281 lines
19 KiB
C#
281 lines
19 KiB
C#
using MiaoJiZhang.Api.Contracts;
|
|
using MiaoJiZhang.Api.Services;
|
|
using MiaoJiZhang.Domain.Entities;
|
|
using MiaoJiZhang.Domain.Enums;
|
|
using MiaoJiZhang.Infrastructure.Persistence;
|
|
using Microsoft.AspNetCore.Mvc;
|
|
using Microsoft.EntityFrameworkCore;
|
|
|
|
namespace MiaoJiZhang.Api.Controllers;
|
|
|
|
[ApiController]
|
|
[AdminAuth]
|
|
[Route("api/admin")]
|
|
public class AdminController(AppDbContext db) : ControllerBase
|
|
{
|
|
[HttpGet("dashboard")] public async Task<IActionResult> Dashboard() { var tu = await db.Users.CountAsync(); var ta = await db.Users.CountAsync(u => u.LastLoginAt.HasValue && u.LastLoginAt.Value >= ChinaClock.ToUtc(ChinaClock.Now.Date) && u.LastLoginAt.Value < ChinaClock.ToUtc(ChinaClock.Now.Date.AddDays(1))); var tt = await db.Transactions.IgnoreQueryFilters().CountAsync(); var ai = await db.Transactions.IgnoreQueryFilters().CountAsync(t => TransactionSourceRules.AiAssisted.Contains(t.Source)); var at = await db.Transactions.IgnoreQueryFilters().Where(t => TransactionSourceRules.AiAssisted.Contains(t.Source)).CountAsync(); var ud = await db.Transactions.IgnoreQueryFilters().CountAsync(t => t.IsDeleted && TransactionSourceRules.AiAssisted.Contains(t.Source)); return Ok(new { users = new { total = tu, activeToday = ta }, transactions = new { total = tt, aiBooked = ai }, aiAccuracy = at == 0 ? 0 : Math.Round((1.0 - (double)ud / at) * 100, 1), undoRate = at == 0 ? 0 : Math.Round((double)ud / at * 100, 1), aiMessages = await db.ChatMessages.CountAsync(m => m.Role == ChatRole.Assistant) }); }
|
|
|
|
[HttpGet("configs")]
|
|
public async Task<IActionResult> ListConfigs()
|
|
{
|
|
var configs = await db.AppConfigs.OrderBy(c => c.Key).ToListAsync();
|
|
return Ok(configs.Select(c => new
|
|
{
|
|
c.Id,
|
|
c.Key,
|
|
Value = IsSecret(c.Key) ? "********" : c.Value,
|
|
IsSecret = IsSecret(c.Key),
|
|
c.Version,
|
|
c.UpdatedAt,
|
|
}));
|
|
}
|
|
[HttpPut("configs/{id:long}")]
|
|
public async Task<IActionResult> UpdateConfig(long id, [FromBody] UpdateConfigRequest req)
|
|
{
|
|
var cfg = await db.AppConfigs.FindAsync(id);
|
|
if (cfg is null) return NotFound();
|
|
if (IsSecret(cfg.Key))
|
|
return BadRequest(new { error = "secret_env_only", detail = "密钥只能通过服务端环境变量修改" });
|
|
cfg.Value = req.Value;
|
|
cfg.Version++;
|
|
cfg.UpdatedAt = DateTime.UtcNow;
|
|
await db.SaveChangesAsync();
|
|
return Ok(new { cfg.Id, cfg.Key, cfg.Value, cfg.Version });
|
|
}
|
|
[HttpPost("configs")]
|
|
public async Task<IActionResult> CreateConfig([FromBody] CreateConfigRequest req)
|
|
{
|
|
if (string.IsNullOrWhiteSpace(req.Key)) return BadRequest(new { error = "key_required" });
|
|
if (IsSecret(req.Key))
|
|
return BadRequest(new { error = "secret_env_only", detail = "密钥只能通过服务端环境变量配置" });
|
|
if (await db.AppConfigs.AnyAsync(c => c.Key == req.Key))
|
|
return Conflict(new { error = "key_exists", detail = "该配置 Key 已存在，请用 PUT 更新" });
|
|
var cfg = new AppConfig { Key = req.Key.Trim(), Value = req.Value ?? "", Version = 1, UpdatedAt = DateTime.UtcNow };
|
|
db.AppConfigs.Add(cfg);
|
|
await db.SaveChangesAsync();
|
|
return Ok(new { cfg.Id, cfg.Key, cfg.Value, cfg.Version });
|
|
}
|
|
|
|
[HttpGet("personas")] public async Task<IActionResult> ListPersonas() => Ok(await db.AiPersonas.OrderBy(p => p.Key).ToListAsync());
|
|
[HttpPost("personas")] public async Task<IActionResult> CreatePersona([FromBody] UpsertPersonaRequest req) { if (await db.AiPersonas.AnyAsync(p => p.Key == req.Key)) return Conflict(new { error = "key_exists" }); var p = new AiPersona { Key = req.Key, Name = req.Name, Description = req.Description, SampleLine = req.SampleLine, PromptTemplate = req.PromptTemplate, IsEnabled = true, Version = 1 }; db.AiPersonas.Add(p); await db.SaveChangesAsync(); return Ok(p); }
