@gadmin2n/schematics 0.0.63 → 0.0.65

package/dist/lib/application/files/gadmin2-game-angle-demo/server/seed/seedDataMngtPages.ts

@@ -0,0 +1,258 @@
+import { PrismaClient } from '@prisma/client';
+import * as fs from 'fs';
+import * as path from 'path';
+
+const FULL_ACTIONS = ['createAny', 'readAny', 'updateAny', 'deleteAny'];
+
+/**
+ * Path to config/prisma/ — two levels up from server/seed/
+ * (project-root/config/prisma/)
+ */
+const PRISMA_CONFIG_DIR = path.resolve(__dirname, '..', '..', 'config', 'prisma');
+
+/**
+ * Prisma files that define system/permission models and must NOT be scanned.
+ * These are already handled by seedPermissions().
+ */
+const EXCLUDED_FILES = new Set(['system.prisma']);
+
+// ─── Name Converters ──────────────────────────────────────────────────────────
+
+/** PascalCase → camelCase  (e.g. "Event" → "event", "ITActivityDay" → "iTActivityDay") */
+function toCamelCase(str: string): string {
+  return str.charAt(0).toLowerCase() + str.slice(1);
+}
+
+/**
+ * PascalCase → kebab-case
+ *   "Event"         → "event"
+ *   "ITActivityDay" → "it-activity-day"
+ *   "GameList"      → "game-list"
+ */
+function toKebabCase(str: string): string {
+  return str
+    // Insert hyphen between a lowercase/digit and an uppercase letter
+    .replace(/([a-z0-9])([A-Z])/g, '$1-$2')
+    // Insert hyphen between a run of uppercase letters and an uppercase+lowercase pair
+    .replace(/([A-Z]+)([A-Z][a-z])/g, '$1-$2')
+    .toLowerCase();
+}
+
+// ─── Prisma File Parser ───────────────────────────────────────────────────────
+
+interface ModelInfo {
+  /** PascalCase — original model name, e.g. "Event" */
+  name: string;
+  /** camelCase  — used as page.code / resource.code, e.g. "event" */
+  code: string;
+  /** kebab-case — used in URL path segment, e.g. "event" */
+  slug: string;
+}
+
+/**
+ * Extract model names from a single .prisma file content.
+ * Skips models annotated with `/// @IgnoreReactCode`.
+ */
+function extractModels(content: string): ModelInfo[] {
+  const models: ModelInfo[] = [];
+  const lines = content.split('\n');
+
+  for (let i = 0; i < lines.length; i++) {
+    const modelMatch = lines[i].match(/^model\s+(\w+)\s*\{/);
+    if (!modelMatch) continue;
+
+    const modelName = modelMatch[1];
+
+    // Collect consecutive `///` comment lines immediately above this model declaration
+    const annotations: string[] = [];
+    let j = i - 1;
+    while (j >= 0 && lines[j].trim().startsWith('///')) {
+      annotations.push(lines[j]);
+      j--;
+    }
+
+    // Skip models that explicitly opt out of frontend code generation
+    if (annotations.some((a) => a.includes('@IgnoreReactCode'))) {
+      console.log(`[seedDataMngtPages]   Skipping ${modelName} (@IgnoreReactCode)`);
+      continue;
+    }
+
+    models.push({
+      name: modelName,
+      code: toCamelCase(modelName),
+      slug: toKebabCase(modelName),
+    });
+  }
+
+  return models;
+}
+
+/**
+ * Scan all non-excluded .prisma files and collect model definitions.
+ */
+function readPrismaModels(): ModelInfo[] {
+  if (!fs.existsSync(PRISMA_CONFIG_DIR)) {
+    console.warn(`[seedDataMngtPages] Prisma config directory not found: ${PRISMA_CONFIG_DIR}`);
+    return [];
+  }
+
+  const files = fs
+    .readdirSync(PRISMA_CONFIG_DIR)
+    .filter((f) => f.endsWith('.prisma') && !EXCLUDED_FILES.has(f))
+    .sort(); // deterministic order across runs
+
+  const allModels: ModelInfo[] = [];
+  for (const file of files) {
+    const content = fs.readFileSync(path.join(PRISMA_CONFIG_DIR, file), 'utf-8');
+    const models = extractModels(content);
+    allModels.push(...models);
+    console.log(
+      `[seedDataMngtPages] Scanned ${file}: models=[${models.map((m) => m.name).join(', ') || '(none)'}]`,
+    );
+  }
+
+  return allModels;
+}
+
+// ─── Main Seed Function ───────────────────────────────────────────────────────
+
+/**
+ * For every non-system Prisma model found in config/prisma/ (excluding system.prisma):
+ *
+ *  1. Upsert a Resource record           (resource.code = camelCase model name)
+ *  2. Upsert a Page record               (parent = dataMngt, path = /admin/data-mngt/<slug>)
+ *  3. Upsert a PageResource link         (page ↔ resource, full actions)
+ *  4. Upsert a RolePages record          (SYSTEM_ADMIN → page)
+ *  5. Upsert a RoleResource record       (SYSTEM_ADMIN → resource, full actions)
+ *
+ * Safe to re-run — every write uses upsert / skipDuplicates.
+ * Depends on seedPermissions() having already created SYSTEM_ADMIN role and dataMngt page.
