@gadmin2n/schematics 0.0.88 → 0.0.90

package/dist/lib/application/files/gadmin2-game-angle-demo/docker-compose.yml

@@ -0,0 +1,254 @@
+# =============================================================================
+# gadmin2 本地联调环境（完整版）
+# =============================================================================
+# 用途：开发者一行命令起一整套服务（PG + Temporal + Server + Worker + Web）。
+# 生产部署走 K8s（Helm chart）；本文件仅用于本地集成验证，不进 CI/CD。
+#
+# 启动流程：
+#   首次 / config/ 有变更后：
+#     docker compose --profile codegen build codegen   # 构建 codegen 中间镜像
+#     docker compose up -d --build                      # 起全套服务
+#   日常 up（codegen 镜像已存在）：
+#     docker compose up -d --build
+#   停止：   docker compose down
+#   重置：   docker compose down -v          # 连数据卷一起删，下次首启会重建 schema
+#   查看：   docker compose logs -f <service>
+#
+# 端口分配（已避免冲突）：
+#   5432  -> PostgreSQL
+#   7233  -> Temporal gRPC（Server）
+#   8000  -> NestJS Server（API）
+#   8080  -> Temporal Web UI
+#   3000  -> Web 前端（nginx，容器内 80）
+#
+# 镜像构建依赖（与 Jenkinsfile 保持一致的方案 C）：
+#   server / web 通过 ARG CODEGEN_IMAGE + FROM ${CODEGEN_IMAGE} 引用本地 codegen 镜像，
+#   compose 不支持 build-time 依赖图，因此 codegen 镜像必须**先于** web/server 构建。
+#   配置变更（config/ui/** 或 config/prisma/**）后需 rebuild codegen，否则用旧产物。
+#
+# 首次启动顺序（depends_on + healthcheck 自动编排）：
+#   1. postgres 起来 → healthy（pg_isready）
+#   2. temporal-server auto-setup 跑 schema 初始化（约 30~60s）→ healthy
+#   3. server / temporal-worker / temporal-ui 起来
+#   4. web 起来
+#
+# 提示：
+#   - 仅起 Temporal（不起 web/server/worker）请用 ./temporal/docker-compose.yml
+#   - web 是生产 nginx 镜像，不支持热更新；前端开发请直接 `cd web && yarn dev`
+# =============================================================================
+
+services:
+  # ---------------------------------------------------------------------------
+  # codegen 中间镜像（仅 build，不 run）
+  # ---------------------------------------------------------------------------
+  # 执行 `gadmin2 g prisma`，生成 web/ 与 server/ 的代码并固化到镜像内。
+  # web / server 服务通过 ARG CODEGEN_IMAGE 引用本镜像。
+  #
+  # 用法：
+  #   docker compose --profile codegen build codegen   # 仅构建，不启动
+  #
+  # 注意：profile 不为空 → 不会被默认的 `docker compose up` 自动启动。
+  codegen:
+    image: ${COMPOSE_PROJECT_NAME}-codegen:local
+    build:
+      context: .
+      dockerfile: Dockerfile.codegen
+    profiles: ["codegen"]
+    # 即使被显式启动也立即退出（保险，本服务的存在仅为 build 入口）
+    command: ["true"]
+
+  # ---------------------------------------------------------------------------
+  # PostgreSQL：业务库 + Temporal 元数据库 + Temporal visibility 库（共用同一实例）
+  # ---------------------------------------------------------------------------
+  postgres:
+    image: postgres:15-alpine
+    container_name: postgresql
+    restart: unless-stopped
+    environment:
+      POSTGRES_USER: ${POSTGRES_USER:-kavenma}
+      POSTGRES_PASSWORD: ${POSTGRES_PASSWORD:-kavenma}
+      # POSTGRES_DB 设成 postgres（默认库），实际三个业务库由 init.sql 创建
+      POSTGRES_DB: postgres
+    ports:
+      - "5432:5432"
+    volumes:
+      - pgdata:/var/lib/postgresql/data
+      - ./dev/postgres/init.sql:/docker-entrypoint-initdb.d/init.sql:ro
+    healthcheck:
+      test: ["CMD-SHELL", "pg_isready -U ${POSTGRES_USER:-kavenma} -d postgres"]
+      interval: 5s
+      timeout: 5s
+      retries: 10
