@allbluecn/admin-app 0.2.6 → 0.3.0

package/src/routes/_nav/monitoring/ai-usage/route.lazy.tsx

@@ -102,6 +102,7 @@ function AiUsagePage() {
 
   const wsTotalPages = Math.max(1, Math.ceil((data?.topWorkspacesTotal ?? 0) / 10))
   const usrTotalPages = Math.max(1, Math.ceil((data?.topUsersTotal ?? 0) / 10))
+  const sandboxActivity = data?.byActivity.find((a) => a.activity === 'sandbox')
 
   if (loading && !data) {
     return (
@@ -128,7 +129,7 @@ function AiUsagePage() {
         </button>
       </div>
 
-      <div className="grid gap-4 md:grid-cols-3">
+      <div className="grid gap-4 md:grid-cols-4">
         <OverviewCard title={m.common_monitoring_aiUsage_totalCalls()} value={data?.totalCalls?.toLocaleString('en-US') ?? '0'} />
         <OverviewCard
           title={m.common_monitoring_aiUsage_totalCost()}
@@ -138,6 +139,14 @@ function AiUsagePage() {
           title={m.common_monitoring_aiUsage_byokVsManaged()}
           value={data?.bySource.map((s: any) => `${s.source}: ${s.count}`).join(' / ') || '—'}
         />
+        <OverviewCard
+          title={m.common_monitoring_aiUsage_sandbox()}
+          value={
+            sandboxActivity
+              ? m.common_monitoring_aiUsage_sandboxValue({ minutes: sandboxActivity.minutes, count: sandboxActivity.count })
+              : '—'
+          }
+        />
       </div>
 
       {alerts.length > 0 && (

package/src/routes/_nav/monitoring/errors/route.lazy.tsx

@@ -23,7 +23,7 @@ import { PageHeader } from '@/components/common/page-header'
 import { ErrorList } from '@/components/monitoring/error-list'
 import { getErrors } from '@/server/serverFns/monitoring/get-errors'
 import { resetMonitoring } from '@/server/serverFns/monitoring/reset'
-import { toast } from 'sonner'
+import { toast } from '@/components/ui/toast'
 
 export const Route = createLazyFileRoute('/_nav/monitoring/errors')({
   component: MonitoringErrors,

package/src/routes/_nav/monitoring/health/route.lazy.tsx

@@ -25,7 +25,7 @@ import { HealthCards } from '@/components/monitoring/health-cards'
 import { DataTable } from '@/components/data-table/data-table'
 import { getHealthStatus } from '@/server/serverFns/monitoring/get-health'
 import { getHealthCheckSettings, updateHealthCheckSettings } from '@/server/serverFns/monitoring/get-health-settings'
-import { toast } from 'sonner'
+import { toast } from '@/components/ui/toast'
 
 export const Route = createLazyFileRoute('/_nav/monitoring/health')({
   component: MonitoringHealth,

package/src/routes/_nav/monitoring/logs/route.lazy.tsx

@@ -25,7 +25,7 @@ import { Checkbox } from '@/components/ui/checkbox'
 import { getRequestLogs } from '@/server/serverFns/monitoring/get-request-logs'
 import { resetMonitoring } from '@/server/serverFns/monitoring/reset'
 import { DataTablePagination } from '@/components/data-table/data-table-pagination'
-import { toast } from 'sonner'
+import { toast } from '@/components/ui/toast'
 
 export const Route = createLazyFileRoute('/_nav/monitoring/logs')({
   component: MonitoringLogs,

package/src/routes/_nav/monitoring/metrics/route.lazy.tsx

@@ -28,7 +28,7 @@ import { MetricsStats } from '@/components/monitoring/metrics-stats'
 import { getMetrics } from '@/server/serverFns/monitoring/get-metrics'
 import { resetMonitoring } from '@/server/serverFns/monitoring/reset'
 import { DataTable } from '@/components/data-table/data-table'
-import { toast } from 'sonner'
+import { toast } from '@/components/ui/toast'
 
 export const Route = createLazyFileRoute('/_nav/monitoring/metrics')({
   component: MonitoringMetrics,

