初始化

缺陷：主题配色需要优化整体的同风格

.changeset/.prettierrc.json

@@ -0,0 +1,3 @@
+{
+  "singleQuote": true
+}

.changeset/fancy-ears-walk.md

@@ -0,0 +1,7 @@
+---
+'@vben/styles': patch
+'@vben-core/form-ui': patch
+'@vben/web-naive': patch
+---
+
+feat(@core/form-ui): 新增 useVbenForm 数组编辑器 VbenFormFieldArray

.cursor/rules/Code-Standards.mdc

@@ -1,8 +1,16 @@
 ---
-description: nl-admin 管理后台（Vben Admin v5 + Vue 3 + TS + Ant Design Vue）代码规范
+description: nl-admin 管理后台（Vben Admin 5.7 + Vue 3.5 + TS + Ant Design Vue 4）代码规范
 alwaysApply: true
 ---
 
+# 技术栈基线（升级后必守）
+
+- **Vben Admin 5.7.0**（monorepo 根 `package.json` / `@vben/web-antd` 版本）
+- **Vue 3.5** + **TypeScript** + **Ant Design Vue 4.x**；业务只改 `apps/web-antd`
+- **Tailwind CSS v4**（CSS-first，主题在 `@vben/tailwind-config`）；不要再引入 `tailwind.config.*` / PostCSS Tailwind 插件那套 v3 写法
+- 格式化 / Lint 以仓库现有工具链为准：`oxfmt` + `oxlint`（配合 eslint / stylelint），**不要**再单独引入 Prettier 作为主格式化器
+- 组件细则见同目录 `Vben-Components.mdc`（与 https://doc.vben.pro/components/ 对齐）
+
 # 基础规范（所有项目通用）
 
 1. 写代码的时候要补充详细的中文注释（每个方法是干嘛的，为什么要这样写），如果是工作区，则所有项目都适用该规则
@@ -133,7 +141,9 @@ alwaysApply: true
 - 表格空态、分割线、次要文案：用 `--muted` / `--muted-foreground` / `--border`
 - 改完后切换暗色主题肉眼过一遍，不要只测亮色
 
-## Vben 组件使用规范
+## Vben 组件使用规范（5.7 基线）
+
+> 完整 API / 踩坑见 `Vben-Components.mdc`。下列为业务页强制约定；`lock` / `unlock` / Promise 版 `onBeforeClose` 在 5.7 已是默认能力，**不要再写「需 >5.5.x」这类过时版本门槛**。
 
 ### VbenModal（来自 @vben/common-ui）
 
@@ -141,18 +151,18 @@ alwaysApply: true
 - 抽离弹窗内容到子组件时，外层用 `connectedComponent` 参数连接，内外组件共享 `modalApi`
 - 底部按钮扩展 slot 优先级：`prepend-footer`（取消按钮左侧）> `center-footer`（取消/确定之间）> `append-footer`（确定右侧）
 - **严禁覆盖 `#footer` slot**，会丢失默认的取消/确定按钮和 loading 行为
-- 表单提交 loading 走 `modalApi.setState({ confirmLoading: true })`，禁止自己写 button loading
-- 提交防抖/防重复用 `modalApi.lock()` / `unlock()`（>5.5.3），禁止手动 disabled
+- 提交防抖/防重复优先 `modalApi.lock()` / `unlock()`（锁定时确认按钮 loading，并禁止关闭）；也可用 `setState({ confirmLoading: true })`，禁止自己写 button loading / disabled
 - 拖拽开 `draggable: true`，需要拖出可视区时同时开 `overflow: true`
 - 数据回填走 `modalApi.setData()` + `onOpenChange(isOpen) { const data = modalApi.getData() }`
+- `animationType: 'slide' | 'scale'`（默认 slide）；挂内容区时开 `appendToMain`，且 Page 必须 `auto-content-height`
 
 ### VbenDrawer（来自 @vben/common-ui）
 
 - 创建抽屉必须用 `useVbenDrawer`，禁止直接用 antd `Drawer`
 - 底部按钮扩展 slot 与 Modal 一致：`prepend-footer` / `center-footer` / `append-footer`
 - **同样严禁覆盖 `#footer` slot**
-- 关闭前校验用 `onBeforeClose`（>5.5.2 支持 Promise），禁止自己拦截
-- 提交防抖/防重复用 `drawerApi.lock()` / `unlock()`（>5.5.3）
+- 关闭前校验用 `onBeforeClose`（支持 Promise / 返回 `false`），禁止自己拦截
+- 提交防抖/防重复用 `drawerApi.lock()` / `unlock()`
 
 ### VbenVxeTable（来自 #/adapter/vxe-table）
 
@@ -175,5 +185,10 @@ alwaysApply: true
 - 校验用 `formApi.validate().then(e => { if (e.valid) {...} })` 或 `formApi.validateAndSubmitForm()`
 - 必填规则用字符串 `'required'` / `'selectRequired'`，规则在 `#/adapter/form.ts` 的 `defineRules` 注册
 - schema 中字段名（`fieldName`）必须与后端字段 snake_case 对齐，禁止前端 camelCase
-- 密码/敏感字段用 `VbenInputPassword` 组件，禁止用 `VbenInput` 配 `type="password"`
+- 业务表单密码字段用适配器组件名 `InputPassword`；禁止 `Input` + `type="password"`（框架自带页可用 `VbenInputPassword`）
 - 单选/多选选项来自接口时，必须在弹窗/页面 `onMounted` 或 `onOpenChange` 里拉取后通过 `updateSchema` 注入，禁止写死常量
+
+## 代码生成与 uniapp
+
+- PC「代码生成」下载的 zip **同时包含** `view/`（本仓库 my-gen）与 `uniapp/`（移动端 `pages-sub/my-gen`）
+- PC 侧只维护 Vben 模板与粘贴路径；uniapp 的 **C 端 UI / 三端兼容** 以 uniapp 与后端代码生成规则为准，禁止要求移动端照搬本仓库表格形态

.cursor/rules/Vben-Components.mdc

@@ -1,13 +1,14 @@
 ---
-description: nl-admin-view Vben 官方组件用法规范（Page/Form/Modal/Drawer/VxeTable 等）
+description: nl-admin-view Vben 5.7 官方组件用法规范（Page/Form/Modal/Drawer/VxeTable 等）
 globs: apps/web-antd/**/*.{vue,ts}
 alwaysApply: false
 ---
 
-# Vben 组件规则（对齐官方文档 + 本仓库约定）
+# Vben 组件规则（对齐 5.7.0 官方文档 + 本仓库约定）
 
-文档来源：https://doc.vben.pro/components/  
-业务页统一在 `apps/web-antd`；表单/表格必须走本仓库适配器，不要直接依赖底层实现细节。
+当前版本：**Vben Admin 5.7.0**。文档来源：https://doc.vben.pro/components/  
+业务页统一在 `apps/web-antd`；表单/表格必须走本仓库适配器，不要直接依赖底层实现细节。  
+`lock` / `unlock`、Promise 版 `onBeforeClose`、`animationType`、`center-footer` 等在 5.7 已是基线能力，规则里不再标注「>5.5.x」版本门槛。
 
 ## 选型速查
 
@@ -53,13 +54,14 @@ const [Modal, modalApi] = useVbenModal({
 - 复杂弹窗用 `connectedComponent`；内外共享 `modalApi`
 - **严禁覆盖 `#footer`**（会丢掉默认取消/确定与 loading）
 - 扩展底部只用：`prepend-footer` / `center-footer` / `append-footer`
-- 提交防重复：`modalApi.lock()` / `unlock()`（或 `setState({ confirmLoading: true })`）
+- 提交防重复：优先 `modalApi.lock()` / `unlock()`（`unlock` = `lock(false)`；锁定时确认按钮 loading、禁关弹窗）；或 `setState({ confirmLoading: true })`
 - 回填：`modalApi.setData(data).open()`；内部 `onOpenChange` 里 `modalApi.getData()`
 - 参数优先级：`slot` > `props` > `state`；`connectedComponent` 时同名事件**以内侧为准**（`onOpenChange` 内外都会触发）
 - 默认属性可在 `apps/web-antd/src/bootstrap.ts` 的 `setDefaultModalProps` 统一改
 - 动画：`animationType: 'slide' | 'scale'`（默认 slide）
+- `destroyOnClose`：关闭后销毁内部 Modal 及子组件（配合 `connectedComponent` 时同样生效）
 
-常用 API：`open` / `close` / `setState` / `setData` / `getData` / `lock` / `unlock`
+常用 API：`open` / `close` / `setState` / `setData` / `getData` / `lock` / `unlock` / `useStore`
 
 ---
 
@@ -68,7 +70,7 @@ const [Modal, modalApi] = useVbenModal({
 - API 形态与 Modal 基本一致：`connectedComponent`、`setData/getData`、`lock/unlock`、footer 三插槽
 - **同样严禁覆盖 `#footer`**
 - `placement`: `left | right | top | bottom`（默认 `right`）
-- 关闭前校验用 `onBeforeClose`（支持 Promise）；需要重置内部状态可开 `destroyOnClose`
+- 关闭前校验用 `onBeforeClose`（支持 Promise / 返回 `false`）；需要重置内部状态可开 `destroyOnClose`
 - 挂内容区同样要配合 Page 的 `auto-content-height`
 - 默认属性：`setDefaultDrawerProps`
 
@@ -224,8 +226,10 @@ const blob = await cropperRef.value?.getCropImage('image/jpeg', 0.9, 'blob');
 ## 与本仓库踩坑清单（必守）
 
 1. Form 无 `setComponentProps` / 无 `resetFields`
-2. Modal/Drawer 禁止覆盖 `#footer`；提交用 `lock/unlock`
+2. Modal/Drawer 禁止覆盖 `#footer`；提交用 `lock/unlock`（5.7 基线，无需再判断版本）
 3. 表格返回必须是 `{ items, total }`；刷新分清 `query` vs `reload`
 4. 字段名 `fieldName` 用后端 snake_case（如 `created_at`、`nick_name`）
 5. 状态枚举与后端一致：**0 正常 / 1 禁用**
 6. 暗色主题：业务样式用 CSS 变量，禁止写死亮色色值（见 `Code-Standards.mdc`）
+7. Tailwind 已是 v4：业务样式优先主题 CSS 变量 / 现有 utility；不要新建 v3 的 `tailwind.config.*`
+8. 业务 CRUD 只改 `apps/web-antd`；不要往 `web-ele` / `web-naive` / `web-antdv-next` 等演示端塞业务代码

.gitattributes

@@ -4,8 +4,18 @@
 * text=auto eol=lf
 
 # Declare files that will always have CRLF line endings on checkout.
-*.{cmd,[cC][mM][dD]} text eol=crlf
-*.{bat,[bB][aA][tT]} text eol=crlf
+*.cmd text eol=crlf
+*.[cC][mM][dD] text eol=crlf
+*.bat text eol=crlf
+*.[bB][aA][tT] text eol=crlf
 
 # Denote all files that are truly binary and should not be modified.
-*.{ico,png,jpg,jpeg,gif,webp,svg,woff,woff2} binary
+*.ico binary
+*.png binary
+*.jpg binary
+*.jpeg binary
+*.gif binary
+*.webp binary
+*.svg binary
+*.woff binary
+*.woff2 binary

.github/actions/setup-node/action.yml

@@ -6,10 +6,10 @@ runs:
   using: 'composite'
   steps:
     - name: Install pnpm
-      uses: pnpm/action-setup@v4
+      uses: pnpm/action-setup@v6
 
     - name: Install Node.js
-      uses: actions/setup-node@v4
+      uses: actions/setup-node@v6
       with:
         node-version-file: .node-version
         cache: 'pnpm'

.github/config.yml

@@ -21,12 +21,10 @@ newPRWelcomeComment: |
 firstPRMergeComment: >
   Thanks for your contribution!  🎉🎉🎉
 
-
 # Comment to be posted to on first time issues
 newIssueWelcomeComment: >
   Thanks for opening your first issue! Be sure to follow the issue template and provide every bit of information to help the developers!
 
-
 # *OPTIONAL* default titles to check against for lack of descriptiveness
 # MUST BE ALL LOWERCASE
 requestInfoDefaultTitles:
@@ -36,4 +34,3 @@ requestInfoDefaultTitles:
 # *Required* Comment to reply with
 requestInfoReplyComment: >
   Thanks for filing this issue/PR! It would be much appreciated if you could provide us with more information so we can effectively analyze the situation in context.
-

.github/contributing.md

@@ -19,11 +19,9 @@ Project maintainers have the right and responsibility to remove, edit, or reject
 - Checkout a topic branch from the relevant branch, e.g. main, and merge back against that branch.
 
 - If adding a new feature:
-
   - Provide a convincing reason to add this feature. Ideally, you should open a suggestion issue first and have it approved before working on it.
 
 - If fixing bug:
-
   - Provide a detailed description of the bug in the PR. Live demo preferred.
 
 - It's OK to have multiple small commits as you work on the PR - GitHub can automatically squash them before merging.

.github/workflows/build.yml

@@ -30,7 +30,7 @@ jobs:
           - windows-latest
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
         with:
           fetch-depth: 0
 

.github/workflows/changeset-version.yml

@@ -25,7 +25,7 @@ jobs:
 
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
         with:
           fetch-depth: 0
 

.github/workflows/ci.yml

@@ -28,12 +28,12 @@ jobs:
     timeout-minutes: 20
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
         with:
           fetch-depth: 0
 
       - name: Install pnpm
-        uses: pnpm/action-setup@v4
+        uses: pnpm/action-setup@v6
         with:
           run_install: false
 
@@ -67,7 +67,7 @@ jobs:
 
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
         with:
           fetch-depth: 0
 
@@ -90,7 +90,7 @@ jobs:
           - windows-latest
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
         with:
           fetch-depth: 0
 

.github/workflows/codeql.yml

@@ -57,11 +57,11 @@ jobs:
         # your codebase is analyzed, see https://docs.github.com/en/code-security/code-scanning/creating-an-advanced-setup-for-code-scanning/codeql-code-scanning-for-compiled-languages
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
 
       # Initializes the CodeQL tools for scanning.
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@v3
+        uses: github/codeql-action/init@v4
         with:
           languages: ${{ matrix.language }}
           build-mode: ${{ matrix.build-mode }}
@@ -89,6 +89,6 @@ jobs:
           exit 1
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@v3
+        uses: github/codeql-action/analyze@v4
         with:
           category: '/language:${{matrix.language}}'

.github/workflows/deploy.yml

@@ -12,7 +12,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
         with:
           fetch-depth: 0
 
@@ -30,7 +30,7 @@ jobs:
         run: pnpm build:play
 
       - name: Sync Playground files
-        uses: SamKirkland/FTP-Deploy-Action@v4.3.5
+        uses: SamKirkland/FTP-Deploy-Action@v4.4.0
         with:
           server: ${{ secrets.PRO_FTP_HOST }}
           username: ${{ secrets.WEB_PLAYGROUND_FTP_ACCOUNT }}
@@ -43,7 +43,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
         with:
           fetch-depth: 0
 
@@ -54,7 +54,7 @@ jobs:
         run: pnpm build:docs
 
       - name: Sync Docs files
-        uses: SamKirkland/FTP-Deploy-Action@v4.3.5
+        uses: SamKirkland/FTP-Deploy-Action@v4.4.0
         with:
           server: ${{ secrets.PRO_FTP_HOST }}
           username: ${{ secrets.WEBSITE_FTP_ACCOUNT }}
@@ -67,7 +67,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
         with:
           fetch-depth: 0
 
@@ -85,7 +85,7 @@ jobs:
         run: pnpm run build:antd
 
       - name: Sync files
-        uses: SamKirkland/FTP-Deploy-Action@v4.3.5
+        uses: SamKirkland/FTP-Deploy-Action@v4.4.0
         with:
           server: ${{ secrets.PRO_FTP_HOST }}
           username: ${{ secrets.WEB_ANTD_FTP_ACCOUNT }}
@@ -98,7 +98,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
         with:
           fetch-depth: 0
 
@@ -116,7 +116,7 @@ jobs:
         run: pnpm run build:ele
 
       - name: Sync files
-        uses: SamKirkland/FTP-Deploy-Action@v4.3.5
+        uses: SamKirkland/FTP-Deploy-Action@v4.4.0
         with:
           server: ${{ secrets.PRO_FTP_HOST }}
           username: ${{ secrets.WEB_ELE_FTP_ACCOUNT }}
@@ -129,7 +129,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
         with:
           fetch-depth: 0
 
@@ -147,7 +147,7 @@ jobs:
         run: pnpm run build:naive
 
       - name: Sync files
-        uses: SamKirkland/FTP-Deploy-Action@v4.3.5
+        uses: SamKirkland/FTP-Deploy-Action@v4.4.0
         with:
           server: ${{ secrets.PRO_FTP_HOST }}
           username: ${{ secrets.WEB_NAIVE_FTP_ACCOUNT }}

.github/workflows/draft.yml

@@ -20,6 +20,6 @@ jobs:
     if: github.repository == 'vbenjs/vue-vben-admin'
     runs-on: ubuntu-latest
     steps:
-      - uses: release-drafter/release-drafter@v6
+      - uses: release-drafter/release-drafter@v7
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/issue-close-require.yml

@@ -19,7 +19,7 @@ jobs:
     steps:
       # 关闭未活动的 Issues
       - name: Close Inactive Issues
-        uses: actions/stale@v9
+        uses: actions/stale@v11
         with:
           days-before-stale: -1 # Issues and PR will never be flagged stale automatically.
           stale-issue-label: needs-reproduction # Label that flags an issue as stale.

