create-lumal-admin 0.0.5-beta → 0.0.6-beta

package/templates/modes/local/tests/local.test.ts.template

@@ -1,92 +1,132 @@
+import type { LumalMenuRecord } from '@lumal/core/router';
 // @vitest-environment node
-import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest'
-import { localMenus } from '../src/router/views'
-import { createBackend } from '../src/services/data-source'
-import { createApplicationSession } from '../src/services/session-runtime'
+import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest';
+import { localMenus } from '../src/app/router/views';
+import { createBackend } from '../src/app/services/data-source';
+import { createApplicationSession } from '../src/app/services/session-runtime';
 
 function storage(): Storage {
-  const values = new Map<string, string>()
+  const values = new Map<string, string>();
   return {
-    getItem: key => values.get(key) ?? null,
-    setItem: (key, value) => { values.set(key, value) },
-    removeItem: (key) => { values.delete(key) },
+    getItem: (key) => values.get(key) ?? null,
+    setItem: (key, value) => {
+      values.set(key, value);
+    },
+    removeItem: (key) => {
+      values.delete(key);
+    },
     clear: () => values.clear(),
-    key: index => [...values.keys()][index] ?? null,
-    get length() { return values.size },
-  }
+    key: (index) => [...values.keys()][index] ?? null,
+    get length() {
+      return values.size;
+    },
+  };
 }
 beforeEach(() => {
-  vi.unstubAllEnvs()
-  vi.stubGlobal('localStorage', storage())
-  vi.stubGlobal('sessionStorage', storage())
-})
+  vi.unstubAllEnvs();
+  vi.stubGlobal('localStorage', storage());
+  vi.stubGlobal('sessionStorage', storage());
+});
 afterEach(() => {
-  vi.unstubAllGlobals()
-  vi.unstubAllEnvs()
-})
+  vi.unstubAllGlobals();
+  vi.unstubAllEnvs();
+});
 function application() {
-  return createApplicationSession(createBackend, localStorage, sessionStorage)
+  return createApplicationSession(createBackend, localStorage, sessionStorage);
 }
 describe('本地应用服务', () => {
   it('认证、动态菜单和重新初始化使用同一服务契约', async () => {
-    const app = application()
-    await expect(app.login({ username: 'admin', password: 'wrong' })).rejects.toThrow('账号或密码')
-    await app.login({ username: 'admin', password: 'lumal123' })
-    expect(app.currentUser.value?.username).toBe('admin')
-    expect(app.menus.value.some(menu => menu.path === '/dashboard')).toBe(true)
-    const token = app.session.getToken()
-    const restored = application()
-    await restored.initialize()
-    expect(restored.session.getToken()).toBe(token)
-    expect(restored.ready.value).toBe(true)
-    await restored.logout()
-    expect(sessionStorage.getItem(`demo:${token}`)).toBeNull()
-    expect(restored.permissionStore.roles).toEqual([])
-  })
+    const app = application();
+    await expect(app.login({ username: 'admin', password: 'wrong' })).rejects.toThrow('账号或密码');
+    await app.login({ username: 'admin', password: 'lumal123' });
+    expect(app.currentUser.value?.username).toBe('admin');
+    expect(app.menus.value.some((menu) => menu.path === '/dashboard')).toBe(true);
+    const token = app.session.getToken();
+    const restored = application();
+    await restored.initialize();
+    expect(restored.session.getToken()).toBe(token);
+    expect(restored.ready.value).toBe(true);
+    await restored.logout();
+    expect(sessionStorage.getItem(`demo:${token}`)).toBeNull();
+    expect(restored.permissionStore.roles).toEqual([]);
+  });
   it('生产默认拒绝演示账号，显式启用仅用于演示站点', async () => {
-    vi.stubEnv('PROD', true)
-    vi.stubEnv('VITE_ENABLE_LOCAL_DEMO', '')
-    await expect(application().login({ username: 'admin', password: 'lumal123' })).rejects.toThrow('生产环境')
