draftgo-cli 2.0.5 → 3.0.0

package/resources/skill/specs/security.md

@@ -0,0 +1,74 @@
+---
+read_when: 开发前检查合规性时 · Code Review 时
+---
+
+# 开发禁区（违反必报错）
+
+## 网络资源
+
+| ❌ 禁止 | ✅ 替代 |
+|---|---|
+| 任何境外 CDN（googleapis / jsdelivr / cdnjs / unpkg） | 国内镜像（npmmirror.com / staticfile.net）或本地资源 |
+| 外部 CDN 引入图标 | `/assets/icons/{name}.svg` 内置图标库 |
+
+---
+
+## App 对象使用
+
+| ❌ 禁止 | ✅ 替代 |
+|---|---|
+| `App()` 写法（App 是对象不是函数） | `const App = window.parent?.App` |
+| `const App = () => window.parent?.App` | 去掉箭头函数 |
+| `App?.user?.role` 判断权限 | `App.isAdmin` 或 `App.currentUser?.role_code` |
+
+---
+
+## 路由 & 导航
+
+| ❌ 禁止 | ✅ 替代 |
+|---|---|
+| `window.location.search` 读参数 | `window.__DG_ROUTE_CONTEXT__.query` |
+| `navigate('/login')` 退出 | `window.parent.location.href = '/login'` |
+| 页面内 `window.location.href = ...` 跳转 | `window.parent.location.href = ...`（页面在 iframe 中） |
+
+---
+
+## 弹窗 & 交互
+
+| ❌ 禁止 | ✅ 替代 |
+|---|---|
+| `window.alert(msg)` | `App.showModal(msg, title?)` |
+| `window.confirm(msg)` | `await App.confirm(msg, title?)` |
+| `window.prompt(msg)` | 自建 modal + input |
+
+---
+
+## UI 组件
+
+| ❌ 禁止 | ✅ 替代 |
+|---|---|
+| 把 React/TSX 版 shadcn 组件写进数据库 HTML | 用对应 `dg-*` 标签 |
+| 把 `dg-*` 当 daisyUI / Bootstrap / Ant Design | `dg-*` 只能是 shadcn 的 HTML 协议形态 |
+| 硬编码 hex / rgb / rgba 颜色 | 用 `var(--dg-*)` 语义 token |
+| 在页面内读 `localStorage.dg_theme` | `App.theme` |
+
+---
+
+## 全局层
+
+| ❌ 禁止 | ✅ 替代 |
+|---|---|
+| 在业务页面内实现全局浮窗 / 客服 / 统计脚本 | 使用 `frontend_global_*` 固定槽位 |
+| 在页面内渲染系统 Header / Logo / 用户头像下拉 | 这些属于壳层，不属于业务页面 |
+| 新增全局层槽位 | 只能编辑系统内置固定槽位 |
+
+---
+
+## 颜色 Token 参考
+
+| Token | 用途 |
+|---|---|
+| `--dg-bg-base` / `--dg-bg-page` / `--dg-bg-surface` | 背景层级 |
+| `--dg-text-primary` / `--dg-text-secondary` / `--dg-text-muted` | 文字层级 |
+| `--dg-accent` / `--dg-accent-hover` / `--dg-accent-subtle` | 主题色 |
+| `--dg-border` / `--dg-success` / `--dg-error` / `--dg-warning` | 功能色 |

