@ai-partner-x/aiko-boot-cli 0.1.4

package/templates/scaffold-default/packages/api/package.json

@@ -0,0 +1,63 @@
+{
+  "name": "@scaffold/api",
+  "version": "0.1.0",
+  "private": true,
+  "type": "module",
+  "exports": {
+    "./client": {
+      "import": "./dist/client/index.ts",
+      "types": "./dist/client/index.ts"
+    }
+  },
+  "scripts": {
+    "dev": "concurrently -n codegen,server -c blue,green \"pnpm codegen:watch\" \"node --import @swc-node/register/esm-register --watch src/server.ts\"",
+    "dev:server": "node --import @swc-node/register/esm-register --watch src/server.ts",
+    "codegen:watch": "node scripts/codegen.cjs --watch",
+    "init-db": "node --import @swc-node/register/esm-register src/scripts/init-db.ts",
+    "codegen": "node scripts/codegen.cjs",
+    "build": "pnpm codegen && tsup",
+    "start": "node dist/server.js",
+    "lint": "eslint src"
+  },
+  "dependencies": {
+    "@ai-partner-x/aiko-boot": "workspace:*",
+    "@ai-partner-x/aiko-boot-codegen": "workspace:*",
+    "@ai-partner-x/aiko-boot-starter-orm": "workspace:*",
+    "@ai-partner-x/aiko-boot-starter-cache": "workspace:*",
+    "@ai-partner-x/aiko-boot-starter-validation": "workspace:*",
+    "@ai-partner-x/aiko-boot-starter-web": "workspace:*",
+    "@ai-partner-x/aiko-boot-starter-security": "workspace:*",
+    "@ai-partner-x/aiko-boot-starter-storage": "workspace:*",
+    "@ai-partner-x/aiko-boot-starter-mq": "workspace:*",
+    "@ai-partner-x/aiko-boot-starter-log": "workspace:*",
+    "bcryptjs": "^2.4.3",
+    "jsonwebtoken": "^9.0.2",
+    "better-sqlite3": "^12.6.2",
+    "ioredis": "^5.4.2",
+    "cors": "^2.8.5",
+    "date-fns": "^4.1.0",
+    "express": "^4.18.0",
+    "axios": "^1.6.0",
+    "multer": "^1.4.5-lts.1",
+    "reflect-metadata": "^0.2.1"
+  },
+  "devDependencies": {
+    "concurrently": "^9.2.1",
+    "sql.js": "^1.11.0",
+    "@swc-node/register": "^1.11.1",
+    "@swc/core": "^1.15.18",
+    "@ai-partner-x/eslint-plugin-aiko-boot": "workspace:*",
+    "@types/bcryptjs": "^2.4.6",
+    "@types/better-sqlite3": "^7.6.13",
+    "@types/cors": "^2.8.17",
+    "@types/express": "^4.17.21",
+    "@types/jsonwebtoken": "^9.0.5",
+    "@types/multer": "^1.4.12",
+    "@types/node": "^20.11.0",
+    "@typescript-eslint/parser": "^6.21.0",
+    "eslint": "^8.57.1",
+    "tsup": "^8.0.0",
+    "tsx": "^4.7.0",
+    "typescript": "^5.3.0"
+  }
+}

package/templates/scaffold-default/packages/api/scripts/codegen.cjs

@@ -0,0 +1,29 @@
+#!/usr/bin/env node
+const { generateApiClient, watchApiClient } = require('@ai-partner-x/aiko-boot-codegen');
+
+const isWatch = process.argv.includes('--watch') || process.argv.includes('-w');
+const isForce = process.argv.includes('--force') || process.argv.includes('-f');
+
+function handleError(error) {
+  console.error('\n❌ 代码生成失败:', error.message);
+  console.error('\n请检查以下问题：');
+  console.error('1. 源文件路径是否正确');
+  console.error('2. TypeScript 代码是否有语法错误');
+  console.error('3. 依赖是否正确安装');
+  console.error('\n详细错误信息:', error.stack);
+  process.exit(1);
+}
+
+if (isWatch) {
+  try {
+    watchApiClient();
+  } catch (error) {
+    handleError(error);
+  }
+} else {
+  try {
+    generateApiClient({ force: isForce });
+  } catch (error) {
+    handleError(error);
+  }
+}

