@ploykit/ui 0.0.0-stage → 0.1.0

package/dist/pages/admin/UserDetailPage.js

@@ -0,0 +1,266 @@
+import { jsx as _jsx, jsxs as _jsxs, Fragment as _Fragment } from "react/jsx-runtime";
+import { useState } from 'react';
+import { Link, useNavigate, useParams } from 'react-router';
+import { ArrowLeft, Download } from 'lucide-react';
+import { useMutation, useQuery, useQueryClient } from '@tanstack/react-query';
+import { apiFetch } from '@ploykit/client';
+import { useConfirm } from '../../components/ConfirmDialog';
+import { DataTable } from '../../components/DataTable';
+import { PageEmpty, PageError, PageHeader } from '../../components/Page';
+import { ImpactConfirmation } from '../../components/SecretModal';
+import { SettingsCard } from '../../components/SettingsCard';
+import { toast } from '../../components/toast';
+import { Badge, StatusBadge } from '../../components/ui/Badge';
+import { Button } from '../../components/ui/Button';
+import { Input } from '../../components/ui/Input';
+import { useApi, ApiError } from '../../hooks/useApi';
+import { useAuth } from '../../hooks/useAuth';
+import { apiErrorMessage } from '../../lib/api-error';
+import { formatDate, formatDateTime, shortID } from '../../lib/utils';
+import { adminError } from './shared';
+function resendErrorMessage(err) {
+    if (err instanceof ApiError) {
+        if (err.status === 409)
+            return '该用户邮箱已验证，无需重发';
+        if (err.status === 429)
+            return '发送冷却中，请约 1 分钟后再试';
+    }
+    return apiErrorMessage(err, '验证邮件发送失败');
+}
+export function UserDetailPage() {
+    const { id = '' } = useParams();
+    const api = useApi();
+    const qc = useQueryClient();
+    const confirm = useConfirm();
+    const navigate = useNavigate();
+    const me = useAuth().user;
+    const [confirmEmail, setConfirmEmail] = useState('');
+    const [deleteOpen, setDeleteOpen] = useState(false);
+    const [kickOpen, setKickOpen] = useState(false);
+    const [exporting, setExporting] = useState(false);
+    const detailQ = useQuery({
+        queryKey: ['admin', 'user', id],
+        queryFn: () => api.get(`/api/admin/users/${id}`),
+        enabled: !!id,
+    });
+    const invalidate = () => {
+        void qc.invalidateQueries({ queryKey: ['admin', 'user', id] });
+        void qc.invalidateQueries({ queryKey: ['admin', 'users'] });
+    };
+    const kickM = useMutation({
+        mutationFn: () => api.post(`/api/admin/users/${id}/kick`),
+        onSuccess: () => {
+            toast.success('已吊销该用户全部在途会话');
+            invalidate();
+        },
+        onError: (e) => toast.error(apiErrorMessage(e, '踢下线失败')),
+    });
+    const revokeSessionM = useMutation({
+        mutationFn: (sid) => api.post(`/api/admin/users/${id}/sessions/${sid}/revoke`),
+        onSuccess: () => {
+            toast.success('会话已吊销');
+            invalidate();
+        },
+        onError: (e) => toast.error(apiErrorMessage(e, '会话吊销失败')),
+    });
+    const resetPwdM = useMutation({
+        mutationFn: () => api.post(`/api/admin/users/${id}/password-reset`),
+        onSuccess: () => toast.success('重置邮件已发送'),
+        onError: (e) => toast.error(apiErrorMessage(e, '重置邮件发送失败')),
+    });
+    const resendM = useMutation({
+        mutationFn: () => api.post(`/api/admin/users/${id}/resend-verification`),
+        onSuccess: () => toast.success('验证邮件已发送'),
+        onError: (e) => toast.error(resendErrorMessage(e)),
+    });
+    const markVerifiedM = useMutation({
+        mutationFn: () => api.post(`/api/admin/users/${id}/mark-verified`),
+        onSuccess: () => {
+            toast.success('已标记邮箱已验证');
+            invalidate();
+        },
+        onError: (e) => toast.error(apiErrorMessage(e, '标记失败')),
+    });
+    const revokePatM = useMutation({
+        mutationFn: (patID) => api.post(`/api/admin/users/${id}/pats/${patID}/revoke`),
+        onSuccess: () => {
+            toast.success('令牌已吊销');
+            invalidate();
+        },
+        onError: (e) => toast.error(apiErrorMessage(e, '令牌吊销失败')),
+    });
+    const deleteM = useMutation({
+        mutationFn: (email) => api.delete(`/api/admin/users/${id}?confirm=${encodeURIComponent(email)}`),
+        onSuccess: () => {
+            toast.success('账号已删除（软删）');
+            void qc.invalidateQueries({ queryKey: ['admin', 'users'] });
+            navigate('/admin/users');
+        },
+        onError: (e) => toast.error(apiErrorMessage(e, '删除失败')),
+    });
+    const onExportData = async () => {
+        setExporting(true);
+        try {
+            const blob = await apiFetch(`/api/admin/users/${id}/export`, {
+                responseType: 'blob',
+            });
+            const url = URL.createObjectURL(blob);
+            const a = document.createElement('a');
+            a.href = url;
+            a.download = `userdata-${id}.json`;
+            a.click();
+            URL.revokeObjectURL(url);
+            toast.success('用户数据导出已开始下载');
+        }
+        catch (e) {
+            toast.error(apiErrorMessage(e, '导出失败'));
+        }
+        finally {
+            setExporting(false);