+
+  # ---------------------------------------------------------------------------
+  # Temporal Server (auto-setup)：自动建 schema、起 frontend/history/matching/worker
+  # 不开 ENABLE_ES，visibility 走 PG（与本地联调最小依赖一致）
+  # ---------------------------------------------------------------------------
+  temporal-server:
+    # 生产 Helm chart 1.2.0 捆绑的 Temporal Server 是 1.31.0（见 docs/temporal-server-argocd.md），
+    # 但 Docker Hub 上 temporalio/auto-setup 镜像目前最新只到 1.29.6.1（auto-setup tag 通常滞后于 server）。
+    # 本地联调用最接近的 1.29.6.1 即可，schema 与 1.31.0 兼容。
+    image: temporalio/auto-setup:1.29.6.1
+    container_name: temporal-server
+    restart: unless-stopped
+    depends_on:
+      postgres:
+        condition: service_healthy
+    environment:
+      DB: postgres12
+      DB_PORT: 5432
+      POSTGRES_SEEDS: postgres
+      POSTGRES_USER: ${POSTGRES_USER:-kavenma}
+      POSTGRES_PWD: ${POSTGRES_PASSWORD:-kavenma}
+      DBNAME: temporal
+      VISIBILITY_DBNAME: temporal_visibility
+      DYNAMIC_CONFIG_FILE_PATH: config/dynamicconfig/development-sql.yaml
+      # 显式绑 0.0.0.0：podman rootless CNI 下 server 默认只绑容器主网卡 IP（如 10.89.x.x），
+      # 容器内 127.0.0.1:7233 连不通 → healthcheck 永远 unhealthy → worker 不启动。
+      # 设成 0.0.0.0 后 docker / podman 都可达。
+      BIND_ON_IP: 0.0.0.0
+    volumes:
+      - ./temporal/config:/etc/temporal/config/dynamicconfig
+    ports:
+      - "7233:7233"
+    healthcheck:
+      # auto-setup 镜像自带 temporal CLI；healthcheck 在容器内执行，地址用 127.0.0.1
+      test: ["CMD-SHELL", "temporal operator cluster health --address 127.0.0.1:7233 || exit 1"]
+      interval: 10s
+      timeout: 5s
+      retries: 12
+      start_period: 30s
+
+  # ---------------------------------------------------------------------------
+  # Temporal Web UI
+  # ---------------------------------------------------------------------------
+  temporal-ui:
+    image: temporalio/ui:latest
+    container_name: temporal-ui
+    restart: unless-stopped
+    depends_on:
+      temporal-server:
+        condition: service_started
+    environment:
+      TEMPORAL_ADDRESS: temporal-server:7233
+    ports:
+      - "8080:8080"
+
+  # ---------------------------------------------------------------------------
+  # Server 一次性初始化：prisma db push + seed
+  # ---------------------------------------------------------------------------
+  # 直接复用 codegen 镜像（它已含 server 全量依赖：ts-node / prisma CLI / seed/ 源码）。
+  # 业务 server 镜像走 `--production` 安装、且不复制 seed/，因此 seed 不能在 server
+  # 容器里跑；这里独立成 init 容器，跑完即退出。
+  #
+  # 幂等：
+  #   - prisma db push 多次执行无害（只补 schema 差异）
+  #   - seed 全部用 createMany skipDuplicates / upsert 风格，重复跑不会重复插
+  #
+  # 依赖：
+  #   - 必须先 `docker compose --profile codegen build codegen` 把镜像构出来
+  #   - postgres 必须 healthy（schema 写入目标）
+  #
+  # 行为：
+  #   - restart: "no" —— 一次性
+  #   - 退出码 0 时 server / temporal-worker 才会启动（service_completed_successfully）
+  server-init:
+    image: ${COMPOSE_PROJECT_NAME}-codegen:local
+    container_name: gadmin2-init
+    restart: "no"
+    depends_on:
+      postgres:
+        condition: service_healthy
+    working_dir: /app/server
+    environment:
+      DATABASE_URL: postgresql://${POSTGRES_USER:-kavenma}:${POSTGRES_PASSWORD:-kavenma}@postgres:5432/gadmin_demo?schema=public