package/templates/scaffold-default/packages/api/scripts/codegen.ts

@@ -0,0 +1,9 @@
+import { generateApiClient, watchApiClient } from '@ai-partner-x/aiko-boot-codegen';
+
+const isWatch = process.argv.includes('--watch') || process.argv.includes('-w');
+
+if (isWatch) {
+  watchApiClient();
+} else {
+  generateApiClient();
+}

package/templates/scaffold-default/packages/api/src/config/security-auto-configuration.ts

@@ -0,0 +1,75 @@
+import 'reflect-metadata';
+import {
+  AutoConfiguration,
+  OnApplicationReady,
+  ConfigLoader,
+  getApplicationContext,
+} from '@ai-partner-x/aiko-boot/boot';
+import { Component } from '@ai-partner-x/aiko-boot';
+import { getExpressApp } from '@ai-partner-x/aiko-boot-starter-web';
+import { AuthInterceptor } from '@ai-partner-x/aiko-boot-starter-security';
+import { PermissionInterceptor } from '@ai-partner-x/aiko-boot-starter-security';
+import { getLogger } from '@ai-partner-x/aiko-boot-starter-log';
+
+/**
+ * 自定义安全自动配置
+ * 在路由注册之前添加安全中间件
+ */
+@AutoConfiguration({ order: 150 }) // 在WebAutoConfiguration之前执行（order: 200）
+@Component()
+export class SecurityAutoConfiguration {
+  private logger = getLogger('security-auto-configuration');
+
+  @OnApplicationReady({ order: 30 }) // 在WebAutoConfiguration之前（order: 50）
+  async configureSecurityMiddleware(): Promise<void> {
+    const context = getApplicationContext();
+    if (!context) {
+      this.logger.warn('ApplicationContext not available');
+      return;
+    }
+
+    // 检查安全组件是否启用
+    const securityEnabled = ConfigLoader.get<boolean>('security.enabled', true);
+    if (!securityEnabled) {
+      this.logger.warn('Security is disabled - this is not recommended for production');
+      return;
+    }
+
+    const expressApp = getExpressApp();
+    if (!expressApp) {
+      this.logger.warn('Express app not available');
+      return;
+    }
+
+    // 获取AuthInterceptor和PermissionInterceptor
+    const authInterceptor = context.getBean(AuthInterceptor);
+    const permissionInterceptor = context.getBean(PermissionInterceptor);
+
+    if (!authInterceptor || !permissionInterceptor) {
+      this.logger.warn('Security interceptors not available');
+      return;
+    }
+
+    // 添加AuthInterceptor中间件
+    expressApp.use(async (req: any, res: any, next: any) => {
+      try {
+        await authInterceptor.intercept(req, res, next);
+      } catch (error) {
+        this.logger.error('Auth interceptor error', error);
+        res.status(500).json({ error: 'Internal Server Error' });
+      }
+    });
+
+    // 添加PermissionInterceptor中间件
+    expressApp.use(async (req: any, res: any, next: any) => {
+      try {
+        await permissionInterceptor.intercept(req, res, next);
+      } catch (error) {
+        this.logger.error('Permission interceptor error', error);
+        res.status(500).json({ error: 'Internal Server Error' });
+      }
+    });
+
+    this.logger.info('Security middleware configured successfully');
+  }
+}

package/templates/scaffold-default/packages/api/src/controller/auth.controller.ts

