Initial project import

This commit is contained in:
2026-07-24 23:11:20 +08:00
commit 6396eabb87
372 changed files with 49682 additions and 0 deletions
@@ -0,0 +1,280 @@
using MiaoJiZhang.Api.Contracts;
using MiaoJiZhang.Api.Services;
using MiaoJiZhang.Domain.Entities;
using MiaoJiZhang.Domain.Enums;
using MiaoJiZhang.Infrastructure.Persistence;
using Microsoft.AspNetCore.Mvc;
using Microsoft.EntityFrameworkCore;
namespace MiaoJiZhang.Api.Controllers;
[ApiController]
[AdminAuth]
[Route("api/admin")]
public class AdminController(AppDbContext db) : ControllerBase
{
[HttpGet("dashboard")] public async Task<IActionResult> Dashboard() { var tu = await db.Users.CountAsync(); var ta = await db.Users.CountAsync(u => u.LastLoginAt.HasValue && u.LastLoginAt.Value >= ChinaClock.ToUtc(ChinaClock.Now.Date) && u.LastLoginAt.Value < ChinaClock.ToUtc(ChinaClock.Now.Date.AddDays(1))); var tt = await db.Transactions.IgnoreQueryFilters().CountAsync(); var ai = await db.Transactions.IgnoreQueryFilters().CountAsync(t => TransactionSourceRules.AiAssisted.Contains(t.Source)); var at = await db.Transactions.IgnoreQueryFilters().Where(t => TransactionSourceRules.AiAssisted.Contains(t.Source)).CountAsync(); var ud = await db.Transactions.IgnoreQueryFilters().CountAsync(t => t.IsDeleted && TransactionSourceRules.AiAssisted.Contains(t.Source)); return Ok(new { users = new { total = tu, activeToday = ta }, transactions = new { total = tt, aiBooked = ai }, aiAccuracy = at == 0 ? 0 : Math.Round((1.0 - (double)ud / at) * 100, 1), undoRate = at == 0 ? 0 : Math.Round((double)ud / at * 100, 1), aiMessages = await db.ChatMessages.CountAsync(m => m.Role == ChatRole.Assistant) }); }
[HttpGet("configs")]
public async Task<IActionResult> ListConfigs()
{
var configs = await db.AppConfigs.OrderBy(c => c.Key).ToListAsync();
return Ok(configs.Select(c => new
{
c.Id,
c.Key,
Value = IsSecret(c.Key) ? "********" : c.Value,
IsSecret = IsSecret(c.Key),
c.Version,
c.UpdatedAt,
}));
}
[HttpPut("configs/{id:long}")]
public async Task<IActionResult> UpdateConfig(long id, [FromBody] UpdateConfigRequest req)
{
var cfg = await db.AppConfigs.FindAsync(id);
if (cfg is null) return NotFound();
if (IsSecret(cfg.Key))
return BadRequest(new { error = "secret_env_only", detail = "密钥只能通过服务端环境变量修改" });
cfg.Value = req.Value;
cfg.Version++;
cfg.UpdatedAt = DateTime.UtcNow;
await db.SaveChangesAsync();
return Ok(new { cfg.Id, cfg.Key, cfg.Value, cfg.Version });
}
[HttpPost("configs")]
public async Task<IActionResult> CreateConfig([FromBody] CreateConfigRequest req)
{
if (string.IsNullOrWhiteSpace(req.Key)) return BadRequest(new { error = "key_required" });
if (IsSecret(req.Key))
return BadRequest(new { error = "secret_env_only", detail = "密钥只能通过服务端环境变量配置" });
if (await db.AppConfigs.AnyAsync(c => c.Key == req.Key))
return Conflict(new { error = "key_exists", detail = "该配置 Key 已存在,请用 PUT 更新" });
var cfg = new AppConfig { Key = req.Key.Trim(), Value = req.Value ?? "", Version = 1, UpdatedAt = DateTime.UtcNow };
db.AppConfigs.Add(cfg);
await db.SaveChangesAsync();
return Ok(new { cfg.Id, cfg.Key, cfg.Value, cfg.Version });
}
[HttpGet("personas")] public async Task<IActionResult> ListPersonas() => Ok(await db.AiPersonas.OrderBy(p => p.Key).ToListAsync());
