@allbluecn/admin-app 0.1.0

package/src/routes/_nav/users/route.lazy.tsx

@@ -0,0 +1,74 @@
+// SPDX-License-Identifier: AGPL-3.0-or-later
+// AllBlue - 理想之海
+// Copyright (C) 2026 AllBlue Contributors
+//
+// This program is free software: you can redistribute it and/or modify
+// it under the terms of the GNU Affero General Public License as published by
+// the Free Software Foundation, either version 3 of the License, or
+// (at your option) any later version.
+//
+// This program is distributed in the hope that it will be useful,
+// but WITHOUT ANY WARRANTY; without even the implied warranty of
+// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+// GNU Affero General Public License for more details.
+//
+// You should have received a copy of the GNU Affero General Public License
+// along with this program. If not, see <https://www.gnu.org/licenses/>.
+
+import { Outlet, createLazyFileRoute, useMatches } from '@tanstack/react-router'
+import { useState } from 'react'
+import { useTranslation } from 'react-i18next'
+import { UsersTable } from './-components/users-table'
+import { UserFilters } from '@/components/user/user-filters'
+import { UserCreateDialog } from '@/components/user/user-create-dialog'
+import { Button } from '@/components/ui/button'
+import { PlusIcon } from 'lucide-react'
+
+export const Route = createLazyFileRoute('/_nav/users')({
+  pendingComponent: () => (
+    <div className="flex h-64 items-center justify-center">
+      <div className="size-8 animate-spin rounded-full border-2 border-primary border-t-transparent" />
+    </div>
+  ),
+  component: UsersLayout,
+})
+
+function UsersLayout() {
+  const matches = useMatches()
+  const lastMatch = matches[matches.length - 1]
+  const isIndex = lastMatch?.routeId === '/_nav/users'
+
+  if (isIndex) {
+    return <UsersPage />
+  }
+
+  return <Outlet />
+}
+
+function UsersPage() {
+  const { t } = useTranslation('admin-users')
+  const { items, total } = Route.useLoaderData()
+  const { search, role, status } = Route.useSearch()
+  const [createOpen, setCreateOpen] = useState(false)
+
+  return (
+    <div className="space-y-4 p-6">
+      <div className="flex items-center justify-between">
+        <div>
+          <h2 className="text-xl font-bold">{t('page.title')}</h2>
+          <p className="text-sm text-muted-foreground">{t('page.total', { total })}</p>
+        </div>
+        <Button onClick={() => setCreateOpen(true)}>
+          <PlusIcon className="mr-1 h-4 w-4" />
+          {t('page.createUser')}
+        </Button>
+      </div>
+
+      <UserFilters search={search} role={role} status={status} />
+
+      <UsersTable users={items} />
+
+      <UserCreateDialog open={createOpen} onOpenChange={setCreateOpen} />
+    </div>
+  )
+}

package/src/routes/_nav/users/route.tsx

@@ -0,0 +1,43 @@
+// SPDX-License-Identifier: AGPL-3.0-or-later
+// AllBlue - 理想之海
+// Copyright (C) 2026 AllBlue Contributors
+//
+// This program is free software: you can redistribute it and/or modify
+// it under the terms of the GNU Affero General Public License as published by
+// the Free Software Foundation, either version 3 of the License, or
+// (at your option) any later version.
+//
+// This program is distributed in the hope that it will be useful,
+// but WITHOUT ANY WARRANTY; without even the implied warranty of
+// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+// GNU Affero General Public License for more details.
+//
+// You should have received a copy of the GNU Affero General Public License
+// along with this program. If not, see <https://www.gnu.org/licenses/>.
+
+import { createFileRoute } from '@tanstack/react-router'
+import { z } from 'zod'
+import { listUsersFn } from '@/server/serverFns/user/list'
+
+const userSearchSchema = z.object({
+  search: z.string().optional(),
+  role: z.string().optional(),
+  status: z.string().optional(),
+})
+
+export const Route = createFileRoute('/_nav/users')({
+  validateSearch: userSearchSchema,
+  loaderDeps: ({ search }) => search,
+  loader: async ({ deps }) => {
+    const result = await listUsersFn({
+      data: {
+        page: 1,
+        pageSize: 50,
+        search: deps.search,
+        role: deps.role as 'USER' | 'ADMIN' | 'SUPER_ADMIN' | undefined,
+        status: deps.status as 'ACTIVE' | 'INACTIVE' | 'BANNED' | undefined,
+      },
+    })
+    return result
+  },
+})

