@allbluecn/admin-app 0.1.0

package/src/lib/i18n/locales/zh/enterprise.json

@@ -0,0 +1,208 @@
+{
+  "page": {
+    "title": "企业治理",
+    "description": "管理企业级许可、审计、SSO 与合规"
+  },
+  "license": {
+    "title": "许可证管理",
+    "status": "许可证状态",
+    "key": "许可证 Key",
+    "issuedAt": "签发时间",
+    "expiresAt": "过期时间",
+    "maxUsers": "最大用户数",
+    "usedUsers": "已用用户数",
+    "features": "功能列表",
+    "active": "有效",
+    "expired": "已过期",
+    "gracePeriod": "宽限期",
+    "pendingActivation": "待激活",
+    "managementTitle": "License 管理",
+    "issue": "签发 License",
+    "count": "共 {{count}} 个 License",
+    "empty": "暂无 License 记录",
+    "customer": "客户",
+    "email": "邮箱",
+    "plan": "方案",
+    "seats": "席位",
+    "activationCount": "激活数",
+    "expiresAtLabel": "过期时间",
+    "revoked": "已吊销",
+    "notYet": "暂未过期",
+    "action": "操作",
+    "detail": "详情",
+    "detailTitle": "License 详情",
+    "revokedToast": "该 License 已被吊销",
+    "revokedSuccess": "License 已吊销",
+    "revoke": "吊销 License",
+    "basicInfo": "基本信息",
+    "customerId": "客户 ID",
+    "issuer": "签发人",
+    "permanent": "永久",
+    "featureAuthorization": "功能授权",
+    "noFeatureAuthorization": "无特殊功能授权",
+    "keyTitle": "License Key（前 20 位）",
+    "activationsTitle": "激活实例（{{count}}）",
+    "instance": "实例",
+    "activatedAt": "激活于 {{date}}",
+    "fingerprint": "指纹 {{fingerprint}}...",
+    "lastActive": "最后活跃 {{date}}",
+    "neverActive": "从未活跃"
+  },
+  "audit": {
+    "title": "审计日志",
+    "event": "事件",
+    "actor": "操作人",
+    "target": "目标",
+    "action": "操作",
+    "timestamp": "时间",
+    "ip": "IP 地址",
+    "userAgent": "User Agent",
+    "result": "结果",
+    "success": "成功",
+    "failure": "失败"
+  },
+  "sso": {
+    "title": "SSO 配置",
+    "provider": "身份提供方",
+    "type": "协议类型",
+    "enabled": "已启用",
+    "disabled": "已停用",
+    "domain": "域名",
+    "entityId": "Entity ID",
+    "metadataUrl": "元数据 URL",
+    "syncEnabled": "用户同步",
+    "justInTime": "即时配置"
+  },
+  "permissions": {
+    "title": "权限管理",
+    "subtitle": "管理工作空间内的角色与权限分配",
+    "role": "角色",
+    "scope": "权限范围",
+    "grant": "授予",
+    "revoke": "撤销",
+    "inherited": "继承",
+    "custom": "自定义",
+    "workspaceLabel": "工作空间：",
+    "empty": "当前工作空间暂无角色，系统将自动装配预置角色",
+    "createRole": "新建角色",
+    "createRoleDesc": "创建一个自定义角色，配置各资源的权限级别",
+    "roleName": "角色名称",
+    "roleNamePlaceholder": "输入角色名称（如 内容编辑）",
+    "permissionsMatrix": "权限矩阵（资源 × 操作）",
+    "level": {
+      "admin": "管理",
+      "write": "写",
+      "read": "读",
+      "none": "无"
+    },
+    "type": {
+      "system": "系统",
+      "custom": "自定义"
+    },
+    "table": {
+      "role": "角色",
+      "type": "类型",
+      "members": "成员数",
+      "permissions": "权限",