.github/workflows/issue-labeled.yml

@@ -18,7 +18,7 @@ jobs:
     steps:
       - name: remove enhancement pending
         if: github.event.label.name == 'enhancement'
-        uses: actions-cool/issues-helper@v3
+        uses: actions-cool/issues-helper-backup@d65454423c6fbbd20026b9b499d403f79422ac69
         with:
           actions: 'remove-labels'
           token: ${{ secrets.GITHUB_TOKEN }}
@@ -27,7 +27,7 @@ jobs:
 
       - name: remove bug pending
         if: github.event.label.name == 'bug'
-        uses: actions-cool/issues-helper@v3
+        uses: actions-cool/issues-helper-backup@d65454423c6fbbd20026b9b499d403f79422ac69
         with:
           actions: 'remove-labels'
           token: ${{ secrets.GITHUB_TOKEN }}
@@ -36,7 +36,7 @@ jobs:
 
       - name: needs reproduction
         if: github.event.label.name == 'needs reproduction'
-        uses: actions-cool/issues-helper@v3
+        uses: actions-cool/issues-helper-backup@d65454423c6fbbd20026b9b499d403f79422ac69
         with:
           actions: 'create-comment, remove-labels'
           token: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/lock.yml

@@ -14,7 +14,7 @@ jobs:
     if: github.repository == 'vbenjs/vue-vben-admin'
     runs-on: ubuntu-latest
     steps:
-      - uses: dessant/lock-threads@v5
+      - uses: dessant/lock-threads@v6
         with:
           github-token: ${{ secrets.GITHUB_TOKEN }}
           issue-inactive-days: '14'

.github/workflows/release-tag.yml

@@ -3,78 +3,48 @@ name: Create Release Tag
 on:
   push:
     tags:
-      - 'v*.*.*' # Push events to matching v*, i.e. v1.0, v20.15.10
-
-env:
-  HUSKY: '0'
+      - 'v*.*.*'
+  workflow_dispatch:
+    inputs:
+      tag:
+        description: 'Tag to create (e.g. v1.2.3)'
+        required: true
+        type: string
 
 permissions:
-  pull-requests: write
   contents: write
 
 jobs:
-  build:
+  release:
     name: Create Release
     if: github.repository == 'vbenjs/vue-vben-admin'
     runs-on: ubuntu-latest
-    strategy:
-      matrix:
-        node-version: [20]
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
         with:
           fetch-depth: 0
 
-      # - name: Checkout code
-      #   uses: actions/checkout@v4
-      #   with:
-      #     fetch-depth: 0
-
-      # - name: Install pnpm
-      #   uses: pnpm/action-setup@v4
-
-      # - name: Use Node.js ${{ matrix.node-version }}
-      #   uses: actions/setup-node@v4
-      #   with:
-      #     node-version: ${{ matrix.node-version }}
-      #     cache: "pnpm"
-
-      # - name: Install dependencies
-      #   run: pnpm install --frozen-lockfile
-
-      # - name: Test and Build
-      #   run: |
-      #     pnpm run test
-      #     pnpm run build
-
-      - name: version
+      - name: Extract version
         id: version
         run: |
-          tag=${GITHUB_REF/refs\/tags\//}
-          version=${tag#v}
-          major=${version%%.*}
-          echo "tag=${tag}" >> $GITHUB_OUTPUT
-          echo "version=${version}" >> $GITHUB_OUTPUT
-          echo "major=${major}" >> $GITHUB_OUTPUT
+          if [[ "${{ github.event_name }}" == "workflow_dispatch" ]]; then
+            raw_tag="${{ inputs.tag }}"
+          else
+            raw_tag="${GITHUB_REF_NAME}"
+          fi
+          # Normalize: ensure v prefix
+          tag="${raw_tag}"
+          [[ "${tag:0:1}" != "v" ]] && tag="v${tag}"
+          version="${tag#v}"
+          major="${version%%.*}"
+          echo "tag=${tag}" >> "${GITHUB_OUTPUT}"
+          echo "version=${version}" >> "${GITHUB_OUTPUT}"
+          echo "major=${major}" >> "${GITHUB_OUTPUT}"
 
-      - uses: release-drafter/release-drafter@v6
+      - uses: release-drafter/release-drafter@v7
         with:
           version: ${{ steps.version.outputs.version }}
           publish: true
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-
-      # - name: force update major tag
-      #   run: |
-      #     git tag v${{ steps.version.outputs.major }} ${{ steps.version.outputs.tag }} -f
-      #     git push origin refs/tags/v${{ steps.version.outputs.major }} -f
-
-      # - name: Create Release for Tag
-      #   id: release_tag
-      #   uses: ncipollo/release-action@v1
-      #   with:
-      #     token: ${{ secrets.GITHUB_TOKEN }}
-      #     generateReleaseNotes: "true"
-      #     body: |
-      #       > Please refer to [CHANGELOG.md](https://github.com/vbenjs/vue-vben-admin/blob/main/CHANGELOG.md) for details.

.github/workflows/semantic-pull-request.yml

@@ -14,7 +14,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Validate PR title
-        uses: amannn/action-semantic-pull-request@v5
+        uses: amannn/action-semantic-pull-request@v6
         with:
           wip: true
           subjectPattern: ^(?![A-Z]).+$

.github/workflows/stale.yml

@@ -9,7 +9,7 @@ jobs:
     if: github.repository == 'vbenjs/vue-vben-admin'
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/stale@v9
+      - uses: actions/stale@v11
         with:
           repo-token: ${{ secrets.GITHUB_TOKEN }}
           stale-issue-message: 'This issue is stale because it has been open 60 days with no activity. Remove stale label or comment or this will be closed in 7 days'

.gitignore

@@ -5,6 +5,11 @@ dist-ssr
 dist.zip
 dist.tar
 dist.war
+# 双品牌构建产物：build:brm / build:wl
+dist-brm
+dist-wl
+dist-brm.zip
+dist-wl.zip
 .nitro
 .output
 *-dist.zip
@@ -22,7 +27,8 @@ yarn.lock
 package-lock.json
 .VSCodeCounter
 **/backend-mock/data
-
+.omx
+.pnpm-store
 # local env files
 .env.local
 .env.*.local
@@ -49,3 +55,15 @@ vite.config.ts.*
 *.sln
 *.sw?
 .history
+.cursor
+
+# AI
+.agent
+.agents
+.claude
+.codex
+skills-lock.json
+.atomcode
+datalog
+.playwright-mcp
+/apps/desktop/release/win-unpacked/

.node-version

@@ -1 +1 @@
-22.1.0
+24.16.0

.npmrc

@@ -1,13 +1,7 @@
-registry = "https://registry.npmmirror.com"
-public-hoist-pattern[]=lefthook
-public-hoist-pattern[]=eslint
-public-hoist-pattern[]=prettier
-public-hoist-pattern[]=prettier-plugin-tailwindcss
-public-hoist-pattern[]=stylelint
-public-hoist-pattern[]=*postcss*
-public-hoist-pattern[]=@commitlint/*
-public-hoist-pattern[]=czg
-
-strict-peer-dependencies=false
-auto-install-peers=true
-dedupe-peer-dependents=true
+registry=https://registry.npmmirror.com
+# electron 二进制与 electron-builder 打包工具链走国内镜像（不配国内基本装不动）
+# 注意：新版 @electron/get 只认环境变量，若 pnpm install 后 electron 二进制缺失，
+# 手动补装：PowerShell 里 $env:ELECTRON_MIRROR="https://npmmirror.com/mirrors/electron/"
+# 然后在 apps/desktop 下执行 node ./node_modules/electron/install.js
+electron_mirror=https://npmmirror.com/mirrors/electron/
+electron_builder_binaries_mirror=https://npmmirror.com/mirrors/electron-builder-binaries/

.prettierignore

@@ -1,18 +0,0 @@
-dist
-dev-dist
-.local
-.output.js
-node_modules
-.nvmrc
-coverage
-CODEOWNERS
-.nitro
-.output
-
-
-**/*.svg
-**/*.sh
-
-public
-.npmrc
-*-lock.yaml

.prettierrc.mjs

@@ -1 +0,0 @@
-export { default } from '@vben/prettier-config';

.stylelintignore

@@ -2,3 +2,7 @@ dist
 public
 __tests__
 coverage
+.codex
+.claude
+.agent
+.agents

.vscode/extensions.json

@@ -2,14 +2,18 @@
   "recommendations": [
     // Vue 3 的语言支持
     "Vue.volar",
-    // 将 ESLint JavaScript 集成到 VS Code 中。
+    // 将 eslint 集成到 VS Code 中。
     "dbaeumer.vscode-eslint",
+    // 将 oxlint 集成到 VS Code 中。
+    "oxc.oxc-vscode",
     // Visual Studio Code 的官方 Stylelint 扩展
     "stylelint.vscode-stylelint",
-    // 使用 Prettier 的代码格式化程序
-    "esbenp.prettier-vscode",
+    // 使用 oxfmt 的代码格式化程序
+    "oxc.oxc-vscode",
     // 支持 dotenv 文件语法
     "mikestead.dotenv",
+    // YAML 语言支持，供 ESLint 校验 pnpm-workspace.yaml 等文件
+    "redhat.vscode-yaml",
     // 源代码的拼写检查器
     "streetsidesoftware.code-spell-checker",
     // Tailwind CSS 的官方 VS Code 插件

.vscode/settings.json

@@ -1,5 +1,6 @@
 {
-  "tailwindCSS.experimental.configFile": "internal/tailwind-config/src/index.ts",
+  "tailwindCSS.experimental.configFile": "internal/tailwind-config/src/theme.css",
+  "tailwindCSS.lint.suggestCanonicalClasses": "ignore",
   // workbench
   "workbench.list.smoothScrolling": true,
   "workbench.startupEditor": "newUntitledFile",
@@ -31,39 +32,51 @@
   "editor.autoClosingOvertype": "always",
   "editor.autoClosingQuotes": "beforeWhitespace",
   "editor.wordSeparators": "`~!@#%^&*()=+[{]}\\|;:'\",.<>/?",
+  "editor.quickSuggestions": {
+    "strings": "on"
+  },
+
+  // lint && format
+  "oxc.enable": true,
+  "oxc.typeAware": true,
+  "oxc.configPath": "oxlint.config.ts",
+  "oxc.fmt.configPath": "oxfmt.config.ts",
+  "eslint.useFlatConfig": true,
   "editor.codeActionsOnSave": {
     "source.fixAll.eslint": "explicit",
+    "source.fixAll.oxc": "explicit",
     "source.fixAll.stylelint": "explicit",
     "source.organizeImports": "never"
   },
-  "editor.defaultFormatter": "esbenp.prettier-vscode",
+  "editor.defaultFormatter": "oxc.oxc-vscode",
   "[html]": {
-    "editor.defaultFormatter": "esbenp.prettier-vscode"
+    "editor.defaultFormatter": "oxc.oxc-vscode"
   },
   "[css]": {
-    "editor.defaultFormatter": "esbenp.prettier-vscode"
+    "editor.defaultFormatter": "oxc.oxc-vscode"
   },
   "[scss]": {
-    "editor.defaultFormatter": "esbenp.prettier-vscode"
+    "editor.defaultFormatter": "oxc.oxc-vscode"
   },
   "[javascript]": {
-    "editor.defaultFormatter": "esbenp.prettier-vscode"
+    "editor.defaultFormatter": "oxc.oxc-vscode"
   },
   "[typescript]": {
-    "editor.defaultFormatter": "esbenp.prettier-vscode"
+    "editor.defaultFormatter": "oxc.oxc-vscode"
   },
   "[json]": {
-    "editor.defaultFormatter": "esbenp.prettier-vscode"
+    "editor.defaultFormatter": "oxc.oxc-vscode"
   },
   "[markdown]": {
-    "editor.defaultFormatter": "esbenp.prettier-vscode"
+    "editor.defaultFormatter": "oxc.oxc-vscode"
   },
   "[jsonc]": {
-    "editor.defaultFormatter": "esbenp.prettier-vscode"
+    "editor.defaultFormatter": "oxc.oxc-vscode"
   },
   "[vue]": {
-    "editor.defaultFormatter": "esbenp.prettier-vscode"
+    "editor.defaultFormatter": "oxc.oxc-vscode"
   },
+
   // extensions
   "extensions.ignoreRecommendations": true,
 
@@ -79,6 +92,7 @@
   "files.insertFinalNewline": true,
   "files.simpleDialog.enable": true,
   "files.associations": {
+    "*.css": "tailwindcss",
     "*.ejs": "html",
     "*.art": "html",
     "**/tsconfig.json": "jsonc",
@@ -118,7 +132,7 @@
   // search
   "search.searchEditor.singleClickBehaviour": "peekDefinition",
   "search.followSymlinks": false,
-  // 在使用搜索功能时，将这些文件夹/文件排除在外
+  // 使用搜索功能时，将这些文件和文件夹排除在外
   "search.exclude": {
     "**/node_modules": true,
     "**/*.log": true,
@@ -158,7 +172,7 @@
   "emmet.triggerExpansionOnTab": false,
 
   "errorLens.enabledDiagnosticLevels": ["warning", "error"],
-  "errorLens.excludeBySource": ["cSpell", "Grammarly", "eslint"],
+  "errorLens.excludeBySource": ["cSpell", "Grammarly"],
 
   "stylelint.enable": true,
   "stylelint.packageManager": "pnpm",
@@ -166,9 +180,10 @@
   "stylelint.customSyntax": "postcss-html",
   "stylelint.snippet": ["css", "less", "postcss", "scss", "vue"],
 
-  "typescript.inlayHints.enumMemberValues.enabled": true,
-  "typescript.preferences.preferTypeOnlyAutoImports": true,
-  "typescript.preferences.includePackageJsonAutoImports": "on",
+  "js/ts.tsdk.path": "node_modules/typescript/lib",
+  "js/ts.inlayHints.enumMemberValues.enabled": true,
+  "js/ts.preferences.preferTypeOnlyAutoImports": true,
+  "js/ts.preferences.includePackageJsonAutoImports": "on",
 
   "eslint.validate": [
     "javascript",
@@ -180,7 +195,8 @@
     "markdown",
     "json",
     "jsonc",
-    "json5"
+    "json5",
+    "yaml"
   ],
 
   "tailwindCSS.experimental.classRegex": [
@@ -194,7 +210,7 @@
     "yaml": false
   },
 
-  "cssVariables.lookupFiles": ["packages/core/base/design/src/**/*.css"],
+  "cssVariables.lookupFiles": ["packages/@core/base/design/src/**/*.css"],
 
   "i18n-ally.localesPaths": [
     "packages/locales/src/langs",
@@ -219,23 +235,9 @@
     "*.env": "$(capture).env.*",
     "README.md": "README*,CHANGELOG*,LICENSE,CNAME",
     "package.json": "pnpm-lock.yaml,pnpm-workspace.yaml,.gitattributes,.gitignore,.gitpod.yml,.npmrc,.browserslistrc,.node-version,.git*,.tazerc.json",
-    "eslint.config.mjs": ".eslintignore,.prettierignore,.stylelintignore,.commitlintrc.*,.prettierrc.*,stylelint.config.*,.lintstagedrc.mjs,cspell.json,lefthook.yml",
-    "tailwind.config.mjs": "postcss.*"
+    "oxlint.config.ts": ".eslintignore,.stylelintignore,.commitlintrc.*,stylelint.config.*,.lintstagedrc.mjs,cspell.json,lefthook.yml,oxfmt.config.*,eslint.config.*"
   },
   "commentTranslate.hover.enabled": false,
   "commentTranslate.multiLineMerge": true,
-  "vue.server.hybridMode": true,
-  "typescript.tsdk": "node_modules/typescript/lib",
-  "oxc.enable": false,
-  "cSpell.words": [
-    "archiver",
-    "axios",
-    "dotenv",
-    "isequal",
-    "jspm",
-    "napi",
-    "nolebase",
-    "rollup",
-    "vitest"
-  ]
+  "vue.server.hybridMode": true
 }

README.ja-JP.md

@@ -114,7 +114,7 @@ pnpm build
 
 ## ブラウザサポート
 
-ローカル開発には `Chrome 80+` ブラウザを推奨します
+Tailwind CSS v4.0 is designed for Safari 16.4+, Chrome 111+, and Firefox 128+
 
 モダンブラウザをサポートし、IEはサポートしません
 
@@ -140,8 +140,12 @@ pnpm build
 
 ## 貢献者
 
+<a href="https://openomy.app/github/vbenjs/vue-vben-admin" target="_blank" style="display: block; width: 100%;" align="center">
+  <img src="https://openomy.app/svg?repo=vbenjs/vue-vben-admin&chart=bubble&latestMonth=3" target="_blank" alt="Contribution Leaderboard" style="display: block; width: 100%;" />
+ </a>
+
 <a href="https://github.com/vbenjs/vue-vben-admin/graphs/contributors">
-  <img alt="Contributors" src="https://opencollective.com/vbenjs/contributors.svg?button=false" />
+  <img alt="Contributors" src="https://contrib.rocks/image?repo=vbenjs/vue-vben-admin" />
 </a>
 
 ## Discord

README.md

@@ -1 +1,67 @@
-# 奶酪云后台管理脚手架
+# lgp-admin-plus
+
+LGP 管理后台前端（Vben Admin 5.7 / `apps/web-antd`）。  
+两个家具品牌共用一套代码，靠构建模式区分。
+
+| 品牌 | 命令后缀 | AppID | 产出目录 |
+|---|---|---|---|
+| 佛山铂尔曼 | `brm` | `wx679d36842570cea7` | `apps/web-antd/dist-brm` |
+| 维伦家具 | `wl` | `wx57b54060a579c31a` | `apps/web-antd/dist-wl` |
+
+包管理器：**pnpm**（不要用 npm / yarn）。
+
+## 准备
+
+```bash
+pnpm install
+```
+
+## 启动（两种）
+
+在仓库根目录执行：
+
+```bash
+# 1）佛山铂尔曼 —— 读 .env.brm（标题 / Logo / 品牌色）
+pnpm dev:brm
+
+# 2）维伦家具 —— 读 .env.wl
+pnpm dev:wl
+```
+
+默认开发端口见 `apps/web-antd/vite.config.ts`（当前 **14002**）。  
+接口代理：`/api` → 本地后端 `http://127.0.0.1:18004/api/`。
+
+> 仅调试、不区分品牌时可用 `pnpm dev`（`development` 模式，默认品牌仍是铂尔曼）。
+
+## 打包（两种）
+
+```bash
+# 1）佛山铂尔曼 → apps/web-antd/dist-brm（并可能产出 zip）
+pnpm build:brm
+
+# 2）维伦家具 → apps/web-antd/dist-wl
+pnpm build:wl
+```
+
+一次打两个品牌：
+
+```bash
+pnpm build:brands
+```
+
+两个品牌 **outDir 必须分开**，否则会互相覆盖。上线前按品牌分别回归。
+
+## 环境文件
+
+| 文件 | 用途 |
+|---|---|
+| `apps/web-antd/.env.brm` | 铂尔曼生产构建 / `dev:brm` |
+| `apps/web-antd/.env.wl` | 维伦生产构建 / `dev:wl` |
+| `apps/web-antd/.env.development` | 通用本地开发（`pnpm dev`） |
+
+品牌相关变量：`VITE_APP_BRAND`、`VITE_APP_TITLE`、`VITE_APP_FAVICON`、`VITE_GLOB_API_URL`。
+
+## 后端
+
+配套 API：`lgp-admin-plus-api`（Laravel 13）。  
+库表变更走 `database/sql/<YYYY-MM-DD>/01_名字.sql`，不要新建 PHP Migration。

README.zh-CN.md

@@ -114,7 +114,7 @@ pnpm build
 
 ## 浏览器支持
 
-本地开发推荐使用 `Chrome 80+` 浏览器
+Tailwind CSS v4.0 is designed for Safari 16.4+, Chrome 111+, and Firefox 128+
 
 支持现代浏览器，不支持 IE
 
@@ -140,8 +140,12 @@ pnpm build
 
 ## 贡献者
 
+<a href="https://openomy.app/github/vbenjs/vue-vben-admin" target="_blank" style="display: block; width: 100%;" align="center">
+  <img src="https://openomy.app/svg?repo=vbenjs/vue-vben-admin&chart=bubble&latestMonth=3" target="_blank" alt="Contribution Leaderboard" style="display: block; width: 100%;" />
+ </a>
+
 <a href="https://github.com/vbenjs/vue-vben-admin/graphs/contributors">
-  <img alt="Contributors" src="https://opencollective.com/vbenjs/contributors.svg?button=false" />
+  <img alt="Contributors" src="https://contrib.rocks/image?repo=vbenjs/vue-vben-admin" />
 </a>
 