package/src/routes/api/compliance-download/$jobId.ts

@@ -0,0 +1,35 @@
+import { createFileRoute } from '@tanstack/react-router'
+import { prisma } from '@allbluecn/database'
+import { requireAdmin } from '@/server/auth-helpers'
+
+export const Route = createFileRoute('/api/compliance-download/$jobId')({
+  server: {
+    handlers: {
+      GET: async ({ params, request }) => {
+        try {
+          await requireAdmin()
+        } catch {
+          return Response.json({ ok: false, message: '无权限访问' }, { status: 403 })
+        }
+        const job = await prisma.complianceExport.findUnique({
+          where: { id: params.jobId },
+        })
+        if (!job || job.status !== 'completed') {
+          return Response.json({ ok: false, message: '任务不存在或未完成' }, { status: 404 })
+        }
+        if (!job.content) {
+          return Response.json({ ok: false, message: '下载内容未生成' }, { status: 404 })
+        }
+        if (job.expiresAt && job.expiresAt < new Date()) {
+          return Response.json({ ok: false, message: '下载已过期' }, { status: 410 })
+        }
+        return new Response(job.content, {
+          headers: {
+            'content-type': 'application/json; charset=utf-8',
+            'content-disposition': `attachment; filename="allblue-export-${job.id}.json"`,
+          },
+        })
+      },
+    },
+  },
+})

package/src/routes/api/observability/errors.ts

@@ -0,0 +1,41 @@
+// SPDX-License-Identifier: AGPL-3.0-or-later
+// AllBlue - 理想之海
+// Copyright (C) 2026 AllBlue Contributors
+//
+// This program is free software: you can redistribute it and/or modify
+// it under the terms of the GNU Affero General Public License as published by
+// the Free Software Foundation, either version 3 of the License, or
+// (at your option) any later version.
+//
+// This program is distributed in the hope that it will be useful,
+// but WITHOUT ANY WARRANTY; without even the implied warranty of
+// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+// GNU Affero General Public License for more details.
+//
+// You should have received a copy of the GNU Affero General Public License
+// along with this program. If not, see <https://www.gnu.org/licenses/>.
+
+import { createFileRoute } from '@tanstack/react-router'
+
+export const Route = createFileRoute('/api/observability/errors')({
+  server: {
+    handlers: {
+      GET: async () => {
+        const { prisma } = await import('@allbluecn/database')
+        const errors = await prisma.monitoringErrorReport.findMany({
+          orderBy: { lastSeen: 'desc' },
+          take: 50,
+        })
+        return Response.json({
+          errors: errors.map((e) => ({
+            id: e.id,
+            errorName: e.errorName,
+            errorMessage: e.errorMessage,
+            count: e.count,
+            lastSeen: e.lastSeen.toISOString(),
+          })),
+        })
+      },
+    },
+  },
+})

package/src/routes/api/observability/health.ts

@@ -0,0 +1,30 @@
+// SPDX-License-Identifier: AGPL-3.0-or-later
+// AllBlue - 理想之海
+// Copyright (C) 2026 AllBlue Contributors
+//
+// This program is free software: you can redistribute it and/or modify
+// it under the terms of the GNU Affero General Public License as published by
+// the Free Software Foundation, either version 3 of the License, or
+// (at your option) any later version.
+//
+// This program is distributed in the hope that it will be useful,
+// but WITHOUT ANY WARRANTY; without even the implied warranty of
+// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+// GNU Affero General Public License for more details.
+//
+// You should have received a copy of the GNU Affero General Public License
+// along with this program. If not, see <https://www.gnu.org/licenses/>.
+
+import { createFileRoute } from '@tanstack/react-router'
+import { performHealthCheck } from '@/server/observability'
+
+export const Route = createFileRoute('/api/observability/health')({
+  server: {
+    handlers: {
+      GET: async () => {
+        const result = await performHealthCheck()
+        return Response.json(result)
+      },
+    },
+  },
+})

