create-ssnode-cli 0.2.0 → 0.2.2

package/templates/backend/node_modules/.bin/js-yaml

@@ -6,9 +6,9 @@ case `uname` in
 esac
 
 if [ -z "$NODE_PATH" ]; then
-  export NODE_PATH="/Users/sunset/Desktop/YunZhiHuiProgram/fullstack-template/node_modules/.pnpm/js-yaml@4.1.0/node_modules/js-yaml/bin/node_modules:/Users/sunset/Desktop/YunZhiHuiProgram/fullstack-template/node_modules/.pnpm/js-yaml@4.1.0/node_modules/js-yaml/node_modules:/Users/sunset/Desktop/YunZhiHuiProgram/fullstack-template/node_modules/.pnpm/js-yaml@4.1.0/node_modules:/Users/sunset/Desktop/YunZhiHuiProgram/fullstack-template/node_modules/.pnpm/node_modules"
+  export NODE_PATH="/Users/sunset/Desktop/YunZhiHuiProgram/fullstack-template/node_modules/.pnpm/js-yaml@4.3.2/node_modules/js-yaml/bin/node_modules:/Users/sunset/Desktop/YunZhiHuiProgram/fullstack-template/node_modules/.pnpm/js-yaml@4.3.2/node_modules/js-yaml/node_modules:/Users/sunset/Desktop/YunZhiHuiProgram/fullstack-template/node_modules/.pnpm/js-yaml@4.3.2/node_modules:/Users/sunset/Desktop/YunZhiHuiProgram/fullstack-template/node_modules/.pnpm/node_modules"
 else
-  export NODE_PATH="/Users/sunset/Desktop/YunZhiHuiProgram/fullstack-template/node_modules/.pnpm/js-yaml@4.1.0/node_modules/js-yaml/bin/node_modules:/Users/sunset/Desktop/YunZhiHuiProgram/fullstack-template/node_modules/.pnpm/js-yaml@4.1.0/node_modules/js-yaml/node_modules:/Users/sunset/Desktop/YunZhiHuiProgram/fullstack-template/node_modules/.pnpm/js-yaml@4.1.0/node_modules:/Users/sunset/Desktop/YunZhiHuiProgram/fullstack-template/node_modules/.pnpm/node_modules:$NODE_PATH"
+  export NODE_PATH="/Users/sunset/Desktop/YunZhiHuiProgram/fullstack-template/node_modules/.pnpm/js-yaml@4.3.2/node_modules/js-yaml/bin/node_modules:/Users/sunset/Desktop/YunZhiHuiProgram/fullstack-template/node_modules/.pnpm/js-yaml@4.3.2/node_modules/js-yaml/node_modules:/Users/sunset/Desktop/YunZhiHuiProgram/fullstack-template/node_modules/.pnpm/js-yaml@4.3.2/node_modules:/Users/sunset/Desktop/YunZhiHuiProgram/fullstack-template/node_modules/.pnpm/node_modules:$NODE_PATH"
 fi
 if [ -x "$basedir/node" ]; then
   exec "$basedir/node"  "$basedir/../js-yaml/bin/js-yaml.js" "$@"

package/templates/backend/node_modules/.bin/typeorm

@@ -6,9 +6,9 @@ case `uname` in
 esac
 
 if [ -z "$NODE_PATH" ]; then
-  export NODE_PATH="/Users/sunset/Desktop/YunZhiHuiProgram/fullstack-template/node_modules/.pnpm/typeorm@0.3.20_better-sqlite3@13.0.3_ts-node@10.9.2/node_modules/typeorm/node_modules:/Users/sunset/Desktop/YunZhiHuiProgram/fullstack-template/node_modules/.pnpm/typeorm@0.3.20_better-sqlite3@13.0.3_ts-node@10.9.2/node_modules:/Users/sunset/Desktop/YunZhiHuiProgram/fullstack-template/node_modules/.pnpm/node_modules"
+  export NODE_PATH="/Users/sunset/Desktop/YunZhiHuiProgram/fullstack-template/node_modules/.pnpm/typeorm@0.3.31_better-sqlite3@13.0.3_ts-node@10.9.2/node_modules/typeorm/node_modules:/Users/sunset/Desktop/YunZhiHuiProgram/fullstack-template/node_modules/.pnpm/typeorm@0.3.31_better-sqlite3@13.0.3_ts-node@10.9.2/node_modules:/Users/sunset/Desktop/YunZhiHuiProgram/fullstack-template/node_modules/.pnpm/node_modules"
 else
-  export NODE_PATH="/Users/sunset/Desktop/YunZhiHuiProgram/fullstack-template/node_modules/.pnpm/typeorm@0.3.20_better-sqlite3@13.0.3_ts-node@10.9.2/node_modules/typeorm/node_modules:/Users/sunset/Desktop/YunZhiHuiProgram/fullstack-template/node_modules/.pnpm/typeorm@0.3.20_better-sqlite3@13.0.3_ts-node@10.9.2/node_modules:/Users/sunset/Desktop/YunZhiHuiProgram/fullstack-template/node_modules/.pnpm/node_modules:$NODE_PATH"
+  export NODE_PATH="/Users/sunset/Desktop/YunZhiHuiProgram/fullstack-template/node_modules/.pnpm/typeorm@0.3.31_better-sqlite3@13.0.3_ts-node@10.9.2/node_modules/typeorm/node_modules:/Users/sunset/Desktop/YunZhiHuiProgram/fullstack-template/node_modules/.pnpm/typeorm@0.3.31_better-sqlite3@13.0.3_ts-node@10.9.2/node_modules:/Users/sunset/Desktop/YunZhiHuiProgram/fullstack-template/node_modules/.pnpm/node_modules:$NODE_PATH"
 fi
 if [ -x "$basedir/node" ]; then
   exec "$basedir/node"  "$basedir/../typeorm/cli.js" "$@"

package/templates/backend/node_modules/.bin/typeorm-ts-node-commonjs

@@ -6,9 +6,9 @@ case `uname` in
 esac
 
 if [ -z "$NODE_PATH" ]; then
-  export NODE_PATH="/Users/sunset/Desktop/YunZhiHuiProgram/fullstack-template/node_modules/.pnpm/typeorm@0.3.20_better-sqlite3@13.0.3_ts-node@10.9.2/node_modules/typeorm/node_modules:/Users/sunset/Desktop/YunZhiHuiProgram/fullstack-template/node_modules/.pnpm/typeorm@0.3.20_better-sqlite3@13.0.3_ts-node@10.9.2/node_modules:/Users/sunset/Desktop/YunZhiHuiProgram/fullstack-template/node_modules/.pnpm/node_modules"
+  export NODE_PATH="/Users/sunset/Desktop/YunZhiHuiProgram/fullstack-template/node_modules/.pnpm/typeorm@0.3.31_better-sqlite3@13.0.3_ts-node@10.9.2/node_modules/typeorm/node_modules:/Users/sunset/Desktop/YunZhiHuiProgram/fullstack-template/node_modules/.pnpm/typeorm@0.3.31_better-sqlite3@13.0.3_ts-node@10.9.2/node_modules:/Users/sunset/Desktop/YunZhiHuiProgram/fullstack-template/node_modules/.pnpm/node_modules"
 else
-  export NODE_PATH="/Users/sunset/Desktop/YunZhiHuiProgram/fullstack-template/node_modules/.pnpm/typeorm@0.3.20_better-sqlite3@13.0.3_ts-node@10.9.2/node_modules/typeorm/node_modules:/Users/sunset/Desktop/YunZhiHuiProgram/fullstack-template/node_modules/.pnpm/typeorm@0.3.20_better-sqlite3@13.0.3_ts-node@10.9.2/node_modules:/Users/sunset/Desktop/YunZhiHuiProgram/fullstack-template/node_modules/.pnpm/node_modules:$NODE_PATH"
+  export NODE_PATH="/Users/sunset/Desktop/YunZhiHuiProgram/fullstack-template/node_modules/.pnpm/typeorm@0.3.31_better-sqlite3@13.0.3_ts-node@10.9.2/node_modules/typeorm/node_modules:/Users/sunset/Desktop/YunZhiHuiProgram/fullstack-template/node_modules/.pnpm/typeorm@0.3.31_better-sqlite3@13.0.3_ts-node@10.9.2/node_modules:/Users/sunset/Desktop/YunZhiHuiProgram/fullstack-template/node_modules/.pnpm/node_modules:$NODE_PATH"
 fi
 if [ -x "$basedir/node" ]; then
   exec "$basedir/node"  "$basedir/../typeorm/cli-ts-node-commonjs.js" "$@"

