w-web-api 1.0.75 → 1.0.77

package/src/components/LayoutContentStats.vue

@@ -1,35 +1,41 @@
 <template>
     <div class="stats-panel" :style="`height:${height}px; overflow-y:auto; padding:20px 24px; box-sizing:border-box;`">
 
-        <!-- 標題列 -->
-        <div style="margin-bottom:16px;">
+        <!-- 標題列（ref 供 chartHeight 量測上方實佔高度） -->
+        <div ref="$hdr" style="margin-bottom:16px;">
             <div style="font-size:1.4rem; font-weight:600; color:var(--c-1);">{{$t('statisticsInformation')}}</div>
             <div style="font-size:0.875rem; color:var(--c-3); margin-top:4px;">{{$t('statisticsInformationDescription')}}</div>
         </div>
 
-        <!-- 控制區（事件選擇 + 時間範圍；把各事件分出來、可區分選取，供趨勢辨認 / 危險識別） -->
-        <div class="ctrl">
+        <!-- 控制區（事件選擇 + 時間範圍；把各事件分出來、可區分選取，供趨勢辨認 / 危險識別）
+             結構性對齊：.ctrl 為兩欄 grid（label 欄寬 max-content 自動隨語系文字），.ctrl-row 以
+             display:contents 使 label 與 field 直接成為 grid 子項，中英文自動對齊，免寫死 label 寬度 -->
+        <div ref="$ctrl" class="ctrl">
 
             <!-- 第一列：時間範圍 -->
             <div class="ctrl-row">
                 <span class="ctrl-label">{{$t('timeRange')}}</span>
-                <select id="timeGroupSel" v-model="timeGroup" class="ctrl-select">
-                    <option value="1hr">{{$t('selectItem1hr')}}</option>
-                    <option value="4hr">{{$t('selectItem4hr')}}</option>
-                    <option value="8hr">{{$t('selectItem8hr')}}</option>
-                    <option value="1day">{{$t('selectItem1day')}}</option>
-                </select>
+                <div class="ctrl-field">
+                    <select id="timeGroupSel" v-model="timeGroup" class="ctrl-select">
+                        <option value="1hr">{{$t('selectItem1hr')}}</option>
+                        <option value="4hr">{{$t('selectItem4hr')}}</option>
+                        <option value="8hr">{{$t('selectItem8hr')}}</option>
+                        <option value="1day">{{$t('selectItem1day')}}</option>
+                    </select>
+                </div>
             </div>
 
             <!-- 第二列：選擇事件 標題 + 全選/清除 -->
-            <div class="ctrl-row" style="margin-top:12px;">
+            <div class="ctrl-row">
                 <span class="ctrl-label">{{$t('selectEvents')}}</span>
-                <button class="evt-sel-btn stats-sel-all" @click="selectAllEvents">{{$t('selectAll')}}</button>
-                <button class="evt-sel-btn stats-sel-none" @click="selectNoneEvents">{{$t('selectNone')}}</button>
-                <span class="evt-count">{{selectedEvents.length}}/{{allEvents.length}}</span>
+                <div class="ctrl-field">
+                    <button class="evt-sel-btn stats-sel-all" @click="selectAllEvents">{{$t('selectAll')}}</button>
+                    <button class="evt-sel-btn stats-sel-none" @click="selectNoneEvents">{{$t('selectNone')}}</button>
+                    <span class="evt-count">{{selectedEvents.length}}/{{allEvents.length}}</span>
+                </div>
             </div>
 