+        }
+    };
+    const onRevokeSession = async (s) => {
+        const ok = await confirm({
+            title: '吊销会话',
+            description: `将吊销该设备会话（${s.device || shortID(s.id)}），该设备需要重新登录。`,
+            confirmText: '吊销',
+            danger: true,
+        });
+        if (ok)
+            revokeSessionM.mutate(s.id);
+    };
+    const onRevokePat = async (p) => {
+        const ok = await confirm({
+            title: '吊销访问令牌',
+            description: `将吊销「${p.name}」，使用该令牌的集成立即失效。`,
+            confirmText: '吊销',
+            danger: true,
+        });
+        if (ok)
+            revokePatM.mutate(p.id);
+    };
+    if (detailQ.isError) {
+        return (_jsxs("div", { children: [_jsx(PageHeader, { title: "\u7528\u6237\u8BE6\u60C5" }), _jsx(PageError, { message: adminError(detailQ.error, '用户详情加载失败'), onRetry: () => void detailQ.refetch() })] }));
+    }
+    const d = detailQ.data;
+    const u = d?.user;
+    const isSelf = !!u && me?.id === u.id;
+    const deleteBlockedReason = isSelf
+        ? '不能删除当前登录的管理员账号自己'
+        : u?.is_platform_admin
+            ? '不能删除另一位平台管理员（admin-on-admin 禁止）'
+            : '';
+    const emailReadyToDelete = !!u && confirmEmail.trim().toLowerCase() === u.email.toLowerCase();
+    const sessionColumns = [
+        {
+            key: 'device',
+            header: '设备',
+            render: (s) => (_jsxs("div", { className: "min-w-0", children: [_jsx("p", { className: "truncate", children: s.device || '未知设备' }), _jsx("p", { className: "truncate font-mono text-xs text-muted-foreground", title: s.ip_hash, children: s.ip_hash ? shortID(s.ip_hash) : '—' })] })),
+        },
+        {
+            key: 'last_seen_at',
+            header: '最近活跃',
+            className: 'w-44',
+            render: (s) => (_jsx("span", { className: "whitespace-nowrap text-muted-foreground", children: formatDateTime(s.last_seen_at) })),
+        },
+        {
+            key: 'expires_at',
+            header: '过期时间',
+            className: 'w-44',
+            render: (s) => (_jsx("span", { className: "whitespace-nowrap text-muted-foreground", children: formatDateTime(s.expires_at) })),
+        },
+        {
+            key: 'actions',
+            header: '操作',
+            className: 'w-20',
+            render: (s) => (_jsx(Button, { variant: "outline", size: "sm", disabled: revokeSessionM.isPending, onClick: () => void onRevokeSession(s), children: "\u540A\u9500" })),
+        },
+    ];
+    const patColumns = [
+        {
+            key: 'name',
+            header: '令牌',
+            render: (p) => (_jsxs("div", { className: "min-w-0", children: [_jsxs("p", { className: "truncate font-medium", children: [p.name, p.revoked_at && (_jsx(Badge, { variant: "outline", className: "ml-2 text-muted-foreground", children: "\u5DF2\u540A\u9500" }))] }), _jsxs("p", { className: "truncate font-mono text-xs text-muted-foreground", children: [p.prefix, "\u2026"] })] })),
+        },
+        {
+            key: 'created_at',
+            header: '创建时间',
+            className: 'w-28',
+            render: (p) => (_jsx("span", { className: "whitespace-nowrap text-muted-foreground", children: formatDate(p.created_at) })),
+        },
+        {
+            key: 'last_used_at',
+            header: '最近使用',
+            className: 'w-44',
+            render: (p) => (_jsx("span", { className: "whitespace-nowrap text-muted-foreground", children: p.last_used_at ? formatDateTime(p.last_used_at) : '从未使用' })),
+        },
+        {
+            key: 'expires_at',
+            header: '过期时间',
+            className: 'w-28',
+            render: (p) => (_jsx("span", { className: "whitespace-nowrap text-muted-foreground", children: p.expires_at ? formatDate(p.expires_at) : '永不过期' })),
+        },
+        {
+            key: 'actions',
+            header: '操作',
+            className: 'w-20',
+            render: (p) => p.revoked_at ? (_jsx("span", { className: "text-xs text-muted-foreground", children: "\u2014" })) : (_jsx(Button, { variant: "outline", size: "sm", disabled: revokePatM.isPending, onClick: () => void onRevokePat(p), children: "\u540A\u9500" })),
+        },
+    ];
+    const wsColumns = [
+        {
+            key: 'name',
+            header: '工作区',
+            render: (w) => (_jsxs("div", { className: "min-w-0", children: [_jsx("p", { className: "truncate font-medium", children: w.name }), _jsx("p", { className: "truncate font-mono text-xs text-muted-foreground", children: w.slug })] })),
+        },
+        {
+            key: 'role',
+            header: '角色',
+            className: 'w-24',
+            render: (w) => _jsx(StatusBadge, { status: w.role }),
+        },
+        {
+            key: 'created_at',
+            header: '加入时间',
+            className: 'w-28',
+            render: (w) => (_jsx("span", { className: "whitespace-nowrap text-muted-foreground", children: formatDate(w.created_at) })),
+        },
+    ];
+    return (_jsxs("div", { className: "space-y-6", children: [_jsx(PageHeader, { title: u ? u.email : '用户详情', description: u
