@gadmin2n/schematics 0.0.88 → 0.0.90

package/dist/lib/application/files/gadmin2-game-angle-demo/server/seed/index.ts

@@ -1,16 +1,40 @@
 import { PrismaClient } from '@prisma/client';
-import { seedPermissions } from './permissions';
+import { seedAgendaModule } from './agenda.seed';
+import { seedAuditModule } from './audit.seed';
+import { seedBootstrap } from './bootstrap';
+import { seedCanvasModule } from './canvas.seed';
+import { seedDataMngtPages } from './data-mngt.seed';
+import { seedGameModule } from './game.seed';
+import { seedPermissionModule } from './permission.seed';
 import users from './users';
-import { seedNodeTypes } from './workflow-node-types';
-import { seedWorkflows } from './workflows';
+import { seedWorkflowModule } from './workflow.seed';
 
 const prisma = new PrismaClient();
 
+/**
+ * Top-level seed orchestrator.
+ *
+ * 顺序：
+ *   ① bootstrap          —— admin/dataMngt 根 page + SYSTEM_ADMIN role（全模块前置）
+ *   ② 各模块 seed         —— 每个模块自管自家 page / resource / 授权 / 业务数据
+ *   ③ data-mngt 自动 CRUD —— 扫描 config/prisma/ 业务模型生成 page/resource/grants
+ *
+ * 每个模块 seed 函数自检前置（findUniqueOrThrow），缺失即快速失败。
+ * 全部幂等，可重复运行。
+ */
 export async function main() {
   await prisma.user.createMany({ data: users, skipDuplicates: true });
-  await seedPermissions(prisma);
-  await seedNodeTypes(prisma);
-  await seedWorkflows(prisma);
+
+  await seedBootstrap(prisma);
+
+  await seedPermissionModule(prisma);
+  await seedAgendaModule(prisma);
+  await seedAuditModule(prisma);
+  await seedCanvasModule(prisma);
+  await seedGameModule(prisma);
+  await seedWorkflowModule(prisma);
+
+  await seedDataMngtPages(prisma);
 }
 
 if (require.main === module) {

package/dist/lib/application/files/gadmin2-game-angle-demo/server/seed/permission.seed.ts