package/src/routes/api.auth.$.ts

@@ -0,0 +1,31 @@
+// SPDX-License-Identifier: AGPL-3.0-or-later
+// AllBlue - 理想之海
+// Copyright (C) 2026 AllBlue Contributors
+//
+// This program is free software: you can redistribute it and/or modify
+// it under the terms of the GNU Affero General Public License as published by
+// the Free Software Foundation, either version 3 of the License, or
+// (at your option) any later version.
+//
+// This program is distributed in the hope that it will be useful,
+// but WITHOUT ANY WARRANTY; without even the implied warranty of
+// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+// GNU Affero General Public License for more details.
+//
+// You should have received a copy of the GNU Affero General Public License
+// along with this program. If not, see <https://www.gnu.org/licenses/>.
+
+import { createFileRoute } from '@tanstack/react-router'
+import { authConfig } from '@/lib/auth.config'
+import { StartAuthJS } from 'start-authjs'
+
+const authHandlers = StartAuthJS(authConfig)
+
+export const Route = createFileRoute('/api/auth/$')({
+  server: {
+    handlers: {
+      GET: ({ request }) => authHandlers.GET({ request }),
+      POST: ({ request }) => authHandlers.POST({ request }),
+    },
+  },
+})

package/src/routes/api.sentry-test.ts

@@ -0,0 +1,33 @@
+// SPDX-License-Identifier: AGPL-3.0-or-later
+// AllBlue - 理想之海
+// Copyright (C) 2026 AllBlue Contributors
+//
+// This program is free software: you can redistribute it and/or modify
+// it under the terms of the GNU Affero General Public License as published by
+// the Free Software Foundation, either version 3 of the License, or
+// (at your option) any later version.
+//
+// This program is distributed in the hope that it will be useful,
+// but WITHOUT ANY WARRANTY; without even the implied warranty of
+// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+// GNU Affero General Public License for more details.
+//
+// You should have received a copy of the GNU Affero General Public License
+// along with this program. If not, see <https://www.gnu.org/licenses/>.
+
+import { createFileRoute } from '@tanstack/react-router'
+
+export const Route = createFileRoute('/api/sentry-test')({
+  server: {
+    handlers: {
+      GET: () => {
+        return new Response(
+          JSON.stringify({ message: 'Sentry test endpoint' }),
+          {
+            headers: { 'Content-Type': 'application/json' },
+          },
+        )
+      },
+    },
+  },
+})

package/src/routes/index/route.lazy.tsx

@@ -0,0 +1,22 @@
+// SPDX-License-Identifier: AGPL-3.0-or-later
+// AllBlue - 理想之海
+// Copyright (C) 2026 AllBlue Contributors
+//
+// This program is free software: you can redistribute it and/or modify
+// it under the terms of the GNU Affero General Public License as published by
+// the Free Software Foundation, either version 3 of the License, or
+// (at your option) any later version.
+//
+// This program is distributed in the hope that it will be useful,
+// but WITHOUT ANY WARRANTY; without even the implied warranty of
+// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+// GNU Affero General Public License for more details.
+//
+// You should have received a copy of the GNU Affero General Public License
+// along with this program. If not, see <https://www.gnu.org/licenses/>.
+
+import { createLazyFileRoute } from '@tanstack/react-router'
+
+export const Route = createLazyFileRoute('/')({
+  component: () => null,
+})