+                    ? `${u.display_name || '未设置昵称'} · 用户 ID ${shortID(u.id)}`
+                    : '用户资料与会话 / 令牌 / 工作区聚合视图', actions: _jsxs(_Fragment, { children: [_jsxs(Button, { variant: "outline", size: "sm", disabled: exporting || !u, onClick: () => void onExportData(), title: "GDPR \u7528\u6237\u6570\u636E\u5BFC\u51FA\uFF08\u8D44\u6599 / \u6210\u5458\u5173\u7CFB / \u5728\u9014\u4F1A\u8BDD\u5143\u6570\u636E / PAT \u5143\u6570\u636E / \u6700\u8FD1\u5BA1\u8BA1\u4E8B\u4EF6\uFF09", children: [_jsx(Download, {}), " ", exporting ? '导出中…' : '导出数据'] }), _jsxs(Link, { to: "/admin/users", className: "text-sm text-muted-foreground transition-colors hover:text-foreground", children: [_jsx(ArrowLeft, { size: 15, className: "mr-1 inline", "aria-hidden": "true" }), "\u8FD4\u56DE\u7528\u6237\u5217\u8868"] })] }) }), detailQ.isPending && (_jsx("p", { className: "text-sm text-muted-foreground", children: "\u52A0\u8F7D\u7528\u6237\u8BE6\u60C5\u4E2D\u2026" })), u && (_jsxs(_Fragment, { children: [_jsxs(SettingsCard, { title: "\u8D26\u53F7\u8D44\u6599\u4E0E\u5B89\u5168\u64CD\u4F5C", description: "\u72B6\u6001\u3001\u9A8C\u8BC1\u4E0E\u767B\u5F55\u4F1A\u8BDD\u7684\u5168\u5C40\u64CD\u4F5C\uFF08\u5168\u90E8\u8BB0\u5165\u5E73\u53F0\u5BA1\u8BA1\uFF09", cta: _jsx(Button, { variant: "destructive", onClick: () => setKickOpen(true), disabled: kickM.isPending, children: kickM.isPending ? '踢下线中…' : '踢下线' }), children: [_jsxs("div", { className: "grid gap-x-8 gap-y-3 text-sm sm:grid-cols-2 lg:grid-cols-3", children: [_jsxs("p", { className: "flex items-center gap-2", children: [_jsx("span", { className: "text-muted-foreground", children: "\u72B6\u6001\uFF1A" }), _jsx(StatusBadge, { status: u.status })] }), _jsxs("p", { className: "flex items-center gap-2", children: [_jsx("span", { className: "text-muted-foreground", children: "\u90AE\u7BB1\u9A8C\u8BC1\uFF1A" }), u.email_verified ? (_jsx(Badge, { variant: "outline", children: "\u5DF2\u9A8C\u8BC1" })) : (_jsx(Badge, { variant: "outline", className: "text-muted-foreground", children: "\u672A\u9A8C\u8BC1" }))] }), _jsxs("p", { className: "flex items-center gap-2", children: [_jsx("span", { className: "text-muted-foreground", children: "\u5E73\u53F0\u7BA1\u7406\u5458\uFF1A" }), u.is_platform_admin ? (_jsx(Badge, { variant: "secondary", children: "\u662F" })) : (_jsx("span", { children: "\u5426" }))] }), _jsxs("p", { children: [_jsx("span", { className: "text-muted-foreground", children: "\u6CE8\u518C\u65F6\u95F4\uFF1A" }), formatDateTime(u.created_at)] }), _jsxs("p", { children: [_jsx("span", { className: "text-muted-foreground", children: "\u6700\u8FD1\u767B\u5F55\uFF1A" }), u.last_login_at ? formatDateTime(u.last_login_at) : '从未登录'] })] }), _jsxs("div", { className: "mt-4 flex flex-wrap gap-2 border-t pt-4", children: [_jsx(Button, { variant: "outline", size: "sm", disabled: resetPwdM.isPending, onClick: async () => {
+                                            const ok = await confirm({
+                                                title: '发送密码重置邮件',
+                                                description: `将向 ${u.email} 发送密码重置邮件（走用户自助重置链路，不直接改密码）。`,
+                                                confirmText: '发送邮件',
+                                            });
+                                            if (ok)
+                                                resetPwdM.mutate();
+                                        }, children: resetPwdM.isPending ? '发送中…' : '重置密码' }), _jsx(Button, { variant: "outline", size: "sm", disabled: resendM.isPending || u.email_verified, onClick: async () => {
+                                            const ok = await confirm({
+                                                title: '重发验证邮件',
+                                                description: `将向 ${u.email} 补发邮箱验证邮件（1 分钟冷却）。`,
+                                                confirmText: '发送邮件',
+                                            });
+                                            if (ok)
+                                                resendM.mutate();
+                                        }, children: resendM.isPending ? '发送中…' : '重发验证' }), _jsx(Button, { variant: "outline", size: "sm", disabled: markVerifiedM.isPending || u.email_verified, onClick: async () => {
+                                            const ok = await confirm({
+                                                title: '标记邮箱已验证',
+                                                description: '邮件链路不可达时的兜底：直接把该邮箱标记为已验证（幂等）。',
+                                                confirmText: '标记已验证',
+                                            });
+                                            if (ok)
+                                                markVerifiedM.mutate();