+      "actions": "操作"
+    },
+    "action": {
+      "createRole": "新建角色",
+      "delete": "删除",
+      "notAvailable": "不可删除",
+      "viewAssignments": "查看分配"
+    },
+    "assign": "分配用户（{{name}}）",
+    "assignDesc": "搜索用户 ID 并将其分配到该角色",
+    "assignUser": "分配",
+    "unassign": "移除分配",
+    "searchUserPlaceholder": "输入用户 ID",
+    "noAssignments": "暂无用户分配到该角色",
+    "dialog": {
+      "cancel": "取消",
+      "create": "创建",
+      "close": "关闭"
+    },
+    "toast": {
+      "systemRole": "系统预置角色不可删除",
+      "deleted": "角色 {{name}} 已删除",
+      "created": "角色 {{name}} 已创建",
+      "assigned": "用户已分配到角色",
+      "unassigned": "用户已从角色中移除",
+      "nameRequired": "请输入角色名称",
+      "seedDone": "系统预置角色已装配"
+    }
+  },
+  "compliance": {
+    "title": "合规管理",
+    "policy": "策略",
+    "status": "状态",
+    "lastReview": "上次审核",
+    "nextReview": "下次审核",
+    "dataResidency": "数据驻留",
+    "encryption": "加密方式",
+    "retentionDays": "保留天数",
+    "certified": "已认证",
+    "pendingReview": "待审核",
+    "export": {
+      "title": "合规导出任务",
+      "subtitle": "共 {{count}} 个导出/删除任务",
+      "empty": "暂无合规导出任务",
+      "type": {
+        "export": "导出",
+        "delete": "删除"
+      },
+      "scope": {
+        "user": "用户",
+        "workspace": "工作空间"
+      },
+      "status": {
+        "pending": "待处理",
+        "processing": "处理中",
+        "completed": "已完成",
+        "failed": "失败",
+        "expired": "已过期"
+      },
+      "table": {
+        "type": "类型",
+        "scope": "范围",
+        "target": "目标",
+        "status": "状态",
+        "requester": "请求人",
+        "createdAt": "创建时间",
+        "error": "错误信息",
+        "actions": "操作"
+      },
+      "actions": {
+        "execute": "执行",
+        "processing": "执行中...",
+        "download": "下载",
+        "expired": "已过期"
+      },
+      "toast": {
+        "executed": "已提交执行",
+        "executeFailed": "执行失败"
+      }
+    }
+  },
+  "issue": {
+    "title": "签发 License",
+    "enterpriseTitle": "企业版 License 签发",
+    "description": "License 签发依赖 Ed25519 私钥，需要企业版环境。",
+    "alertTitle": "需要企业版环境",
+    "alertDescription": "License 签发功能需要配置 <code>LICENSE_SIGNING_PRIVATE_KEY</code> 环境变量，该私钥仅在企业版部署环境中提供。开源版不支持签发 License。请联系 AllBlue 团队获取企业版 License。",
+    "successTitle": "签发成功",
+    "keyOnceTitle": "请立即复制保存 license key",
+    "keyOnceDescription": "该 key 仅此次展示，关闭页面后无法再次获取完整内容。",
+    "customerName": "客户名称",
+    "customerEmail": "客户邮箱",
+    "customerId": "客户 ID",
+    "plan": "授权方案",
+    "planHint": "输入 Plan 名称（如 enterprise / pro），须与 Plan 表中的 name 字段一致",
+    "seats": "授权席位数",
+    "expiresAt": "到期日期",
+    "expiresAtHint": "留空 = 永久授权",
+    "features": "授权功能",
+    "submit": "签发 license"
+  }
+}

