create-aiko 0.1.0

package/template/packages/api/package.json

@@ -0,0 +1,56 @@
+{
+  "name": "@scaffold/api",
+  "version": "0.1.0",
+  "private": true,
+  "type": "module",
+  "exports": {
+    "./client": {
+      "import": "./dist/client/index.ts",
+      "types": "./dist/client/index.ts"
+    }
+  },
+  "scripts": {
+    "dev": "node --import @swc-node/register/esm-register --watch src/server.ts",
+    "dev:server": "node --import @swc-node/register/esm-register --watch src/server.ts",
+    "init-db": "node --import @swc-node/register/esm-register src/scripts/init-db.ts",
+    "build": "tsup",
+    "start": "node dist/server.js",
+    "lint": "eslint src"
+  },
+  "dependencies": {
+    "@ai-partner-x/aiko-boot": "workspace:*",
+    "@ai-partner-x/aiko-boot-starter-orm": "workspace:*",
+    "@ai-partner-x/aiko-boot-starter-cache": "workspace:*",
+    "@ai-partner-x/aiko-boot-starter-validation": "workspace:*",
+    "@ai-partner-x/aiko-boot-starter-web": "workspace:*",
+    "@ai-partner-x/aiko-boot-starter-security": "workspace:*",
+    "@ai-partner-x/aiko-boot-starter-storage": "workspace:*",
+    "@ai-partner-x/aiko-boot-starter-mq": "workspace:*",
+    "@ai-partner-x/aiko-boot-starter-log": "workspace:*",
+    "bcryptjs": "^2.4.3",
+    "jsonwebtoken": "^9.0.2",
+    "better-sqlite3": "^12.6.2",
+    "ioredis": "^5.4.2",
+    "cors": "^2.8.5",
+    "date-fns": "^4.1.0",
+    "express": "^4.18.0",
+    "axios": "^1.6.0",
+    "multer": "^1.4.5-lts.1",
+    "reflect-metadata": "^0.2.1"
+  },
+  "devDependencies": {
+    "sql.js": "^1.11.0",
+    "@swc-node/register": "^1.11.1",
+    "@swc/core": "^1.15.18",
+    "@types/bcryptjs": "^2.4.6",
+    "@types/better-sqlite3": "^7.6.13",
+    "@types/cors": "^2.8.17",
+    "@types/express": "^4.17.21",
+    "@types/jsonwebtoken": "^9.0.5",
+    "@types/multer": "^1.4.12",
+    "@types/node": "^20.11.0",
+    "tsup": "^8.0.0",
+    "tsx": "^4.7.0",
+    "typescript": "^5.3.0"
+  }
+}