+                                        }, children: markVerifiedM.isPending ? '标记中…' : '标记已验证' })] })] }), _jsx(SettingsCard, { title: `在途会话（${d?.sessions.length ?? 0}）`, description: "\u8BE5\u7528\u6237\u5F53\u524D\u6709\u6548\u7684\u767B\u5F55\u4F1A\u8BDD\uFF1B\u53EF\u5355\u8BBE\u5907\u540A\u9500", bodyClassName: "p-0", children: _jsx("div", { className: "px-6 pb-6", children: _jsx(DataTable, { columns: sessionColumns, rows: d?.sessions ?? [], rowKey: (s) => s.id, loading: detailQ.isPending, empty: _jsx(PageEmpty, { label: "\u6CA1\u6709\u5728\u9014\u4F1A\u8BDD", hint: "\u8BE5\u7528\u6237\u5F53\u524D\u6CA1\u6709\u4EFB\u4F55\u6D3B\u8DC3\u767B\u5F55\uFF08\u6216\u5DF2\u88AB\u8E22\u4E0B\u7EBF\uFF09" }) }) }) }), _jsx(SettingsCard, { title: `访问令牌 PAT（${d?.pats.length ?? 0}）`, description: "\u76EE\u6807\u7528\u6237\u4E2A\u4EBA\u8BBF\u95EE\u4EE4\u724C\u7684\u53EA\u8BFB\u5143\u6570\u636E\uFF08\u4E0D\u542B\u51ED\u636E\u6750\u6599\uFF09", bodyClassName: "p-0", children: _jsx("div", { className: "px-6 pb-6", children: _jsx(DataTable, { columns: patColumns, rows: d?.pats ?? [], rowKey: (p) => p.id, loading: detailQ.isPending, empty: _jsx(PageEmpty, { label: "\u6682\u65E0\u8BBF\u95EE\u4EE4\u724C" }) }) }) }), _jsx(SettingsCard, { title: `所属工作区（${d?.workspaces.length ?? 0}）`, description: "\u8BE5\u7528\u6237\u4F5C\u4E3A\u6210\u5458\u52A0\u5165\u7684\u5DE5\u4F5C\u533A\u4E0E\u89D2\u8272", bodyClassName: "p-0", children: _jsx("div", { className: "px-6 pb-6", children: _jsx(DataTable, { columns: wsColumns, rows: d?.workspaces ?? [], rowKey: (w) => w.id, loading: detailQ.isPending, empty: _jsx(PageEmpty, { label: "\u4E0D\u5C5E\u4E8E\u4EFB\u4F55\u5DE5\u4F5C\u533A", hint: "\u5DE5\u4F5C\u533A\u5217\u8868\u5668\u672A\u63A5\u7EBF\u65F6\u4E5F\u663E\u793A\u4E3A\u7A7A" }) }) }) }), _jsx(SettingsCard, { danger: true, title: "\u5220\u9664\u8D26\u53F7", description: "\u8F6F\u5220\uFF1Astatus=deleted\u3001\u90AE\u7BB1\u6539\u5199\u3001PAT \u5168\u540A\u9500\uFF0C\u4E0D\u53EF\u6062\u590D", cta: _jsx(Button, { variant: "destructive", disabled: !!deleteBlockedReason ||
+                                !emailReadyToDelete ||
+                                deleteM.isPending, onClick: () => setDeleteOpen(true), children: deleteM.isPending ? '删除中…' : '删除账号' }), children: _jsxs("div", { className: "max-w-xl space-y-2", children: [deleteBlockedReason ? (_jsxs("p", { className: "text-sm text-muted-foreground", children: [deleteBlockedReason, "\uFF0C\u65E0\u6CD5\u5728\u6B64\u5220\u9664\u3002"] })) : (_jsxs("p", { className: "text-sm text-muted-foreground", children: ["\u8F93\u5165\u76EE\u6807\u90AE\u7BB1 ", u.email, " \u4EE5\u786E\u8BA4\u5220\u9664\u3002"] })), _jsx(Input, { placeholder: u.email, value: confirmEmail, onChange: (e) => setConfirmEmail(e.target.value), "aria-label": "\u8F93\u5165\u76EE\u6807\u90AE\u7BB1\u4EE5\u786E\u8BA4\u5220\u9664", disabled: !!deleteBlockedReason })] }) }), _jsx(ImpactConfirmation, { open: deleteOpen, onOpenChange: setDeleteOpen, onConfirm: () => deleteM.mutate(u.email), title: `删除账号 ${u.email}`, confirmText: "\u6C38\u4E45\u5220\u9664", danger: true, impacts: [
+                            '账号进入 deleted 状态，邮箱被改写释放，无法恢复',
+                            '该用户全部在途会话与个人访问令牌（PAT）立即吊销',
+                            '名下工作区与业务数据保留，操作记入平台审计日志',
+                        ] }), _jsx(ImpactConfirmation, { open: kickOpen, onOpenChange: setKickOpen, onConfirm: () => kickM.mutate(), title: `踢下线 ${u.email}`, confirmText: "\u8E22\u4E0B\u7EBF", danger: true, impacts: [
+                            '该用户全部在途会话立即吊销，所有设备需重新登录',
+                            '账号状态不变（不是封禁），重新登录即可恢复',
+                            '操作将记入平台审计日志（admin.user_kick）',
+                        ] })] }))] }));
+}

package/dist/pages/admin/UsersPage.d.ts

@@ -0,0 +1,4 @@
+export interface UsersPageProps {
+    impersonatePath?: string;
+}
+export declare function UsersPage({ impersonatePath }?: UsersPageProps): import("react").JSX.Element;

package/dist/pages/admin/UsersPage.js

@@ -0,0 +1,201 @@
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import { useEffect, useState } from 'react';
+import { useNavigate, useSearchParams } from 'react-router';
+import { MoreHorizontal, LogIn, ShieldCheck, ShieldOff, UserCog, UserRoundSearch, } from 'lucide-react';
+import { useMutation, useQuery, useQueryClient } from '@tanstack/react-query';
+import { useConfirm } from '../../components/ConfirmDialog';
+import { DataTable } from '../../components/DataTable';
+import { PageEmpty, PageError, PageHeader } from '../../components/Page';
+import { ImpactConfirmation } from '../../components/SecretModal';
+import { toast } from '../../components/toast';
+import { Badge, StatusBadge } from '../../components/ui/Badge';
+import { Button } from '../../components/ui/Button';
+import { Input } from '../../components/ui/Input';
+import { DropdownMenu, DropdownMenuContent, DropdownMenuGroup, DropdownMenuItem, DropdownMenuLabel, DropdownMenuSeparator, DropdownMenuTrigger, } from '../../components/ui/menu';
+import { Select, SelectContent, SelectItem, SelectTrigger, SelectValue, } from '../../components/ui/select';
+import { useApi } from '../../hooks/useApi';
+import { useAuth } from '../../hooks/useAuth';
+import { formatDate, formatDateTime } from '../../lib/utils';
+import { ADMIN_PAGE_SIZE, adminError, adminListQuery, } from './shared';
+const STATUS_OPTIONS = [
+    { value: 'active', label: '生效中' },
+    { value: 'disabled', label: '已封禁' },
+];