-            <!-- 第三列：事件 chip（CSS grid 等寬欄對齊，不 ragged wrap） -->
+            <!-- 第三列：事件 chip（flex-wrap 內容自然寬；chip 依內容取寬、排滿可用寬才換行） -->
             <div class="evt-grid">
                 <label
                     v-for="ev in allEvents"
@@ -148,17 +154,43 @@ export default {
             timeGroup: '1hr',
             loading: false,
             errMsg: '',
+            hUpper: 0, //標題列+控制區實佔高度（ResizeObserver 量測，供 chartHeight 計算；chip 換行數/語系皆會使其變化）
         }
     },
     mounted: function() {
         let vo = this
+
+        //ResizeObserver 量測標題列+控制區實佔高（含 margin），取代固定扣除值；
+        //ro 為瀏覽器原生物件不放 data（避免被深層響應化），掛 this 成非響應式屬性
+        let ro = new ResizeObserver(function() {
+            vo.updateUpperHeight()
+        })
+        if (vo.$refs['$hdr']) {
+            ro.observe(vo.$refs['$hdr'])
+        }
+        if (vo.$refs['$ctrl']) {
+            ro.observe(vo.$refs['$ctrl'])
+        }
+        vo.ro = ro
+        vo.updateUpperHeight()
+
         vo.load()
     },
+    beforeDestroy: function() {
+        let vo = this
+        if (vo.ro) {
+            vo.ro.disconnect()
+            vo.ro = null
+        }
+    },
     computed: {
 
         chartHeight: function() {
             let vo = this
-            let h = vo.height - 360 //扣標題 + 控制列(含事件選擇) + 表格區估算
+            //panel 上下 padding 40 + 上方實佔(hUpper, 量測) + 表格預留 98（既有設計值：舊公式 height−360
+            //於 1440 下等價於保留 chart 底至 panel 內容底 98px，沿用該行為，非新設數字）
+            let TABLE_RESERVE = 98
+            let h = vo.height - 40 - vo.hUpper - TABLE_RESERVE
             return h < 220 ? 220 : h
         },
 
@@ -311,6 +343,24 @@ export default {
     },
     methods: {
 
+        //量測標題列+控制區實佔高（offsetHeight + margin-bottom），存入 hUpper 供 chartHeight 計算
+        updateUpperHeight: function() {
+            let vo = this
+            let mb = function(el) {
+                return parseFloat(getComputedStyle(el).marginBottom) || 0
+            }
+            let h = 0
+            let hdr = vo.$refs['$hdr']
+            let ctrl = vo.$refs['$ctrl']
+            if (hdr) {
+                h += hdr.offsetHeight + mb(hdr)
+            }
+            if (ctrl) {
+                h += ctrl.offsetHeight + mb(ctrl)
+            }
+            vo.hUpper = h
+        },
+
         colorOf: function(ev) {
             let vo = this
             let idx = vo.allEvents.indexOf(ev)
@@ -353,21 +403,30 @@ export default {
 
 <style scoped>
 
+/* 控制區：兩欄 grid 結構性對齊（label 欄 max-content 隨語系文字自動定寬；
+   第二欄 minmax(0,1fr) 防內容撐大），取代先前 label 寫死 64px + evt-grid margin-left 72px 之魔術數字對齊 */
 .ctrl {
     margin-bottom: 16px;
+    display: grid;
+    grid-template-columns: max-content minmax(0, 1fr);
+    gap: 12px 8px;
+    align-items: center;
 }
 
 .ctrl-row {
-    display: flex;
-    align-items: center;
-    gap: 8px;
+    display: contents; /* label 與 field 直接成為 .ctrl 之 grid 子項 */
 }
 
 .ctrl-label {
     font-size: 0.875rem;
     color: var(--c-2);
-    width: 64px;
-    flex-shrink: 0;
+}
+
+.ctrl-field {
+    display: flex;
+    align-items: center;
+    gap: 8px;
+    min-width: 0;
 }
 
 .ctrl-select {
@@ -406,20 +465,23 @@ export default {
     margin-left: 4px;
 }
 
-/* 事件 chip：等寬欄 grid 對齊，避免 ragged wrap 之縮排錯落 */
+/* 事件 chip：flex-wrap 內容自然寬（用滿容器可用寬、排不下才換行），
+   置於 .ctrl grid 第二欄與上方控制項對齊；不設 max-width 上限（由容器自然約束） */
 .evt-grid {
-    margin-top: 10px;
-    margin-left: 72px;
-    display: grid;
-    grid-template-columns: repeat(auto-fill, minmax(200px, 1fr));
+    grid-column: 2;
+    min-width: 0;
+    display: flex;
+    flex-wrap: wrap;
     gap: 8px;
-    max-width: 1040px;
 }
 
