vome-core 0.0.1

package/dist/typings/routing/register.d.ts

@@ -0,0 +1,15 @@
+import type { AnyElysia } from 'elysia';
+import type { ControllerMeta } from './meta';
+export type CrudRouteOptionsInput = {
+    public?: boolean;
+    /** CRUD / serviceApi 名，用于自动权限码 */
+    action?: string;
+    /** OpenAPI 备注（侧栏：`action 备注`） */
+    summary?: string;
+};
+/** 宿主挂载快速 CRUD 路由（Drizzle / BaseService） */
+export type CrudRegistrar = (plugin: AnyElysia, meta: ControllerMeta, ctx: {
+    controller: object;
+    /** 给自动路由挂 adminAuth + 权限码 */
+    routeOptions: (opts?: boolean | CrudRouteOptionsInput) => Record<string, unknown> | undefined;
+}) => AnyElysia;

package/dist/typings/routing/scan-context.d.ts

@@ -0,0 +1,6 @@
+import type { ControllerSide } from './meta';
+export type ControllerScanContext = {
+    module: string;
+    side: ControllerSide;
+    file: string;
+};

package/package.json

@@ -0,0 +1,96 @@
+{
+  "name": "vome-core",
+  "version": "0.0.1",
+  "description": "Vome framework — shared + Bun/Elysia server + Vue admin",
+  "license": "MIT",
+  "type": "module",
+  "files": [
+    "dist",
+    "src/admin",
+    "typings/admin"
+  ],
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js",
+      "default": "./dist/index.js"
+    },
+    "./server": {
+      "types": "./dist/server/index.d.ts",
+      "import": "./dist/server/index.js",
+      "default": "./dist/server/index.js"
+    },
+    "./admin": {
+      "types": "./src/admin/index.ts",
+      "import": "./src/admin/index.ts",
+      "default": "./src/admin/index.ts"
+    },
+    "./admin/*": "./src/admin/*",
+    "./admin/styles/base.css": "./src/admin/styles/base.css",
+    "./typings/*": "./typings/admin/*"
+  },
+  "scripts": {
+    "build": "rm -rf dist && bun build ./src/index.ts ./src/server/index.ts --outdir ./dist --target bun --format esm --external elysia --external reflect-metadata --external drizzle-orm --external drizzle-zod --external @elysiajs/openapi --external @bogeychan/elysia-logger --external pino --external pino-pretty && tsc -p tsconfig.build.json && printf \"%s\\n\" \"export * from '../src/index'\" > dist/index.d.ts && mkdir -p dist/server && printf \"%s\\n\" \"export * from '../../src/server/index'\" > dist/server/index.d.ts",
+    "build:obfuscate": "rm -rf dist && bun build ./src/index.ts ./src/server/index.ts --outdir ./dist --target bun --format esm --minify --external elysia --external reflect-metadata --external drizzle-orm --external drizzle-zod --external @elysiajs/openapi --external @bogeychan/elysia-logger --external pino --external pino-pretty && tsc -p tsconfig.build.json && printf \"%s\\n\" \"export * from '../src/index'\" > dist/index.d.ts && mkdir -p dist/server && printf \"%s\\n\" \"export * from '../../src/server/index'\" > dist/server/index.d.ts && bun scripts/obfuscate.ts",
+    "prepare": "bun run build"
+  },
+  "peerDependencies": {
+    "elysia": ">=1.0.0",
+    "reflect-metadata": ">=0.2.0",
+    "drizzle-orm": ">=0.30.0",
+    "drizzle-zod": ">=0.5.0",
+    "vue": ">=3.5.0",
+    "vue-router": ">=4.0.0",
+    "pinia": ">=2.0.0",
+    "vue-sonner": ">=2.0.0",
+    "@vueuse/core": ">=10.0.0",
+    "clsx": ">=2.0.0",
+    "tailwind-merge": ">=2.0.0"
+  },
+  "peerDependenciesMeta": {
+    "drizzle-orm": {
+      "optional": true
+    },
+    "drizzle-zod": {
+      "optional": true
+    },
+    "vue": {
+      "optional": true
+    },
+    "vue-router": {
+      "optional": true
+    },
+    "pinia": {
+      "optional": true
+    },
+    "vue-sonner": {
+      "optional": true
+    },
+    "@vueuse/core": {
+      "optional": true
+    },
+    "clsx": {
+      "optional": true
+    },
+    "tailwind-merge": {
+      "optional": true
+    }
+  },
+  "devDependencies": {
+    "bun-types": "latest",
+    "drizzle-orm": "latest",
+    "drizzle-zod": "^0.8.3",
+    "elysia": "latest",
+    "javascript-obfuscator": "^5.4.7",
+    "reflect-metadata": "^0.2.2",
+    "typescript": "latest"
+  },
+  "dependencies": {
+    "@bogeychan/elysia-logger": "^0.1.10",
+    "@elysiajs/openapi": "^1.4.15",
+    "pino": "^10.3.1",
+    "pino-pretty": "^13.1.3"
+  }
+}