+export function UsersPage({ impersonatePath = '/app' } = {}) {
+    const api = useApi();
+    const qc = useQueryClient();
+    const confirm = useConfirm();
+    const navigate = useNavigate();
+    const me = useAuth().user;
+    const [searchParams, setSearchParams] = useSearchParams();
+    const q = searchParams.get('q') ?? '';
+    const statusParam = searchParams.get('status') ?? '';
+    const status = STATUS_OPTIONS.some((s) => s.value === statusParam)
+        ? statusParam
+        : '';
+    const page = Math.max(1, Number.parseInt(searchParams.get('page') ?? '1', 10) || 1);
+    const applyFilter = (nextQ, nextStatus, nextPage) => {
+        const p = new URLSearchParams(searchParams);
+        if (nextQ)
+            p.set('q', nextQ);
+        else
+            p.delete('q');
+        if (nextStatus)
+            p.set('status', nextStatus);
+        else
+            p.delete('status');
+        if (nextPage > 1)
+            p.set('page', String(nextPage));
+        else
+            p.delete('page');
+        setSearchParams(p, { replace: true });
+    };
+    const [searchInput, setSearchInput] = useState(q);
+    const [action, setAction] = useState(null);
+    useEffect(() => {
+        const t = setTimeout(() => {
+            const next = searchInput.trim();
+            if (next !== q)
+                applyFilter(next, status, 1);
+        }, 300);
+        return () => clearTimeout(t);
+        // eslint-disable-next-line react-hooks/exhaustive-deps
+    }, [searchInput]);
+    const usersQ = useQuery({
+        queryKey: ['admin', 'users', page, q, status],
+        queryFn: () => api.get(`/api/admin/users${adminListQuery(page, ADMIN_PAGE_SIZE, { q, status })}`),
+    });
+    const invalidate = () => {
+        void qc.invalidateQueries({ queryKey: ['admin', 'users'] });
+        void qc.invalidateQueries({ queryKey: ['admin', 'user'] });
+        void qc.invalidateQueries({ queryKey: ['admin', 'stats'] });
+    };
+    const statusM = useMutation({
+        mutationFn: (v) => api.patch(`/api/admin/users/${v.user.id}/status`, { status: v.status }),
+        onSuccess: (_d, v) => {
+            toast.success(`${v.user.email} 已${v.status === 'disabled' ? '封禁' : '解封'}`);
+            setAction(null);
+            void invalidate();
+        },
+        onError: (e) => toast.error(adminError(e, '操作失败')),
+    });
+    const adminFlagM = useMutation({
+        mutationFn: (v) => api.patch(`/api/admin/users/${v.user.id}/admin`, { is_admin: v.isAdmin }),
+        onSuccess: (_d, v) => {
+            toast.success(`${v.user.email} ${v.isAdmin ? '已授予' : '已撤销'}平台管理员`);
+            void invalidate();
+        },
+        onError: (e) => toast.error(adminError(e, '操作失败')),
+    });
+    const impersonateM = useMutation({
+        mutationFn: (user) => api.post(`/api/admin/users/${user.id}/impersonate`),
+        onSuccess: () => {
+            window.location.href = impersonatePath;
+        },
+        onError: (e) => {
+            toast.error(adminError(e, '模拟登录失败'));
+            setAction(null);
+        },
+    });
+    const onToggleAdmin = async (user) => {
+        const revoke = user.is_platform_admin;
+        const ok = await confirm({
+            title: revoke ? '撤销平台管理员' : '授予平台管理员',
+            description: revoke
+                ? `${user.email} 将失去平台管理权限（管理控制台入口随之消失）。`
+                : `${user.email} 将获得平台管理权限，可进入管理控制台操作平台全部数据。`,
+            confirmText: revoke ? '撤销管理员' : '授予管理员',
+            danger: revoke,
+        });
+        if (ok)
+            adminFlagM.mutate({ user, isAdmin: !revoke });
+    };
+    const raw = usersQ.data?.items ?? [];
+    const total = usersQ.data?.total ?? 0;
+    const pastEnd = !usersQ.isPending && raw.length === 0 && page > 1;
+    const filtered = !!(q || status);
+    const columns = [
+        {
+            key: 'email',
+            header: '用户',
+            render: (u) => (_jsxs("div", { className: "min-w-0", children: [_jsxs("p", { className: "truncate font-medium", children: [u.email, u.is_platform_admin && (_jsx(Badge, { variant: "secondary", className: "ml-2", children: "\u5E73\u53F0\u7BA1\u7406\u5458" }))] }), _jsx("p", { className: "truncate text-xs text-muted-foreground", children: u.display_name || '—' })] })),
+        },
+        {
+            key: 'status',
+            header: '状态',
+            className: 'w-24',
+            render: (u) => _jsx(StatusBadge, { status: u.status }),
+        },
+        {
+            key: 'email_verified',
+            header: '邮箱验证',
+            className: 'w-24',
+            render: (u) => u.email_verified ? (_jsx(Badge, { variant: "outline", children: "\u5DF2\u9A8C\u8BC1" })) : (_jsx(Badge, { variant: "outline", className: "text-muted-foreground", children: "\u672A\u9A8C\u8BC1" })),
+        },
+        {
+            key: 'created_at',
+            header: '注册时间',
+            className: 'w-28',
+            render: (u) => (_jsx("span", { className: "whitespace-nowrap text-muted-foreground", children: formatDate(u.created_at) })),
+        },
+        {
+            key: 'last_login_at',
+            header: '最近登录',