+ */
+export async function seedDataMngtPages(prisma: PrismaClient): Promise<void> {
+  const models = readPrismaModels();
+
+  if (models.length === 0) {
+    console.log('[seedDataMngtPages] No non-system models found — nothing to seed.');
+    return;
+  }
+
+  // ── Anchors ────────────────────────────────────────────────────────────────
+  // Auto-bootstrap: if seed/index.ts has never been run (e.g. fresh DB),
+  // run the full seed pipeline now (users + permissions + pages).
+  const existingRole = await prisma.role.findUnique({ where: { name: 'SYSTEM_ADMIN' } });
+  if (!existingRole) {
+    console.log('[seedDataMngtPages] SYSTEM_ADMIN not found — running full seed (index.ts) first…');
+    const { main } = await import('./index');
+    await main();
+    // main() already calls seedDataMngtPages, so we're done.
+    return;
+  }
+
+  const systemAdminRole = existingRole;
+
+  const dataMngtPage = await prisma.page.findUnique({ where: { code: 'dataMngt' } });
+  if (!dataMngtPage) {
+    console.error('[seedDataMngtPages] dataMngt page still missing after seed. Aborting.');
+    return;
+  }
+
+  // ── Process models ─────────────────────────────────────────────────────────
+  for (const [index, model] of models.entries()) {
+    console.log(`[seedDataMngtPages] ── ${model.name} ──`);
+
+    // 1. Resource
+    const resource = await prisma.resource.upsert({
+      where: { code: model.code },
+      update: {}, // preserve manual edits (name / description)
+      create: {
+        code: model.code,
+        name: model.code,
+        description: `${model.name} resource (auto-generated by seedDataMngtPages)`,
+        isCommonResource: false,
+      },
+    });
+    console.log(`[seedDataMngtPages]   Resource upserted: ${resource.code} (id=${resource.id})`);
+
+    // 2. Page  (child of dataMngt)
+    const pagePath = `/admin/data-mngt/${model.slug}`;
+    const page = await prisma.page.upsert({
+      where: { code: model.code },
+      update: {
+        // Only sync the route path — must stay in step with the model name.
+        // Everything else (name, sortOrder, parentId) is left for the user to manage.
+        path: pagePath,
+      },
+      create: {
+        code: model.code,
+        name: model.name,
+        zhName: model.name,
+        enName: model.name,
+        path: pagePath,
+        isVirtual: false,
+        sortOrder: 2000 + index * 10,
+        parentId: dataMngtPage.id,
+      },
+    });
+    console.log(
+      `[seedDataMngtPages]   Page upserted: ${page.code} → ${pagePath} (id=${page.id})`,
+    );
+
+    // 3. PageResource
+    await prisma.pageResource.upsert({
+      where: {
+        pageId_resourceId: { pageId: page.id, resourceId: resource.id },
+      },
+      update: { actions: FULL_ACTIONS },
+      create: {
+        pageId: page.id,
+        resourceId: resource.id,
+        actions: FULL_ACTIONS,
+      },
+    });
+    console.log(
+      `[seedDataMngtPages]   PageResource upserted: page(${page.id}) ↔ resource(${resource.id})`,
+    );
+
+    // 4. RolePages — SYSTEM_ADMIN can see this page in the menu
+    await prisma.rolePages.upsert({
+      where: {
+        roleId_pageId: { roleId: systemAdminRole.id, pageId: page.id },
+      },
+      update: {},
+      create: { roleId: systemAdminRole.id, pageId: page.id },
+    });
+    console.log(`[seedDataMngtPages]   RolePages upserted: SYSTEM_ADMIN → ${page.code}`);
+
+    // 5. RoleResource — SYSTEM_ADMIN has full API access to this resource
+    await prisma.roleResource.upsert({
+      where: {
+        roleId_resourceId: { roleId: systemAdminRole.id, resourceId: resource.id },
+      },
+      update: {},
+      create: {
+        roleId: systemAdminRole.id,
+        resourceId: resource.id,
+        actions: FULL_ACTIONS,
+      },
+    });
+    console.log(`[seedDataMngtPages]   RoleResource upserted: SYSTEM_ADMIN → ${resource.code}`);
+  }
+
+  console.log(
+    `[seedDataMngtPages] ✅ Done. Seeded ${models.length} model(s) under /admin/data-mngt.`,
+  );
+}
+
+// ─── Standalone Entry Point ───────────────────────────────────────────────────
+// Called directly by `postgenerate:dev` (via ts-node), NOT by seed/index.ts.
+
+if (require.main === module) {
+  const prisma = new PrismaClient();
+
+  seedDataMngtPages(prisma)
+    .catch((e) => {
+      console.error('[seedDataMngtPages] Fatal error:', e);
+      process.exit(1);
+    })
+    .finally(() => prisma.$disconnect());
+}