package/template/packages/api/src/controller/auth.controller.ts

@@ -0,0 +1,127 @@
+import 'reflect-metadata';
+import { RestController, PostMapping, GetMapping, RequestBody, RequestParam, QueryParam } from '@ai-partner-x/aiko-boot-starter-web';
+import { Autowired } from '@ai-partner-x/aiko-boot';
+import { Public } from '@ai-partner-x/aiko-boot-starter-security';
+import { AuthService } from '../service/auth.service.js';
+import type { LoginDto, LoginResultDto, RefreshTokenDto } from '../dto/auth.dto.js';
+import { SecurityContext } from '@ai-partner-x/aiko-boot-starter-security';
+import axios from 'axios';
+
+@RestController({ path: '/auth' })
+export class AuthController {
+  @Autowired()
+  private authService!: AuthService;
+
+  @PostMapping('/login')
+  @Public()
+  async login(@RequestBody() dto: LoginDto): Promise<LoginResultDto> {
+    return this.authService.login(dto);
+  }
+
+  @PostMapping('/refresh')
+  @Public()
+  async refresh(@RequestBody() dto: RefreshTokenDto): Promise<{ accessToken: string }> {
+    return this.authService.refreshToken(dto.refreshToken);
+  }
+
+  @GetMapping('/info')
+  async getUserInfo(@RequestParam('_uid') userId: string): Promise<LoginResultDto['userInfo']> {
+    return this.authService.getUserInfo(Number(userId));
+  }
+
+  @PostMapping('/logout')
+  async logout(@RequestBody() body: { token: string }): Promise<any> {
+    return this.authService.logout(body.token);
+  }
+
+  @GetMapping('/github')
+  @Public()
+  async githubAuth(@QueryParam('redirect') redirect?: string): Promise<any> {
+    const clientId = process.env.GITHUB_CLIENT_ID;
+    const redirectUri = process.env.GITHUB_CALLBACK_URL;
+    const scope = 'user:email';
+
+    const authUrl = `https://github.com/login/oauth/authorize?client_id=${clientId}&redirect_uri=${encodeURIComponent(redirectUri)}&scope=${scope}${redirect ? `&redirect_uri=${encodeURIComponent(redirect)}` : ''}`;
+
+    return { authUrl };
+  }
+
+  @GetMapping('/github/callback')
+  @Public()
+  async githubCallback(@QueryParam('code') code: string): Promise<any> {
+    try {
+      const clientId = process.env.GITHUB_CLIENT_ID;
+      const clientSecret = process.env.GITHUB_CLIENT_SECRET;
+      const redirectUri = process.env.GITHUB_CALLBACK_URL;
+
+      const tokenResponse = await axios.post('https://github.com/login/oauth/access_token', {
+        client_id: clientId,
+        client_secret: clientSecret,
+        code: code,
+        redirect_uri: redirectUri,
+      }, {
+        headers: { Accept: 'application/json' }
+      });
+
+      const tokens = tokenResponse.data;
+
+      const userResponse = await axios.get('https://api.github.com/user', {
+        headers: { Authorization: `Bearer ${tokens.access_token}` }
+      });
+
+      const profile = {
+        ...userResponse.data,
+        provider: 'github',
+      };
+
+      return this.authService.handleOAuthCallback(profile, tokens);
+    } catch (error) {
+      throw new Error('GitHub OAuth token exchange failed');
+    }
+  }
+
+  @GetMapping('/google')
+  @Public()
+  async googleAuth(@QueryParam('redirect') redirect?: string): Promise<any> {
+    const clientId = process.env.GOOGLE_CLIENT_ID;
+    const redirectUri = process.env.GOOGLE_CALLBACK_URL;
+    const scope = 'profile email';
+
+    const authUrl = `https://accounts.google.com/o/oauth2/v2/auth?client_id=${clientId}&redirect_uri=${encodeURIComponent(redirectUri)}&scope=${encodeURIComponent(scope)}&response_type=code${redirect ? `&redirect_uri=${encodeURIComponent(redirect)}` : ''}`;
+
+    return { authUrl };
+  }
+
+  @GetMapping('/google/callback')
+  @Public()
+  async googleCallback(@QueryParam('code') code: string): Promise<any> {
+    try {
+      const clientId = process.env.GOOGLE_CLIENT_ID;
+      const clientSecret = process.env.GOOGLE_CLIENT_SECRET;
+      const redirectUri = process.env.GOOGLE_CALLBACK_URL;
+
+      const tokenResponse = await axios.post('https://oauth2.googleapis.com/token', {
+        client_id: clientId,
+        client_secret: clientSecret,
+        code: code,
+        redirect_uri: redirectUri,
+        grant_type: 'authorization_code',
+      });
+
+      const tokens = tokenResponse.data;
+
+      const userResponse = await axios.get('https://www.googleapis.com/oauth2/v2/userinfo', {
+        headers: { Authorization: `Bearer ${tokens.access_token}` }
+      });
+
+      const profile = {
+        ...userResponse.data,
+        provider: 'google',
+      };
+
+      return this.authService.handleOAuthCallback(profile, tokens);
+    } catch (error) {
+      throw new Error('Google OAuth token exchange failed');
+    }
+  }
+}

