@wzyjs/cli 0.3.32 → 0.3.36

package/template/web/google/src/env.js

@@ -0,0 +1,52 @@
+import { z } from 'zod'
+import { createEnv } from '@t3-oss/env-nextjs'
+
+export const env = createEnv({
+  /**
+   * 在此处指定服务器端环境变量模式。
+   * 这样可以确保应用程序不会使用无效的环境变量构建。
+   */
+  server: {
+    NODE_ENV: z.enum(['development', 'test', 'production']).default('development'),
+    // 数据库
+    DATABASE_URL: z.string().url(),
+    NEXTAUTH_URL: z.string().url(),
+    NEXTAUTH_SECRET: z.string().min(1),
+    GOOGLE_CLIENT_ID: z.string().min(1),
+    GOOGLE_CLIENT_SECRET: z.string().min(1),
+  },
+
+  /**
+   * 在此处指定客户端环境变量模式。
+   * 这样可以确保应用程序不会使用无效的环境变量构建。
+   * 要将它们暴露给客户端，请使用 `NEXT_PUBLIC_` 前缀。
+   */
+  client: {},
+
+  /**
+   * 在这里显式传入运行时环境变量的实际值。
+   * `server` / `client` 负责声明校验规则，
+   * `runtimeEnv` 负责把 `process.env` 中对应的值提供给 `createEnv`。
+   */
+  runtimeEnv: {
+    NODE_ENV: process.env.NODE_ENV,
+    // 数据库
+    DATABASE_URL: process.env.DATABASE_URL,
+    NEXTAUTH_URL: process.env.NEXTAUTH_URL,
+    NEXTAUTH_SECRET: process.env.NEXTAUTH_SECRET,
+    GOOGLE_CLIENT_ID: process.env.GOOGLE_CLIENT_ID,
+    GOOGLE_CLIENT_SECRET: process.env.GOOGLE_CLIENT_SECRET,
+  },
+
+  /**
+   * 使用 `SKIP_ENV_VALIDATION` 运行 `build` 或 `dev` 可以跳过环境变量验证。
+   * 这在 Docker 构建时特别有用。
+   */
+  skipValidation: !!process.env.SKIP_ENV_VALIDATION,
+
+  /**
+   * 使空字符串被视为未定义。
+   * 例如：`SOME_VAR: z.string()` 和 `SOME_VAR=''` 将抛出错误。
+   */
+  emptyStringAsUndefined: true,
+})

package/template/web/google/src/server/auth/next-auth/adapter.ts

@@ -0,0 +1,77 @@
+import { PrismaAdapter } from '@auth/prisma-adapter'
+
+import type { Adapter, AdapterAccount, AdapterSession, AdapterUser } from 'next-auth/adapters'
+
+import { db } from '@/server/db/client'
+
+const prismaAdapter = PrismaAdapter(db)
+
+export const nextAuthAdapter: Adapter = {
+  ...prismaAdapter,
+  createUser: async (data: Omit<AdapterUser, 'id'>): Promise<AdapterUser> => {
+    return db.authUser.create({ data })
+  },
+  getUser: async (id: string): Promise<AdapterUser | null> => {
+    return db.authUser.findUnique({ where: { id } })
+  },
+  getUserByEmail: async (email: string): Promise<AdapterUser | null> => {
+    return db.authUser.findUnique({ where: { email } })
+  },
+  getUserByAccount: async (providerData: Pick<AdapterAccount, 'provider' | 'providerAccountId'>): Promise<AdapterUser | null> => {
+    const account = await db.authAccount.findUnique({
+      select: { user: true },
+      where: {
+        provider_providerAccountId: {
+          provider: providerData.provider,
+          providerAccountId: providerData.providerAccountId,
+        },
+      },
+    })
+
+    return account?.user ?? null
+  },
+  updateUser: async (data: Partial<AdapterUser>): Promise<AdapterUser> => {
+    if (!data.id) {
+      throw new Error('Adapter user id is required for updateUser')
+    }
+
+    const { id, ...userData } = data
+
+    return db.authUser.update({
+      where: { id },
+      data: userData,
+    })
+  },
+  linkAccount: async (data: AdapterAccount): Promise<void> => {
+    await db.authAccount.create({ data })
+  },
+  createSession: async (data: AdapterSession): Promise<AdapterSession> => {
+    return db.authSession.create({ data })
+  },
+  getSessionAndUser: async (sessionToken: string): Promise<{ session: AdapterSession; user: AdapterUser } | null> => {
+    const session = await db.authSession.findUnique({
+      where: { sessionToken },
+      include: { user: true },
+    })
+
+    if (!session) {
+      return null
+    }
+
+    return {
+      session,
+      user: session.user,
+    }
+  },
+  updateSession: async (data: Partial<AdapterSession> & Pick<AdapterSession, 'sessionToken'>): Promise<AdapterSession> => {
+    const { sessionToken, ...sessionData } = data
+
+    return db.authSession.update({
+      where: { sessionToken },
+      data: sessionData,
+    })
+  },
+  deleteSession: async (sessionToken: string): Promise<void> => {
+    await db.authSession.delete({ where: { sessionToken } })
+  },
+}