package/dist/lib/application/files/gadmin2-game-angle-demo/server/seed/users.ts

@@ -0,0 +1,7 @@
+export default [
+  { userid: 'junrujrwang', username: 'junrujrwang', roles: '["SYSTEM_ADMIN"]' },
+  { userid: 'kavenma', username: 'kavenma', roles: '["SYSTEM_ADMIN"]' },
+  { userid: 'jasonlan', username: 'jasonlan', roles: '["SYSTEM_ADMIN"]' },
+  { userid: 'davywang', username: 'davywang', roles: '["SYSTEM_ADMIN"]' },
+  { userid: 'ypengxu', username: 'ypengxu', roles: '["SYSTEM_ADMIN"]' },
+];

package/dist/lib/application/files/gadmin2-game-angle-demo/server/src/alias.config.ts

@@ -0,0 +1,7 @@
+const moduleAlias = require('module-alias');
+import { join } from 'path';
+
+// 注册别名（与 tsconfig.json 保持一致）
+moduleAlias.addAliases({
+  '@': join(__dirname, '.'), // 指向 src 目录
+});

package/dist/lib/application/files/gadmin2-game-angle-demo/server/src/app.controller.ts

@@ -1,7 +1,30 @@
 import { UserType } from '@gadmin2n/nest-common';
-import { Controller, Get, Req, Res } from '@nestjs/common';
-import { ApiOkResponse, ApiProperty } from '@nestjs/swagger';
-import { Request } from 'express';
+import { CacheInterceptor, CacheTTL } from '@nestjs/cache-manager';
+import {
+  BadRequestException,
+  Body,
+  Controller,
+  Get,
+  Inject,
+  Post,
+  Query,
+  Req,
+  Res,
+  UseInterceptors,
+} from '@nestjs/common';
+import {
+  ApiOkResponse,
+  ApiOperation,
+  ApiProperty,
+  ApiQuery,
+} from '@nestjs/swagger';
+import { trace } from '@opentelemetry/api';
+import { Request, Response } from 'express';
+import { UseRoles } from 'nest-access-control';
+import { WINSTON_MODULE_PROVIDER } from 'nest-winston';
+import { PrismaService } from 'nestjs-prisma';
+import * as path from 'path';
+import { Logger } from 'winston';
 import { AppService } from './app.service';
 import { AllowUnauthorizedRequest } from './lib/auth.guard';
 