package/src/admin/api/client.ts

@@ -0,0 +1,184 @@
+import { toast } from 'vue-sonner'
+import { config } from '#vome-host/config'
+export type { AuthMe, AuthPerms, TokenPair } from '../../../typings/admin/base/auth'
+export type { MenuTreeNode } from '../../../typings/admin/base/permission'
+export type { ApiResult, RequestOptions } from '../../../typings/admin/comm/request'
+
+/** 拼接配置中的 baseUrl（dev 为 /dev） */
+export function apiUrl(path: string) {
+  if (/^https?:\/\//.test(path)) return path
+  const base = config.baseUrl.replace(/\/$/, '')
+  const p = path.startsWith('/') ? path : `/${path}`
+  return `${base}${p}`
+}
+
+const TOKEN_KEY = 'vome_admin_access'
+const REFRESH_KEY = 'vome_admin_refresh'
+
+export function getAccessToken() {
+  return localStorage.getItem(TOKEN_KEY)
+}
+
+export function setTokens(accessToken: string, refreshToken: string) {
+  localStorage.setItem(TOKEN_KEY, accessToken)
+  localStorage.setItem(REFRESH_KEY, refreshToken)
+}
+
+export function clearTokens() {
+  localStorage.removeItem(TOKEN_KEY)
+  localStorage.removeItem(REFRESH_KEY)
+}
+
+export function getRefreshToken() {
+  return localStorage.getItem(REFRESH_KEY)
+}
+
+let refreshing: Promise<boolean> | null = null
+
+async function tryRefresh(): Promise<boolean> {
+  const refreshToken = getRefreshToken()
+  if (!refreshToken) return false
+  try {
+    const res = await fetch(apiUrl('/admin/base/auth/refresh'), {
+      method: 'POST',
+      headers: { 'content-type': 'application/json' },
+      body: JSON.stringify({ refreshToken }),
+    })
+    const json = (await res.json()) as ApiResult<TokenPair>
+    if (!res.ok || json.code !== 1000) {
+      clearTokens()
+      return false
+    }
+    setTokens(json.data.accessToken, json.data.refreshToken)
+    return true
+  } catch {
+    clearTokens()
+    return false
+  }
+}
+
+/** 把 Zod / 长 JSON 错误收成可读短句 */
+export function formatApiMessage(message: string): string {
+  const t = message.trim()
+  if (t.startsWith('[')) {
+    try {
+      const arr = JSON.parse(t) as Array<{
+        path?: Array<string | number>
+        message?: string
+      }>
+      if (Array.isArray(arr) && arr.length) {
+        return arr
+          .map((i) => {
+            const path = (i.path || []).join('.')
+            const tip = i.message || '无效'
+            return path ? `${path}: ${tip}` : tip
+          })
+          .join('；')
+      }
+    } catch {
+      /* 非 JSON 数组则原样 */
+    }
+  }
+  return message
+}
+
+function redirectLogin() {
+  if (typeof window === 'undefined') return
+  if (location.pathname.startsWith('/login')) return
+  location.href = `/login?redirect=${encodeURIComponent(location.pathname + location.search)}`
+}
+
+/** 通用请求：业务码 1000 成功；鉴权失败尝试 refresh */
+export async function request<T>(
