| Feature | Key Characteristics | | --- | --- | | EntityController scaffolding | Entity class + controller gives CRUD, statistics, export and permissions immediately; ReadOnlyEntityController covers read-only lists. | | Static-constructor configuration | Configure fields, action buttons, related links, statistics and export in a controller static constructor. | | Field metadata API | GetFields?kind=1..4 (List / Detail / AddForm / EditForm) drives dynamic front-end generation — no hard coding. | | Menu tree | /Cube/MenuTree builds multi-level menus from permissions; /Admin/Index/GetMenuTree serves the classic MVC UI. | | Standard API response | ApiResponse wraps code / data / page / stat for every endpoint. | | Zero deployment | Schema creation and seed data happen automatically on first run, with no manual intervention. | | Powerful view engine | A child project can override any parent view at the same path (.cshtml). | | Built-in editors | Rich text (Quill) and Markdown (EasyMDE) with image upload and security controls. | | Scalar API docs | Scalar UI grouped by area alongside Swagger, for easier online debugging. |

| Feature | Key Characteristics | | --- | --- | | Field set customization | ListFields.RemoveField / AddListField adjust columns, links and targets per controller. | | Change log | LogOnChange = true writes an audit entry for every modification. | | Dynamic front-end fields | The front-end fetches /Cube/App/GetFields?kind=1 for list field definitions — no hard coding. |

public class AppController : EntityController<App, AppModel>
{
    static AppController()
    {
        LogOnChange = true;                 // change log
        ListFields.RemoveField("Secret");   // hide a sensitive column
        var log = ListFields.AddListField("Log", "UpdateUserId");
        log.DisplayName = "Change log";
        log.Url = "/Admin/Log?category=App&linkId={ID}";
        log.Target = "_blank";
    }
}

| Endpoint | Purpose | | --- | --- | | /Auth/Login | Sign in and receive a JWT token (header / cookie / query). | | /Cube/MenuTree | Permission-aware menu tree. | | /{Area}/{Controller}/GetFields?kind=1..4 | Field metadata for list / detail / add form / edit form. | | Main route + dynamic parameters | Query with paging, sorting and condition composition. | | Detail / Insert / Update / Delete | Standard CRUD actions. | | stat / page | Statistics row and paging information. |

| Feature | Key Characteristics | | --- | --- | | Generic permission management | Users, roles, menus and actions with controller-action granularity. | | EntityAuthorize | Login + role + menu action checks on every action. | | First user becomes administrator | The built-in admin account is disabled afterwards; admin/admin works for the first sign-in. | | Unified identity | External OAuth / SSO / JWT across desktops, web and mobile clients. | | Security defense | Built-in threat detection (scanners / injection / honeypots), persistent auto-ban with escalating durations and a security audit trail. Automatic mode bans repeated attackers, temporarily blocks broad attacks and recovers automatically; trusted proxies can be configured or learned to prevent spoofing; observation / blocking modes are switchable. | | Production advice | Disable unused third-party logins, enable HTTPS and enforce a strong password policy. | | Multi-tenancy switch | Enable or disable multi-tenancy with one switch; tenant menus and fields are hidden when off, and runtime tenant switching is supported. |

| Feature | Key Characteristics | | --- | --- | | AI assistant | A single chat panel in the lower-right corner with page / entity / query context. The global AiController.AiChat endpoint (/Ai/AiChat) plus NAI AiChatService orchestrate session history, the tool loop and SSE streaming events. | | Extension point | Entity controllers expose data queries, tool sets and prompt overrides through IEntityAiContext (SearchData / CreateCubeTools / BuildChatSystemPrompt). Tools include get_data_context, get_form_schema, fill_form, get_page_context, get_system_info and run_js. | | AI insight | Merged into the assistant; AiInsightHelper remains for data collection (14 sensitive-field blacklists). One-click analysis offers statistics, anomaly detection, trend prediction and actionable advice with deep reasoning, on both MVC and Vue. | | Dashboard widgets | Dashboards are composed of configurable widgets (KPI, charts, monitoring) with personalized layouts and /Cube/Widget management. |