 ## Discord

apps/backend-mock/api/auth/codes.ts

@@ -1,5 +1,7 @@
+import { eventHandler } from 'h3';
 import { verifyAccessToken } from '~/utils/jwt-utils';
-import { unAuthorizedResponse } from '~/utils/response';
+import { MOCK_CODES } from '~/utils/mock-data';
+import { unAuthorizedResponse, useResponseSuccess } from '~/utils/response';
 
 export default eventHandler((event) => {
   const userinfo = verifyAccessToken(event);

apps/backend-mock/api/auth/login.post.ts

@@ -1,9 +1,15 @@
+import { defineEventHandler, readBody, setResponseStatus } from 'h3';
 import {
   clearRefreshTokenCookie,
   setRefreshTokenCookie,
 } from '~/utils/cookie-utils';
 import { generateAccessToken, generateRefreshToken } from '~/utils/jwt-utils';
-import { forbiddenResponse } from '~/utils/response';
+import { MOCK_USERS } from '~/utils/mock-data';
+import {
+  forbiddenResponse,
+  useResponseError,
+  useResponseSuccess,
+} from '~/utils/response';
 
 export default defineEventHandler(async (event) => {
   const { password, username } = await readBody(event);

apps/backend-mock/api/auth/logout.post.ts

@@ -1,7 +1,9 @@
+import { defineEventHandler } from 'h3';
 import {
   clearRefreshTokenCookie,
   getRefreshTokenFromCookie,
 } from '~/utils/cookie-utils';
+import { useResponseSuccess } from '~/utils/response';
 
 export default defineEventHandler(async (event) => {
   const refreshToken = getRefreshTokenFromCookie(event);

apps/backend-mock/api/auth/refresh.post.ts

@@ -1,9 +1,11 @@
+import { defineEventHandler } from 'h3';
 import {
   clearRefreshTokenCookie,
   getRefreshTokenFromCookie,
   setRefreshTokenCookie,
 } from '~/utils/cookie-utils';
-import { verifyRefreshToken } from '~/utils/jwt-utils';
+import { generateAccessToken, verifyRefreshToken } from '~/utils/jwt-utils';
+import { MOCK_USERS } from '~/utils/mock-data';
 import { forbiddenResponse } from '~/utils/response';
 
 export default defineEventHandler(async (event) => {

apps/backend-mock/api/demo/bigint.ts

@@ -0,0 +1,32 @@
+import { eventHandler, setHeader } from 'h3';
+import { verifyAccessToken } from '~/utils/jwt-utils';
+import { unAuthorizedResponse } from '~/utils/response';
+
+export default eventHandler(async (event) => {
+  const userinfo = verifyAccessToken(event);
+  if (!userinfo) {
+    return unAuthorizedResponse(event);
+  }
+  const data = `
+  {
+    "code": 0,
+    "message": "success",
+    "data": [
+              {
+                "id": 123456789012345678901234567890123456789012345678901234567890,
+                "name": "John Doe",
+                "age": 30,
+                "email": "john-doe@demo.com"
+                },
+                {
+                "id": 987654321098765432109876543210987654321098765432109876543210,
+                "name": "Jane Smith",
+                "age": 25,
+                "email": "jane@demo.com"
+                }
+            ]
+  }
+  `;
+  setHeader(event, 'Content-Type', 'application/json');
+  return data;
+});

apps/backend-mock/api/menu/all.ts

@@ -1,5 +1,7 @@
+import { eventHandler } from 'h3';
 import { verifyAccessToken } from '~/utils/jwt-utils';
-import { unAuthorizedResponse } from '~/utils/response';
+import { MOCK_MENUS } from '~/utils/mock-data';
+import { unAuthorizedResponse, useResponseSuccess } from '~/utils/response';
 
 export default eventHandler(async (event) => {
   const userinfo = verifyAccessToken(event);

apps/backend-mock/api/status.ts

@@ -1,3 +1,6 @@
+import { eventHandler, getQuery, setResponseStatus } from 'h3';
+import { useResponseError } from '~/utils/response';
+
 export default eventHandler((event) => {
   const { status } = getQuery(event);
   setResponseStatus(event, Number(status));

apps/backend-mock/api/system/dept/.post.ts

@@ -1,3 +1,4 @@
+import { eventHandler } from 'h3';
 import { verifyAccessToken } from '~/utils/jwt-utils';
 import {
   sleep,

apps/backend-mock/api/system/dept/[id].delete.ts

@@ -1,3 +1,4 @@
+import { eventHandler } from 'h3';
 import { verifyAccessToken } from '~/utils/jwt-utils';
 import {
   sleep,

apps/backend-mock/api/system/dept/[id].put.ts

@@ -1,3 +1,4 @@
+import { eventHandler } from 'h3';
 import { verifyAccessToken } from '~/utils/jwt-utils';
 import {
   sleep,

apps/backend-mock/api/system/dept/list.ts

@@ -1,4 +1,5 @@
 import { faker } from '@faker-js/faker';
+import { eventHandler } from 'h3';
 import { verifyAccessToken } from '~/utils/jwt-utils';
 import { unAuthorizedResponse, useResponseSuccess } from '~/utils/response';
 

apps/backend-mock/api/system/menu/list.ts

@@ -1,3 +1,4 @@
+import { eventHandler } from 'h3';
 import { verifyAccessToken } from '~/utils/jwt-utils';
 import { MOCK_MENU_LIST } from '~/utils/mock-data';
 import { unAuthorizedResponse, useResponseSuccess } from '~/utils/response';

apps/backend-mock/api/system/menu/name-exists.ts

@@ -1,6 +1,7 @@
+import { eventHandler, getQuery } from 'h3';
 import { verifyAccessToken } from '~/utils/jwt-utils';
 import { MOCK_MENU_LIST } from '~/utils/mock-data';
-import { unAuthorizedResponse } from '~/utils/response';
+import { unAuthorizedResponse, useResponseSuccess } from '~/utils/response';
 
 const namesMap: Record<string, any> = {};
 

apps/backend-mock/api/system/menu/path-exists.ts

@@ -1,6 +1,7 @@
+import { eventHandler, getQuery } from 'h3';
 import { verifyAccessToken } from '~/utils/jwt-utils';
 import { MOCK_MENU_LIST } from '~/utils/mock-data';
-import { unAuthorizedResponse } from '~/utils/response';
+import { unAuthorizedResponse, useResponseSuccess } from '~/utils/response';
 
 const pathMap: Record<string, any> = { '/': 0 };
 

apps/backend-mock/api/system/role/list.ts

@@ -1,4 +1,5 @@
 import { faker } from '@faker-js/faker';
+import { eventHandler, getQuery } from 'h3';
 import { verifyAccessToken } from '~/utils/jwt-utils';
 import { getMenuIds, MOCK_MENU_LIST } from '~/utils/mock-data';
 import { unAuthorizedResponse, usePageResponseSuccess } from '~/utils/response';

apps/backend-mock/api/system/user/list.ts

@@ -0,0 +1,85 @@
+import { faker } from '@faker-js/faker';
+import { eventHandler, getQuery } from 'h3';
+import { verifyAccessToken } from '~/utils/jwt-utils';
+import { unAuthorizedResponse, usePageResponseSuccess } from '~/utils/response';
+
+const formatterCN = new Intl.DateTimeFormat('zh-CN', {
+  timeZone: 'Asia/Shanghai',
+  year: 'numeric',
+  month: '2-digit',
+  day: '2-digit',
+  hour: '2-digit',
+  minute: '2-digit',
+  second: '2-digit',
+});
+
+function generateMockDataList(count: number) {
+  const dataList = [];
+
+  for (let i = 0; i < count; i++) {
+    const dataItem: Record<string, any> = {
+      id: faker.string.uuid(),
+      name: faker.commerce.product(),
+      status: faker.helpers.arrayElement([0, 1]),
+      createTime: formatterCN.format(
+        faker.date.between({ from: '2022-01-01', to: '2025-01-01' }),
+      ),
+      deptId: faker.string.uuid(),
+      remark: faker.lorem.sentence(),
+    };
+
+    dataList.push(dataItem);
+  }
+
+  return dataList;
+}
+
+const mockData = generateMockDataList(100);
+
+export default eventHandler(async (event) => {
+  const userinfo = verifyAccessToken(event);
+  if (!userinfo) {
+    return unAuthorizedResponse(event);
+  }
+
+  const {
+    page = 1,
+    pageSize = 20,
+    name,
+    id,
+    remark,
+    startTime,
+    endTime,
+    deptId,
+    status,
+  } = getQuery(event);
+  let listData = structuredClone(mockData);
+  if (name) {
+    listData = listData.filter((item) =>
+      item.name.toLowerCase().includes(String(name).toLowerCase()),
+    );
+  }
+  if (id) {
+    listData = listData.filter((item) =>
+      item.id.toLowerCase().includes(String(id).toLowerCase()),
+    );
+  }
+  if (remark) {
+    listData = listData.filter((item) =>
+      item.remark?.toLowerCase()?.includes(String(remark).toLowerCase()),
+    );
+  }
+  if (startTime) {
+    listData = listData.filter((item) => item.createTime >= startTime);
+  }
+  if (endTime) {
+    listData = listData.filter((item) => item.createTime <= endTime);
+  }
+  if (['0', '1'].includes(status as string)) {
+    listData = listData.filter((item) => item.status === Number(status));
+  }
+  if (deptId) {
+    listData = listData.filter((item) => item.deptId === deptId);
+  }
+  return usePageResponseSuccess(page as string, pageSize as string, listData);
+});

apps/backend-mock/api/table/list.ts

@@ -1,6 +1,11 @@
 import { faker } from '@faker-js/faker';
+import { eventHandler, getQuery } from 'h3';
 import { verifyAccessToken } from '~/utils/jwt-utils';
-import { unAuthorizedResponse, usePageResponseSuccess } from '~/utils/response';
+import {
+  sleep,
+  unAuthorizedResponse,
+  usePageResponseSuccess,
+} from '~/utils/response';
 
 function generateMockDataList(count: number) {
   const dataList = [];
@@ -44,30 +49,69 @@ export default eventHandler(async (event) => {
   await sleep(600);
 
   const { page, pageSize, sortBy, sortOrder } = getQuery(event);
+  // 规范化分页参数，处理 string[]
+  const pageRaw = Array.isArray(page) ? page[0] : page;
+  const pageSizeRaw = Array.isArray(pageSize) ? pageSize[0] : pageSize;
+  const pageNumber = Math.max(
+    1,
+    Number.parseInt(String(pageRaw ?? '1'), 10) || 1,
+  );
+  const pageSizeNumber = Math.min(
+    100,
+    Math.max(1, Number.parseInt(String(pageSizeRaw ?? '10'), 10) || 10),
+  );
   const listData = structuredClone(mockData);
-  if (sortBy && Reflect.has(listData[0], sortBy as string)) {
+
+  // 规范化 query 入参，兼容 string[]
+  const sortKeyRaw = Array.isArray(sortBy) ? sortBy[0] : sortBy;
+  const sortOrderRaw = Array.isArray(sortOrder) ? sortOrder[0] : sortOrder;
+  // 检查 sortBy 是否是 listData 元素的合法属性键
+  if (
+    typeof sortKeyRaw === 'string' &&
+    listData[0] &&
+    Object.prototype.hasOwnProperty.call(listData[0], sortKeyRaw)
+  ) {
+    // 定义数组元素的类型
+    type ItemType = (typeof listData)[0];
+    const sortKey = sortKeyRaw as keyof ItemType; // 将 sortBy 断言为合法键
+    const isDesc = sortOrderRaw === 'desc';
     listData.sort((a, b) => {
-      if (sortOrder === 'asc') {
-        if (sortBy === 'price') {
-          return (
-            Number.parseFloat(a[sortBy as string]) -
-            Number.parseFloat(b[sortBy as string])
-          );
+      const aValue = a[sortKey] as unknown;
+      const bValue = b[sortKey] as unknown;
+
+      let result: number;
+
+      if (typeof aValue === 'number' && typeof bValue === 'number') {
+        result = aValue - bValue;
+      } else if (aValue instanceof Date && bValue instanceof Date) {
+        result = aValue.getTime() - bValue.getTime();
+      } else if (typeof aValue === 'boolean' && typeof bValue === 'boolean') {
+        if (aValue === bValue) {
+          result = 0;
         } else {
-          return a[sortBy as string] > b[sortBy as string] ? 1 : -1;
+          result = aValue ? 1 : -1;
         }
       } else {
-        if (sortBy === 'price') {
-          return (
-            Number.parseFloat(b[sortBy as string]) -
-            Number.parseFloat(a[sortBy as string])
-          );
-        } else {
-          return a[sortBy as string] < b[sortBy as string] ? 1 : -1;
-        }
+        const aStr = String(aValue);
+        const bStr = String(bValue);
+        const aNum = Number(aStr);
+        const bNum = Number(bStr);
+        result =
+          Number.isFinite(aNum) && Number.isFinite(bNum)
+            ? aNum - bNum
+            : aStr.localeCompare(bStr, undefined, {
+                numeric: true,
+                sensitivity: 'base',
+              });
       }
+
+      return isDesc ? -result : result;
     });
   }
 
-  return usePageResponseSuccess(page as string, pageSize as string, listData);
+  return usePageResponseSuccess(
+    String(pageNumber),
+    String(pageSizeNumber),
+    listData,
+  );
 });

apps/backend-mock/api/test.get.ts

@@ -1 +1,3 @@
+import { defineEventHandler } from 'h3';
+
 export default defineEventHandler(() => 'Test get handler');

apps/backend-mock/api/test.post.ts

@@ -1 +1,3 @@
+import { defineEventHandler } from 'h3';
+
 export default defineEventHandler(() => 'Test post handler');

apps/backend-mock/api/timezone/getTimezone.ts

@@ -0,0 +1,12 @@
+import { eventHandler } from 'h3';
+import { verifyAccessToken } from '~/utils/jwt-utils';
+import { unAuthorizedResponse, useResponseSuccess } from '~/utils/response';
+import { getTimezone } from '~/utils/timezone-utils';
+
+export default eventHandler((event) => {
+  const userinfo = verifyAccessToken(event);
+  if (!userinfo) {
+    return unAuthorizedResponse(event);
+  }
+  return useResponseSuccess(getTimezone());
+});

apps/backend-mock/api/timezone/getTimezoneOptions.ts

@@ -0,0 +1,11 @@
+import { eventHandler } from 'h3';
+import { TIME_ZONE_OPTIONS } from '~/utils/mock-data';
+import { useResponseSuccess } from '~/utils/response';
+
+export default eventHandler(() => {
+  const data = TIME_ZONE_OPTIONS.map((o) => ({
+    label: `${o.timezone} (GMT${o.offset >= 0 ? `+${o.offset}` : o.offset})`,
+    value: o.timezone,
+  }));
+  return useResponseSuccess(data);
+});

apps/backend-mock/api/timezone/setTimezone.ts

@@ -0,0 +1,26 @@
+import { eventHandler, readBody, setResponseStatus } from 'h3';
+import { verifyAccessToken } from '~/utils/jwt-utils';
+import { TIME_ZONE_OPTIONS } from '~/utils/mock-data';
+import {
+  unAuthorizedResponse,
+  useResponseError,
+  useResponseSuccess,
+} from '~/utils/response';
+import { setTimezone } from '~/utils/timezone-utils';
+
+export default eventHandler(async (event) => {
+  const userinfo = verifyAccessToken(event);
+  if (!userinfo) {
+    return unAuthorizedResponse(event);
+  }
+  const body = await readBody<{ timezone?: unknown }>(event);
+  const timezone =
+    typeof body?.timezone === 'string' ? body.timezone : undefined;
+  const allowed = TIME_ZONE_OPTIONS.some((o) => o.timezone === timezone);
+  if (!timezone || !allowed) {
+    setResponseStatus(event, 400);
+    return useResponseError('Bad Request', 'Invalid timezone');
+  }
+  setTimezone(timezone);
+  return useResponseSuccess({});
+});

apps/backend-mock/api/upload.ts

@@ -1,5 +1,6 @@
+import { eventHandler } from 'h3';
 import { verifyAccessToken } from '~/utils/jwt-utils';
-import { unAuthorizedResponse } from '~/utils/response';
+import { unAuthorizedResponse, useResponseSuccess } from '~/utils/response';
 
 export default eventHandler((event) => {
   const userinfo = verifyAccessToken(event);

apps/backend-mock/api/user/info.ts

@@ -1,5 +1,6 @@
+import { eventHandler } from 'h3';
 import { verifyAccessToken } from '~/utils/jwt-utils';
-import { unAuthorizedResponse } from '~/utils/response';
+import { unAuthorizedResponse, useResponseSuccess } from '~/utils/response';
 
 export default eventHandler((event) => {
   const userinfo = verifyAccessToken(event);

apps/backend-mock/middleware/1.api.ts

@@ -1,3 +1,4 @@
+import { defineEventHandler } from 'h3';
 import { forbiddenResponse, sleep } from '~/utils/response';
 
 export default defineEventHandler(async (event) => {

apps/backend-mock/nitro.config.ts

@@ -1,3 +1,5 @@
+import { defineNitroConfig } from 'nitropack/config';
+
 import errorHandler from './error';
 
 process.env.COMPATIBILITY_DATE = new Date().toISOString();

apps/backend-mock/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vben/backend-mock",
-  "version": "0.0.1",
+  "version": "5.7.0",
   "description": "",
   "private": true,
   "license": "MIT",

apps/backend-mock/routes/[...].ts

@@ -1,13 +1,15 @@
+import { defineEventHandler } from 'h3';
+
 export default defineEventHandler(() => {
   return `
 <h1>Hello Vben Admin</h1>
-<h2>Mock service is starting</h2>
+<h2>Mock service is running</h2>
 <ul>
-<li><a href="/api/user">/api/user/info</a></li>
-<li><a href="/api/menu">/api/menu/all</a></li>
-<li><a href="/api/auth/codes">/api/auth/codes</a></li>
 <li><a href="/api/auth/login">/api/auth/login</a></li>
-<li><a href="/api/upload">/api/upload</a></li>
+<li><a href="/api/auth/codes">/api/auth/codes</a></li>
+<li><a href="/api/user/info">/api/user/info</a></li>
+<li><a href="/api/menu/all">/api/menu/all</a></li>
+<li><a href="/api/auth/logout">/api/auth/logout</a></li>
 </ul>
 `;
 });

apps/backend-mock/tsconfig.json

@@ -1,3 +1,11 @@
 {
-  "extends": "./.nitro/types/tsconfig.json"
+  "$schema": "https://json.schemastore.org/tsconfig",
+  "extends": "@vben/tsconfig/node.json",
+  "compilerOptions": {
+    "paths": {
+      "~/*": ["./*"]
+    }
+  },
+  "include": ["**/*.ts", "**/.*.ts"],
+  "exclude": ["node_modules", "dist", ".nitro"]
 }

apps/backend-mock/utils/cookie-utils.ts

@@ -1,5 +1,7 @@
 import type { EventHandlerRequest, H3Event } from 'h3';
 
+import { deleteCookie, getCookie, setCookie } from 'h3';
+
 export function clearRefreshTokenCookie(event: H3Event<EventHandlerRequest>) {
   deleteCookie(event, 'jwt', {
     httpOnly: true,

apps/backend-mock/utils/jwt-utils.ts

@@ -1,8 +1,11 @@
 import type { EventHandlerRequest, H3Event } from 'h3';
 