package/templates/backend/node_modules/.bin/typeorm-ts-node-esm

@@ -6,9 +6,9 @@ case `uname` in
 esac
 
 if [ -z "$NODE_PATH" ]; then
-  export NODE_PATH="/Users/sunset/Desktop/YunZhiHuiProgram/fullstack-template/node_modules/.pnpm/typeorm@0.3.20_better-sqlite3@13.0.3_ts-node@10.9.2/node_modules/typeorm/node_modules:/Users/sunset/Desktop/YunZhiHuiProgram/fullstack-template/node_modules/.pnpm/typeorm@0.3.20_better-sqlite3@13.0.3_ts-node@10.9.2/node_modules:/Users/sunset/Desktop/YunZhiHuiProgram/fullstack-template/node_modules/.pnpm/node_modules"
+  export NODE_PATH="/Users/sunset/Desktop/YunZhiHuiProgram/fullstack-template/node_modules/.pnpm/typeorm@0.3.31_better-sqlite3@13.0.3_ts-node@10.9.2/node_modules/typeorm/node_modules:/Users/sunset/Desktop/YunZhiHuiProgram/fullstack-template/node_modules/.pnpm/typeorm@0.3.31_better-sqlite3@13.0.3_ts-node@10.9.2/node_modules:/Users/sunset/Desktop/YunZhiHuiProgram/fullstack-template/node_modules/.pnpm/node_modules"
 else
-  export NODE_PATH="/Users/sunset/Desktop/YunZhiHuiProgram/fullstack-template/node_modules/.pnpm/typeorm@0.3.20_better-sqlite3@13.0.3_ts-node@10.9.2/node_modules/typeorm/node_modules:/Users/sunset/Desktop/YunZhiHuiProgram/fullstack-template/node_modules/.pnpm/typeorm@0.3.20_better-sqlite3@13.0.3_ts-node@10.9.2/node_modules:/Users/sunset/Desktop/YunZhiHuiProgram/fullstack-template/node_modules/.pnpm/node_modules:$NODE_PATH"
+  export NODE_PATH="/Users/sunset/Desktop/YunZhiHuiProgram/fullstack-template/node_modules/.pnpm/typeorm@0.3.31_better-sqlite3@13.0.3_ts-node@10.9.2/node_modules/typeorm/node_modules:/Users/sunset/Desktop/YunZhiHuiProgram/fullstack-template/node_modules/.pnpm/typeorm@0.3.31_better-sqlite3@13.0.3_ts-node@10.9.2/node_modules:/Users/sunset/Desktop/YunZhiHuiProgram/fullstack-template/node_modules/.pnpm/node_modules:$NODE_PATH"
 fi
 if [ -x "$basedir/node" ]; then
   exec "$basedir/node"  "$basedir/../typeorm/cli-ts-node-esm.js" "$@"

package/templates/backend/ops/docker/.env.example

@@ -32,3 +32,7 @@ LOG_LEVEL=warn
 ADMIN_PASSWORD=
 APP_SIGN_KEY=
 APP_SIGN_TS_WINDOW=300
+# 单点登录(默认关闭;接入时改 true 并配 ticketKey,见 README「单点登录」)
+SSO_ENABLED=false
+SSO_TICKET_KEY=
+SSO_TS_WINDOW=300

package/templates/backend/ops/docker/config.sh

@@ -33,6 +33,8 @@ CONTAINER_PORT="$PORT"
 CONTAINER_DATA_DIR="${CONTAINER_DATA_DIR:-/app/data}"
 # 重启策略
 RESTART_POLICY="${RESTART_POLICY:-unless-stopped}"
+# 版本轮转保留数(docker = 本镜像仓库历史 tag 数,即回滚窗口;顶层 install.sh 轮转时读)
+KEEP_VERSIONS="${KEEP_VERSIONS:-3}"
 
 # 读 current 的 version + .build-ts 作镜像 tag(<version>-<14位ts>,与 systemd/pm2 releases/<ver>-<ts> 同口径)。
 # .build-ts 由 buildops 写入;缺则回退纯 version(兼容旧 release,但同 version 重发会覆盖,留意回滚)。

package/templates/backend/ops/docker/install.sh

@@ -67,4 +67,39 @@ docker run -d \
   "$IMAGE_TAG"
 
 echo "✓ 容器已起: $CONTAINER_NAME (宿主 $HOST_PORT → $CONTAINER_PORT, tag $TAG)"
+
+# ── 镜像轮转:对齐 systemd/pm2 的 rotate_releases 口径 ──
+# docker 模式版本靠镜像 tag、不进 releases/,故轮转对象 = 本镜像仓库的历史 tag:
+# 按末段 14 位时间戳降序保留 KEEP_VERSIONS 个(缺省见 config.sh),其余 rmi(回滚窗口=保留数)。
+# KEEP_VERSIONS 优先级:顶层 --keep/env 显式 export > config.sh 持久值(运维改这处)。
+# 不删运行中容器在用的 tag(防御);versionswitch.sh 切版本不经过本脚本,不受影响。
+rotate_images() {
+  # 半成品兜底:经典 builder 多阶段构建的 deps 阶段成品(711MB 级 <none>)无 tag、无子层,轮转清不到;
+  # 按 Dockerfile 烙进各层的 app label 定向 prune(仅本应用,不碰宿主其他镜像)。
+  # 但该 <none> 同时是经典 builder 的构建缓存(删掉 = 下次全量重跑 apt+npm ci),故加 until=72h:
+  # 只清 72h 前的陈年残留,当天/周末内刚生成的缓存保住(发版即刷新存活期);放在 tag 轮转前,
+  # 不受 ≤KEEP_VERSIONS 提前 return 影响。
+  docker image prune -f --filter "label=app=$IMAGE" --filter "until=72h" >/dev/null 2>&1 || true
+  local running_ref
+  running_ref="$(docker inspect "$CONTAINER_NAME" --format '{{.Config.Image}}' 2>/dev/null || true)"
+  local list=() t
+  # tag 形如 <version>-<14位ts>;awk 提取末段时间戳做 sort 键降序(与顶层 sort_releases 同构)
+  while IFS= read -r t; do
+    [[ -n "$t" ]] || continue
+    list+=("$t")
+  done < <(docker images "$IMAGE" --format '{{.Tag}}' | grep -E -- '-[0-9]{14}$' \
+    | awk '{ts=$0; sub(/.*-/,"",ts); print ts" "$0}' | sort -r | awk '{print $2}')
+  [[ ${#list[@]} -le $KEEP_VERSIONS ]] && return 0
+  local del=("${list[@]:$KEEP_VERSIONS}")
+  for t in "${del[@]}"; do
+    [[ -n "$t" ]] || continue
+    [[ "$IMAGE:$t" = "$running_ref" ]] && continue
+    docker rmi "$IMAGE:$t" >/dev/null 2>&1 \
+      && echo "  ↳ 清理旧镜像: $IMAGE:$t" \
+      || echo "  ⚠ rmi 失败(可能被退出容器引用,清理残留容器后重试): $IMAGE:$t"
+  done
+  echo "✓ 镜像轮转:保留 $KEEP_VERSIONS 个 tag"
+}
+rotate_images
+
 echo "  状态: ./status.sh | 日志: ./logs.sh"

