@ai-partner-x/aiko-boot-cli 0.1.4

package/templates/scaffold-default/packages/api/src/scripts/demo-permissions.mjs

@@ -0,0 +1,418 @@
+#!/usr/bin/env node
+
+/**
+ * 权限控制功能演示脚本
+ *
+ * 演示各种权限控制功能的使用
+ */
+
+import http from 'http';
+
+const BASE_URL = 'http://localhost:3001/api';
+
+// 颜色输出
+const colors = {
+  reset: '\x1b[0m',
+  bright: '\x1b[1m',
+  green: '\x1b[32m',
+  yellow: '\x1b[33m',
+  blue: '\x1b[34m',
+  magenta: '\x1b[35m',
+  cyan: '\x1b[36m',
+};
+
+/**
+ * 打印带颜色的消息
+ */
+function printMessage(message, color = colors.reset) {
+  console.log(`${color}${message}${colors.reset}`);
+}
+
+/**
+ * 打印分隔线
+ */
+function printSeparator(title = '') {
+  console.log('\n' + '='.repeat(70));
+  if (title) {
+    printMessage(title, colors.bright + colors.cyan);
+  }
+  console.log('='.repeat(70));
+}
+
+/**
+ * HTTP请求工具函数
+ */
+async function makeRequest(options) {
+  return new Promise((resolve, reject) => {
+    const url = new URL(options.url || `${BASE_URL}${options.path}`);
+
+    const requestOptions = {
+      hostname: url.hostname,
+      port: url.port,
+      path: url.pathname + url.search,
+      method: options.method || 'GET',
+      headers: {
+        'Content-Type': 'application/json',
+        ...(options.headers || {}),
+      },
+    };
+
+    const req = http.request(requestOptions, (res) => {
+      let data = '';
+      res.on('data', (chunk) => {
+        data += chunk;
+      });
+      res.on('end', () => {
+        try {
+          const result = {
+            statusCode: res.statusCode,
+            data: JSON.parse(data),
+          };
+          resolve(result);
+        } catch (error) {
+          resolve({
+            statusCode: res.statusCode,
+            data: data,
+          });
+        }
+      });
+    });
+
+    req.on('error', (error) => {
+      reject(error);
+    });
+
+    if (options.body) {
+      req.write(JSON.stringify(options.body));
+    }
+
+    req.end();
+  });
+}
+
+/**
+ * 演示1：权限类型系统
+ */
+async function demoPermissionTypes() {
+  printSeparator('演示1：权限类型系统');
+
+  printMessage('\n📋 Aiko Boot 支持5种权限类型：\n', colors.bright + colors.magenta);
+
+  const types = [
+    { type: 'API', description: 'API端点权限，控制HTTP接口访问', example: 'api:user:read' },
+    { type: 'METHOD', description: '方法权限，控制Service层方法调用', example: 'method:user:create' },
+    { type: 'BUTTON', description: '按钮权限，控制前端按钮显示和操作', example: 'button:user:delete' },
+    { type: 'MENU', description: '菜单权限，控制菜单显示和访问', example: 'menu:user' },
+    { type: 'OTHER', description: '其他自定义权限', example: 'other:custom' },
+  ];
+
+  types.forEach(({ type, description, example }, index) => {
+    printMessage(`${index + 1}. ${type} - ${description}`, colors.bright + colors.yellow);
+    printMessage(`   示例：${example}`, colors.cyan);
+    console.log('');
+  });
+}
+
+/**
+ * 演示2：API权限控制
+ */
+async function demoApiPermissions() {
+  printSeparator('演示2：API权限控制');
+
+  printMessage('\n🔒 API权限用于控制HTTP端点的访问\n', colors.bright + colors.blue);
+
+  const apiEndpoints = [
+    { method: 'GET', path: '/api/sys/user/page', permission: 'api:user:page', description: '用户分页列表' },
+    { method: 'GET', path: '/api/sys/menu/tree', permission: 'api:menu:tree', description: '菜单树' },
+    { method: 'GET', path: '/api/sys/role/list', permission: 'api:role:list', description: '角色列表' },
+  ];
+