| Feature | Key Characteristics | | --- | --- | | Multiple front-ends | Vue / Blazor / AntDesign / classic Razor coexist and migrate gradually. | | Embedded theme assets | CubeEmbeddedFileProvider ships theme assets inside the package. | | Theme registration | Register skins via AddTheme/AddSkin and pick one in UseCube (app.UseMetronic(env) etc.). | | Custom themes | Implement IModule like MetronicModule and mount it in the use phase. | | View overrides | A .cshtml with the same path in a child project overrides the parent. | | Localization | 11 runtime languages for API messages, request-level culture detection and an 11-language Vue front-end. | | New-generation skins | pnpm workspace with shared packages @newlifex/api-core (API / token / types) and @newlifex/field-mapping (field metadata -> controls); reference the NuGet package to get the complete front-end. |

| NuGet package | Framework | UI library | Dev port | |---------------|-----------|------------|----------| | NewLife.Cube.NaiveUI | Vue 3 | Naive UI | 5180 | | NewLife.Cube.MUI | React 19 | MUI 6 (Material) | 5181 | | NewLife.Cube.Shadcn | React 19 | Radix UI + Tailwind CSS 4 | 5182 | | NewLife.Cube.ArcoVue | Vue 3 | Arco Design Vue | 5183 | | NewLife.Cube.Angular | Angular 19 | NG-ZORRO | 5184 | | NewLife.Cube.Vuetify | Vue 3 | Vuetify 3 | 5185 | | NewLife.Cube.Svelte | SvelteKit 2 + Svelte 5 | Tailwind CSS 4 | 5186 | | NewLife.Cube.TDesign | Vue 3 | TDesign | 5187 |

// Pick one
app.UseNaiveUI(app.Environment);
app.UseMUI(app.Environment);
app.UseShadcn(app.Environment);
app.UseArcoVue(app.Environment);
app.UseAngular(app.Environment);
app.UseVuetify(app.Environment);
app.UseSvelte(app.Environment);
app.UseTDesign(app.Environment);

Front-end workspace conventions:

• Root pnpm build: builds only the shared modules under packages/; it no longer recurses into every skin.
• Build one skin: pnpm build:vue, pnpm build:react, pnpm build:naive, pnpm build:mui, pnpm build:shadcn, pnpm build:arco, pnpm build:angular, pnpm build:vuetify, pnpm build:svelte, pnpm build:tdesign.
• Develop one skin: the matching pnpm dev:xxx.
• Build or start everything: pnpm build:all / pnpm dev:all.
• Inside a skin's web/ directory, use its own pnpm build / pnpm dev.

| Feature | Key Characteristics | | --- | --- | | XCode data layer | Schema synchronization, field evolution, automatic sharding, read/write splitting and second-level cache. | | Multiple databases | MySql / SQLite / SqlServer / Oracle / PostgreSql / SqlCe / Access / DM. | | Database separation | Three-database example: Membership (permissions) / Cube (business) / Log (logs). | | PluginServer | Downloads database drivers and front-end assets automatically on first run; configurable. | | Proven scale | Real projects with a single table of 10 billion rows. |

| Feature | Key Characteristics | | --- | --- | | Unified timing | Filters record elapsed time uniformly and integrate with Stardust APM. | | Cheap logging | Log level checks avoid unnecessary string concatenation. | | Modern frameworks | Multiple TFMs allow Span / ValueTask optimizations on newer frameworks. | | NativeAOT | 18 smoke scenarios for the non-MVC foundation, run as JIT/AOT pairs in CI. |

| Scenario | How | | --- | --- | | Single machine | dotnet publish, then copy the DLLs and configuration. | | Service | Use NewLife.Agent for Windows Service or systemd. | | Cluster | Publish, zip, start under the StarAgent daemon or deploy via Stardust. | | Container | A simple Dockerfile (copy the publish folder, set environment variables). | | Scale-out | Stateless instances sharing the database and cache. |

Deploying the user center

1. Clone the source, build CubeSSO, go to Bin/SSO, adjust appsettings.json, package the exe/dll/appsettings/runtimeconfig files and deploy.

