@allbluecn/admin-app 0.1.0

package/src/server/serverFns/user/create.ts

@@ -0,0 +1,40 @@
+// SPDX-License-Identifier: AGPL-3.0-or-later
+// AllBlue - 理想之海
+// Copyright (C) 2026 AllBlue Contributors
+//
+// This program is free software: you can redistribute it and/or modify
+// it under the terms of the GNU Affero General Public License as published by
+// the Free Software Foundation, either version 3 of the License, or
+// (at your option) any later version.
+//
+// This program is distributed in the hope that it will be useful,
+// but WITHOUT ANY WARRANTY; without even the implied warranty of
+// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+// GNU Affero General Public License for more details.
+//
+// You should have received a copy of the GNU Affero General Public License
+// along with this program. If not, see <https://www.gnu.org/licenses/>.
+
+import { createServerFn } from '@tanstack/react-start'
+import { z } from 'zod'
+import { prisma } from '@allbluecn/database'
+import bcrypt from 'bcryptjs'
+
+const createInput = z.object({
+  email: z.string().email(),
+  password: z.string().min(8),
+  name: z.string().min(1),
+  role: z.enum(['USER', 'ADMIN', 'SUPER_ADMIN']).default('USER'),
+  status: z.enum(['ACTIVE', 'INACTIVE', 'BANNED']).default('ACTIVE'),
+})
+
+export const createUserFn = createServerFn({ method: 'POST' })
+  .validator(createInput)
+  .handler(async ({ data }) => {
+    const exists = await prisma.user.findUnique({ where: { email: data.email } })
+    if (exists) throw new Error('Email already exists')
+    const hashedPassword = await bcrypt.hash(data.password, 12)
+    return prisma.user.create({
+      data: { ...data, password: hashedPassword, username: data.name },
+    })
+  })

package/src/server/serverFns/user/delete.ts

@@ -0,0 +1,29 @@
+// SPDX-License-Identifier: AGPL-3.0-or-later
+// AllBlue - 理想之海
+// Copyright (C) 2026 AllBlue Contributors
+//
+// This program is free software: you can redistribute it and/or modify
+// it under the terms of the GNU Affero General Public License as published by
+// the Free Software Foundation, either version 3 of the License, or
+// (at your option) any later version.
+//
+// This program is distributed in the hope that it will be useful,
+// but WITHOUT ANY WARRANTY; without even the implied warranty of
+// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+// GNU Affero General Public License for more details.
+//
+// You should have received a copy of the GNU Affero General Public License
+// along with this program. If not, see <https://www.gnu.org/licenses/>.
+
+import { createServerFn } from '@tanstack/react-start'
+import { z } from 'zod'
+import { prisma } from '@allbluecn/database'
+
+export const deleteUserFn = createServerFn({ method: 'POST' })
+  .validator(z.object({ userId: z.string() }))
+  .handler(async ({ data }) => {
+    return prisma.user.update({
+      where: { id: data.userId },
+      data: { status: 'INACTIVE' },
+    })
+  })

package/src/server/serverFns/user/detail.ts

@@ -0,0 +1,45 @@
+// SPDX-License-Identifier: AGPL-3.0-or-later
+// AllBlue - 理想之海
+// Copyright (C) 2026 AllBlue Contributors
+//
+// This program is free software: you can redistribute it and/or modify
+// it under the terms of the GNU Affero General Public License as published by
+// the Free Software Foundation, either version 3 of the License, or
+// (at your option) any later version.
+//
+// This program is distributed in the hope that it will be useful,
+// but WITHOUT ANY WARRANTY; without even the implied warranty of
+// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+// GNU Affero General Public License for more details.
+//
+// You should have received a copy of the GNU Affero General Public License
+// along with this program. If not, see <https://www.gnu.org/licenses/>.
+
+import { createServerFn } from '@tanstack/react-start'
+import { z } from 'zod'
+import { prisma } from '@allbluecn/database'
+
+export const getUserDetailFn = createServerFn({ method: 'GET' })
+  .validator(z.object({ userId: z.string() }))
+  .handler(async ({ data }) => {
+    const user = await prisma.user.findUnique({
+      where: { id: data.userId },
+      select: {
+        id: true,
+        email: true,
+        username: true,
+        role: true,
+        status: true,
+        avatarConfig: true,
+        bgShape: true,
+        bgColor: true,
+        createdAt: true,
+        updatedAt: true,
+        lastLoginAt: true,
+        _count: { select: { prds: true, anyhubMarketApps: true, anyhubApps: true, reviews: true } },
+        loginLogs: { orderBy: { createdAt: 'desc' }, take: 20 },
+      },
+    })
+    if (!user) return null
+    return user
+  })