|
|
[HttpPut("personas/{id:long}")] public async Task<IActionResult> UpdatePersona(long id, [FromBody] UpsertPersonaRequest req) { var p = await db.AiPersonas.FindAsync(id); if (p is null) return NotFound(); p.Key = req.Key; p.Name = req.Name; p.Description = req.Description; p.SampleLine = req.SampleLine; p.PromptTemplate = req.PromptTemplate; p.IsEnabled = req.IsEnabled; p.Version++; await db.SaveChangesAsync(); return Ok(p); }
|
|
[HttpDelete("personas/{id:long}")] public async Task<IActionResult> DeletePersona(long id) { var p = await db.AiPersonas.FindAsync(id); if (p is null) return NotFound(); db.AiPersonas.Remove(p); await db.SaveChangesAsync(); return NoContent(); }
|
|
|
|
[HttpGet("avatars")] public async Task<IActionResult> ListAvatars() => Ok(await db.AiAvatars.OrderBy(a => a.Key).ToListAsync());
|
|
[HttpPost("avatars")] public async Task<IActionResult> CreateAvatar([FromBody] UpsertAvatarRequest req) { if (await db.AiAvatars.AnyAsync(a => a.Key == req.Key)) return Conflict(new { error = "key_exists" }); var a = new AiAvatar { Key = req.Key, DefaultName = req.Name, SpeechTic = req.SpeechTic, ImageUrl = req.ImageUrl, IsEnabled = true }; db.AiAvatars.Add(a); await db.SaveChangesAsync(); return Ok(a); }
|
|
[HttpPut("avatars/{id:long}")] public async Task<IActionResult> UpdateAvatar(long id, [FromBody] UpsertAvatarRequest req) { var a = await db.AiAvatars.FindAsync(id); if (a is null) return NotFound(); a.Key = req.Key; a.DefaultName = req.Name; a.SpeechTic = req.SpeechTic; a.ImageUrl = req.ImageUrl; a.IsEnabled = req.IsEnabled; await db.SaveChangesAsync(); return Ok(a); }
|
|
[HttpDelete("avatars/{id:long}")] public async Task<IActionResult> DeleteAvatar(long id) { var a = await db.AiAvatars.FindAsync(id); if (a is null) return NotFound(); db.AiAvatars.Remove(a); await db.SaveChangesAsync(); return NoContent(); }
|
|
|
|
[HttpGet("stickers")] public async Task<IActionResult> ListStickers() => Ok(await db.Stickers.OrderBy(s => s.GroupKey).ThenBy(s => s.Key).ToListAsync());
|
|
[HttpPost("stickers")] public async Task<IActionResult> CreateSticker([FromBody] UpsertStickerRequest req) { if (await db.Stickers.AnyAsync(s => s.Key == req.Key)) return Conflict(new { error = "key_exists" }); var s = new Sticker { Key = req.Key, Label = req.Label, GroupKey = req.GroupKey, TriggerTags = req.TriggerTags, ImageUrl = req.ImageUrl, IsEnabled = true }; db.Stickers.Add(s); await db.SaveChangesAsync(); return Ok(s); }
|
|
[HttpPut("stickers/{id:long}")] public async Task<IActionResult> UpdateSticker(long id, [FromBody] UpsertStickerRequest req) { var s = await db.Stickers.FindAsync(id); if (s is null) return NotFound(); s.Key = req.Key; s.Label = req.Label; s.GroupKey = req.GroupKey; s.TriggerTags = req.TriggerTags; s.ImageUrl = req.ImageUrl; s.IsEnabled = req.IsEnabled; await db.SaveChangesAsync(); return Ok(s); }
|
|
[HttpDelete("stickers/{id:long}")] public async Task<IActionResult> DeleteSticker(long id) { var s = await db.Stickers.FindAsync(id); if (s is null) return NotFound(); db.Stickers.Remove(s); await db.SaveChangesAsync(); return NoContent(); }
|
|
|
|
[HttpPost("llm/test")] public async Task<IActionResult> TestLlm([FromServices] ILlmClient llm) { var (ok, error) = await llm.TestConnectionAsync(); return Ok(new { ok, error = ok ? (string?)null : error, detail = ok ? "LLM 连接正常" : error }); }
|
|
|
|
