@h-ai/cli 0.1.0-alpha.10

package/templates/features/iam/routes-admin/(auth)/auth/login/+page.svelte.hbs

@@ -0,0 +1,98 @@
+{{!-- Admin 登录页面 --}}
+<script lang="ts">
+  /**
+   * 登录页面
+   */
+{{#if hasI18n}}
+  import * as m from '$lib/paraglide/messages'
+{{/if}}
+
+  let username = $state('')
+  let password = $state('')
+  let error = $state('')
+  let loading = $state(false)
+
+  async function handleLogin() {
+    error = ''
+    loading = true
+    try {
+      const res = await fetch('/api/auth/login', {
+        method: 'POST',
+        headers: { 'Content-Type': 'application/json' },
+        body: JSON.stringify({ username, password }),
+      })
+      const data = await res.json()
+      if (data.success) {
+        window.location.href = '/admin'
+      } else {
+{{#if hasI18n}}
+        error = data.error?.message || m.auth_login_failed()
+{{else}}
+        error = data.error?.message || '登录失败'
+{{/if}}
+      }
+    } catch {
+{{#if hasI18n}}
+      error = m.auth_error_network()
+{{else}}
+      error = '网络错误'
+{{/if}}
+    } finally {
+      loading = false
+    }
+  }
+</script>
+
+<svelte:head>
+{{#if hasI18n}}
+  <title>{m.auth_login_title()}</title>
+{{else}}
+  <title>登录</title>
+{{/if}}
+</svelte:head>
+
+{{#if hasI18n}}
+<h2 class="card-title justify-center mb-4">{m.auth_login_title()}</h2>
+{{else}}
+<h2 class="card-title justify-center mb-4">登录</h2>
+{{/if}}
+
+{#if error}
+  <div class="alert alert-error mb-4">
+    <span>{error}</span>
+  </div>
+{/if}
+
+<form onsubmit={(e) => { e.preventDefault(); handleLogin() }} class="space-y-4">
+  <div class="form-control">
+{{#if hasI18n}}
+    <label class="label" for="username"><span class="label-text">{m.auth_label_username()}</span></label>
+{{else}}
+    <label class="label" for="username"><span class="label-text">用户名</span></label>
+{{/if}}
+    <input id="username" type="text" class="input input-bordered w-full" bind:value={username} required />
+  </div>
+  <div class="form-control">
+{{#if hasI18n}}
+    <label class="label" for="password"><span class="label-text">{m.auth_label_password()}</span></label>
+{{else}}
+    <label class="label" for="password"><span class="label-text">密码</span></label>
+{{/if}}
+    <input id="password" type="password" class="input input-bordered w-full" bind:value={password} required />
+  </div>
+  <button type="submit" class="btn btn-primary w-full" disabled={loading}>
+{{#if hasI18n}}
+    {loading ? m.auth_login_loading() : m.auth_login_submit()}
+{{else}}
+    {loading ? '登录中...' : '登录'}
+{{/if}}
+  </button>
+</form>
+
+<div class="text-center mt-4">
+{{#if hasI18n}}
+  <a href="/auth/register" class="link link-primary text-sm">{m.auth_login_to_register()}</a>
+{{else}}
+  <a href="/auth/register" class="link link-primary text-sm">没有账号？立即注册</a>
+{{/if}}
+</div>

package/templates/features/iam/routes-admin/(auth)/auth/register/+page.svelte.hbs