package/src/server/serverFns/user/list.ts

@@ -0,0 +1,56 @@
+// SPDX-License-Identifier: AGPL-3.0-or-later
+// AllBlue - 理想之海
+// Copyright (C) 2026 AllBlue Contributors
+//
+// This program is free software: you can redistribute it and/or modify
+// it under the terms of the GNU Affero General Public License as published by
+// the Free Software Foundation, either version 3 of the License, or
+// (at your option) any later version.
+//
+// This program is distributed in the hope that it will be useful,
+// but WITHOUT ANY WARRANTY; without even the implied warranty of
+// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+// GNU Affero General Public License for more details.
+//
+// You should have received a copy of the GNU Affero General Public License
+// along with this program. If not, see <https://www.gnu.org/licenses/>.
+
+import { createServerFn } from '@tanstack/react-start'
+import { z } from 'zod'
+import { prisma } from '@allbluecn/database'
+
+const listInput = z.object({
+  page: z.number().default(1),
+  pageSize: z.number().default(20),
+  search: z.string().optional(),
+  role: z.enum(['USER', 'ADMIN', 'SUPER_ADMIN']).optional(),
+  status: z.enum(['ACTIVE', 'INACTIVE', 'BANNED']).optional(),
+})
+
+export const listUsersFn = createServerFn({ method: 'GET' })
+  .validator(listInput)
+  .handler(async ({ data }) => {
+    const { page, pageSize, search, role, status } = data
+    const where: any = {}
+    if (search) {
+      where.OR = [
+        { name: { contains: search, mode: 'insensitive' } },
+        { email: { contains: search, mode: 'insensitive' } },
+      ]
+    }
+    if (role) where.role = role
+    if (status) where.status = status
+    const [items, total] = await Promise.all([
+      prisma.user.findMany({
+        where,
+        skip: (page - 1) * pageSize,
+        take: pageSize,
+        orderBy: { createdAt: 'desc' },
+        include: {
+          _count: { select: { prds: true, anyhubMarketApps: true, reviews: true } },
+        },
+      }),
+      prisma.user.count({ where }),
+    ])
+    return { items, total, page, pageSize }
+  })

package/src/server/serverFns/user/reset-password.ts

@@ -0,0 +1,28 @@
+// SPDX-License-Identifier: AGPL-3.0-or-later
+// AllBlue - 理想之海
+// Copyright (C) 2026 AllBlue Contributors
+//
+// This program is free software: you can redistribute it and/or modify
+// it under the terms of the GNU Affero General Public License as published by
+// the Free Software Foundation, either version 3 of the License, or
+// (at your option) any later version.
+//
+// This program is distributed in the hope that it will be useful,
+// but WITHOUT ANY WARRANTY; without even the implied warranty of
+// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+// GNU Affero General Public License for more details.
+//
+// You should have received a copy of the GNU Affero General Public License
+// along with this program. If not, see <https://www.gnu.org/licenses/>.
+
+import { createServerFn } from '@tanstack/react-start'
+import { z } from 'zod'
+import { prisma } from '@allbluecn/database'
+import bcrypt from 'bcryptjs'
+
+export const resetUserPasswordFn = createServerFn({ method: 'POST' })
+  .validator(z.object({ userId: z.string(), newPassword: z.string().min(8) }))
+  .handler(async ({ data }) => {
+    const hashedPassword = await bcrypt.hash(data.newPassword, 12)
+    return prisma.user.update({ where: { id: data.userId }, data: { password: hashedPassword } })
+  })