+  for (const endpoint of apiEndpoints) {
+    try {
+      const response = await makeRequest({
+        path: endpoint.path,
+        method: endpoint.method,
+      });
+
+      printMessage(`✅ ${endpoint.description}`, colors.green);
+      printMessage(`   接口: ${endpoint.method} ${endpoint.path}`, colors.cyan);
+      printMessage(`   权限: ${endpoint.permission}`, colors.cyan);
+      printMessage(`   状态: ${response.statusCode}`, colors.cyan);
+      console.log('');
+    } catch (error) {
+      printMessage(`❌ ${endpoint.description} 失败: ${error.message}`, colors.red);
+      console.log('');
+    }
+  }
+}
+
+/**
+ * 演示3：混合权限（API + 按钮）
+ */
+async function demoMixedPermissions() {
+  printSeparator('演示3：混合权限（API + 按钮）');
+
+  printMessage('\n🎯 混合权限支持同时使用API权限和多个按钮权限\n', colors.bright + colors.magenta);
+
+  const mixedExamples = [
+    {
+      method: 'POST',
+      path: '/api/sys/user',
+      apiPermission: 'api:user:create',
+      buttonPermissions: ['button:user:create'],
+      description: '创建用户（API权限 + 创建按钮）',
+    },
+    {
+      method: 'DELETE',
+      path: '/api/sys/user/123',
+      apiPermission: 'api:user:delete',
+      buttonPermissions: ['button:user:delete'],
+      description: '删除用户（API权限 + 删除按钮）',
+    },
+    {
+      method: 'PUT',
+      path: '/api/sys/user/456/password',
+      apiPermission: 'api:user:reset-password',
+      buttonPermissions: ['button:user:reset-password'],
+      description: '重置密码（API权限 + 重置按钮）',
+    },
+  ];
+
+  for (const example of mixedExamples) {
+    printMessage(`📌 ${example.description}`, colors.bright + colors.yellow);
+    printMessage(`   API权限: ${example.apiPermission}`, colors.cyan);
+    printMessage(`   按钮权限: ${example.buttonPermissions.join(', ')}`, colors.cyan);
+    printMessage(`   接口: ${example.method} ${example.path}`, colors.cyan);
+    console.log('');
+  }
+}
+
+/**
+ * 演示4：传统权限控制
+ */
+async function demoTraditionalPermissions() {
+  printSeparator('演示4：传统权限控制');
+
+  printMessage('\n🔐 传统权限控制支持角色和表达式权限\n', colors.bright + colors.blue);
+
+  const traditionalExamples = [
+    {
+      path: '/api/test/permissions/admin-only',
+      method: 'GET',
+      expression: "hasRole('ADMIN')",
+      description: '管理员专用接口',
+    },
+    {
+      path: '/api/test/permissions/manager-admin',
+      method: 'GET',
+      roles: ['MANAGER', 'ADMIN'],
+      description: '管理员或经理接口',
+    },
+    {
+      path: '/api/test/permissions/complex',
+      method: 'GET',
+      expression: "hasRole('ADMIN') or hasRole('MANAGER')",
+      description: '复杂表达式权限',
+    },
+  ];
+
+  for (const example of traditionalExamples) {
+    try {
+      const response = await makeRequest({
+        path: example.path,
+        method: example.method,
+      });
+
+      printMessage(`✅ ${example.description}`, colors.green);
+      if (example.expression) {
+        printMessage(`   表达式: ${example.expression}`, colors.cyan);
+      }
+      if (example.roles) {
+        printMessage(`   角色: ${example.roles.join(', ')}`, colors.cyan);
+      }
+      printMessage(`   接口: ${example.method} ${example.path}`, colors.cyan);
+      printMessage(`   状态: ${response.statusCode}`, colors.cyan);
+      console.log('');
+    } catch (error) {
+      printMessage(`❌ ${example.description} 失败: ${error.message}`, colors.red);
+      console.log('');
+    }
+  }
+}
+
+/**
+ * 演示5：权限查询功能
