@allbluecn/admin-app 0.1.0

package/src/server/serverFns/anyhub/market.ts

@@ -0,0 +1,64 @@
+// SPDX-License-Identifier: AGPL-3.0-or-later
+// AllBlue - 理想之海
+// Copyright (C) 2026 AllBlue Contributors
+//
+// This program is free software: you can redistribute it and/or modify
+// it under the terms of the GNU Affero General Public License as published by
+// the Free Software Foundation, either version 3 of the License, or
+// (at your option) any later version.
+//
+// This program is distributed in the hope that it will be useful,
+// but WITHOUT ANY WARRANTY; without even the implied warranty of
+// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+// GNU Affero General Public License for more details.
+//
+// You should have received a copy of the GNU Affero General Public License
+// along with this program. If not, see <https://www.gnu.org/licenses/>.
+
+import { createServerFn } from '@tanstack/react-start'
+import { z } from 'zod'
+import { prisma } from '@allbluecn/database'
+
+const listInput = z.object({
+  page: z.number().default(1),
+  pageSize: z.number().default(20),
+  search: z.string().optional(),
+  category: z.string().optional(),
+})
+
+export const listMarketAppsFn = createServerFn({ method: 'GET' })
+  .validator(listInput)
+  .handler(async ({ data }) => {
+    const { page, pageSize, search, category } = data
+    const where: any = {}
+    if (search) where.name = { contains: search, mode: 'insensitive' }
+    if (category) where.category = category
+    const [items, total] = await Promise.all([
+      prisma.anyHubMarketApp.findMany({ where, skip: (page - 1) * pageSize, take: pageSize }),
+      prisma.anyHubMarketApp.count({ where }),
+    ])
+    return { items, total }
+  })
+
+const updateInput = z.object({
+  id: z.string(),
+  name: z.string().optional(),
+  description: z.string().optional(),
+  category: z.string().optional(),
+  iconUrl: z.string().optional(),
+  isPublished: z.boolean().optional(),
+})
+
+export const updateMarketAppFn = createServerFn({ method: 'POST' })
+  .validator(updateInput)
+  .handler(async ({ data }) => {
+    const { id, ...update } = data
+    return prisma.anyHubMarketApp.update({ where: { id }, data: update })
+  })
+
+export const deleteMarketAppFn = createServerFn({ method: 'POST' })
+  .validator(z.object({ id: z.string() }))
+  .handler(async ({ data }) => {
+    await prisma.anyHubMarketApp.delete({ where: { id: data.id } })
+    return { success: true }
+  })

package/src/server/serverFns/audit.ts

@@ -0,0 +1,57 @@
+// SPDX-License-Identifier: AGPL-3.0-or-later
+// AllBlue - 理想之海
+// Copyright (C) 2026 AllBlue Contributors
+//
+// This program is free software: you can redistribute it and/or modify
+// it under the terms of the GNU Affero General Public License as published by
+// the Free Software Foundation, either version 3 of the License, or
+// (at your option) any later version.
+//
+// This program is distributed in the hope that it will be useful,
+// but WITHOUT ANY WARRANTY; without even the implied warranty of
+// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+// GNU Affero General Public License for more details.
+//
+// You should have received a copy of the GNU Affero General Public License
+// along with this program. If not, see <https://www.gnu.org/licenses/>.
+
+import { createServerFn } from '@tanstack/react-start'
+import { z } from 'zod'
+import { prisma } from '@allbluecn/database'
+import { requireAdmin } from '@/server/auth-helpers'
+import { requireFeature } from '@/server/entitlements'
+
+const querySchema = z.object({
+  workspaceId: z.string().optional(),
+  userId: z.string().optional(),
+  action: z.string().optional(),
+  startDate: z.coerce.date().optional(),
+  endDate: z.coerce.date().optional(),
+  page: z.number().default(1),
+  pageSize: z.number().default(50),
+})
+
+export const queryAuditLogsFn = createServerFn({ method: 'GET' })
+  .validator(querySchema)
+  .handler(async ({ data }) => {
+    await requireAdmin()
+    await requireFeature(undefined, 'audit')
+    const where: any = {
+      ...(data.workspaceId && { workspaceId: data.workspaceId }),
+      ...(data.userId && { userId: data.userId }),
+      ...(data.action && { action: { contains: data.action } }),
+      ...(data.startDate && data.endDate && {
+        createdAt: { gte: data.startDate, lte: data.endDate },
+      }),
+    }
+    const [entries, total] = await Promise.all([
+      prisma.auditLog.findMany({
+        where,
+        orderBy: { createdAt: 'desc' },
+        skip: (data.page - 1) * data.pageSize,
+        take: data.pageSize,
+      }),
+      prisma.auditLog.count({ where }),
+    ])
+    return { entries, total }
+  })