 .evt-chip {
     display: flex;
     align-items: center;
     box-sizing: border-box;
+    flex: 0 1 auto;
+    min-width: 0;
+    max-width: 100%; /* 安全閥：極長事件名時 chip 不超過容器寬（此時 .evt-name 之 ellipsis 才生效） */
     border: 1px solid var(--border);
     border-radius: var(--radius);
     background: var(--bg-1);
@@ -456,17 +518,27 @@ export default {
 }
 
 .evt-name {
+    min-width: 0; /* flex item 預設 min-width:auto 會阻止收縮，明給 0 使安全閥可生效 */
     overflow: hidden;
     text-overflow: ellipsis;
     white-space: nowrap;
 }
 
+.stats-table-area {
+    overflow-x: auto; /* 極端長事件名時表格自帶水平捲動，不外溢撐破 panel */
+}
+
 .stats-table {
     width: 100%;
     border-collapse: collapse;
     font-size: 0.85rem;
 }
 
+.stats-table td:first-child {
+    white-space: normal; /* 事件名欄允許換行（數值欄維持 nowrap），與 chip 區同源之防溢出處置 */
+    overflow-wrap: anywhere;
+}
+
 .stats-table th,
 .stats-table td {
     border-bottom: 1px solid var(--border);

package/srv.mjs

@@ -1,108 +1,108 @@
-import WOrm from 'w-orm-lmdb/src/WOrmLmdb.mjs'
-import WWebApi from './server/WWebApi.mjs'
-import getSettings from './g.getSettings.mjs'
-import get from 'lodash-es/get.js'
-import iseobj from 'wsemi/src/iseobj.mjs'
-import axios from 'axios'
-import JSON5 from 'json5'
-import fs from 'fs'
-
-
-//st（db 等系統參數由 g.getSettings 提供，供 g.mOrm 共用）
-let st = getSettings()
-
-//pathSettings：app 設定檔路徑，預設 ./settings.json；可由 `node srv.mjs <path>` 覆寫
-//（供 e2e restartBackend / 部署帶不同設定，日後更細緻功能便於擴充）。settings.json 為 JSON5 格式。
-let pathSettings = process.argv[2] || './settings.json'
-let stApp = JSON5.parse(fs.readFileSync(pathSettings, 'utf8'))
-
-let url = st.dbUrl
-let db = st.dbName
-let ssoBaseUrl = st.ssoBaseUrl
-let ssoAppToken = st.ssoAppToken
-let ssoLoginUrl = st.ssoLoginUrl
-let opt = {
-
-    useCheckUser: false,
-    getUserById: null,
-    useExcludeWhenNotAdmin: false,
-
-    serverPort: get(stApp, 'serverPort', 11005),
-    subfolder: '', //mapi
-    urlRedirect: ssoLoginUrl, //未登入時導向SSO登入頁, 本機測試時得先編譯, 再瀏覽: http://localhost:11005/
-
-    //語系（來自 settings.json）：language 由 WWebApi 注入 index.html ({language}) → 初始畫面即此語系；
-    //showLanguage 控右上語系選單顯隱。e2e 可用 restartBackend(genTempSettings({language})) 改 server 初始語系。
-    showLanguage: get(stApp, 'showLanguage', 'y'),
-    language: get(stApp, 'language', 'eng'),
-
-    //log 資料夾與輪檔間隔（srLog 寫入 + staEvent 統計皆讀此）。e2e 可用 genTempSettings({logFd}) 指向合成 log 達 hermetic。
-    logFd: get(stApp, 'logFd', './logs'),
-    logInterval: get(stApp, 'logInterval', 'hr'),
-
-    webName: {
-        'eng': 'API Service',
-        'cht': 'API管理系統',
-    },
-    webDescription: {
-        'eng': 'A web service package as methods to send requests to and receive responses from an API.',
-        'cht': '一套以方法形式，用於發送請求至API並接收其回應的網頁服務套件。',
-    },
-    webLogo: 'data:image/svg+xml;base64,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',
-
-}
-
-let getUserByToken = async (token) => {