@@ -0,0 +1,130 @@
+import { PrismaClient } from '@prisma/client';
+import {
+  bindResourceToPage,
+  getPageResourceIds,
+  grantRoleAccess,
+  upsertPage,
+} from '../scripts/lib/page-helpers';
+
+/**
+ * Permission 模块 seed
+ *
+ * 职责（仅本模块自家）：
+ *   1. permission 父分组 page (admin → permission)
+ *   2. 5 个 leaf page: permission_readme / user / role / page / resource
+ *   3. 7 个 resource: user / role / rolePages / roleResource / page / pageResource / resource
+ *   4. PageResource 绑定（page ↔ resource，多对多）
+ *   5. SYSTEM_ADMIN 对上述全部 page + resource 的全量授权
+ *
+ * 前置：seedBootstrap 已建好 admin 顶级 page 和 SYSTEM_ADMIN role。
+ *
+ * 多 resource 共享同一 page 的情况（如 role page UI 同时调 role + rolePages + roleResource API）
+ * 通过 resourceDefs[].pageCode 表达。
+ */
+export async function seedPermissionModule(
+  prisma: PrismaClient,
+): Promise<void> {
+  // ── 前置查找 ───────────────────────────────────────────────────────────────
+  const systemAdminRole = await prisma.role.findUniqueOrThrow({
+    where: { name: 'SYSTEM_ADMIN' },
+  });
+  const adminPage = await prisma.page.findUniqueOrThrow({
+    where: { code: 'admin' },
+  });
+
+  // ── permission 父分组 ──────────────────────────────────────────────────────
+  const permissionPage = await upsertPage(prisma, {
+    code: 'permission',
+    name: 'permission',
+    zhName: '权限管理',
+    enName: 'Permission Mgnt',
+    sortOrder: 1040,
+    parentId: adminPage.id,
+  });
+  console.log(
+    `[permission] Page: ${permissionPage.code} (id=${permissionPage.id})`,
+  );
+
+  // ── leaf pages ─────────────────────────────────────────────────────────────
+  const leafDefs = [
+    {
+      code: 'permission_readme',
+      zhName: '菜单指引',
+      enName: 'Menu Guide',
+      sortOrder: 1005,
+    },
+    { code: 'user', zhName: '用户管理', enName: 'User Mgnt', sortOrder: 1010 },
+    { code: 'role', zhName: '角色管理', enName: 'Role Mgnt', sortOrder: 1020 },
+    { code: 'page', zhName: '页面管理', enName: 'Page Mgnt', sortOrder: 1030 },
+    {
+      code: 'resource',
+      zhName: '资源管理',
+      enName: 'Resource Management',
+      sortOrder: 1040,
+    },
+  ];
+
+  const pagesByCode = new Map<string, number>();
+  pagesByCode.set(permissionPage.code, permissionPage.id);
+
+  for (const def of leafDefs) {
+    const p = await upsertPage(prisma, {
+      code: def.code,
+      name: def.code,
+      zhName: def.zhName,
+      enName: def.enName,
+      sortOrder: def.sortOrder,
+      parentId: permissionPage.id,
+    });
+    pagesByCode.set(p.code, p.id);
+    console.log(`[permission] Page: ${p.code} (id=${p.id})`);
+  }
+
+  // ── resource ↔ page 绑定 ───────────────────────────────────────────────────
+  const resourceDefs: {
+    code: string;
+    description: string;
+    pageCode: string;
+  }[] = [
+    { code: 'user', description: 'User management', pageCode: 'user' },
+    { code: 'role', description: 'Role management', pageCode: 'role' },
+    {
+      code: 'rolePages',
+      description: 'Role-page assignments',
+      pageCode: 'role',
+    },
+    {
+      code: 'roleResource',
+      description: 'Role-resource grants',
+      pageCode: 'role',
+    },
+    { code: 'page', description: 'Page / menu management', pageCode: 'page' },
+    {
+      code: 'pageResource',
+      description: 'Page-resource configuration',
+      pageCode: 'page',
+    },
+    {
+      code: 'resource',
+      description: 'Resource management',
+      pageCode: 'resource',
+    },
+  ];
+
+  for (const def of resourceDefs) {
+    const pageId = pagesByCode.get(def.pageCode);
+    if (!pageId)
+      throw new Error(`[permission] Page not found: ${def.pageCode}`);
+    await bindResourceToPage(prisma, pageId, def.code, def.description);
+    console.log(`[permission] PageResource: ${def.pageCode} ↔ ${def.code}`);
+  }
+
+  // ── SYSTEM_ADMIN 授权（page + resource） ────────────────────────────────────
+  for (const [code, pageId] of pagesByCode) {
+    const resourceIds = await getPageResourceIds(prisma, pageId);
+    await grantRoleAccess(prisma, systemAdminRole.id, pageId, resourceIds);
+    console.log(
+      `[permission] Grant: SYSTEM_ADMIN → ${code} (+${resourceIds.length} resource)`,
+    );
+  }
+}

package/dist/lib/application/files/gadmin2-game-angle-demo/server/seed/workflow-event-trigger.ts