package/src/server/serverFns/user/update-role.ts

@@ -0,0 +1,26 @@
+// SPDX-License-Identifier: AGPL-3.0-or-later
+// AllBlue - 理想之海
+// Copyright (C) 2026 AllBlue Contributors
+//
+// This program is free software: you can redistribute it and/or modify
+// it under the terms of the GNU Affero General Public License as published by
+// the Free Software Foundation, either version 3 of the License, or
+// (at your option) any later version.
+//
+// This program is distributed in the hope that it will be useful,
+// but WITHOUT ANY WARRANTY; without even the implied warranty of
+// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+// GNU Affero General Public License for more details.
+//
+// You should have received a copy of the GNU Affero General Public License
+// along with this program. If not, see <https://www.gnu.org/licenses/>.
+
+import { createServerFn } from '@tanstack/react-start'
+import { z } from 'zod'
+import { prisma } from '@allbluecn/database'
+
+export const updateUserRoleFn = createServerFn({ method: 'POST' })
+  .validator(z.object({ userId: z.string(), role: z.enum(['USER', 'ADMIN', 'SUPER_ADMIN']) }))
+  .handler(async ({ data }) => {
+    return prisma.user.update({ where: { id: data.userId }, data: { role: data.role } })
+  })

package/src/server/serverFns/user/update-status.ts

@@ -0,0 +1,26 @@
+// SPDX-License-Identifier: AGPL-3.0-or-later
+// AllBlue - 理想之海
+// Copyright (C) 2026 AllBlue Contributors
+//
+// This program is free software: you can redistribute it and/or modify
+// it under the terms of the GNU Affero General Public License as published by
+// the Free Software Foundation, either version 3 of the License, or
+// (at your option) any later version.
+//
+// This program is distributed in the hope that it will be useful,
+// but WITHOUT ANY WARRANTY; without even the implied warranty of
+// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+// GNU Affero General Public License for more details.
+//
+// You should have received a copy of the GNU Affero General Public License
+// along with this program. If not, see <https://www.gnu.org/licenses/>.
+
+import { createServerFn } from '@tanstack/react-start'
+import { z } from 'zod'
+import { prisma } from '@allbluecn/database'
+
+export const updateUserStatusFn = createServerFn({ method: 'POST' })
+  .validator(z.object({ userId: z.string(), status: z.enum(['ACTIVE', 'INACTIVE', 'BANNED']) }))
+  .handler(async ({ data }) => {
+    return prisma.user.update({ where: { id: data.userId }, data: { status: data.status } })
+  })

package/src/server.ts

@@ -0,0 +1,27 @@
+// SPDX-License-Identifier: AGPL-3.0-or-later
+// AllBlue - 理想之海
+// Copyright (C) 2026 AllBlue Contributors
+//
+// This program is free software: you can redistribute it and/or modify
+// it under the terms of the GNU Affero General Public License as published by
+// the Free Software Foundation, either version 3 of the License, or
+// (at your option) any later version.
+//
+// This program is distributed in the hope that it will be useful,
+// but WITHOUT ANY WARRANTY; without even the implied warranty of
+// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+// GNU Affero General Public License for more details.
+//
+// You should have received a copy of the GNU Affero General Public License
+// along with this program. If not, see <https://www.gnu.org/licenses/>.
+
+import { wrapFetchWithSentry } from '@sentry/tanstackstart-react'
+import handler, { createServerEntry } from '@tanstack/react-start/server-entry'
+
+export default createServerEntry(
+  wrapFetchWithSentry({
+    fetch(request: Request) {
+      return handler.fetch(request)
+    },
+  }),
+)