package/src/routes/_nav/monitoring/sentry/route.lazy.tsx

@@ -21,7 +21,7 @@ import * as Sentry from '@sentry/tanstackstart-react'
 import { BugPlay, ExternalLink, Bug, Activity, AlertTriangle, Eye, EyeOff, Save, RotateCcw, CheckCircle2, XCircle, RefreshCw, ShieldCheck } from 'lucide-react'
 import { IconBrandSentry } from '@tabler/icons-react';
 import { useEffect, useState } from 'react'
-import { toast } from 'sonner'
+import { toast } from '@/components/ui/toast'
 import { getSentryConfig, saveSentryConfig, reconfigureSentryServer } from '@/server/serverFns/sentry/config'
 import type { SentryConfig } from '@/server/serverFns/sentry/config'
 

package/src/routes/_nav/permissions/route.lazy.tsx

@@ -2,7 +2,7 @@ import { createLazyFileRoute, Link, useLocation } from '@tanstack/react-router'
 import { m } from '@/paraglide/messages.js'
 import { getLocale } from '@/paraglide/runtime.js'
 import { useServerFn } from '@tanstack/react-start'
-import { toast } from 'sonner'
+import { toast } from '@/components/ui/toast'
 import { useCallback, useEffect, useState } from 'react'
 import type React from 'react'
 import {
@@ -177,7 +177,7 @@ function CreateRoleDialog({
                     <Select
                       key={action.key}
                       value={permissions[`${resource.key}:${action.key}`] || 'none'}
-                      onValueChange={(value: string) => handleLevelChange(resource.key, action.key, value)}
+                      onValueChange={(value) => handleLevelChange(resource.key, action.key, value ?? "")}
                     >
                       <SelectTrigger className="h-8">
                         <SelectValue>

package/src/routes/_nav/sso/route.lazy.tsx

@@ -18,7 +18,7 @@
 import { createLazyFileRoute } from '@tanstack/react-router'
 import { m } from '@/paraglide/messages.js'
 import { useServerFn } from '@tanstack/react-start'
-import { toast } from 'sonner'
+import { toast } from '@/components/ui/toast'
 import type React from 'react'
 import { deleteSsoProviderFn, toggleSsoProviderFn } from '@/server/serverFns/sso-config'
 import { Badge } from '@/components/ui/badge'

package/src/routes/_nav/users/$userId/route.lazy.tsx

@@ -75,7 +75,7 @@ import {
   ShoppingBagIcon,
   ShieldCheckIcon,
 } from 'lucide-react'
-import { toast } from '@/components/ui/sonner'
+import { toast } from '@/components/ui/toast'
 import { parseUserAgent, formatParsedUA } from '@allbluecn/kernel'
 import type { AvatarConfig } from '@allbluecn/kernel'
 import SettingsActivityLog, {
@@ -330,7 +330,7 @@ function UserDetailPage() {
           </DialogHeader>
           <div className="py-4">
             <Label>{m['admin-users_dialog_role_newRole']()}</Label>
-            <Select value={roleDialog.value} onValueChange={(v: string) => setRoleDialog((d) => ({ ...d, value: v }))}>
+            <Select value={roleDialog.value} onValueChange={(v) => setRoleDialog((d) => ({ ...d, value: v ?? "" }))}>
               <SelectTrigger><SelectValue /></SelectTrigger>
               <SelectContent>
                 <SelectItem value="USER">{m['admin-users_role_user']()}</SelectItem>
@@ -360,7 +360,7 @@ function UserDetailPage() {
           </DialogHeader>
           <div className="py-4">
             <Label>{m['admin-users_dialog_status_newStatus']()}</Label>
-            <Select value={statusDialog.value} onValueChange={(v: string) => setStatusDialog((d) => ({ ...d, value: v }))}>
+            <Select value={statusDialog.value} onValueChange={(v) => setStatusDialog((d) => ({ ...d, value: v ?? "" }))}>
               <SelectTrigger><SelectValue /></SelectTrigger>
               <SelectContent>
                 <SelectItem value="ACTIVE">{m['admin-users_status_active']()}</SelectItem>