+  path: string,
+  init?: RequestOptions,
+): Promise<T> {
+  const { toast: showToast = true, skipRefresh, ...rest } = init || {}
+  const headers = new Headers(rest.headers)
+  if (!headers.has('content-type') && rest.body) {
+    headers.set('content-type', 'application/json')
+  }
+  const token = getAccessToken()
+  if (token) headers.set('authorization', `Bearer ${token}`)
+
+  const res = await fetch(apiUrl(path), { ...rest, headers })
+  const raw = await res.text()
+  let json: ApiResult<T> | null = null
+  try {
+    json = raw ? (JSON.parse(raw) as ApiResult<T>) : null
+  } catch {
+    // 网关/框架有时返回纯文本 Unauthorized
+  }
+
+  if (json?.code === 1000) return json.data
+
+  const rawMessage = json?.message || raw || `请求失败 (${res.status})`
+  const needAuth =
+    !skipRefresh &&
+    (res.status === 401 ||
+      /token|登录|未授权|鉴权|Unauthorized|unauthorized/i.test(rawMessage))
+
+  if (needAuth) {
+    if (getRefreshToken()) {
+      refreshing ??= tryRefresh().finally(() => {
+        refreshing = null
+      })
+      const ok = await refreshing
+      if (ok) {
+        return request<T>(path, { ...init, skipRefresh: true })
+      }
+    }
+    clearTokens()
+    redirectLogin()
+    const err = new Error('登录已失效，请重新登录') as Error & { toasted?: boolean }
+    err.toasted = true
+    throw err
+  }
+
+  const message = formatApiMessage(rawMessage)
+  if (showToast) toast.error(message.slice(0, 200))
+  const err = new Error(message) as Error & { toasted?: boolean }
+  err.toasted = Boolean(showToast)
+  throw err
+}
+
+export const api = {
+  login(body: {
+    username: string
+    password: string
+    captchaId: string
+    verifyCode: string
+  }) {
+    return request<TokenPair>('/admin/base/auth/login', {
+      method: 'POST',
+      body: JSON.stringify(body),
+      toast: true,
+    })
+  },
+  captcha(params?: { width?: number; height?: number; color?: string }) {
+    const q = new URLSearchParams()
+    if (params?.width != null) q.set('width', String(params.width))
+    if (params?.height != null) q.set('height', String(params.height))
+    if (params?.color) q.set('color', params.color)
+    const qs = q.toString()
+    return request<{ captchaId: string; data: string }>(
+      `/admin/base/open/captcha${qs ? `?${qs}` : ''}`,
+      { toast: false },
+    )
+  },
+  me(init?: RequestOptions) {
+    return request<AuthMe>('/admin/base/auth/me', init)
+  },
+  perms(init?: RequestOptions) {
+    return request<AuthPerms>('/admin/base/auth/perms', init)
+  },
+  logout() {
+    const refreshToken = getRefreshToken()
+    return request<null>('/admin/base/auth/logout', {
+      method: 'POST',
+      body: JSON.stringify({ refreshToken: refreshToken || '' }),
+      toast: false,
+    }).catch(() => null)
+  },
+}
+