-    vi.stubEnv('VITE_ENABLE_LOCAL_DEMO', 'true')
-    await expect(application().login({ username: 'admin', password: 'lumal123' })).resolves.toBeUndefined()
-  })
+    vi.stubEnv('PROD', true);
+    vi.stubEnv('VITE_ENABLE_LOCAL_DEMO', '');
+    await expect(application().login({ username: 'admin', password: 'lumal123' })).rejects.toThrow('生产环境');
+    vi.stubEnv('VITE_ENABLE_LOCAL_DEMO', 'true');
+    await expect(application().login({ username: 'admin', password: 'lumal123' })).resolves.toBeUndefined();
+  });
   it('管理能力按预设启用，访客无写权限', async () => {
-    const app = application()
-    await app.login({ username: 'admin', password: 'lumal123' })
-    if (localMenus.some(menu => menu.component === 'system/users')) {
-      await app.service.save('users', { username: 'new-user', nickname: '新增', roles: ['guest'], status: 'enabled' })
-      const result = await app.service.list('users', { page: 1, pageSize: 10, query: { keyword: 'new-user' } })
-      expect(result.total).toBe(1)
-      await app.service.remove('users', String(result.items[0]?.id))
-      await expect(app.service.remove('users', 'admin')).rejects.toThrow('内置管理员')
-      await expect(app.service.save('users', { username: 'admin' })).rejects.toThrow('重复')
-      await expect(app.service.save('roles', { code: 'admin', status: 'disabled', permissions: [] }, 'admin')).rejects.toThrow('内置管理员')
-      await app.service.save('roles', { code: 'reader', name: '只读角色', status: 'enabled', permissions: ['system:user:list'] })
-      await app.service.save('users', { username: 'reader', roles: ['reader'], status: 'enabled' })
-      await app.service.save('dictionaries/items', { typeCode: 'status', label: '启用', value: 'enabled' })
-      expect((await app.service.list('dictionaries/items', { page: 1, pageSize: 10, query: { typeCode: 'other' } })).total).toBe(0)
-      await app.service.save('menus', { title: '目录', path: '/group', name: 'Group', type: 'directory' })
-      const group = (await app.service.list('menus', { page: 1, pageSize: 10, query: { keyword: 'Group' } })).items[0]!
-      await expect(app.service.save('menus', { ...group, parentId: group.id }, String(group.id))).rejects.toThrow('循环')
-      await expect(app.service.save('menus', { title: '恶意', path: '/bad', name: 'Bad', type: 'menu', component: 'https://evil.invalid/a.js' })).rejects.toThrow('白名单')
-      await app.login({ username: 'reader', password: 'lumal123' })
-      expect(app.permissionStore.permissions).toEqual(['system:user:list'])
-      await expect(app.service.list('users', { page: 1, pageSize: 10, query: {} })).resolves.toHaveProperty('total')
-      await expect(app.service.save('users', { username: 'denied' })).rejects.toThrow('无操作权限')
+    const app = application();
+    await app.login({ username: 'admin', password: 'lumal123' });
+    const flatten = (menus: LumalMenuRecord[]): LumalMenuRecord[] =>
+      menus.flatMap((menu) => [menu, ...flatten(menu.children ?? [])]);
+    if (flatten(localMenus).some((menu) => menu.component === 'system/users')) {
+      await app.service.save('users', { username: 'new-user', nickname: '新增', roles: ['guest'], status: 'enabled' });
+      const result = await app.service.list('users', { page: 1, pageSize: 10, query: { keyword: 'new-user' } });
+      expect(result.total).toBe(1);
+      await app.service.remove('users', String(result.items[0]?.id));
+      await expect(app.service.remove('users', 'admin')).rejects.toThrow('内置管理员');
+      await expect(
+        app.service.save('users', { username: 'admin', nickname: '重复', roles: ['guest'] }),
+      ).rejects.toThrow('重复');
+      await expect(
+        app.service.save('roles', { code: 'admin', name: '管理员', status: 'disabled' }, 'admin'),
+      ).rejects.toThrow('内置角色');