+    command:
+      - sh
+      - -c
+      - |
+        set -e
+        echo "[server-init] prisma db push ..."
+        yarn push:db
+        echo "[server-init] seed ..."
+        yarn seed
+        echo "[server-init] done."
+
+  # ---------------------------------------------------------------------------
+  # NestJS Server（业务 API）
+  # 镜像构建依赖 codegen：先 `docker compose --profile codegen build codegen`
+  # 镜像内已 COPY server/.env，TAIHU_* / OTEL_* 等用其默认值；
+  # 这里只覆盖 docker 网络相关的连接字符串。
+  # ---------------------------------------------------------------------------
+  server:
+    image: ${COMPOSE_PROJECT_NAME}-nest-server:local
+    build:
+      context: .
+      dockerfile: Dockerfile.server
+      args:
+        CODEGEN_IMAGE: ${COMPOSE_PROJECT_NAME}-codegen:local
+    container_name: gadmin2-nest-server
+    restart: unless-stopped
+    depends_on:
+      postgres:
+        condition: service_healthy
+      server-init:
+        condition: service_completed_successfully
+      # 不等 temporal-server healthy：server 启动不强依赖 Temporal
+      temporal-server:
+        condition: service_started
+    environment:
+      DATABASE_URL: postgresql://${POSTGRES_USER:-kavenma}:${POSTGRES_PASSWORD:-kavenma}@postgres:5432/gadmin_demo?schema=public
+      TEMPORAL_ADDRESS: temporal-server:7233
+      TEMPORAL_NAMESPACE: ${TEMPORAL_NAMESPACE:-default}
+      TEMPORAL_TASK_QUEUE: ${TEMPORAL_TASK_QUEUE:-workflow-execution}
+      NODE_ENV: ${NODE_ENV:-development}
+    ports:
+      - "8000:8000"
+
+  # ---------------------------------------------------------------------------
+  # Temporal Worker（Node.js 长驻进程）
+  # ---------------------------------------------------------------------------
+  temporal-worker:
+    image: ${COMPOSE_PROJECT_NAME}-temporal-worker:local
+    build:
+      context: ./temporal/worker
+      dockerfile: Dockerfile
+    container_name: gadmin2-temporal-worker
+    restart: on-failure
+    depends_on:
+      postgres:
+        condition: service_healthy
+      server-init:
+        condition: service_completed_successfully
+      temporal-server:
+        condition: service_healthy
+    environment:
+      TEMPORAL_ADDRESS: temporal-server:7233
+      TEMPORAL_NAMESPACE: ${TEMPORAL_NAMESPACE:-default}
+      TEMPORAL_TASK_QUEUE: ${TEMPORAL_TASK_QUEUE:-workflow-execution}
+      DATABASE_URL: postgresql://${POSTGRES_USER:-kavenma}:${POSTGRES_PASSWORD:-kavenma}@postgres:5432/gadmin_demo?schema=public
+    # 无对外端口、无 health endpoint
+
+  # ---------------------------------------------------------------------------
+  # Web 前端（生产 nginx 镜像；本地仅用于完整集成验证）
+  # 镜像构建依赖 codegen：先 `docker compose --profile codegen build codegen`
+  # 开发态请用 `cd web && yarn dev`，热更新更顺手
+  # ---------------------------------------------------------------------------
+  web:
+    image: ${COMPOSE_PROJECT_NAME}-web:local
+    build:
+      context: .
+      dockerfile: Dockerfile.web
+      args:
+        CODEGEN_IMAGE: ${COMPOSE_PROJECT_NAME}-codegen:local
+        NODE_ENV: production
+    container_name: gadmin2-web
+    restart: unless-stopped
+    depends_on:
+      server:
+        condition: service_started
+    ports:
+      - "3000:80"
+
+volumes:
+  pgdata:

package/dist/lib/application/files/gadmin2-game-angle-demo/server/package.json

@@ -7,12 +7,12 @@
   "license": "UNLICENSED",
   "scripts": {
     "prebuild": "rimraf dist",
-    "build": "gadmin2 build",
+    "build": "nest build -c gadmin-cli.json",
     "format": "prettier --write \"../config/*.ts\" \"src/**/*.ts\" \"test/**/*.ts\"",
     "prepare": "cd .. && husky install",
-    "start": "dotenv -e .env.local -e .env  -- gadmin2 start",
-    "start:dev": "dotenv -e .env.local -e .env  -- gadmin2 start --watch",
-    "start:debug": "dotenv -e .env.local -e .env  -- gadmin2 start --debug --watch",
+    "start": "dotenv -e .env.local -e .env  -- nest start -c gadmin-cli.json",
+    "start:dev": "dotenv -e .env.local -e .env  -- nest start -c gadmin-cli.json --watch",
+    "start:debug": "dotenv -e .env.local -e .env  -- nest start -c gadmin-cli.json --debug --watch",
     "start:prod": "/bin/sh start-prod.sh",
     "lint": "eslint \"{src,apps,libs,test}/**/*.ts\" --fix",
     "test": "jest",
@@ -26,7 +26,7 @@
     "migrate:status": "dotenv -e .env.local -e .env  -- prisma migrate status",
     "generate": "dotenv -e .env.local -e .env  -- npx prisma generate",
     "generate:dev": "npm run migrate:dev && dotenv -e .env.local -e .env  -- npx prisma generate",
-    "postgenerate:dev": "dotenv -e .env.local -e .env  -- ts-node  scripts/sync-data-mngt-pages.ts && dotenv -e .env.local -e .env  -- ts-node scripts/sync-resources.ts",
+    "postgenerate:dev": "dotenv -e .env.local -e .env  -- ts-node seed/data-mngt.seed.ts",
     "generate:web": "dotenv -e .env.local -e .env  -- npx prisma generate --generator react",
     "generate:server": "dotenv -e .env.local -e .env  -- npx prisma generate --generator client --generator nestjs",
     "push:db": "dotenv -e .env.local -e .env  -- prisma db push --skip-generate",
@@ -46,7 +46,6 @@
     "@nestjs/schedule": "^4.0.1",
     "@nestjs/serve-static": "^4.0.1",
     "@nestjs/swagger": "^7.3.0",
-    "@temporalio/client": "^1.11.6",
     "@opentelemetry/api": "^1.9.0",
     "@opentelemetry/exporter-trace-otlp-grpc": "^0.211.0",
     "@opentelemetry/instrumentation-express": "^0.47.0",
@@ -58,6 +57,7 @@
     "@opentelemetry/semantic-conventions": "^1.39.0",
     "@prisma/client": "^6.19.0",
     "@prisma/instrumentation": "6.19.0",
+    "@temporalio/client": "^1.11.6",
     "agenda": "^6.2.5",
     "axios": "^1.13.2",
     "cache-manager": "^6.4.3",
@@ -90,6 +90,7 @@
     "@faker-js/faker": "^10.4.0",
     "@gadmin2n/prisma-nest-generator": "^0.0.46",
     "@gadmin2n/prisma-react-generator": "^0.0.60",
+    "@nestjs/cli": "^11.0.21",
     "@nestjs/testing": "^10.4.15",
     "@types/cookie-parser": "^1.4.3",
     "@types/express": "^4.17.21",

package/dist/lib/application/files/gadmin2-game-angle-demo/server/scripts/lib/page-helpers.ts