package/src/lib/i18n/server.ts

@@ -0,0 +1,18 @@
+// SPDX-License-Identifier: AGPL-3.0-or-later
+import i18next from 'i18next'
+import { initReactI18next } from 'react-i18next'
+import { resources, fallbackLng, defaultNs, type AppLocale } from './config'
+
+export function createServerI18n(locale: AppLocale) {
+  const i18n = i18next.createInstance()
+  i18n.use(initReactI18next)
+  i18n.init({
+    lng: locale,
+    fallbackLng,
+    defaultNS: defaultNs,
+    resources,
+    interpolation: { escapeValue: false },
+    react: { useSuspense: false },
+  })
+  return i18n
+}

package/src/lib/i18n/types.ts

@@ -0,0 +1,5 @@
+// SPDX-License-Identifier: AGPL-3.0-or-later
+import type { i18n as I18nInstance } from 'i18next'
+import type { AppLocale, NamespaceKey } from './config'
+
+export type { AppLocale, NamespaceKey, I18nInstance }

package/src/lib/monitoring-benchmarks.ts

@@ -0,0 +1,85 @@
+// SPDX-License-Identifier: AGPL-3.0-or-later
+// AllBlue - 理想之海
+// Copyright (C) 2026 AllBlue Contributors
+//
+// This program is free software: you can redistribute it and/or modify
+// it under the terms of the GNU Affero General Public License as published by
+// the Free Software Foundation, either version 3 of the License, or
+// (at your option) any later version.
+//
+// This program is distributed in the hope that it will be useful,
+// but WITHOUT ANY WARRANTY; without even the implied warranty of
+// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+// GNU Affero General Public License for more details.
+//
+// You should have received a copy of the GNU Affero General Public License
+// along with this program. If not, see <https://www.gnu.org/licenses/>.
+
+interface BenchmarkResult {
+  benchmark: number
+  direction: 'above' | 'below'
+  ratio: number
+}
+
+const BENCHMARK_RULES: Array<{
+  match: (path: string) => boolean
+  benchmark: number
+}> = [
+  {
+    match: (path) => path.startsWith('/src/') || path.startsWith('/node_modules/'),
+    benchmark: 10,
+  },
+  {
+    match: (path) => path.includes('/api/observability/health'),
+    benchmark: 50,
+  },
+  {
+    match: (path) => path.startsWith('/api/auth/'),
+    benchmark: 200,
+  },
+  {
+    match: (path) => path.startsWith('/src/routes/'),
+    benchmark: 300,
+  },
+  {
+    match: (path) => path.startsWith('/api/'),
+    benchmark: 200,
+  },
+]
+
+const DEFAULT_BENCHMARK = 200
+
+export function getBenchmark(path: string): number {
+  for (const rule of BENCHMARK_RULES) {
+    if (rule.match(path)) return rule.benchmark
+  }
+  return DEFAULT_BENCHMARK
+}
+
+export function compareDuration(duration: number, benchmark: number): BenchmarkResult {
+  const ratio = duration / benchmark
+  return {
+    benchmark,
+    direction: duration > benchmark ? 'below' : 'above',
+    ratio,
+  }
+}
+
+export function getBenchmarkSource(path: string): string {
+  if (path.startsWith('/src/') || path.startsWith('/node_modules/')) {
+    return 'Cloudflare CDN edge 缓存命中目标'
+  }
+  if (path.includes('/api/observability/health')) {
+    return 'Cloudflare 监控端点 SLA'
+  }
+  if (path.startsWith('/api/auth/')) {
+    return 'Stripe/Google Auth 公开 API 目标'
+  }
+  if (path.startsWith('/src/routes/')) {
+    return 'Google Cloud 服务端渲染页面目标'
+  }
+  if (path.startsWith('/api/')) {
+    return 'Google Cloud API 最佳实践'
+  }
+  return '通用 Web API 行业基准'
+}