[HttpPost("personas")] public async Task<IActionResult> CreatePersona([FromBody] UpsertPersonaRequest req) { if (await db.AiPersonas.AnyAsync(p => p.Key == req.Key)) return Conflict(new { error = "key_exists" }); var p = new AiPersona { Key = req.Key, Name = req.Name, Description = req.Description, SampleLine = req.SampleLine, PromptTemplate = req.PromptTemplate, IsEnabled = true, Version = 1 }; db.AiPersonas.Add(p); await db.SaveChangesAsync(); return Ok(p); }
[HttpPut("personas/{id:long}")] public async Task<IActionResult> UpdatePersona(long id, [FromBody] UpsertPersonaRequest req) { var p = await db.AiPersonas.FindAsync(id); if (p is null) return NotFound(); p.Key = req.Key; p.Name = req.Name; p.Description = req.Description; p.SampleLine = req.SampleLine; p.PromptTemplate = req.PromptTemplate; p.IsEnabled = req.IsEnabled; p.Version++; await db.SaveChangesAsync(); return Ok(p); }
[HttpDelete("personas/{id:long}")] public async Task<IActionResult> DeletePersona(long id) { var p = await db.AiPersonas.FindAsync(id); if (p is null) return NotFound(); db.AiPersonas.Remove(p); await db.SaveChangesAsync(); return NoContent(); }
[HttpGet("avatars")] public async Task<IActionResult> ListAvatars() => Ok(await db.AiAvatars.OrderBy(a => a.Key).ToListAsync());
[HttpPost("avatars")] public async Task<IActionResult> CreateAvatar([FromBody] UpsertAvatarRequest req) { if (await db.AiAvatars.AnyAsync(a => a.Key == req.Key)) return Conflict(new { error = "key_exists" }); var a = new AiAvatar { Key = req.Key, DefaultName = req.Name, SpeechTic = req.SpeechTic, ImageUrl = req.ImageUrl, IsEnabled = true }; db.AiAvatars.Add(a); await db.SaveChangesAsync(); return Ok(a); }
[HttpPut("avatars/{id:long}")] public async Task<IActionResult> UpdateAvatar(long id, [FromBody] UpsertAvatarRequest req) { var a = await db.AiAvatars.FindAsync(id); if (a is null) return NotFound(); a.Key = req.Key; a.DefaultName = req.Name; a.SpeechTic = req.SpeechTic; a.ImageUrl = req.ImageUrl; a.IsEnabled = req.IsEnabled; await db.SaveChangesAsync(); return Ok(a); }
[HttpDelete("avatars/{id:long}")] public async Task<IActionResult> DeleteAvatar(long id) { var a = await db.AiAvatars.FindAsync(id); if (a is null) return NotFound(); db.AiAvatars.Remove(a); await db.SaveChangesAsync(); return NoContent(); }
[HttpGet("stickers")] public async Task<IActionResult> ListStickers() => Ok(await db.Stickers.OrderBy(s => s.GroupKey).ThenBy(s => s.Key).ToListAsync());
[HttpPost("stickers")] public async Task<IActionResult> CreateSticker([FromBody] UpsertStickerRequest req) { if (await db.Stickers.AnyAsync(s => s.Key == req.Key)) return Conflict(new { error = "key_exists" }); var s = new Sticker { Key = req.Key, Label = req.Label, GroupKey = req.GroupKey, TriggerTags = req.TriggerTags, ImageUrl = req.ImageUrl, IsEnabled = true }; db.Stickers.Add(s); await db.SaveChangesAsync(); return Ok(s); }
[HttpPut("stickers/{id:long}")] public async Task<IActionResult> UpdateSticker(long id, [FromBody] UpsertStickerRequest req) { var s = await db.Stickers.FindAsync(id); if (s is null) return NotFound(); s.Key = req.Key; s.Label = req.Label; s.GroupKey = req.GroupKey; s.TriggerTags = req.TriggerTags; s.ImageUrl = req.ImageUrl; s.IsEnabled = req.IsEnabled; await db.SaveChangesAsync(); return Ok(s); }
[HttpDelete("stickers/{id:long}")] public async Task<IActionResult> DeleteSticker(long id) { var s = await db.Stickers.FindAsync(id); if (s is null) return NotFound(); db.Stickers.Remove(s); await db.SaveChangesAsync(); return NoContent(); }
