@allbluecn/admin-app 0.2.3 → 0.2.5

package/src/server/__tests__/admin-billing.test.ts

@@ -0,0 +1,182 @@
+// SPDX-License-Identifier: AGPL-3.0-or-later
+// AllBlue - 理想之海
+// Copyright (C) 2026 AllBlue Contributors
+//
+// This program is free software: you can redistribute it and/or modify
+// it under the terms of the GNU Affero General Public License as published by
+// the Free Software Foundation, either version 3 of the License, or
+// (at your option) any later version.
+//
+// This program is distributed in the hope that it will be useful,
+// but WITHOUT ANY WARRANTY; without even the implied warranty of
+// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+// GNU Affero General Public License for more details.
+//
+// You should have received a copy of the GNU Affero General Public License
+// along with this program. If not, see <https://www.gnu.org/licenses/>.
+
+import { describe, it, expect, vi, beforeEach } from 'vitest'
+
+vi.mock('@tanstack/react-start', () => ({
+  createServerFn: (_config: unknown) => {
+    const api: any = {
+      _validator: undefined,
+      validator(schema: any) {
+        this._validator = schema
+        return this
+      },
+      handler(fn: Function) {
+        const wrapped = async (args: any) => {
+          let data = args?.data
+          if (this._validator && data !== undefined) {
+            data = this._validator.parse ? this._validator.parse(data) : data
+          }
+          return fn({ data })
+        }
+        return wrapped
+      },
+    }
+    return api
+  },
+}))
+
+vi.mock('@tanstack/react-start/server', () => ({
+  getRequest: () => ({}),
+}))
+
+vi.mock('@allbluecn/database', () => ({
+  prisma: {
+    subscription: {
+      findMany: vi.fn(),
+      count: vi.fn(),
+      findUnique: vi.fn(),
+    },
+    invoice: {
+      findMany: vi.fn(),
+      count: vi.fn(),
+    },
+  },
+}))
+
+vi.mock('@/server/auth-helpers', () => ({
+  requireAdmin: vi.fn().mockResolvedValue({ user: { id: 'admin-1', role: 'SUPER_ADMIN' } }),
+}))
+
+import { prisma } from '@allbluecn/database'
+import { requireAdmin } from '@/server/auth-helpers'
+import {
+  listAllSubscriptionsFn,
+  getSubscriptionDetailFn,
+  listAllInvoicesFn,
+} from '../serverFns/admin-billing'
+
+const subscription = prisma.subscription as unknown as {
+  findMany: ReturnType<typeof vi.fn>
+  count: ReturnType<typeof vi.fn>
+  findUnique: ReturnType<typeof vi.fn>
+}
+const invoice = prisma.invoice as unknown as {
+  findMany: ReturnType<typeof vi.fn>
+  count: ReturnType<typeof vi.fn>
+}
+const requireAdminMock = requireAdmin as unknown as ReturnType<typeof vi.fn>
+
+beforeEach(() => {
+  vi.clearAllMocks()
+  requireAdminMock.mockResolvedValue({ user: { id: 'admin-1', role: 'SUPER_ADMIN' } })
+  subscription.findMany.mockResolvedValue([])
+  subscription.count.mockResolvedValue(0)
+  invoice.findMany.mockResolvedValue([])
+  invoice.count.mockResolvedValue(0)
+})
+
+describe('listAllSubscriptionsFn', () => {
+  it('非管理员拒绝：requireAdmin 抛错时零 prisma 调用', async () => {
+    requireAdminMock.mockRejectedValue(new Error('not admin'))
+
+    await expect(listAllSubscriptionsFn({ data: {} })).rejects.toThrow('not admin')
+    expect(subscription.findMany).not.toHaveBeenCalled()
+    expect(subscription.count).not.toHaveBeenCalled()
+  })
+
+  it('默认分页：page=1 pageSize=20 时 skip=0 take=20', async () => {