package/templates/backend/ops/install.sh

@@ -31,7 +31,9 @@ set -euo pipefail
 # ── baked 字段(首次为空;bootstrap 拷自身到 APP_ROOT 时 sed 改写为字面量) ──
 APP_ROOT="${APP_ROOT:-}"
 MODE="${MODE:-}"
-KEEP_VERSIONS="${KEEP_VERSIONS:-3}"
+# 轮转保留数:此处只存显式值(--keep / env),不预设缺省 —— 缺省在轮转前由
+# resolve_keep_versions 从 ops/<mode>/config.sh 取(运维改那处,跨版本保留)。
+KEEP_VERSIONS="${KEEP_VERSIONS:-}"
 
 # 脚本所在目录(首次=release 包根,即 install.sh 所在的包根;二次=APP_ROOT)
 DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
@@ -417,12 +419,24 @@ dispatch_install() {
   local mode_install="$APP_ROOT/ops/$MODE/install.sh"   # 共享 ops(releases 不放 ops)
   [[ -f "$mode_install" ]] || die "缺 mode 安装脚本: $mode_install(先跑 lay_out_ops 或检查后台服务目录/ops)"
   say "派发 $MODE 安装: $mode_install"
-  export APP_ROOT MODE
+  export APP_ROOT MODE KEEP_VERSIONS
   bash "$mode_install"
 }
 
+# ── 轮转保留数解析:--keep/env 显式 > ops/<mode>/config.sh 持久值 > 3 ──
+#    KEEP_VERSIONS 不 bake(区别 APP_ROOT/MODE):运维的保留数放 mode config.sh,
+#    lay_out_ops 跨版本保留(不 overlay);--keep 仅当次部署生效。
+#    source 无名冲突(config.sh 只设 mode 专属变量 + APP_ROOT 校验,顶层变量不被覆盖)。
+resolve_keep_versions() {
+  [[ -n "$KEEP_VERSIONS" ]] && return 0
+  local cfg="$APP_ROOT/ops/$MODE/config.sh"
+  if [[ -f "$cfg" ]]; then source "$cfg"; fi   # bootstrap 时 lay_out_ops 已先于轮转就位
+  KEEP_VERSIONS="${KEEP_VERSIONS:-3}"           # 旧部署 config.sh 无此项 → 回落 3(与历史行为一致)
+}
+
 rotate_releases() {
-  [[ "$IS_SYMLINK" = 0 ]] && return 0   # docker 不用 releases
+  resolve_keep_versions
+  [[ "$IS_SYMLINK" = 0 ]] && return 0   # docker 不用 releases(镜像轮转在 ops/docker/install.sh::rotate_images)
   local list=()
   while IFS= read -r d; do list+=("$d"); done < <(sort_releases "$APP_ROOT/releases")
   [[ ${#list[@]} -le $KEEP_VERSIONS ]] && return 0

package/templates/backend/ops/pm2/config.sh

@@ -16,6 +16,8 @@ APP_ROOT="${APP_ROOT:-}"
 PM2_BIN="${PM2_BIN:-pm2}"
 # 实例数(单实例 fork;SQLite 单文件写串行,不建议 cluster 多实例)
 INSTANCES="${INSTANCES:-1}"
+# 版本轮转保留数(releases 目录数,即回滚窗口;顶层 install.sh::rotate_releases 读)
+KEEP_VERSIONS="${KEEP_VERSIONS:-3}"
 
 # ── 派生路径(APP_ROOT 定下来后才能算;由 resolve_app_root 调用) ──
 derive_paths() {

package/templates/backend/ops/systemd/config.sh

@@ -16,6 +16,8 @@ APP_ROOT="${APP_ROOT:-}"
 NODE_BIN="${NODE_BIN:-/usr/bin/node}"
 # 运行用户
 RUN_USER="${RUN_USER:-root}"
+# 版本轮转保留数(releases 目录数,即回滚窗口;顶层 install.sh::rotate_releases 读)
+KEEP_VERSIONS="${KEEP_VERSIONS:-3}"
 
 # ── 派生路径(APP_ROOT 定下来后才能算;由 resolve_app_root 调用) ──
 derive_paths() {

package/templates/backend/package.json

@@ -1,6 +1,6 @@
 {
   "name": "backend",
-  "version": "1.0.1",
+  "version": "1.0.7",
   "description": "全栈模板 - 后台服务(NestJS + SQLite + TypeORM)",
   "private": true,
   "engines": {
@@ -20,7 +20,6 @@
     "migration:generate": "TS_NODE_PROJECT=tsconfig.migration.json typeorm-ts-node-commonjs migration:generate --pretty -d scripts/data-source.ts"
   },
   "dependencies": {
-    "@nestjs/axios": "4.0.1",
     "@nestjs/common": "11.1.28",
     "@nestjs/config": "4.0.4",
     "@nestjs/core": "11.1.28",
@@ -37,16 +36,16 @@
     "better-sqlite3": "13.0.3",
     "class-transformer": "0.5.1",
     "class-validator": "0.15.1",
-    "js-yaml": "4.1.0",
-    "multer": "1.4.5-lts.1",
+    "js-yaml": "4.3.2",
+    "multer": "2.4.0",
     "passport": "0.7.0",
     "passport-jwt": "4.0.1",
     "passport-local": "1.0.0",
     "reflect-metadata": "0.2.2",
     "rxjs": "7.8.2",
-    "socket.io": "4.8.3",
+    "socket.io": "4.8.4",
     "svg-captcha": "1.4.0",
-    "typeorm": "0.3.20"
+    "typeorm": "0.3.31"
   },
   "devDependencies": {
     "@nestjs/cli": "11.0.24",
@@ -69,5 +68,13 @@
     "ts-node": "10.9.2",
     "tsconfig-paths": "4.2.0",
     "typescript": "5.4.3"
+  },
+  "overrides": {
+    "proxy-addr": "^2.0.8",
+    "multer": "$multer",
+    "engine.io": "^6.6.10",
+    "@nestjs/swagger": {
+      "js-yaml": "^5.4.3"
+    }
   }
 }

package/templates/backend/src/config/config.interface.ts

@@ -48,6 +48,15 @@ export interface AppConfig {
     username: string;
     password: string;
   };
+  /** 单点登录 /api/ssologin(演示接入范式,默认关闭) */
+  sso: {
+    /** 是否开启;false 时接口返回 404(对外不暴露该能力) */
+    enabled: boolean;
+    /** 票据校验密钥(HMAC-SHA256),与接入方(门户/统一认证)共享 */
+    ticketKey: string;
+    /** 时间戳允许偏差(秒),默认 300 */
+    tsWindow: number;
+  };
   /** 大屏 API 签名加密配置(无 token、无过期) */
   appSign: {
     /** HMAC-SHA256 签名密钥,永不过期 */