+ */
+async function demoPermissionQueries() {
+  printSeparator('演示5：权限查询功能');
+
+  printMessage('\n🔍 权限查询功能支持按类型和组查询\n', colors.bright + colors.blue);
+
+  const queryExamples = [
+    {
+      path: '/api/test/permissions/by-group?group=权限测试',
+      method: 'GET',
+      description: '按组查询权限',
+    },
+    {
+      path: '/api/test/permissions/by-type?type=BUTTON',
+      method: 'GET',
+      description: '按类型查询按钮权限',
+    },
+    {
+      path: '/api/test/permissions/summary',
+      method: 'GET',
+      description: '获取权限功能总结',
+    },
+  ];
+
+  for (const example of queryExamples) {
+    try {
+      const response = await makeRequest({
+        path: example.path,
+        method: example.method,
+      });
+
+      printMessage(`✅ ${example.description}`, colors.green);
+      printMessage(`   接口: ${example.method} ${example.path}`, colors.cyan);
+      printMessage(`   状态: ${response.statusCode}`, colors.cyan);
+      if (response.data && response.data.data) {
+        const data = response.data.data;
+        if (data.availableGroups) {
+          printMessage(`   可用组: ${data.availableGroups.join(', ')}`, colors.cyan);
+        }
+        if (data.availableTypes) {
+          printMessage(`   可用类型: ${data.availableTypes.join(', ')}`, colors.cyan);
+        }
+      }
+      console.log('');
+    } catch (error) {
+      printMessage(`❌ ${example.description} 失败: ${error.message}`, colors.red);
+      console.log('');
+    }
+  }
+}
+
+/**
+ * 演示6：前端权限检查
+ */
+async function demoFrontendPermissionCheck() {
+  printSeparator('演示6：前端权限检查');
+
+  printMessage('\n💻 前端权限检查组件使用示例\n', colors.bright + colors.magenta);
+
+  const frontendExamples = [
+    {
+      title: 'React 权限检查组件',
+      code: `<PermissionCheck permissionCode="api:user:create">
+  <Button onClick={() => navigate('/users')}>创建用户</Button>
+</PermissionCheck>`,
+      description: '只有有创建用户权限的用户才能看到按钮',
+    },
+    {
+      title: '条件按钮渲染',
+      code: `{hasCreatePermission && (
+  <Button onClick={() => createUser()}>创建用户</Button>
+)}`,
+      description: '根据权限状态条件渲染按钮',
+    },
+    {
+      title: '批量权限检查',
+      code: `const permissionCheck = await checkMultiplePermissions([
+  'api:user:create',
+  'api:user:delete',
+  'api:user:export',
+]);`,
+      description: '一次性检查多个权限',
+    },
+  ];
+
+  frontendExamples.forEach(({ title, code, description }, index) => {
+    printMessage(`${index + 1}. ${title}`, colors.bright + colors.yellow);
+    printMessage(`   ${description}`, colors.cyan);
+    printMessage(`   代码:`, colors.cyan);
+    console.log(`   ${colors.green}${code}${colors.reset}`);
+    console.log('');
+  });
+}
+
+/**
+ * 演示7：实际业务场景
+ */
+async function demoBusinessScenarios() {
+  printSeparator('演示7：实际业务场景');
+
+  printMessage('\n🏢 实际业务场景的权限控制应用\n', colors.bright + colors.blue);
+
+  const businessScenarios = [
+    {
+      scenario: '用户管理场景',
+      endpoints: [
+        'GET /api/sys/user/page - 查看用户列表 (api:user:page)',
+        'POST /api/sys/user - 创建用户 (api:user:create + button:user:create)',
+        'PUT /api/sys/user/:id - 更新用户 (api:user:update + button:user:update)',
+        'DELETE /api/sys/user/:id - 删除用户 (api:user:delete + button:user:delete)',
+        'PUT /api/sys/user/:id/password - 重置密码 (api:user:reset-password + button:user:reset-password)',
+      ],
+    },
+    {