package/src/routes/index/route.tsx

@@ -0,0 +1,24 @@
+// SPDX-License-Identifier: AGPL-3.0-or-later
+// AllBlue - 理想之海
+// Copyright (C) 2026 AllBlue Contributors
+//
+// This program is free software: you can redistribute it and/or modify
+// it under the terms of the GNU Affero General Public License as published by
+// the Free Software Foundation, either version 3 of the License, or
+// (at your option) any later version.
+//
+// This program is distributed in the hope that it will be useful,
+// but WITHOUT ANY WARRANTY; without even the implied warranty of
+// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+// GNU Affero General Public License for more details.
+//
+// You should have received a copy of the GNU Affero General Public License
+// along with this program. If not, see <https://www.gnu.org/licenses/>.
+
+import { createFileRoute, redirect } from '@tanstack/react-router'
+
+export const Route = createFileRoute('/')({
+  beforeLoad: () => {
+    throw redirect({ to: '/dashboard', replace: true })
+  },
+})

package/src/routes/login/route.lazy.tsx

@@ -0,0 +1,46 @@
+// SPDX-License-Identifier: AGPL-3.0-or-later
+// AllBlue - 理想之海
+// Copyright (C) 2026 AllBlue Contributors
+//
+// This program is free software: you can redistribute it and/or modify
+// it under the terms of the GNU Affero General Public License as published by
+// the Free Software Foundation, either version 3 of the License, or
+// (at your option) any later version.
+//
+// This program is distributed in the hope that it will be useful,
+// but WITHOUT ANY WARRANTY; without even the implied warranty of
+// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+// GNU Affero General Public License for more details.
+//
+// You should have received a copy of the GNU Affero General Public License
+// along with this program. If not, see <https://www.gnu.org/licenses/>.
+
+import { createLazyFileRoute } from '@tanstack/react-router'
+import AdminLoginForm from '@/components/auth/admin-login-form'
+import { useSession } from '@/lib/auth-client'
+import type { AvatarConfig, ShapeType } from '@allbluecn/kernel'
+
+export const Route = createLazyFileRoute('/login')({
+  component: AdminLoginPage,
+})
+
+function AdminLoginPage() {
+  const context = Route.useRouteContext()
+  const ssrSession = context?.session as any
+  const { data: clientSession } = useSession()
+  const session = clientSession || ssrSession
+  const user = session?.user
+    ? {
+        name: session.user.name,
+        email: session.user.email,
+        avatarConfig: (session.user as any).avatarConfig as AvatarConfig | undefined,
+        bgShape: (session.user as any).bgShape as string | undefined,
+        bgColor: (session.user as any).bgColor as string | undefined,
+      }
+    : null
+  const role = (session?.user as any)?.role
+  const isAdmin = role === 'ADMIN' || role === 'SUPER_ADMIN'
+  return (
+    <AdminLoginForm user={user} isAdmin={isAdmin} />
+  )
+}

package/src/routes/login/route.tsx

@@ -0,0 +1,28 @@
+// SPDX-License-Identifier: AGPL-3.0-or-later
+// AllBlue - 理想之海
+// Copyright (C) 2026 AllBlue Contributors
+//
+// This program is free software: you can redistribute it and/or modify
+// it under the terms of the GNU Affero General Public License as published by
+// the Free Software Foundation, either version 3 of the License, or
+// (at your option) any later version.
+//
+// This program is distributed in the hope that it will be useful,
+// but WITHOUT ANY WARRANTY; without even the implied warranty of
+// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+// GNU Affero General Public License for more details.
+//
+// You should have received a copy of the GNU Affero General Public License
+// along with this program. If not, see <https://www.gnu.org/licenses/>.
+
+import { createFileRoute, redirect } from '@tanstack/react-router'
+import { checkAdminExistsFn } from '@/server/serverFns/auth/setup'
+
+export const Route = createFileRoute('/login')({
+  beforeLoad: async () => {
+    const result = await checkAdminExistsFn().catch(() => null)
+    if (!result?.hasAdmin) {
+      throw redirect({ to: '/setup' })
+    }
+  },
+})