@@ -0,0 +1,109 @@
+import 'reflect-metadata';
+import { RestController, PostMapping, GetMapping, RequestBody, RequestParam, RequestHeader } from '@ai-partner-x/aiko-boot-starter-web';
+import { Autowired } from '@ai-partner-x/aiko-boot';
+import { AuthService } from '../service/auth.service.js';
+import type { LoginDto, LoginResultDto, RefreshTokenDto } from '../dto/auth.dto.js';
+
+@RestController({ path: '/auth' })
+export class AuthController {
+  @Autowired(AuthService)
+  private authService!: AuthService;
+
+  @PostMapping('/login')
+  async login(@RequestBody() dto: LoginDto): Promise<LoginResultDto> {
+    return this.authService.login(dto);
+  }
+
+  @PostMapping('/refresh')
+  async refresh(@RequestBody() dto: RefreshTokenDto): Promise<{ accessToken: string }> {
+    return this.authService.refreshToken(dto.refreshToken);
+  }
+
+  @GetMapping('/info')
+  async getUserInfo(@RequestParam('_uid') userId: string): Promise<LoginResultDto['userInfo']> {
+    return this.authService.getUserInfo(Number(userId));
+  }
+
+  /**
+   * 获取当前用户信息（基于 JWT token）
+   *
+   * 支持三种 token 传递方式，按优先级顺序：
+   * 1. Authorization Header (Bearer token) - 推荐
+   * 2. Request Body - 兼容方式
+   * 3. URL Parameters - 备用方式
+   *
+   * 所有方式都支持 "Bearer <token>" 和 "<token>" 两种格式
+   *
+   * @example
+   * ```bash
+   * # 方式1：使用 Authorization Header（推荐）
+   * curl -X POST http://localhost:3001/api/auth/current \
+   *   -H "Authorization: Bearer <token>"
+   *
+   * # 方式2：使用请求体
+   * curl -X POST http://localhost:3001/api/auth/current \
+   *   -H "Content-Type: application/json" \
+   *   -d '{"authorization": "Bearer <token>"}'
+   * # 或者不带 Bearer 前缀：
+   * curl -X POST http://localhost:3001/api/auth/current \
+   *   -H "Content-Type: application/json" \
+   *   -d '{"authorization": "<token>"}'
+   *
+   * # 方式3：使用 URL 参数
+   * curl -X POST "http://localhost:3001/api/auth/current?authorization=Bearer <token>"
+   * # 或者不带 Bearer 前缀：
+   * curl -X POST "http://localhost:3001/api/auth/current?authorization=<token>"
+   * ```
+   */
+  @PostMapping('/current')
+  async getCurrentUser(
+    @RequestHeader('Authorization', false) headerAuthorization: string | undefined,
+    @RequestBody() body: any,
+    @RequestParam('Authorization', false) paramAuthorization: string | undefined
+  ): Promise<LoginResultDto['userInfo']> {
+    let token = '';
+
+    // 优先级1：Authorization Header
+    if (headerAuthorization && typeof headerAuthorization === 'string') {
+      token = headerAuthorization.trim();
+      if (token.startsWith('Bearer ')) {
+        token = token.substring(7).trim(); // 移除 "Bearer " 前缀并去除空格
+      }
+    }
+
+    // 优先级2：Request Body - 支持大小写不敏感
+    if (!token && body && typeof body === 'object') {
+      const possibleKeys = ['Authorization', 'authorization', 'AUTHORIZATION'];
+      for (const key of possibleKeys) {
+        if (body[key] && typeof body[key] === 'string') {
+          token = body[key].trim();
+          if (token.startsWith('Bearer ')) {
+            token = token.substring(7).trim();
+          }
+          break;
+        }
+      }
+    }
+
+    // 优先级3：URL Parameters
+    if (!token && paramAuthorization && typeof paramAuthorization === 'string') {
+      token = paramAuthorization.trim();
+      if (token.startsWith('Bearer ')) {
+        token = token.substring(7).trim();
+      }
+    }
+
+    // 都没有找到有效的 token
+    if (!token) {
+      throw new Error('Authorization is required. Please provide authorization via Authorization header, request body, or URL parameter');
+    }
+
+    // 验证 token 格式（简单的 JWT 格式检查）
+    if (token.split('.').length !== 3) {
+      throw new Error('Invalid token format. Token must be a valid JWT');
+    }
+
+    return this.authService.getCurrentUserByToken(token);
+  }
+
+}

package/templates/scaffold-default/packages/api/src/controller/cache.controller.ts