package/src/routes/setup/route.lazy.tsx

@@ -18,7 +18,7 @@
 import { createLazyFileRoute, useNavigate } from '@tanstack/react-router'
 import { m } from '@/paraglide/messages.js'
 import { useState } from 'react'
-import { toast } from '@/components/ui/sonner'
+import { toast } from '@/components/ui/toast'
 import { Loader2, ShieldCheck, User, Mail, Database } from 'lucide-react'
 import { AuthLayout, AuthLayoutLeft, AuthLayoutRight } from '@/components/auth/auth-layout'
 import { AuthHeader } from '@/components/auth/auth-header'

package/src/server/__tests__/prompt-defaults.test.ts

@@ -0,0 +1,139 @@
+// SPDX-License-Identifier: AGPL-3.0-or-later
+// AllBlue - 理想之海
+// Copyright (C) 2026 AllBlue Contributors
+//
+// This program is free software: you can redistribute it and/or modify
+// it under the terms of the GNU Affero General Public License as published by
+// the Free Software Foundation, either version 3 of the License, or
+// (at your option) any later version.
+//
+// This program is distributed in the hope that it will be useful,
+// but WITHOUT ANY WARRANTY; without even the implied warranty of
+// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+// GNU Affero General Public License for more details.
+//
+// You should have received a copy of the GNU Affero General Public License
+// along with this program. If not, see <https://www.gnu.org/licenses/>.
+
+import { describe, it, expect, vi, beforeEach } from "vitest"
+import { type PromptSection } from "@allbluecn/web-app/ai-gateway/prompts/definitions"
+
+const mocks = vi.hoisted(() => {
+  const findMany = vi.fn()
+  const createMany = vi.fn()
+  return {
+    findMany,
+    createMany,
+    prisma: {
+      systemPromptTemplate: { findMany, createMany },
+    },
+  }
+})
+
+vi.mock("@allbluecn/database", () => ({ prisma: mocks.prisma }))
+
+// 内置定义走真实实现：admin 与 web 共享同一份默认提示词，
+// 这里 mock 掉会掩盖「默认值为空」这类回归。
+import { backfillMissingPromptTemplates } from "../serverFns/ai-prompts/prompt-defaults"
+import { promptSectionSchema } from "../serverFns/ai-prompts/prompt-schemas"
+import { listPromptDefinitions } from "@allbluecn/web-app/ai-gateway/prompts/definitions"
+
+interface BackfillRow {
+  key: string
+  name: string
+  description: string | null
+  sections: PromptSection[]
+  variables: unknown[]
+  version: number
+  isProtected: boolean
+}
+
+const getPrisma = () =>
+  (mocks.prisma.systemPromptTemplate as unknown) as {
+    findMany: ReturnType<typeof vi.fn>
+    createMany: ReturnType<typeof vi.fn>
+  }
+
+function writtenRows(): BackfillRow[] {
+  return getPrisma().createMany.mock.calls[0]?.[0].data ?? []
+}
+
+beforeEach(() => {
+  vi.clearAllMocks()
+  getPrisma().createMany.mockResolvedValue({ count: 0 })
+})
+
+describe("backfillMissingPromptTemplates", () => {
+  it("DB 为空时补种全部内置 key，且写入的是内置默认正文", async () => {
+    const defaults = listPromptDefinitions()
+    getPrisma().findMany.mockResolvedValue([])
+
+    const created = await backfillMissingPromptTemplates()
+
+    expect(created).toBe(defaults.length)
+    expect(writtenRows()).toHaveLength(defaults.length)
+    expect(writtenRows().every((row) => row.version === 1 && row.sections.length > 0)).toBe(true)
+    const chat = writtenRows().find((row) => row.key === "chat.default")
+    expect(chat).toBeDefined()
+    expect(chat!.sections.every((section) => section.template.trim().length > 0)).toBe(true)
+  })
+
+  it("只补缺失的 key，已存在的行（含停用/留空）不动", async () => {
+    const defaults = listPromptDefinitions()
+    const known = defaults.slice(0, 3).map((definition) => definition.key)
+    getPrisma().findMany.mockResolvedValue(known.map((key) => ({ key })))
+
+    const created = await backfillMissingPromptTemplates()
+
+    expect(created).toBe(defaults.length - 3)
+    const writtenKeys = writtenRows().map((row) => row.key)
+    for (const key of known) {
+      expect(writtenKeys).not.toContain(key)
+    }
+  })
+
+  it("无缺失时不写库", async () => {
+    getPrisma().findMany.mockResolvedValue(
+      listPromptDefinitions().map((definition) => ({ key: definition.key })),
+    )
+
+    expect(await backfillMissingPromptTemplates()).toBe(0)
+    expect(getPrisma().createMany).not.toHaveBeenCalled()
+  })
+
+  it("createMany 撞唯一约束（并发补种）时吞掉并返回 0，不向上抛", async () => {
+    getPrisma().findMany.mockResolvedValue([])
+    getPrisma().createMany.mockRejectedValue(
+      Object.assign(new Error("unique constraint"), { code: "P2002" }),
+    )
+
+    await expect(backfillMissingPromptTemplates()).resolves.toBe(0)
+  })
+
+  it("任何写库异常都被吞成 0，调用方按现状读取", async () => {
+    getPrisma().findMany.mockResolvedValue([])
+    getPrisma().createMany.mockRejectedValue(new Error("boom"))
+
+    await expect(backfillMissingPromptTemplates()).resolves.toBe(0)
+  })
+})
+
+describe("promptSectionSchema 非空约束", () => {
+  it("空串与纯空白分区被拒绝", () => {
+    for (const template of ["", "   ", "\t\n", "\u3000"]) {
+      expect(promptSectionSchema.safeParse({ id: "a", order: 1, template }).success).toBe(false)
+    }
+  })
+
+  it("合法分区通过，且落库前会被 trim", () => {
+    const parsed = promptSectionSchema.safeParse({
+      id: "a",
+      order: 1,
+      template: "  带空白的正文  ",
+    })
+    expect(parsed.success).toBe(true)
+    if (parsed.success) {
+      expect(parsed.data.template).toBe("带空白的正文")
+    }
+  })
+})