@@ -0,0 +1,124 @@
+{{!-- Admin 注册页面 --}}
+<script lang="ts">
+  /**
+   * 注册页面
+   */
+{{#if hasI18n}}
+  import * as m from '$lib/paraglide/messages'
+{{/if}}
+
+  let username = $state('')
+  let email = $state('')
+  let password = $state('')
+  let confirmPassword = $state('')
+  let error = $state('')
+  let loading = $state(false)
+
+  async function handleRegister() {
+    error = ''
+    if (password !== confirmPassword) {
+{{#if hasI18n}}
+      error = m.auth_error_password_mismatch()
+{{else}}
+      error = '密码不一致'
+{{/if}}
+      return
+    }
+    loading = true
+    try {
+      const res = await fetch('/api/auth/register', {
+        method: 'POST',
+        headers: { 'Content-Type': 'application/json' },
+        body: JSON.stringify({ username, email, password, confirmPassword }),
+      })
+      const data = await res.json()
+      if (data.success) {
+        window.location.href = '/auth/login'
+      } else {
+{{#if hasI18n}}
+        error = data.error?.message || m.auth_register_failed()
+{{else}}
+        error = data.error?.message || '注册失败'
+{{/if}}
+      }
+    } catch {
+{{#if hasI18n}}
+      error = m.auth_error_network()
+{{else}}
+      error = '网络错误'
+{{/if}}
+    } finally {
+      loading = false
+    }
+  }
+</script>
+
+<svelte:head>
+{{#if hasI18n}}
+  <title>{m.auth_register_title()}</title>
+{{else}}
+  <title>注册</title>
+{{/if}}
+</svelte:head>
+
+{{#if hasI18n}}
+<h2 class="card-title justify-center mb-4">{m.auth_register_title()}</h2>
+{{else}}
+<h2 class="card-title justify-center mb-4">注册</h2>
+{{/if}}
+
+{#if error}
+  <div class="alert alert-error mb-4">
+    <span>{error}</span>
+  </div>
+{/if}
+
+<form onsubmit={(e) => { e.preventDefault(); handleRegister() }} class="space-y-4">
+  <div class="form-control">
+{{#if hasI18n}}
+    <label class="label" for="username"><span class="label-text">{m.auth_label_username()}</span></label>
+{{else}}
+    <label class="label" for="username"><span class="label-text">用户名</span></label>
+{{/if}}
+    <input id="username" type="text" class="input input-bordered w-full" bind:value={username} required />
+  </div>
+  <div class="form-control">
+{{#if hasI18n}}
+    <label class="label" for="email"><span class="label-text">{m.auth_label_email()}</span></label>
+{{else}}
+    <label class="label" for="email"><span class="label-text">邮箱</span></label>
+{{/if}}
+    <input id="email" type="email" class="input input-bordered w-full" bind:value={email} required />
+  </div>
+  <div class="form-control">
+{{#if hasI18n}}
+    <label class="label" for="password"><span class="label-text">{m.auth_label_password()}</span></label>
+{{else}}
+    <label class="label" for="password"><span class="label-text">密码</span></label>
+{{/if}}
+    <input id="password" type="password" class="input input-bordered w-full" bind:value={password} required />
+  </div>
+  <div class="form-control">
+{{#if hasI18n}}
+    <label class="label" for="confirmPassword"><span class="label-text">{m.auth_label_confirm_password()}</span></label>
+{{else}}
+    <label class="label" for="confirmPassword"><span class="label-text">确认密码</span></label>
+{{/if}}
+    <input id="confirmPassword" type="password" class="input input-bordered w-full" bind:value={confirmPassword} required />
+  </div>
+  <button type="submit" class="btn btn-primary w-full" disabled={loading}>
+{{#if hasI18n}}
+    {loading ? m.auth_register_loading() : m.auth_register_submit()}
+{{else}}
+    {loading ? '注册中...' : '注册'}
+{{/if}}
+  </button>
+</form>
+
+<div class="text-center mt-4">
+{{#if hasI18n}}
+  <a href="/auth/login" class="link link-primary text-sm">{m.auth_register_to_login()}</a>
+{{else}}
+  <a href="/auth/login" class="link link-primary text-sm">已有账号？立即登录</a>
+{{/if}}
+</div>