package/templates/backend/src/config/configuration.ts

@@ -27,6 +27,11 @@ const envInt = (k: string, fallback?: number): number | undefined => {
   const n = Number(v);
   return Number.isFinite(n) ? n : fallback;
 };
+const envBool = (k: string, fallback?: boolean): boolean | undefined => {
+  const v = process.env[k];
+  if (v === undefined || v === '') return fallback;
+  return v === 'true' || v === '1';
+};
 const envList = (k: string, fallback?: string[]): string[] | undefined => {
   const v = process.env[k];
   if (v === undefined || v === '') return fallback;
@@ -102,6 +107,12 @@ export default (): AppConfig => {
       ...config.appSign,
       signKey: envStr('APP_SIGN_KEY', config.appSign.signKey) as string,
       tsWindow: envInt('APP_SIGN_TS_WINDOW', config.appSign.tsWindow) as number
+    },
+    sso: {
+      ...config.sso,
+      enabled: envBool('SSO_ENABLED', config.sso.enabled) as boolean,
+      ticketKey: envStr('SSO_TICKET_KEY', config.sso.ticketKey) as string,
+      tsWindow: envInt('SSO_TS_WINDOW', config.sso.tsWindow) as number
     }
   };
 };

package/templates/backend/src/modules/auth/auth.service.ts

@@ -1,16 +1,20 @@
-import { Injectable, UnauthorizedException } from '@nestjs/common';
+import { Injectable, UnauthorizedException, NotFoundException, Logger } from '@nestjs/common';
 import { JwtService } from '@nestjs/jwt';
 import { ConfigService } from '@nestjs/config';
 import { InjectRepository } from '@nestjs/typeorm';
 import { Repository } from 'typeorm';
 import * as bcrypt from 'bcryptjs';
+import * as crypto from 'crypto';
 import { UserEntity } from '../../entities/user.entity';
 import { CaptchaService } from './captcha.service';
 import { AuditService } from '../audit/audit.service';
+import { safeEqualHex } from '../../common/app-crypto';
 import type { AppConfig } from '../../config/config.interface';
 
 @Injectable()
 export class AuthService {
+  private readonly logger = new Logger(AuthService.name);
+
   constructor(
     @InjectRepository(UserEntity)
     private readonly userRepo: Repository<UserEntity>,
@@ -56,10 +60,14 @@ export class AuthService {
       });
       throw new UnauthorizedException('用户名或密码错误');
     }
-    const ok = user.password.startsWith('$2')
-      ? await bcrypt.compare(params.password, user.password)
-      : params.password === user.password;
+    // 非 bcrypt 哈希(历史明文/手工改库)一律拒绝,不做明文比对回退;
+    // 存量明文用户走 /api/user/resetPassword 恢复,超管走「改配置+重启」reconcile。
+    const hashed = user.password.startsWith('$2');
+    const ok = hashed && (await bcrypt.compare(params.password, user.password));
     if (!ok) {
+      if (!hashed) {
+        this.logger.warn(`用户 ${user.username} 密码非 bcrypt 哈希,请管理员重置`);
+      }
       await this.auditService.record({
         actorName: params.username,
         action: 'login_fail',
@@ -88,23 +96,60 @@ export class AuthService {
   }
 
   /**
-   * 单点登录 /api/ssologin
+   * 单点登录 /api/ssologin(演示接入范式,默认关闭)
+   *
+   * 未开启(yaml sso.enabled=false)时返回 404,对外不暴露该能力。
+   * 开启后校验接入方票据:
+   *   GET /api/ssologin?username=xxx&ts=<unix秒>&sign=<hex>
+   *   sign = HMAC-SHA256(`${username}\n${ts}`, sso.ticketKey) hex
+   * 接入方(门户/统一认证)持 ticketKey 生成跳转 URL,票据时效由 tsWindow 约束。
+   * role 固定 'web'(最小权限),勿给该角色挂敏感路由。
    */
-  async ssoLogin(params: { [key: string]: any }, ip?: string) {
-    if (!params || Object.keys(params).length === 0) {
+  async ssoLogin(
+    params: { username?: string; ts?: string; sign?: string },
+    ip?: string
+  ) {
+    const ssoCfg = this.config.get<AppConfig['sso']>('sso');
+    const username = params?.username || '';
+
+    if (!ssoCfg.enabled) {
+      throw new NotFoundException('接口不存在');
+    }
+
+    const fail = async (reason: string) => {
       await this.auditService.record({
-        actorName: params?.username || 'sso',
+        actorName: username || 'sso',
         action: 'login_fail',
-        detail: { reason: '缺少 sso 参数' },
+        detail: { reason },
         ip
       });
-      throw new UnauthorizedException('缺少 sso 参数');
+      throw new UnauthorizedException(reason);
+    };
+
+    const tsNum = Number(params.ts);
+    const nowSec = Math.floor(Date.now() / 1000);
+    if (!username || !params.ts || !params.sign) {
+      await fail('缺少单点登录票据参数');
+    }
+    if (!Number.isFinite(tsNum) || tsNum <= 0) {
+      await fail('票据时间戳非法');
+    }
+    if (Math.abs(nowSec - tsNum) > ssoCfg.tsWindow) {
+      await fail('票据已过期');
     }
-    const username = params.username || 'sso';
+
+    const expected = crypto
+      .createHmac('sha256', ssoCfg.ticketKey)
+      .update(`${username}\n${params.ts}`, 'utf8')
+      .digest('hex');
+    if (!safeEqualHex(expected, String(params.sign).toLowerCase())) {
+      await fail('票据校验失败');
+    }
+
     await this.auditService.record({
       actorName: username,
       action: 'login_success',
-      detail: { sso: true, params: Object.keys(params) },
+      detail: { sso: true },
       ip
     });
     const payload = { sub: 0, username, role: 'web' };

package/templates/backend/src/modules/page-data/page-data.controller.ts

@@ -8,49 +8,72 @@ import {
   Query,
   Request,
   UploadedFile,
-  UseInterceptors
+  UseGuards,
+  UseInterceptors,
+  ForbiddenException
 } from '@nestjs/common';
 import { FileInterceptor } from '@nestjs/platform-express';
-import { ApiTags, ApiConsumes, ApiBody } from '@nestjs/swagger';
+import { ApiTags, ApiConsumes, ApiBody, ApiBearerAuth } from '@nestjs/swagger';
 import { PageDataService } from './page-data.service';
+import { JwtAuthGuard } from '../auth/jwt-auth.guard';
 
 @ApiTags('page-data 大屏页面数据')
 @Controller()
 export class PageDataController {
   constructor(private readonly service: PageDataService) {}
 
-  /** 列表 /api/getList */
+  /** 仅管理员可写(与 user.controller 的 ensureAdmin 同模式) */
+  private ensureAdmin(req: any) {
+    if (req.user?.role !== 'admin' && req.user?.role !== 'superadmin') {
+      throw new ForbiddenException('仅管理员可操作大屏页面数据');
+    }
+    return { id: req.user.id, username: req.user.username };
+  }
+
+  /**
+   * 列表 /api/getList
+   * 保持公开:docs/api-security.md §1.1/§6 已拍板「暂不纳入签名保护」(大屏消费接口)。
+   */
   @Get('getList')
   getList(@Query() query: any) {
     return this.service.getList(query);
   }
 