+      await app.service.save('roles', { code: 'reader', name: '只读角色', status: 'enabled' });
+      await app.service.request('PUT', '/system/roles/reader/permissions', {
+        body: { permissions: ['system:user:list'] },
+      });
+      await app.service.save('users', {
+        username: 'reader',
+        nickname: '只读用户',
+        roles: ['reader'],
+        status: 'enabled',
+      });
+      await app.service.save('dictionaries/items', { typeCode: 'status', label: '待审核', value: 'pending' });
+      expect(await app.service.request('GET', '/system/dictionaries/items', { query: { typeCode: 'other' } })).toEqual(
+        [],
+      );
+      await app.service.save('menus', { title: '目录', path: '/group', name: 'Group', type: 'directory' });
+      const group = (await app.service.request<Record<string, unknown>[]>('GET', '/system/menus')).find(
+        (row) => row.name === 'Group',
+      )!;
+      await expect(app.service.save('menus', { ...group, parentId: group.id }, String(group.id))).rejects.toThrow(
+        '循环',
+      );
+      await expect(
+        app.service.save('menus', {
+          title: '恶意',
+          path: '/bad',
+          name: 'Bad',
+          type: 'menu',
+          component: 'https://evil.invalid/a.js',
+        }),
+      ).rejects.toThrow('白名单');
+      await app.login({ username: 'reader', password: 'lumal123' });
+      expect(app.permissionStore.permissions).toEqual(['system:user:list']);
+      await expect(app.service.list('users', { page: 1, pageSize: 10, query: {} })).resolves.toHaveProperty('total');
+      await expect(app.service.save('users', { username: 'denied' })).rejects.toThrow('无操作权限');
+    } else if (flatten(localMenus).some((menu) => menu.component === 'migration/users')) {
+      expect(app.permissionStore.permissions).toContain('system:user:create');
+      await app.service.save('users', {
+        username: 'migration-only',
+        nickname: '迁移用户',
+        roles: ['guest'],
+        status: 'enabled',
+      });
+      const result = await app.service.list('users', { page: 1, pageSize: 10, query: { keyword: 'migration-only' } });
+      expect(result.total).toBe(1);
+      await app.service.remove('users', String(result.items[0]?.id));
+      expect(
+        (await app.service.list('users', { page: 1, pageSize: 10, query: { keyword: 'migration-only' } })).total,
+      ).toBe(0);
+    } else {
+      await expect(app.service.list('users', { page: 1, pageSize: 10, query: {} })).rejects.toThrow('不支持');
     }
-    else if (localMenus.some(menu => menu.component === 'migration/users')) {
-      expect(app.permissionStore.permissions).toContain('system:user:create')
-      await app.service.save('users', { username: 'migration-only', nickname: '迁移用户', roles: ['guest'], status: 'enabled' })
-      const result = await app.service.list('users', { page: 1, pageSize: 10, query: { keyword: 'migration-only' } })
-      expect(result.total).toBe(1)
-      await app.service.remove('users', String(result.items[0]?.id))
-      expect((await app.service.list('users', { page: 1, pageSize: 10, query: { keyword: 'migration-only' } })).total).toBe(0)
-    }
-    else {
-      await expect(app.service.list('users', { page: 1, pageSize: 10, query: {} })).rejects.toThrow('无操作权限')
-    }
-    await app.login({ username: 'guest', password: 'lumal123' })
-    expect(app.permissionStore.permissions).toEqual([])
-    await expect(app.service.save('users', { username: 'denied' })).rejects.toThrow('无操作权限')
-  })
-})
+    await app.login({ username: 'guest', password: 'lumal123' });
+    expect(app.permissionStore.permissions).toEqual([]);
+    await expect(app.service.save('users', { username: 'denied' })).rejects.toThrow();
+  });
+});