@@ -2,7 +2,7 @@
  * page-helpers.ts — 页面与权限管理的共享 DB 操作原语
  *
  * 接受 PrismaClient 作为参数，可被 CLI 脚本（page-manage.ts / permission-manage.ts）
- * 和 ../sync-data-mngt-pages.ts / seed/permissions.ts）共同调用。
+ * 和 seed/*.seed.ts（含 data-mngt.seed.ts）共同调用。
  */
 
 import { PrismaClient } from '@prisma/client';

package/dist/lib/application/files/gadmin2-game-angle-demo/server/scripts/prismaModels.ts

@@ -28,7 +28,7 @@ const PRISMA_CONFIG_DIR = path.resolve(
 
 /**
  * Prisma files that define system/permission models and must NOT be scanned.
- * These are already handled by seedPermissions().
+ * These are already handled by static seed modules (bootstrap + permission/audit/etc.).
  */
 const EXCLUDED_FILES = new Set(['system.prisma']);
 

package/dist/lib/application/files/gadmin2-game-angle-demo/server/seed/agenda.seed.ts

@@ -0,0 +1,39 @@
+import { PrismaClient } from '@prisma/client';
+import {
+  bindResourceToPage,
+  getPageResourceIds,
+  grantRoleAccess,
+  upsertPage,
+} from '../scripts/lib/page-helpers';
+
+/**
+ * Agenda 模块 seed
+ *
+ * 职责：agenda page (admin 子节点) + agenda resource + 自家 SYSTEM_ADMIN 授权。
+ * 前置：seedBootstrap 已建好 admin 与 SYSTEM_ADMIN。
+ */
+export async function seedAgendaModule(prisma: PrismaClient): Promise<void> {
+  const role = await prisma.role.findUniqueOrThrow({
+    where: { name: 'SYSTEM_ADMIN' },
+  });
+  const admin = await prisma.page.findUniqueOrThrow({
+    where: { code: 'admin' },
+  });
+
+  const page = await upsertPage(prisma, {
+    code: 'agenda',
+    name: 'agenda',
+    zhName: 'Cron Jobs',
+    enName: 'Cron Jobs',
+    sortOrder: 1020,
+    parentId: admin.id,
+  });
+  console.log(`[agenda] Page: ${page.code} (id=${page.id})`);
+
+  await bindResourceToPage(prisma, page.id, 'agenda', 'Agenda job management');
+  console.log(`[agenda] PageResource: agenda ↔ agenda`);
+
+  const resourceIds = await getPageResourceIds(prisma, page.id);
+  await grantRoleAccess(prisma, role.id, page.id, resourceIds);
+  console.log(`[agenda] Grant: SYSTEM_ADMIN → agenda`);
+}

package/dist/lib/application/files/gadmin2-game-angle-demo/server/seed/audit.seed.ts

@@ -0,0 +1,40 @@
+import { PrismaClient } from '@prisma/client';
+import {
+  bindResourceToPage,
+  getPageResourceIds,
+  grantRoleAccess,
+  upsertPage,
+} from '../scripts/lib/page-helpers';
+
+/**
+ * Audit 模块 seed
+ *
+ * 职责：audits page (admin 子节点) + audit resource + 自家 SYSTEM_ADMIN 授权。
+ * 注意：page.code 是 'audits'，但 resource.code 是 'audit'（与 backend module 一致）。
+ * 前置：seedBootstrap 已建好 admin 与 SYSTEM_ADMIN。
+ */
+export async function seedAuditModule(prisma: PrismaClient): Promise<void> {
+  const role = await prisma.role.findUniqueOrThrow({
+    where: { name: 'SYSTEM_ADMIN' },
+  });
+  const admin = await prisma.page.findUniqueOrThrow({
+    where: { code: 'admin' },
+  });
+
+  const page = await upsertPage(prisma, {
+    code: 'audits',
+    name: 'audits',
+    zhName: '审计日志',
+    enName: 'Audit Log',
+    sortOrder: 1060,
+    parentId: admin.id,
+  });
+  console.log(`[audit] Page: ${page.code} (id=${page.id})`);
+
+  await bindResourceToPage(prisma, page.id, 'audit', 'Audit logs');
+  console.log(`[audit] PageResource: audits ↔ audit`);
+
+  const resourceIds = await getPageResourceIds(prisma, page.id);
+  await grantRoleAccess(prisma, role.id, page.id, resourceIds);
+  console.log(`[audit] Grant: SYSTEM_ADMIN → audits`);
+}