-  /** 新增 /api/add */
+  /** 新增 /api/add(需登录,admin-only) */
+  @UseGuards(JwtAuthGuard)
   @Post('add')
   add(@Body() body: any, @Request() req: any) {
+    this.ensureAdmin(req);
     return this.service.add(body, req.user);
   }
 
-  /** 修改 /api/edit */
+  /** 修改 /api/edit(需登录,admin-only) */
+  @UseGuards(JwtAuthGuard)
   @Put('edit')
-  edit(@Body() body: any) {
+  edit(@Body() body: any, @Request() req: any) {
+    this.ensureAdmin(req);
     return this.service.update(body);
   }
 
-  /** 删除 /api/deleteById */
+  /** 删除 /api/deleteById(需登录,admin-only) */
+  @UseGuards(JwtAuthGuard)
   @Delete('deleteById')
-  deleteById(@Query('id') id: string) {
+  deleteById(@Query('id') id: string, @Request() req: any) {
+    this.ensureAdmin(req);
     return this.service.deleteById(Number(id));
   }
 
-  /** 导入文件 /api/v1/import */
+  /** 导入文件 /api/v1/import(需登录,admin-only) */
+  @UseGuards(JwtAuthGuard)
   @Post('v1/import')
   @UseInterceptors(FileInterceptor('file'))
   @ApiConsumes('multipart/form-data')
+  @ApiBearerAuth()
   @ApiBody({
     schema: { type: 'object', properties: { file: { type: 'string', format: 'binary' } } }
   })
-  import(@UploadedFile() file: any) {
+  import(@UploadedFile() file: any, @Request() req: any) {
+    this.ensureAdmin(req);
     if (!file) {
       throw new Error('缺少 file');
     }

package/templates/backend/src/modules/screen-config/screen-config.controller.ts

@@ -1,22 +1,50 @@
-import { Controller, Get, Param, Body, Put } from '@nestjs/common';
-import { ApiTags } from '@nestjs/swagger';
+import {
+  Controller,
+  Get,
+  Param,
+  Body,
+  Put,
+  Request,
+  UseGuards,
+  ForbiddenException
+} from '@nestjs/common';
+import { ApiTags, ApiBearerAuth } from '@nestjs/swagger';
 import { ScreenConfigService } from './screen-config.service';
 import { ScreenConfigEntity } from '../../entities/screen-config.entity';
+import { JwtAuthGuard } from '../auth/jwt-auth.guard';
 
 @ApiTags('screen 大屏配置')
 @Controller('screen')
 export class ScreenConfigController {
   constructor(private readonly service: ScreenConfigService) {}
 
-  /** 大屏清单 /api/screen/list */
+  /** 仅管理员可写(与 user.controller 的 ensureAdmin 同模式) */
+  private ensureAdmin(req: any) {
+    if (req.user?.role !== 'admin' && req.user?.role !== 'superadmin') {
+      throw new ForbiddenException('仅管理员可操作大屏配置');
+    }
+    return { id: req.user.id, username: req.user.username };
+  }
+
+  /**
+   * 大屏清单 /api/screen/list
+   * 保持公开:docs/api-security.md §1.1/§6 已拍板「暂不纳入签名保护」(大屏消费接口)。
+   */
   @Get('list')
   list() {
     return this.service.list();
   }
 
-  /** 更新大屏配置 /api/screen/:key */
+  /** 更新大屏配置 /api/screen/:key(需登录,admin-only) */
+  @UseGuards(JwtAuthGuard)
+  @ApiBearerAuth()
   @Put(':key')
-  update(@Param('key') key: string, @Body() dto: Partial<ScreenConfigEntity>) {
+  update(
+    @Param('key') key: string,
+    @Body() dto: Partial<ScreenConfigEntity>,
+    @Request() req: any
+  ) {
+    this.ensureAdmin(req);
     return this.service.update(key, dto);
   }
 }

package/templates/root/README.md

@@ -34,8 +34,11 @@ dev/prod 两套密钥已生成并写入下列位置(超管密码见生成时控
   - `backend/config/config.develop.yaml` + `config.prod.yaml` 的 `appSign.signKey`
 - **JWT secret**:backend 两份 yaml 的 `jwt.secret`
 - **超管密码**:backend 两份 yaml 的 `admin.password`(启动 reconcile 到 DB)
+- **SSO 票据密钥** `sso.ticketKey`:backend 两份 yaml(默认关闭,见下「单点登录」)
 - **docker 部署**:`backend/ops/docker/.env.example` 的 `JWT_SECRET`/`ADMIN_PASSWORD`/`APP_SIGN_KEY`(拷为服务器 `.env` 后改真值)
 
+**单点登录(/api/ssologin,默认关闭)**:接入第三方门户时,改 backend yaml `sso.enabled: true` 并把 `sso.ticketKey` 交给接入方;接入方生成跳转 URL `?user=<用户名>&ts=<unix秒>&sign=<hex>`,其中 `sign = HMAC-SHA256('<username>\n<ts>', ticketKey)`。未开启时接口返回 404,签发的 token 角色为 `web`(最小权限)。
+
 ### 3. 部署凭证(本地、不入库)
 - `web/scripts/server.config.json`:从 `server.config.example.json` 拷,填 SSH host/账号/密码/部署路径(已 `.gitignore`)
 - `backend/scripts/server.config.cjs`:从 `server.config.example.cjs` 拷,填 SSH + `backendServiceDir`(已 `.gitignore`)

package/templates/root/package.json

@@ -26,6 +26,14 @@
     "shelljs": "0.8.5"
   },
   "pnpm": {
-    "requiredScripts": []
+    "requiredScripts": [],
+    "overrides": {
+      "proxy-addr": "^2.0.8",
+      "brace-expansion@1": "^1.1.21",
+      "brace-expansion@2": "^2.1.7",
+      "multer": "^2.4.0",
+      "engine.io": "^6.6.10",
+      "@nestjs/swagger>js-yaml": "^5.4.3"
+    }
   }
 }