package/templates/features/iam/routes-h5/auth/login/+page.svelte.hbs

@@ -0,0 +1,98 @@
+{{!-- H5 登录页面 --}}
+<script lang="ts">
+  /**
+   * H5 登录页面
+   */
+{{#if hasI18n}}
+  import * as m from '$lib/paraglide/messages'
+{{/if}}
+
+  let username = $state('')
+  let password = $state('')
+  let error = $state('')
+  let loading = $state(false)
+
+  async function handleLogin() {
+    error = ''
+    loading = true
+    try {
+      const res = await fetch('/api/auth/login', {
+        method: 'POST',
+        headers: { 'Content-Type': 'application/json' },
+        body: JSON.stringify({ username, password }),
+      })
+      const data = await res.json()
+      if (data.success) {
+        window.location.href = '/'
+      } else {
+{{#if hasI18n}}
+        error = data.error?.message || m.auth_login_failed()
+{{else}}
+        error = data.error?.message || '登录失败'
+{{/if}}
+      }
+    } catch {
+{{#if hasI18n}}
+      error = m.auth_error_network()
+{{else}}
+      error = '网络错误'
+{{/if}}
+    } finally {
+      loading = false
+    }
+  }
+</script>
+
+<svelte:head>
+{{#if hasI18n}}
+  <title>{m.auth_login_title()}</title>
+{{else}}
+  <title>登录</title>
+{{/if}}
+</svelte:head>
+
+<div class="p-4 pt-12">
+{{#if hasI18n}}
+  <h1 class="text-2xl font-bold text-center mb-8">{m.auth_login_title()}</h1>
+{{else}}
+  <h1 class="text-2xl font-bold text-center mb-8">登录</h1>
+{{/if}}
+
+  {#if error}
+    <div class="alert alert-error mb-4">
+      <span>{error}</span>
+    </div>
+  {/if}
+
+  <form onsubmit={(e) => { e.preventDefault(); handleLogin() }} class="space-y-4">
+    <div class="form-control">
+{{#if hasI18n}}
+      <input type="text" placeholder={m.auth_label_username()} class="input input-bordered w-full" bind:value={username} required />
+{{else}}
+      <input type="text" placeholder="用户名" class="input input-bordered w-full" bind:value={username} required />
+{{/if}}
+    </div>
+    <div class="form-control">
+{{#if hasI18n}}
+      <input type="password" placeholder={m.auth_label_password()} class="input input-bordered w-full" bind:value={password} required />
+{{else}}
+      <input type="password" placeholder="密码" class="input input-bordered w-full" bind:value={password} required />
+{{/if}}
+    </div>
+    <button type="submit" class="btn btn-primary w-full" disabled={loading}>
+{{#if hasI18n}}
+      {loading ? m.auth_login_loading() : m.auth_login_submit()}
+{{else}}
+      {loading ? '登录中...' : '登录'}
+{{/if}}
+    </button>
+  </form>
+
+  <div class="text-center mt-6">
+{{#if hasI18n}}
+    <a href="/auth/register" class="link link-primary text-sm">{m.auth_login_to_register()}</a>
+{{else}}
+    <a href="/auth/register" class="link link-primary text-sm">没有账号？立即注册</a>
+{{/if}}
+  </div>
+</div>

package/templates/features/iam/routes-h5/auth/register/+page.svelte.hbs

@@ -0,0 +1,114 @@
+{{!-- H5 注册页面 --}}
+<script lang="ts">
+  /**
+   * H5 注册页面
+   */
+{{#if hasI18n}}
+  import * as m from '$lib/paraglide/messages'
+{{/if}}
+
+  let username = $state('')
+  let password = $state('')
+  let confirmPassword = $state('')
+  let error = $state('')
+  let loading = $state(false)
+
+  async function handleRegister() {
+    error = ''
+    if (password !== confirmPassword) {
+{{#if hasI18n}}
+      error = m.auth_error_password_mismatch()
+{{else}}
+      error = '密码不一致'
+{{/if}}
+      return
+    }
+    loading = true
+    try {
+      const res = await fetch('/api/auth/register', {
+        method: 'POST',
+        headers: { 'Content-Type': 'application/json' },
+        body: JSON.stringify({ username, password, confirmPassword }),
+      })
+      const data = await res.json()
+      if (data.success) {
+        window.location.href = '/auth/login'
+      } else {
+{{#if hasI18n}}
+        error = data.error?.message || m.auth_register_failed()
+{{else}}
+        error = data.error?.message || '注册失败'
+{{/if}}
+      }
+    } catch {
+{{#if hasI18n}}
+      error = m.auth_error_network()
+{{else}}
+      error = '网络错误'
+{{/if}}
+    } finally {
+      loading = false
+    }
+  }
+</script>
+
+<svelte:head>
+{{#if hasI18n}}
+  <title>{m.auth_register_title()}</title>
+{{else}}
+  <title>注册</title>
+{{/if}}
+</svelte:head>
+
+<div class="p-4 pt-12">
+{{#if hasI18n}}
+  <h1 class="text-2xl font-bold text-center mb-8">{m.auth_register_title()}</h1>
+{{else}}
+  <h1 class="text-2xl font-bold text-center mb-8">注册</h1>
+{{/if}}
+
+  {#if error}
+    <div class="alert alert-error mb-4">
+      <span>{error}</span>
+    </div>
+  {/if}
+
+  <form onsubmit={(e) => { e.preventDefault(); handleRegister() }} class="space-y-4">
+    <div class="form-control">
+{{#if hasI18n}}
+      <input type="text" placeholder={m.auth_label_username()} class="input input-bordered w-full" bind:value={username} required />
+{{else}}
+      <input type="text" placeholder="用户名" class="input input-bordered w-full" bind:value={username} required />
+{{/if}}
+    </div>
+    <div class="form-control">
+{{#if hasI18n}}
+      <input type="password" placeholder={m.auth_label_password()} class="input input-bordered w-full" bind:value={password} required />
+{{else}}
+      <input type="password" placeholder="密码" class="input input-bordered w-full" bind:value={password} required />
+{{/if}}
+    </div>
+    <div class="form-control">
+{{#if hasI18n}}
+      <input type="password" placeholder={m.auth_label_confirm_password()} class="input input-bordered w-full" bind:value={confirmPassword} required />
+{{else}}
+      <input type="password" placeholder="确认密码" class="input input-bordered w-full" bind:value={confirmPassword} required />
+{{/if}}
+    </div>
+    <button type="submit" class="btn btn-primary w-full" disabled={loading}>
+{{#if hasI18n}}
+      {loading ? m.auth_register_loading() : m.auth_register_submit()}
+{{else}}
+      {loading ? '注册中...' : '注册'}
+{{/if}}
+    </button>
+  </form>
+
+  <div class="text-center mt-6">
+{{#if hasI18n}}
+    <a href="/auth/login" class="link link-primary text-sm">{m.auth_register_to_login()}</a>
+{{else}}
+    <a href="/auth/login" class="link link-primary text-sm">已有账号？立即登录</a>
+{{/if}}
+  </div>
+</div>