package/src/routes/sentry-tunnel.ts

@@ -0,0 +1,61 @@
+// SPDX-License-Identifier: AGPL-3.0-or-later
+// AllBlue - 理想之海
+// Copyright (C) 2026 AllBlue Contributors
+//
+// This program is free software: you can redistribute it and/or modify
+// it under the terms of the GNU Affero General Public License as published by
+// the Free Software Foundation, either version 3 of the License, or
+// (at your option) any later version.
+//
+// This program is distributed in the hope that it will be useful,
+// but WITHOUT ANY WARRANTY; without even the implied warranty of
+// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+// GNU Affero General Public License for more details.
+//
+// You should have received a copy of the GNU Affero General Public License
+// along with this program. If not, see <https://www.gnu.org/licenses/>.
+
+import { createFileRoute } from '@tanstack/react-router'
+
+const SENTRY_INGEST = 'https://sentry.io/api/{dsn_key}/envelope/'
+
+async function getSentryDsn(): Promise<string | null> {
+  const { prisma } = await import('@allbluecn/database')
+  const setting = await prisma.systemSetting.findUnique({
+    where: { key: 'dsn' },
+  })
+  return setting?.value || null
+}
+
+export const Route = createFileRoute('/sentry-tunnel')({
+  server: {
+    handlers: {
+      POST: async ({ request }) => {
+        const dsn = await getSentryDsn()
+        if (!dsn) {
+          return new Response('Sentry not configured', { status: 200 })
+        }
+
+        const parsed = new URL(dsn)
+        const projectId = parsed.pathname.replace('/', '')
+        const ingestUrl = `https://${parsed.hostname}/api/${projectId}/envelope/`
+
+        const envelope = await request.arrayBuffer()
+
+        const upstream = await fetch(ingestUrl, {
+          method: 'POST',
+          headers: {
+            'Content-Type': 'application/x-sentry-envelope',
+          },
+          body: envelope,
+        })
+
+        if (!upstream.ok) {
+          return new Response('Upstream error', { status: upstream.status })
+        }
+
+        return new Response(null, { status: 204 })
+      },
+    },
+  },
+})