package/dist/lib/application/files/gadmin2-game-angle-demo/server/seed/bootstrap.ts

@@ -0,0 +1,56 @@
+import { PrismaClient } from '@prisma/client';
+import { grantRoleAccess, upsertPage } from '../scripts/lib/page-helpers';
+
+/**
+ * Bootstrap seed — 全模块共享的最小公共集
+ *
+ * 任何模块 seed 都假设以下 3 个对象已存在：
+ *   1. SYSTEM_ADMIN 角色   —— 各模块 grant SYSTEM_ADMIN 时通过 name 查找
+ *   2. admin 顶级 page     —— 各业务模块 page 的 parentId
+ *   3. dataMngt 分组 page  —— 自动生成 CRUD 页面（data-mngt.seed.ts）的 parentId
+ *
+ * 同时把 SYSTEM_ADMIN 对 admin / dataMngt 这两个分组节点的 RolePages 也建好，
+ * 否则它们的子菜单父节点不会展开。
+ *
+ * 必须在所有模块 seed 之前运行（由 seed/index.ts 编排）。
+ * 幂等：upsert / skipDuplicates。
+ */
+export async function seedBootstrap(prisma: PrismaClient): Promise<void> {
+  // ── SYSTEM_ADMIN 角色 ──────────────────────────────────────────────────────
+  const systemAdminRole = await prisma.role.upsert({
+    where: { name: 'SYSTEM_ADMIN' },
+    update: {},
+    create: {
+      name: 'SYSTEM_ADMIN',
+      description: 'System administrator with full access',
+    },
+  });
+  console.log(`[bootstrap] Role: SYSTEM_ADMIN (id=${systemAdminRole.id})`);
+
+  // ── admin 顶级分组 page ────────────────────────────────────────────────────
+  const adminPage = await upsertPage(prisma, {
+    code: 'admin',
+    name: 'admin',
+    zhName: '系统管理',
+    enName: 'System Mgnt',
+    sortOrder: 1000,
+  });
+  console.log(`[bootstrap] Page: ${adminPage.code} (id=${adminPage.id})`);
+
+  // ── dataMngt 分组 page（自动 CRUD 菜单容器） ──────────────────────────────
+  const dataMngtPage = await upsertPage(prisma, {
+    code: 'dataMngt',
+    name: '数据管理',
+    zhName: '数据管理',
+    enName: 'Data Management',
+    sortOrder: 1000,
+    parentId: adminPage.id,
+  });
+  console.log(`[bootstrap] Page: ${dataMngtPage.code} (id=${dataMngtPage.id})`);
+
+  // ── 分组 page 的 SYSTEM_ADMIN RolePages（无 resource） ──────────────────────
+  // 分组节点本身不绑定 resource，只为让侧边栏父节点对 SYSTEM_ADMIN 可见
+  await grantRoleAccess(prisma, systemAdminRole.id, adminPage.id, []);
+  await grantRoleAccess(prisma, systemAdminRole.id, dataMngtPage.id, []);
+  console.log(`[bootstrap] RolePages: SYSTEM_ADMIN → admin, dataMngt`);
+}

package/dist/lib/application/files/gadmin2-game-angle-demo/server/seed/canvas.seed.ts

