>
+
+</body>
+</html>

data/app/views/zen_admin/builtin/_copy_button.html.erb

@@ -0,0 +1,9 @@
+<div data-controller="clipboard" class="d-inline-block">
+  <button class="btn btn-outline-primary py-1 px-2" 
+          type="button" 
+          data-action="clipboard#copy" 
+          data-clipboard-text="<%= url %>"
+          title="<%= t('zen_admin.actions.copy') rescue '复制' %>">
+    <i class="fas fa-copy"></i>
+  </button>
+</div>

data/app/views/zen_admin/builtin/_file_link.html.erb

@@ -0,0 +1,22 @@
+<div class="input-group" data-controller="clipboard">
+  <input type="text" class="form-control" value="<%= url %>" readonly data-clipboard-target="input">
+  <div class="input-group-append">
+    <button class="btn btn-outline-primary" type="button" data-action="clipboard#copy">
+      <i class="fas fa-copy"></i> 复制链接
+    </button>
+  </div>
+</div>
+<div class="mt-3 text-center">
+  <% # 兼容 Attachment, Blob 和 Asset %>
+  <% blob = if @record.is_a?(ActiveStorage::Attachment)
+              @record.blob
+            elsif @record.respond_to?(:file) && @record.file.attached?
+              @record.file.blob
+            else
+              @record
+            end %>
+  <% if blob.is_a?(ActiveStorage::Blob) && blob.representable? %>
+    <% # 使用原图预览，避免产生变体记录 %>
+    <img src="<%= main_app.url_for(blob) %>" class="img-fluid rounded shadow-sm border" style="max-height: 600px;">
+  <% end %>
+</div>

data/app/views/zen_admin/dashboard/index.html.erb

@@ -0,0 +1,27 @@
+<div style="font-family: sans-serif; max-width: 600px; margin: 50px auto; padding: 20px; border: 1px solid #eee; border-radius: 8px; text-align: center; box-shadow: 0 2px 10px rgba(0,0,0,0.05);">
+  <h1 style="color: #2c3e50;">ZenAdmin 挂载成功!</h1>
+  <p style="color: #7f8c8d; font-size: 1.1em;">
+    您现在看到的页面是由 <strong>ZenAdmin Engine</strong> 渲染的。
+  </p>
+  <hr style="border: 0; border-top: 1px solid #eee; margin: 20px 0;">
+  <div style="text-align: left; background: #f8f9fa; padding: 15px; border-radius: 4px;">
+    <p><strong>当前配置：</strong></p>
+    <ul style="list-style: none; padding: 0;">
+      <li>✅ UI 状态: <code><%= ZenAdmin.configuration.enable_ui %></code></li>
+      <li>✅ 管理路径: <code><%= ZenAdmin.configuration.admin_path %></code></li>
+    </ul>
+    
+    <p class="mt-3"><strong>已注册资源：</strong></p>
+    <ul style="padding-left: 20px;">
+      <% ZenAdmin::Registry.instance.all.each do |resource| %>
+        <li style="margin-bottom: 5px;">
+          <%= link_to resource.model.name, ui_resource_index_path(resource.name), style: "color: #3498db; text-decoration: none; font-weight: bold;" %>
+          <span style="color: #999; font-size: 0.9em;">(<%= resource.name %>)</span>
+        </li>
+      <% end %>
+    </ul>
+    <% if ZenAdmin::Registry.instance.all.empty? %>
+      <p style="color: #999; font-style: italic;">暂无注册资源。</p>
+    <% end %>
+  </div>
+</div>

data/app/views/zen_admin/sessions/new.html.erb

@@ -0,0 +1,47 @@
+<!DOCTYPE html>
+<html lang="en">
+<head>
+  <meta charset="utf-8">
+  <meta name="viewport" content="width=device-width, initial-scale=1">
+  <title>ZenAdmin | 登录</title>
+  <link rel="stylesheet" href="https://fonts.googleapis.com/css?family=Source+Sans+Pro:300,400,400i,700&display=fallback">
+  <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.0/css/all.min.css">
+  <link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/admin-lte@3.2/dist/css/adminlte.min.css">
+</head>
+<body class="hold-transition login-page">
+<div class="login-box">
+  <div class="card card-outline card-primary">
+    <div class="card-header text-center">
+      <a href="#" class="h1"><b>Zen</b>Admin</a>
+    </div>
+    <div class="card-body">
+      <p class="login-box-msg">请登录以开启管理后台</p>
+
+      <% if flash[:alert] %>
+        <div class="alert alert-danger"><%= flash[:alert] %></div>
+      <% end %>
+
+      <%= form_with url: login_path, method: :post, local: true do |f| %>
+        <div class="input-group mb-3">
+          <%= f.text_field :username, class: "form-control", placeholder: "用户名" %>
+          <div class="input-group-append">
+            <div class="input-group-text"><span class="fas fa-user"></span></div>
+          </div>
+        </div>
+        <div class="input-group mb-3">
+          <%= f.password_field :password, class: "form-control", placeholder: "密码" %>
+          <div class="input-group-append">
+            <div class="input-group-text"><span class="fas fa-lock"></span></div>
+          </div>
+        </div>
+        <div class="row">
+          <div class="col-12">
+            <%= f.submit "登录", class: "btn btn-primary btn-block" %>
+          </div>
+        </div>
+      <% end %>
+    </div>
+  </div>
+</div>
+</body>
+</html>