package/src/routes/setup/route.lazy.tsx

@@ -0,0 +1,94 @@
+// SPDX-License-Identifier: AGPL-3.0-or-later
+// AllBlue - 理想之海
+// Copyright (C) 2026 AllBlue Contributors
+//
+// This program is free software: you can redistribute it and/or modify
+// it under the terms of the GNU Affero General Public License as published by
+// the Free Software Foundation, either version 3 of the License, or
+// (at your option) any later version.
+//
+// This program is distributed in the hope that it will be useful,
+// but WITHOUT ANY WARRANTY; without even the implied warranty of
+// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+// GNU Affero General Public License for more details.
+//
+// You should have received a copy of the GNU Affero General Public License
+// along with this program. If not, see <https://www.gnu.org/licenses/>.
+
+import { createLazyFileRoute, useNavigate } from '@tanstack/react-router'
+import { useState } from 'react'
+import { useTranslation } from 'react-i18next'
+import { toast } from '@/components/ui/sonner'
+import { Loader2, ShieldCheck, User, Mail, Database } from 'lucide-react'
+import { AuthLayout, AuthLayoutLeft, AuthLayoutRight } from '@/components/auth/auth-layout'
+import { AuthHeader } from '@/components/auth/auth-header'
+import { AuthBrandPanel } from '@/components/auth/auth-brand-panel'
+import { PasswordInput } from '@/components/auth/password-input'
+import { IconInput } from '@/components/auth/icon-input'
+import { Button } from '@/components/ui/button'
+import { setupAdminFn } from '@/server/serverFns/auth/setup'
+
+export const Route = createLazyFileRoute('/setup')({
+  component: SetupPage,
+})
+
+function SetupPage() {
+  const { t } = useTranslation('common')
+  const navigate = useNavigate()
+  const [username, setUsername] = useState('')
+  const [email, setEmail] = useState('')
+  const [password, setPassword] = useState('')
+  const [confirmPassword, setConfirmPassword] = useState('')
+  const [loading, setLoading] = useState(false)
+
+  const setupBrandFeatures = [
+    { icon: ShieldCheck, label: t('setup.brandFeatures.superAdmin.label'), desc: t('setup.brandFeatures.superAdmin.desc') },
+    { icon: Database, label: t('setup.brandFeatures.dataMgmt.label'), desc: t('setup.brandFeatures.dataMgmt.desc') },
+    { icon: User, label: t('setup.brandFeatures.accountSecurity.label'), desc: t('setup.brandFeatures.accountSecurity.desc') },
+  ]
+
+  const handleSubmit = async (e: React.FormEvent) => {
+    e.preventDefault()
+
+    if (!username || !email || !password) {
+      toast.error(t('setup.validation.fillAllFields'))
+      return
+    }
+    if (password !== confirmPassword) {
+      toast.error(t('setup.validation.passwordMismatch'))
+      return
+    }
+
+    setLoading(true)
+    try {
+      await setupAdminFn({ data: { username, email, password } })
+      toast.success(t('setup.success'))
+      setTimeout(() => navigate({ to: '/login' }), 500)
+    } catch (err) {
+      toast.error(err instanceof Error ? err.message : t('setup.error'))
+    } finally {
+      setLoading(false)
+    }
+  }
+
+  return (
+    <AuthLayout>
+      <AuthLayoutLeft>
+        <AuthHeader title={t('setup.form.title')} subtitle={t('setup.form.subtitle')} />
+        <form onSubmit={handleSubmit} className="space-y-6">
+          <IconInput icon={User} label={t('setup.form.username.label')} placeholder={t('setup.form.username.placeholder')} value={username} onChange={(e) => setUsername(e.target.value)} />
+          <IconInput icon={Mail} label={t('setup.form.email.label')} placeholder={t('setup.form.email.placeholder')} value={email} onChange={(e) => setEmail(e.target.value)} />
+          <PasswordInput label={t('setup.form.password.label')} placeholder={t('setup.form.password.placeholder')} value={password} onChange={(e) => setPassword(e.target.value)} />
+          <PasswordInput label={t('setup.form.confirmPassword.label')} placeholder={t('setup.form.confirmPassword.placeholder')} value={confirmPassword} onChange={(e) => setConfirmPassword(e.target.value)} />
+          <Button type="submit" className="w-full" disabled={loading}>
+            {loading && <Loader2 className="mr-2 h-4 w-4 animate-spin" />}
+            {loading ? t('setup.form.loading') : t('setup.form.submit')}
+          </Button>
+        </form>
+      </AuthLayoutLeft>
+      <AuthLayoutRight>
+        <AuthBrandPanel title={t('setup.brand.title')} subtitle={t('setup.brand.subtitle')} features={setupBrandFeatures} />
+      </AuthLayoutRight>
+    </AuthLayout>
+  )
+}

package/src/routes/setup/route.tsx

@@ -0,0 +1,28 @@
+// SPDX-License-Identifier: AGPL-3.0-or-later
+// AllBlue - 理想之海
+// Copyright (C) 2026 AllBlue Contributors
+//
+// This program is free software: you can redistribute it and/or modify
+// it under the terms of the GNU Affero General Public License as published by
+// the Free Software Foundation, either version 3 of the License, or
+// (at your option) any later version.
+//
+// This program is distributed in the hope that it will be useful,
+// but WITHOUT ANY WARRANTY; without even the implied warranty of
+// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+// GNU Affero General Public License for more details.
+//
+// You should have received a copy of the GNU Affero General Public License
+// along with this program. If not, see <https://www.gnu.org/licenses/>.
+
+import { createFileRoute, redirect } from '@tanstack/react-router'
+import { checkAdminExistsFn } from '@/server/serverFns/auth/setup'
+
+export const Route = createFileRoute('/setup')({
+  beforeLoad: async () => {
+    const result = await checkAdminExistsFn().catch(() => null)
+    if (result?.hasAdmin) {
+      throw redirect({ to: '/login' })
+    }
+  },
+})