package/src/server/serverFns/auth/session.ts

@@ -0,0 +1,26 @@
+// SPDX-License-Identifier: AGPL-3.0-or-later
+// AllBlue - 理想之海
+// Copyright (C) 2026 AllBlue Contributors
+//
+// This program is free software: you can redistribute it and/or modify
+// it under the terms of the GNU Affero General Public License as published by
+// the Free Software Foundation, either version 3 of the License, or
+// (at your option) any later version.
+//
+// This program is distributed in the hope that it will be useful,
+// but WITHOUT ANY WARRANTY; without even the implied warranty of
+// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+// GNU Affero General Public License for more details.
+//
+// You should have received a copy of the GNU Affero General Public License
+// along with this program. If not, see <https://www.gnu.org/licenses/>.
+
+import { createServerFn } from '@tanstack/react-start'
+import { getRequest } from '@tanstack/react-start/server'
+import { getCurrentSession } from '@/lib/session'
+
+export const getSessionFn = createServerFn({ method: 'GET' })
+  .handler(async () => {
+    const request = getRequest()
+    return getCurrentSession(request)
+  })

package/src/server/serverFns/auth/setup.ts

@@ -0,0 +1,73 @@
+// SPDX-License-Identifier: AGPL-3.0-or-later
+// AllBlue - 理想之海
+// Copyright (C) 2026 AllBlue Contributors
+//
+// This program is free software: you can redistribute it and/or modify
+// it under the terms of the GNU Affero General Public License as published by
+// the Free Software Foundation, either version 3 of the License, or
+// (at your option) any later version.
+//
+// This program is distributed in the hope that it will be useful,
+// but WITHOUT ANY WARRANTY; without even the implied warranty of
+// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+// GNU Affero General Public License for more details.
+//
+// You should have received a copy of the GNU Affero General Public License
+// along with this program. If not, see <https://www.gnu.org/licenses/>.
+
+import { createServerFn } from '@tanstack/react-start'
+import { z } from 'zod'
+import { prisma } from '@allbluecn/database'
+import bcrypt from 'bcryptjs'
+import { getRandomConfig, presetBgColors } from '@/components/settings/avatar/avatar-config'
+
+function pickBgColor(seed: string) {
+  let hash = 0
+  for (let i = 0; i < seed.length; i++) hash = seed.charCodeAt(i) + ((hash << 5) - hash)
+  return presetBgColors[Math.abs(hash) % presetBgColors.length]
+}
+
+export const checkAdminExistsFn = createServerFn({ method: 'GET' }).handler(async () => {
+  const count = await prisma.user.count({
+    where: { role: { in: ['ADMIN', 'SUPER_ADMIN'] } },
+  })
+  return { hasAdmin: count > 0 }
+})
+
+const setupSchema = z.object({
+  username: z.string().min(3, '用户名至少 3 个字符').max(20, '用户名最多 20 个字符'),
+  email: z.string().email('请输入有效的邮箱地址'),
+  password: z.string().min(8, '密码至少 8 个字符'),
+})
+
+export const setupAdminFn = createServerFn({ method: 'POST' })
+  .validator(setupSchema)
+  .handler(async ({ data }) => {
+    const count = await prisma.user.count({
+      where: { role: 'SUPER_ADMIN' },
+    })
+    if (count > 0) throw new Error('系统已初始化，请联系管理员')
+
+    const exists = await prisma.user.findFirst({
+      where: { OR: [{ email: data.email }, { username: data.username }] },
+      select: { id: true },
+    })
+    if (exists) throw new Error('用户名或邮箱已存在')
+
+    const hashedPassword = await bcrypt.hash(data.password, 12)
+
+    const user = await prisma.user.create({
+      data: {
+        username: data.username,
+        email: data.email,
+        password: hashedPassword,
+        role: 'SUPER_ADMIN',
+        status: 'ACTIVE',
+        avatarConfig: getRandomConfig() as object,
+        bgShape: 'square',
+        bgColor: pickBgColor(data.username),
+      },
+    })
+
+    return { id: user.id, username: user.username, email: user.email }
+  })