package/templates/web/dist/assets/{404-63aa5037.js → 404-e6edada0.js}

@@ -1 +1 @@
-import{u as n,j as t}from"./vendor-2663c204.js";function i(){const r=n();return t.jsx("div",{style:{width:"100%",height:"100vh",boxSizing:"border-box",margin:0,display:"flex",flexDirection:"column",alignItems:"center",justifyContent:"center",background:"#fff",color:"#1a1a1a",overflow:"hidden",position:"relative"},children:t.jsxs("div",{style:{position:"relative",textAlign:"center"},children:[t.jsx("div",{style:{fontSize:"200px",fontWeight:800,lineHeight:1,letterSpacing:"4px",color:"#1a1a1a",textShadow:"0 6px 20px rgba(0, 0, 0, 0.08)"},children:"404"}),t.jsx("div",{style:{marginTop:20,fontSize:24,fontWeight:600,color:"#1a1a1a",letterSpacing:"2px"},children:"页面走丢了"}),t.jsx("div",{style:{marginTop:8,fontSize:14,color:"rgba(0, 0, 0, 0.45)"},children:"抱歉，您访问的页面不存在或已被移除"}),t.jsxs("div",{style:{marginTop:36,display:"flex",gap:16,justifyContent:"center"},children:[t.jsx("span",{onClick:()=>r("/"),style:{padding:"11px 32px",fontSize:15,fontWeight:500,borderRadius:24,cursor:"pointer",color:"#fff",background:"#000",transition:"all 0.2s ease"},onMouseEnter:e=>e.currentTarget.style.opacity="0.8",onMouseLeave:e=>e.currentTarget.style.opacity="1",children:"返回首页"}),t.jsx("span",{onClick:()=>window.history.back(),style:{padding:"11px 32px",fontSize:15,fontWeight:500,borderRadius:24,cursor:"pointer",color:"#000",border:"1px solid #000",background:"transparent",boxSizing:"border-box",transition:"all 0.2s ease"},onMouseEnter:e=>{e.currentTarget.style.background="#000",e.currentTarget.style.color="#fff"},onMouseLeave:e=>{e.currentTarget.style.background="transparent",e.currentTarget.style.color="#000"},children:"返回上一页"})]})]})})}export{i as default};
+import{u as n,j as t}from"./vendor-affac96c.js";function i(){const r=n();return t.jsx("div",{style:{width:"100%",height:"100vh",boxSizing:"border-box",margin:0,display:"flex",flexDirection:"column",alignItems:"center",justifyContent:"center",background:"#fff",color:"#1a1a1a",overflow:"hidden",position:"relative"},children:t.jsxs("div",{style:{position:"relative",textAlign:"center"},children:[t.jsx("div",{style:{fontSize:"200px",fontWeight:800,lineHeight:1,letterSpacing:"4px",color:"#1a1a1a",textShadow:"0 6px 20px rgba(0, 0, 0, 0.08)"},children:"404"}),t.jsx("div",{style:{marginTop:20,fontSize:24,fontWeight:600,color:"#1a1a1a",letterSpacing:"2px"},children:"页面走丢了"}),t.jsx("div",{style:{marginTop:8,fontSize:14,color:"rgba(0, 0, 0, 0.45)"},children:"抱歉，您访问的页面不存在或已被移除"}),t.jsxs("div",{style:{marginTop:36,display:"flex",gap:16,justifyContent:"center"},children:[t.jsx("span",{onClick:()=>r("/"),style:{padding:"11px 32px",fontSize:15,fontWeight:500,borderRadius:24,cursor:"pointer",color:"#fff",background:"#000",transition:"all 0.2s ease"},onMouseEnter:e=>e.currentTarget.style.opacity="0.8",onMouseLeave:e=>e.currentTarget.style.opacity="1",children:"返回首页"}),t.jsx("span",{onClick:()=>window.history.back(),style:{padding:"11px 32px",fontSize:15,fontWeight:500,borderRadius:24,cursor:"pointer",color:"#000",border:"1px solid #000",background:"transparent",boxSizing:"border-box",transition:"all 0.2s ease"},onMouseEnter:e=>{e.currentTarget.style.background="#000",e.currentTarget.style.color="#fff"},onMouseLeave:e=>{e.currentTarget.style.background="transparent",e.currentTarget.style.color="#000"},children:"返回上一页"})]})]})})}export{i as default};

package/templates/web/dist/assets/{404-legacy-494c4093.js → 404-legacy-f6ca5b91.js}

@@ -1 +1 @@
-System.register(["./vendor-legacy-2df23db3.js"],(function(e,t){"use strict";var r,n;return{setters:[e=>{r=e.u,n=e.j}],execute:function(){e("default",(function(){const e=r();return n.jsx("div",{style:{width:"100%",height:"100vh",boxSizing:"border-box",margin:0,display:"flex",flexDirection:"column",alignItems:"center",justifyContent:"center",background:"#fff",color:"#1a1a1a",overflow:"hidden",position:"relative"},children:n.jsxs("div",{style:{position:"relative",textAlign:"center"},children:[n.jsx("div",{style:{fontSize:"200px",fontWeight:800,lineHeight:1,letterSpacing:"4px",color:"#1a1a1a",textShadow:"0 6px 20px rgba(0, 0, 0, 0.08)"},children:"404"}),n.jsx("div",{style:{marginTop:20,fontSize:24,fontWeight:600,color:"#1a1a1a",letterSpacing:"2px"},children:"页面走丢了"}),n.jsx("div",{style:{marginTop:8,fontSize:14,color:"rgba(0, 0, 0, 0.45)"},children:"抱歉，您访问的页面不存在或已被移除"}),n.jsxs("div",{style:{marginTop:36,display:"flex",gap:16,justifyContent:"center"},children:[n.jsx("span",{onClick:()=>e("/"),style:{padding:"11px 32px",fontSize:15,fontWeight:500,borderRadius:24,cursor:"pointer",color:"#fff",background:"#000",transition:"all 0.2s ease"},onMouseEnter:e=>e.currentTarget.style.opacity="0.8",onMouseLeave:e=>e.currentTarget.style.opacity="1",children:"返回首页"}),n.jsx("span",{onClick:()=>window.history.back(),style:{padding:"11px 32px",fontSize:15,fontWeight:500,borderRadius:24,cursor:"pointer",color:"#000",border:"1px solid #000",background:"transparent",boxSizing:"border-box",transition:"all 0.2s ease"},onMouseEnter:e=>{e.currentTarget.style.background="#000",e.currentTarget.style.color="#fff"},onMouseLeave:e=>{e.currentTarget.style.background="transparent",e.currentTarget.style.color="#000"},children:"返回上一页"})]})]})})}))}}}));
+System.register(["./vendor-legacy-55fa76eb.js"],(function(e,t){"use strict";var r,n;return{setters:[e=>{r=e.u,n=e.j}],execute:function(){e("default",(function(){const e=r();return n.jsx("div",{style:{width:"100%",height:"100vh",boxSizing:"border-box",margin:0,display:"flex",flexDirection:"column",alignItems:"center",justifyContent:"center",background:"#fff",color:"#1a1a1a",overflow:"hidden",position:"relative"},children:n.jsxs("div",{style:{position:"relative",textAlign:"center"},children:[n.jsx("div",{style:{fontSize:"200px",fontWeight:800,lineHeight:1,letterSpacing:"4px",color:"#1a1a1a",textShadow:"0 6px 20px rgba(0, 0, 0, 0.08)"},children:"404"}),n.jsx("div",{style:{marginTop:20,fontSize:24,fontWeight:600,color:"#1a1a1a",letterSpacing:"2px"},children:"页面走丢了"}),n.jsx("div",{style:{marginTop:8,fontSize:14,color:"rgba(0, 0, 0, 0.45)"},children:"抱歉，您访问的页面不存在或已被移除"}),n.jsxs("div",{style:{marginTop:36,display:"flex",gap:16,justifyContent:"center"},children:[n.jsx("span",{onClick:()=>e("/"),style:{padding:"11px 32px",fontSize:15,fontWeight:500,borderRadius:24,cursor:"pointer",color:"#fff",background:"#000",transition:"all 0.2s ease"},onMouseEnter:e=>e.currentTarget.style.opacity="0.8",onMouseLeave:e=>e.currentTarget.style.opacity="1",children:"返回首页"}),n.jsx("span",{onClick:()=>window.history.back(),style:{padding:"11px 32px",fontSize:15,fontWeight:500,borderRadius:24,cursor:"pointer",color:"#000",border:"1px solid #000",background:"transparent",boxSizing:"border-box",transition:"all 0.2s ease"},onMouseEnter:e=>{e.currentTarget.style.background="#000",e.currentTarget.style.color="#fff"},onMouseLeave:e=>{e.currentTarget.style.background="transparent",e.currentTarget.style.color="#000"},children:"返回上一页"})]})]})})}))}}}));