+    await listAllSubscriptionsFn({ data: {} })
+
+    expect(subscription.findMany).toHaveBeenCalledWith({
+      where: {},
+      include: { plan: true, workspace: true },
+      orderBy: { createdAt: 'desc' },
+      skip: 0,
+      take: 20,
+    })
+  })
+
+  it('search 按工作空间名模糊匹配（管理员全局检索入口）', async () => {
+    await listAllSubscriptionsFn({ data: { search: 'acme' } })
+
+    const arg = subscription.findMany.mock.calls[0][0]
+    expect(arg.where.OR).toEqual([{ workspace: { name: { contains: 'acme' } } }])
+    expect(subscription.count).toHaveBeenCalledWith({
+      where: { OR: [{ workspace: { name: { contains: 'acme' } } }] },
+    })
+  })
+
+  it('plan 与 status 组合过滤同时生效', async () => {
+    await listAllSubscriptionsFn({ data: { plan: 'pro', status: 'active' } })
+
+    expect(subscription.findMany.mock.calls[0][0].where).toEqual({
+      planId: 'pro',
+      status: 'active',
+    })
+  })
+
+  it('分页偏移正确计算（page=3 pageSize=10 → skip=20）', async () => {
+    await listAllSubscriptionsFn({ data: { page: 3, pageSize: 10 } })
+
+    const arg = subscription.findMany.mock.calls[0][0]
+    expect(arg.skip).toBe(20)
+    expect(arg.take).toBe(10)
+  })
+})
+
+describe('getSubscriptionDetailFn', () => {
+  it('按 subscriptionId 查详情并附带发票列表', async () => {
+    subscription.findUnique.mockResolvedValue({ id: 'sub-1' })
+
+    const res = await getSubscriptionDetailFn({ data: { subscriptionId: 'sub-1' } })
+
+    expect(subscription.findUnique).toHaveBeenCalledWith({
+      where: { id: 'sub-1' },
+      include: {
+        plan: true,
+        workspace: true,
+        invoices: { orderBy: { createdAt: 'desc' } },
+      },
+    })
+    expect(res).toEqual({ id: 'sub-1' })
+  })
+
+  it('非管理员拒绝：不触达 subscription 查询', async () => {
+    requireAdminMock.mockRejectedValue(new Error('not admin'))
+
+    await expect(
+      getSubscriptionDetailFn({ data: { subscriptionId: 'sub-1' } }),
+    ).rejects.toThrow('not admin')
+    expect(subscription.findUnique).not.toHaveBeenCalled()
+  })
+})
+
+describe('listAllInvoicesFn', () => {
+  it('按 createdAt 降序分页并附带订阅归属信息', async () => {
+    await listAllInvoicesFn({ data: { page: 2, pageSize: 5 } })
+
+    expect(invoice.findMany).toHaveBeenCalledWith({
+      orderBy: { createdAt: 'desc' },
+      include: { subscription: { include: { workspace: true, plan: true } } },
+      skip: 5,
+      take: 5,
+    })
+    // 发票总数不受分页影响
+    expect(invoice.count).toHaveBeenCalledWith()
+  })
+})

package/src/server/__tests__/compliance.test.ts

@@ -0,0 +1,136 @@
+// SPDX-License-Identifier: AGPL-3.0-or-later
+// AllBlue - 理想之海
+// Copyright (C) 2026 AllBlue Contributors
+//
+// This program is free software: you can redistribute it and/or modify
+// it under the terms of the GNU Affero General Public License as published by
+// the Free Software Foundation, either version 3 of the License, or
+// (at your option) any later version.
+//
+// This program is distributed in the hope that it will be useful,
+// but WITHOUT ANY WARRANTY; without even the implied warranty of
+// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+// GNU Affero General Public License for more details.
+//
+// You should have received a copy of the GNU Affero General Public License
+// along with this program. If not, see <https://www.gnu.org/licenses/>.