@@ -0,0 +1,106 @@
+import 'reflect-metadata';
+import { RestController, PostMapping, DeleteMapping, GetMapping, RequestBody, RequestParam } from '@ai-partner-x/aiko-boot-starter-web';
+import { Autowired } from '@ai-partner-x/aiko-boot';
+import { CacheService } from '../service/cache.service.js';
+import type { CachePutDto } from '../dto/cache.dto.js';
+
+/**
+ * Cache 控制器
+ *
+ * 提供缓存的 CRUD 操作接口，仅在非生产环境下可用。
+ * 注意：需要在 app.config.ts 中启用 cache 并配置 Redis 连接
+ *
+ * 当 NODE_ENV=production 时，所有端点会直接抛出错误拒绝访问，
+ * 防止数据泄露、缓存投毒或拒绝服务。
+ */
+@RestController({ path: '/cache' })
+export class CacheController {
+  @Autowired(CacheService)
+  private cacheService!: CacheService;
+
+  private assertNonProduction(): void {
+    if (process.env.NODE_ENV === 'production') {
+      throw new Error('Cache management endpoints are disabled in production.');
+    }
+  }
+
+  /**
+   * 获取缓存值
+   * 
+   * @example
+   * curl "http://localhost:3001/api/cache/get?name=user&key=1"
+   */
+  @GetMapping('/get')
+  async get(
+    @RequestParam('name') name: string,
+    @RequestParam('key') key: string,
+  ): Promise<string | null> {
+    this.assertNonProduction();
+    return this.cacheService.get({ name, key });
+  }
+
+  /**
+   * 设置缓存值
+   * 
+   * @example
+   * curl -X POST http://localhost:3001/api/cache/put \
+   *   -H "Content-Type: application/json" \
+   *   -d '{"name":"user","key":"1","value":{"id":1,"name":"张三"},"ttlSeconds":300}'
+   */
+  @PostMapping('/put')
+  async put(@RequestBody() dto: CachePutDto): Promise<{ ok: boolean }> {
+    this.assertNonProduction();
+    await this.cacheService.put(dto);
+    return { ok: true };
+  }
+
+  /**
+   * 删除缓存条目
+   * 
+   * @example
+   * # 删除单个 key
+   * curl -X DELETE "http://localhost:3001/api/cache/evict?name=user&key=1"
+   * 
+   * # 删除命名空间下所有条目（无需传 key）
+   * curl -X DELETE "http://localhost:3001/api/cache/evict?name=user&allEntries=true"
+   */
+  @DeleteMapping('/evict')
+  async evict(
+    @RequestParam('name') name: string,
+    @RequestParam('key') key?: string,
+    @RequestParam('allEntries') allEntries?: string,
+  ): Promise<{ ok: boolean }> {
+    this.assertNonProduction();
+    const isAllEntries = allEntries === 'true';
+    if (!isAllEntries && !key) {
+      throw new Error('Query parameter "key" is required when "allEntries" is not true.');
+    }
+
+    return { ok: true };
+  }
+
+  /**
+   * 清空缓存命名空间
+   * 
+   * @example
+   * curl -X DELETE "http://localhost:3001/api/cache/clear?name=user"
+   */
+  @DeleteMapping('/clear')
+  async clear(@RequestParam('name') name: string): Promise<{ ok: boolean }> {
+    this.assertNonProduction();
+    await this.cacheService.clear({ name });
+    return { ok: true };
+  }
+
+  /**
+   * 检查缓存状态
+   * 
+   * @example
+   * curl "http://localhost:3001/api/cache/status"
+   */
+  @GetMapping('/status')
+  async status(): Promise<{ initialized: boolean }> {
+    this.assertNonProduction();
+    return { initialized: this.cacheService.isInitialized() };
+  }
+}

package/templates/scaffold-default/packages/api/src/controller/menu.controller.ts