package/template/packages/api/src/controller/cache.controller.ts

@@ -0,0 +1,106 @@
+import 'reflect-metadata';
+import { RestController, PostMapping, DeleteMapping, GetMapping, RequestBody, RequestParam } from '@ai-partner-x/aiko-boot-starter-web';
+import { Autowired } from '@ai-partner-x/aiko-boot';
+import { CacheService } from '../service/cache.service.js';
+import type { CachePutDto } from '../dto/cache.dto.js';
+
+/**
+ * Cache 控制器
+ *
+ * 提供缓存的 CRUD 操作接口，仅在非生产环境下可用。
+ * 注意：需要在 app.config.ts 中启用 cache 并配置 Redis 连接
+ * 
+ * 当 NODE_ENV=production 时，所有端点会直接抛出错误拒绝访问，
+ * 防止数据泄露、缓存投毒或拒绝服务。
+ */
+@RestController({ path: '/cache' })
+export class CacheController {
+  @Autowired()
+  private cacheService!: CacheService;
+
+  private assertNonProduction(): void {
+    if (process.env.NODE_ENV === 'production') {
+      throw new Error('Cache management endpoints are disabled in production.');
+    }
+  }
+
+  /**
+   * 获取缓存值
+   * 
+   * @example
+   * curl "http://localhost:3001/api/cache/get?name=user&key=1"
+   */
+  @GetMapping('/get')
+  async get(
+    @RequestParam('name') name: string,
+    @RequestParam('key') key: string,
+  ): Promise<string | null> {
+    this.assertNonProduction();
+    return this.cacheService.get({ name, key });
+  }
+
+  /**
+   * 设置缓存值
+   * 
+   * @example
+   * curl -X POST http://localhost:3001/api/cache/put \
+   *   -H "Content-Type: application/json" \
+   *   -d '{"name":"user","key":"1","value":{"id":1,"name":"张三"},"ttlSeconds":300}'
+   */
+  @PostMapping('/put')
+  async put(@RequestBody() dto: CachePutDto): Promise<{ ok: boolean }> {
+    this.assertNonProduction();
+    await this.cacheService.put(dto);
+    return { ok: true };
+  }
+
+  /**
+   * 删除缓存条目
+   * 
+   * @example
+   * # 删除单个 key
+   * curl -X DELETE "http://localhost:3001/api/cache/evict?name=user&key=1"
+   * 
+   * # 删除命名空间下所有条目（无需传 key）
+   * curl -X DELETE "http://localhost:3001/api/cache/evict?name=user&allEntries=true"
+   */
+  @DeleteMapping('/evict')
+  async evict(
+    @RequestParam('name') name: string,
+    @RequestParam('key') key?: string,
+    @RequestParam('allEntries') allEntries?: string,
+  ): Promise<{ ok: boolean }> {
+    this.assertNonProduction();
+    const isAllEntries = allEntries === 'true';
+    if (!isAllEntries && !key) {
+      throw new Error('Query parameter "key" is required when "allEntries" is not true.');
+    }
+
+    return { ok: true };
+  }
+
+  /**
+   * 清空缓存命名空间
+   * 
+   * @example
+   * curl -X DELETE "http://localhost:3001/api/cache/clear?name=user"
+   */
+  @DeleteMapping('/clear')
+  async clear(@RequestParam('name') name: string): Promise<{ ok: boolean }> {
+    this.assertNonProduction();
+    await this.cacheService.clear({ name });
+    return { ok: true };
+  }
+
+  /**
+   * 检查缓存状态
+   * 
+   * @example
+   * curl "http://localhost:3001/api/cache/status"
+   */
+  @GetMapping('/status')
+  async status(): Promise<{ initialized: boolean }> {
+    this.assertNonProduction();
+    return { initialized: this.cacheService.isInitialized() };
+  }
+}

package/template/packages/api/src/controller/menu.controller.ts

@@ -0,0 +1,46 @@
+import 'reflect-metadata';
+import {
+  RestController, GetMapping, PostMapping, PutMapping, DeleteMapping,
+  PathVariable, RequestBody, RequestParam,
+} from '@ai-partner-x/aiko-boot-starter-web';
+import { Autowired } from '@ai-partner-x/aiko-boot/di/server';
+import { MenuService } from '../service/menu.service.js';
+import type { CreateMenuDto, UpdateMenuDto } from '../dto/menu.dto.js';
+
+@RestController({ path: '/sys/menu' })
+export class MenuController {
+  @Autowired()
+  private menuService!: MenuService;
+
+  @GetMapping('/tree')
+  async getFullTree() {
+    return this.menuService.getFullTree();
+  }
+
+  @GetMapping('/user-tree')
+  async getUserTree(@RequestParam('_perms') perms: string) {
+    const permissions = perms ? perms.split(',').filter(Boolean) : [];
+    return this.menuService.getUserMenuTree(permissions);
+  }
+
+  @GetMapping('/:id')
+  async getById(@PathVariable('id') id: string) {
+    return this.menuService.getById(Number(id));
+  }
+
+  @PostMapping()
+  async create(@RequestBody() dto: CreateMenuDto) {
+    return this.menuService.createMenu(dto);
+  }
+
+  @PutMapping('/:id')
+  async update(@PathVariable('id') id: string, @RequestBody() dto: UpdateMenuDto) {
+    return this.menuService.updateMenu(Number(id), dto);
+  }
+
+  @DeleteMapping('/:id')
+  async delete(@PathVariable('id') id: string) {
+    await this.menuService.deleteMenu(Number(id));
+    return { message: '删除成功' };
+  }
+}