+
+import { describe, it, expect, vi, beforeEach } from 'vitest'
+
+vi.mock('@tanstack/react-start', () => ({
+  createServerFn: (_config: unknown) => {
+    const api: any = {
+      _validator: undefined,
+      validator(schema: any) {
+        this._validator = schema
+        return this
+      },
+      handler(fn: Function) {
+        const wrapped = async (args: any) => {
+          let data = args?.data
+          if (this._validator && data !== undefined) {
+            data = this._validator.parse ? this._validator.parse(data) : data
+          }
+          return fn({ data })
+        }
+        return wrapped
+      },
+    }
+    return api
+  },
+}))
+
+vi.mock('@tanstack/react-start/server', () => ({
+  getRequest: () => ({}),
+}))
+
+vi.mock('@allbluecn/database', () => ({
+  prisma: {
+    complianceExport: {
+      findMany: vi.fn(),
+      count: vi.fn(),
+    },
+  },
+}))
+
+vi.mock('@/server/auth-helpers', () => ({
+  requireAdmin: vi.fn().mockResolvedValue({ user: { id: 'admin-1', role: 'SUPER_ADMIN' } }),
+}))
+
+vi.mock('@/server/entitlements', () => ({
+  requireFeature: vi.fn().mockResolvedValue(undefined),
+}))
+
+const services = vi.hoisted(() => new Map<string, unknown>())
+
+vi.mock('@/server/pro-services', () => ({
+  getProService: (key: string) => services.get(key) ?? null,
+}))
+
+import { prisma } from '@allbluecn/database'
+import { requireAdmin } from '@/server/auth-helpers'
+import { requireFeature } from '@/server/entitlements'
+import { listComplianceExportsFn } from '../serverFns/compliance'
+
+const complianceExport = prisma.complianceExport as unknown as {
+  findMany: ReturnType<typeof vi.fn>
+  count: ReturnType<typeof vi.fn>
+}
+
+describe('listComplianceExportsFn（admin 合规导出任务列表）', () => {
+  beforeEach(() => {
+    vi.clearAllMocks()
+    services.clear()
+  })
+
+  it('Pro 服务注册时委派给 Pro 实现', async () => {
+    const listJobs = vi.fn().mockResolvedValue({ items: ['pro-job'], total: 1 })
+    services.set('compliance', { listJobs })
+
+    const result = await listComplianceExportsFn({ data: { page: 1, pageSize: 20 } })
+
+    expect(listJobs).toHaveBeenCalledWith({ page: 1, pageSize: 20 })
+    expect(result).toEqual({ items: ['pro-job'], total: 1 })
+    // Pro 路径不应触达 prisma
+    expect(complianceExport.findMany).not.toHaveBeenCalled()
+  })
+
+  it('Pro 服务缺省时走 prisma 分页查询，skip/take 按页计算', async () => {
+    const items = [{ id: 'e-1' }]
+    complianceExport.findMany.mockResolvedValue(items)
+    complianceExport.count.mockResolvedValue(42)
+
+    const result = await listComplianceExportsFn({ data: { page: 3, pageSize: 10 } })
+
+    expect(complianceExport.findMany).toHaveBeenCalledWith({
+      orderBy: { createdAt: 'desc' },
+      skip: 20,
+      take: 10,
+    })
+    expect(complianceExport.count).toHaveBeenCalledWith()
+    expect(result).toEqual({ items, total: 42 })
+  })
+
+  it('未传分页参数时使用默认值（page=1, pageSize=20）', async () => {
+    complianceExport.findMany.mockResolvedValue([])
+    complianceExport.count.mockResolvedValue(0)
+
+    await listComplianceExportsFn({ data: {} })
+
+    expect(complianceExport.findMany).toHaveBeenCalledWith({
+      orderBy: { createdAt: 'desc' },
+      skip: 0,
+      take: 20,
+    })
+  })
+
+  it('查询前强制管理员身份与合规功能授权', async () => {
+    complianceExport.findMany.mockResolvedValue([])
+    complianceExport.count.mockResolvedValue(0)
+
+    await listComplianceExportsFn({ data: { page: 1, pageSize: 20 } })
+
+    expect(requireAdmin).toHaveBeenCalledTimes(1)
+    expect(requireFeature).toHaveBeenCalledWith({}, 'compliance')
+  })
+})

package/src/server/__tests__/invitations.test.ts

@@ -0,0 +1,311 @@
+// SPDX-License-Identifier: AGPL-3.0-or-later
+// AllBlue - 理想之海
+// Copyright (C) 2026 AllBlue Contributors
+//
+// This program is free software: you can redistribute it and/or modify
+// it under the terms of the GNU Affero General Public License as published by
+// the Free Software Foundation, either version 3 of the License, or
+// (at your option) any later version.