{
  "Logging": {
    "LogLevel": {
      "Default": "Information",
      "Microsoft.AspNetCore": "Warning"
    }
  },
  "AllowedHosts": "*",
  "Urls": "http://:8080;https://:8081",
  //"StarServer": "http://star.newlifex.com:6600",
  "ConnectionStrings": {
    "Membership": "Data Source=../Data/Membership.db;provider=sqlite",
    "Cube": "Data Source=../Data/Cube.db;provider=sqlite",
    "Log": "Data Source=../Data/Log.db;provider=sqlite"
  }
}

1. Start and open the SSO site. The first login can use admin/admin or a third-party login; the first user becomes administrator and admin is disabled.
2. For a production user center, disable third-party login: Cube settings -> OAuth -> disable all.
3. Rename the system in Cube settings -> System -> Display name.

| Item | Description | | --- | --- | | Focus | Front-end/back-end separation + multi-front-end ecosystem + minimal intrusion. | | Backend | WebApi APIs live in master (NewLife.Cube); MVC stays in NewLife.CubeNC. | | Front-ends | Independent repositories (Vue / QuickVue / Antd / Blazor). | | Blueprint | Modern UI while keeping the override mechanism; multi-framework front-ends (Vue/React/Angular/Svelte + 8 ready-to-use skins); NuGet package brings the default skin; mobile, mini-programs and hybrid apps; enhanced data dashboards. | | Tasks | |

Front-end repositories: · · ·

Live sites: Vue , · Antd · Swagger

Participation notes:

1. Join the NewLifeX team and submit to the dev branch.
2. WebApi backend: NewLife.Cube; MVC stays in NewLife.CubeNC.
3. New front-ends live in independent repositories (e.g. NewLife.CubeAntd).
4. Mark owners in docs and code.
5. Tasks: .

• [x] New WebApi project NewLife.Cube
• [x] Move NetCore-specific code to NewLife.CubeNC
• [x] New EntityController / EntityReadOnlyController
• [x] API docs and Vue login page
• [ ] Vue user/role list and forms

+-------------------------------------------------------------+
|         Front-end (Vue / Blazor / Antd / classic Razor)      |
+----------------------+------------------+-------------------+
|  Skin views (Razor)  |  API Controllers | Swagger by area   |
+----------------------+------------------+-------------------+
|  EntityController / ReadOnlyEntityController core            |
+------------------+---------------------+--------------------+
| Permissions (EntityAuthorize) | Filters (ApiFilter) | ApiResponse |
+-------------------------------------------------------------+
|            Entities & business logic (XCode ORM + extensions)|
+-------------------------------------------------------------+
| Data access: MySql/SqlServer/SQLite/Oracle/PostgreSQL/DM ... |
+-------------------------------------------------------------+
| NewLife.Core (logging/config/cache/serialization/tracing)     |
+-------------------------------------------------------------+

| Project | Role | | --- | --- | | NewLife.Cube | Core: entity controllers, permissions, menus, field metadata, API. | | NewLife.CubeNC | Legacy MVC / Razor compatibility layer. | | Classic skins | AdminLTE / Metronic / Metronic8 / Tabler / LayuiAdmin / ElementUI / Blazor (separate packages). | | New-generation skins | pnpm workspace: NaiveUI / MUI / Shadcn / ArcoVue / Angular / Vuetify / Svelte / TDesign. | | NewLife.Cube.Swagger | Swagger documents grouped by area. | | CubeDemo / CubeDemoNC | Samples. | | CubeSSO | Unified user center and OAuth server. | | NewLife.Cube.Blazor | Blazor front-end experiment. | | Test / XUnitTest / E2EMvcTest / AotSmoke / WebSmoke | Tests and verification (WebSmoke starts Kestrel and does one HTTP round-trip on non-x64/arm64 instruction sets). |

| Concept | Description | | --- | --- | | EntityController | Configure fields, action buttons, related links, statistics and export in a static constructor. | | Field metadata API | GetFields?kind=List\|Detail\|AddForm\|EditForm drives dynamic front-end generation. | | Menu tree | /Admin/Index/GetMenuTree builds multi-level menus from permissions. | | Permission model | User -> role -> menu (action set). The first registered user becomes administrator and admin is disabled. | | ApiResponse | Standard response wrapper with code / data / page / stat. | | IModule | Startup module that injects services and static assets (themes, Swagger, etc.). | | AI assistant | Global AiController.AiChat endpoint (/Ai/AiChat) plus NAI AiChatService orchestration (session history, tool loop, SSE events); entity controllers expose capabilities through IEntityAiContext. AiInsightHelper remains for data collection (14 sensitive-field blacklists). |

| Scenario | Typical use | | --- | --- | | Enterprise / department admin | Internal management backends and SaaS control panels. | | IoT operations | Device / point / log / alert management and data export. | | Data platform | Rapid publication of standard query APIs. | | Identity center | Unified identity and authorization (SSO / OAuth). | | Operations support | Orders, configuration, scheduling and release management. |

!智能大石头