package/template/packages/api/src/controller/mq.controller.ts

@@ -0,0 +1,35 @@
+import 'reflect-metadata';
+import { RestController, PostMapping, RequestBody } from '@ai-partner-x/aiko-boot-starter-web';
+import { Autowired } from '@ai-partner-x/aiko-boot';
+import { MqTemplate } from '@ai-partner-x/aiko-boot-starter-mq';
+import type { SendUserEventDto, UserEventDto } from '../dto/mq.dto.js';
+
+@RestController({ path: '/mq' })
+export class MqController {
+  @Autowired(MqTemplate)
+  private mqTemplate!: MqTemplate;
+
+  /**
+   * 发送用户相关消息到 MQ
+   * POST /api/mq/send
+   */
+  @PostMapping('/send')
+  async send(@RequestBody() dto: SendUserEventDto): Promise<{ ok: boolean; topic: string }> {
+    if (dto.tag) {
+      await this.mqTemplate.send(dto.topic, dto.tag, dto.body);
+    } else {
+      await this.mqTemplate.send(dto.topic, dto.body);
+    }
+    return { ok: true, topic: dto.topic };
+  }
+
+  /**
+   * 快捷发送 user.created 事件（复用 User 实体字段）
+   * POST /api/mq/send-user-created
+   */
+  @PostMapping('/send-user-created')
+  async sendUserCreated(@RequestBody() body: UserEventDto): Promise<{ ok: boolean }> {
+    await this.mqTemplate.send('user.created', 'add', body);
+    return { ok: true };
+  }
+}

package/template/packages/api/src/controller/role.controller.ts

@@ -0,0 +1,51 @@
+import 'reflect-metadata';
+import {
+  RestController, GetMapping, PostMapping, PutMapping, DeleteMapping,
+  PathVariable, RequestBody,
+} from '@ai-partner-x/aiko-boot-starter-web';
+import { Autowired } from '@ai-partner-x/aiko-boot/di/server';
+import { RoleService } from '../service/role.service.js';
+import type { CreateRoleDto, UpdateRoleDto } from '../dto/role.dto.js';
+
+@RestController({ path: '/sys/role' })
+export class RoleController {
+  @Autowired()
+  private roleService!: RoleService;
+
+  @GetMapping('/list')
+  async list() {
+    return this.roleService.listRoles();
+  }
+
+  @GetMapping('/:id')
+  async getById(@PathVariable('id') id: string) {
+    return this.roleService.getById(Number(id));
+  }
+
+  @PostMapping()
+  async create(@RequestBody() dto: CreateRoleDto) {
+    console.log("dto1", dto);
+    return this.roleService.createRole(dto);
+  }
+
+  @PutMapping('/:id')
+  async update(@PathVariable('id') id: string, @RequestBody() dto: UpdateRoleDto) {
+    return this.roleService.updateRole(Number(id), dto);
+  }
+
+  @DeleteMapping('/:id')
+  async delete(@PathVariable('id') id: string) {
+    await this.roleService.deleteRole(Number(id));
+    return { message: '删除成功' };
+  }
+
+  @GetMapping('/:id/menus')
+  async getRoleMenus(@PathVariable('id') id: string) {
+    return this.roleService.getRoleMenuIds(Number(id));
+  }
+
+  @PutMapping('/:id/menus')
+  async assignMenus(@PathVariable('id') id: string, @RequestBody() body: { menuIds: number[] }) {
+    return this.roleService.updateRole(Number(id), { menuIds: body.menuIds });
+  }
+}