+import type { UserInfo } from './mock-data';
+
+import { getHeader } from 'h3';
 import jwt from 'jsonwebtoken';
 
-import { UserInfo } from './mock-data';
+import { MOCK_USERS } from './mock-data';
 
 // TODO: Replace with your own secret key
 const ACCESS_TOKEN_SECRET = 'access_token_secret';
@@ -31,12 +34,22 @@ export function verifyAccessToken(
     return null;
   }
 
-  const token = authHeader.split(' ')[1];
+  const tokenParts = authHeader.split(' ');
+  if (tokenParts.length !== 2) {
+    return null;
+  }
+  const token = tokenParts[1] as string;
   try {
-    const decoded = jwt.verify(token, ACCESS_TOKEN_SECRET) as UserPayload;
+    const decoded = jwt.verify(
+      token,
+      ACCESS_TOKEN_SECRET,
+    ) as unknown as UserPayload;
 
     const username = decoded.username;
     const user = MOCK_USERS.find((item) => item.username === username);
+    if (!user) {
+      return null;
+    }
     const { password: _pwd, ...userinfo } = user;
     return userinfo;
   } catch {
@@ -50,7 +63,12 @@ export function verifyRefreshToken(
   try {
     const decoded = jwt.verify(token, REFRESH_TOKEN_SECRET) as UserPayload;
     const username = decoded.username;
-    const user = MOCK_USERS.find((item) => item.username === username);
+    const user = MOCK_USERS.find(
+      (item) => item.username === username,
+    ) as UserInfo;
+    if (!user) {
+      return null;
+    }
     const { password: _pwd, ...userinfo } = user;
     return userinfo;
   } catch {

apps/backend-mock/utils/mock-data.ts

@@ -7,6 +7,11 @@ export interface UserInfo {
   homePath?: string;
 }
 
+export interface TimezoneOption {
+  offset: number;
+  timezone: string;
+}
+
 export const MOCK_USERS: UserInfo[] = [
   {
     id: 0,
@@ -14,6 +19,7 @@ export const MOCK_USERS: UserInfo[] = [
     realName: 'Vben',
     roles: ['super'],
     username: 'vben',
+    homePath: '/dashboard/workspace',
   },
   {
     id: 1,
@@ -21,7 +27,7 @@ export const MOCK_USERS: UserInfo[] = [
     realName: 'Admin',
     roles: ['admin'],
     username: 'admin',
-    homePath: '/workspace',
+    homePath: '/dashboard/workspace',
   },
   {
     id: 2,
@@ -29,7 +35,7 @@ export const MOCK_USERS: UserInfo[] = [
     realName: 'Jack',
     roles: ['user'],
     username: 'jack',
-    homePath: '/analytics',
+    homePath: '/dashboard/analytics',
   },
 ];
 
@@ -59,11 +65,11 @@ const dashboardMenus = [
     },
     name: 'Dashboard',
     path: '/dashboard',
-    redirect: '/analytics',
+    redirect: '/dashboard/analytics',
     children: [
       {
         name: 'Analytics',
-        path: '/analytics',
+        path: 'analytics',
         component: '/dashboard/analytics/index',
         meta: {
           affixTab: true,
@@ -72,7 +78,7 @@ const dashboardMenus = [
       },
       {
         name: 'Workspace',
-        path: '/workspace',
+        path: 'workspace',
         component: '/dashboard/workspace/index',
         meta: {
           title: 'page.dashboard.workspace',
@@ -91,7 +97,7 @@ const createDemosMenus = (role: 'admin' | 'super' | 'user') => {
         title: 'demos.access.adminVisible',
       },
       name: 'AccessAdminVisibleDemo',
-      path: '/demos/access/admin-visible',
+      path: 'admin-visible',
     },
     super: {
       component: '/demos/access/super-visible',
@@ -100,7 +106,7 @@ const createDemosMenus = (role: 'admin' | 'super' | 'user') => {
         title: 'demos.access.superVisible',
       },
       name: 'AccessSuperVisibleDemo',
-      path: '/demos/access/super-visible',
+      path: 'super-visible',
     },
     user: {
       component: '/demos/access/user-visible',
@@ -109,7 +115,7 @@ const createDemosMenus = (role: 'admin' | 'super' | 'user') => {
         title: 'demos.access.userVisible',
       },
       name: 'AccessUserVisibleDemo',
-      path: '/demos/access/user-visible',
+      path: 'user-visible',
     },
   };
 
@@ -127,7 +133,7 @@ const createDemosMenus = (role: 'admin' | 'super' | 'user') => {
       children: [
         {
           name: 'AccessDemos',
-          path: '/demosaccess',
+          path: 'access',
           meta: {
             icon: 'mdi:cloud-key-outline',
             title: 'demos.access.backendPermissions',
@@ -136,7 +142,7 @@ const createDemosMenus = (role: 'admin' | 'super' | 'user') => {
           children: [
             {
               name: 'AccessPageControlDemo',
-              path: '/demos/access/page-control',
+              path: 'page-control',
               component: '/demos/access/index',
               meta: {
                 icon: 'mdi:page-previous-outline',
@@ -145,7 +151,7 @@ const createDemosMenus = (role: 'admin' | 'super' | 'user') => {
             },
             {
               name: 'AccessButtonControlDemo',
-              path: '/demos/access/button-control',
+              path: 'button-control',
               component: '/demos/access/button-control',
               meta: {
                 icon: 'mdi:button-cursor',
@@ -154,7 +160,7 @@ const createDemosMenus = (role: 'admin' | 'super' | 'user') => {
             },
             {
               name: 'AccessMenuVisible403Demo',
-              path: '/demos/access/menu-visible-403',
+              path: 'menu-visible-403',
               component: '/demos/access/menu-visible-403',
               meta: {
                 authority: ['no-body'],
@@ -189,18 +195,46 @@ export const MOCK_MENUS = [
 export const MOCK_MENU_LIST = [
   {
     id: 1,
-    name: 'Workspace',
+    name: 'Dashboard',
     status: 1,
-    type: 'menu',
-    icon: 'mdi:dashboard',
-    path: '/workspace',
-    component: '/dashboard/workspace/index',
+    type: 'catalog',
+    icon: 'lucide:layout-dashboard',
+    path: '/dashboard',
     meta: {
-      icon: 'carbon:workspace',
-      title: 'page.dashboard.workspace',
-      affixTab: true,
-      order: 0,
+      icon: 'lucide:layout-dashboard',
+      order: -1,
+      title: 'page.dashboard.title',
     },
+    children: [
+      {
+        id: 101,
+        pid: 1,
+        status: 1,
+        type: 'menu',
+        name: 'Analytics',
+        path: 'analytics',
+        component: '/dashboard/analytics/index',
+        meta: {
+          affixTab: true,
+          icon: 'lucide:area-chart',
+          title: 'page.dashboard.analytics',
+          keepAlive: true,
+        },
+      },
+      {
+        id: 102,
+        pid: 1,
+        status: 1,
+        type: 'menu',
+        name: 'Workspace',
+        path: 'workspace',
+        component: '/views/dashboard/workspace/index',
+        meta: {
+          icon: 'carbon:workspace',
+          title: 'page.dashboard.workspace',
+        },
+      },
+    ],
   },
   {
     id: 2,
@@ -276,7 +310,7 @@ export const MOCK_MENU_LIST = [
         children: [
           {
             id: 20_401,
-            pid: 201,
+            pid: 202,
             name: 'SystemDeptCreate',
             status: 1,
             type: 'button',
@@ -285,7 +319,7 @@ export const MOCK_MENU_LIST = [
           },
           {
             id: 20_402,
-            pid: 201,
+            pid: 202,
             name: 'SystemDeptEdit',
             status: 1,
             type: 'button',
@@ -294,7 +328,7 @@ export const MOCK_MENU_LIST = [
           },
           {
             id: 20_403,
-            pid: 201,
+            pid: 202,
             name: 'SystemDeptDelete',
             status: 1,
             type: 'button',
@@ -388,3 +422,29 @@ export function getMenuIds(menus: any[]) {
   });
   return ids;
 }
+
+/**
+ * 时区选项
+ */
+export const TIME_ZONE_OPTIONS: TimezoneOption[] = [
+  {
+    offset: -5,
+    timezone: 'America/New_York',
+  },
+  {
+    offset: 0,
+    timezone: 'Europe/London',
+  },
+  {
+    offset: 8,
+    timezone: 'Asia/Shanghai',
+  },
+  {
+    offset: 9,
+    timezone: 'Asia/Tokyo',
+  },
+  {
+    offset: 9,
+    timezone: 'Asia/Seoul',
+  },
+];

apps/backend-mock/utils/response.ts

@@ -1,5 +1,7 @@
 import type { EventHandlerRequest, H3Event } from 'h3';
 
+import { setResponseStatus } from 'h3';
+
 export function useResponseSuccess<T = any>(data: T) {
   return {
     code: 0,

apps/backend-mock/utils/timezone-utils.ts

@@ -0,0 +1,9 @@
+let mockTimeZone: null | string = null;
+
+export const setTimezone = (timeZone: string) => {
+  mockTimeZone = timeZone;
+};
+
+export const getTimezone = () => {
+  return mockTimeZone;
+};

apps/desktop/.env.development

@@ -0,0 +1,6 @@
+# ????????????
+# ?????pnpm build:desktop:dev?electron-vite build --mode development?? electron-vite dev
+# MAIN_VITE_ ?? = ???????electron-vite ???
+
+# /api ?????????????nl-admin-api????????????
+MAIN_VITE_API_UPSTREAM=http://127.0.0.1:18006/api

apps/desktop/.env.production

@@ -0,0 +1,6 @@
+# ????????????
+# ?????pnpm build:desktop?electron-vite build ?? production ???
+
+# TODO(???)??? /api ??????????????????????
+# ????????????????????????
+MAIN_VITE_API_UPSTREAM=http://127.0.0.1:18006/api

apps/desktop/electron-builder.yml

@@ -0,0 +1,76 @@
+# electron-builder 打包配置（Windows + macOS 双平台）
+#
+# 签名/公证完全由环境变量驱动，本文件不写死任何证书：
+# - 配置了 CSC_LINK + CSC_KEY_PASSWORD（或 mac 钥匙串里有 Developer ID 证书）→ 自动签名；
+#   没配置则 electron-builder 自动跳过签名，只告警不报错（出未签名包）
+# - APPLE_ID + APPLE_APP_SPECIFIC_PASSWORD + APPLE_TEAM_ID 三者齐全 → 自动公证；缺任一则跳过
+# - 未签名 mac 包首次打开需右键「打开」，自动更新由 updater.ts 降级为手动下载引导
+#
+# 注意：mac 包必须在 macOS 机器上构建（不支持从 Windows 交叉编译），命令同一条 pnpm build:desktop
+
+# 必须与 src/main/config.ts 的 APP_ID 一致（Windows 通知 AUMID 对齐）
+appId: com.nladmin.desktop
+productName: Nl Admin
+directories:
+  output: release
+  buildResources: resources
+# 只打 electron-vite 产物：运行时依赖已全部打进 out/，asar 里无需 node_modules
+files:
+  - out/**
+extraResources:
+  # web-antd 生产 dist → resources/web（app:// 协议的静态根；不进 asar，为后续渲染层热替换留路）
+  - from: ../web-antd/dist
+    to: web
+  # 应用图标供运行时使用（托盘 / 通知 / 窗口图标）
+  - from: resources/icon.png
+    to: icon.png
+asar: true
+# dependencies 为空（依赖全部打进 out/），跳过原生依赖重建
+npmRebuild: false
+# 产物名不带空格，避免更新托管 URL 转义问题
+artifactName: nl-admin-desktop-${version}-${os}-${arch}.${ext}
+
+win:
+  # 提供 ≥512px 的 png，electron-builder 自动转 .ico
+  icon: resources/icon.png
+  target:
+    - target: nsis
+      arch:
+        - x64
+nsis:
+  # 非一键安装：允许用户选择安装目录
+  oneClick: false
+  allowToChangeInstallationDirectory: true
+  # 开始菜单快捷方式是 Windows 通知（AUMID）生效的前提，必须保留
+  createDesktopShortcut: always
+  createStartMenuShortcut: true
+  shortcutName: Nl Admin
+
+mac:
+  # 同一张 png 自动转 .icns
+  icon: resources/icon.png
+  category: public.app-category.business
+  # 公证的前置要求；配合基础 entitlements（无摄像头/麦克风，本项目无音视频）
+  hardenedRuntime: true
+  gatekeeperAssess: false
+  entitlements: resources/entitlements.mac.plist
+  entitlementsInherit: resources/entitlements.mac.plist
+  target:
+    # zip 是 mac 自动更新（latest-mac.yml）的必需格式，dmg 用于人工分发安装
+    - target: dmg
+      arch:
+        - x64
+        - arm64
+    - target: zip
+      arch:
+        - x64
+        - arm64
+dmg:
+  # dmg 容器本身不签名（zip 内的 .app 已按环境变量策略签名），减少无证书时的干扰告警
+  sign: false
+
+publish:
+  # generic 静态托管：目录里放 latest.yml / latest-mac.yml / 安装包 / blockmap 即可
+  # TODO(待确认)：与 src/main/config.ts 的 UPDATE_URL 保持一致
+  provider: generic
+  url: https://updates.example.com/nl-desktop/

apps/desktop/electron.vite.config.ts

@@ -0,0 +1,34 @@
+import { defineConfig } from 'electron-vite';
+
+/**
+ * electron-vite 构建配置
+ *
+ * 为什么不配置 renderer：
+ * 渲染层不由本工程构建——开发期直接加载 web-antd 的 vite dev server（http://localhost:14002），
+ * 生产期通过 app:// 自定义协议加载 web-antd 的生产 dist（electron-builder extraResources 拷入）。
+ *
+ * 为什么不用 externalizeDepsPlugin：
+ * 故意把 electron-updater / electron-log / electron-store 等运行时依赖全部打进 out/ 产物，
+ * 使应用的 dependencies 为空，electron-builder 无需收集 node_modules，
+ * 从而规避 pnpm 软链目录结构在打包期的兼容问题（asar 里只有 out/ 与 package.json）。
+ */
+export default defineConfig({
+  main: {
+    build: {
+      outDir: 'out/main',
+    },
+  },
+  preload: {
+    build: {
+      outDir: 'out/preload',
+      rollupOptions: {
+        output: {
+          // sandbox: true 的 preload 必须是 CommonJS（Electron 硬性限制），
+          // 这里锁定输出为 index.cjs，主进程按该文件名引用
+          format: 'cjs',
+          entryFileNames: '[name].cjs',
+        },
+      },
+    },
+  },
+});

apps/desktop/out/preload/index.cjs

@@ -0,0 +1,114 @@
+//#region \0rolldown/runtime.js
+var __commonJSMin = (cb, mod) => () => (mod || (cb((mod = { exports: {} }).exports, mod), cb = null), mod.exports);
+//#endregion
+//#region src/preload/index.ts
+var import_electron = (/* @__PURE__ */ __commonJSMin(((exports, module) => {
+	var { spawnSync } = require("child_process");
+	var fs = require("fs");
+	var path = require("path");
+	var pathFile = path.join(__dirname, "path.txt");
+	function downloadElectron() {
+		console.log("Downloading Electron binary...");
+		if (spawnSync(process.execPath, [path.join(__dirname, "install.js")], { stdio: "inherit" }).status !== 0) throw new Error("Electron failed to install correctly. Please delete `node_modules/electron` and run \"npx install-electron --no\" manually.");
+	}
+	/**
+	* Fetches the path to the Electron executable to use in development mode.
+	* If the executable is missing, attempt to download it first.
+	*
+	* @returns the path to the Electron executable to run
+	*/
+	function getElectronPath() {
+		let executablePath;
+		if (fs.existsSync(pathFile)) executablePath = fs.readFileSync(pathFile, "utf-8");
+		if (process.env.ELECTRON_OVERRIDE_DIST_PATH) return path.join(process.env.ELECTRON_OVERRIDE_DIST_PATH, executablePath || "electron");
+		if (executablePath) {
+			const fullPath = path.join(__dirname, "dist", executablePath);
+			if (!fs.existsSync(fullPath)) downloadElectron();
+			return fullPath;
+		} else {
+			try {
+				downloadElectron();
+			} catch {
+				throw new Error("Electron failed to install correctly. Please delete `node_modules/electron` and run \"npx install-electron --no\" manually.");
+			}
+			executablePath = fs.readFileSync(pathFile, "utf-8");
+			return path.join(__dirname, "dist", executablePath);
+		}
+	}
+	module.exports = getElectronPath();
+})))();
+/**
+* 用 canvas 绘制 Windows 任务栏角标覆盖图（红底白字数字），返回 dataURL
+* 为什么在 preload 画：主进程没有 DOM canvas，nativeImage 也不能绘制文字；
+* preload 跑在渲染进程里有完整 DOM 能力，画完把 dataURL 交给主进程 setOverlayIcon
+*/
+function drawBadgeDataURL(count) {
+	const size = 32;
+	const canvas = document.createElement("canvas");
+	canvas.width = size;
+	canvas.height = size;
+	const ctx = canvas.getContext("2d");
+	if (!ctx) return "";
+	const text = count > 99 ? "99+" : String(count);
+	ctx.beginPath();
+	ctx.arc(size / 2, size / 2, size / 2, 0, Math.PI * 2);
+	ctx.fillStyle = "#f5222d";
+	ctx.fill();
+	ctx.fillStyle = "#ffffff";
+	ctx.font = `bold ${text.length > 2 ? 13 : 18}px sans-serif`;
+	ctx.textAlign = "center";
+	ctx.textBaseline = "middle";
+	ctx.fillText(text, size / 2, 17);
+	return canvas.toDataURL("image/png");
+}
+/** 订阅主进程推送事件的通用封装，返回取消订阅函数（组件卸载时记得调用防止泄漏） */
+function subscribe(channel, callback) {
+	const listener = (_event, payload) => callback(payload);
+	import_electron.ipcRenderer.on(channel, listener);
+	return () => import_electron.ipcRenderer.removeListener(channel, listener);
+}
+var desktopAPI = {
+	/** 恒为 true，web 侧用它判断是否运行在 Electron 壳内 */
+	isElectron: true,
+	/** 当前平台：win32 / darwin / linux（渲染层做平台差异 UI 时用） */
+	platform: process.platform,
+	/** 应用版本号（package.json version，用于「关于」展示） */
+	getVersion: () => import_electron.ipcRenderer.invoke("desktop:get-version"),
+	/**
+	* 发系统通知；route 传入站内路由（如 /notice/list）时点击通知会唤起窗口并跳转
+	* flash 默认 true：窗口未聚焦时同时闪烁任务栏（mac 表现为 Dock 弹跳）
+	*/
+	notify: (options) => import_electron.ipcRenderer.invoke("desktop:notify", options),
+	/** 设置未读角标数，0 清除；mac 用 Dock 原生数字，Windows 用 canvas 画的覆盖图 */
+	setBadge: (count) => {
+		const dataUrl = count > 0 && process.platform === "win32" ? drawBadgeDataURL(count) : "";
+		return import_electron.ipcRenderer.invoke("desktop:set-badge", count, dataUrl);
+	},
+	/** 手动控制任务栏闪烁（一般用不到，notify 已内置） */
+	flashFrame: (flag = true) => import_electron.ipcRenderer.invoke("desktop:flash-frame", flag),
+	/** 读取开机自启状态 */
+	getAutoLaunch: () => import_electron.ipcRenderer.invoke("desktop:get-auto-launch"),
+	/** 设置开机自启（--hidden 静默启动进托盘） */
+	setAutoLaunch: (enabled) => import_electron.ipcRenderer.invoke("desktop:set-auto-launch", enabled),
+	/** 枚举系统打印机列表 */
+	getPrinters: () => import_electron.ipcRenderer.invoke("desktop:get-printers"),
+	/**
+	* 打印一段完整 HTML：不传 deviceName 时读持久化的默认打印机；
+	* silent=true 静默打印，false 弹系统打印对话框
+	*/
+	printHTML: (options) => import_electron.ipcRenderer.invoke("desktop:print-html", options),
+	/** 读桌面端本地设置（如默认打印机） */
+	getSetting: (key) => import_electron.ipcRenderer.invoke("desktop:get-setting", key),
+	/** 写桌面端本地设置 */
+	setSetting: (key, value) => import_electron.ipcRenderer.invoke("desktop:set-setting", key, value),
+	/** 手动检查更新（托盘菜单也有同款入口） */
+	checkUpdate: () => import_electron.ipcRenderer.invoke("desktop:check-update"),
+	/** 更新下载完成后立即重启安装 */
+	quitAndInstall: () => import_electron.ipcRenderer.invoke("desktop:quit-and-install"),
+	/** 订阅「点击通知要求跳转路由」事件，web 侧收到后自行 router.push */
+	onNavigate: (callback) => subscribe("desktop:navigate", callback),
+	/** 订阅更新流程事件（checking / available / progress / downloaded 等），用于展示进度 */
+	onUpdateEvent: (callback) => subscribe("desktop:update-event", callback)
+};
+import_electron.contextBridge.exposeInMainWorld("desktopAPI", desktopAPI);
+//#endregion