package/src/server/serverFns/compliance.ts

@@ -0,0 +1,85 @@
+// SPDX-License-Identifier: AGPL-3.0-or-later
+// AllBlue - 理想之海
+// Copyright (C) 2026 AllBlue Contributors
+//
+// This program is free software: you can redistribute it and/or modify
+// it under the terms of the GNU Affero General Public License as published by
+// the Free Software Foundation, either version 3 of the License, or
+// (at your option) any later version.
+//
+// This program is distributed in the hope that it will be useful,
+// but WITHOUT ANY WARRANTY; without even the implied warranty of
+// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+// GNU Affero General Public License for more details.
+//
+// You should have received a copy of the GNU Affero General Public License
+// along with this program. If not, see <https://www.gnu.org/licenses/>.
+
+import { createServerFn } from '@tanstack/react-start'
+import { getRequest } from '@tanstack/react-start/server'
+import { z } from 'zod'
+import { prisma } from '@allbluecn/database'
+import { getProService } from '@/server/pro-services'
+import { requireAdmin } from '@/server/auth-helpers'
+import { requireFeature } from '@/server/entitlements'
+
+export const listComplianceExportsFn = createServerFn({ method: 'GET' })
+  .validator(z.object({ page: z.number().default(1), pageSize: z.number().default(20) }))
+  .handler(async ({ data }) => {
+    const request = getRequest()
+    await requireAdmin()
+    await requireFeature(request, 'compliance')
+    const compliance = getProService('compliance')
+    if (compliance) {
+      return compliance.listJobs({ page: data.page, pageSize: data.pageSize })
+    }
+    const [items, total] = await Promise.all([
+      prisma.complianceExport.findMany({
+        orderBy: { createdAt: 'desc' },
+        skip: (data.page - 1) * data.pageSize,
+        take: data.pageSize,
+      }),
+      prisma.complianceExport.count(),
+    ])
+    return { items, total }
+  })
+
+export const createComplianceExportFn = createServerFn({ method: 'POST' })
+  .validator(
+    z.object({
+      type: z.enum(['export', 'delete']),
+      scope: z.enum(['user', 'workspace']),
+      targetId: z.string(),
+      requestedBy: z.string().optional(),
+    }),
+  )
+  .handler(async ({ data }) => {
+    const request = getRequest()
+    await requireAdmin()
+    await requireFeature(request, 'compliance')
+    const compliance = getProService('compliance')
+    if (compliance) {
+      if (data.type === 'export') {
+        return compliance.createExportJob(data.scope, data.targetId, data.requestedBy)
+      }
+      return compliance.createDeleteJob(data.scope, data.targetId, data.requestedBy)
+    }
+    return prisma.complianceExport.create({ data })
+  })
+
+export const executeComplianceJobFn = createServerFn({ method: 'POST' })
+  .validator(z.object({ jobId: z.string() }))
+  .handler(async ({ data }) => {
+    const request = getRequest()
+    await requireAdmin()
+    await requireFeature(request, 'compliance')
+    const job = await prisma.complianceExport.findUnique({
+      where: { id: data.jobId },
+    })
+    if (!job || job.status !== 'pending') {
+      throw new Error('任务不存在或状态不允许执行')
+    }
+    const compliance = getProService('compliance')
+    if (!compliance) throw new Error('合规模块不可用')
+    return compliance.processJob(data.jobId)
+  })