+//
+// This program is distributed in the hope that it will be useful,
+// but WITHOUT ANY WARRANTY; without even the implied warranty of
+// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+// GNU Affero General Public License for more details.
+//
+// You should have received a copy of the GNU Affero General Public License
+// along with this program. If not, see <https://www.gnu.org/licenses/>.
+
+import { describe, it, expect, vi, beforeEach } from 'vitest'
+
+vi.mock('@tanstack/react-start', () => ({
+  createServerFn: (_config: unknown) => {
+    const api: any = {
+      _validator: undefined,
+      validator(schema: any) {
+        this._validator = schema
+        return this
+      },
+      handler(fn: Function) {
+        const wrapped = async (args: any) => {
+          let data = args?.data
+          if (this._validator && data !== undefined) {
+            data = this._validator.parse ? this._validator.parse(data) : data
+          }
+          return fn({ data })
+        }
+        return wrapped
+      },
+    }
+    return api
+  },
+}))
+
+vi.mock('@tanstack/react-start/server', () => ({
+  getRequest: () => ({}),
+}))
+
+vi.mock('@allbluecn/database', () => ({
+  prisma: {
+    invitationCode: {
+      findMany: vi.fn(),
+      count: vi.fn(),
+      findUnique: vi.fn(),
+      create: vi.fn(),
+      update: vi.fn(),
+      delete: vi.fn(),
+    },
+    user: {
+      findMany: vi.fn(),
+    },
+    systemSetting: {
+      findUnique: vi.fn(),
+      upsert: vi.fn(),
+    },
+  },
+}))
+
+vi.mock('@/server/auth-helpers', () => ({
+  requireAdmin: vi
+    .fn()
+    .mockResolvedValue({ user: { id: 'admin-1', role: 'SUPER_ADMIN' } }),
+}))
+
+import { prisma } from '@allbluecn/database'
+import {
+  listInvitationCodesFn,
+  createInvitationCodeFn,
+  toggleInvitationCodeFn,
+  deleteInvitationCodeFn,
+  getRegistrationModeFn,
+  setRegistrationModeFn,
+} from '../serverFns/invitations'
+
+const ic = prisma.invitationCode as unknown as {
+  findMany: ReturnType<typeof vi.fn>
+  count: ReturnType<typeof vi.fn>
+  findUnique: ReturnType<typeof vi.fn>
+  create: ReturnType<typeof vi.fn>
+  update: ReturnType<typeof vi.fn>
+  delete: ReturnType<typeof vi.fn>
+}
+
+const user = prisma.user as unknown as { findMany: ReturnType<typeof vi.fn> }
+const systemSetting = prisma.systemSetting as unknown as {
+  findUnique: ReturnType<typeof vi.fn>
+  upsert: ReturnType<typeof vi.fn>
+}
+
+describe('invitations serverFn（admin 邀请码 CRUD 与注册模式）', () => {
+  beforeEach(() => {
+    vi.clearAllMocks()
+  })
+
+  it('listInvitationCodesFn：分页查询 disabledAt=null 并批量解析创建人', async () => {
+    const codes = [
+      { id: 'c1', code: 'ABC1', maxUses: 1, usedCount: 0, expiresAt: new Date(), createdById: 'u1', disabledAt: null, createdAt: new Date(), uses: [] },
+      { id: 'c2', code: 'DEF2', maxUses: 5, usedCount: 2, expiresAt: new Date(), createdById: null, disabledAt: null, createdAt: new Date(), uses: [] },
+    ]
+    ic.findMany.mockResolvedValue(codes)
+    ic.count.mockResolvedValue(42)
+    user.findMany.mockResolvedValue([{ id: 'u1', username: 'alice' }])
+
+    const result = await listInvitationCodesFn({ data: { page: 2, pageSize: 20 } })
+
+    expect(ic.findMany).toHaveBeenCalledWith(
+      expect.objectContaining({ skip: 20, take: 20, where: { disabledAt: null } }),
+    )
+    expect(ic.count).toHaveBeenCalledWith({ where: { disabledAt: null } })