package/resources/skill/specs/ui-protocol.md

@@ -0,0 +1,68 @@
+---
+read_when: 开发数据库页面时需要 dg-* 组件 · 了解 shadcn 映射关系时
+---
+
+# dg-* 完整映射表
+
+## 核心认知
+
+```
+dg-* ≠ 自研组件库
+dg-* = shadcn/ui 在数据库 HTML 页面里的协议化表达
+```
+
+数据库页面不进入 Vite/React 编译链，不能写 TSX；改用 `dg-*` 标签，runtime 解析并渲染对应 shadcn 语义。
+
+---
+
+## shadcn → dg-* 完整映射
+
+| shadcn 组件 | dg-* 标签 | 说明 |
+|---|---|---|
+| Button | `dg-button` | variant/size/disabled 属性对齐 |
+| Card | `dg-card` + `dg-card-header/title/description/content/footer` | |
+| Badge | `dg-badge` | variant: default/secondary/destructive/outline |
+| Skeleton | `dg-skeleton` | 骨架屏 |
+| Input | `dg-input` | type/placeholder/value/disabled |
+| Textarea | `dg-textarea` | |
+| Select | `dg-select` + `dg-select-item` | |
+| Checkbox | `dg-checkbox` | |
+| Switch | `dg-switch` | |
+| RadioGroup | `dg-radio-group` + `dg-radio-item` | |
+| Form | `dg-form` + `dg-form-item` + `dg-form-message` | |
+| Table | `dg-table` | source 属性拉取数据，columns via data-dg-props |
+| Tabs | `dg-tabs` + `dg-tabs-list/trigger/content` | default-value 属性 |
+| Dialog | `dg-dialog` + `dg-dialog-trigger/content/header/title/footer` | |
+| Sheet | `dg-sheet` + `dg-sheet-trigger/content/header/title` | side: right/left/top/bottom |
+| DropdownMenu | `dg-dropdown-menu` + `dg-dropdown-menu-trigger/content/item/separator` | |
+| Tooltip | `dg-tooltip` | content 属性 |
+| Popover | `dg-popover` + `dg-popover-trigger/content` | |
+| Alert | `dg-alert` + `dg-alert-title/description` | variant: default/destructive |
+| Progress | `dg-progress` | value/max 属性 |
+| Separator | `dg-separator` | orientation: horizontal/vertical |
+| ScrollArea | `dg-scroll-area` | |
+| Avatar | `dg-avatar` + `dg-avatar-image/fallback` | |
+
+---
+
+## 属性约定
+
+`dg-*` 属性命名跟随 shadcn 语义：
+- `variant`、`size`、`disabled`、`default-value`、`data-state`、`aria-*` 保持原意
+- 复杂组件使用 `data-dg-props='{"key":"value"}'` 传递结构化配置
+
+---
+
+## 禁止混淆
+
+- ❌ `dg-*` 不是 daisyUI
+- ❌ `dg-*` 不是 Bootstrap
+- ❌ `dg-*` 不是 Ant Design / Element Plus
+- ❌ `dg-*` 不是任意相似样式的泛称
+- ✅ `dg-*` 只能是 shadcn 的 DraftGo HTML 协议形态
+
+---
+
+## 使用示例速查
+
+完整带代码的示例见 `{{SKILL_DIR}}/quickref/dg-components.md`

package/src/commands/check.js

@@ -15,7 +15,7 @@ function check(projectDir, flags = {}) {
   log.info(`项目目录：${projectDir}`);
 
   console.log('');
-  log.info(`资源概览：pages=${result.map.pages.length}, nav=${result.map.navigations.length}, db=${result.map.db_meta.length}, scripts=${result.map.custom_scripts.length}, aihub=${result.map.aihub.length}`);
+  log.info(`资源概览：pages=${result.map.pages.length}, nav=${result.map.navigations.length}, db=${result.map.db_meta.length}, scripts=${result.map.custom_scripts.length}, aihub=${result.map.aihub.length}, external_apis=${result.map.external_apis.length}, docs=${result.map.docs.length}, doc_categories=${result.map.doc_categories.length}, system_config=${result.map.system_config.length}`);
 
   if (result.errors.length) {
     console.log('');