package/templates/presets/standard/src/modules/dashboard/DashboardView.vue

@@ -0,0 +1,52 @@
+<script setup lang="ts">
+import { LumalPage } from '@lumal/core/components';
+import { ElEmpty } from 'element-plus';
+import { currentUser } from '../../app/services/session';
+import DashboardSessionStatus from './components/DashboardSessionStatus.vue';
+import DashboardShortcuts from './components/DashboardShortcuts.vue';
+
+/***********************工作台装配*********************/
+const today = new Intl.DateTimeFormat('zh-CN', { dateStyle: 'full' }).format(new Date());
+</script>
+
+<template>
+  <LumalPage class="lumal-admin-page" title="工作台">
+    <header class="dashboard-welcome">
+      <div>
+        <h2>你好，{{ currentUser?.name }}</h2>
+        <p>{{ today }}</p>
+      </div>
+    </header>
+    <DashboardShortcuts />
+    <DashboardSessionStatus />
+    <section class="dashboard-section">
+      <h3>业务动态</h3>
+      <ElEmpty description="暂无业务动态" :image-size="72" />
+    </section>
+  </LumalPage>
+</template>
+
+<style scoped>
+.dashboard-welcome {
+  display: flex;
+  align-items: center;
+  justify-content: space-between;
+  padding: 8px 0 24px;
+}
+.dashboard-welcome h2 {
+  margin: 0 0 8px;
+  font-size: 22px;
+}
+.dashboard-welcome p {
+  margin: 0;
+  color: var(--el-text-color-secondary);
+}
+.dashboard-section {
+  padding-top: 24px;
+  border-top: 1px solid var(--el-border-color-lighter);
+}
+.dashboard-section h3 {
+  margin: 0;
+  font-size: 16px;
+}
+</style>

package/templates/presets/standard/src/modules/dashboard/components/DashboardSessionStatus.vue

@@ -0,0 +1,41 @@
+<script setup lang="ts">
+import { ElDescriptions, ElDescriptionsItem, ElTag } from 'element-plus';
+import { appConfig } from '../../../app.config';
+import { permissionStore } from '../../../app/services/session';
+
+/***********************真实应用与会话状态*********************/
+const source = appConfig.apiMode === 'local' ? '本地开发演示' : 'HTTP API';
+</script>
+
+<template>
+  <section class="session-status">
+    <h3>应用状态</h3>
+    <ElDescriptions :column="1" border>
+      <ElDescriptionsItem label="数据源">
+        <ElTag :type="appConfig.apiMode === 'local' ? 'warning' : 'success'">
+          {{ source }}
+        </ElTag>
+      </ElDescriptionsItem>
+      <ElDescriptionsItem label="当前角色">
+        {{ permissionStore.roles.join('、') || '无' }}
+      </ElDescriptionsItem>
+      <ElDescriptionsItem label="可用操作权限">
+        {{ permissionStore.permissions.length }}
+      </ElDescriptionsItem>
+      <ElDescriptionsItem label="启用模块">
+        {{ appConfig.features.join('、') || '无可选模块' }}
+      </ElDescriptionsItem>
+    </ElDescriptions>
+  </section>
+</template>
+
+<style scoped>
+.session-status {
+  padding: 24px 0;
+  border-top: 1px solid var(--el-border-color-lighter);
+}
+.session-status h3 {
+  margin: 0 0 16px;
+  font-size: 16px;
+}
+</style>

package/templates/presets/standard/src/modules/dashboard/components/DashboardShortcuts.vue