[HttpPost("llm/test")] public async Task<IActionResult> TestLlm([FromServices] ILlmClient llm) { var (ok, error) = await llm.TestConnectionAsync(); return Ok(new { ok, error = ok ? (string?)null : error, detail = ok ? "LLM 连接正常" : error }); }
[HttpPost("configs/init")] public async Task<IActionResult> InitConfigs() { var now = DateTime.UtcNow; var defaults = new Dictionary<string, string> { ["brand.app_name"] = "记之", ["brand.slogan"] = "会聊天的记账本 · 让 AI 帮你管钱", ["brand.logo_url"] = "", ["llm.protocol"] = "responses", ["llm.base_url"] = "https://api.openai.com/v1", ["llm.model"] = "gpt-4o-mini", ["llm.max_tokens"] = "1024", ["llm.temperature"] = "0.8", ["limit.daily_ai_messages"] = "200", ["limit.daily_ai_messages_per_user"] = "50", ["limit.max_monthly_budget"] = "99999999", ["feature.ocr_enabled"] = "true", ["feature.voice_enabled"] = "true", ["feature.ai_auto_book"] = "true", ["feature.sticker_enabled"] = "true", ["system.default_ledger_name"] = "日常账本", ["system.max_ledgers_per_user"] = "10", ["feature.screenshot_bookkeeping_enabled"] = "true", ["permission.default.ai_enabled"] = "true", ["quota.default_ai_chat_limit"] = "50", ["quota.default_ai_chat_period"] = "day" }; var existing = await db.AppConfigs.Select(c => c.Key).ToListAsync(); var added = 0; foreach (var (key, value) in defaults) { if (!existing.Contains(key)) { db.AppConfigs.Add(new AppConfig { Key = key, Value = value, Version = 1, UpdatedAt = now }); added++; } } if (added > 0) await db.SaveChangesAsync(); return Ok(new { added, total = defaults.Count }); }
[HttpGet("categories")] public async Task<IActionResult> ListSystemCategories() => Ok(await db.Categories.Where(c => c.UserId == null && !c.IsDeleted).OrderBy(c => c.Type).ThenBy(c => c.SortOrder).ToListAsync());
[HttpPost("categories")]
public async Task<IActionResult> CreateSystemCategory([FromBody] UpsertCategoryRequest req)
{
if (req.Type is not ("income" or "expense"))
return BadRequest(new ApiError("TYPE_INVALID", "收支类型必须是 expense 或 income"));
var iconKey = CategoriesController.NormalizeIcon(req.IconKey);
if (!CategoriesController.AllowedIcons.Contains(iconKey))
return BadRequest(new ApiError("ICON_INVALID", "分类图标不存在"));
var type = req.Type == "income" ? TransactionType.Income : TransactionType.Expense;
var maxSort = await db.Categories
.Where(category => category.UserId == null && category.Type == type)
.MaxAsync(category => (int?)category.SortOrder) ?? 0;
var category = new Category
{
Type = type,
Name = req.Name,
IconKey = iconKey,
SortOrder = maxSort + 1,
};
db.Categories.Add(category);
await db.SaveChangesAsync();
return Ok(category);
}
[HttpPut("categories/{id:long}")]
public async Task<IActionResult> UpdateSystemCategory(long id, [FromBody] UpsertCategoryRequest req)
{
if (req.Type is not ("income" or "expense"))
return BadRequest(new ApiError("TYPE_INVALID", "收支类型必须是 expense 或 income"));
var iconKey = CategoriesController.NormalizeIcon(req.IconKey);
if (!CategoriesController.AllowedIcons.Contains(iconKey))
return BadRequest(new ApiError("ICON_INVALID", "分类图标不存在"));
var category = await db.Categories.FirstOrDefaultAsync(
item => item.Id == id && item.UserId == null);
if (category is null) return NotFound();
category.Name = req.Name;
category.IconKey = iconKey;
category.Type = req.Type == "income"
? TransactionType.Income
: TransactionType.Expense;
await db.SaveChangesAsync();
return Ok(category);