apps/desktop/package.json

@@ -0,0 +1,29 @@
+{
+  "name": "@vben/desktop",
+  "version": "1.0.0",
+  "private": true,
+  "description": "Nl Admin 桌面端壳工程：app:// 协议复用 web-antd 生产 dist，主进程转发 /api 到后端",
+  "productName": "Nl Admin",
+  "author": "nl-admin",
+  "type": "module",
+  "main": "out/main/index.js",
+  "scripts": {
+    "dev": "electron-vite dev --watch",
+    "build": "electron-vite build && electron-builder --config electron-builder.yml --publish never",
+    "build:dev": "electron-vite build --mode development && electron-builder --config electron-builder.yml --publish never -c.artifactName=nl-admin-desktop-${version}-${os}-${arch}-dev.${ext}",
+    "build:dir": "electron-vite build && electron-builder --dir --config electron-builder.yml",
+    "typecheck": "tsc --noEmit"
+  },
+  "devDependencies": {
+    "@types/node": "catalog:",
+    "@vben/web-antd": "workspace:*",
+    "electron": "catalog:",
+    "electron-builder": "catalog:",
+    "electron-log": "catalog:",
+    "electron-store": "catalog:",
+    "electron-updater": "catalog:",
+    "electron-vite": "catalog:",
+    "typescript": "catalog:",
+    "vite": "catalog:"
+  }
+}

apps/desktop/release/builder-debug.yml

@@ -0,0 +1,228 @@
+x64:
+  firstOrDefaultFilePatterns:
+    - '!**/node_modules/**'
+    - '!resources{,/**/*}'
+    - '!release{,/**/*}'
+    - out/**
+    - package.json
+    - '!**/*.{iml,hprof,orig,pyc,pyo,rbc,swp,csproj,sln,suo,xproj,cc,d.ts,mk,a,o,obj,forge-meta,pdb}'
+    - '!**/._*'
+    - '!**/electron-builder.{yaml,yml,json,json5,toml,ts}'
+    - '!**/{.git,.hg,.svn,CVS,RCS,SCCS,__pycache__,.DS_Store,thumbs.db,.gitignore,.gitkeep,.gitattributes,.npmignore,.idea,.vs,.flowconfig,.jshintrc,.eslintrc,.circleci,.yarn-integrity,.yarn-metadata.json,yarn-error.log,yarn.lock,package-lock.json,npm-debug.log,pnpm-lock.yaml,bun.lock,bun.lockb,appveyor.yml,.travis.yml,circle.yml,.nyc_output,.husky,.github,electron-builder.env}'
+    - '!.yarn{,/**/*}'
+    - '!.editorconfig'
+    - '!.yarnrc.yml'
+  nodeModuleFilePatterns:
+    - '**/*'
+    - out/**
+nsis:
+  script: |-
+    !include "D:\myCode\nl-admin\nl-admin-view\node_modules\.pnpm\app-builder-lib@26.15.3_dmg_ed407063d9219dada699e6fa1d0a9e89\node_modules\app-builder-lib\templates\nsis\include\StdUtils.nsh"
+    !addincludedir "D:\myCode\nl-admin\nl-admin-view\node_modules\.pnpm\app-builder-lib@26.15.3_dmg_ed407063d9219dada699e6fa1d0a9e89\node_modules\app-builder-lib\templates\nsis\include"
+    !macro _isUpdated _a _b _t _f
+      ${StdUtils.TestParameter} $R9 "updated"
+      StrCmp "$R9" "true" `${_t}` `${_f}`
+    !macroend
+    !define isUpdated `"" isUpdated ""`
+
+    !macro _isForceRun _a _b _t _f
+      ${StdUtils.TestParameter} $R9 "force-run"
+      StrCmp "$R9" "true" `${_t}` `${_f}`
+    !macroend
+    !define isForceRun `"" isForceRun ""`
+
+    !macro _isKeepShortcuts _a _b _t _f
+      ${StdUtils.TestParameter} $R9 "keep-shortcuts"
+      StrCmp "$R9" "true" `${_t}` `${_f}`
+    !macroend
+    !define isKeepShortcuts `"" isKeepShortcuts ""`
+
+    !macro _isNoDesktopShortcut _a _b _t _f
+      ${StdUtils.TestParameter} $R9 "no-desktop-shortcut"
+      StrCmp "$R9" "true" `${_t}` `${_f}`
+    !macroend
+    !define isNoDesktopShortcut `"" isNoDesktopShortcut ""`
+
+    !macro _isDeleteAppData _a _b _t _f
+      ${StdUtils.TestParameter} $R9 "delete-app-data"
+      StrCmp "$R9" "true" `${_t}` `${_f}`
+    !macroend
+    !define isDeleteAppData `"" isDeleteAppData ""`
+
+    !macro _isForAllUsers _a _b _t _f
+      ${StdUtils.TestParameter} $R9 "allusers"
+      StrCmp "$R9" "true" `${_t}` `${_f}`
+    !macroend
+    !define isForAllUsers `"" isForAllUsers ""`
+
+    !macro _isForCurrentUser _a _b _t _f
+      ${StdUtils.TestParameter} $R9 "currentuser"
+      StrCmp "$R9" "true" `${_t}` `${_f}`
+    !macroend
+    !define isForCurrentUser `"" isForCurrentUser ""`
+
+    !macro addLangs
+      !insertmacro MUI_LANGUAGE "English"
+      !insertmacro MUI_LANGUAGE "German"
+      !insertmacro MUI_LANGUAGE "French"
+      !insertmacro MUI_LANGUAGE "SpanishInternational"
+      !insertmacro MUI_LANGUAGE "SimpChinese"
+      !insertmacro MUI_LANGUAGE "TradChinese"
+      !insertmacro MUI_LANGUAGE "Japanese"
+      !insertmacro MUI_LANGUAGE "Korean"
+      !insertmacro MUI_LANGUAGE "Italian"
+      !insertmacro MUI_LANGUAGE "Dutch"
+      !insertmacro MUI_LANGUAGE "Danish"
+      !insertmacro MUI_LANGUAGE "Swedish"
+      !insertmacro MUI_LANGUAGE "Norwegian"
+      !insertmacro MUI_LANGUAGE "Finnish"
+      !insertmacro MUI_LANGUAGE "Russian"
+      !insertmacro MUI_LANGUAGE "Portuguese"
+      !insertmacro MUI_LANGUAGE "PortugueseBR"
+      !insertmacro MUI_LANGUAGE "Polish"
+      !insertmacro MUI_LANGUAGE "Ukrainian"
+      !insertmacro MUI_LANGUAGE "Czech"
+      !insertmacro MUI_LANGUAGE "Slovak"
+      !insertmacro MUI_LANGUAGE "Hungarian"
+      !insertmacro MUI_LANGUAGE "Arabic"
+      !insertmacro MUI_LANGUAGE "Turkish"
+      !insertmacro MUI_LANGUAGE "Thai"
+      !insertmacro MUI_LANGUAGE "Vietnamese"
+    !macroend
+
+    !include "C:\Users\admin\AppData\Local\Temp\t-T8jq5r\3-messages.nsh"
+    !include "C:\Users\admin\AppData\Local\Temp\t-T8jq5r\4-messages.nsh"
+    !addplugindir /x86-unicode "C:\Users\admin\AppData\Local\Temp\electron-builder-cache\nsis-resources-3.4.1\nsis-resources-3.4.1-2jx2y\plugins\x86-unicode"
+
+    Var newStartMenuLink
+    Var oldStartMenuLink
+    Var newDesktopLink
+    Var oldDesktopLink
+    Var oldShortcutName
+    Var oldMenuDirectory
+
+    !include "common.nsh"
+    !include "MUI2.nsh"
+    !include "multiUser.nsh"
+    !include "allowOnlyOneInstallerInstance.nsh"
+
+    !ifdef BUILD_UNINSTALLER
+      !ifmacrodef customUnInstallSection
+        !define MUI_COMPONENTSPAGE_NODESC
+        !insertmacro MUI_UNPAGE_COMPONENTS
+      !endif
+    !endif
+
+    !ifdef INSTALL_MODE_PER_ALL_USERS
+      !ifdef BUILD_UNINSTALLER
+        RequestExecutionLevel user
+      !else
+        RequestExecutionLevel admin
+      !endif
+    !else
+      RequestExecutionLevel user
+    !endif
+
+    !ifdef BUILD_UNINSTALLER
+      SilentInstall silent
+    !else
+      Var appExe
+      Var launchLink
+    !endif
+
+    !ifdef ONE_CLICK
+      !include "oneClick.nsh"
+    !else
+      !include "assistedInstaller.nsh"
+    !endif
+
+    !insertmacro addLangs
+
+    !ifmacrodef customHeader
+      !insertmacro customHeader
+    !endif
+
+    Function .onInit
+      Call setInstallSectionSpaceRequired
+
+      SetOutPath $INSTDIR
+      ${LogSet} on
+
+      !ifmacrodef preInit
+        !insertmacro preInit
+      !endif
+
+      !ifdef DISPLAY_LANG_SELECTOR
+        !insertmacro MUI_LANGDLL_DISPLAY
+      !endif
+
+      !ifdef BUILD_UNINSTALLER
+        WriteUninstaller "${UNINSTALLER_OUT_FILE}"
+        !insertmacro quitSuccess
+      !else
+        !insertmacro check64BitAndSetRegView
+
+        !ifdef ONE_CLICK
+          !insertmacro ALLOW_ONLY_ONE_INSTALLER_INSTANCE
+        !else
+          ${IfNot} ${UAC_IsInnerInstance}
+            !insertmacro ALLOW_ONLY_ONE_INSTALLER_INSTANCE
+          ${EndIf}
+        !endif
+
+        !insertmacro initMultiUser
+
+        !ifmacrodef customInit
+          !insertmacro customInit
+        !endif
+
+        !ifmacrodef addLicenseFiles
+          InitPluginsDir
+          !insertmacro addLicenseFiles
+        !endif
+      !endif
+    FunctionEnd
+
+    !ifndef BUILD_UNINSTALLER
+      !include "installUtil.nsh"
+    !endif
+
+    Section "install" INSTALL_SECTION_ID
+      !ifndef BUILD_UNINSTALLER
+        # If we're running a silent upgrade of a per-machine installation, elevate so extracting the new app will succeed.
+        # For a non-silent install, the elevation will be triggered when the install mode is selected in the UI,
+        # but that won't be executed when silent.
+        !ifndef INSTALL_MODE_PER_ALL_USERS
+          !ifndef ONE_CLICK
+              ${if} $hasPerMachineInstallation == "1" # set in onInit by initMultiUser
+              ${andIf} ${Silent}
+                ${ifNot} ${UAC_IsAdmin}
+                  ShowWindow $HWNDPARENT ${SW_HIDE}
+                  !insertmacro UAC_RunElevated
+                  ${Switch} $0
+                    ${Case} 0
+                      ${Break}
+                    ${Case} 1223 ;user aborted
+                      ${Break}
+                    ${Default}
+                      MessageBox mb_IconStop|mb_TopMost|mb_SetForeground "Unable to elevate, error $0"
+                      ${Break}
+                  ${EndSwitch}
+                  Quit
+                ${else}
+                  !insertmacro setInstallModePerAllUsers
+                ${endIf}
+              ${endIf}
+          !endif
+        !endif
+        !include "installSection.nsh"
+      !endif
+    SectionEnd
+
+    Function setInstallSectionSpaceRequired
+      !insertmacro setSpaceRequired ${INSTALL_SECTION_ID}
+    FunctionEnd
+
+    !ifdef BUILD_UNINSTALLER
+      !include "uninstaller.nsh"
+    !endif

apps/desktop/release/latest.yml

@@ -0,0 +1,8 @@
+version: 1.0.0
+files:
+  - url: nl-admin-desktop-1.0.0-win-x64-dev.exe
+    sha512: XlRSHvc+DBg0UFayyyQjKf3Mv/6CpGz8XGEVRPb9Dx7OXVSotIA5uL85Kq2cU4IqtBsLQRBGrGiqc1b9yHL0lQ==
+    size: 102116616
+path: nl-admin-desktop-1.0.0-win-x64-dev.exe
+sha512: XlRSHvc+DBg0UFayyyQjKf3Mv/6CpGz8XGEVRPb9Dx7OXVSotIA5uL85Kq2cU4IqtBsLQRBGrGiqc1b9yHL0lQ==
+releaseDate: '2026-08-12T10:14:59.294Z'

apps/desktop/resources/entitlements.mac.plist

@@ -0,0 +1,17 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+  <!--
+    macOS hardenedRuntime 基础 entitlements（Electron 运行必需的三件套）。
+    本项目无 IM 音视频业务，故不包含摄像头/麦克风条目；
+    后续若派生项目需要 getUserMedia，再补 com.apple.security.device.camera / audio-input。
+  -->
+  <dict>
+    <key>com.apple.security.cs.allow-jit</key>
+    <true/>
+    <key>com.apple.security.cs.allow-unsigned-executable-memory</key>
+    <true/>
+    <key>com.apple.security.cs.disable-library-validation</key>
+    <true/>
+  </dict>
+</plist>

apps/desktop/src/env.d.ts

@@ -0,0 +1,12 @@
+/**
+ * electron-vite 构建期注入的环境变量类型声明
+ * 值来源见 apps/desktop/.env.development / .env.production
+ */
+interface ImportMetaEnv {
+  /** /api 转发上游地址（MAIN_VITE_ 前缀 = 仅主进程可见） */
+  readonly MAIN_VITE_API_UPSTREAM?: string;
+}
+
+interface ImportMeta {
+  readonly env: ImportMetaEnv;
+}

apps/desktop/src/main/config.ts

@@ -0,0 +1,54 @@
+/**
+ * 桌面端全局配置常量
+ *
+ * 所有「待确认占位项」集中在本文件（TODO 标注），后续对齐生产环境后只需改这里，
+ * 不要把这些常量散落到其它模块（避免上线前漏改）。
+ */
+
+/**
+ * 应用唯一标识
+ * 必须与 electron-builder.yml 的 appId 完全一致：
+ * Windows 通知依赖 AppUserModelID（AUMID）与安装包快捷方式的 appId 对齐，不一致通知不弹
+ */
+export const APP_ID = 'com.nladmin.desktop';
+
+/** 产品名：窗口标题、托盘 tooltip、通知标题兜底 */
+export const PRODUCT_NAME = 'Nl Admin';
+
+/** app:// 自定义协议的 scheme 与 host，生产环境渲染层 Origin 固定为 app://local */
+export const APP_SCHEME = 'app';
+export const APP_HOST = 'local';
+
+/**
+ * /api 上游地址：按构建模式从 env 文件注入（electron-vite 构建期替换）
+ * - 联调包 pnpm build:desktop:dev → .env.development（固定本地后端）
+ * - 正式包 pnpm build:desktop     → .env.production（TODO：生产域名确认后改该文件）
+ * 转发语义与 apps/web-antd/vite.config.ts 的 dev 代理完全一致：
+ * 渲染层请求 /api/xxx → 剥掉 /api 前缀 → 转发到 `${API_UPSTREAM}/xxx`
+ * 兜底本地后端，保证 env 缺失时包仍可用
+ */
+export const API_UPSTREAM =
+  import.meta.env.MAIN_VITE_API_UPSTREAM ?? 'http://127.0.0.1:18006/api';
+
+/** 渲染层请求统一前缀：与桌面端动态下发的 _app.config.js 中 VITE_GLOB_API_URL 保持一致 */
+export const API_PREFIX = '/api';
+
+/**
+ * TODO(待确认)：自动更新托管地址（1panel 加一个静态站点即可）
+ * 目录内需存放 electron-builder 产物：
+ * Windows：latest.yml + exe + blockmap；mac：latest-mac.yml + dmg + zip + blockmap
+ */
+export const UPDATE_URL = 'https://updates.example.com/nl-desktop/';
+
+/** TODO(待确认)：mac 未签名时自动更新降级提示跳转的手动下载页，默认复用更新托管地址 */
+export const DOWNLOAD_PAGE_URL = UPDATE_URL;
+
+/**
+ * 开发模式渲染层地址：web-antd 的 vite dev server
+ * 注意端口是 14002（apps/web-antd/vite.config.ts 的 server.port 覆盖了 .env.development 的 5666）
+ */
+export const DEV_SERVER_URL =
+  process.env.ELECTRON_RENDERER_URL ?? 'http://localhost:14002';
+
+/** 全局快捷键：切换主窗口显示/隐藏（CommandOrControl 自动映射 Windows=Ctrl / mac=Cmd） */
+export const GLOBAL_SHORTCUT = 'CommandOrControl+Alt+N';