+      scenario: '订单审批场景',
+      endpoints: [
+        'GET /api/orders - 查看订单列表 (api:order:read)',
+        'POST /api/orders - 创建订单 (api:order:create + button:order:create)',
+        'PUT /api/orders/:id/approve - 审批订单 (api:order:approve + button:order:approve, button:order:reject)',
+        'POST /api/orders/export - 导出订单 (api:order:export + button:order:export)',
+      ],
+    },
+    {
+      scenario: '菜单管理场景',
+      endpoints: [
+        'GET /api/sys/menu/tree - 查看菜单树 (api:menu:tree)',
+        'POST /api/sys/menu - 创建菜单 (api:menu:create + button:menu:create)',
+        'PUT /api/sys/menu/:id - 更新菜单 (api:menu:update + button:menu:update)',
+        'DELETE /api/sys/menu/:id - 删除菜单 (api:menu:delete + button:menu:delete)',
+      ],
+    },
+  ];
+
+  businessScenarios.forEach(({ scenario, endpoints }, scenarioIndex) => {
+    printMessage(`场景 ${scenarioIndex + 1}: ${scenario}`, colors.bright + colors.magenta);
+    endpoints.forEach((endpoint, index) => {
+      printMessage(`   ${index + 1}. ${endpoint}`, colors.cyan);
+    });
+    console.log('');
+  });
+}
+
+/**
+ * 主函数
+ */
+async function main() {
+  printMessage('\n🎨 Aiko Boot 权限控制功能演示\n', colors.bright + colors.green);
+
+  try {
+    // 运行所有演示
+    await demoPermissionTypes();
+    await demoApiPermissions();
+    await demoMixedPermissions();
+    await demoTraditionalPermissions();
+    await demoPermissionQueries();
+    await demoFrontendPermissionCheck();
+    await demoBusinessScenarios();
+
+    printSeparator('演示完成');
+    printMessage('\n✨ 权限控制功能演示完成！\n', colors.bright + colors.green);
+    printMessage('Aiko Boot 框架现在具备完整的细粒度权限控制能力！\n', colors.bright + colors.cyan);
+
+  } catch (error) {
+    printMessage(`\n❌ 演示过程中出现错误: ${error.message}\n`, colors.red);
+    console.error(error);
+    process.exit(1);
+  }
+}
+
+// 运行演示
+main().catch((error) => {
+  console.error('Fatal error:', error);
+  process.exit(1);
+});

package/templates/scaffold-default/packages/api/src/scripts/init-db.ts

@@ -0,0 +1,166 @@
+/**
+ * 初始化数据库表结构和默认数据
+ * 运行: pnpm init-db
+ */
+import 'reflect-metadata';
+import { fileURLToPath } from 'url';
+import { dirname, join } from 'path';
+import { mkdirSync, existsSync } from 'fs';
+import { createKyselyDatabase, getKyselyDatabase } from '@ai-partner-x/aiko-boot-starter-orm';
+import bcrypt from 'bcryptjs';
+
+const __dirname = dirname(fileURLToPath(import.meta.url));
+const dbPath = join(__dirname, '../../data/app.db');
+const dir = dirname(dbPath);
+if (!existsSync(dir)) {
+    mkdirSync(dir, { recursive: true });
+}
+
+await createKyselyDatabase({
+    type: 'sqlite',
+    filename: join(__dirname, '../../data/app.db'),
+});
+
+const db = getKyselyDatabase();
+
+// 建表
+await db.schema.createTable('sys_user').ifNotExists()
+    .addColumn('id', 'integer', (col: any) => col.primaryKey().autoIncrement())
+    .addColumn('user_name', 'varchar(50)', (col: any) => col.notNull().unique())
+    .addColumn('password_hash', 'varchar(255)', (col: any) => col.notNull())
+    .addColumn('real_name', 'varchar(50)')
+    .addColumn('email', 'varchar(100)')
+    .addColumn('phone', 'varchar(20)')
+    .addColumn('status', 'integer', (col: any) => col.notNull().defaultTo(1))
+    .addColumn('created_at', 'datetime')
+    .addColumn('updated_at', 'datetime')
+    .execute();
+
+await db.schema.createTable('sys_role').ifNotExists()