@@ -14,25 +37,77 @@ class UserInfo {
 }
 @Controller()
 export class AppController {
-  constructor(private readonly appService: AppService) {}
-
-  @Get()
-  index(@Res() res) {
-    res.status(302).redirect('/dashboard');
+  constructor(
+    private readonly appService: AppService,
+    private readonly prisma: PrismaService,
+    @Inject(WINSTON_MODULE_PROVIDER) private readonly logger: Logger,
+  ) {
+    this.logger = this.logger.child({
+      file: path.basename(__filename),
+    });
   }
 
-  @Get('/userinfo')
+  @Get('userinfo')
   @ApiOkResponse({ type: UserInfo })
   userInfo(@Req() request: Request & { user: UserType }) {
     return request?.user || { userid: '', username: '' };
   }
 
-  @Get('/hello')
+  @Get('hello')
   hello(): string {
+    this.logger.info('hello');
     return this.appService.getHello();
   }
 
-  @Get('/login-callback')
+  /**
+   * 调试端点：验证 Prisma OpenTelemetry tracing 是否正常工作
+   * 调用后查看 APM 中是否有 prisma:client:* 和 prisma:engine:* spans
+   */
+  @Get('debug/tracing')
+  @AllowUnauthorizedRequest()
+  @ApiOperation({ summary: '调试 Prisma tracing' })
+  async debugTracing() {
+    const globalAny = global as any;
+    const currentSpan = trace.getActiveSpan();
+    const spanContext = currentSpan?.spanContext();
+
+    // 执行一个简单的 Prisma 查询来触发 tracing
+    const userCount = await this.prisma.user.count();
+
+    return {
+      message: 'Prisma tracing debug endpoint',
+      tracerProvider: trace.getTracerProvider()?.constructor?.name,
+      currentSpan: {
+        traceId: spanContext?.traceId,
+        spanId: spanContext?.spanId,
+        traceFlags: spanContext?.traceFlags,
+        sampled: spanContext?.traceFlags === 1,
+      },
+      prismaInstrumentation: {
+        PRISMA_INSTRUMENTATION: !!globalAny.PRISMA_INSTRUMENTATION,
+        V6_PRISMA_INSTRUMENTATION: !!globalAny.V6_PRISMA_INSTRUMENTATION,
+        helperEnabled:
+          globalAny.PRISMA_INSTRUMENTATION?.helper?.isEnabled() ?? false,
+      },
+      testQuery: {
+        userCount,
+      },
+      env: {
+        OTEL_SERVICE_NAME: process.env.OTEL_SERVICE_NAME,
+        OTEL_EXPORTER_OTLP_ENDPOINT: process.env.OTEL_EXPORTER_OTLP_ENDPOINT,
+      },
+    };
+  }
+
+  @UseInterceptors(CacheInterceptor)
+  @CacheTTL(10 * 1000) //10 seconds
+  @Get('get-number')
+  getNumber(): number {
+    // 随机生成一个0-100之间的数字
+    return Math.floor(Math.random() * 100);
+  }
+
+  @Get('login-callback')
   @AllowUnauthorizedRequest()
   loginCallback(@Req() request: Request, @Res() res) {
     return this.appService.loginCallback(request, res);
@@ -49,4 +124,69 @@ export class AppController {
   logout(@Req() request: Request, @Res() res) {
     return this.appService.logout(request, res);
   }
+
+  // ============ External Page 路由 ============
+
+  @Get('gtdr-page/sign-url')
+  @UseRoles({
+    resource: 'gtdrReport',
+    action: 'create',
+    possession: 'any',
+  })
+  @ApiOperation({ summary: '获取带签名的外部页面访问URL，302重定向' })
+  @ApiQuery({ name: 'domain', required: true, description: 'Domain 编码' })
+  @ApiQuery({ name: 'pageCode', required: true, description: '页面编码' })
+  getExternalPageSignedUrl(
+    @Query('domain') domain: string,
+    @Query('pageCode') pageCode: string,
+    @Req() req: Request & { user?: UserType },
+    @Res() res: Response,
+  ): void {
+    if (!domain) {
+      throw new BadRequestException('domain is required');
+    }
+    if (!pageCode) {
+      throw new BadRequestException('pageCode is required');
+    }
+
+    const userid = req.user?.userid || 'anonymous';
+
+    this.logger.info(
+      `external_page_sign_url_request - 请求签名URL - userid: ${userid}, domain: ${domain}, pageCode: ${pageCode}`,
+    );
+
+    const { url } = this.appService.generateExternalPageSignedUrl(
+      domain,
+      pageCode,
+      userid,
+    );
+    res.redirect(302, url);
+  }
+
+  @Post('external-page/verify')
+  @ApiOperation({ summary: '验证外部页面签名（用于测试）' })
+  verifyExternalPageSignature(
+    @Body()
+    body: {
+      domain: string;
+      pageCode: string;
+      userid: string;
+      timestamp: string;
+      signature: string;
+    },
+  ): { valid: boolean; reason?: string } {
+    const { domain, pageCode, userid, timestamp, signature } = body;
+
+    if (!domain || !pageCode || !userid || !timestamp || !signature) {
+      throw new BadRequestException('Missing required parameters');
+    }
+
+    return this.appService.verifyExternalPageSignature(
+      domain,
+      pageCode,
+      userid,
+      timestamp,
+      signature,
+    );
+  }
 }