apps/desktop/src/main/index.ts

@@ -0,0 +1,66 @@
+/**
+ * 主进程入口：装配协议、窗口、托盘、IPC、快捷键、更新器
+ * 启动顺序有讲究：协议特权注册必须在 app ready 之前，其余都在 whenReady 之后
+ */
+import { app } from 'electron';
+import log from 'electron-log/main';
+
+import { APP_ID, PRODUCT_NAME } from './config';
+import { registerIpcHandlers } from './ipc';
+import {
+  installAppProtocolHandler,
+  registerAppSchemePrivileges,
+} from './protocol';
+import { registerGlobalShortcut } from './shortcut';
+import { appState } from './state';
+import { createTray } from './tray';
+import { initUpdater } from './updater';
+import {
+  createMainWindow,
+  setupSessionSecurity,
+  showMainWindow,
+} from './window';
+
+// 日志落盘到 userData/logs，线上问题靠它排查
+log.initialize();
+log.transports.file.level = 'info';
+
+// Windows 通知/任务栏分组依赖 AUMID，必须与 electron-builder.yml 的 appId 完全一致
+app.setAppUserModelId(APP_ID);
+
+// app:// 特权协议注册（Electron 要求必须在 ready 之前）
+registerAppSchemePrivileges();
+
+// 单实例锁：重复启动时唤起已有窗口而不是开第二个实例
+const gotSingleInstanceLock = app.requestSingleInstanceLock();
+if (gotSingleInstanceLock) {
+  app.on('second-instance', () => showMainWindow());
+
+  app.whenReady().then(async () => {
+    setupSessionSecurity();
+    installAppProtocolHandler();
+    registerIpcHandlers();
+    // --hidden 由开机自启注入（见 utils.setAutoLaunchEnabled）：创建窗口但静默待在托盘
+    const startHidden = process.argv.includes('--hidden');
+    await createMainWindow({ startHidden });
+    createTray();
+    registerGlobalShortcut();
+    initUpdater();
+    log.info(`[main] ${PRODUCT_NAME} 启动完成 hidden=${startHidden}`);
+  });
+
+  // mac：点击 Dock 图标恢复窗口（关窗只是隐藏，窗口实例一直存活）
+  app.on('activate', () => showMainWindow());
+
+  // 所有窗口关闭也不退出：应用常驻托盘，真正退出走托盘菜单 / Cmd+Q
+  app.on('window-all-closed', () => {
+    // 故意留空：覆盖 Electron 默认的「非 mac 全关即退出」行为
+  });
+
+  // Cmd+Q / app.quit() 都会先经过这里：放行窗口 close（不再拦截为隐藏）
+  app.on('before-quit', () => {
+    appState.quitting = true;
+  });
+} else {
+  app.quit();
+}

apps/desktop/src/main/ipc.ts

@@ -0,0 +1,223 @@
+/**
+ * IPC 通道注册：渲染层 window.desktopAPI 各能力的主进程实现
+ * 安全约定：所有 handler 统一先校验 sender 来源（app://local 或本地 dev server），
+ * 防止意外加载的第三方页面调用桌面能力
+ */
+import type { IpcMainInvokeEvent } from 'electron';
+
+import {
+  app,
+  BrowserWindow,
+  ipcMain,
+  nativeImage,
+  Notification,
+} from 'electron';
+import log from 'electron-log/main';
+
+import { PRODUCT_NAME } from './config';
+import { SETTING_KEYS, settingsStore } from './store';
+import { refreshTrayMenu } from './tray';
+import { checkUpdateManually, quitAndInstallNow } from './updater';
+import {
+  getAutoLaunchEnabled,
+  getResourcePath,
+  setAutoLaunchEnabled,
+} from './utils';
+import {
+  getMainWindow,
+  isTrustedWebContentsUrl,
+  showMainWindow,
+} from './window';
+
+/** 渲染层 notify() 的入参结构（与 preload 保持同步） */
+interface NotifyOptions {
+  body?: string;
+  flash?: boolean;
+  route?: string;
+  silent?: boolean;
+  title: string;
+}
+
+/** 渲染层 printHTML() 的入参结构（与 preload 保持同步） */
+interface PrintHTMLOptions {
+  deviceName?: string;
+  html: string;
+  landscape?: boolean;
+  silent?: boolean;
+}
+
+/**
+ * 带来源校验的 ipcMain.handle 包装
+ * 为什么不用裸 ipcMain.handle：每个通道都要校验 sender，包一层避免每处复制粘贴校验代码
+ */
+function handle(
+  channel: string,
+  handler: (event: IpcMainInvokeEvent, ...args: any[]) => unknown,
+): void {
+  ipcMain.handle(channel, (event, ...args) => {
+    const senderUrl = event.senderFrame?.url ?? '';
+    if (!isTrustedWebContentsUrl(senderUrl)) {
+      log.warn('[ipc] 拒绝不可信来源的 IPC 调用:', channel, senderUrl);
+      throw new Error('IPC 调用来源不可信');
+    }
+    return handler(event, ...args);
+  });
+}
+
+/** 注册全部 IPC 通道，应用启动时调用一次 */
+export function registerIpcHandlers(): void {
+  handle('desktop:get-version', () => app.getVersion());
+
+  // ---- 系统通知 ----
+  handle('desktop:notify', (_event, options: NotifyOptions) => {
+    showNotification(options);
+  });
+
+  // ---- 未读角标（dataUrl 由 preload 的 canvas 绘制，仅 Windows 用到） ----
+  handle('desktop:set-badge', (_event, count: number, dataUrl: string) => {
+    setBadge(count, dataUrl);
+  });
+
+  // ---- 任务栏闪烁 ----
+  handle('desktop:flash-frame', (_event, flag: boolean) => {
+    const win = getMainWindow();
+    if (!win) return;
+    // 已聚焦时闪烁没有意义（还会造成任务栏图标闪一下的视觉bug）
+    if (flag && win.isFocused()) return;
+    win.flashFrame(!!flag);
+  });
+
+  // ---- 开机自启 ----
+  handle('desktop:get-auto-launch', () => getAutoLaunchEnabled());
+  handle('desktop:set-auto-launch', (_event, enabled: boolean) => {
+    const result = setAutoLaunchEnabled(!!enabled);
+    // 渲染层改了自启后，托盘菜单的勾选状态要同步
+    refreshTrayMenu();
+    return result;
+  });
+
+  // ---- 静默打印 ----
+  handle('desktop:get-printers', async () => {
+    const win = getMainWindow();
+    return win ? await win.webContents.getPrintersAsync() : [];
+  });
+  handle('desktop:print-html', (_event, options: PrintHTMLOptions) =>
+    printHTML(options),
+  );
+
+  // ---- 桌面端本地设置 ----
+  handle('desktop:get-setting', (_event, key: string) => settingsStore.get(key));
+  handle('desktop:set-setting', (_event, key: string, value: unknown) => {
+    settingsStore.set(key, value);
+  });
+
+  // ---- 更新 ----
+  handle('desktop:check-update', () => checkUpdateManually());
+  handle('desktop:quit-and-install', () => quitAndInstallNow());
+}
+
+/**
+ * 弹系统通知：点击唤起主窗口，携带 route 时再通知渲染层跳转站内路由
+ * Windows 能弹的前提：app.setAppUserModelId 与安装包 appId 一致（入口处已设置）
+ */
+function showNotification(options: NotifyOptions): void {
+  if (!Notification.isSupported()) {
+    log.warn('[ipc] 当前系统不支持通知');
+    return;
+  }
+  const notification = new Notification({
+    body: options.body ?? '',
+    icon: nativeImage.createFromPath(getResourcePath('icon.png')),
+    silent: options.silent ?? false,
+    title: options.title || PRODUCT_NAME,
+  });
+  notification.on('click', () => {
+    showMainWindow();
+    if (options.route) {
+      getMainWindow()?.webContents.send('desktop:navigate', options.route);
+    }
+  });
+  notification.show();
+  // 默认行为：窗口未聚焦时同步闪烁任务栏（mac 表现为 Dock 弹跳），聚焦后自动清除
+  const win = getMainWindow();
+  if ((options.flash ?? true) && win && !win.isFocused()) {
+    win.flashFrame(true);
+  }
+}
+
+/**
+ * 设置未读角标，按平台分支：
+ * mac 用 Dock 原生数字角标；Windows 用 preload 画好的红底数字图做任务栏覆盖图；
+ * Linux 尽力而为走 setBadgeCount（仅部分桌面环境支持）
+ */
+function setBadge(count: number, dataUrl: string): void {
+  const normalized = Math.max(0, Math.floor(count) || 0);
+  if (process.platform === 'darwin') {
+    app.dock?.setBadge(normalized > 0 ? String(normalized) : '');
+    return;
+  }
+  if (process.platform === 'win32') {
+    const win = getMainWindow();
+    if (!win) return;
+    if (normalized > 0 && dataUrl) {
+      win.setOverlayIcon(
+        nativeImage.createFromDataURL(dataUrl),
+        `${normalized} 条未读`,
+      );
+    } else {
+      win.setOverlayIcon(null, '');
+    }
+    return;
+  }
+  app.setBadgeCount(normalized);
+}
+
+/**
+ * 打印一段完整 HTML
+ * 实现：隐藏窗口加载 HTML（base64 data URL 避免特殊字符截断）→ webContents.print
+ * 静默打印必须有明确的打印机名（入参或本地设置），否则自动降级为弹系统打印对话框
+ */
+async function printHTML(
+  options: PrintHTMLOptions,
+): Promise<{ message?: string; success: boolean }> {
+  const deviceName =
+    options.deviceName ||
+    (settingsStore.get(SETTING_KEYS.printerDeviceName) as string | undefined);
+  const silent = (options.silent ?? true) && !!deviceName;
+  const printWindow = new BrowserWindow({
+    show: false,
+    webPreferences: {
+      contextIsolation: true,
+      nodeIntegration: false,
+      sandbox: true,
+    },
+  });
+  try {
+    const dataUrl = `data:text/html;charset=utf-8;base64,${Buffer.from(
+      options.html,
+      'utf8',
+    ).toString('base64')}`;
+    await printWindow.loadURL(dataUrl);
+    return await new Promise((resolvePrint) => {
+      printWindow.webContents.print(
+        {
+          deviceName: silent ? deviceName : undefined,
+          landscape: options.landscape ?? false,
+          printBackground: true,
+          silent,
+        },
+        (success, failureReason) => {
+          resolvePrint({
+            message: success ? undefined : failureReason,
+            success,
+          });
+        },
+      );
+    });
+  } catch (error) {
+    log.error('[ipc] 打印失败:', error);
+    return { message: String(error), success: false };
+  } finally {
+    if (!printWindow.isDestroyed()) printWindow.destroy();
+  }
+}

apps/desktop/src/main/protocol.ts

@@ -0,0 +1,223 @@
+/**
+ * app:// 自定义协议层——桌面端的「内置 nginx」
+ *
+ * 生产环境渲染进程加载 app://local/，本模块负责三件事：
+ * 1. 静态文件服务：把 web-antd 的生产 dist（extraResources 拷入 resources/web）按路径吐出，
+ *    并做 SPA fallback（等价 nginx try_files；本项目生产是 hash 路由，fallback 仅兜底）
+ * 2. 动态覆盖 /_app.config.js：利用 vben 的运行时配置机制，把 VITE_GLOB_API_URL 改写为 /api，
+ *    使桌面端 API 指向与网页端部署解耦（网页端 .env.production 完全不用动）
+ * 3. 转发 /api/*：用主进程 net.fetch 转发到后端上游（剥掉 /api 前缀，语义与
+ *    apps/web-antd/vite.config.ts 的 dev 代理 rewrite 一致），因为是主进程发起、
+ *    与页面同源（app://local），所以后端无需配置 CORS
+ */
+import { readFile, stat } from 'node:fs/promises';
+import { extname, isAbsolute, join, normalize, relative, resolve } from 'node:path';
+
+import { app, net, protocol } from 'electron';
+import log from 'electron-log/main';
+
+import { API_PREFIX, API_UPSTREAM, APP_HOST, APP_SCHEME } from './config';
+
+/** 常见静态资源的 MIME 映射（dist 内实际会出现的类型） */
+const MIME_TYPES: Record<string, string> = {
+  '.avif': 'image/avif',
+  '.css': 'text/css; charset=utf-8',
+  '.eot': 'application/vnd.ms-fontobject',
+  '.gif': 'image/gif',
+  '.html': 'text/html; charset=utf-8',
+  '.ico': 'image/x-icon',
+  '.jpeg': 'image/jpeg',
+  '.jpg': 'image/jpeg',
+  '.js': 'text/javascript; charset=utf-8',
+  '.json': 'application/json; charset=utf-8',
+  '.map': 'application/json; charset=utf-8',
+  '.mjs': 'text/javascript; charset=utf-8',
+  '.mp3': 'audio/mpeg',
+  '.mp4': 'video/mp4',
+  '.otf': 'font/otf',
+  '.png': 'image/png',
+  '.svg': 'image/svg+xml',
+  '.ttf': 'font/ttf',
+  '.txt': 'text/plain; charset=utf-8',
+  '.wasm': 'application/wasm',
+  '.webp': 'image/webp',
+  '.woff': 'font/woff',
+  '.woff2': 'font/woff2',
+  '.xml': 'application/xml; charset=utf-8',
+};
+
+/**
+ * vben 运行时配置文件的路径模式
+ * vben 5.x 产出 `_app-config-{version}-{hash}.js`（本仓库实测），历史版本为 `_app.config.js`，
+ * 用模式匹配兼容两种命名，避免升级 vben 后改写逻辑悄悄失效
+ */
+const APP_CONFIG_FILE_RE = /^\/_app[.-]config[^/]*\.js$/;
+
+/**
+ * 注册 app:// 为特权协议
+ * 必须在 app ready 之前调用（Electron 硬性要求），否则协议没有 standard/secure 等特权：
+ * - standard：拥有标准 Origin 语义，localStorage / IndexedDB 才可用（登录态依赖）
+ * - secure：视为 Secure Context，clipboard 等现代 Web 能力才可用
+ * - supportFetchAPI + corsEnabled：允许渲染层 fetch/XHR 请求本协议（axios 调 /api 必需）
+ * - stream：允许流式响应；codeCache：v8 代码缓存加速二次启动
+ */
+export function registerAppSchemePrivileges(): void {
+  protocol.registerSchemesAsPrivileged([
+    {
+      scheme: APP_SCHEME,
+      privileges: {
+        standard: true,
+        secure: true,
+        supportFetchAPI: true,
+        corsEnabled: true,
+        stream: true,
+        codeCache: true,
+      },
+    },
+  ]);
+}
+
+/**
+ * 计算 web 静态资源根目录
+ * 打包后：resources/web（electron-builder extraResources 从 ../web-antd/dist 拷入）
+ * 开发态：直接指向 apps/web-antd/dist（用于本地不打包也能验证 app:// 生产链路）
+ */
+function getWebRoot(): string {
+  return app.isPackaged
+    ? join(process.resourcesPath, 'web')
+    : resolve(app.getAppPath(), '../web-antd/dist');
+}
+
+/**
+ * 安装 app:// 协议处理器，必须在 app ready 之后调用
+ */
+export function installAppProtocolHandler(): void {
+  protocol.handle(APP_SCHEME, async (request) => {
+    try {
+      const url = new URL(request.url);
+      // 只认 app://local，其它 host 一律 404，避免协议被意外扩散使用
+      if (url.host !== APP_HOST) {
+        return new Response('Not Found', { status: 404 });
+      }
+      const pathname = decodeURIComponent(url.pathname);
+      // 1) /api 前缀 → 转发到后端上游
+      if (pathname === API_PREFIX || pathname.startsWith(`${API_PREFIX}/`)) {
+        return await forwardApiRequest(request, url);
+      }
+      // 2) vben 运行时配置文件 → 动态改写 API 地址后下发
+      if (APP_CONFIG_FILE_RE.test(pathname)) {
+        return await serveAppConfigOverride(pathname);
+      }
+      // 3) 其余走静态文件服务 + SPA fallback
+      return await serveStatic(pathname);
+    } catch (error) {
+      log.error('[protocol] 处理请求异常:', request.url, error);
+      return new Response('Internal Error', { status: 500 });
+    }
+  });
+}
+
+/**
+ * 转发 /api/* 请求到后端上游
+ * 为什么整体缓冲 body 再转发：管理后台的上传体量可控（几 MB 级），
+ * 缓冲比流式转发（需处理 duplex half 兼容性）简单可靠得多
+ */
+async function forwardApiRequest(request: Request, url: URL): Promise<Response> {
+  // 剥掉 /api 前缀，保留其后的路径与查询串
+  const restPath = url.pathname.slice(API_PREFIX.length) || '/';
+  const upstream = API_UPSTREAM.replace(/\/+$/, '');
+  const target = `${upstream}${restPath}${url.search}`;
+  const headers = new Headers(request.headers);
+  // Origin/Referer 是 app://local，对上游没有意义，转发时移除避免干扰后端框架的来源判断
+  headers.delete('origin');
+  headers.delete('referer');
+  try {
+    const hasBody = !['GET', 'HEAD'].includes(request.method.toUpperCase());
+    return await net.fetch(target, {
+      method: request.method,
+      headers,
+      body: hasBody ? await request.arrayBuffer() : undefined,
+      redirect: 'follow',
+    });
+  } catch (error) {
+    log.error('[protocol] API 转发失败:', target, error);
+    // 返回 vben 响应拦截器可识别的结构，前端会用 message 弹错误提示
+    return new Response(
+      JSON.stringify({ code: 502, message: '无法连接后端服务，请检查网络后重试' }),
+      {
+        status: 502,
+        headers: { 'content-type': 'application/json; charset=utf-8' },
+      },
+    );
+  }
+}
+
+/**
+ * 动态下发 vben 运行时配置文件
+ * vben 生产构建会产出该文件定义 window._VBEN_ADMIN_PRO_APP_CONF_（含 VITE_GLOB_API_URL），
+ * 桌面端读取 dist 里的原文件、只把 VITE_GLOB_API_URL 改写为 /api（其余运行时配置键原样保留），
+ * 这样 axios 的 baseURL 变成同源相对路径，全部命中上面的 /api 转发
+ */
+async function serveAppConfigOverride(pathname: string): Promise<Response> {
+  const filePath = join(getWebRoot(), pathname.replace(/^\/+/, ''));
+  let content: string;
+  try {
+    const raw = await readFile(filePath, 'utf8');
+    content = raw.replace(
+      /("VITE_GLOB_API_URL"\s*:\s*")[^"]*(")/,
+      `$1${API_PREFIX}$2`,
+    );
+    log.info('[protocol] 运行时配置已改写 VITE_GLOB_API_URL → /api:', pathname);
+  } catch {
+    // 文件读不到时兜底生成最小可用配置（理论上 vben 构建一定会产出）
+    log.warn('[protocol] 运行时配置文件缺失，使用兜底配置:', pathname);
+    content = `window._VBEN_ADMIN_PRO_APP_CONF_={"VITE_GLOB_API_URL":"${API_PREFIX}"};Object.freeze(window._VBEN_ADMIN_PRO_APP_CONF_);`;
+  }
+  return new Response(content, {
+    headers: {
+      'content-type': 'text/javascript; charset=utf-8',
+      // 运行时配置不缓存，保证改上游地址后重启即生效
+      'cache-control': 'no-cache',
+    },
+  });
+}
+
+/**
+ * 静态文件服务 + SPA fallback
+ * 带目录穿越防护：解析后的物理路径必须仍在 webRoot 内
+ */
+async function serveStatic(pathname: string): Promise<Response> {
+  const webRoot = normalize(getWebRoot());
+  const relPath = pathname === '/' ? 'index.html' : pathname.replace(/^\/+/, '');
+  let filePath = normalize(join(webRoot, relPath));
+  // 目录穿越防护：必须用 path.relative 判断真实包含关系。
+  // 不能用 filePath.startsWith(webRoot) —— 那样 `resources\web` 的同级目录
+  // `resources\website` 也会命中前缀，从而逃出 web 根读到相邻目录文件
+  const rel = relative(webRoot, filePath);
+  if (rel.startsWith('..') || isAbsolute(rel)) {
+    return new Response('Forbidden', { status: 403 });
+  }
+  // 文件不存在或是目录时回退 index.html（等价 nginx try_files $uri /index.html）
+  const fileStat = await stat(filePath).catch(() => null);
+  if (!fileStat || fileStat.isDirectory()) {
+    filePath = join(webRoot, 'index.html');
+  }
+  try {
+    const data = await readFile(filePath);
+    const mime =
+      MIME_TYPES[extname(filePath).toLowerCase()] ?? 'application/octet-stream';
+    return new Response(data as unknown as BodyInit, {
+      headers: { 'content-type': mime },
+    });
+  } catch (error) {
+    // 连 index.html 都没有：一般是没先构建 web-antd，给出可读的提示页
+    log.error('[protocol] 静态资源读取失败:', filePath, error);
+    return new Response(
+      '<h3>未找到 web 构建产物</h3><p>请先在仓库根目录执行 <code>pnpm build</code> 生成 apps/web-antd/dist 后重试。</p>',
+      {
+        status: 404,
+        headers: { 'content-type': 'text/html; charset=utf-8' },
+      },
+    );
+  }
+}