@@ -0,0 +1,86 @@
+import 'reflect-metadata';
+import {
+  RestController, GetMapping, PostMapping, PutMapping, DeleteMapping,
+  PathVariable, RequestBody, RequestParam,
+} from '@ai-partner-x/aiko-boot-starter-web';
+import { Autowired } from '@ai-partner-x/aiko-boot/di/server';
+import { ApiPermission, ButtonPermission } from '@ai-partner-x/aiko-boot-starter-security';
+import { MenuService } from '../service/menu.service.js';
+import type { CreateMenuDto, UpdateMenuDto } from '../dto/menu.dto.js';
+
+@RestController({ path: '/sys/menu' })
+export class MenuController {
+  @Autowired(MenuService)
+  private menuService!: MenuService;
+
+  @GetMapping('/tree')
+  @ApiPermission('menu', 'tree', {
+    description: '查看菜单树',
+    group: '菜单管理',
+  })
+  async getFullTree() {
+    return this.menuService.getFullTree();
+  }
+
+  @GetMapping('/user-tree')
+  @ApiPermission('menu', 'user-tree', {
+    description: '查看用户菜单树',
+    group: '菜单管理',
+  })
+  async getUserTree(@RequestParam('_perms') perms: string) {
+    const permissions = perms ? perms.split(',').filter(Boolean) : [];
+    return this.menuService.getUserMenuTree(permissions);
+  }
+
+  @GetMapping('/:id')
+  @ApiPermission('menu', 'read', {
+    description: '查看菜单详情',
+    group: '菜单管理',
+  })
+  async getById(@PathVariable('id') id: string) {
+    return this.menuService.getById(Number(id));
+  }
+
+  @PostMapping()
+  @ApiPermission('menu', 'create', {
+    description: '创建菜单',
+    group: '菜单管理',
+  })
+  @ButtonPermission('menu', 'create', {
+    description: '创建菜单按钮',
+    group: '菜单管理',
+    buttonId: 'btn-create-menu',
+  })
+  async create(@RequestBody() dto: CreateMenuDto) {
+    return this.menuService.createMenu(dto);
+  }
+
+  @PutMapping('/:id')
+  @ApiPermission('menu', 'update', {
+    description: '更新菜单',
+    group: '菜单管理',
+  })
+  @ButtonPermission('menu', 'update', {
+    description: '更新菜单按钮',
+    group: '菜单管理',
+    buttonId: 'btn-update-menu',
+  })
+  async update(@PathVariable('id') id: string, @RequestBody() dto: UpdateMenuDto) {
+    return this.menuService.updateMenu(Number(id), dto);
+  }
+
+  @DeleteMapping('/:id')
+  @ApiPermission('menu', 'delete', {
+    description: '删除菜单',
+    group: '菜单管理',
+  })
+  @ButtonPermission('menu', 'delete', {
+    description: '删除菜单按钮',
+    group: '菜单管理',
+    buttonId: 'btn-delete-menu',
+  })
+  async delete(@PathVariable('id') id: string) {
+    await this.menuService.deleteMenu(Number(id));
+    return { message: '删除成功' };
+  }
+}

package/templates/scaffold-default/packages/api/src/controller/mq.controller.ts

@@ -0,0 +1,35 @@
+import 'reflect-metadata';
+import { RestController, PostMapping, RequestBody } from '@ai-partner-x/aiko-boot-starter-web';
+import { Autowired } from '@ai-partner-x/aiko-boot';
+import { MqTemplate } from '@ai-partner-x/aiko-boot-starter-mq';
+import type { SendUserEventDto, UserEventDto } from '../dto/mq.dto.js';
+
+@RestController({ path: '/mq' })
+export class MqController {
+  @Autowired(MqTemplate)
+  private mqTemplate!: MqTemplate;
+
+  /**
+   * 发送用户相关消息到 MQ
+   * POST /api/mq/send
+   */
+  @PostMapping('/send')
+  async send(@RequestBody() dto: SendUserEventDto): Promise<{ ok: boolean; topic: string }> {
+    if (dto.tag) {
+      await this.mqTemplate.send(dto.topic, dto.tag, dto.body);
+    } else {
+      await this.mqTemplate.send(dto.topic, dto.body);
+    }
+    return { ok: true, topic: dto.topic };
+  }
+
+  /**
+   * 快捷发送 user.created 事件（复用 User 实体字段）
+   * POST /api/mq/send-user-created
+   */
+  @PostMapping('/send-user-created')
+  async sendUserCreated(@RequestBody() body: UserEventDto): Promise<{ ok: boolean }> {
+    await this.mqTemplate.send('user.created', 'add', body);
+    return { ok: true };
+  }
+}

package/templates/scaffold-default/packages/api/src/controller/role.controller.ts