+            className: 'w-44',
+            render: (u) => (_jsx("span", { className: "whitespace-nowrap text-muted-foreground", children: u.last_login_at ? formatDateTime(u.last_login_at) : '从未登录' })),
+        },
+        {
+            key: 'actions',
+            header: '操作',
+            className: 'w-16',
+            render: (u) => {
+                if (me?.id === u.id) {
+                    return (_jsxs(Button, { variant: "ghost", size: "sm", onClick: () => navigate(`/admin/users/${u.id}`), children: [_jsx(UserRoundSearch, {}), " \u8BE6\u60C5"] }));
+                }
+                return (_jsxs(DropdownMenu, { children: [_jsx(DropdownMenuTrigger, { className: "inline-flex size-8 items-center justify-center rounded-md text-muted-foreground transition-colors hover:bg-accent hover:text-accent-foreground max-md:size-10", "aria-label": `操作 ${u.email}`, children: _jsx(MoreHorizontal, { size: 16, "aria-hidden": "true" }) }), _jsxs(DropdownMenuContent, { align: "end", className: "w-48", children: [_jsx(DropdownMenuGroup, { children: _jsx(DropdownMenuLabel, { className: "truncate", children: u.email }) }), _jsx(DropdownMenuSeparator, {}), _jsxs(DropdownMenuItem, { onClick: () => navigate(`/admin/users/${u.id}`), children: [_jsx(UserRoundSearch, {}), " \u7528\u6237\u8BE6\u60C5"] }), _jsx(DropdownMenuSeparator, {}), u.status === 'active' ? (_jsxs(DropdownMenuItem, { variant: "destructive", onClick: () => setAction({ kind: 'disable', user: u }), children: [_jsx(ShieldOff, {}), " \u5C01\u7981\u8D26\u53F7"] })) : (_jsxs(DropdownMenuItem, { onClick: () => setAction({ kind: 'enable', user: u }), children: [_jsx(ShieldCheck, {}), " \u89E3\u5C01\u8D26\u53F7"] })), _jsxs(DropdownMenuItem, { onClick: () => void onToggleAdmin(u), children: [_jsx(UserCog, {}), ' ', u.is_platform_admin ? '撤销平台管理员' : '授予平台管理员'] }), _jsx(DropdownMenuSeparator, {}), _jsxs(DropdownMenuItem, { disabled: u.is_platform_admin, onClick: () => setAction({ kind: 'impersonate', user: u }), children: [_jsx(LogIn, {}), " \u6A21\u62DF\u767B\u5F55"] })] })] }));
+            },
+        },
+    ];
+    return (_jsxs("div", { children: [_jsx(PageHeader, { title: "\u7528\u6237", description: "\u5E73\u53F0\u5168\u90E8\u6CE8\u518C\u7528\u6237\uFF1B\u652F\u6301\u90AE\u7BB1/\u6635\u79F0\u641C\u7D22\u4E0E\u72B6\u6001\u8FC7\u6EE4\uFF08\u670D\u52A1\u7AEF\u68C0\u7D22\uFF09" }), _jsxs("div", { className: "mb-4 flex flex-wrap items-center gap-2", children: [_jsx(Input, { className: "w-72", placeholder: "\u6309\u90AE\u7BB1\u524D\u7F00 / \u6635\u79F0\u641C\u7D22\u2026", "aria-label": "\u641C\u7D22\u7528\u6237", value: searchInput, onChange: (e) => setSearchInput(e.target.value), onKeyDown: (e) => {
+                            if (e.key === 'Enter')
+                                applyFilter(searchInput.trim(), status, 1);
+                        } }), _jsxs(Select, { value: status || 'all', onValueChange: (v) => {
+                            const next = typeof v === 'string' && v !== 'all' ? v : '';
+                            applyFilter(q, next, 1);
+                        }, children: [_jsx(SelectTrigger, { size: "sm", className: "w-44", "aria-label": "\u6309\u72B6\u6001\u8FC7\u6EE4", children: _jsx(SelectValue, { children: status
+                                        ? (STATUS_OPTIONS.find((s) => s.value === status)?.label ??
+                                            status)
+                                        : '全部状态' }) }), _jsxs(SelectContent, { align: "start", children: [_jsx(SelectItem, { value: "all", children: "\u5168\u90E8\u72B6\u6001" }), STATUS_OPTIONS.map((s) => (_jsx(SelectItem, { value: s.value, children: s.label }, s.value)))] })] }), filtered && (_jsx(Button, { variant: "ghost", size: "sm", className: "text-muted-foreground", onClick: () => {
+                            setSearchInput('');
+                            applyFilter('', '', 1);
+                        }, children: "\u6E05\u9664\u8FC7\u6EE4" }))] }), usersQ.isError ? (_jsx(PageError, { message: adminError(usersQ.error, '用户列表加载失败'), onRetry: () => void usersQ.refetch() })) : (_jsx(DataTable, { columns: columns, rows: raw, rowKey: (u) => u.id, loading: usersQ.isPending, pagination: {
+                    page,
+                    pageSize: ADMIN_PAGE_SIZE,
+                    total,
+                    onPageChange: (p) => applyFilter(q, status, p),
+                }, empty: pastEnd ? (_jsxs("div", { className: "flex flex-col items-center gap-2", children: [_jsx(PageEmpty, { label: "\u6CA1\u6709\u66F4\u591A\u7528\u6237\u4E86", hint: "\u5F53\u524D\u9875\u6570\u636E\u53EF\u80FD\u5DF2\u88AB\u5220\u9664" }), _jsx(Button, { variant: "outline", size: "sm", onClick: () => applyFilter(q, status, 1), children: "\u8FD4\u56DE\u7B2C\u4E00\u9875" })] })) : filtered ? (_jsx(PageEmpty, { label: "\u6CA1\u6709\u5339\u914D\u7528\u6237", hint: "\u6362\u4E2A\u5173\u952E\u8BCD\u3001\u653E\u5BBD\u72B6\u6001\u6761\u4EF6\u6216\u6E05\u9664\u8FC7\u6EE4" })) : (_jsx(PageEmpty, { label: "\u6682\u65E0\u7528\u6237" })) })), _jsx(ImpactConfirmation, { open: action?.kind === 'disable' || action?.kind === 'enable', onOpenChange: (o) => !o && setAction(null), title: action?.kind === 'disable'