@@ -0,0 +1,51 @@
+<script setup lang="ts">
+import type { SidebarMenuItem } from '@lumal/core/router';
+import { LumalIcon } from '@lumal/icons-vue';
+import { ElButton, ElEmpty } from 'element-plus';
+import { computed } from 'vue';
+import { useRouter } from 'vue-router';
+import { createAdminSidebarMenus } from '../../../app/router';
+
+/***********************当前权限下的快捷入口*********************/
+const router = useRouter();
+function flatten(items: SidebarMenuItem[]): SidebarMenuItem[] {
+  return items.flatMap((item) => (item.children?.length ? flatten(item.children) : [item]));
+}
+const shortcuts = computed(() =>
+  flatten(createAdminSidebarMenus())
+    .filter((item) => item.path !== '/dashboard' && !item.externalLink)
+    .slice(0, 6),
+);
+</script>
+
+<template>
+  <section class="dashboard-shortcuts">
+    <h3>常用入口</h3>
+    <div v-if="shortcuts.length" class="shortcut-list">
+      <ElButton v-for="item in shortcuts" :key="item.path" @click="router.push(item.path)">
+        <LumalIcon :name="item.icon || 'lumal:grid'" />{{ item.title }}
+      </ElButton>
+    </div>
+    <ElEmpty v-else description="暂无可用入口" :image-size="48" />
+  </section>
+</template>
+
+<style scoped>
+.dashboard-shortcuts {
+  padding-bottom: 24px;
+}
+.dashboard-shortcuts h3 {
+  margin: 0 0 16px;
+  font-size: 16px;
+}
+.shortcut-list {
+  display: flex;
+  flex-wrap: wrap;
+  gap: 12px;
+}
+.shortcut-list :deep(.el-button) {
+  min-height: 40px;
+  margin: 0;
+  gap: 8px;
+}
+</style>

package/templates/presets/standard/src/modules/profile/ProfileView.vue

@@ -0,0 +1,109 @@
+<script setup lang="ts">
+import type { SchemaFormItem, SchemaFormModel } from '@lumal/core/components';
+import { LumalPage, LumalSchemaForm } from '@lumal/core/components';
+import { ElAlert, ElButton, ElMessage, ElTabPane, ElTabs } from 'element-plus';
+import { shallowRef, watch } from 'vue';
+import { application, service } from '../../app/services/session';
+import { useAsyncData } from '../../shared/composables/use-async-data';
+import { createProfileService, profileInput } from './api';
+import ProfilePasswordForm from './components/ProfilePasswordForm.vue';
+
+/***********************个人资料读取与保存*********************/
+const api = createProfileService(service);
+const state = useAsyncData(api.get, null);
+const model = shallowRef<SchemaFormModel>({});
+const saving = shallowRef(false);
+const needsSessionRefresh = shallowRef(false);
+const failure = shallowRef('');
+const success = shallowRef('');
+watch(state.data, (value) => {
+  if (value) model.value = { ...value };
+});
+const schemas: SchemaFormItem[] = [
+  { field: 'username', label: '用户名', readonly: true },
+  {
+    field: 'roles',
+    label: '角色',
+    readonly: true,
+    formatter: (value) => (Array.isArray(value) ? value.join('、') : ''),
+  },
+  { field: 'nickname', label: '昵称', required: true, rules: [{ max: 32, message: '昵称最多 32 个字符' }] },
+  { field: 'phone', label: '手机号', rules: [{ pattern: /^1\d{10}$/, message: '手机号格式错误' }] },
+];
+async function save(values: SchemaFormModel): Promise<void> {
+  if (saving.value || needsSessionRefresh.value) return;
+  saving.value = true;
+  failure.value = '';
+  success.value = '';
+  let persisted = false;
+  try {
+    model.value = { ...(await api.save(profileInput(values))) };
+    persisted = true;
+    needsSessionRefresh.value = true;
+    await application.refreshAccess();
+    needsSessionRefresh.value = false;
+    success.value = '个人资料已更新';
+    ElMessage.success('个人资料已更新');
+  } catch (reason) {
+    failure.value = `${persisted ? '资料已保存，但会话刷新失败，请重新读取：' : ''}${reason instanceof Error ? reason.message : '保存失败'}`;
+  } finally {
+    saving.value = false;
+  }
+}
+
+/***********************部分成功后的只读重试*********************/
+async function reload(): Promise<void> {
+  if (saving.value || state.loading.value) return;
+  saving.value = true;
+  failure.value = '';
+  try {
+    // 已保存的资料不重复提交；恢复会话授权后再读取服务端资料。
+    if (needsSessionRefresh.value) {
+      await application.refreshAccess();
+      needsSessionRefresh.value = false;
+    }
+    await state.load();
+  } catch (reason) {
+    failure.value = `${needsSessionRefresh.value ? '资料已保存，但会话刷新失败，请重试：' : ''}${reason instanceof Error ? reason.message : '读取失败'}`;
+  } finally {
+    saving.value = false;
+  }
+}
+</script>
+
+<template>
+  <LumalPage class="lumal-admin-page" title="个人中心">
+    <ElAlert v-if="state.error.value || failure" :title="state.error.value || failure" type="error" :closable="false">
+      <ElButton link :loading="saving" @click="reload">
+        {{ needsSessionRefresh ? '重试会话刷新' : '重新读取' }}
+      </ElButton>
+    </ElAlert>
+    <ElAlert v-if="success" :title="success" type="success" :closable="false" />
+    <ElTabs class="profile-tabs">
+      <ElTabPane label="个人资料">
+        <LumalSchemaForm
+          v-if="state.data.value"
+          v-model="model"
+          :schemas="schemas"
+          :columns="1"
+          mode="edit"
+          show-actions
+          :disabled="needsSessionRefresh"
+          :submit-disabled="needsSessionRefresh"
+          :submit-loading="saving"
+          submit-text="保存资料"
+          @submit="save"
+        />
+      </ElTabPane>
+      <ElTabPane label="修改密码" lazy>
+        <ProfilePasswordForm :api="api" />
+      </ElTabPane>
+    </ElTabs>
+  </LumalPage>
+</template>
+
+<style scoped>
+.profile-tabs {
+  max-width: 720px;
+}
+</style>