package/templates/features/iam/routes-shared/api/auth/login/+server.ts

@@ -0,0 +1,32 @@
+/**
+ * 登录 API
+ */
+import type { RequestHandler } from './$types'
+import { iam } from '@h-ai/iam'
+import { kit } from '@h-ai/kit'
+
+export const POST: RequestHandler = async ({ request, cookies, locals }) => {
+  const body = await request.json()
+  const { identifier, password } = body
+
+  if (!identifier || !password) {
+    return kit.response.badRequest('identifier and password are required')
+  }
+
+  const result = await iam.auth.login({ identifier, password })
+  if (!result.success) {
+    return kit.response.unauthorized(result.error.message)
+  }
+
+  const { tokens } = result.data
+
+  cookies.set('session_token', tokens.accessToken, {
+    path: '/',
+    httpOnly: true,
+    sameSite: 'lax',
+    secure: false,
+    maxAge: tokens.expiresIn,
+  })
+
+  return kit.response.ok({ message: 'Login successful' }, locals.requestId)
+}

package/templates/features/iam/routes-shared/api/auth/logout/+server.ts

@@ -0,0 +1,15 @@
+/**
+ * 登出 API
+ */
+import type { RequestHandler } from './$types'
+import { iam } from '@h-ai/iam'
+import { kit } from '@h-ai/kit'
+
+export const POST: RequestHandler = async ({ cookies, locals }) => {
+  const token = cookies.get('session_token')
+  if (token) {
+    await iam.auth.logout(token)
+  }
+  cookies.delete('session_token', { path: '/' })
+  return kit.response.ok({ message: 'Logout successful' }, locals.requestId)
+}

package/templates/features/iam/routes-shared/api/auth/me/+server.ts

@@ -0,0 +1,12 @@
+/**
+ * 当前用户信息
+ */
+import type { RequestHandler } from './$types'
+import { kit } from '@h-ai/kit'
+
+export const GET: RequestHandler = async ({ locals }) => {
+  if (!locals.session) {
+    return kit.response.unauthorized('Not authenticated')
+  }
+  return kit.response.ok({ user: locals.session }, locals.requestId)
+}

package/templates/features/iam/routes-shared/api/auth/register/+server.ts

@@ -0,0 +1,26 @@
+/**
+ * 注册 API
+ */
+import type { RequestHandler } from './$types'
+import { iam } from '@h-ai/iam'
+import { kit } from '@h-ai/kit'
+
+export const POST: RequestHandler = async ({ request, locals }) => {
+  const body = await request.json()
+  const { username, email, password, confirmPassword } = body
+
+  if (!username || !password) {
+    return kit.response.badRequest('Username and password are required')
+  }
+
+  if (password !== confirmPassword) {
+    return kit.response.badRequest('Passwords do not match')
+  }
+
+  const result = await iam.user.register({ username, email, password })
+  if (!result.success) {
+    return kit.response.badRequest(result.error.message)
+  }
+
+  return kit.response.ok({ message: 'Registration successful' }, locals.requestId)
+}