@@ -0,0 +1,39 @@
+import { PrismaClient } from '@prisma/client';
+import {
+  bindResourceToPage,
+  getPageResourceIds,
+  grantRoleAccess,
+  upsertPage,
+} from '../scripts/lib/page-helpers';
+
+/**
+ * Canvas 模块 seed
+ *
+ * 职责：canvas page (admin 子节点) + canvas resource + 自家 SYSTEM_ADMIN 授权。
+ * 前置：seedBootstrap 已建好 admin 与 SYSTEM_ADMIN。
+ */
+export async function seedCanvasModule(prisma: PrismaClient): Promise<void> {
+  const role = await prisma.role.findUniqueOrThrow({
+    where: { name: 'SYSTEM_ADMIN' },
+  });
+  const admin = await prisma.page.findUniqueOrThrow({
+    where: { code: 'admin' },
+  });
+
+  const page = await upsertPage(prisma, {
+    code: 'canvas',
+    name: 'canvas',
+    zhName: 'Canvas',
+    enName: 'Canvas',
+    sortOrder: 1010,
+    parentId: admin.id,
+  });
+  console.log(`[canvas] Page: ${page.code} (id=${page.id})`);
+
+  await bindResourceToPage(prisma, page.id, 'canvas', 'Canvas management');
+  console.log(`[canvas] PageResource: canvas ↔ canvas`);
+
+  const resourceIds = await getPageResourceIds(prisma, page.id);
+  await grantRoleAccess(prisma, role.id, page.id, resourceIds);
+  console.log(`[canvas] Grant: SYSTEM_ADMIN → canvas`);
+}

package/dist/lib/application/files/gadmin2-game-angle-demo/server/{scripts/sync-data-mngt-pages.ts → seed/data-mngt.seed.ts}

@@ -4,8 +4,8 @@ import {
   getPageResourceIds,
   grantRoleAccess,
   upsertPage,
-} from './lib/page-helpers';
-import { readPrismaModels } from './prismaModels';
+} from '../scripts/lib/page-helpers';
+import { readPrismaModels } from '../scripts/prismaModels';
 
 /**
  * Models whose Page record should be marked `isVirtual = true`,
@@ -35,7 +35,11 @@ const HIDDEN_FROM_DATA_MNGT_MENU = new Set<string>([
  *  5. Upsert a RoleResource record       (SYSTEM_ADMIN → resource, full actions)
  *
  * Safe to re-run — every write uses upsert / skipDuplicates.
- * Depends on seedPermissions() having already created SYSTEM_ADMIN role and dataMngt page.
+ *
+ * Prerequisites: SYSTEM_ADMIN role and dataMngt page must already exist
+ * (created by seedBootstrap). The standalone entry point at the bottom of
+ * this file delegates to seed/index.ts main() in case the DB is fresh, so
+ * `ts-node seed/data-mngt.seed.ts` always works.
  */
 export async function seedDataMngtPages(prisma: PrismaClient): Promise<void> {
   const models = readPrismaModels();
@@ -48,31 +52,25 @@ export async function seedDataMngtPages(prisma: PrismaClient): Promise<void> {
   }
 
   // ── Anchors ────────────────────────────────────────────────────────────────
-  // Auto-bootstrap: if seed/index.ts has never been run (e.g. fresh DB),
-  // run the full seed pipeline now (users + permissions + pages).
-  const existingRole = await prisma.role.findUnique({
+  // SYSTEM_ADMIN role and dataMngt page are created by seedBootstrap, which
+  // seed/index.ts main() always runs before this function. If they're missing,
+  // it means this function was called out of order — fail fast with a clear msg.
+  const systemAdminRole = await prisma.role.findUnique({
     where: { name: 'SYSTEM_ADMIN' },
   });
-  if (!existingRole) {
-    console.log(
-      '[seedDataMngtPages] SYSTEM_ADMIN not found — running full seed (index.ts) first…',
+  if (!systemAdminRole) {
+    throw new Error(
+      '[seedDataMngtPages] SYSTEM_ADMIN role missing. Run seedBootstrap (via `yarn seed`) first.',
     );
-    const { main } = await import('../seed/index');
-    await main();
-    // main() already calls seedDataMngtPages, so we're done.
-    return;
   }
 