package/src/commands/delete.js

@@ -0,0 +1,86 @@
+'use strict';
+
+const path = require('path');
+const { exists } = require('../fsx');
+const log = require('../logger');
+const { confirm } = require('../prompt');
+const { findPython } = require('../python');
+const { spawnSync } = require('child_process');
+const { platforms } = require('../platforms');
+
+function findDeleteScript(projectDir) {
+  for (const platform of platforms) {
+    const candidate = path.join(projectDir, platform.assetDir, 'scripts', 'draftgo_delete.py');
+    if (exists(candidate)) return candidate;
+  }
+  const bundled = path.resolve(__dirname, '..', '..', 'resources', 'skill', 'scripts', 'draftgo_delete.py');
+  return exists(bundled) ? bundled : null;
+}
+
+const TYPE_ALIASES = {
+  page: 'pages',
+  pages: 'pages',
+  nav: 'nav',
+  navigations: 'nav',
+  db_meta: 'db_meta',
+  script: 'custom_scripts',
+  scripts: 'custom_scripts',
+  custom_scripts: 'custom_scripts',
+  doc: 'docs',
+  docs: 'docs',
+  doc_category: 'doc_categories',
+  doc_categories: 'doc_categories',
+  external_api: 'external_apis',
+  external_apis: 'external_apis',
+  aihub: 'aihub',
+};
+
+async function deleteResource(projectDir, positional, flags) {
+  const [typeRaw, id] = positional;
+
+  if (!typeRaw || !id) {
+    log.err('用法：draftgo delete <type> <id>');
+    log.dim('  支持类型：pages | nav | db_meta | custom_scripts | docs | doc_categories | external_apis | aihub');
+    return 1;
+  }
+
+  const type = TYPE_ALIASES[typeRaw];
+  if (!type) {
+    log.err(`未知类型：${typeRaw}`);
+    return 1;
+  }
+
+  if (!exists(path.join(projectDir, '.draftgo', 'config.json'))) {
+    log.err('未找到 .draftgo/config.json，请先运行 /draftgo init');
+    return 1;
+  }
+
+  const py = findPython();
+  if (!py) {
+    log.err('未检测到 Python，无法运行删除脚本');
+    return 1;
+  }
+
+  const script = findDeleteScript(projectDir);
+  if (!script) {
+    log.err('未找到 draftgo_delete.py，请运行 draftgo update 更新');
+    return 1;
+  }
+
+  if (!flags.yes && !flags.y) {
+    const ok = await confirm(`确认删除 ${type} id=${id}？此操作不可恢复`);
+    if (!ok) {
+      log.dim('已取消');
+      return 0;
+    }
+  }
+
+  const r = spawnSync(py.bin, [script, type, id], {
+    cwd: projectDir,
+    stdio: 'inherit',
+    shell: false,
+  });
+  return r.status || 0;
+}
+
+module.exports = deleteResource;

package/src/commands/help.js

@@ -29,6 +29,13 @@ Usage:
                                     entry binding, files, obvious mock risks.
   draftgo dev                      Run this project's npm dev script.
   draftgo build                    Run this project's npm build script.
+  draftgo new <type> <slug>        Scaffold a new resource locally (no network).
+                                    Creates template file + index.json entry.
+                                    Types: page | nav | db_meta | script | doc
+  draftgo delete <type> <id>       Delete resource from server + local index.
+                                    Types: pages | nav | db_meta | custom_scripts
+                                           | docs | doc_categories | external_apis
+                                    Alias: del, rm. Flags: --yes / -y skip confirm.
   draftgo pull [type] [id...]      Pull DraftGo resources via the bundled
                                     sync script. Defaults to --all.
   draftgo push <type> [id...]      Push DraftGo resources via the bundled

package/src/commands/map.js

@@ -43,7 +43,43 @@ function mapCommand(projectDir, flags = {}) {
     return `${s.slug || '（无 slug）'}  ${s.mode || 'mode?'}  ${s.name || ''}${s.code_file ? `  ${s.code_file}` : ''}`;
   });
 