package/dist/lib/application/files/gadmin2-game-angle-demo/server/src/app.module.ts

@@ -1,6 +1,7 @@
 import { Module } from '@nestjs/common';
 import { ConfigModule, ConfigService } from '@nestjs/config';
 // import { ScheduleModule } from '@nestjs/schedule';
+import { CacheModule } from '@nestjs/cache-manager';
 import { AccessControlModule } from 'nest-access-control';
 import {
   // utilities as nestWinstonModuleUtilities,
@@ -9,17 +10,21 @@ import {
 import { PrismaModule } from 'nestjs-prisma';
 import * as winston from 'winston';
 import config from '../config';
-import { roles as appRoles } from '../config/ac.config';
 import { AppController } from './app.controller';
 import { AppService } from './app.service';
 import modules from './modules';
 
+import { ScheduleModule } from '@nestjs/schedule';
 import { ServeStaticModule } from '@nestjs/serve-static';
 import { join } from 'path';
+import { LogFormat } from './lib/logger';
+import { RoleModule } from './modules/role/role.module';
+import { RoleService } from './modules/role/role.service';
+import { RolesRefresherService } from './modules/role/roles-refresher.service';
 
 @Module({
   imports: [
-    // ScheduleModule.forRoot(),
+    ScheduleModule.forRoot(),
 
     ServeStaticModule.forRoot({
       rootPath: join(__dirname, '..', 'www'),
@@ -28,7 +33,17 @@ import { join } from 'path';
 
     ConfigModule.forRoot({ isGlobal: true, load: [config] }),
 
-    AccessControlModule.forRoles(appRoles),
+    AccessControlModule.forRootAsync({
+      imports: [
+        /* Any modules providing RoleService */
+        RoleModule,
+      ],
+      inject: [RoleService],
+      useFactory: async (roleService: RoleService) => {
+        const rolesData = await roleService.getBuilder(); // Fetch roles from DB
+        return rolesData;
+      },
+    }),
 
     WinstonModule.forRootAsync({
       useFactory: (configService: ConfigService) => {
@@ -37,14 +52,7 @@ import { join } from 'path';
           level: loggerConfig.level,
           transports: [
             new winston.transports.Console({
-              format: winston.format.combine(
-                // nestWinstonModuleUtilities.format.nestLike(),
-                winston.format.splat(),
-                winston.format.timestamp(),
-                // winston.format.ms(),
-                winston.format.json(),
-                // nestWinstonModuleUtilities.format.nestLike('MyApp', { prettyPrint: true }),
-              ),
+              format: LogFormat,
             }),
           ],
         };
@@ -58,7 +66,10 @@ import { join } from 'path';
         const prismaConfig = configService.get('prisma');
         return {
           prismaOptions: {
-            log: prismaConfig.log,
+            log:
+              process.env.NODE_ENV === 'development'
+                ? prismaConfig.log
+                : ['warn', 'error'],
           },
           explicitConnect: prismaConfig.explicit,
         };
@@ -66,10 +77,15 @@ import { join } from 'path';
       inject: [ConfigService],
     }),
 
+    CacheModule.register({
+      isGlobal: true,
+      ttl: 5 * 60 * 1000, // 5 minutes
+    }),
+
     ...modules,
   ],
 
   controllers: [AppController],
-  providers: [AppService],
+  providers: [AppService, RoleService, RolesRefresherService],
 })
 export class AppModule {}