package/template/web/google/src/server/auth/next-auth/options.ts

@@ -0,0 +1,53 @@
+import GoogleProvider from 'next-auth/providers/google'
+
+import type { NextAuthOptions } from 'next-auth'
+
+import { env } from '@/env'
+
+import { nextAuthAdapter } from './adapter'
+
+declare module 'next-auth' {
+  interface Session {
+    user: {
+      id: string
+      name?: string | null
+      email?: string | null
+      image?: string | null
+    }
+  }
+}
+
+export const auth: NextAuthOptions = {
+  adapter: nextAuthAdapter,
+  secret: env.NEXTAUTH_SECRET,
+  providers: [
+    GoogleProvider({
+      clientId: env.GOOGLE_CLIENT_ID ?? '',
+      clientSecret: env.GOOGLE_CLIENT_SECRET ?? '',
+    }),
+  ],
+  pages: {
+    signIn: '/auth/signin',
+    error: '/auth/error',
+  },
+  callbacks: {
+    async session({ session, user }) {
+      if (session.user) {
+        session.user.id = user.id
+      }
+
+      return session
+    },
+    async redirect({ url, baseUrl }) {
+      if (url.startsWith(baseUrl)) {
+        return url
+      }
+
+      if (url.startsWith('/')) {
+        return `${baseUrl}${url}`
+      }
+
+      return baseUrl
+    },
+  },
+}

package/template/web/google/src/server/trpc/context.ts

@@ -0,0 +1,21 @@
+import { getServerSession } from 'next-auth'
+
+import { auth } from '@/server/auth/next-auth/options'
+import { db } from '@/server/db/client'
+
+import { enhance } from '../generated/enhancer/enhance'
+
+export const createTRPCContext = async (opts?: { req?: Request }) => {
+  const session = await getServerSession(auth)
+
+  return {
+    session,
+    req: opts?.req,
+    headers: opts?.req?.headers,
+    prisma: enhance(db, {
+      user: session?.user?.id ? { id: session.user.id } : undefined,
+    }),
+  }
+}
+
+export type TRPCContext = Awaited<ReturnType<typeof createTRPCContext>>

package/template/web/google/src/server/trpc/procedures.ts

@@ -0,0 +1,16 @@
+import { TRPCError } from '@trpc/server'
+
+import { createTRPCProcedure } from './init'
+
+export const publicProcedure = createTRPCProcedure
+
+export const procedure = createTRPCProcedure.use(({ ctx, next }) => {
+  if (!ctx.session?.user?.id) {
+    throw new TRPCError({
+      code: 'UNAUTHORIZED',
+      message: '请先登录',
+    })
+  }
+
+  return next()
+})