+    expect(user.findMany).toHaveBeenCalledWith({
+      where: { id: { in: ['u1'] } },
+      select: { id: true, username: true },
+    })
+    expect(result).toMatchObject({
+      total: 42,
+      page: 2,
+      pageSize: 20,
+      codes: [
+        { code: 'ABC1', creator: 'alice' },
+        { code: 'DEF2', creator: null },
+      ],
+    })
+  })
+
+  it('listInvitationCodesFn：无创建人时不发起用户查询', async () => {
+    ic.findMany.mockResolvedValue([{ id: 'c1', createdById: null, uses: [] }])
+    ic.count.mockResolvedValue(1)
+
+    await listInvitationCodesFn({ data: { page: 1, pageSize: 10 } })
+
+    expect(user.findMany).not.toHaveBeenCalled()
+  })
+
+  it('createInvitationCodeFn：自定义 code 归一化为大写并写入 createdById', async () => {
+    ic.create.mockImplementation(({ data }: { data: { code: string } }) =>
+      Promise.resolve({ id: 'c-new', code: data.code }),
+    )
+
+    const result = await createInvitationCodeFn({ data: { code: ' ab12cd34 ' } })
+
+    expect(ic.create).toHaveBeenCalledWith({
+      data: expect.objectContaining({
+        code: 'AB12CD34',
+        maxUses: 1,
+        createdById: 'admin-1',
+      }),
+    })
+    expect(result.code).toBe('AB12CD34')
+  })
+
+  it('createInvitationCodeFn：自定义 code 过短 → 拒绝', async () => {
+    await expect(createInvitationCodeFn({ data: { code: 'abc000' } })).rejects.toThrow(
+      '邀请码需为 8-12 位字母或数字',
+    )
+    expect(ic.create).not.toHaveBeenCalled()
+  })
+
+  it('createInvitationCodeFn：自定义 code 含下划线短横 → 拒绝', async () => {
+    await expect(createInvitationCodeFn({ data: { code: 'ab12_cd34' } })).rejects.toThrow(
+      '邀请码需为 8-12 位字母或数字',
+    )
+  })
+
+  it('createInvitationCodeFn：纯字母 code（缺数字）→ 拒绝', async () => {
+    await expect(createInvitationCodeFn({ data: { code: 'abcdefgh' } })).rejects.toThrow(
+      '邀请码需同时包含字母和数字',
+    )
+  })
+
+  it('createInvitationCodeFn：纯数字 code（缺字母）→ 拒绝', async () => {
+    await expect(createInvitationCodeFn({ data: { code: '12345678' } })).rejects.toThrow(
+      '邀请码需同时包含字母和数字',
+    )
+  })
+
+  it('createInvitationCodeFn：未传 code 时自动生成满足 /^[A-F0-9]{8}$/', async () => {
+    ic.create.mockImplementation(({ data }: { data: { code: string } }) =>
+      Promise.resolve({ id: 'c-new', code: data.code }),
+    )
+
+    const result = await createInvitationCodeFn({ data: {} })
+
+    expect(result.code).toMatch(/^[A-F0-9]{8}$/)
+  })
+
+  it('toggleInvitationCodeFn：已启用（disabledAt=null）→ 写入当前时间', async () => {
+    ic.findUnique.mockResolvedValue({ id: 'c1', disabledAt: null })
+    const captures: Array<{ where: { id: string }; data: { disabledAt: Date | null } }> = []
+    ic.update.mockImplementation((arg: { where: { id: string }; data: { disabledAt: Date | null } }) => {
+      captures.push(arg)
+      return Promise.resolve({ id: arg.where.id, disabledAt: arg.data.disabledAt })
+    })
+
+    const before = Date.now()
+    await toggleInvitationCodeFn({ data: { id: 'c1' } })
+    const after = Date.now()
+
+    expect(captures).toHaveLength(1)
+    expect(captures[0].where).toEqual({ id: 'c1' })
+    const written = captures[0].data.disabledAt
+    expect(written).toBeInstanceOf(Date)
+    if (written instanceof Date) {
+      expect(written.getTime()).toBeGreaterThanOrEqual(before)
+      expect(written.getTime()).toBeLessThanOrEqual(after)
+    }
+  })
+
+  it('toggleInvitationCodeFn：已禁用 → 置回 null（重新启用）', async () => {