+                    ? `封禁 ${action.user.email}`
+                    : action?.kind === 'enable'
+                        ? `解封 ${action.user.email}`
+                        : '', danger: action?.kind === 'disable', confirmText: action?.kind === 'disable' ? '封禁' : '解封', impacts: action?.kind === 'disable'
+                    ? [
+                        '该用户将无法通过邮箱密码与 OAuth 登录',
+                        '其名下工作区与数据保留，不受影响',
+                        '操作将记入平台审计日志',
+                    ]
+                    : ['该用户恢复登录能力', '操作将记入平台审计日志'], onConfirm: () => {
+                    if (action) {
+                        statusM.mutate({
+                            user: action.user,
+                            status: action.kind === 'disable' ? 'disabled' : 'active',
+                        });
+                    }
+                } }), _jsx(ImpactConfirmation, { open: action?.kind === 'impersonate', onOpenChange: (o) => !o && setAction(null), title: action?.kind === 'impersonate' ? `模拟登录 ${action.user.email}` : '', confirmText: impersonateM.isPending ? '切换中…' : '以该用户进入产品', impacts: [
+                    '浏览器将以该用户身份进入产品（/app）',
+                    '当前管理员会话被替换，退出登录后需重新登录管理员账号',
+                    '审计将记录 admin.impersonate，操作可追溯',
+                ], onConfirm: () => {
+                    if (action?.kind === 'impersonate')
+                        impersonateM.mutate(action.user);
+                } })] }));
+}

package/dist/pages/admin/WebhookDeliveriesPage.d.ts

@@ -0,0 +1 @@
+export declare function WebhookDeliveriesPage(): import("react").JSX.Element;

package/dist/pages/admin/WebhookDeliveriesPage.js

@@ -0,0 +1,128 @@
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import { useSearchParams } from 'react-router';
+import { RefreshCw } from 'lucide-react';
+import { useMutation, useQuery, useQueryClient } from '@tanstack/react-query';
+import { DataTable } from '../../components/DataTable';
+import { PageEmpty, PageError, PageHeader } from '../../components/Page';
+import { toast } from '../../components/toast';
+import { Badge, StatusBadge } from '../../components/ui/Badge';
+import { Button } from '../../components/ui/Button';
+import { Select, SelectContent, SelectItem, SelectTrigger, SelectValue, } from '../../components/ui/select';
+import { useApi } from '../../hooks/useApi';
+import { formatDateTime, shortID, statusLabel } from '../../lib/utils';
+import { ADMIN_PAGE_SIZE, adminError, adminListQuery, } from './shared';
+const DELIVERY_STATUSES = ['pending', 'delivered', 'dead'];
+const LIST_REFETCH_MS = 30_000;
+const COUNT_STALE_MS = 60_000;
+export function WebhookDeliveriesPage() {
+    const api = useApi();
+    const qc = useQueryClient();
+    const [searchParams, setSearchParams] = useSearchParams();
+    const statusParam = searchParams.get('status') ?? '';
+    const status = DELIVERY_STATUSES.includes(statusParam) ? statusParam : '';
+    const page = Math.max(1, Number.parseInt(searchParams.get('page') ?? '1', 10) || 1);
+    const setFilter = (nextStatus, nextPage = 1) => {
+        const p = new URLSearchParams(searchParams);
+        if (nextStatus)
+            p.set('status', nextStatus);
+        else
+            p.delete('status');
+        if (nextPage > 1)
+            p.set('page', String(nextPage));
+        else
+            p.delete('page');
+        setSearchParams(p, { replace: true });
+    };
+    const listQ = useQuery({
+        queryKey: ['admin', 'webhook-deliveries', page, status],
+        queryFn: () => api.get(`/api/admin/webhook-deliveries${adminListQuery(page, ADMIN_PAGE_SIZE, { status })}`),
+        refetchInterval: LIST_REFETCH_MS,
+    });
+    const countQuery = (s) => ({
+        queryKey: ['admin', 'webhook-deliveries-count', s],
+        queryFn: () => api.get(`/api/admin/webhook-deliveries${adminListQuery(1, 1, { status: s })}`),
+        staleTime: COUNT_STALE_MS,
+    });
+    const pendingCountQ = useQuery(countQuery('pending'));
+    const deliveredCountQ = useQuery(countQuery('delivered'));
+    const deadCountQ = useQuery(countQuery('dead'));
+    const statusCounts = {
+        pending: pendingCountQ.data?.total,
+        delivered: deliveredCountQ.data?.total,
+        dead: deadCountQ.data?.total,
+    };
+    const redeliverM = useMutation({
+        mutationFn: (d) => api.post(`/api/admin/webhook-deliveries/${d.id}/redeliver`),
+        onSuccess: (d2, d) => {
+            toast.success(`已重新入队（新投递 ${shortID(d2?.id ?? '')}，溯源 ${d.event_id}.r）`);
+            void qc.invalidateQueries({ queryKey: ['admin', 'webhook-deliveries'] });
+        },
+        onError: (e) => toast.error(adminError(e, '重投失败')),
+    });
+    const items = listQ.data?.items ?? [];
+    const total = listQ.data?.total ?? 0;
+    const pastEnd = !listQ.isPending && items.length === 0 && page > 1;
+    const columns = [
+        {
+            key: 'workspace_id',
+            header: '工作区',
+            className: 'w-24',