}
[HttpDelete("categories/{id:long}")] public async Task<IActionResult> DeleteSystemCategory(long id) { var cat = await db.Categories.FirstOrDefaultAsync(c => c.Id == id && c.UserId == null); if (cat is null) return NotFound(); cat.IsDeleted = true; await db.SaveChangesAsync(); return NoContent(); }
[HttpGet("users")]
public async Task<IActionResult> ListUsers(
[FromQuery] string? search,
[FromQuery] bool? banned,
[FromQuery] int page = 1,
[FromQuery] int limit = 20)
{
var query = db.Users
.Include(user => user.AiCompanion)
.Include(user => user.FeaturePermissions)
.AsQueryable();
if (!string.IsNullOrWhiteSpace(search))
query = query.Where(user => user.Username.Contains(search));
if (banned.HasValue)
query = query.Where(user => user.IsBanned == banned.Value);
var total = await query.CountAsync();
var users = await query
.OrderByDescending(user => user.CreatedAt)
.Skip((Math.Max(1, page) - 1) * Math.Clamp(limit, 1, 100))
.Take(Math.Clamp(limit, 1, 100))
.ToListAsync();
var ids = users.Select(user => user.Id).ToArray();
var transactionCounts = await db.Transactions
.IgnoreQueryFilters()
.Where(transaction => ids.Contains(transaction.UserId))
.GroupBy(transaction => transaction.UserId)
.Select(group => new { UserId = group.Key, Count = group.Count() })
.ToDictionaryAsync(item => item.UserId, item => item.Count);
var aiTransactionCounts = await db.Transactions
.IgnoreQueryFilters()
.Where(transaction =>
ids.Contains(transaction.UserId) &&
TransactionSourceRules.AiAssisted.Contains(transaction.Source))
.GroupBy(transaction => transaction.UserId)
.Select(group => new { UserId = group.Key, Count = group.Count() })
.ToDictionaryAsync(item => item.UserId, item => item.Count);
var list = users.Select(user =>
{
var quota = AiChatQuotaService.GetStatus(user);
return new
{
user.Id,
user.Username,
user.Nickname,
AppMode = user.AppMode == AppMode.AiFirst ? "ai" : "normal",
user.IsBanned,
user.CreatedAt,
user.LastLoginAt,
user.AccountClosureRequestedAt,
user.AccountClosureScheduledAt,
AiEnabled = user.FeaturePermissions.Any(permission =>
permission.PermissionKey == FeaturePermissionKeys.Ai &&
permission.IsEnabled),
AiChatLimit = quota.Limit,
AiChatUsed = quota.Used,
AiChatRemaining = quota.Remaining,
AiChatPeriod = AiChatQuotaService.PeriodKey(quota.Period),
AiChatResetAt = quota.ResetAt,
Companion = user.AiCompanion == null
? null
: new
{
user.AiCompanion.AvatarKey,
user.AiCompanion.PersonaKey,
user.AiCompanion.CustomName,
},
TxCount = transactionCounts.GetValueOrDefault(user.Id),
AiTxCount = aiTransactionCounts.GetValueOrDefault(user.Id),
};
}).ToList();
return Ok(new { total, page, list });
}
[HttpPut("users/{id:long}/ban")] public async Task<IActionResult> ToggleBan(long id) { var u = await db.Users.FindAsync(id); if (u is null) return NotFound(); u.IsBanned = !u.IsBanned; u.AuthVersion++; await db.SaveChangesAsync(); return Ok(new { u.Id, u.Username, u.IsBanned }); }
[HttpPut("users/{id:long}/cancel-closure")] public async Task<IActionResult> CancelClosure(long id) { var u = await db.Users.FindAsync(id); if (u is null) return NotFound(); if (!u.AccountClosureScheduledAt.HasValue) return Conflict(new ApiError("CLOSURE_NOT_PENDING", "账号未处于注销流程")); u.AccountClosureRequestedAt = null; u.AccountClosureScheduledAt = null; u.AuthVersion++; await db.SaveChangesAsync(); return Ok(new { u.Id, u.Username, cancelled = true }); }