package/templates/web/dist/assets/AuthLayout-bcf98efb.js

@@ -0,0 +1 @@
+import{u as m,e as p,r as n,Q as g,j as f,S as d,O as h}from"./vendor-affac96c.js";import{a as o}from"./api-beff4a3e.js";import"./index-86214b19.js";function E(){const c=m(),i=p(),[l,t]=n.useState(!0),[u,r]=n.useState(!1);return n.useEffect(()=>{if(!window.ENV.checkToken){t(!1);return}const e=()=>{c("/login?redirect=".concat(encodeURIComponent(i.pathname+i.search)))};t(!0);const s=g.parse(i.search.replace("?",""));if(s.user){o.admin.user.ssoLogin({username:s.user,ts:s.ts,sign:s.sign}).then(a=>{t(!1),a?r(!0):(r(!1),e())});return}o.admin.user.isLogin().then(a=>{a.login?(t(!1),r(a.permission)):(t(!1),e())})},[]),n.useEffect(()=>{u&&o.admin.user.getInfo().then(e=>{e.status==="SUCCESS"&&(e.data.menu?e.data.menuArray=JSON.parse(e.data.menu):e.data.menuArray=[])})},[u]),l?f.jsx(d,{spinning:!0,tip:"登录中...",size:"large",style:{height:"100vh",width:"100vw",display:"flex",flexDirection:"row",alignItems:"center",justifyContent:"center"}}):f.jsx(h,{})}export{E as default};

package/templates/web/dist/assets/AuthLayout-legacy-6e7a8ae1.js

@@ -0,0 +1 @@
+System.register(["./vendor-legacy-55fa76eb.js","./api-legacy-9fe41d4b.js","./index-legacy-06483318.js"],(function(e,n){"use strict";var t,s,r,a,i,u,c,o;return{setters:[e=>{t=e.u,s=e.e,r=e.r,a=e.Q,i=e.j,u=e.S,c=e.O},e=>{o=e.a},null],execute:function(){e("default",(function(){const e=t(),n=s(),[d,g]=r.useState(!0),[l,m]=r.useState(!1);return r.useEffect((()=>{if(!window.ENV.checkToken)return void g(!1);const t=()=>{e(`/login?redirect=${encodeURIComponent(n.pathname+n.search)}`)};g(!0);const s=a.parse(n.search.replace("?",""));s.user?o.admin.user.ssoLogin({username:s.user,ts:s.ts,sign:s.sign}).then((e=>{g(!1),e?m(!0):(m(!1),t())})):o.admin.user.isLogin().then((e=>{e.login?(g(!1),m(e.permission)):(g(!1),t())}))}),[]),r.useEffect((()=>{l&&o.admin.user.getInfo().then((e=>{"SUCCESS"===e.status&&(e.data.menu?e.data.menuArray=JSON.parse(e.data.menu):e.data.menuArray=[])}))}),[l]),d?i.jsx(u,{spinning:!0,tip:"登录中...",size:"large",style:{height:"100vh",width:"100vw",display:"flex",flexDirection:"row",alignItems:"center",justifyContent:"center"}}):i.jsx(c,{})}))}}}));

package/templates/web/dist/assets/{Background-13406ae6.js → Background-eb77ef54.js}