apps/desktop/src/main/shortcut.ts

@@ -0,0 +1,33 @@
+/**
+ * 全局快捷键：一键唤起/隐藏主窗口（默认 CommandOrControl+Alt+N，见 config.ts）
+ */
+import { app, globalShortcut } from 'electron';
+import log from 'electron-log/main';
+
+import { GLOBAL_SHORTCUT } from './config';
+import { getMainWindow, showMainWindow } from './window';
+
+/**
+ * 注册全局快捷键
+ * 快捷键可能被其它程序占用：注册失败只记录告警，绝不影响应用启动
+ */
+export function registerGlobalShortcut(): void {
+  const ok = globalShortcut.register(GLOBAL_SHORTCUT, () => {
+    const win = getMainWindow();
+    if (!win) return;
+    // 可见且聚焦 → 隐藏；否则（隐藏/最小化/失焦）→ 唤起到前台
+    if (win.isVisible() && win.isFocused()) {
+      win.hide();
+    } else {
+      showMainWindow();
+    }
+  });
+  if (!ok) {
+    log.warn(
+      '[shortcut] 全局快捷键注册失败（可能被其它程序占用）:',
+      GLOBAL_SHORTCUT,
+    );
+  }
+  // 退出前必须注销，否则某些平台会残留系统级占用
+  app.on('will-quit', () => globalShortcut.unregisterAll());
+}

apps/desktop/src/main/state.ts

@@ -0,0 +1,11 @@
+/**
+ * 主进程共享运行时状态
+ * 单独成模块是为了避免 window.ts / tray.ts / updater.ts 之间互相 import 造成循环依赖
+ */
+export const appState = {
+  /**
+   * 是否处于「真正退出」流程（托盘菜单退出 / mac Cmd+Q / 更新重启安装）
+   * false 时点击窗口关闭按钮只隐藏到托盘，不退出应用
+   */
+  quitting: false,
+};

apps/desktop/src/main/store.ts

@@ -0,0 +1,16 @@
+/**
+ * 桌面端本地设置持久化（electron-store，落盘到 userData/settings.json）
+ * 存放：静默打印选中的打印机、托盘首次隐藏提示标记等轻量配置
+ * 统一从这里取单例，禁止各模块自行 new Store 造成多份文件
+ */
+import Store from 'electron-store';
+
+/** 设置项的键值约定（集中声明避免魔法字符串散落） */
+export const SETTING_KEYS = {
+  /** 静默打印默认打印机名称 */
+  printerDeviceName: 'printer.deviceName',
+  /** Windows 关闭进托盘的首次提示是否已展示 */
+  closeHintShown: 'tray.closeHintShown',
+} as const;
+
+export const settingsStore = new Store({ name: 'settings' });

apps/desktop/src/main/tray.ts

@@ -0,0 +1,66 @@
+/**
+ * 系统托盘：应用常驻入口
+ * Windows：关闭窗口后靠托盘活着，单击托盘还原窗口
+ * mac：托盘（菜单栏图标）仅提供快捷菜单，窗口恢复主要靠 Dock 的 activate 事件
+ */
+import { app, Menu, nativeImage, Tray } from 'electron';
+
+import { PRODUCT_NAME } from './config';
+import { appState } from './state';
+import { checkUpdateManually } from './updater';
+import { getAutoLaunchEnabled, getResourcePath, setAutoLaunchEnabled } from './utils';
+import { showMainWindow } from './window';
+
+/** 托盘单例（必须持有引用，否则会被 GC 导致图标消失） */
+let tray: null | Tray = null;
+
+/**
+ * 创建托盘图标与菜单
+ * 托盘直接用品牌应用图标缩小（resources/icon.png，年糕猫+奶酪）
+ */
+export function createTray(): Tray {
+  // TODO(待确认)：mac 后续可换 Template 单色托盘图（setTemplateImage 随菜单栏深浅色自动反色）
+  const icon = nativeImage
+    .createFromPath(getResourcePath('icon.png'))
+    .resize({ height: 16, width: 16 });
+  tray = new Tray(icon);
+  tray.setToolTip(PRODUCT_NAME);
+  refreshTrayMenu();
+  // Windows 惯例：单击托盘直接还原主窗口；mac 惯例是单击弹菜单，不抢行为
+  if (process.platform !== 'darwin') {
+    tray.on('click', () => showMainWindow());
+  }
+  return tray;
+}
+
+/**
+ * 重建托盘右键菜单
+ * 单独导出是因为「开机自启」勾选状态可能被渲染层（desktopAPI.setAutoLaunch）改掉，
+ * 改完需要同步刷新菜单勾选态
+ */
+export function refreshTrayMenu(): void {
+  if (!tray) return;
+  const menu = Menu.buildFromTemplate([
+    { click: () => showMainWindow(), label: '显示主窗口' },
+    { type: 'separator' },
+    {
+      checked: getAutoLaunchEnabled(),
+      click: (item) => {
+        setAutoLaunchEnabled(item.checked);
+      },
+      label: '开机自启',
+      type: 'checkbox',
+    },
+    { click: () => checkUpdateManually(), label: '检查更新' },
+    { type: 'separator' },
+    {
+      click: () => {
+        // 标记真正退出，绕过窗口 close 事件里的「隐藏到托盘」拦截
+        appState.quitting = true;
+        app.quit();
+      },
+      label: '退出',
+    },
+  ]);
+  tray.setContextMenu(menu);
+}

apps/desktop/src/main/updater.ts

@@ -0,0 +1,154 @@
+/**
+ * 自动更新：electron-updater（generic provider，消费静态托管的 latest*.yml + 安装包）
+ * Windows 消费 latest.yml + exe；mac 消费 latest-mac.yml + zip
+ * mac 未签名包无法通过更新签名校验：捕获后降级为「前往下载页手动安装」提示
+ */
+import type { UpdateInfo } from 'electron-updater';
+
+import { app, dialog, shell } from 'electron';
+import log from 'electron-log/main';
+import electronUpdater from 'electron-updater';
+
+import { DOWNLOAD_PAGE_URL, PRODUCT_NAME } from './config';
+import { appState } from './state';
+import { getMainWindow } from './window';
+
+// electron-updater 是 CJS 包，ESM 下先整体导入再解构（named import 在部分打包场景会失败）
+const { autoUpdater } = electronUpdater;
+
+/** 是否用户手动触发的检查：手动才弹「已是最新/失败」反馈，启动时的静默检查不打扰用户 */
+let manualCheck = false;
+/** 防止重复初始化事件监听 */
+let initialized = false;
+
+/** 把更新流程事件转发给渲染层（web 侧可用 desktopAPI.onUpdateEvent 展示下载进度） */
+function sendUpdateEvent(type: string, payload?: unknown): void {
+  getMainWindow()?.webContents.send('desktop:update-event', { payload, type });
+}
+
+/**
+ * 初始化更新器：注册事件 + 启动延时静默检查
+ * 只在打包环境生效（开发态没有 app-update.yml，检查必然报错）
+ */
+export function initUpdater(): void {
+  if (!app.isPackaged || initialized) return;
+  initialized = true;
+
+  autoUpdater.logger = log;
+  autoUpdater.autoDownload = true;
+  // 用户选「退出时安装」时靠这个兜底自动装
+  autoUpdater.autoInstallOnAppQuit = true;
+
+  autoUpdater.on('checking-for-update', () => sendUpdateEvent('checking'));
+  autoUpdater.on('update-available', (info: UpdateInfo) =>
+    sendUpdateEvent('available', { version: info.version }),
+  );
+  autoUpdater.on('update-not-available', () => {
+    sendUpdateEvent('not-available');
+    if (manualCheck) {
+      dialog.showMessageBox({
+        message: '当前已是最新版本',
+        title: PRODUCT_NAME,
+        type: 'info',
+      });
+    }
+    manualCheck = false;
+  });
+  autoUpdater.on('download-progress', (progress) =>
+    sendUpdateEvent('progress', {
+      percent: progress.percent,
+      transferred: progress.transferred,
+      total: progress.total,
+    }),
+  );
+  autoUpdater.on('update-downloaded', (info: UpdateInfo) => {
+    sendUpdateEvent('downloaded', { version: info.version });
+    void promptInstall(info);
+  });
+  autoUpdater.on('error', (error) => {
+    const message = String(error?.message ?? error);
+    sendUpdateEvent('error', { message });
+    log.error('[updater] 更新出错:', message);
+    // mac 未签名包的签名校验失败：降级为手动下载引导
+    const isMacSignatureIssue =
+      process.platform === 'darwin' &&
+      /code signature|codesign|not signed/i.test(message);
+    if (isMacSignatureIssue) {
+      void promptManualDownload();
+    } else if (manualCheck) {
+      dialog.showMessageBox({
+        detail: message,
+        message: '检查更新失败',
+        title: PRODUCT_NAME,
+        type: 'warning',
+      });
+    }
+    manualCheck = false;
+  });
+
+  // 启动 8 秒后静默检查：等窗口/协议就绪，也避免抢启动期资源
+  setTimeout(() => {
+    autoUpdater
+      .checkForUpdates()
+      .catch((error) => log.warn('[updater] 启动静默检查失败:', error));
+  }, 8000);
+}
+
+/** 手动检查更新（托盘菜单 / desktopAPI.checkUpdate 共用入口） */
+export function checkUpdateManually(): void {
+  if (!app.isPackaged) {
+    dialog.showMessageBox({
+      message: '开发模式不支持检查更新',
+      title: PRODUCT_NAME,
+      type: 'info',
+    });
+    return;
+  }
+  manualCheck = true;
+  autoUpdater
+    .checkForUpdates()
+    .catch((error) => log.warn('[updater] 手动检查失败:', error));
+}
+
+/** 立即重启安装（更新属于真正退出，先置 quitting 绕过「关闭进托盘」拦截） */
+export function quitAndInstallNow(): void {
+  appState.quitting = true;
+  // isSilent=false 走正常安装界面；isForceRunAfter=true 装完自动拉起新版本
+  autoUpdater.quitAndInstall(false, true);
+}
+
+/** 下载完成后的安装确认弹窗 */
+async function promptInstall(info: UpdateInfo): Promise<void> {
+  const options = {
+    buttons: ['立即重启安装', '退出时安装'],
+    cancelId: 1,
+    defaultId: 0,
+    detail: '选择「退出时安装」则下次退出应用时自动完成升级。',
+    message: `新版本 ${info.version} 已下载完成，是否立即重启安装？`,
+    title: PRODUCT_NAME,
+    type: 'info' as const,
+  };
+  const win = getMainWindow();
+  const { response } = win
+    ? await dialog.showMessageBox(win, options)
+    : await dialog.showMessageBox(options);
+  if (response === 0) {
+    quitAndInstallNow();
+  }
+}
+
+/** mac 未签名降级：引导用户去下载页手动装新版本 */
+async function promptManualDownload(): Promise<void> {
+  const { response } = await dialog.showMessageBox({
+    buttons: ['打开下载页', '取消'],
+    cancelId: 1,
+    defaultId: 0,
+    detail: '当前安装包未进行代码签名，无法自动更新，请前往下载页手动安装最新版本。',
+    message: '检测到新版本',
+    title: PRODUCT_NAME,
+    type: 'info',
+  });
+  if (response === 0) {
+    void shell.openExternal(DOWNLOAD_PAGE_URL);
+  }
+}

apps/desktop/src/main/utils.ts

@@ -0,0 +1,35 @@
+/**
+ * 主进程通用小工具
+ */
+import { join } from 'node:path';
+
+import { app } from 'electron';
+
+/**
+ * 取运行时资源文件的绝对路径（图标等）
+ * 打包后：resources/ 下（electron-builder extraResources 拷入）
+ * 开发态：apps/desktop/resources/ 源目录
+ */
+export function getResourcePath(rel: string): string {
+  return app.isPackaged
+    ? join(process.resourcesPath, rel)
+    : join(app.getAppPath(), 'resources', rel);
+}
+
+/** 读取开机自启状态（Windows 读注册表，mac 读系统「登录项」） */
+export function getAutoLaunchEnabled(): boolean {
+  return app.getLoginItemSettings().openAtLogin;
+}
+
+/**
+ * 设置开机自启
+ * args --hidden 仅 Windows 生效：自启时静默进托盘不弹主窗口（入口处解析该参数）；
+ * mac 走 SMAppService（系统设置 → 登录项 可见），不支持自定义参数，自启后正常显示窗口
+ */
+export function setAutoLaunchEnabled(enabled: boolean): boolean {
+  app.setLoginItemSettings({
+    openAtLogin: enabled,
+    args: enabled ? ['--hidden'] : [],
+  });
+  return getAutoLaunchEnabled();
+}

apps/desktop/src/main/window.ts

@@ -0,0 +1,187 @@
+/**
+ * 主窗口管理：创建、加载策略、安全基线、关闭行为
+ */
+import { join } from 'node:path';
+
+import {
+  app,
+  BrowserWindow,
+  nativeImage,
+  Notification,
+  session,
+  shell,
+} from 'electron';
+import log from 'electron-log/main';
+
+import {
+  APP_HOST,
+  APP_SCHEME,
+  DEV_SERVER_URL,
+  PRODUCT_NAME,
+} from './config';
+import { appState } from './state';
+import { SETTING_KEYS, settingsStore } from './store';
+import { getResourcePath } from './utils';
+
+/** 主窗口单例引用（应用生命周期内只有一个主窗口） */
+let mainWindow: BrowserWindow | null = null;
+
+/** 取主窗口（已销毁则返回 null，调用方需自行兜底） */
+export function getMainWindow(): BrowserWindow | null {
+  return mainWindow && !mainWindow.isDestroyed() ? mainWindow : null;
+}
+
+/** 显示并聚焦主窗口（托盘单击 / 通知点击 / 二次启动 / mac Dock 激活共用） */
+export function showMainWindow(): void {
+  const win = getMainWindow();
+  if (!win) return;
+  if (win.isMinimized()) win.restore();
+  win.show();
+  win.focus();
+}
+
+/**
+ * 判断某个 URL 是否属于「自己人」页面
+ * 用途：will-navigate 导航拦截、IPC sender 来源校验
+ * 生产只信 app://local，开发态额外放行本地 vite dev server（localhost 与 127.0.0.1 等价）
+ */
+export function isTrustedWebContentsUrl(url: string): boolean {
+  if (url.startsWith(`${APP_SCHEME}://${APP_HOST}`)) return true;
+  if (!app.isPackaged) {
+    return (
+      url.startsWith(DEV_SERVER_URL) ||
+      url.startsWith(DEV_SERVER_URL.replace('localhost', '127.0.0.1'))
+    );
+  }
+  return false;
+}
+
+/**
+ * 会话级安全设置：权限请求默认拒绝，仅放行白名单
+ * 本项目无 IM 音视频，media（摄像头/麦克风）一律拒绝；派生项目需要时再把 'media' 加进白名单
+ */
+export function setupSessionSecurity(): void {
+  const allowedPermissions = new Set([
+    'clipboard-read',
+    'clipboard-sanitized-write',
+    'fullscreen',
+    'notifications',
+  ]);
+  session.defaultSession.setPermissionRequestHandler(
+    (_webContents, permission, callback) => {
+      callback(allowedPermissions.has(permission));
+    },
+  );
+}
+
+/**
+ * 创建主窗口
+ * @param options.startHidden 开机自启（--hidden）时为 true：创建后不显示、静默待在托盘
+ */
+export async function createMainWindow(options: {
+  startHidden: boolean;
+}): Promise<BrowserWindow> {
+  const win = new BrowserWindow({
+    title: PRODUCT_NAME,
+    width: 1440,
+    height: 900,
+    minWidth: 1024,
+    minHeight: 680,
+    // 先隐藏，ready-to-show 再展示，避免加载期白屏闪烁
+    show: false,
+    autoHideMenuBar: true,
+    // mac 的应用图标由打包配置决定，这里只给 Windows/Linux 的窗口图标
+    icon:
+      process.platform === 'darwin'
+        ? undefined
+        : nativeImage.createFromPath(getResourcePath('icon.png')),
+    backgroundColor: '#f5f5f5',
+    webPreferences: {
+      // 安全基线：隔离 + 沙箱 + 禁 node，一律不许放开（渲染层是可热替换的 web 产物）
+      preload: join(import.meta.dirname, '../preload/index.cjs'),
+      contextIsolation: true,
+      nodeIntegration: false,
+      sandbox: true,
+      spellcheck: false,
+    },
+  });
+  mainWindow = win;
+
+  win.on('ready-to-show', () => {
+    if (!options.startHidden) win.show();
+  });
+
+  // 渲染层 window.open 的外链统一交给系统浏览器，壳内不开新窗口
+  win.webContents.setWindowOpenHandler(({ url }) => {
+    if (url.startsWith('http://') || url.startsWith('https://')) {
+      shell.openExternal(url);
+    }
+    return { action: 'deny' };
+  });
+
+  // 页面内直接跳转外部地址也拦下来走系统浏览器，防止壳被当成通用浏览器用
+  win.webContents.on('will-navigate', (event, url) => {
+    if (!isTrustedWebContentsUrl(url)) {
+      event.preventDefault();
+      // 与 setWindowOpenHandler 保持一致：只把 http(s) 交给系统浏览器，
+      // file:// / 自定义协议等一律仅拦截不外开，避免被诱导打开危险协议
+      if (url.startsWith('http://') || url.startsWith('https://')) {
+        shell.openExternal(url);
+      }
+    }
+  });
+
+  // 关闭按钮 = 隐藏到托盘（双平台一致；真正退出走托盘菜单/Cmd+Q，见 state.quitting）
+  win.on('close', (event) => {
+    if (appState.quitting) return;
+    event.preventDefault();
+    win.hide();
+    showFirstHideHint();
+  });
+
+  // 拿到焦点时清掉任务栏闪烁提醒
+  win.on('focus', () => win.flashFrame(false));
+
+  if (app.isPackaged) {
+    // 生产：走 app:// 协议加载 web-antd 的 dist（hash 路由，入口固定 index.html）
+    await win.loadURL(`${APP_SCHEME}://${APP_HOST}/index.html`);
+  } else {
+    // 开发：连 web-antd 的 vite dev server，起得比 vite 快时自动重试等它就绪
+    loadDevServerWithRetry(win);
+  }
+  return win;
+}
+
+/**
+ * 开发模式加载 dev server，失败每秒重试（dev:desktop 并行启动时 electron 通常比 vite 先就绪）
+ */
+function loadDevServerWithRetry(win: BrowserWindow, attempt = 0): void {
+  if (win.isDestroyed()) return;
+  win.webContents.once('did-fail-load', (_event, code, desc) => {
+    if (attempt >= 120) {
+      log.error('[window] 连接 dev server 失败已放弃:', DEV_SERVER_URL, code, desc);
+      return;
+    }
+    setTimeout(() => loadDevServerWithRetry(win, attempt + 1), 1000);
+  });
+  win.loadURL(DEV_SERVER_URL).catch(() => {
+    // loadURL 的 promise 失败与 did-fail-load 重复，重试统一由上面的事件驱动
+  });
+}
+
+/**
+ * Windows 首次「关闭进托盘」时弹一条系统通知告知用户，只提示一次（标记持久化）
+ * mac 关窗隐藏是系统惯例，无需提示
+ */
+function showFirstHideHint(): void {
+  if (process.platform !== 'win32') return;
+  if (settingsStore.get(SETTING_KEYS.closeHintShown)) return;
+  settingsStore.set(SETTING_KEYS.closeHintShown, true);
+  if (Notification.isSupported()) {
+    new Notification({
+      title: PRODUCT_NAME,
+      body: '已最小化到系统托盘，单击托盘图标可恢复窗口',
+      icon: nativeImage.createFromPath(getResourcePath('icon.png')),
+    }).show();
+  }
+}