@@ -0,0 +1,60 @@
+import { PrismaClient } from '@prisma/client';
+
+/**
+ * Outbox Pattern 触发器函数 + 性能索引
+ *
+ * 当业务表发生 INSERT/UPDATE/DELETE 时，触发器将事件写入 t_workflow_event_outbox。
+ * Worker 的 outbox-poller 定时扫描未处理事件，匹配并触发对应的 workflow。
+ *
+ * 表结构由 Prisma 模型 WorkflowEventOutbox 维护（见 config/prisma/workflow.prisma）。
+ * 本 seed 负责 Prisma 无法 declarative 维护的两个对象：
+ *   1. 通用触发器函数 notify_workflow_event() — Prisma 完全不管 PG function
+ *   2. 部分索引 idx_outbox_unprocessed — Prisma schema 不支持 WHERE 子句的 partial index
+ *
+ * 两者均幂等（CREATE OR REPLACE / IF NOT EXISTS）。
+ *
+ * 使用示例（在业务表上挂载触发器，由各业务模块自行声明）：
+ *   CREATE TRIGGER trg_order_workflow
+ *     AFTER INSERT OR UPDATE OR DELETE ON t_order
+ *     FOR EACH ROW EXECUTE FUNCTION notify_workflow_event();
+ */
+export async function seedWorkflowEventTrigger(prisma: PrismaClient) {
+  console.log('Seeding workflow event trigger function...');
+
+  await prisma.$executeRawUnsafe(`
+    CREATE OR REPLACE FUNCTION notify_workflow_event() RETURNS trigger AS $$
+    DECLARE
+      event_payload jsonb;
+      event_name text;
+    BEGIN
+      -- 拼接事件名：表名.操作 (e.g. "t_order.insert")
+      event_name := TG_TABLE_NAME || '.' || lower(TG_OP);
+
+      -- 构建 payload
+      IF (TG_OP = 'DELETE') THEN
+        event_payload = row_to_json(OLD)::jsonb;
+      ELSE
+        event_payload = row_to_json(NEW)::jsonb;
+      END IF;
+
+      -- 写入 outbox（与业务操作同一事务，保证不丢）
+      INSERT INTO t_workflow_event_outbox (event_name, payload)
+      VALUES (event_name, event_payload);
+
+      RETURN COALESCE(NEW, OLD);
+    END;
+    $$ LANGUAGE plpgsql;
+  `);
+
+  console.log('Seeding workflow outbox partial index...');
+
+  // 部分索引：只索引未处理事件，poller 扫描时索引体积保持很小，
+  // 即使 outbox 表积累几百万历史事件也不影响 poller 性能。
+  await prisma.$executeRawUnsafe(`
+    CREATE INDEX IF NOT EXISTS idx_outbox_unprocessed
+      ON t_workflow_event_outbox (created_at)
+      WHERE processed = FALSE;
+  `);
+
+  console.log('Workflow event trigger function & index seeded.');
+}

package/dist/lib/application/files/gadmin2-game-angle-demo/server/seed/workflow-node-types.ts

@@ -33,41 +33,27 @@ export const NODE_TYPES = [
     category: 'TRIGGER',
     label: 'Webhook Trigger',
     icon: 'ApiOutlined',
-    description: 'Trigger workflow via HTTP webhook',
+    description: 'Trigger workflow via HTTP webhook (HMAC-signed)',
     configSchema: {
       type: 'object',
       properties: {
-        path: { type: 'string', description: 'Webhook endpoint path' },
-        method: {
-          type: 'string',
-          enum: ['GET', 'POST', 'PUT', 'PATCH', 'DELETE'],
-          description: 'HTTP method',
-        },
-        authentication: {
+        path: {
           type: 'string',
-          enum: ['none', 'basic', 'headerAuth', 'jwt'],
-          description: 'Authentication method for incoming requests',
+          description:
+            'Webhook endpoint path segment, e.g. "order-paid". Final URL: POST /api/workflow/webhook/{path}',
         },
-        responseMode: {
+        method: {
           type: 'string',
-          enum: ['immediately', 'lastNode', 'respondNode'],
-          description: 'When to send the HTTP response',
-        },
-        responseCode: {
-          type: 'number',
-          description: 'HTTP response status code (default 200)',
+          enum: ['GET', 'POST', 'PUT', 'PATCH', 'DELETE'],
+          description: 'HTTP method the webhook accepts',
         },
-        responseBody: {
+        secret: {
           type: 'string',
-          description: 'Custom response body (JSON string)',
-        },
-        allowedOrigins: {
-          type: 'array',
-          items: { type: 'string' },
-          description: 'CORS allowed origins',
+          description:
+            'HMAC-SHA256 secret. Caller must send X-Workflow-Signature: sha256=HEX(HMAC(secret, "{ts}.{rawBody}")) and X-Workflow-Timestamp.',
         },
       },
-      required: ['path', 'method'],
+      required: ['path', 'method', 'secret'],
     },
     inputSchema: {
       type: 'object',

package/dist/lib/application/files/gadmin2-game-angle-demo/server/seed/workflow.seed.ts