+            render: (d) => d.workspace_id ? (_jsx("span", { className: "font-mono text-xs", title: d.workspace_id, children: shortID(d.workspace_id) })) : (_jsx(Badge, { variant: "outline", className: "text-muted-foreground", children: "\u5B64\u513F" })),
+        },
+        {
+            key: 'url',
+            header: '目标 URL',
+            render: (d) => d.url ? (_jsx("p", { className: "max-w-[22rem] truncate font-mono text-xs", title: d.url, children: d.url })) : (_jsx("span", { className: "text-xs text-muted-foreground", children: "\uFF08\u8BA2\u9605\u5DF2\u5220\u9664\uFF09" })),
+        },
+        {
+            key: 'event_id',
+            header: '事件 ID',
+            className: 'w-32',
+            render: (d) => (_jsx("code", { className: "block max-w-[8rem] truncate rounded bg-muted px-1.5 py-0.5 font-mono text-xs", title: d.event_id, children: d.event_id })),
+        },
+        {
+            key: 'event_type',
+            header: '事件',
+            className: 'w-40',
+            render: (d) => (_jsx("code", { className: "block max-w-[10rem] truncate rounded bg-muted px-1.5 py-0.5 font-mono text-xs", title: d.event_type, children: d.event_type })),
+        },
+        {
+            key: 'status',
+            header: '状态',
+            className: 'w-24',
+            render: (d) => _jsx(StatusBadge, { status: d.status }),
+        },
+        {
+            key: 'attempts',
+            header: '尝试',
+            className: 'w-16 text-right',
+            render: (d) => _jsx("span", { className: "tabular-nums", children: d.attempts }),
+        },
+        {
+            key: 'last_status',
+            header: '最近响应',
+            className: 'w-32',
+            render: (d) => d.last_status_code ? (_jsx("span", { className: "font-mono text-xs", title: d.last_error ?? undefined, children: d.last_status_code })) : d.last_error ? (_jsx("span", { className: "block max-w-[12rem] truncate text-xs text-destructive", title: d.last_error, children: d.last_error })) : (_jsx("span", { className: "text-xs text-muted-foreground", children: "\u2014" })),
+        },
+        {
+            key: 'created_at',
+            header: '时间',
+            className: 'w-44',
+            render: (d) => (_jsx("span", { className: "whitespace-nowrap text-muted-foreground", children: formatDateTime(d.created_at) })),
+        },
+        {
+            key: 'actions',
+            header: '操作',
+            className: 'w-20',
+            render: (d) => (_jsx(Button, { variant: "outline", size: "sm", disabled: redeliverM.isPending, onClick: () => redeliverM.mutate(d), children: "\u91CD\u6295" })),
+        },
+    ];
+    return (_jsxs("div", { children: [_jsx(PageHeader, { title: "Webhooks", description: "\u6240\u6709\u5DE5\u4F5C\u533A\u7684 Webhook \u6295\u9012\u4E0E\u91CD\u8BD5\u8BB0\u5F55\uFF0C\u6309\u65F6\u95F4\u5012\u5E8F" }), _jsxs("div", { className: "mb-4 flex flex-wrap items-center gap-2", children: [_jsxs(Select, { value: status || 'all', onValueChange: (v) => {
+                            setFilter(typeof v === 'string' && v !== 'all' ? v : '', 1);
+                        }, children: [_jsx(SelectTrigger, { size: "sm", className: "w-44", "aria-label": "\u6309\u6295\u9012\u72B6\u6001\u8FC7\u6EE4", children: _jsx(SelectValue, { children: status ? statusLabel(status) : '全部状态' }) }), _jsxs(SelectContent, { align: "start", children: [_jsx(SelectItem, { value: "all", children: "\u5168\u90E8\u72B6\u6001" }), DELIVERY_STATUSES.map((s) => (_jsxs(SelectItem, { value: s, children: [statusLabel(s), typeof statusCounts[s] === 'number' ? ` (${statusCounts[s]})` : ''] }, s)))] })] }), _jsxs(Button, { variant: "outline", size: "sm", disabled: listQ.isFetching, onClick: () => void listQ.refetch(), children: [_jsx(RefreshCw, { size: 14, "aria-hidden": "true" }), listQ.isFetching ? '刷新中…' : '刷新'] })] }), listQ.isError ? (_jsx(PageError, { message: adminError(listQ.error, '投递列表加载失败'), onRetry: () => void listQ.refetch() })) : (_jsx(DataTable, { columns: columns, rows: items, rowKey: (d) => d.id, loading: listQ.isPending, pagination: {
+                    page,
+                    pageSize: ADMIN_PAGE_SIZE,
+                    total,
+                    onPageChange: (p) => setFilter(status, p),
+                }, empty: pastEnd ? (_jsxs("div", { className: "flex flex-col items-center gap-2", children: [_jsx(PageEmpty, { label: "\u6CA1\u6709\u66F4\u591A\u6295\u9012\u4E86", hint: "\u5F53\u524D\u9875\u6570\u636E\u53EF\u80FD\u5DF2\u88AB\u5220\u9664" }), _jsx(Button, { variant: "outline", size: "sm", onClick: () => setFilter(status, 1), children: "\u8FD4\u56DE\u7B2C\u4E00\u9875" })] })) : status ? (_jsx(PageEmpty, { label: "\u6CA1\u6709\u8BE5\u72B6\u6001\u7684\u6295\u9012", hint: "\u6362\u4E2A\u72B6\u6001\u6216\u6E05\u9664\u8FC7\u6EE4" })) : (_jsx(PageEmpty, { label: "\u6682\u65E0\u6295\u9012\u8BB0\u5F55", hint: "\u5DE5\u4F5C\u533A\u89E6\u53D1\u4E8B\u4EF6\u540E\uFF0C\u8BA2\u9605\u6295\u9012\u4F1A\u5728\u6B64\u51FA\u73B0" })) }))] }));
+}

package/dist/pages/admin/WorkspaceDetailPage.d.ts

@@ -0,0 +1 @@
+export declare function WorkspaceDetailPage(): import("react").JSX.Element;