@@ -1 +1 @@
-import{e as C,u as I,r as c,j as e,C as w,Z as M,D as P,f as K,A as E,U as O,g as R,M as S,h as T,i as D,k as F,O as W,l as B,z as U,m as z,L}from"./vendor-2663c204.js";import{g as $,R as A,P as V}from"./index-e4c9d42a.js";import{a as Z}from"./api-83561db2.js";import{a as G}from"./theme-3a4c7290.js";const H="_background_1qfg6_10",J="_header_1qfg6_19",Q="_logo_1qfg6_28",X="_logotext_1qfg6_31",Y="_menus_1qfg6_36",ee="_menublock_1qfg6_45",se="_menublockimg_1qfg6_56",ne="_menublockselect_1qfg6_64",te="_userview_1qfg6_68",oe="_version_1qfg6_75",le="_screenEntry_1qfg6_85",ae="_bottom_1qfg6_101",ce="_slider_1qfg6_108",re="_menuWrap_1qfg6_115",ie="_menuIcon_1qfg6_127",de="_sliderFooter_1qfg6_139",ue="_collapseText_1qfg6_157",me="_right_1qfg6_160",he="_route_1qfg6_169",fe="_breadcrumb_1qfg6_175",ge="_contentview_1qfg6_178",t={background:H,header:J,logo:Q,logotext:X,menus:Y,menublock:ee,menublockimg:se,menublockselect:ne,userview:te,version:oe,screenEntry:le,bottom:ae,slider:ce,menuWrap:re,menuIcon:ie,sliderFooter:de,collapseText:ue,right:me,route:he,breadcrumb:fe,contentview:ge};B.locale(U);z.object;function je(){const i=C(),h=I(),j=c.useRef(),[f,v]=c.useState([]),[d,k]=c.useState(!1),[m,g]=c.useState({selectKeys:[],openKeys:[]}),y=c.useCallback(s=>e.jsx("a",{href:s.path,style:{color:"unset",fontSize:16},children:s.title},s.path),[]),_=c.useCallback((s,l)=>{const n=l&&s.selectIcon||s.icon;if(n)return typeof n!="string"?n:e.jsx("i",{className:t.menuIcon,style:{maskImage:"url(".concat(n,")"),WebkitMaskImage:"url(".concat(n,")")}})},[]);c.useEffect(()=>{const{routes:s}=$(i.pathname),l=[...s];l.pop(),g({openKeys:l.map(n=>n.fullPath),selectKeys:s.map(n=>n.fullPath)})},[i.pathname]),c.useEffect(()=>{var r,a;const s=A.find(o=>o.name==="系统"),l=(r=s==null?void 0:s.children)==null?void 0:r.find(o=>o.name==="后台管理系统"),n=(a=l==null?void 0:l.children)==null?void 0:a.find(o=>o.name==="后台管理系统");v((n==null?void 0:n.children)||[])},[]);const q=c.useMemo(()=>{const s=(l,n,r=[])=>l.filter(a=>a.name&&!a.hideInMenu).reduce((a,o)=>{var x;if(a)return a;const u=[...r,o];if(o.fullPath===n)return u;if((x=o.children)!=null&&x.length){const b=s(o.children,n,u);if(b)return b}return null},null);return s(f,i.pathname)||[]},[f,i.pathname]),p=(s,l=[])=>s.filter(n=>n.name&&!n.hideInMenu).map(n=>{var o;const r=m.selectKeys.includes(n.fullPath);return((o=n.children)==null?void 0:o.filter(u=>u.name&&!u.hideInMenu).length)>0?{key:n.fullPath,icon:_(n,r),label:n.name,children:p(n.children,[...l,n])}:{key:n.fullPath,icon:_(n,r),label:n.name}}),N=[{key:"logout",label:"退出系统",icon:e.jsx(L,{}),onClick:()=>{Z.admin.user.logout().then(s=>{s&&h("/login?redirect=".concat(encodeURIComponent(i.pathname+i.search)))})}}];return e.jsx(w,{locale:M,theme:G,children:e.jsx("div",{style:{width:"100vw",height:"100vh"},children:e.jsxs("div",{className:t.background,ref:j,children:[e.jsxs("div",{className:t.header,children:[e.jsx("img",{className:t.logo,alt:"logo",src:"/logo.svg"}),e.jsx("span",{className:t.logotext,children:V.title}),e.jsx("div",{style:{flex:1}}),e.jsxs("div",{className:t.userview,children:[e.jsx("span",{className:t.version,children:"v1.0.0"}),e.jsx("button",{type:"button",className:t.screenEntry,title:"进入大屏",onClick:()=>h("/screen"),children:e.jsx(P,{})}),e.jsx(K,{menu:{items:N},children:e.jsxs("div",{className:t.userInfo,children:[e.jsx(E,{style:{backgroundColor:"transparent",border:"2px solid #d1d1d1"},icon:e.jsx(O,{})}),e.jsx("span",{style:{margin:"0 10px"},children:"admin"}),e.jsx(R,{})]})})]})]}),e.jsxs("div",{className:t.bottom,children:[e.jsxs("div",{className:t.slider,style:{width:d?64:240},children:[e.jsx("div",{className:t.menuWrap,children:e.jsx(S,{mode:"inline",inlineCollapsed:d,items:p(f),onSelect:s=>{h(s.key)},selectedKeys:m.selectKeys,openKeys:d?[]:m.openKeys,onOpenChange:s=>{g({...m,openKeys:s})}})}),e.jsxs("div",{className:t.sliderFooter,onClick:()=>k(s=>!s),role:"button",tabIndex:0,children:[d?e.jsx(T,{}):e.jsx(D,{}),!d&&e.jsx("span",{className:t.collapseText,children:"收起菜单"})]})]}),e.jsxs("div",{className:t.right,children:[e.jsx("div",{className:t.route,children:e.jsx(F,{items:q.map(s=>({key:s.name,title:s.name,path:s.fullPath})),className:t.breadcrumb,itemRender:y})}),e.jsx("div",{className:t.contentview,children:e.jsx(W,{})})]})]})]})})})}export{je as default};
+import{e as C,u as I,r as c,j as e,C as w,Z as M,D as P,f as K,A as E,U as O,g as R,M as S,h as T,i as D,k as F,O as W,l as B,z as U,m as z,L}from"./vendor-affac96c.js";import{g as $,R as A,P as V}from"./index-86214b19.js";import{a as Z}from"./api-beff4a3e.js";import{a as G}from"./theme-3a4c7290.js";const H="_background_1qfg6_10",J="_header_1qfg6_19",Q="_logo_1qfg6_28",X="_logotext_1qfg6_31",Y="_menus_1qfg6_36",ee="_menublock_1qfg6_45",se="_menublockimg_1qfg6_56",ne="_menublockselect_1qfg6_64",te="_userview_1qfg6_68",oe="_version_1qfg6_75",le="_screenEntry_1qfg6_85",ae="_bottom_1qfg6_101",ce="_slider_1qfg6_108",re="_menuWrap_1qfg6_115",ie="_menuIcon_1qfg6_127",de="_sliderFooter_1qfg6_139",ue="_collapseText_1qfg6_157",me="_right_1qfg6_160",he="_route_1qfg6_169",fe="_breadcrumb_1qfg6_175",ge="_contentview_1qfg6_178",t={background:H,header:J,logo:Q,logotext:X,menus:Y,menublock:ee,menublockimg:se,menublockselect:ne,userview:te,version:oe,screenEntry:le,bottom:ae,slider:ce,menuWrap:re,menuIcon:ie,sliderFooter:de,collapseText:ue,right:me,route:he,breadcrumb:fe,contentview:ge};B.locale(U);z.object;function je(){const i=C(),h=I(),j=c.useRef(),[f,v]=c.useState([]),[d,k]=c.useState(!1),[m,g]=c.useState({selectKeys:[],openKeys:[]}),y=c.useCallback(s=>e.jsx("a",{href:s.path,style:{color:"unset",fontSize:16},children:s.title},s.path),[]),_=c.useCallback((s,l)=>{const n=l&&s.selectIcon||s.icon;if(n)return typeof n!="string"?n:e.jsx("i",{className:t.menuIcon,style:{maskImage:"url(".concat(n,")"),WebkitMaskImage:"url(".concat(n,")")}})},[]);c.useEffect(()=>{const{routes:s}=$(i.pathname),l=[...s];l.pop(),g({openKeys:l.map(n=>n.fullPath),selectKeys:s.map(n=>n.fullPath)})},[i.pathname]),c.useEffect(()=>{var r,a;const s=A.find(o=>o.name==="系统"),l=(r=s==null?void 0:s.children)==null?void 0:r.find(o=>o.name==="后台管理系统"),n=(a=l==null?void 0:l.children)==null?void 0:a.find(o=>o.name==="后台管理系统");v((n==null?void 0:n.children)||[])},[]);const q=c.useMemo(()=>{const s=(l,n,r=[])=>l.filter(a=>a.name&&!a.hideInMenu).reduce((a,o)=>{var x;if(a)return a;const u=[...r,o];if(o.fullPath===n)return u;if((x=o.children)!=null&&x.length){const b=s(o.children,n,u);if(b)return b}return null},null);return s(f,i.pathname)||[]},[f,i.pathname]),p=(s,l=[])=>s.filter(n=>n.name&&!n.hideInMenu).map(n=>{var o;const r=m.selectKeys.includes(n.fullPath);return((o=n.children)==null?void 0:o.filter(u=>u.name&&!u.hideInMenu).length)>0?{key:n.fullPath,icon:_(n,r),label:n.name,children:p(n.children,[...l,n])}:{key:n.fullPath,icon:_(n,r),label:n.name}}),N=[{key:"logout",label:"退出系统",icon:e.jsx(L,{}),onClick:()=>{Z.admin.user.logout().then(s=>{s&&h("/login?redirect=".concat(encodeURIComponent(i.pathname+i.search)))})}}];return e.jsx(w,{locale:M,theme:G,children:e.jsx("div",{style:{width:"100vw",height:"100vh"},children:e.jsxs("div",{className:t.background,ref:j,children:[e.jsxs("div",{className:t.header,children:[e.jsx("img",{className:t.logo,alt:"logo",src:"/logo.svg"}),e.jsx("span",{className:t.logotext,children:V.title}),e.jsx("div",{style:{flex:1}}),e.jsxs("div",{className:t.userview,children:[e.jsx("span",{className:t.version,children:"v1.0.0"}),e.jsx("button",{type:"button",className:t.screenEntry,title:"进入大屏",onClick:()=>h("/screen"),children:e.jsx(P,{})}),e.jsx(K,{menu:{items:N},children:e.jsxs("div",{className:t.userInfo,children:[e.jsx(E,{style:{backgroundColor:"transparent",border:"2px solid #d1d1d1"},icon:e.jsx(O,{})}),e.jsx("span",{style:{margin:"0 10px"},children:"admin"}),e.jsx(R,{})]})})]})]}),e.jsxs("div",{className:t.bottom,children:[e.jsxs("div",{className:t.slider,style:{width:d?64:240},children:[e.jsx("div",{className:t.menuWrap,children:e.jsx(S,{mode:"inline",inlineCollapsed:d,items:p(f),onSelect:s=>{h(s.key)},selectedKeys:m.selectKeys,openKeys:d?[]:m.openKeys,onOpenChange:s=>{g({...m,openKeys:s})}})}),e.jsxs("div",{className:t.sliderFooter,onClick:()=>k(s=>!s),role:"button",tabIndex:0,children:[d?e.jsx(T,{}):e.jsx(D,{}),!d&&e.jsx("span",{className:t.collapseText,children:"收起菜单"})]})]}),e.jsxs("div",{className:t.right,children:[e.jsx("div",{className:t.route,children:e.jsx(F,{items:q.map(s=>({key:s.name,title:s.name,path:s.fullPath})),className:t.breadcrumb,itemRender:y})}),e.jsx("div",{className:t.contentview,children:e.jsx(W,{})})]})]})]})})})}export{je as default};