package/src/admin/components/vm-aside.vue

@@ -0,0 +1,227 @@
+<template>
+  <div class="vm-aside">
+    <div class="vm-aside__head">
+      <span class="vm-aside__title">{{ title }}</span>
+      <div class="vm-aside__actions">
+        <button
+          v-if="refresh"
+          type="button"
+          class="vm-aside__icon-btn"
+          :title="refreshTitle"
+          :disabled="loading"
+          @click="emit('refresh')"
+        >
+          <i class="ri-refresh-line" :class="{ 'is-spin': loading }" />
+        </button>
+        <button
+          v-if="add"
+          type="button"
+          class="vm-aside__icon-btn"
+          :title="addTitle"
+          :disabled="addDisabled || loading"
+          @click="emit('add')"
+        >
+          <i class="ri-add-line" />
+        </button>
+        <slot name="actions" />
+      </div>
+    </div>
+    <div v-if="search" class="vm-aside__search">
+      <i class="ri-search-line" />
+      <input v-model.trim="keyword" type="search" :placeholder="placeholder" />
+    </div>
+    <div class="vm-aside__body vm-scroll">
+      <slot />
+      <p v-if="empty" class="vm-aside__empty">{{ empty }}</p>
+    </div>
+  </div>
+</template>
+
+<script setup lang="ts">
+defineOptions({ name: 'vm-aside' })
+
+withDefaults(
+  defineProps<{
+    title?: string
+    /** 显示搜索框 */
+    search?: boolean
+    placeholder?: string
+    /** 非空时在内容区底部显示空态文案 */
+    empty?: string
+    /** 内置刷新按钮（默认开） */
+    refresh?: boolean
+    /** 内置新增按钮（默认开） */
+    add?: boolean
+    /** 刷新中：禁用并旋转图标 */
+    loading?: boolean
+    addDisabled?: boolean
+    refreshTitle?: string
+    addTitle?: string
+  }>(),
+  {
+    title: '',
+    search: false,
+    placeholder: '搜索关键字',
+    empty: '',
+    refresh: true,
+    add: true,
+    loading: false,
+    addDisabled: false,
+    refreshTitle: '刷新',
+    addTitle: '新增',
+  },
+)
+
+const emit = defineEmits<{
+  refresh: []
+  add: []
+}>()
+
+const keyword = defineModel<string>('keyword', { default: '' })
+</script>
+
+<style lang="scss" scoped>
+.vm-aside {
+  display: flex;
+  height: 100%;
+  min-height: 0;
+  flex-direction: column;
+  border-right: 1px solid color-mix(in srgb, var(--foreground) 8%, transparent);
+  background: var(--card);
+}
+
+.vm-aside__head {
+  display: flex;
+  flex-shrink: 0;
+  align-items: center;
+  justify-content: space-between;
+  gap: 8px;
+  padding: 14px 14px 8px;
+}
+
+.vm-aside__title {
+  font-size: 14px;
+  font-weight: 700;
+  color: var(--foreground);
+}
+
+.vm-aside__actions {
+  display: inline-flex;
+  gap: 4px;
+}
+
+.vm-aside__search {
+  display: flex;
+  flex-shrink: 0;
+  height: 34px;
+  align-items: center;
+  gap: 8px;
+  margin: 0 12px 10px;
+  padding: 0 10px;
+  border: 1px solid color-mix(in srgb, var(--foreground) 12%, transparent);
+  border-radius: 10px;
+  color: var(--muted-foreground);
+
+  input {
+    width: 100%;
+    border: 0;
+    background: transparent;
+    color: var(--foreground);
+    font-size: 13px;
+    outline: none;
+  }
+}
+
+.vm-aside__body {
+  flex: 1;
+  min-height: 0;
+  padding: 0 8px 12px;
+  overflow: auto;
+}
+
+.vm-aside__empty {
+  margin: 16px 0;
+  text-align: center;
+  font-size: 12px;
+  color: var(--muted-foreground);
+}
+
+.vm-aside__icon-btn {
+  display: inline-flex;
+  width: 28px;
+  height: 28px;
+  align-items: center;
+  justify-content: center;
+  border: none;
+  border-radius: 8px;
+  background: transparent;
+  color: var(--muted-foreground);
+  cursor: pointer;
+
+  &:hover:not(:disabled) {
+    background: var(--muted);
+    color: var(--foreground);
+  }
+
+  &:disabled {
+    opacity: 0.5;
+    cursor: not-allowed;
+  }
+
+  &.is-sm {
+    width: 22px;
+    height: 22px;
+    border-radius: 6px;
+  }
+
+  &.is-danger:hover:not(:disabled) {
+    background: var(--danger-soft);
+    color: var(--danger);
+  }
+
+  i.is-spin {
+    animation: vm-aside-spin 0.8s linear infinite;
+  }
+}
+
+/* 默认槽内业务按钮复用同一套样式 */
+:slotted(.vm-aside__icon-btn) {
+  display: inline-flex;
+  width: 28px;
+  height: 28px;
+  align-items: center;
+  justify-content: center;
+  border: none;
+  border-radius: 8px;
+  background: transparent;
+  color: var(--muted-foreground);
+  cursor: pointer;
+
+  &:hover:not(:disabled) {
+    background: var(--muted);
+    color: var(--foreground);
+  }
+
+  &:disabled {
+    opacity: 0.5;
+    cursor: not-allowed;
+  }
+
+  &.is-sm {
+    width: 22px;
+    height: 22px;
+    border-radius: 6px;
+  }
+
+  &.is-danger:hover:not(:disabled) {
+    background: var(--danger-soft);
+    color: var(--danger);
+  }
+}
+
+@keyframes vm-aside-spin {
+  to {
+    transform: rotate(360deg);
+  }
+}
+</style>