+    .addColumn('id', 'integer', (col: any) => col.primaryKey().autoIncrement())
+    .addColumn('role_code', 'varchar(50)', (col: any) => col.notNull().unique())
+    .addColumn('role_name', 'varchar(50)', (col: any) => col.notNull())
+    .addColumn('description', 'varchar(255)')
+    .addColumn('status', 'integer', (col: any) => col.notNull().defaultTo(1))
+    .addColumn('created_at', 'datetime')
+    .execute();
+
+await db.schema.createTable('sys_menu').ifNotExists()
+    .addColumn('id', 'integer', (col: any) => col.primaryKey().autoIncrement())
+    .addColumn('parent_id', 'integer', (col: any) => col.notNull().defaultTo(0))
+    .addColumn('menu_name', 'varchar(50)', (col: any) => col.notNull())
+    .addColumn('menu_type', 'integer', (col: any) => col.notNull())
+    .addColumn('path', 'varchar(255)')
+    .addColumn('component', 'varchar(255)')
+    .addColumn('permission', 'varchar(100)')
+    .addColumn('icon', 'varchar(100)')
+    .addColumn('sort_order', 'integer', (col: any) => col.notNull().defaultTo(0))
+    .addColumn('status', 'integer', (col: any) => col.notNull().defaultTo(1))
+    .execute();
+
+await db.schema.createTable('sys_user_role').ifNotExists()
+    .addColumn('id', 'integer', (col: any) => col.primaryKey().autoIncrement())
+    .addColumn('user_id', 'integer', (col: any) => col.notNull())
+    .addColumn('role_id', 'integer', (col: any) => col.notNull())
+    .execute();
+
+await db.schema.createTable('sys_role_menu').ifNotExists()
+    .addColumn('id', 'integer', (col: any) => col.primaryKey().autoIncrement())
+    .addColumn('role_id', 'integer', (col: any) => col.notNull())
+    .addColumn('menu_id', 'integer', (col: any) => col.notNull())
+    .execute();
+
+console.log('✅ 表结构创建完成');
+
+// 初始化超级管理员角色
+const roles = await db.selectFrom('sys_role').where('role_code', '=', 'SUPER_ADMIN').selectAll().execute();
+let adminRoleId: number;
+if (!roles.length) {
+    const result = await db.insertInto('sys_role')
+        .values({ role_code: 'SUPER_ADMIN', role_name: '超级管理员', description: '拥有全部权限', status: 1, created_at: new Date().toISOString() })
+        .executeTakeFirst();
+    adminRoleId = Number(result.insertId);
+    console.log('✅ 超级管理员角色创建完成');
+} else {
+    adminRoleId = roles[0].id as number;
+}
+
+// 初始化默认菜单
+const menuCount = await db.selectFrom('sys_menu').select(db.fn.count('id').as('cnt')).executeTakeFirst();
+const cntValue = menuCount && menuCount.cnt;
+if (Number(cntValue) === 0) {
+    // 系统管理目录
+    const sysDir = await db.insertInto('sys_menu')
+        .values({ parent_id: 0, menu_name: '系统管理', menu_type: 1, icon: 'Settings', sort_order: 100, status: 1 })
+        .executeTakeFirst();
+    const sysDirId = Number(sysDir.insertId);
+
+    // 用户管理菜单及其按钮权限
+    const userMenu = await db.insertInto('sys_menu')
+        .values({ parent_id: sysDirId, menu_name: '用户管理', menu_type: 2, path: '/sys/user', permission: 'sys:user:list', icon: 'User', sort_order: 1, status: 1 })
+        .executeTakeFirst();
+    const userMenuId = Number(userMenu.insertId);
+    
+    const userButtons = [
+        { parent_id: userMenuId, menu_name: '查询用户', menu_type: 3, permission: 'sys:user:query', sort_order: 1, status: 1 },
+        { parent_id: userMenuId, menu_name: '新增用户', menu_type: 3, permission: 'sys:user:add', sort_order: 2, status: 1 },