package/src/server/serverFns/components/import.ts

@@ -0,0 +1,197 @@
+// SPDX-License-Identifier: AGPL-3.0-or-later
+// AllBlue - 理想之海
+// Copyright (C) 2026 AllBlue Contributors
+//
+// This program is free software: you can redistribute it and/or modify
+// it under the terms of the GNU Affero General Public License as published by
+// the Free Software Foundation, either version 3 of the License, or
+// (at your option) any later version.
+//
+// This program is distributed in the hope that it will be useful,
+// but WITHOUT ANY WARRANTY; without even the implied warranty of
+// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+// GNU Affero General Public License for more details.
+//
+// You should have received a copy of the GNU Affero General Public License
+// along with this program. If not, see <https://www.gnu.org/licenses/>.
+
+import { createServerFn } from '@tanstack/react-start'
+import { z } from 'zod'
+import { prisma } from '@allbluecn/database'
+import { execSync } from 'node:child_process'
+import { writeFileSync, mkdirSync, existsSync, readFileSync } from 'node:fs'
+import { resolve, join } from 'node:path'
+
+const PACKAGE_NAME_RE = /^(@[a-z0-9][\w.-]*\/)?[a-z0-9][\w.-]*$/i
+const COMPONENT_KEY_RE = /^[a-z0-9]+(?:-[a-z0-9]+)*$/
+
+const importInput = z.object({
+  source: z.enum(['npm', 'local']).default('npm'),
+  packageName: z.string().regex(PACKAGE_NAME_RE, '无效的 npm 包名').optional(),
+  importPath: z.string().min(1, '不能为空').optional(),
+  exportName: z.string().default('default'),
+  componentKey: z.string().regex(COMPONENT_KEY_RE, '标识只能含小写字母、数字、连字符'),
+  displayName: z.string().min(1, '请输入显示名称'),
+  category: z.enum(['基础组件', '内容区块', '页面模版']),
+  type: z.enum(['component', 'block', 'template']).default('component'),
+  defaultWidth: z.number().int().positive().default(200),
+  defaultHeight: z.number().int().positive().default(40),
+})
+
+function toPascalCase(s: string): string {
+  return s
+    .split('-')
+    .map((w) => w.charAt(0).toUpperCase() + w.slice(1))
+    .join('')
+}
+
+const COMPONENT_SEARCH_DIRS = [
+  'components/magicui',
+  'components/ui',
+  'components/hextaui',
+  'components/blocks-so',
+  'components',
+]
+
+function detectExportName(filePath: string, fallback: string): string {
+  const content = readFileSync(filePath, 'utf-8')
+  if (/export\s+default\b/.test(content)) return 'default'
+  const m = content.match(/export\s+(?:function|const|class)\s+(\w+)/)
+  if (m) return m[1]!
+  return fallback
+}
+
+export const importComponentFn = createServerFn({ method: 'POST' })
+  .validator(importInput)
+  .handler(async ({ data }) => {
+    const {
+      source,
+      packageName,
+      importPath,
+      exportName,
+      componentKey,
+      displayName,
+      category,
+      type,
+      defaultWidth,
+      defaultHeight,
+    } = data
+
+    const monorepoRoot = resolve(process.cwd(), '../..')
+    const pascalName = toPascalCase(componentKey)
+
+    let wrapperDir: string
+    let importSource: string
+    let dbSource: string
+    let actualExportName = exportName
+
+    if (source === 'npm') {
+      if (!packageName) throw new Error('npm 包名不能为空')
+      const prototypeDir = join(monorepoRoot, 'packages/prototype')
+      try {
+        execSync(`pnpm add ${packageName}`, {
+          cwd: prototypeDir,