package/template/packages/api/src/controller/upload.controller.ts

@@ -0,0 +1,85 @@
+import 'reflect-metadata';
+import { RestController, PostMapping, DeleteMapping, GetMapping, RequestParam } from '@ai-partner-x/aiko-boot-starter-web';
+import { Autowired } from '@ai-partner-x/aiko-boot';
+import { StorageService, type UploadResult } from '@ai-partner-x/aiko-boot-starter-storage';
+import type { Request } from 'express';
+
+/**
+ * 文件上传控制器
+ *
+ * 提供文件上传、删除、获取 URL 等接口
+ */
+@RestController({ path: '/upload' })
+export class UploadController {
+  @Autowired()
+  private storageService!: StorageService;
+
+  /**
+   * 上传单个文件
+   *
+   * @example
+   * curl -X POST http://localhost:3001/api/upload \
+   *   -F "file=@/path/to/image.png" \
+   *   -F "folder=images"
+   */
+  @PostMapping('/')
+  async upload(req: Request): Promise<UploadResult> {
+    const file = (req as Request & { file?: Express.Multer.File }).file;
+    if (!file) {
+      throw new Error('No file uploaded');
+    }
+
+    const folder = (req.body?.folder as string) || 'uploads';
+
+    return this.storageService.upload(file.buffer, file.originalname, {
+      folder,
+      maxSize: 10 * 1024 * 1024, // 10MB
+      allowedTypes: ['image/jpeg', 'image/png', 'image/gif', 'image/webp'],
+    });
+  }
+
+  /**
+   * 删除文件
+   *
+   * @example
+   * curl -X DELETE "http://localhost:3001/api/upload?key=images/xxx.png"
+   */
+  @DeleteMapping('/')
+  async delete(@RequestParam('key') key: string): Promise<{ success: boolean }> {
+    await this.storageService.delete(key);
+    return { success: true };
+  }
+
+  /**
+   * 获取文件 URL
+   *
+   * @example
+   * curl "http://localhost:3001/api/upload/url?key=images/xxx.png"
+   */
+  @GetMapping('/url')
+  async getUrl(@RequestParam('key') key: string): Promise<{ url: string }> {
+    const url = await this.storageService.getUrl(key);
+    return { url };
+  }
+
+  /**
+   * 获取图片预览 URL（支持 OSS/COS 的图片处理参数）
+   *
+   * @example
+   * curl "http://localhost:3001/api/upload/preview?key=images/xxx.png&width=200&height=200"
+   */
+  @GetMapping('/preview')
+  async getPreviewUrl(
+    @RequestParam('key') key: string,
+    @RequestParam('width') width?: string,
+    @RequestParam('height') height?: string,
+    @RequestParam('quality') quality?: string,
+  ): Promise<{ url: string }> {
+    const url = await this.storageService.getPreviewUrl(key, {
+      width: width ? parseInt(width, 10) : undefined,
+      height: height ? parseInt(height, 10) : undefined,
+      quality: quality ? parseInt(quality, 10) : undefined,
+    });
+    return { url };
+  }
+}