-    // return {} //測試無法登入
-    //'sys' 為開發捷徑（w-ui-loginout 於 localhost 自動帶入）。加環境守門：NODE_ENV==='production' 時不接受，
-    //避免 srv.mjs 若作正式入口時 'sys' 成為遠端管理員後門。e2e/dev 未設 NODE_ENV=production 故仍可用；
-    //正式部署設 NODE_ENV=production 即停用此捷徑（並應改提供真實 getUserByToken）。
-    if (token === 'sys' && process.env.NODE_ENV !== 'production') {
-        return { id: 'id-for-admin', name: '測試者', email: 'admin@example.com', isAdmin: 'y' }
-    }
-    //未設定 SSO app token 時(本機開發未接SSO), 不打SSO直接拒絕
-    if (!ssoAppToken) {
-        console.log('ssoAppToken 未設定, 略過 SSO 驗證')
-        return {}
-    }
-    //呼叫 SSO 解析 token -> user
-    try {
-        let url = `${ssoBaseUrl}/api/getSsoUserInfor?token=${encodeURIComponent(ssoAppToken)}&key=token&value=${encodeURIComponent(token)}`
-        let res = await axios.get(url)
-        let state = get(res, 'data.state', '')
-        let u = get(res, 'data.msg', null)
-        if (state !== 'success' || !iseobj(u)) {
-            console.log('SSO getSsoUserInfor 失敗', state)
-            return {}
-        }
-        return { id: u.id, name: u.name, email: u.email, isAdmin: u.isAdmin }
-    }
-    catch (err) {
-        console.log('SSO getSsoUserInfor error', err.message)
-        return {}
-    }
-}
-
-let verifyClientUser = (user, from) => {
-    console.log('verifyClientUser/user', user)
-    console.log('於生產環境時得加入限制瀏覽器使用者身份機制')
-    // return false //測試無法登入
-    return user.isAdmin === 'y' //測試僅系統管理者使用
-}
-
-let verifyAppUser = (user, from) => {
-    console.log('verifyAppUser/user', user)
-    console.log('於生產環境時得加入限制應用程式使用者身份機制')
-    // return false //測試無法登入
-    return user.isAdmin === 'y' //測試僅系統管理者使用
-}
-
-//WWebApi
-let instWWebApi = WWebApi(WOrm, url, db, getUserByToken, verifyClientUser, verifyAppUser, opt)
-
-instWWebApi.on('error', (err) => {
-    console.log(err)
-})
-
-
-//node srv.mjs
+import WOrm from 'w-orm-lmdb/src/WOrmLmdb.mjs'
+import WWebApi from './server/WWebApi.mjs'
+import getSettings from './g_getSettings.mjs'
+import get from 'lodash-es/get.js'
+import iseobj from 'wsemi/src/iseobj.mjs'
+import axios from 'axios'
+import JSON5 from 'json5'
+import fs from 'fs'
+
+
+//st（db 等系統參數由 g_getSettings 提供，供 g_mOrm 共用）
+let st = getSettings()
+
+//pathSettings：app 設定檔路徑，預設 ./settings.json；可由 `node srv.mjs <path>` 覆寫
+//（供 e2e restartBackend / 部署帶不同設定，日後更細緻功能便於擴充）。settings.json 為 JSON5 格式。
+let pathSettings = process.argv[2] || './settings.json'
+let stApp = JSON5.parse(fs.readFileSync(pathSettings, 'utf8'))
+
+let url = st.dbUrl
+let db = st.dbName
+let ssoBaseUrl = st.ssoBaseUrl
+let ssoAppToken = st.ssoAppToken
+let ssoLoginUrl = st.ssoLoginUrl
+let opt = {
+
+    useCheckUser: false,
+    getUserById: null,
+    useExcludeWhenNotAdmin: false,
+
+    serverPort: get(stApp, 'serverPort', 11005),
+    subfolder: '', //mapi
+    urlRedirect: ssoLoginUrl, //未登入時導向SSO登入頁, 本機測試時得先編譯, 再瀏覽: http://localhost:11005/