package/src/server/admin-ai-usage.ts

@@ -4,6 +4,7 @@ export interface AiUsageOverview {
   totalCalls: number
   totalCostUsd: number | null
   bySource: Array<{ source: string; count: number }>
+  byActivity: Array<{ activity: string | null; count: number; minutes: number }>
   topWorkspaces: Array<{
     workspaceId: string
     workspaceName?: string
@@ -42,6 +43,7 @@ export async function getAiUsageOverview(options: AiUsageOverviewOptions = {}):
     topWorkspacesCount,
     topUsersRaw,
     topUsersCount,
+    byActivityRaw,
     recentLogs,
   ] = await Promise.all([
     prisma.aiUsageLog.count({ where: { createdAt: { gte: since } } }),
@@ -61,12 +63,12 @@ export async function getAiUsageOverview(options: AiUsageOverviewOptions = {}):
       orderBy: { _count: { workspaceId: 'desc' } },
       take: workspacePerPage,
       skip: (workspacePage - 1) * workspacePerPage,
-      where: { createdAt: { gte: since } },
+      where: { createdAt: { gte: since }, workspaceId: { not: null } },
     }),
     prisma.aiUsageLog.groupBy({
       by: ['workspaceId'],
       _count: true,
-      where: { createdAt: { gte: since } },
+      where: { createdAt: { gte: since }, workspaceId: { not: null } },
     }).then((r) => r.length),
     prisma.aiUsageLog.groupBy({
       by: ['userId'],
@@ -81,6 +83,12 @@ export async function getAiUsageOverview(options: AiUsageOverviewOptions = {}):
       _count: true,
       where: { createdAt: { gte: since } },
     }).then((r) => r.length),
+    prisma.aiUsageLog.groupBy({
+      by: ['activity'],
+      _count: true,
+      _sum: { durationMs: true },
+      where: { createdAt: { gte: since } },
+    }),
     prisma.aiUsageLog.findMany({
       where: { createdAt: { gte: since } },
       select: { createdAt: true, costUsd: true },
@@ -99,7 +107,12 @@ export async function getAiUsageOverview(options: AiUsageOverviewOptions = {}):
     .map(([date, v]) => ({ date, ...v }))
     .sort((a, b) => a.date.localeCompare(b.date))
 