+        { parent_id: userMenuId, menu_name: '编辑用户', menu_type: 3, permission: 'sys:user:edit', sort_order: 3, status: 1 },
+        { parent_id: userMenuId, menu_name: '删除用户', menu_type: 3, permission: 'sys:user:delete', sort_order: 4, status: 1 },
+        { parent_id: userMenuId, menu_name: '重置密码', menu_type: 3, permission: 'sys:user:resetPwd', sort_order: 5, status: 1 },
+    ];
+    await db.insertInto('sys_menu').values(userButtons).execute();
+
+    // 角色管理菜单及其按钮权限
+    const roleMenu = await db.insertInto('sys_menu')
+        .values({ parent_id: sysDirId, menu_name: '角色管理', menu_type: 2, path: '/sys/role', permission: 'sys:role:list', icon: 'Role', sort_order: 2, status: 1 })
+        .executeTakeFirst();
+    const roleMenuId = Number(roleMenu.insertId);
+    
+    const roleButtons = [
+        { parent_id: roleMenuId, menu_name: '查询角色', menu_type: 3, permission: 'sys:role:query', sort_order: 1, status: 1 },
+        { parent_id: roleMenuId, menu_name: '新增角色', menu_type: 3, permission: 'sys:role:add', sort_order: 2, status: 1 },
+        { parent_id: roleMenuId, menu_name: '编辑角色', menu_type: 3, permission: 'sys:role:edit', sort_order: 3, status: 1 },
+        { parent_id: roleMenuId, menu_name: '删除角色', menu_type: 3, permission: 'sys:role:delete', sort_order: 4, status: 1 },
+    ];
+    await db.insertInto('sys_menu').values(roleButtons).execute();
+
+    // 菜单管理菜单及其按钮权限
+    const menuMenu = await db.insertInto('sys_menu')
+        .values({ parent_id: sysDirId, menu_name: '菜单管理', menu_type: 2, path: '/sys/menu', permission: 'sys:menu:list', icon: 'Menu', sort_order: 3, status: 1 })
+        .executeTakeFirst();
+    const menuMenuId = Number(menuMenu.insertId);
+    
+    const menuButtons = [
+        { parent_id: menuMenuId, menu_name: '查询菜单', menu_type: 3, permission: 'sys:menu:query', sort_order: 1, status: 1 },
+        { parent_id: menuMenuId, menu_name: '新增菜单', menu_type: 3, permission: 'sys:menu:add', sort_order: 2, status: 1 },
+        { parent_id: menuMenuId, menu_name: '编辑菜单', menu_type: 3, permission: 'sys:menu:edit', sort_order: 3, status: 1 },
+        { parent_id: menuMenuId, menu_name: '删除菜单', menu_type: 3, permission: 'sys:menu:delete', sort_order: 4, status: 1 },
+    ];
+    await db.insertInto('sys_menu').values(menuButtons).execute();
+
+    console.log('✅ 默认菜单和权限创建完成');
+
+    // 给超级管理员角色分配所有菜单
+    const allMenus = await db.selectFrom('sys_menu').select('id').execute();
+    for (const m of allMenus) {
+        await db.insertInto('sys_role_menu').values({ role_id: adminRoleId, menu_id: m.id as number }).execute();
+    }
+    console.log('✅ 超级管理员角色权限分配完成');
+}
+
+// 初始化 admin 账号
+const users = await db.selectFrom('sys_user').where('user_name', '=', 'admin').selectAll().execute();
+if (!users.length) {
+    const hashed = '$2a$10$jYriD6EK14jUM7W6H5zcleTpVbJVPORxjNXOJsnE0F7ImT0BskCW2';
+    const result = await db.insertInto('sys_user')
+        .values({ user_name: 'admin', password_hash: hashed, email: 'admin@example.com', real_name: '超级管理员', status: 1, created_at: new Date().toISOString(), updated_at: new Date().toISOString() })
+        .executeTakeFirst();
+    const adminUserId = Number(result.insertId);
+    await db.insertInto('sys_user_role').values({ user_id: adminUserId, role_id: adminRoleId }).execute();
+    console.log('✅ admin 账号创建完成 (密码: Admin@123)');
+} else {