+
+    //語系（來自 settings.json）：language 由 WWebApi 注入 index.html ({language}) → 初始畫面即此語系；
+    //showLanguage 控右上語系選單顯隱。e2e 可用 restartBackend(genTempSettings({language})) 改 server 初始語系。
+    showLanguage: get(stApp, 'showLanguage', 'y'),
+    language: get(stApp, 'language', 'eng'),
+
+    //log 資料夾與輪檔間隔（srLog 寫入 + staEvent 統計皆讀此）。e2e 可用 genTempSettings({logFd}) 指向合成 log 達 hermetic。
+    logFd: get(stApp, 'logFd', './logs'),
+    logInterval: get(stApp, 'logInterval', 'hr'),
+
+    webName: {
+        'eng': 'API Service',
+        'cht': 'API管理系統',
+    },
+    webDescription: {
+        'eng': 'A web service package as methods to send requests to and receive responses from an API.',
+        'cht': '一套以方法形式，用於發送請求至API並接收其回應的網頁服務套件。',
+    },
+    webLogo: 'data:image/svg+xml;base64,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',
+
+}
+
+let getUserByToken = async (token) => {
+    // return {} //測試無法登入
+    //'sys' 為開發捷徑（w-ui-loginout 於 localhost 自動帶入）。加環境守門：NODE_ENV==='production' 時不接受，
+    //避免 srv.mjs 若作正式入口時 'sys' 成為遠端管理員後門。e2e/dev 未設 NODE_ENV=production 故仍可用；
+    //正式部署設 NODE_ENV=production 即停用此捷徑（並應改提供真實 getUserByToken）。
+    if (token === 'sys' && process.env.NODE_ENV !== 'production') {
+        return { id: 'id-for-admin', name: '測試者', email: 'admin@example.com', isAdmin: 'y' }
+    }
+    //未設定 SSO app token 時(本機開發未接SSO), 不打SSO直接拒絕
+    if (!ssoAppToken) {
+        console.log('ssoAppToken 未設定, 略過 SSO 驗證')
+        return {}
+    }
+    //呼叫 SSO 解析 token -> user
+    try {
+        let url = `${ssoBaseUrl}/api/getSsoUserInfor?token=${encodeURIComponent(ssoAppToken)}&key=token&value=${encodeURIComponent(token)}`
+        let res = await axios.get(url)
+        let state = get(res, 'data.state', '')
+        let u = get(res, 'data.msg', null)
+        if (state !== 'success' || !iseobj(u)) {
+            console.log('SSO getSsoUserInfor 失敗', state)
+            return {}
+        }
+        return { id: u.id, name: u.name, email: u.email, isAdmin: u.isAdmin }
+    }
+    catch (err) {
+        console.log('SSO getSsoUserInfor error', err.message)
+        return {}
+    }
+}
+
+let verifyClientUser = (user, from) => {
+    console.log('verifyClientUser/user', user)
+    console.log('於生產環境時得加入限制瀏覽器使用者身份機制')
+    // return false //測試無法登入
+    return user.isAdmin === 'y' //測試僅系統管理者使用
+}
+
+let verifyAppUser = (user, from) => {
+    console.log('verifyAppUser/user', user)
+    console.log('於生產環境時得加入限制應用程式使用者身份機制')
+    // return false //測試無法登入
+    return user.isAdmin === 'y' //測試僅系統管理者使用
+}
+
+//WWebApi
+let instWWebApi = WWebApi(WOrm, url, db, getUserByToken, verifyClientUser, verifyAppUser, opt)
+
+instWWebApi.on('error', (err) => {
+    console.log(err)
+})
+
+
+//node srv.mjs

package/tableTags.json

@@ -1 +1 @@
-{"apis":"2026-08-19T22:52:31+08:00|3tBf8a"}
+{"apis":"2026-08-25T21:36:29+08:00|2j5C7e"}