package/templates/presets/standard/src/modules/profile/api.ts

@@ -0,0 +1,49 @@
+import type { SchemaFormModel } from '@lumal/core/components';
+import type { BusinessTransport } from '../../app/services/contracts';
+import { object, stringArray, text } from '../../shared/api';
+
+export interface Profile {
+  id: string;
+  username: string;
+  nickname: string;
+  phone: string;
+  roles: string[];
+}
+export interface ProfileInput {
+  nickname: string;
+  phone: string;
+}
+export interface PasswordInput {
+  currentPassword: string;
+  newPassword: string;
+}
+export function profileInput(model: SchemaFormModel): ProfileInput {
+  const nickname = text(model.nickname, '昵称', true);
+  const phone = text(model.phone, '手机号');
+  if (nickname.length > 32 || (phone && !/^1\d{10}$/.test(phone)))
+    throw new Error('昵称最多 32 个字符，手机号为 11 位数字');
+  return { nickname, phone };
+}
+export function passwordInput(model: SchemaFormModel): PasswordInput {
+  const currentPassword = text(model.currentPassword, '当前密码', true);
+  const newPassword = text(model.newPassword, '新密码', true);
+  if (newPassword.length < 8 || newPassword.length > 32 || newPassword !== model.confirmPassword)
+    throw new Error('新密码为 8 到 32 位，且两次输入必须相同');
+  return { currentPassword, newPassword };
+}
+function parseProfile(value: unknown): Profile {
+  const raw = object(value);
+  return {
+    ...profileInput(raw),
+    id: text(raw.id, '用户 ID', true),
+    username: text(raw.username, '用户名', true),
+    roles: stringArray(raw.roles),
+  };
+}
+export function createProfileService(transport: BusinessTransport) {
+  return {
+    get: async () => parseProfile(await transport.request('GET', '/profile')),
+    save: async (input: ProfileInput) => parseProfile(await transport.request('PUT', '/profile', { body: input })),
+    changePassword: (input: PasswordInput) => transport.request<void>('PUT', '/profile/password', { body: input }),
+  };
+}

package/templates/presets/standard/src/modules/profile/components/ProfilePasswordForm.vue