+          stdio: 'pipe',
+          timeout: 60000,
+        })
+      } catch {
+        throw new Error(`安装包 "${packageName}" 失败，请检查包名或网络`)
+      }
+      wrapperDir = join(prototypeDir, 'src/imported')
+      importSource = packageName
+      dbSource = 'npm'
+    } else {
+      if (!importPath) throw new Error('路径不能为空')
+      const webDir = join(monorepoRoot, 'apps/web')
+      const webSrc = join(webDir, 'src')
+      let componentFilePath: string | null = null
+
+      if (importPath.startsWith('@/')) {
+        importSource = importPath
+        const relPath = importPath.slice(2)
+        const tryPath = join(webSrc, `${relPath}.tsx`)
+        if (existsSync(tryPath)) componentFilePath = tryPath
+      } else {
+        const compName = importPath.split('/').pop() ?? importPath
+        try {
+          execSync(`pnpm dlx shadcn@latest add ${importPath} --yes`, {
+            cwd: webDir,
+            stdio: 'pipe',
+            timeout: 120000,
+          })
+        } catch {
+          throw new Error(`shadcn add "${importPath}" 失败，请检查 registry 路径或网络`)
+        }
+        let found: string | null = null
+        for (const dir of COMPONENT_SEARCH_DIRS) {
+          const fp = join(webSrc, dir, `${compName}.tsx`)
+          if (existsSync(fp)) {
+            found = `@/${dir}/${compName}`
+            componentFilePath = fp
+            break
+          }
+        }
+        if (!found || !componentFilePath) {
+          throw new Error(`组件已安装但未在约定目录找到 "${compName}.tsx"，请手动指定 @/ 路径`)
+        }
+        importSource = found
+      }
+
+      // 自动检测组件的导出方式（default vs 具名）
+      if (componentFilePath) {
+        actualExportName = detectExportName(componentFilePath, exportName)
+      }
+
+      wrapperDir = join(webSrc, 'components/prd/prototype/imported')
+      dbSource = 'custom'
+    }
+
+    mkdirSync(wrapperDir, { recursive: true })
+
+    const importStmt =
+      actualExportName === 'default'
+        ? `import Comp from "${importSource}";`
+        : `import { ${actualExportName} as Comp } from "${importSource}";`
+
+    const wrapperContent = `// AUTO-GENERATED — do not edit manually
+import React from "react";
+${importStmt}
+
+export function Imported${pascalName}({ props, style }: { props?: Record<string, any>; style?: Record<string, any> }) {
+  return <Comp {...props} style={style} />;
+}
+
+export const config = {
+  type: "${componentKey}",
+  name: "${displayName}",
+  source: "${dbSource}" as const,
+  category: "${category}" as const,
+  defaultWidth: ${defaultWidth},
+  defaultHeight: ${defaultHeight},
+  defaultProps: {} as Record<string, any>,
+  defaultStyle: {} as Record<string, any>,
+  component: Imported${pascalName},
+};
+`
+    writeFileSync(join(wrapperDir, `${componentKey}.tsx`), wrapperContent, 'utf-8')
+
+    const component = await prisma.component.create({
+      data: {
+        name: displayName,
+        type,
+        category,
+        prototypeKey: componentKey,
+        source: dbSource,
+        sourceId: source === 'npm' ? packageName : importPath,
+        config: {},
+        defaultProps: {},
+        defaultStyle: {},
+      },
+    })
+
+    return {
+      success: true,
+      componentId: component.id,
+      message: `导入成功（导出: ${actualExportName}），请重启 dev server 使组件生效`,
+    }
+  })