package/template/web/middle/_env

@@ -0,0 +1,10 @@
+# 数据库配置
+DATABASE_URL=postgresql://root:password.@localhost:5432/demo
+
+# 中台登录
+NEXTAUTH_URL=http://localhost:4000
+NEXTAUTH_SECRET=
+NEXT_PUBLIC_MIDDLE_API_URL=http://localhost:3000
+MIDDLE_OIDC_CLIENT_ID=
+MIDDLE_OIDC_CLIENT_SECRET=
+NEXT_PUBLIC_MIDDLE_APPID=

package/template/web/middle/package.json

@@ -0,0 +1,55 @@
+{
+  "name": "__WZYJS_APP_NAME__",
+  "version": "0.1.0",
+  "private": true,
+  "type": "module",
+  "scripts": {
+    "dev": "next dev --turbopack",
+    "build": "NODE_ENV=production next build --turbopack",
+    "start": "next start",
+    "generate": "rm -rf src/server/generated && zenstack generate --output ./src/server/generated/.zenstack --no-compile --schema ./prisma/schema.zmodel",
+    "db:push": "prisma db push",
+    "lint": "eslint .",
+    "typecheck": "tsc --noEmit",
+    "check": "bun run lint && bun run typecheck",
+    "postinstall": "bun run generate"
+  },
+  "dependencies": {
+    "@prisma/client": "^6.14.0",
+    "@t3-oss/env-nextjs": "^0.10.1",
+    "@tanstack/react-query": "^5.50.0",
+    "@trpc/client": "^11.7.0",
+    "@trpc/next": "^11.7.0",
+    "@trpc/react-query": "^11.7.0",
+    "@trpc/server": "^11.7.0",
+    "@wzyjs/hooks": "workspace:*",
+    "@wzyjs/middle-sdk": "workspace:*",
+    "@wzyjs/next": "workspace:*",
+    "@wzyjs/utils": "workspace:*",
+    "@wzyjs/uis": "workspace:*",
+    "@zenstackhq/runtime": "2.22.1",
+    "@zenstackhq/trpc": "2.22.1",
+    "antd": "^6.3.1",
+    "next": "^16.2.4",
+    "next-auth": "^4.24.11",
+    "react": "^19.1.0",
+    "react-dom": "^19.1.0",
+    "server-only": "^0.0.1",
+    "superjson": "^2.2.1",
+    "zenstack": "2.22.1",
+    "zod": "^3.23.3",
+    "zod-validation-error": "^3.4.0"
+  },
+  "devDependencies": {
+    "@types/node": "^20",
+    "@types/react": "19.1.10",
+    "@types/react-dom": "^19",
+    "eslint": "^9",
+    "eslint-config-next": "^16.2.4",
+    "postcss": "^8.4.39",
+    "prisma": "^6.14.0",
+    "prisma-json-types-generator": "^3.3.0",
+    "tailwindcss": "^3.4.3",
+    "typescript": "^5"
+  }
+}

package/template/web/middle/src/app/api/auth/[...nextauth]/route.ts

@@ -0,0 +1,7 @@
+import NextAuth from 'next-auth'
+
+import { auth } from '@/server/auth/next-auth/options'
+
+const handler = NextAuth(auth)
+
+export { handler as GET, handler as POST }