package/src/lib/monitoring-descriptions.ts

@@ -0,0 +1,78 @@
+// SPDX-License-Identifier: AGPL-3.0-or-later
+// AllBlue - 理想之海
+// Copyright (C) 2026 AllBlue Contributors
+//
+// This program is free software: you can redistribute it and/or modify
+// it under the terms of the GNU Affero General Public License as published by
+// the Free Software Foundation, either version 3 of the License, or
+// (at your option) any later version.
+//
+// This program is distributed in the hope that it will be useful,
+// but WITHOUT ANY WARRANTY; without even the implied warranty of
+// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+// GNU Affero General Public License for more details.
+//
+// You should have received a copy of the GNU Affero General Public License
+// along with this program. If not, see <https://www.gnu.org/licenses/>.
+
+const METHOD_DESCRIPTIONS: Record<string, string> = {
+  GET: '读取资源',
+  POST: '创建或提交数据',
+  PUT: '全量更新资源',
+  DELETE: '删除资源',
+  PATCH: '局部更新资源',
+  OPTIONS: '获取资源支持的 HTTP 方法',
+  HEAD: '仅获取资源头部信息',
+}
+
+const API_PATH_DESCRIPTIONS: Record<string, string> = {
+  '/api/observability/health': '系统健康检查',
+  '/api/observability/errors': '错误报告查询',
+  '/api/auth/csrf': 'CSRF 令牌获取',
+  '/api/auth/callback/credentials': '凭证登录回调',
+  '/api/auth/signout': '退出登录',
+  '/api/auth/session': '会话状态查询',
+  '/api/auth/signin': '登录页',
+  '/api/sentry': 'Sentry 错误上报隧道',
+  '/api/chat': 'AI 对话接口',
+}
+
+const API_PATH_PREFIX_DESCRIPTIONS: Record<string, string> = {
+  '/api/observability': '可观测性监控',
+  '/api/auth': '认证鉴权',
+  '/api': '后端 API',
+  '/src/': '静态资源',
+  '/node_modules/': '依赖资源',
+}
+
+function describePath(path: string): string {
+  if (API_PATH_DESCRIPTIONS[path]) {
+    return API_PATH_DESCRIPTIONS[path]
+  }
+  for (const [prefix, desc] of Object.entries(API_PATH_PREFIX_DESCRIPTIONS)) {
+    if (path.startsWith(prefix)) {
+      return desc
+    }
+  }
+  return '自定义路由'
+}
+
+function describeMethod(method: string): string {
+  return METHOD_DESCRIPTIONS[method] || method
+}
+
+function describeMetric(metricName: string): string {
+  const path = metricName.replace(/^request\./, '')
+  if (path) {
+    const desc = describePath(path)
+    return `${desc}响应耗时`
+  }
+  return metricName
+}
+
+export {
+  METHOD_DESCRIPTIONS,
+  describePath,
+  describeMethod,
+  describeMetric,
+}

package/src/lib/prisma.ts

@@ -0,0 +1,18 @@
+// SPDX-License-Identifier: AGPL-3.0-or-later
+// AllBlue - 理想之海
+// Copyright (C) 2026 AllBlue Contributors
+//
+// This program is free software: you can redistribute it and/or modify
+// it under the terms of the GNU Affero General Public License as published by
+// the Free Software Foundation, either version 3 of the License, or
+// (at your option) any later version.
+//
+// This program is distributed in the hope that it will be useful,
+// but WITHOUT ANY WARRANTY; without even the implied warranty of
+// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+// GNU Affero General Public License for more details.
+//
+// You should have received a copy of the GNU Affero General Public License
+// along with this program. If not, see <https://www.gnu.org/licenses/>.
+
+export { prisma } from "@allbluecn/database";

package/src/lib/router-context.ts

@@ -0,0 +1,38 @@
+// SPDX-License-Identifier: AGPL-3.0-or-later
+// AllBlue - 理想之海
+// Copyright (C) 2026 AllBlue Contributors
+//
+// This program is free software: you can redistribute it and/or modify
+// it under the terms of the GNU Affero General Public License as published by
+// the Free Software Foundation, either version 3 of the License, or
+// (at your option) any later version.
+//
+// This program is distributed in the hope that it will be useful,
+// but WITHOUT ANY WARRANTY; without even the implied warranty of
+// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+// GNU Affero General Public License for more details.
+//
+// You should have received a copy of the GNU Affero General Public License
+// along with this program. If not, see <https://www.gnu.org/licenses/>.
+
+import type { QueryClient } from '@tanstack/react-query'
+import type { AppLocale } from '@/lib/i18n/config'
+
+export interface RouterContext {
+  queryClient: QueryClient
+  session?: {
+    user: {
+      id: string
+      email: string
+      name: string | null
+      role: 'USER' | 'ADMIN' | 'SUPER_ADMIN'
+      avatarConfig?: Record<string, number> | null
+      bgShape?: string | null
+      bgColor?: string | null
+      aiProvider?: string | null
+      aiModel?: string | null
+      hasAiKey?: boolean | null
+    } | null
+  } | null
+  locale: AppLocale
+}