apps/desktop/src/preload/index.ts

@@ -0,0 +1,121 @@
+/**
+ * preload：通过 contextBridge 向渲染层暴露 window.desktopAPI
+ *
+ * 运行在 sandbox 沙箱中（只能使用 electron 受限模块 + DOM），
+ * 所有能力都走 ipcRenderer.invoke 白名单通道，渲染层拿不到任何 Node 能力。
+ * web 侧的类型声明见 apps/web-antd/src/types/desktop.d.ts（两边字段需保持同步）。
+ */
+import type { IpcRendererEvent } from 'electron';
+
+import { contextBridge, ipcRenderer } from 'electron';
+
+/**
+ * 用 canvas 绘制 Windows 任务栏角标覆盖图（红底白字数字），返回 dataURL
+ * 为什么在 preload 画：主进程没有 DOM canvas，nativeImage 也不能绘制文字；
+ * preload 跑在渲染进程里有完整 DOM 能力，画完把 dataURL 交给主进程 setOverlayIcon
+ */
+function drawBadgeDataURL(count: number): string {
+  const size = 32;
+  const canvas = document.createElement('canvas');
+  canvas.width = size;
+  canvas.height = size;
+  const ctx = canvas.getContext('2d');
+  if (!ctx) return '';
+  const text = count > 99 ? '99+' : String(count);
+  ctx.beginPath();
+  ctx.arc(size / 2, size / 2, size / 2, 0, Math.PI * 2);
+  ctx.fillStyle = '#f5222d';
+  ctx.fill();
+  ctx.fillStyle = '#ffffff';
+  ctx.font = `bold ${text.length > 2 ? 13 : 18}px sans-serif`;
+  ctx.textAlign = 'center';
+  ctx.textBaseline = 'middle';
+  ctx.fillText(text, size / 2, size / 2 + 1);
+  return canvas.toDataURL('image/png');
+}
+
+/** 订阅主进程推送事件的通用封装，返回取消订阅函数（组件卸载时记得调用防止泄漏） */
+function subscribe<T>(
+  channel: string,
+  callback: (payload: T) => void,
+): () => void {
+  const listener = (_event: IpcRendererEvent, payload: T) => callback(payload);
+  ipcRenderer.on(channel, listener);
+  return () => ipcRenderer.removeListener(channel, listener);
+}
+
+const desktopAPI = {
+  /** 恒为 true，web 侧用它判断是否运行在 Electron 壳内 */
+  isElectron: true as const,
+  /** 当前平台：win32 / darwin / linux（渲染层做平台差异 UI 时用） */
+  platform: process.platform,
+  /** 应用版本号（package.json version，用于「关于」展示） */
+  getVersion: (): Promise<string> => ipcRenderer.invoke('desktop:get-version'),
+  /**
+   * 发系统通知；route 传入站内路由（如 /notice/list）时点击通知会唤起窗口并跳转
+   * flash 默认 true：窗口未聚焦时同时闪烁任务栏（mac 表现为 Dock 弹跳）
+   */
+  notify: (options: {
+    title: string;
+    body?: string;
+    route?: string;
+    silent?: boolean;
+    flash?: boolean;
+  }): Promise<void> => ipcRenderer.invoke('desktop:notify', options),
+  /** 设置未读角标数，0 清除；mac 用 Dock 原生数字，Windows 用 canvas 画的覆盖图 */
+  setBadge: (count: number): Promise<void> => {
+    const dataUrl =
+      count > 0 && process.platform === 'win32' ? drawBadgeDataURL(count) : '';
+    return ipcRenderer.invoke('desktop:set-badge', count, dataUrl);
+  },
+  /** 手动控制任务栏闪烁（一般用不到，notify 已内置） */
+  flashFrame: (flag = true): Promise<void> =>
+    ipcRenderer.invoke('desktop:flash-frame', flag),
+  /** 读取开机自启状态 */
+  getAutoLaunch: (): Promise<boolean> =>
+    ipcRenderer.invoke('desktop:get-auto-launch'),
+  /** 设置开机自启（--hidden 静默启动进托盘） */
+  setAutoLaunch: (enabled: boolean): Promise<boolean> =>
+    ipcRenderer.invoke('desktop:set-auto-launch', enabled),
+  /** 枚举系统打印机列表 */
+  getPrinters: (): Promise<unknown[]> =>
+    ipcRenderer.invoke('desktop:get-printers'),
+  /**
+   * 打印一段完整 HTML：不传 deviceName 时读持久化的默认打印机；
+   * silent=true 静默打印，false 弹系统打印对话框
+   */
+  printHTML: (options: {
+    html: string;
+    deviceName?: string;
+    silent?: boolean;
+    landscape?: boolean;
+  }): Promise<{ message?: string; success: boolean }> =>
+    ipcRenderer.invoke('desktop:print-html', options),
+  /** 读桌面端本地设置（如默认打印机） */
+  getSetting: (key: string): Promise<unknown> =>
+    ipcRenderer.invoke('desktop:get-setting', key),
+  /** 写桌面端本地设置 */
+  setSetting: (key: string, value: unknown): Promise<void> =>
+    ipcRenderer.invoke('desktop:set-setting', key, value),
+  /** 手动检查更新（托盘菜单也有同款入口） */
+  checkUpdate: (): Promise<void> => ipcRenderer.invoke('desktop:check-update'),
+  /** 更新下载完成后立即重启安装 */
+  quitAndInstall: (): Promise<void> =>
+    ipcRenderer.invoke('desktop:quit-and-install'),
+  /** 订阅「点击通知要求跳转路由」事件，web 侧收到后自行 router.push */
+  onNavigate: (callback: (route: string) => void): (() => void) =>
+    subscribe<string>('desktop:navigate', callback),
+  /** 订阅更新流程事件（checking / available / progress / downloaded 等），用于展示进度 */
+  onUpdateEvent: (
+    callback: (event: { payload?: unknown; type: string }) => void,
+  ): (() => void) =>
+    subscribe<{ payload?: unknown; type: string }>(
+      'desktop:update-event',
+      callback,
+    ),
+};
+
+contextBridge.exposeInMainWorld('desktopAPI', desktopAPI);
+
+/** 导出类型供主进程侧引用（仅类型层面，运行时无依赖） */
+export type DesktopAPI = typeof desktopAPI;

apps/desktop/tsconfig.json

@@ -0,0 +1,17 @@
+{
+  "compilerOptions": {
+    "target": "ES2023",
+    "module": "ESNext",
+    "moduleResolution": "bundler",
+    "lib": ["ES2023", "DOM", "DOM.Iterable"],
+    "types": ["node"],
+    "strict": true,
+    "noEmit": true,
+    "skipLibCheck": true,
+    "esModuleInterop": true,
+    "isolatedModules": true,
+    "resolveJsonModule": true,
+    "forceConsistentCasingInFileNames": true
+  },
+  "include": ["src", "electron.vite.config.ts"]
+}

apps/web-antd/.env

@@ -1,5 +1,11 @@
 # 应用标题
-VITE_APP_TITLE=Nl Admin
+VITE_APP_TITLE=佛山铂尔曼
+
+# 品牌：brm 佛山铂尔曼 / wl 维伦家具，由 build:brm、build:wl 覆盖
+VITE_APP_BRAND=brm
+
+# 浏览器标签图标，index.html 里按此变量注入
+VITE_APP_FAVICON=/brand/brm-favicon.svg
 
 # 应用命名空间，用于缓存、store等功能的前缀，确保隔离
 VITE_APP_NAMESPACE=vben-web-antd

apps/web-antd/.env.brm

@@ -0,0 +1,27 @@
+# 佛山铂尔曼（小程序 AppID wx679d36842570cea7）
+#
+# --mode brm 不会再去加载 .env.production，所以生产变量必须在这份文件里写全。
+# VITE_ARCHIVER 会产出 dist.zip，两个品牌必须分开 outDir，否则互相覆盖。
+VITE_APP_TITLE=佛山铂尔曼
+VITE_APP_BRAND=brm
+VITE_APP_FAVICON=/brand/brm-favicon.svg
+
+VITE_BASE=/
+
+# 接口地址
+VITE_GLOB_API_URL=https://api.borman.top/api
+
+# 是否开启压缩，可以设置为 none, brotli, gzip
+VITE_COMPRESS=gzip
+
+# 是否开启 PWA
+VITE_PWA=false
+
+# vue-router 的模式
+VITE_ROUTER_HISTORY=hash
+
+# 是否注入全局loading
+VITE_INJECT_APP_LOADING=true
+
+# 打包后是否生成dist.zip
+VITE_ARCHIVER=true

apps/web-antd/.env.wl

@@ -0,0 +1,27 @@
+# 维伦家具（小程序 AppID wx57b54060a579c31a）
+#
+# --mode wl 不会再去加载 .env.production，所以生产变量必须在这份文件里写全。
+# VITE_ARCHIVER 会产出 dist.zip，两个品牌必须分开 outDir，否则互相覆盖。
+VITE_APP_TITLE=维伦家具
+VITE_APP_BRAND=wl
+VITE_APP_FAVICON=/brand/wl-favicon.svg
+
+VITE_BASE=/
+
+# 接口地址
+VITE_GLOB_API_URL=https://api.weilun.top/api
+
+# 是否开启压缩，可以设置为 none, brotli, gzip
+VITE_COMPRESS=gzip
+
+# 是否开启 PWA
+VITE_PWA=false
+
+# vue-router 的模式
+VITE_ROUTER_HISTORY=hash
+
+# 是否注入全局loading
+VITE_INJECT_APP_LOADING=true
+
+# 打包后是否生成dist.zip
+VITE_ARCHIVER=true

apps/web-antd/index.html

@@ -12,8 +12,10 @@
       content="width=device-width,initial-scale=1.0,minimum-scale=1.0,maximum-scale=1.0,user-scalable=0"
     />
     <!-- 由 vite 注入 VITE_APP_TITLE 变量，在 .env 文件内配置 -->
-    <title><%= VITE_APP_TITLE %></title>
-    <link rel="icon" href="/favicon.ico" />
+    <title>%VITE_APP_TITLE%</title>
+    <!-- 品牌 favicon 由 VITE_APP_FAVICON 注入，.env 里给了默认值保证各 mode 都能替换 -->
+    <link rel="icon" href="/favicon.ico" sizes="32x32" />
+    <link rel="icon" type="image/svg+xml" href="%VITE_APP_FAVICON%" />
     <script>
       // 生产环境下注入百度统计
       if (window._VBEN_ADMIN_PRO_APP_CONF_) {

apps/web-antd/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vben/web-antd",
-  "version": "5.5.6",
+  "version": "5.7.0",
   "homepage": "https://vben.pro",
   "bugs": "https://github.com/vbenjs/vue-vben-admin/issues",
   "repository": {
@@ -18,7 +18,11 @@
   "scripts": {
     "build": "pnpm vite build --mode production",
     "build:analyze": "pnpm vite build --mode analyze",
+    "build:brm": "pnpm vite build --mode brm --outDir dist-brm",
+    "build:wl": "pnpm vite build --mode wl --outDir dist-wl",
     "dev": "pnpm vite --mode development",
+    "dev:brm": "pnpm vite --mode brm",
+    "dev:wl": "pnpm vite --mode wl",
     "preview": "vite preview",
     "typecheck": "vue-tsc --noEmit --skipLibCheck"
   },
@@ -43,8 +47,13 @@
     "@vueuse/core": "catalog:",
     "ant-design-vue": "catalog:",
     "dayjs": "catalog:",
+    "jszip": "^3.10.1",
+    "markdown-it": "^15.0.0",
     "pinia": "catalog:",
     "vue": "catalog:",
     "vue-router": "catalog:"
+  },
+  "devDependencies": {
+    "@types/markdown-it": "^14.1.2"
   }
 }

apps/web-antd/postcss.config.mjs

@@ -1 +0,0 @@
-export { default } from '@vben/tailwind-config/postcss';

apps/web-antd/public/brand/brm-favicon.svg

@@ -0,0 +1,11 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 64 64" width="64" height="64" role="img" aria-label="BORMAN">
+  <title>BORMAN favicon</title>
+  <g fill="none" stroke="#B8924A" stroke-linecap="round" stroke-linejoin="round">
+    <rect x="5" y="5" width="54" height="54" rx="14" stroke-width="2"/>
+    <path d="M18 52V18c0-4.5 3.5-7 8-7h4c3.5 0 5.5 2.5 5.5 6.5V36" stroke-width="2.2"/>
+    <path d="M35.5 37h16c3 0 5.5 2 5.5 5.5V46H25" stroke-width="2.2"/>
+    <path d="M35.5 28h12c2.5 0 4 1.5 4 4" stroke-width="2"/>
+    <path d="M28 46v8M50 46v8" stroke-width="2.2"/>
+  </g>
+</svg>

apps/web-antd/public/brand/brm-logo-dark.svg

@@ -0,0 +1,29 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 128 128" width="128" height="128" role="img" aria-label="BORMAN">
+  <title>BORMAN Dark</title>
+  <defs>
+    <linearGradient id="brmDarkStroke" x1="0%" y1="0%" x2="100%" y2="100%">
+      <stop offset="0%" stop-color="#F0E6D2"/>
+      <stop offset="55%" stop-color="#D4B56A"/>
+      <stop offset="100%" stop-color="#E8D9B0"/>
+    </linearGradient>
+  </defs>
+  <style type="text/css"><![CDATA[
+    .frame-outer,.frame-inner,.mark{fill:none;stroke:url(#brmDarkStroke);stroke-linecap:round;stroke-linejoin:round}
+    .frame-outer{stroke-width:2.5;animation:breath 5s ease-in-out infinite}
+    .frame-inner{stroke-width:1;opacity:.5}
+    .mark{stroke-width:3.1;animation:breath 5s ease-in-out .4s infinite}
+    @keyframes breath{0%,100%{opacity:1}50%{opacity:.84}}
+    @media (prefers-reduced-motion:reduce){
+      .frame-outer,.mark{animation:none}
+    }
+  ]]></style>
+  <rect class="frame-outer" x="10" y="10" width="108" height="108" rx="28"/>
+  <rect class="frame-inner" x="18" y="18" width="92" height="92" rx="22"/>
+  <g class="mark">
+    <path d="M40 102V36c0-9 7-14 16-14h8c7 0 11 5 11 13v39"/>
+    <path d="M75 74h30c6 0 11 4 11 11v7H52"/>
+    <path d="M75 56h24c5 0 8 3 8 8"/>
+    <path d="M56 92v14M98 92v14"/>
+  </g>
+</svg>

apps/web-antd/public/brand/brm-logo-horizontal-dark.svg

@@ -0,0 +1,41 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 320 80" width="320" height="80" role="img" aria-label="BORMAN">
+  <title>BORMAN Dark</title>
+  <defs>
+    <linearGradient id="brmHDark" x1="0%" y1="0%" x2="100%" y2="100%">
+      <stop offset="0%" stop-color="#F0E6D2"/>
+      <stop offset="55%" stop-color="#D4B56A"/>
+      <stop offset="100%" stop-color="#E8D9B0"/>
+    </linearGradient>
+  </defs>
+  <style type="text/css"><![CDATA[
+    .ico .frame-outer,.ico .frame-inner,.ico .mark{fill:none;stroke:url(#brmHDark);stroke-linecap:round;stroke-linejoin:round}
+    .ico .frame-outer{stroke-width:2.5;animation:breath 5s ease-in-out infinite}
+    .ico .frame-inner{stroke-width:1;opacity:.5}
+    .ico .mark{stroke-width:3.1}
+    .wm{fill:#F2ECE1;font-family:'Source Han Serif SC','Noto Serif SC','Songti SC',STSong,serif}
+    .sub{fill:#C9BDA8;font-family:'Helvetica Neue',Helvetica,Arial,sans-serif}
+    .rule{stroke:#D4B56A;opacity:.55}
+    .shine{stroke:#F5E9C8;stroke-width:2;opacity:0;pointer-events:none}
+    svg:hover .shine{animation:shine-run .65s ease-out}
+    @keyframes breath{0%,100%{opacity:1}50%{opacity:.84}}
+    @keyframes shine-run{0%{opacity:0;stroke-dasharray:8 240;stroke-dashoffset:0}30%{opacity:.9}100%{opacity:0;stroke-dashoffset:-180}}
+    @media (prefers-reduced-motion:reduce){
+      .ico .frame-outer,.shine{animation:none!important}
+    }
+  ]]></style>
+  <g class="ico" transform="translate(4 8) scale(0.8125)">
+    <rect class="frame-outer" x="10" y="10" width="108" height="108" rx="28"/>
+    <rect class="frame-inner" x="18" y="18" width="92" height="92" rx="22"/>
+    <rect class="shine" x="10" y="10" width="108" height="108" rx="28" fill="none"/>
+    <g class="mark">
+      <path d="M40 102V36c0-9 7-14 16-14h8c7 0 11 5 11 13v39"/>
+      <path d="M75 74h30c6 0 11 4 11 11v7H52"/>
+      <path d="M75 56h24c5 0 8 3 8 8"/>
+      <path d="M56 92v14M98 92v14"/>
+    </g>
+  </g>
+  <path class="rule" d="M92 22V58" fill="none" stroke-width="1"/>
+  <text class="wm" x="108" y="40" font-size="26" letter-spacing="2.2">&#x4F5B;&#x5C71;&#x94C2;&#x5C14;&#x66FC;</text>
+  <text class="sub" x="110" y="58" font-size="10" letter-spacing="4.2">BORMAN FURNITURE</text>
+</svg>