-  const systemAdminRole = existingRole;
-
   const dataMngtPage = await prisma.page.findUnique({
     where: { code: 'dataMngt' },
   });
   if (!dataMngtPage) {
-    console.error(
-      '[seedDataMngtPages] dataMngt page still missing after seed. Aborting.',
+    throw new Error(
+      '[seedDataMngtPages] dataMngt page missing. Run seedBootstrap (via `yarn seed`) first.',
     );
-    return;
   }
 
   // ── Process models ─────────────────────────────────────────────────────────
@@ -128,12 +126,30 @@ export async function seedDataMngtPages(prisma: PrismaClient): Promise<void> {
 }
 
 // ─── Standalone Entry Point ───────────────────────────────────────────────────
-// Called directly by `postgenerate:dev` (via ts-node), NOT by seed/index.ts.
+// Called directly by `postgenerate:dev` (via ts-node) for incremental sync
+// after `yarn generate:dev` adds new business models. Also callable manually.
+//
+// Fresh-DB safety: if SYSTEM_ADMIN / dataMngt are missing, we delegate to
+// seed/index.ts main() which runs the full seed pipeline (which itself calls
+// seedDataMngtPages). Otherwise we just run seedDataMngtPages incrementally.
 
 if (require.main === module) {
   const prisma = new PrismaClient();
 
-  seedDataMngtPages(prisma)
+  (async () => {
+    const adminRole = await prisma.role.findUnique({
+      where: { name: 'SYSTEM_ADMIN' },
+    });
+    if (!adminRole) {
+      console.log(
+        '[seedDataMngtPages] Fresh DB detected — delegating to full seed pipeline…',
+      );
+      const { main } = await import('./index');
+      await main();
+      return;
+    }
+    await seedDataMngtPages(prisma);
+  })()
     .catch((e) => {
       console.error('[seedDataMngtPages] Fatal error:', e);
       process.exit(1);

package/dist/lib/application/files/gadmin2-game-angle-demo/server/seed/game.seed.ts

@@ -0,0 +1,44 @@
+import { PrismaClient } from '@prisma/client';
+import {
+  bindResourceToPage,
+  getPageResourceIds,
+  grantRoleAccess,
+  upsertPage,
+} from '../scripts/lib/page-helpers';
+
+/**
+ * Game 模块 seed
+ *
+ * 职责：game page (admin 子节点) + game resource + 自家 SYSTEM_ADMIN 授权。
+ * 前置：seedBootstrap 已建好 admin 与 SYSTEM_ADMIN。
+ */
+export async function seedGameModule(prisma: PrismaClient): Promise<void> {
+  const role = await prisma.role.findUniqueOrThrow({
+    where: { name: 'SYSTEM_ADMIN' },
+  });
+  const admin = await prisma.page.findUniqueOrThrow({
+    where: { code: 'admin' },
+  });
+
+  const page = await upsertPage(prisma, {
+    code: 'game',
+    name: 'game',
+    zhName: '业务管理',
+    enName: 'Business Mgnt',
+    sortOrder: 1050,
+    parentId: admin.id,
+  });
+  console.log(`[game] Page: ${page.code} (id=${page.id})`);
+
+  await bindResourceToPage(
+    prisma,
+    page.id,
+    'game',
+    'Business / Game management',
+  );
+  console.log(`[game] PageResource: game ↔ game`);
+
+  const resourceIds = await getPageResourceIds(prisma, page.id);
+  await grantRoleAccess(prisma, role.id, page.id, resourceIds);
+  console.log(`[game] Grant: SYSTEM_ADMIN → game`);
+}