@@ -0,0 +1,108 @@
+import { PrismaClient } from '@prisma/client';
+import {
+  bindResourceToPage,
+  getPageResourceIds,
+  grantRoleAccess,
+  upsertPage,
+} from '../scripts/lib/page-helpers';
+import { seedWorkflowEventTrigger } from './workflow-event-trigger';
+import { seedNodeTypes } from './workflow-node-types';
+import { seedWorkflows } from './workflows';
+
+/**
+ * Workflow 模块 seed
+ *
+ * 一站式负责 workflow 模块所有 seed：
+ *   1. 菜单结构：workflow 父分组 + 2 个 leaf (workflow_list / workflow_node_instance)
+ *   2. resource: workflow / workflowNodeInstance
+ *   3. PageResource 绑定与 SYSTEM_ADMIN 授权
+ *   4. 业务数据：node-types / workflows / event-trigger function & index
+ *
+ * 业务数据 seed 函数仍来自 ./workflow-{node-types,workflows,event-trigger}.ts
+ * （文件较大，保持独立但只被本入口 import，不再由 seed/index.ts 直接调用）。
+ *
+ * 前置：seedBootstrap 已建好 admin 与 SYSTEM_ADMIN。
+ */
+export async function seedWorkflowModule(prisma: PrismaClient): Promise<void> {
+  const role = await prisma.role.findUniqueOrThrow({
+    where: { name: 'SYSTEM_ADMIN' },
+  });
+  const admin = await prisma.page.findUniqueOrThrow({
+    where: { code: 'admin' },
+  });
+
+  // ── 父分组 page ────────────────────────────────────────────────────────────
+  const workflowPage = await upsertPage(prisma, {
+    code: 'workflow',
+    name: 'workflow',
+    zhName: 'Workflow',
+    enName: 'Workflow',
+    sortOrder: 1030,
+    parentId: admin.id,
+  });
+  console.log(`[workflow] Page: ${workflowPage.code} (id=${workflowPage.id})`);
+
+  // ── leaf pages + resource 绑定 ─────────────────────────────────────────────
+  const leafDefs: {
+    code: string;
+    zhName: string;
+    enName: string;
+    sortOrder: number;
+    resourceCode: string;
+    resourceDescription: string;
+  }[] = [
+    {
+      code: 'workflow_list',
+      zhName: '工作流列表',
+      enName: 'List',
+      sortOrder: 1,
+      resourceCode: 'workflow',
+      resourceDescription: 'Workflow management',
+    },
+    {
+      code: 'workflow_node_instance',
+      zhName: 'Node模版',
+      enName: 'Node Instance',
+      sortOrder: 2,
+      resourceCode: 'workflowNodeInstance',
+      resourceDescription: 'Workflow node instance management',
+    },
+  ];
+
+  const allPages = [{ id: workflowPage.id, code: workflowPage.code }];
+
+  for (const def of leafDefs) {
+    const p = await upsertPage(prisma, {
+      code: def.code,
+      name: def.code,
+      zhName: def.zhName,
+      enName: def.enName,
+      sortOrder: def.sortOrder,
+      parentId: workflowPage.id,
+    });
+    allPages.push({ id: p.id, code: p.code });
+    console.log(`[workflow] Page: ${p.code} (id=${p.id})`);
+
+    await bindResourceToPage(
+      prisma,
+      p.id,
+      def.resourceCode,
+      def.resourceDescription,
+    );
+    console.log(`[workflow] PageResource: ${def.code} ↔ ${def.resourceCode}`);
+  }
+
+  // ── SYSTEM_ADMIN 授权 ──────────────────────────────────────────────────────
+  for (const p of allPages) {
+    const resourceIds = await getPageResourceIds(prisma, p.id);
+    await grantRoleAccess(prisma, role.id, p.id, resourceIds);
+    console.log(
+      `[workflow] Grant: SYSTEM_ADMIN → ${p.code} (+${resourceIds.length} resource)`,
+    );
+  }
+
+  // ── 业务数据 ───────────────────────────────────────────────────────────────
+  await seedNodeTypes(prisma);
+  await seedWorkflows(prisma);
+  await seedWorkflowEventTrigger(prisma);
+}