@@ -0,0 +1,68 @@
+<script setup lang="ts">
+import type { SchemaFormItem, SchemaFormModel } from '@lumal/core/components';
+import type { createProfileService } from '../api';
+import { LumalSchemaForm } from '@lumal/core/components';
+import { ElAlert } from 'element-plus';
+import { shallowRef } from 'vue';
+import { passwordInput } from '../api';
+
+/***********************真实密码更新接口*********************/
+const props = defineProps<{ api: ReturnType<typeof createProfileService> }>();
+const model = shallowRef<SchemaFormModel>({});
+const saving = shallowRef(false);
+const failure = shallowRef('');
+const success = shallowRef('');
+const schemas: SchemaFormItem[] = [
+  {
+    field: 'currentPassword',
+    label: '当前密码',
+    required: true,
+    component: 'input',
+    componentProps: { type: 'password', showPassword: true, autocomplete: 'current-password' },
+  },
+  {
+    field: 'newPassword',
+    label: '新密码',
+    required: true,
+    component: 'input',
+    rules: [{ min: 8, max: 32, message: '密码长度为 8 到 32 位' }],
+    componentProps: { type: 'password', showPassword: true, autocomplete: 'new-password' },
+  },
+  {
+    field: 'confirmPassword',
+    label: '确认新密码',
+    required: true,
+    component: 'input',
+    componentProps: { type: 'password', showPassword: true, autocomplete: 'new-password' },
+  },
+];
+async function submit(values: SchemaFormModel): Promise<void> {
+  if (saving.value) return;
+  saving.value = true;
+  failure.value = '';
+  success.value = '';
+  try {
+    await props.api.changePassword(passwordInput(values));
+    model.value = {};
+    success.value = '密码已通过接口更新';
+  } catch (reason) {
+    failure.value = reason instanceof Error ? reason.message : '密码更新失败';
+  } finally {
+    saving.value = false;
+  }
+}
+</script>
+
+<template>
+  <ElAlert v-if="failure" :title="failure" type="error" role="alert" :closable="false" />
+  <ElAlert v-if="success" :title="success" type="success" :closable="false" />
+  <LumalSchemaForm
+    v-model="model"
+    :schemas="schemas"
+    :columns="1"
+    show-actions
+    submit-text="更新密码"
+    :submit-loading="saving"
+    @submit="submit"
+  />
+</template>

package/templates/presets/standard/src/modules/profile/local.ts

@@ -0,0 +1,40 @@
+import type { DataRow } from '../../app/services/contracts';
+import type { LocalBusinessContext, LocalHandler } from '../../app/services/local-contracts';
+import { object } from '../../app/menu-policy';
+import { profileInput } from './api';
+
+export function createLocalHandler({ db, user }: LocalBusinessContext): LocalHandler {
+  return {
+    handles: (path) => path === '/profile' || path === '/profile/password',
+    async request(method, path, input) {
+      const current = db.read('users').find((row) => row.id === user().id);
+      if (!current) throw new Error('当前用户不存在');
+      const clean = ({ password: _password, ...profile }: DataRow) => profile;
+      if (path === '/profile' && method === 'GET') return clean(current);
+      if (path === '/profile' && method === 'PUT') {
+        const next = { ...current, ...profileInput(object(input.body)) };
+        db.write(
+          'users',
+          db.read('users').map((row) => (row.id === current.id ? next : row)),
+        );
+        return clean(next);
+      }
+      if (path === '/profile/password' && method === 'PUT') {
+        const body = object(input.body);
+        if (
+          body.currentPassword !== current.password ||
+          typeof body.newPassword !== 'string' ||
+          body.newPassword.length < 8 ||
+          body.newPassword.length > 32
+        )
+          throw new Error('当前密码错误或新密码长度不符合要求');
+        db.write(
+          'users',
+          db.read('users').map((row) => (row.id === current.id ? { ...row, password: body.newPassword } : row)),
+        );
+        return;
+      }
+      throw new Error('不支持的个人资料操作');
+    },
+  };
+}

package/templates/presets/standard/src/modules/profile/module.ts

@@ -0,0 +1,11 @@
+import type { AppModule } from '../../app/module';
+
+export const menus: AppModule['menus'] = [
+  {
+    path: '/profile',
+    name: 'Profile',
+    component: 'profile/index',
+    meta: { title: '个人中心', icon: 'lumal:user', hideInMenu: true, keepAlive: false },
+  },
+];
+export const views: AppModule['views'] = { 'profile/index': () => import('./ProfileView.vue') };