package/templates/features/payment/routes/api/v1/payment/create/+server.ts

@@ -0,0 +1,30 @@
+/**
+ * 创建支付订单 API
+ */
+import type { RequestHandler } from './$types'
+import { kit } from '@h-ai/kit'
+import { payment } from '@h-ai/payment'
+
+export const POST: RequestHandler = async ({ request, locals }) => {
+  const body = await request.json()
+  const { provider, tradeType, outTradeNo, totalAmount, subject, notifyUrl } = body
+
+  if (!provider || !outTradeNo || !totalAmount || !subject) {
+    return kit.response.badRequest('Missing required fields: provider, outTradeNo, totalAmount, subject')
+  }
+
+  const result = await payment.createOrder({
+    provider,
+    tradeType: tradeType ?? 'JSAPI',
+    outTradeNo,
+    totalAmount,
+    subject,
+    notifyUrl: notifyUrl ?? `${new URL(request.url).origin}/api/v1/payment/notify/${provider}`,
+  })
+
+  if (!result.success) {
+    return kit.response.internalError(result.error.message)
+  }
+
+  return kit.response.ok(result.data, locals.requestId)
+}

package/templates/features/payment/routes/api/v1/payment/notify/[provider]/+server.ts

@@ -0,0 +1,42 @@
+/**
+ * 支付回调通知 API
+ *
+ * 处理各支付渠道的异步通知。
+ * 路由：POST /api/v1/payment/notify/:provider
+ */
+import type { RequestHandler } from './$types'
+import { kit } from '@h-ai/kit'
+import { payment } from '@h-ai/payment'
+
+export const POST: RequestHandler = async ({ request, params }) => {
+  const provider = params.provider
+
+  if (!provider) {
+    return kit.response.badRequest('Missing provider parameter')
+  }
+
+  const body = await request.text()
+  const headers: Record<string, string> = {}
+  request.headers.forEach((value, key) => {
+    headers[key] = value
+  })
+
+  const result = await payment.handleNotify({
+    provider,
+    headers,
+    body,
+  })
+
+  if (!result.success) {
+    return new Response('FAIL', { status: 500 })
+  }
+
+  // 微信支付要求返回 JSON，支付宝要求返回 "success"
+  if (provider === 'wechat') {
+    return new Response(JSON.stringify({ code: 'SUCCESS', message: '' }), {
+      headers: { 'Content-Type': 'application/json' },
+    })
+  }
+
+  return new Response('success', { status: 200 })
+}

package/templates/features/payment/routes/api/v1/payment/query/[orderNo]/+server.ts

@@ -0,0 +1,25 @@
+/**
+ * 查询支付订单 API
+ *
+ * 路由：GET /api/v1/payment/query/:orderNo
+ */
+import type { RequestHandler } from './$types'
+import { kit } from '@h-ai/kit'
+import { payment } from '@h-ai/payment'
+
+export const GET: RequestHandler = async ({ params, url, locals }) => {
+  const orderNo = params.orderNo
+  const provider = url.searchParams.get('provider')
+
+  if (!orderNo || !provider) {
+    return kit.response.badRequest('Missing orderNo or provider parameter')
+  }
+
+  const result = await payment.queryOrder(provider, orderNo)
+
+  if (!result.success) {
+    return kit.response.internalError(result.error.message)
+  }
+
+  return kit.response.ok(result.data, locals.requestId)
+}

package/templates/features/storage/routes/api/upload/+server.ts

@@ -0,0 +1,35 @@
+/**
+ * 文件上传 API — storage 功能示例
+ */
+import type { RequestHandler } from './$types'
+import { kit } from '@h-ai/kit'
+import { storage } from '@h-ai/storage'
+
+export const POST: RequestHandler = async ({ request, locals }) => {
+  const formData = await request.formData()
+  const file = formData.get('file') as File | null
+
+  if (!file) {
+    return kit.response.badRequest('No file provided')
+  }
+
+  const { Buffer } = await import('node:buffer')
+  const buffer = Buffer.from(await file.arrayBuffer())
+  const key = `uploads/${Date.now()}-${file.name}`
+
+  const result = await storage.put(key, buffer, {
+    contentType: file.type,
+    metadata: { originalName: file.name },
+  })
+
+  if (!result.success) {
+    return kit.response.internalError(result.error.message)
+  }
+
+  return kit.response.ok({
+    key,
+    name: file.name,
+    size: file.size,
+    type: file.type,
+  }, locals.requestId)
+}