-  const workspaceIds = topWorkspacesRaw.map((w) => w.workspaceId)
+  // Prisma 按模型字段类型推断 groupBy 输出为 string | null（`not: null` 不改推断），
+  // 这里显式收窄，避免 null 行混进 topWorkspaces。
+  const topWorkspaceRows = topWorkspacesRaw.filter(
+    (w): w is typeof w & { workspaceId: string } => w.workspaceId !== null,
+  )
+  const workspaceIds = topWorkspaceRows.map((w) => w.workspaceId)
   const userIds = topUsersRaw.map((u) => u.userId)
   const [workspaces, users] = await Promise.all([
     workspaceIds.length > 0
@@ -116,7 +129,12 @@ export async function getAiUsageOverview(options: AiUsageOverviewOptions = {}):
     totalCalls,
     totalCostUsd: costAgg._sum.costUsd ? Number(costAgg._sum.costUsd) : null,
     bySource: bySource.map((b) => ({ source: b.source, count: b._count })),
-    topWorkspaces: topWorkspacesRaw.map((w) => ({
+    byActivity: byActivityRaw.map((a) => ({
+      activity: a.activity,
+      count: a._count,
+      minutes: Math.ceil((a._sum.durationMs ?? 0) / 60_000),
+    })),
+    topWorkspaces: topWorkspaceRows.map((w) => ({
       workspaceId: w.workspaceId,
       workspaceName: wsNameMap.get(w.workspaceId),
       count: w._count,

package/src/server/ai-memory/store.ts

@@ -0,0 +1,103 @@
+// SPDX-License-Identifier: AGPL-3.0-or-later
+// AllBlue - 理想之海
+// Copyright (C) 2026 AllBlue Contributors
+//
+// This program is free software: you can redistribute it and/or modify
+// it under the terms of the GNU Affero General Public License as published by
+// the Free Software Foundation, either version 3 of the License, or
+// (at your option) any later version.
+//
+// This program is distributed in the hope that it will be useful,
+// but WITHOUT ANY WARRANTY; without even the implied warranty of
+// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+// GNU Affero General Public License for more details.
+//
+// You should have received a copy of the GNU Affero General Public License
+// along with this program. If not, see <https://www.gnu.org/licenses/>.
+
+// apps/admin/src/server/ai-memory/store.ts
+import { prisma } from "@allbluecn/database"
+
+// memory_facts 是 pgvector 原生表（Prisma 无法表达 vector 类型，同族参考
+// knowledge_embeddings / prd_embeddings），由 migration 建表、以 raw SQL 读写。
+// 桌面端 SQLite 无此表，本模块仅在 Web/Admin 服务端路径使用。
+
+export interface MemoryFactRow {
+  id: string
+  content: string
+  threadId: string
+  createdAt: Date
+}
+
+export interface MemoryStats {
+  count: number
+  lastWriteAt: Date | null
+}
+
+export const MEMORY_FACTS_LIST_LIMIT = 500
+
+function toIso(value: unknown): string | null {
+  if (value === null || value === undefined) return null
+  const date = value instanceof Date ? value : new Date(String(value))
+  return Number.isNaN(date.getTime()) ? null : date.toISOString()
+}
+
+export async function listMemoryFacts(
+  userId: string,
+  limit = MEMORY_FACTS_LIST_LIMIT,
+): Promise<Array<MemoryFactRow>> {
+  const rows = (await prisma.$queryRawUnsafe(
+    `SELECT "id", "content", "threadId", "createdAt"
+     FROM "memory_facts"
+     WHERE "userId" = $1
+     ORDER BY "createdAt" DESC
+     LIMIT $2`,
+    userId,
+    limit,
+  )) as Array<{
+    id: string
+    content: string
+    threadId: string
+    createdAt: Date | string
+  }>
+
+  return rows.map((row) => ({
+    id: row.id,
+    content: row.content,
+    threadId: row.threadId,
+    createdAt:
+      row.createdAt instanceof Date
+        ? row.createdAt
+        : new Date(String(row.createdAt)),
+  }))
+}
+
+export async function countMemoryFacts(
+  userId: string,
+): Promise<MemoryStats> {
+  const rows = (await prisma.$queryRawUnsafe(
+    `SELECT COUNT(*)::int AS "c", MAX("createdAt") AS "lastWriteAt"
+     FROM "memory_facts"
+     WHERE "userId" = $1`,
+    userId,
+  )) as Array<{ c: number | string; lastWriteAt: Date | string | null }>
+  const row = rows[0]
+  return {
+    count: row ? Number(row.c) : 0,
+    lastWriteAt: toIso(row?.lastWriteAt) ? new Date(toIso(row!.lastWriteAt)!) : null,
+  }
+}
+
+export async function deleteMemoryFact(id: string): Promise<number> {
+  return prisma.$executeRawUnsafe(
+    `DELETE FROM "memory_facts" WHERE "id" = $1`,
+    id,
+  )
+}
+
+export async function clearMemoryFacts(userId: string): Promise<number> {
+  return prisma.$executeRawUnsafe(
+    `DELETE FROM "memory_facts" WHERE "userId" = $1`,
+    userId,
+  )
+}