package/dist/lib/application/files/gadmin2-game-angle-demo/server/src/main.ts

@@ -36,6 +36,7 @@ JSON.stringify = (value: any, _: any, space: string | number | undefined) => {
 async function bootstrap() {
   const app = await NestFactory.create(AppModule, {
     cors: true,
+    rawBody: true, // Required for HMAC verification on /api/workflow/webhook/:path
   });
   // 添加全局前缀 '/api'
   app.setGlobalPrefix(`${process.env.DEPLOY_NAME || ''}/api`);

package/dist/lib/application/files/gadmin2-game-angle-demo/server/src/modules/agendaJob/agendaJob.controller.spec.ts

@@ -1,15 +1,44 @@
+/// <reference types="jest" />
+import { ConfigService } from '@nestjs/config';
 import { Test, TestingModule } from '@nestjs/testing';
+import { WINSTON_MODULE_PROVIDER } from 'nest-winston';
 import { AgendaJobController } from './agendaJob.controller';
 import { AgendaJobService } from './agendaJob.service';
 
+// Mock AgendaJobService：用空对象屏蔽真实 Service 的依赖（PrismaService 等），
+// 避免 NestJS 在测试模块编译时去解析 Service 的构造参数。
+const mockAgendaJobService = {};
+
+// Mock ConfigService
+const mockConfigService = {
+  get: jest.fn(),
+};
+
+// Mock Logger
+const mockLogger = {
+  child: jest.fn().mockReturnThis(),
+  info: jest.fn(),
+  error: jest.fn(),
+  warn: jest.fn(),
+  debug: jest.fn(),
+};
+
 describe('AgendaJobController', () => {
   let controller: AgendaJobController;
 
   beforeEach(async () => {
     const module: TestingModule = await Test.createTestingModule({
       controllers: [AgendaJobController],
-      providers: [AgendaJobService],
-    }).compile();
+      providers: [
+        { provide: AgendaJobService, useValue: mockAgendaJobService },
+        { provide: ConfigService, useValue: mockConfigService },
+        { provide: WINSTON_MODULE_PROVIDER, useValue: mockLogger },
+      ],
+    })
+      // 兜底：自动 mock 任何未显式提供的依赖
+      // （例如 ACGuard 内部的 __roles_builder__ token）
+      .useMocker(() => ({}))
+      .compile();
 
     controller = module.get<AgendaJobController>(AgendaJobController);
   });

package/dist/lib/application/files/gadmin2-game-angle-demo/server/src/modules/audit/audit.controller.spec.ts

@@ -1,15 +1,44 @@
+/// <reference types="jest" />
+import { ConfigService } from '@nestjs/config';
 import { Test, TestingModule } from '@nestjs/testing';
+import { WINSTON_MODULE_PROVIDER } from 'nest-winston';
 import { AuditController } from './audit.controller';
 import { AuditService } from './audit.service';
 
+// Mock AuditService：用空对象屏蔽真实 Service 的依赖（PrismaService 等），
+// 避免 NestJS 在测试模块编译时去解析 Service 的构造参数。
+const mockAuditService = {};
+
+// Mock ConfigService
+const mockConfigService = {
+  get: jest.fn(),
+};
+
+// Mock Logger
+const mockLogger = {
+  child: jest.fn().mockReturnThis(),
+  info: jest.fn(),
+  error: jest.fn(),
+  warn: jest.fn(),
+  debug: jest.fn(),
+};
+
 describe('AuditController', () => {
   let controller: AuditController;
 
   beforeEach(async () => {
     const module: TestingModule = await Test.createTestingModule({
       controllers: [AuditController],
-      providers: [AuditService],
-    }).compile();
+      providers: [
+        { provide: AuditService, useValue: mockAuditService },
+        { provide: ConfigService, useValue: mockConfigService },
+        { provide: WINSTON_MODULE_PROVIDER, useValue: mockLogger },
+      ],
+    })
+      // 兜底：自动 mock 任何未显式提供的依赖
+      // （例如 ACGuard 内部的 __roles_builder__ token）
+      .useMocker(() => ({}))
+      .compile();
 
     controller = module.get<AuditController>(AuditController);
   });