+    ic.findUnique.mockResolvedValue({ id: 'c1', disabledAt: new Date('2026-01-01') })
+    ic.update.mockImplementation(({ data }: { data: { disabledAt: Date | null } }) =>
+      Promise.resolve({ id: 'c1', disabledAt: data.disabledAt }),
+    )
+
+    const result = await toggleInvitationCodeFn({ data: { id: 'c1' } })
+
+    expect(result.disabledAt).toBeNull()
+  })
+
+  it('toggleInvitationCodeFn：不存在的 id 抛「邀请码不存在」', async () => {
+    ic.findUnique.mockResolvedValue(null)
+
+    await expect(toggleInvitationCodeFn({ data: { id: 'missing' } })).rejects.toThrow(
+      '邀请码不存在',
+    )
+  })
+
+  it('deleteInvitationCodeFn：usedCount > 0 拒绝删除', async () => {
+    ic.findUnique.mockResolvedValue({ id: 'c1', usedCount: 3 })
+
+    await expect(deleteInvitationCodeFn({ data: { id: 'c1' } })).rejects.toThrow(
+      '已有使用记录，请改用禁用',
+    )
+    expect(ic.delete).not.toHaveBeenCalled()
+  })
+
+  it('deleteInvitationCodeFn：usedCount === 0 删除成功', async () => {
+    ic.findUnique.mockResolvedValue({ id: 'c1', usedCount: 0 })
+    ic.delete.mockResolvedValue({ id: 'c1' })
+
+    const result = await deleteInvitationCodeFn({ data: { id: 'c1' } })
+
+    expect(ic.delete).toHaveBeenCalledWith({ where: { id: 'c1' } })
+    expect(result).toEqual({ deleted: true })
+  })
+
+  it('deleteInvitationCodeFn：不存在的 id 抛「邀请码不存在」', async () => {
+    ic.findUnique.mockResolvedValue(null)
+
+    await expect(deleteInvitationCodeFn({ data: { id: 'missing' } })).rejects.toThrow(
+      '邀请码不存在',
+    )
+  })
+
+  it('getRegistrationModeFn：无行时默认 invite', async () => {
+    systemSetting.findUnique.mockResolvedValue(null)
+
+    await expect(getRegistrationModeFn({ data: {} })).resolves.toEqual({ mode: 'invite' })
+  })
+
+  it('getRegistrationModeFn：value=open 返回 open', async () => {
+    systemSetting.findUnique.mockResolvedValue({ key: 'auth.registrationMode', value: 'open' })
+
+    await expect(getRegistrationModeFn({ data: {} })).resolves.toEqual({ mode: 'open' })
+  })
+
+  it('setRegistrationModeFn：写入后 upsert create 分支带 category=auth', async () => {
+    systemSetting.upsert.mockResolvedValue({ id: 's1' })
+
+    const result = await setRegistrationModeFn({ data: { mode: 'open' } })
+
+    expect(systemSetting.upsert).toHaveBeenCalledWith({
+      where: { key: 'auth.registrationMode' },
+      update: { value: 'open' },
+      create: expect.objectContaining({
+        key: 'auth.registrationMode',
+        value: 'open',
+        category: 'auth',
+      }),
+    })
+    expect(result).toEqual({ mode: 'open' })
+  })
+
+  it('setRegistrationModeFn + getRegistrationModeFn：写读一致', async () => {
+    let stored: string | null = null
+    systemSetting.upsert.mockImplementation(
+      ({ update }: { update: { value: string } }) => {
+        stored = update.value
+        return Promise.resolve({ id: 's1', value: stored })
+      },
+    )
+    systemSetting.findUnique.mockImplementation(() =>
+      stored === null
+        ? Promise.resolve(null)
+        : Promise.resolve({ key: 'auth.registrationMode', value: stored }),
+    )
+
+    await setRegistrationModeFn({ data: { mode: 'open' } })
+    await expect(getRegistrationModeFn({ data: {} })).resolves.toEqual({ mode: 'open' })
+
+    await setRegistrationModeFn({ data: { mode: 'invite' } })
+    await expect(getRegistrationModeFn({ data: {} })).resolves.toEqual({ mode: 'invite' })
+  })
+})