package/template/packages/api/src/controller/user.controller.ts

@@ -0,0 +1,57 @@
+import 'reflect-metadata';
+import {
+  RestController, GetMapping, PostMapping, PutMapping, DeleteMapping,
+  PathVariable, RequestBody, RequestParam,
+} from '@ai-partner-x/aiko-boot-starter-web';
+import { Autowired } from '@ai-partner-x/aiko-boot/di/server';
+import { UserService } from '../service/user.service.js';
+import type { CreateUserDto, UpdateUserDto, UserPageDto } from '../dto/user.dto.js';
+
+@RestController({ path: '/sys/user' })
+export class UserController {
+  @Autowired()
+  private userService!: UserService;
+
+  @GetMapping('/page')
+  async page(
+    @RequestParam('pageNo') pageNo: string,
+    @RequestParam('pageSize') pageSize: string,
+    @RequestParam('username') username: string,
+    @RequestParam('status') status: string,
+  ) {
+    const params: UserPageDto = {
+      pageNo: pageNo ? parseInt(pageNo) : 1,
+      pageSize: pageSize ? parseInt(pageSize) : 10,
+      username: username || undefined,
+      status: status !== undefined && status !== '' ? parseInt(status) : undefined,
+    };
+    return this.userService.pageUsers(params);
+  }
+
+  @GetMapping('/:id')
+  async getById(@PathVariable('id') id: string) {
+    return this.userService.getById(Number(id));
+  }
+
+  @PostMapping()
+  async create(@RequestBody() dto: CreateUserDto) {
+    return this.userService.createUser(dto);
+  }
+
+  @PutMapping('/:id')
+  async update(@PathVariable('id') id: string, @RequestBody() dto: UpdateUserDto) {
+    return this.userService.updateUser(Number(id), dto);
+  }
+
+  @DeleteMapping('/:id')
+  async delete(@PathVariable('id') id: string) {
+    await this.userService.deleteUser(Number(id));
+    return { message: '删除成功' };
+  }
+
+  @PutMapping('/:id/password')
+  async resetPassword(@PathVariable('id') id: string, @RequestBody() body: { newPassword: string }) {
+    await this.userService.resetPassword(Number(id), body.newPassword);
+    return { message: '密码重置成功' };
+  }
+}

package/template/packages/api/src/dto/auth.dto.ts

@@ -0,0 +1,30 @@
+import { IsNotEmpty, Length, MinLength } from '@ai-partner-x/aiko-boot-starter-validation';
+
+export class LoginDto {
+  @IsNotEmpty({ message: '用户名不能为空' })
+  @Length(1, 50, { message: '用户名长度必须在 1-50 之间' })
+  username!: string;
+
+  @IsNotEmpty({ message: '密码不能为空' })
+  @MinLength(6, { message: '密码至少 6 位' })
+  password!: string;
+}
+
+export class RefreshTokenDto {
+  @IsNotEmpty({ message: 'refreshToken不能为空' })
+  refreshToken!: string;
+}
+
+/** 登录成功返回的用户信息（不含密码） */
+export class LoginResultDto {
+  accessToken!: string;
+  refreshToken!: string;
+  userInfo!: {
+    id: number;
+    username: string;
+    realName?: string;
+    email?: string;
+    roles: string[];
+    permissions: string[];
+  };
+}

package/template/packages/api/src/dto/cache.dto.ts

@@ -0,0 +1,24 @@
+/**
+ * Cache 操作 DTO
+ */
+export interface CacheGetDto {
+  name: string;
+  key: string;
+}
+
+export interface CachePutDto {
+  name: string;
+  key: string;
+  value: unknown;
+  ttlSeconds?: number;
+}
+
+export interface CacheEvictDto {
+  name: string;
+  key?: string;
+  allEntries?: boolean;
+}
+
+export interface CacheClearDto {
+  name: string;
+}

package/template/packages/api/src/dto/menu.dto.ts

@@ -0,0 +1,37 @@
+export class CreateMenuDto {
+  parentId: number = 0;
+  menuName!: string;
+  menuType!: number; // 1目录 2菜单 3按钮
+  path?: string;
+  component?: string;
+  permission?: string;
+  icon?: string;
+  sortOrder: number = 0;
+  status: number = 1;
+}
+
+export class UpdateMenuDto {
+  parentId?: number;
+  menuName?: string;
+  menuType?: number;
+  path?: string;
+  component?: string;
+  permission?: string;
+  icon?: string;
+  sortOrder?: number;
+  status?: number;
+}
+
+export interface MenuTreeVo {
+  id: number;
+  parentId: number;
+  menuName: string;
+  menuType: number;
+  path?: string;
+  component?: string;
+  permission?: string;
+  icon?: string;
+  sortOrder: number;
+  status: number;
+  children?: MenuTreeVo[];
+}

package/template/packages/api/src/dto/mq.dto.ts

@@ -0,0 +1,16 @@
+/**
+ * MQ 消息 DTO（复用 User 实体字段，不包含敏感信息）
+ */
+export interface UserEventDto {
+  id: number;
+  username: string;
+  email: string;
+  createdAt?: string;
+  updatedAt?: string;
+}
+
+export interface SendUserEventDto {
+  topic: string;
+  tag?: string;
+  body: UserEventDto;
+}