package/src/server/serverFns/components/list.ts

@@ -0,0 +1,51 @@
+// SPDX-License-Identifier: AGPL-3.0-or-later
+// AllBlue - 理想之海
+// Copyright (C) 2026 AllBlue Contributors
+//
+// This program is free software: you can redistribute it and/or modify
+// it under the terms of the GNU Affero General Public License as published by
+// the Free Software Foundation, either version 3 of the License, or
+// (at your option) any later version.
+//
+// This program is distributed in the hope that it will be useful,
+// but WITHOUT ANY WARRANTY; without even the implied warranty of
+// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+// GNU Affero General Public License for more details.
+//
+// You should have received a copy of the GNU Affero General Public License
+// along with this program. If not, see <https://www.gnu.org/licenses/>.
+
+import { createServerFn } from '@tanstack/react-start'
+import { z } from 'zod'
+import { prisma } from '@allbluecn/database'
+
+const listInput = z.object({
+  page: z.number().default(1),
+  pageSize: z.number().default(20),
+  search: z.string().optional(),
+  category: z.string().optional(),
+})
+
+export const listComponentsFn = createServerFn({ method: 'GET' })
+  .validator(listInput)
+  .handler(async ({ data }) => {
+    const { page, pageSize, search, category } = data
+    const where: any = { isDeleted: false }
+    if (search) {
+      where.OR = [
+        { name: { contains: search, mode: 'insensitive' } },
+        { description: { contains: search, mode: 'insensitive' } },
+      ]
+    }
+    if (category && category !== 'all') where.category = category
+    const [items, total] = await Promise.all([
+      prisma.component.findMany({
+        where,
+        skip: (page - 1) * pageSize,
+        take: pageSize,
+        orderBy: [{ sortOrder: 'desc' }, { name: 'asc' }],
+      }),
+      prisma.component.count({ where }),
+    ])
+    return { items, total, page, pageSize }
+  })

package/src/server/serverFns/components/mutations.ts

@@ -0,0 +1,84 @@
+// SPDX-License-Identifier: AGPL-3.0-or-later
+// AllBlue - 理想之海
+// Copyright (C) 2026 AllBlue Contributors
+//
+// This program is free software: you can redistribute it and/or modify
+// it under the terms of the GNU Affero General Public License as published by
+// the Free Software Foundation, either version 3 of the License, or
+// (at your option) any later version.
+//
+// This program is distributed in the hope that it will be useful,
+// but WITHOUT ANY WARRANTY; without even the implied warranty of
+// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+// GNU Affero General Public License for more details.
+//
+// You should have received a copy of the GNU Affero General Public License
+// along with this program. If not, see <https://www.gnu.org/licenses/>.
+
+import { createServerFn } from '@tanstack/react-start'
+import { z } from 'zod'
+import { prisma, Prisma } from '@allbluecn/database'
+
+const createInput = z.object({
+  name: z.string().min(1),
+  type: z.string().default('component'),
+  category: z.string().default('基础组件'),
+  description: z.string().optional(),
+})
+
+export const createComponentFn = createServerFn({ method: 'POST' })
+  .validator(createInput)
+  .handler(async ({ data }) => {
+    return prisma.component.create({
+      data: {
+        name: data.name,
+        type: data.type,
+        category: data.category,
+        description: data.description,
+        config: {},
+        source: 'manual',
+      },
+    })
+  })
+
+const updateInput = z.object({
+  id: z.string(),
+  name: z.string().min(1).optional(),
+  description: z.string().optional(),
+  type: z.string().optional(),
+  category: z.string().optional(),
+  subCategory: z.string().optional(),
+  path: z.string().optional(),
+  defaultWidth: z.number().optional(),
+  defaultHeight: z.number().optional(),
+  tags: z.array(z.string()).optional(),
+  isHidden: z.boolean().optional(),
+  sortOrder: z.number().optional(),
+  defaultProps: z.record(z.string(), z.unknown()).optional(),
+  defaultStyle: z.record(z.string(), z.unknown()).optional(),
+})
+
+export const updateComponentFn = createServerFn({ method: 'POST' })
+  .validator(updateInput)
+  .handler(async ({ data }) => {
+    const { id, defaultProps, defaultStyle, ...rest } = data
+    return prisma.component.update({
+      where: { id },
+      data: {
+        ...rest,
+        ...(defaultProps !== undefined ? { defaultProps: defaultProps as Prisma.InputJsonValue } : {}),
+        ...(defaultStyle !== undefined ? { defaultStyle: defaultStyle as Prisma.InputJsonValue } : {}),
+      },
+    })
+  })
+
+const deleteInput = z.object({ id: z.string() })
+
+export const deleteComponentFn = createServerFn({ method: 'POST' })
+  .validator(deleteInput)
+  .handler(async ({ data }) => {
+    return prisma.component.update({
+      where: { id: data.id },
+      data: { isDeleted: true },
+    })
+  })