@@ -0,0 +1,100 @@
+import 'reflect-metadata';
+import {
+  RestController, GetMapping, PostMapping, PutMapping, DeleteMapping,
+  PathVariable, RequestBody,
+} from '@ai-partner-x/aiko-boot-starter-web';
+import { Autowired } from '@ai-partner-x/aiko-boot/di/server';
+import { ApiPermission, ButtonPermission } from '@ai-partner-x/aiko-boot-starter-security';
+import { RoleService } from '../service/role.service.js';
+import type { CreateRoleDto, UpdateRoleDto } from '../dto/role.dto.js';
+
+@RestController({ path: '/sys/role' })
+export class RoleController {
+  @Autowired(RoleService)
+  private roleService!: RoleService;
+
+  @GetMapping('/list')
+  @ApiPermission('role', 'list', {
+    description: '查看角色列表',
+    group: '角色管理',
+  })
+  async list() {
+    return this.roleService.listRoles();
+  }
+
+  @GetMapping('/:id')
+  @ApiPermission('role', 'read', {
+    description: '查看角色详情',
+    group: '角色管理',
+  })
+  async getById(@PathVariable('id') id: string) {
+    return this.roleService.getById(Number(id));
+  }
+
+  @PostMapping()
+  @ApiPermission('role', 'create', {
+    description: '创建角色',
+    group: '角色管理',
+  })
+  @ButtonPermission('role', 'create', {
+    description: '创建角色按钮',
+    group: '角色管理',
+    buttonId: 'btn-create-role',
+  })
+  async create(@RequestBody() dto: CreateRoleDto) {
+    console.log("dto1", dto);
+    return this.roleService.createRole(dto);
+  }
+
+  @PutMapping('/:id')
+  @ApiPermission('role', 'update', {
+    description: '更新角色',
+    group: '角色管理',
+  })
+  @ButtonPermission('role', 'update', {
+    description: '更新角色按钮',
+    group: '角色管理',
+    buttonId: 'btn-update-role',
+  })
+  async update(@PathVariable('id') id: string, @RequestBody() dto: UpdateRoleDto) {
+    return this.roleService.updateRole(Number(id), dto);
+  }
+
+  @DeleteMapping('/:id')
+  @ApiPermission('role', 'delete', {
+    description: '删除角色',
+    group: '角色管理',
+  })
+  @ButtonPermission('role', 'delete', {
+    description: '删除角色按钮',
+    group: '角色管理',
+    buttonId: 'btn-delete-role',
+  })
+  async delete(@PathVariable('id') id: string) {
+    await this.roleService.deleteRole(Number(id));
+    return { message: '删除成功' };
+  }
+
+  @GetMapping('/:id/menus')
+  @ApiPermission('role', 'read-menus', {
+    description: '查看角色菜单',
+    group: '角色管理',
+  })
+  async getRoleMenus(@PathVariable('id') id: string) {
+    return this.roleService.getRoleMenuIds(Number(id));
+  }
+
+  @PutMapping('/:id/menus')
+  @ApiPermission('role', 'assign-menus', {
+    description: '分配角色菜单',
+    group: '角色管理',
+  })
+  @ButtonPermission('role', 'assign-menus', {
+    description: '分配菜单按钮',
+    group: '角色管理',
+    buttonId: 'btn-assign-menus',
+  })
+  async assignMenus(@PathVariable('id') id: string, @RequestBody() body: { menuIds: number[] }) {
+    return this.roleService.updateRole(Number(id), { menuIds: body.menuIds });
+  }
+}