[HttpPut("users/{id:long}/permissions")]
public async Task<IActionResult> UpdatePermissions(long id, UpdateUserPermissionsRequest req)
{
var user = await db.Users.FindAsync(id);
if (user is null) return NotFound();
var permission = await db.UserFeaturePermissions.FirstOrDefaultAsync(p =>
p.UserId == id && p.PermissionKey == FeaturePermissionKeys.Ai);
var now = DateTime.UtcNow;
if (permission is null)
{
permission = new UserFeaturePermission
{
UserId = id,
PermissionKey = FeaturePermissionKeys.Ai,
CreatedAt = now,
};
db.UserFeaturePermissions.Add(permission);
}
permission.IsEnabled = req.Ai;
permission.UpdatedAt = now;
if (!req.Ai) user.AppMode = AppMode.Normal;
await db.SaveChangesAsync();
return Ok(new { user.Id, permissions = new { ai = permission.IsEnabled } });
}
[HttpPut("users/{id:long}/ai-quota")]
public async Task<IActionResult> UpdateAiChatQuota(
long id,
UpdateAiChatQuotaRequest req)
{
if (req.Limit is < 0 or > 1_000_000)
return BadRequest(new ApiError(
"AI_QUOTA_LIMIT_INVALID",
"AI 对话次数必须在 0 到 1000000 之间,0 表示不限次数"));
if (!AiChatQuotaService.TryParsePeriod(req.Period, out var period))
return BadRequest(new ApiError(
"AI_QUOTA_PERIOD_INVALID",
"周期仅支持 day、week 或 month"));
var user = await db.Users.FindAsync(id);
if (user is null) return NotFound();
var periodChanged = user.AiChatPeriod != period;
user.AiChatLimit = req.Limit;
user.AiChatPeriod = period;
if (periodChanged || req.ResetUsage)
{
var (windowStart, _) = AiChatQuotaService.CurrentWindow(period);
user.AiChatWindowStartedAt = windowStart;
user.AiChatUsed = 0;
}
await db.SaveChangesAsync();
var quota = AiChatQuotaService.GetStatus(user);
return Ok(new
{
user.Id,
aiChatQuota = new
{
quota.Limit,
quota.Used,
quota.Remaining,
period = AiChatQuotaService.PeriodKey(quota.Period),
quota.ResetAt,
},
});
}
[HttpGet("users/{id:long}/stats")] public async Task<IActionResult> UserStats(long id) { var u = await db.Users.FindAsync(id); if (u is null) return NotFound(); var txCount = await db.Transactions.IgnoreQueryFilters().CountAsync(t => t.UserId == id); var aiCount = await db.Transactions.IgnoreQueryFilters().CountAsync(t => t.UserId == id && TransactionSourceRules.AiAssisted.Contains(t.Source)); var undone = await db.Transactions.IgnoreQueryFilters().CountAsync(t => t.UserId == id && t.IsDeleted && TransactionSourceRules.AiAssisted.Contains(t.Source)); return Ok(new { totalTransactions = txCount, aiBooked = aiCount, aiAccuracy = aiCount == 0 ? 0 : Math.Round((1.0 - (double)undone / aiCount) * 100, 1) }); }
private static bool IsSecret(string key) =>
key.Equals("llm.api_key", StringComparison.OrdinalIgnoreCase) ||
key.Contains("secret", StringComparison.OrdinalIgnoreCase) ||
key.Contains("password", StringComparison.OrdinalIgnoreCase) ||
key.EndsWith("token", StringComparison.OrdinalIgnoreCase);
}
public record UpdateConfigRequest(string Value);
public record CreateConfigRequest(string Key, string Value);
public record UpsertPersonaRequest(string Key, string Name, string Description, string SampleLine, string PromptTemplate, bool IsEnabled = true);
public record UpsertAvatarRequest(string Key, string Name, string SpeechTic, string? ImageUrl, bool IsEnabled = true);
public record UpsertStickerRequest(string Key, string Label, string GroupKey, string? TriggerTags, string? ImageUrl, bool IsEnabled = true);
public record UpsertCategoryRequest(string Name, string IconKey, string Type);