package/template/web/middle/src/app/auth/disabled/page.tsx

@@ -0,0 +1,71 @@
+'use client'
+
+import { Suspense } from 'react'
+import { signOut, useSession } from 'next-auth/react'
+
+import {
+  Button,
+  LogoutOutlined,
+  PanelPage,
+  Result,
+  Spin,
+  StopOutlined,
+  Typography,
+} from '@/components'
+
+const DisabledContent = () => {
+  const { data: session } = useSession()
+
+  const onSignOut = async () => {
+    await signOut({ callbackUrl: '/auth/signin' })
+  }
+
+  return (
+    <PanelPage eyebrow='账号不可用' title='暂时不能访问'>
+      <Result
+        status='403'
+        icon={<StopOutlined style={{ color: '#f5222d' }} />}
+        title='这个账号已被停用'
+        subTitle={(
+          <div className='mt-4 space-y-4 text-left'>
+            <Typography.Paragraph className='!mb-0 text-center !text-sm !leading-6 !text-slate-600 dark:!text-slate-300'>
+              你已经登录成功，但这个账号目前不能使用该应用。请联系管理员重新启用，或换一个有权限的账号登录。
+            </Typography.Paragraph>
+
+            <div className='rounded-lg border border-slate-200/70 bg-white/70 px-4 py-3 dark:border-white/10 dark:bg-white/5'>
+              <div className='text-xs font-semibold uppercase text-slate-500 dark:text-slate-400'>
+                当前登录账号
+              </div>
+              <div className='mt-2 break-all text-sm font-medium text-slate-900 dark:text-slate-100'>
+                {session?.user?.email || '暂未读取到账号信息'}
+              </div>
+            </div>
+          </div>
+        )}
+        extra={(
+          <div className='flex justify-center'>
+            <Button
+              type='primary'
+              danger
+              icon={<LogoutOutlined />}
+              className='!rounded-lg'
+              onClick={() => {
+                void onSignOut()
+              }}
+            >
+              换个账号登录
+            </Button>
+          </div>
+        )}
+      />
+    </PanelPage>
+  )
+}
+
+export default function DisabledPage() {
+  return (
+    <Suspense fallback={<Spin />}>
+      <DisabledContent />
+    </Suspense>
+  )
+}

package/template/web/middle/src/app/auth/error/page.tsx

@@ -0,0 +1,56 @@
+'use client'
+
+import Link from 'next/link'
+import { Suspense } from 'react'
+import { useSearchParams } from 'next/navigation'
+
+import { Button, PanelPage, Result, Spin, Typography } from '@/components'
+
+const errorMessageMap: Record<string, string> = {
+  OAuthSignin: '暂时无法打开中台登录页，请稍后再试。',
+  OAuthCallback: '中台没有返回有效的登录结果，请重新登录一次。',
+  OAuthCreateAccount: '账号信息暂时无法同步，请稍后再试。',
+  EmailCreateAccount: '账号信息暂时无法同步，请稍后再试。',
+  Callback: '登录过程被中断，请重新登录一次。',
+  OAuthAccountNotLinked: '这个邮箱已经绑定了其他登录方式，请换一种方式登录。',
+  EmailSignin: '邮件登录没有完成，请重新尝试。',
+  CredentialsSignin: '账号或授权信息校验失败，请确认后再试。',
+  SessionRequired: '请先登录，再继续访问当前页面。',
+  default: '这次登录没有成功，请重新尝试。',
+}
+
+const AuthErrorContent = () => {
+  const searchParams = useSearchParams()
+  const error = searchParams.get('error') || 'default'
+
+  return (
+    <PanelPage eyebrow='登录遇到问题' title='没能完成登录'>
+      <Result
+        status='error'
+        title='登录没有完成'
+        subTitle={errorMessageMap[error] ?? errorMessageMap.default}
+        extra={[
+          <Link href='/auth/signin' key='signin'>
+            <Button type='primary' className='!rounded-lg px-6'>
+              重新登录
+            </Button>
+          </Link>,
+        ]}
+      />
+
+      <div className='mx-4 mb-4 rounded-lg bg-white/70 p-5 dark:bg-white/5 sm:mx-6'>
+        <Typography.Paragraph className='!mb-0 text-center !text-sm !leading-6 !text-slate-500 dark:!text-slate-300'>
+          如果多次重试仍然失败，请联系管理员，并说明你是在登录当前项目时遇到的问题。
+        </Typography.Paragraph>
+      </div>
+    </PanelPage>
+  )
+}
+
+export default function AuthErrorPage() {
+  return (
+    <Suspense fallback={<Spin />}>
+      <AuthErrorContent />
+    </Suspense>
+  )
+}