+    console.log('ℹ️  admin 账号已存在，跳过');
+}
+
+console.log('\n🎉 数据库初始化完成！');
+process.exit(0);

package/templates/scaffold-default/packages/api/src/scripts/reset-admin-password.mjs

@@ -0,0 +1,70 @@
+#!/usr/bin/env node
+
+/**
+ * 重置admin密码为admin123
+ */
+
+import bcrypt from 'bcryptjs';
+import fs from 'fs';
+import { fileURLToPath } from 'url';
+import { dirname, join } from 'path';
+
+async function resetAdminPassword() {
+  try {
+    console.log('🔄 Resetting admin password process...');
+
+    // 删除旧的admin账号
+    const dbPath = 'data/app.db';
+    if (!fs.existsSync(dbPath)) {
+      throw new Error('Database file not found: ' + dbPath);
+    }
+    console.log('📁 Database file found:', dbPath);
+
+    // 生成admin123的密码哈希
+    const hashedPassword = await bcrypt.hash('admin123', 10);
+    console.log('🔐 Generated hash for admin123:', hashedPassword.substring(0, 20) + '...');
+
+    // 修改init-db.ts，使用新的密码哈希
+    const initDbPath = './src/scripts/init-db.ts';
+    let initDbContent = fs.readFileSync(initDbPath, 'utf-8');
+
+    // 替换密码哈希
+    initDbContent = initDbContent.replace(
+      /await bcrypt\.hash\('admin123', 10\)/g,
+      `'${hashedPassword}'`
+    );
+
+    // 写回文件
+    fs.writeFileSync(initDbPath, initDbContent, 'utf-8');
+    console.log('📝 Updated init-db.ts with new password hash');
+
+    // 重新初始化数据库
+    console.log('🔄 Re-initializing database with new password...');
+    const { execSync } = await import('child_process');
+
+    const result = execSync('node --import @swc-node/register/esm-register src/scripts/init-db.ts', {
+      cwd: process.cwd(),
+      stdio: 'inherit',
+      timeout: 30000
+    });
+
+    if (result.status === 0) {
+      console.log('✅ Database re-initialization completed!');
+      console.log('');
+      console.log('🎉 Admin password has been reset to: admin123!');
+      console.log('🎉 You can now login with: admin / admin123');
+      console.log('');
+      console.log('🔐 Please restart the server for changes to take effect.');
+    } else {
+      console.error('❌ Database initialization failed with code:', result.status);
+      console.error('Error output:', result.stderr);
+      process.exit(1);
+    }
+
+  } catch (error) {
+    console.error('❌ Error resetting admin password:', error);
+    process.exit(1);
+  }
+}
+
+resetAdminPassword();

package/templates/scaffold-default/packages/api/src/scripts/reset-password.ts

@@ -0,0 +1,31 @@
+import 'reflect-metadata';
+import { fileURLToPath } from 'url';
+import { dirname, join } from 'path';
+import { createKyselyDatabase, getKyselyDatabase } from '@ai-partner-x/aiko-boot-starter-orm';
+import bcrypt from 'bcryptjs';
+
+const __dirname = dirname(fileURLToPath(import.meta.url));
+const dbPath = join(__dirname, '../../data/app.db');
+
+await createKyselyDatabase({
+    type: 'sqlite',
+    filename: dbPath,
+});
+
+const db = getKyselyDatabase();
+
+const users = await db.selectFrom('sys_user').selectAll().execute();
+console.log('现有用户:');
+for (const u of users) {
+    console.log(`  - ${u.user_name} (status: ${u.status})`);
+}
+
+const hashed = await bcrypt.hash('admin123', 10);
+await db.updateTable('sys_user')
+    .set({ password_hash: hashed, updated_at: new Date().toISOString() })
+    .where('user_name', '=', 'admin')
+    .execute();
+
+console.log('\n✅ admin 密码已重置为: admin123');
+
+process.exit(0);