package/src/server/serverFns/ai-memory/clear.ts

@@ -0,0 +1,31 @@
+// SPDX-License-Identifier: AGPL-3.0-or-later
+// AllBlue - 理想之海
+// Copyright (C) 2026 AllBlue Contributors
+//
+// This program is free software: you can redistribute it and/or modify
+// it under the terms of the GNU Affero General Public License as published by
+// the Free Software Foundation, either version 3 of the License, or
+// (at your option) any later version.
+//
+// This program is distributed in the hope that it will be useful,
+// but WITHOUT ANY WARRANTY; without even the implied warranty of
+// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+// GNU Affero General Public License for more details.
+//
+// You should have received a copy of the GNU Affero General Public License
+// along with this program. If not, see <https://www.gnu.org/licenses/>.
+
+// apps/admin/srcRust/server/serverFns/ai-memory/clear.ts
+import { createServerFn } from "@tanstack/react-start"
+import { z } from "zod"
+import { requireAdmin } from "../../auth-helpers"
+import { clearMemoryFacts } from "../../ai-memory/store"
+
+/** 清空某用户的全部跨会话记忆事实 */
+export const clearMemoryFactsFn = createServerFn({ method: "POST" })
+  .validator(z.object({ userId: z.string().trim().min(1) }))
+  .handler(async ({ data }) => {
+    await requireAdmin()
+    const count = await clearMemoryFacts(data.userId)
+    return { deleted: count }
+  })

package/src/server/serverFns/ai-memory/delete.ts

@@ -0,0 +1,31 @@
+// SPDX-License-Identifier: AGPL-3.0-or-later
+// AllBlue - 理想之海
+// Copyright (C) 2026 AllBlue Contributors
+//
+// This program is free software: you can redistribute it and/or modify
+// it under the terms of the GNU Affero General Public License as published by
+// the Free Software Foundation, either version 3 of the License, or
+// (at your option) any later version.
+//
+// This program is distributed in the hope that it will be useful,
+// but WITHOUT ANY WARRANTY; without even the implied warranty of
+// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+// GNU Affero General Public License for more details.
+//
+// You should have received a copy of the GNU Affero General Public License
+// along with this program. If not, see <https://www.gnu.org/licenses/>.
+
+// apps/adminRust/src/server/serverFns/ai-memory/delete.ts
+import { createServerFn } from "@tanstack/react-start"
+import { z } from "zod"
+import { requireAdmin } from "../../auth-helpers"
+import { deleteMemoryFact } from "../../ai-memory/store"
+
+/** 删除单条记忆事实 */
+export const deleteMemoryFactFn = createServerFn({ method: "POST" })
+  .validator(z.object({ id: z.string().trim().min(1) }))
+  .handler(async ({ data }) => {
+    await requireAdmin()
+    const count = await deleteMemoryFact(data.id)
+    return { deleted: count }
+  })