package/template/web/middle/src/app/auth/signin/page.tsx

@@ -0,0 +1,91 @@
+'use client'
+
+import { Suspense, useEffect } from 'react'
+import { signIn, useSession } from 'next-auth/react'
+import { useRouter, useSearchParams } from 'next/navigation'
+
+import {
+  App,
+  Button,
+  LoginOutlined,
+  PanelPage,
+  Space,
+  Spin,
+  Typography,
+} from '@/components'
+import { getSafeCallbackPath } from '@/utils'
+
+const { Text } = Typography
+
+const SignInPage = () => {
+  const { message } = App.useApp()
+  const { data: session, status } = useSession()
+  const router = useRouter()
+  const searchParams = useSearchParams()
+
+  const callbackUrl = getSafeCallbackPath(searchParams.get('callbackUrl'), '/')
+  const error = searchParams.get('error')
+
+  useEffect(() => {
+    if (status === 'authenticated' && session) {
+      router.push(callbackUrl)
+    }
+  }, [callbackUrl, router, session, status])
+
+  const onMiddleSignIn = async () => {
+    try {
+      await signIn('middle', { callbackUrl })
+    } catch (signinError) {
+      console.error(666, '登录失败:', signinError)
+      void message.error('暂时无法跳转登录，请稍后再试')
+    }
+  }
+
+  return (
+    <PanelPage
+      eyebrow='继续访问'
+      title='请先登录'
+      description='使用已获授权的中台账号登录，完成后会自动回到刚才的页面。'
+    >
+      <Space orientation='vertical' size='large' className='w-full'>
+        {error ? (
+          <div className='rounded-lg border border-red-200 bg-red-50/90 p-4 text-left dark:border-red-500/30 dark:bg-red-500/10'>
+            <div className='text-sm font-semibold text-red-700 dark:text-red-300'>
+              登录没有完成
+            </div>
+            <p className='mt-2 text-sm leading-6 text-red-600 dark:text-red-200'>
+              可能是登录页面被关闭或授权已过期。你可以重新登录一次。
+            </p>
+          </div>
+        ) : null}
+
+        <Button
+          type='primary'
+          size='large'
+          icon={<LoginOutlined />}
+          className='!h-12 !rounded-lg !text-sm !font-semibold shadow-sm'
+          onClick={() => {
+            void onMiddleSignIn()
+          }}
+          block
+        >
+          登录并继续
+        </Button>
+
+        <div className='rounded-lg bg-white/70 p-5 text-center dark:bg-white/5'>
+          <Text className='text-sm leading-6 text-slate-500 dark:text-slate-300'>
+            我们会带你到中台完成身份确认，不会在当前项目保存你的登录密码。
+          </Text>
+        </div>
+      </Space>
+    </PanelPage>
+  )
+}
+
+export default function SignIn() {
+  return (
+    <Suspense fallback={<Spin />}>
+      <SignInPage />
+    </Suspense>
+  )
+}