package/src/lib/session.ts

@@ -0,0 +1,38 @@
+// SPDX-License-Identifier: AGPL-3.0-or-later
+// AllBlue - 理想之海
+// Copyright (C) 2026 AllBlue Contributors
+//
+// This program is free software: you can redistribute it and/or modify
+// it under the terms of the GNU Affero General Public License as published by
+// the Free Software Foundation, either version 3 of the License, or
+// (at your option) any later version.
+//
+// This program is distributed in the hope that it will be useful,
+// but WITHOUT ANY WARRANTY; without even the implied warranty of
+// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+// GNU Affero General Public License for more details.
+//
+// You should have received a copy of the GNU Affero General Public License
+// along with this program. If not, see <https://www.gnu.org/licenses/>.
+
+import { getSession } from 'start-authjs'
+import type { AuthSession } from 'start-authjs'
+import { authConfig } from './auth.config'
+
+export type SessionUser = NonNullable<AuthSession['user']> & {
+  id?: string
+  role?: string | null
+  avatarConfig?: Record<string, number> | null
+  bgShape?: string | null
+  bgColor?: string | null
+  lastActivity?: number
+  adminTimeout?: number
+  planLabel?: 'free' | 'pro'
+}
+
+export type Session = Omit<AuthSession, 'user'> & { user?: SessionUser | null }
+
+export async function getCurrentSession(request?: Request): Promise<Session | null> {
+  if (!request) return null
+  return (await getSession(request, authConfig)) as Session | null
+}

package/src/lib/utils.ts

@@ -0,0 +1,23 @@
+// SPDX-License-Identifier: AGPL-3.0-or-later
+// AllBlue - 理想之海
+// Copyright (C) 2026 AllBlue Contributors
+//
+// This program is free software: you can redistribute it and/or modify
+// it under the terms of the GNU Affero General Public License as published by
+// the Free Software Foundation, either version 3 of the License, or
+// (at your option) any later version.
+//
+// This program is distributed in the hope that it will be useful,
+// but WITHOUT ANY WARRANTY; without even the implied warranty of
+// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+// GNU Affero General Public License for more details.
+//
+// You should have received a copy of the GNU Affero General Public License
+// along with this program. If not, see <https://www.gnu.org/licenses/>.
+
+import { clsx, type ClassValue } from "clsx"
+import { twMerge } from "tailwind-merge"
+
+export function cn(...inputs: ClassValue[]) {
+  return twMerge(clsx(inputs))
+}

package/src/providers/index.tsx

@@ -0,0 +1,45 @@
+// SPDX-License-Identifier: AGPL-3.0-or-later
+// AllBlue - 理想之海
+// Copyright (C) 2026 AllBlue Contributors
+//
+// This program is free software: you can redistribute it and/or modify
+// it under the terms of the GNU Affero General Public License as published by
+// the Free Software Foundation, either version 3 of the License, or
+// (at your option) any later version.
+//
+// This program is distributed in the hope that it will be useful,
+// but WITHOUT ANY WARRANTY; without even the implied warranty of
+// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+// GNU Affero General Public License for more details.
+//
+// You should have received a copy of the GNU Affero General Public License
+// along with this program. If not, see <https://www.gnu.org/licenses/>.
+
+
+import { ThemeProvider } from "next-themes";
+import { type ReactNode } from "react";
+import { I18nextProvider } from "react-i18next";
+import { getClientI18n } from "@/lib/i18n/client";
+import { createServerI18n } from "@/lib/i18n/server";
+import { TooltipProvider } from "@/components/ui/tooltip";
+
+export function Providers({
+  children,
+  locale,
+}: {
+  children: ReactNode;
+  locale?: string;
+}) {
+  const isServer = typeof window === 'undefined'
+  const i18n = isServer && locale ? createServerI18n(locale as 'zh' | 'en') : getClientI18n()
+
+  return (
+    <I18nextProvider i18n={i18n}>
+      <ThemeProvider attribute="class" defaultTheme="light" enableSystem>
+        <TooltipProvider>
+          {children}
+        </TooltipProvider>
+      </ThemeProvider>
+    </I18nextProvider>
+  );
+}