package/src/server/serverFns/ai-memory/list-users.ts

@@ -0,0 +1,40 @@
+// SPDX-License-Identifier: AGPL-3.0-or-later
+// AllBlue - 理想之海
+// Copyright (C) 2026 AllBlue Contributors
+//
+// This program is free software: you can redistribute it and/or modify
+// it under the terms of the GNU Affero General Public License as published by
+// the Free Software Foundation, either version 3 of the License, or
+// (at your option) any later version.
+//
+// This program is distributed in the hope that it will be useful,
+// but WITHOUT ANY WARRANTY; without even the implied warranty of
+// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+// GNU Affero General Public License for more details.
+//
+// You should have received a copy of the GNU Affero General Public License
+// along with this program. If not, see <https://www.gnu.org/licenses/>.
+
+// apps/admin/src/server/serverFns/ai-memory/list-users.ts
+import { createServerFn } from "@tanstack/react-start"
+import { z } from "zod"
+import { prisma } from "@allbluecn/database"
+import { requireAdmin } from "../../auth-helpers"
+
+/** 列出可查询的用户（admin 按 userId 查记忆事实的前置选择） */
+export const listMemoryUsersFn = createServerFn({ method: "GET" })
+  .validator(z.object({}))
+  .handler(async () => {
+    await requireAdmin()
+    const users = await prisma.user.findMany({
+      orderBy: [{ username: "asc" }],
+      take: 200,
+      select: { id: true, username: true, email: true, createdAt: true },
+    })
+    return users.map((user) => ({
+      id: user.id,
+      username: user.username,
+      email: user.email,
+      createdAt: user.createdAt.toISOString(),
+    }))
+  })

package/src/server/serverFns/ai-memory/list.ts

@@ -0,0 +1,54 @@
+// SPDX-License-Identifier: AGPL-3.0-or-later
+// AllBlue - 理想之海
+// Copyright (C) 2026 AllBlue Contributors
+//
+// This program is free software: you can redistribute it and/or modify
+// it under the terms of the GNU Affero General Public License as published by
+// the Free Software Foundation, either version 3 of the License, or
+// (at your option) any later version.
+//
+// This program is distributed in the hope that it will be useful,
+// but WITHOUT ANY WARRANTY; without even the implied warranty of
+// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+// GNU Affero General Public License for more details.
+//
+// You should have received a copy of the GNU Affero General Public License
+// along with this program. If not, see <https://www.gnu.org/licenses/>.
+
+// apps/admin/src/server/serverFns/ai-memory/list.ts
+import { createServerFn } from "@tanstack/react-start"
+import { z } from "zod"
+import { requireAdmin } from "../../auth-helpers"
+import {
+  MEMORY_FACTS_LIST_LIMIT,
+  countMemoryFacts,
+  listMemoryFacts,
+} from "../../ai-memory/store"
+
+/** 按用户列出其沉淀的跨会话记忆事实 */
+export const listMemoryFactsFn = createServerFn({ method: "GET" })
+  .validator(
+    z.object({
+      userId: z.string().trim().min(1),
+      limit: z.number().int().min(1).max(MEMORY_FACTS_LIST_LIMIT).optional(),
+    }),
+  )
+  .handler(async ({ data }) => {
+    await requireAdmin()
+    const { userId, limit } = data
+    const [facts, stats] = await Promise.all([
+      listMemoryFacts(userId, limit),
+      countMemoryFacts(userId),
+    ])
+    return {
+      userId,
+      count: stats.count,
+      lastWriteAt: stats.lastWriteAt?.toISOString() ?? null,
+      facts: facts.map((fact) => ({
+        id: fact.id,
+        content: fact.content,
+        threadId: fact.threadId,
+        createdAt: fact.createdAt.toISOString(),
+      })),
+    }
+  })