package/template/web/middle/src/app/auth/unauthorized/page.tsx

@@ -0,0 +1,88 @@
+'use client'
+
+import { signOut, useSession } from 'next-auth/react'
+import { useRouter, useSearchParams } from 'next/navigation'
+
+import {
+  ArrowRightOutlined,
+  Button,
+  LogoutOutlined,
+  PanelPage,
+  Result,
+  RetweetOutlined,
+  StopOutlined,
+  Typography,
+} from '@/components'
+
+import { getSafeCallbackPath } from '@/utils'
+
+export default function UnauthorizedPage() {
+  const { data: session } = useSession()
+  const router = useRouter()
+  const searchParams = useSearchParams()
+
+  const retryUrl = getSafeCallbackPath(searchParams.get('callbackUrl'), '/')
+
+  const onSignOut = async () => {
+    await signOut({ callbackUrl: '/auth/signin' })
+  }
+
+  return (
+    <PanelPage eyebrow='需要授权' title='暂时不能访问'>
+      <Result
+        status='403'
+        title='你还没有这个页面的访问权限'
+        icon={<StopOutlined style={{ color: '#f5222d' }} />}
+        subTitle={(
+          <div className='mt-4 space-y-4'>
+            <Typography.Paragraph className='!mb-0 !text-sm !leading-6 !text-slate-600 dark:!text-slate-300'>
+              请联系管理员开通权限。权限生效后，你可以回来重试，或切换到已经授权的账号。
+            </Typography.Paragraph>
+            <div className='rounded-lg border border-slate-200/70 bg-white/70 px-4 py-3 text-left dark:border-white/10 dark:bg-white/5'>
+              <div className='text-xs font-semibold uppercase text-slate-500 dark:text-slate-400'>
+                当前登录账号
+              </div>
+              <div className='mt-2 break-all text-sm font-medium text-slate-900 dark:text-slate-100'>
+                {session?.user?.email || '暂未读取到账号信息'}
+              </div>
+            </div>
+          </div>
+        )}
+        extra={(
+          <div className='flex w-full flex-col gap-3 sm:flex-row sm:justify-center'>
+            <Button
+              type='primary'
+              icon={<RetweetOutlined />}
+              className='!rounded-lg'
+              onClick={() => {
+                router.push(retryUrl)
+              }}
+            >
+              重试访问
+            </Button>
+            <Button
+              icon={<ArrowRightOutlined />}
+              className='!rounded-lg'
+              onClick={() => {
+                router.push('/')
+              }}
+            >
+              返回首页
+            </Button>
+            <Button
+              type='primary'
+              danger
+              icon={<LogoutOutlined />}
+              className='!rounded-lg'
+              onClick={() => {
+                void onSignOut()
+              }}
+            >
+              换个账号登录
+            </Button>
+          </div>
+        )}
+      />
+    </PanelPage>
+  )
+}

package/template/web/middle/src/app/layout.tsx

@@ -0,0 +1,35 @@
+import { type ReactNode } from 'react'
+import { type Metadata } from 'next'
+
+import { AuthGuard } from '@/components/base/AuthGuard'
+import { Providers } from '@/components/base/Providers'
+import { Layout } from '@/components/base/Layout'
+
+import '@/styles/globals.css'
+
+export const metadata: Metadata = {
+  title: '__WZYJS_APP_DISPLAY_NAME__',
+  icons: [{ rel: 'icon', url: '/favicon.ico' }],
+}
+
+interface RootLayoutProps {
+  children: ReactNode
+}
+
+export default function RootLayout(props: RootLayoutProps) {
+  const { children } = props
+
+  return (
+    <html lang='zh-CN' suppressHydrationWarning>
+      <body suppressHydrationWarning>
+        <Providers>
+          <AuthGuard>
+            <Layout>
+              {children}
+            </Layout>
+          </AuthGuard>
+        </Providers>
+      </body>
+    </html>
+  )
+}

package/template/web/middle/src/app/middle/page.tsx

@@ -0,0 +1,10 @@
+import { Suspense } from 'react'
+import { MiddleIframeRoutePage } from '@wzyjs/middle-sdk/page'
+
+export default function MiddleIframePage() {
+  return (
+    <Suspense>
+      <MiddleIframeRoutePage />
+    </Suspense>
+  )
+}

package/template/web/middle/src/app/page.tsx

@@ -0,0 +1,20 @@
+'use client'
+
+import { useSession } from 'next-auth/react'
+
+export default function HomePage() {
+  const { data: session } = useSession()
+
+  return (
+    <div className='min-h-full bg-slate-50 px-5 py-8 text-slate-950 dark:bg-[#14171c] dark:text-[#e8edf5]'>
+      <section className='mx-auto max-w-4xl border-b border-slate-200 pb-6 dark:border-[#303846]'>
+        <h1 className='text-2xl font-semibold tracking-normal'>
+          __WZYJS_APP_DISPLAY_NAME__
+        </h1>
+        <p className='mt-3 text-sm leading-6 text-slate-600 dark:text-[#aab4c2]'>
+          {session?.user?.name || session?.user?.email || '当前账号'} 已登录。
+        </p>
+      </section>
+    </div>
+  )
+}