-  printList('AIHub', map.aihub, (a) => `${a.id || 'new'}  ${a.type || ''}  ${a.name || ''}`);
+  printList('外部 API', map.external_apis, (a) => {
+    const route = `${a.method || 'GET'} ${a.path || '/'}`;
+    const tags = a.tags && a.tags.length ? `  #${a.tags.join(',#')}` : '';
+    return `${a.id || 'new'}  ${a.code || '（无 code）'}  ${route}  ${a.name || ''}${a.base_url ? `  ${a.base_url}` : ''}${tags}`;
+  });
+
+  printList('文档', map.docs, (d) => {
+    return `${d.id || 'new'}  ${d.slug || '（无 slug）'}  ${d.title || '未命名'}${d.content_file ? `  ${d.content_file}` : ''}`;
+  });
+
+  printList('文档分类', map.doc_categories, (c) => {
+    const parent = c.parent_id == null ? 'root' : `parent:${c.parent_id}`;
+    return `${c.id || 'new'}  ${c.slug || '（无 slug）'}  ${c.name || '未命名'}  ${parent}`;
+  });
+
+  printList('系统配置', map.system_config, (c) => {
+    const sensitive = c.is_sensitive ? ' sensitive' : '';
+    return `${c.config_key || '（无 key）'}  ${c.category || 'default'}  ${c.value_type || 'value'}${sensitive}`;
+  });
+
+  printList('AIHub', map.aihub, (a) => {
+    const extra = [];
+    if (a.type === 'agent') {
+      if (a.mode) extra.push(a.mode);
+      if (a.output_format && a.output_format.mode === 'json') extra.push(`json:${a.output_format.json_strategy || 'auto'}`);
+      if (a.model_selection && a.model_selection.user_selectable) extra.push('user-model');
+      if (a.tools && a.tools.sources.length) extra.push(`tools:${a.tools.sources.length}`);
+    } else if (a.type === 'model') {
+      extra.push(`models:${a.models_count || 0}`);
+      if (a.supports_response_format === true) extra.push('response_format');
+      if (a.supports_json_schema === true) extra.push('json_schema');
+    } else if (a.type === 'mcp') {
+      extra.push(a.transport || 'transport?');
+      extra.push(`tools:${a.tools_count || 0}`);
+    }
+    return `${a.id || 'new'}  ${a.type || ''}  ${a.name || ''}${extra.length ? `  [${extra.join(', ')}]` : ''}`;
+  });
   printList('角色', map.roles, (r) => `${r.code || r.id || 'new'}  ${r.name || ''}`);
 
   console.log('');