package/src/start.ts

@@ -0,0 +1,85 @@
+// SPDX-License-Identifier: AGPL-3.0-or-later
+// AllBlue - 理想之海
+// Copyright (C) 2026 AllBlue Contributors
+//
+// This program is free software: you can redistribute it and/or modify
+// it under the terms of the GNU Affero General Public License as published by
+// the Free Software Foundation, either version 3 of the License, or
+// (at your option) any later version.
+//
+// This program is distributed in the hope that it will be useful,
+// but WITHOUT ANY WARRANTY; without even the implied warranty of
+// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+// GNU Affero General Public License for more details.
+//
+// You should have received a copy of the GNU Affero General Public License
+// along with this program. If not, see <https://www.gnu.org/licenses/>.
+
+import {
+  sentryGlobalFunctionMiddleware,
+  sentryGlobalRequestMiddleware,
+} from '@sentry/tanstackstart-react'
+import { createStart, createMiddleware, createCsrfMiddleware } from '@tanstack/react-start'
+import { requestContextMiddleware } from '@/server/middlewares/request'
+import {
+  observabilityMiddleware,
+  debugMiddleware,
+  startHealthCheckTimer,
+  getHealthCheckEnabled,
+  initErrorCollector,
+} from '@/server/observability'
+
+const csrfMiddleware = createCsrfMiddleware({
+  filter: (ctx) => ctx.handlerType === 'serverFn',
+})
+
+const apiCorsMiddleware = createMiddleware().server(async ({ request, next }: any) => {
+  if (!request.url.includes('/api/')) {
+    return next()
+  }
+
+  const result = await next() as any
+  const origin = request.headers.get('origin')
+
+  const headers = new Headers(result?.headers || result?.response?.headers || {})
+  if (origin) {
+    const allowedOrigins = [
+      new URL(process.env.AUTH_URL || 'http://localhost:3001').origin,
+    ]
+    if (allowedOrigins.includes(origin)) {
+      headers.set('Access-Control-Allow-Origin', origin)
+      headers.set('Access-Control-Allow-Credentials', 'true')
+      headers.set('Access-Control-Allow-Methods', 'GET, POST, PUT, DELETE, OPTIONS')
+      headers.set('Access-Control-Allow-Headers', 'Content-Type, Authorization')
+    }
+  }
+
+  if (request.method === 'OPTIONS') {
+    return new Response(null, { status: 204, headers })
+  }
+
+  if (result instanceof Response) {
+    return new Response(result.body, {
+      status: result.status,
+      statusText: result.statusText,
+      headers,
+    })
+  }
+
+  return result
+})
+
+if (typeof process !== 'undefined' && process.versions?.node && process.env.NODE_ENV !== 'test') {
+  initErrorCollector()
+
+  getHealthCheckEnabled().then((enabled) => {
+    if (enabled) {
+      startHealthCheckTimer(30_000)
+    }
+  }).catch((e) => console.error('[HealthCheckInit]', e))
+}
+
+export const startInstance = createStart(() => ({
+  requestMiddleware: [sentryGlobalRequestMiddleware, requestContextMiddleware, observabilityMiddleware, debugMiddleware, apiCorsMiddleware, csrfMiddleware],
+  functionMiddleware: [sentryGlobalFunctionMiddleware],
+}))

package/src/styles/_keyframe-animations.scss

@@ -0,0 +1,91 @@
+@keyframes fadeIn {
+  from {
+    opacity: 0;
+  }
+  to {
+    opacity: 1;
+  }
+}
+
+@keyframes fadeOut {
+  from {
+    opacity: 1;
+  }
+  to {
+    opacity: 0;
+  }
+}
+
+@keyframes zoomIn {
+  from {
+    transform: scale(0.95);
+  }
+  to {
+    transform: scale(1);
+  }
+}
+
+@keyframes zoomOut {
+  from {
+    transform: scale(1);
+  }
+  to {
+    transform: scale(0.95);
+  }
+}
+
+@keyframes zoom {
+  0% {
+    opacity: 0;
+    transform: scale(0.95);
+  }
+  100% {
+    opacity: 1;
+    transform: scale(1);
+  }
+}
+
+@keyframes slideFromTop {
+  from {
+    transform: translateY(-0.5rem);
+  }
+  to {
+    transform: translateY(0);
+  }
+}
+
+@keyframes slideFromRight {
+  from {
+    transform: translateX(0.5rem);
+  }
+  to {
+    transform: translateX(0);
+  }
+}
+
+@keyframes slideFromLeft {
+  from {
+    transform: translateX(-0.5rem);
+  }
+  to {
+    transform: translateX(0);
+  }
+}
+
+@keyframes slideFromBottom {
+  from {
+    transform: translateY(0.5rem);
+  }
+  to {
+    transform: translateY(0);
+  }
+}
+
+@keyframes spin {
+  from {
+    transform: rotate(0deg);
+  }
+  to {
+    transform: rotate(360deg);
+  }
+}