package/src/commands/new.js

@@ -0,0 +1,183 @@
+'use strict';
+
+const path = require('path');
+const fs = require('fs');
+const log = require('../logger');
+const { exists, ensureDir } = require('../fsx');
+
+const TEMPLATES = {
+  page: (slug) => ({
+    indexEntry: {
+      title: slug,
+      route: `/${slug}`,
+      tag: null,
+      menu: null,
+      status: 'active',
+      permission: { default: 'public' },
+      html_file: `.draftgo/pages/page_new_${slug}.html`,
+    },
+    file: `.draftgo/pages/page_new_${slug}.html`,
+    content: `<!DOCTYPE html>
+<html>
+<head><meta charset="UTF-8"></head>
+<body>
+<script>
+  const App = window.parent?.App;
+</script>
+
+<div class="p-6">
+  <h1 class="text-2xl font-bold">${slug}</h1>
+  <p class="text-muted-foreground mt-2">页面内容</p>
+</div>
+</body>
+</html>`,
+  }),
+
+  nav: (code) => ({
+    indexEntry: {
+      name: code,
+      code,
+      status: 'active',
+      order: 0,
+      html_file: `.draftgo/navigations/nav_new_${code}.html`,
+    },
+    file: `.draftgo/navigations/nav_new_${code}.html`,
+    content: `<nav class="flex items-center gap-4 px-4 h-14">
+  <a href="/" class="font-semibold">首页</a>
+</nav>`,
+  }),
+
+  db_meta: (type) => ({
+    indexEntry: {
+      type,
+      label: type,
+      describe: '',
+      schema: {
+        type: 'object',
+        properties: {
+          title: { type: 'string', title: '标题', required: true, searchable: 'fuzzy' },
+        },
+      },
+      permission: {
+        public: { read: 'none', create: 'none', update: 'none', delete: 'none' },
+        login: { read: 'all', create: 'all', update: 'owner', delete: 'owner' },
+        admin: { read: 'all', create: 'all', update: 'all', delete: 'all' },
+      },
+    },
+    file: null,
+    content: null,
+  }),
+
+  script: (slug) => ({
+    indexEntry: {
+      name: slug,
+      slug,
+      mode: 'route',
+      status: 'active',
+      triggers: { path: `/${slug}`, methods: ['GET', 'POST'] },
+      config: {},
+      permission: { default: 'admin' },
+      code_file: `.draftgo/custom_scripts/script_new_${slug}.py`,
+    },
+    file: `.draftgo/custom_scripts/script_new_${slug}.py`,
+    content: `# ${slug}
+# 路由脚本：/api/x/${slug}
+
+def handle(request, context):
+    """
+    request: { method, path, query, body, headers, user }
+    context: { db, config, logger }
+    """
+    return {"message": "ok"}
+`,
+  }),
+
+  doc: (slug) => ({
+    indexEntry: {
+      title: slug,
+      key: slug,
+      status: 'published',
+      category_id: null,
+      content_file: `.draftgo/docs/articles/doc_new_${slug}.md`,
+    },
+    file: `.draftgo/docs/articles/doc_new_${slug}.md`,
+    content: `# ${slug}\n\n文档内容\n`,
+  }),
+};
+
+const INDEX_MAP = {
+  page: 'pages/index.json',
+  nav: 'navigations/index.json',
+  db_meta: 'db_meta/index.json',
+  script: 'custom_scripts/index.json',
+  doc: 'docs/articles/index.json',
+};
+
+const PUSH_TYPE = {
+  page: 'pages',
+  nav: 'nav',
+  db_meta: 'db_meta',
+  script: 'custom_scripts',
+  doc: 'docs',
+};
+
+function newResource(projectDir, positional) {
+  const [type, slug] = positional;
+
+  if (!type || !TEMPLATES[type]) {
+    log.err(`用法：draftgo new <type> <slug>`);
+    log.dim(`  支持类型：${Object.keys(TEMPLATES).join(' | ')}`);
+    return 1;
+  }
+  if (!slug) {
+    log.err(`缺少 slug/name 参数，例如：draftgo new ${type} my-slug`);
+    return 1;
+  }
+
+  const draftgoDir = path.join(projectDir, '.draftgo');
+  if (!exists(draftgoDir)) {
+    log.err('未找到 .draftgo/，请先运行 draftgo connect 或 /draftgo init');
+    return 1;
+  }
+
+  const tpl = TEMPLATES[type](slug);
+  const indexRel = INDEX_MAP[type];
+  const indexPath = path.join(draftgoDir, indexRel);
+
+  if (!exists(indexPath)) {
+    log.err(`未找到 ${indexPath}，请先运行 /draftgo pull`);
+    return 1;
+  }
+
+  // 追加 index 条目
+  const items = JSON.parse(fs.readFileSync(indexPath, 'utf8'));
+
+  // 检查重复
+  const dupKey = type === 'page' ? 'route' : type === 'nav' ? 'code' : type === 'db_meta' ? 'type' : type === 'script' ? 'slug' : 'key';
+  const dupVal = tpl.indexEntry[dupKey];
+  if (dupVal && items.some((it) => it[dupKey] === dupVal)) {
+    log.err(`已存在 ${dupKey}="${dupVal}"，请换一个名称`);
+    return 1;
+  }
+
+  items.push(tpl.indexEntry);
+  fs.writeFileSync(indexPath, JSON.stringify(items, null, 2), 'utf8');
+
+  // 创建模板文件
+  if (tpl.file && tpl.content !== null) {
+    const filePath = path.join(projectDir, tpl.file);
+    ensureDir(path.dirname(filePath));
+    if (exists(filePath)) {
+      log.warn(`文件已存在，跳过：${tpl.file}`);
+    } else {
+      fs.writeFileSync(filePath, tpl.content, 'utf8');
+      log.ok(`已创建：${tpl.file}`);
+    }
+  }
+
+  log.ok(`已追加到 .draftgo/${indexRel}`);
+  log.dim(`  编辑完成后运行：draftgo push ${PUSH_TYPE[type]}`);
+  return 0;
+}
+
+module.exports = newResource;

package/src/commands/sync.js

@@ -19,7 +19,7 @@ function findSyncScript(projectDir, command) {
   return exists(bundled) ? bundled : null;
 }
 
-function sync(projectDir, command, positional) {
+function sync(projectDir, command, positional, flags = {}) {
   const py = findPython();
   if (!py) {
     log.err('未检测到 Python，无法运行 DraftGo 同步脚本。');
@@ -40,6 +40,9 @@ function sync(projectDir, command, positional) {
   }
 
   const args = positional.length ? positional : ['--all'];
+  if (command === 'push' && flags.force) {
+    args.push('--force');
+  }
   const r = spawnSync(py.bin, [script, ...args], {
     cwd: projectDir,
     stdio: 'inherit',

package/src/index.js

@@ -42,6 +42,12 @@ async function run(argv) {
       case 'dev':
       case 'build':
         return require('./commands/projectScript')(projectDir, command, flags);
+      case 'new':
+        return require('./commands/new')(projectDir, positional, flags);
+      case 'delete':
+      case 'del':
+      case 'rm':
+        return await require('./commands/delete')(projectDir, positional, flags);
       case 'pull':
       case 'push':
         return require('./commands/sync')(projectDir, command, positional, flags);

package/src/localdev/compose.js

@@ -101,6 +101,11 @@ function generate(projectDir, opts) {
       '    image: mysql:8.0',
       `    container_name: ${projectName}-mysql`,
       '    restart: unless-stopped',
+      '    logging:',
+      '      driver: json-file',
+      '      options:',
+      '        max-size: "10m"',
+      '        max-file: "3"',
       '    environment:',
       '      MYSQL_ROOT_PASSWORD: ${MYSQL_ROOT_PASSWORD}',
       '      MYSQL_DATABASE: ${MYSQL_DATABASE}',
@@ -138,6 +143,11 @@ function generate(projectDir, opts) {
       '    image: redis:7-alpine',
       `    container_name: ${projectName}-redis`,
       '    restart: unless-stopped',
+      '    logging:',
+      '      driver: json-file',
+      '      options:',
+      '        max-size: "10m"',
+      '        max-file: "3"',
       '    command: ["redis-server", "--requirepass", "${REDIS_PASSWORD}", "--appendonly", "yes"]',
       '    volumes:',
       '      - ./data/redis:/data',
@@ -166,6 +176,11 @@ function generate(projectDir, opts) {
     '    image: cabinai/draftgo:latest',
     `    container_name: ${projectName}`,
     '    restart: unless-stopped',
+    '    logging:',
+    '      driver: json-file',
+    '      options:',
+    '        max-size: "10m"',
+    '        max-file: "3"',
     `    ports:`,
     `      - "${appPort}:3000"`,
     '    environment:',
@@ -184,6 +199,10 @@ function generate(projectDir, opts) {
     '      LOG_LEVEL: INFO',
     '      LOG_MAX_BYTES: "5242880"',
     '      LOG_BACKUP_COUNT: "5"',
+    '      LOG_TO_CONSOLE: "true"',
+    '      LOG_CONSOLE_JSON: "true"',
+    '      LOG_UVICORN_ACCESS: "true"',
+    '      LOG_RUNTIME_HEARTBEAT_INTERVAL_SECONDS: "300"',
     '      UPLOAD_PROVIDER: local',
     '      UPLOAD_MAX_SIZE: "10485760"',
     '      LOCAL_UPLOAD_DIR: /app/backend/storage/uploads',