[HttpPost("configs/init")] public async Task<IActionResult> InitConfigs() { var now = DateTime.UtcNow; var defaults = new Dictionary<string, string> { ["brand.app_name"] = "记之", ["brand.slogan"] = "会聊天的记账本 · 让 AI 帮你管钱", ["brand.logo_url"] = "", ["llm.protocol"] = "responses", ["llm.base_url"] = "https://api.openai.com/v1", ["llm.model"] = "gpt-4o-mini", ["llm.max_tokens"] = "1024", ["llm.temperature"] = "0.8", ["limit.daily_ai_messages"] = "200", ["limit.daily_ai_messages_per_user"] = "50", ["limit.max_monthly_budget"] = "99999999", ["feature.ocr_enabled"] = "true", ["feature.voice_enabled"] = "true", ["feature.ai_auto_book"] = "true", ["feature.sticker_enabled"] = "true", ["system.default_ledger_name"] = "日常账本", ["system.max_ledgers_per_user"] = "10", ["feature.screenshot_bookkeeping_enabled"] = "true", ["permission.default.ai_enabled"] = "true", ["quota.default_ai_chat_limit"] = "50", ["quota.default_ai_chat_period"] = "day" }; var existing = await db.AppConfigs.Select(c => c.Key).ToListAsync(); var added = 0; foreach (var (key, value) in defaults) { if (!existing.Contains(key)) { db.AppConfigs.Add(new AppConfig { Key = key, Value = value, Version = 1, UpdatedAt = now }); added++; } } if (added > 0) await db.SaveChangesAsync(); return Ok(new { added, total = defaults.Count }); }
|
|
|
|
[HttpGet("categories")] public async Task<IActionResult> ListSystemCategories() => Ok(await db.Categories.Where(c => c.UserId == null && !c.IsDeleted).OrderBy(c => c.Type).ThenBy(c => c.SortOrder).ToListAsync());
|
|
[HttpPost("categories")]
|
|
public async Task<IActionResult> CreateSystemCategory([FromBody] UpsertCategoryRequest req)
|
|
{
|
|
if (req.Type is not ("income" or "expense"))
|
|
return BadRequest(new ApiError("TYPE_INVALID", "收支类型必须是 expense 或 income"));
|
|
var iconKey = CategoriesController.NormalizeIcon(req.IconKey);
|
|
if (!CategoriesController.AllowedIcons.Contains(iconKey))
|
|
return BadRequest(new ApiError("ICON_INVALID", "分类图标不存在"));
|
|
var type = req.Type == "income" ? TransactionType.Income : TransactionType.Expense;
|
|
var maxSort = await db.Categories
|
|
.Where(category => category.UserId == null && category.Type == type)
|
|
.MaxAsync(category => (int?)category.SortOrder) ?? 0;
|
|
var category = new Category
|
|
{
|
|
Type = type,
|
|
Name = req.Name,
|
|
IconKey = iconKey,
|
|
SortOrder = maxSort + 1,
|
|
};
|
|
db.Categories.Add(category);
|
|
await db.SaveChangesAsync();
|
|
return Ok(category);
|
|
}
|
|
[HttpPut("categories/{id:long}")]
|
|
public async Task<IActionResult> UpdateSystemCategory(long id, [FromBody] UpsertCategoryRequest req)
|
|
{
|
|
if (req.Type is not ("income" or "expense"))
|
|
return BadRequest(new ApiError("TYPE_INVALID", "收支类型必须是 expense 或 income"));
|
|
var iconKey = CategoriesController.NormalizeIcon(req.IconKey);
|
|
if (!CategoriesController.AllowedIcons.Contains(iconKey))
|
|
return BadRequest(new ApiError("ICON_INVALID", "分类图标不存在"));
|
|
var category = await db.Categories.FirstOrDefaultAsync(
|
|
item => item.Id == id && item.UserId == null);
|
|
if (category is null) return NotFound();
|
|
category.Name = req.Name;
|
|
category.IconKey = iconKey;
|
|
category.Type = req.Type == "income"
|
|
? TransactionType.Income
|
|
: TransactionType.Expense;
|
|
await db.SaveChangesAsync();
|
|
return Ok(category);
|
|
}
|
|
[HttpDelete("categories/{id:long}")] public async Task<IActionResult> DeleteSystemCategory(long id) { var cat = await db.Categories.FirstOrDefaultAsync(c => c.Id == id && c.UserId == null); if (cat is null) return NotFound(); cat.IsDeleted = true; await db.SaveChangesAsync(); return NoContent(); }
|
|
|
|
[HttpGet("users")]
|
|
public async Task<IActionResult> ListUsers(
|
|
[FromQuery] string? search,
|
|
[FromQuery] bool? banned,
|
|
[FromQuery] int page = 1,
|
|
[FromQuery] int limit = 20)
|
|
{
|
|
var query = db.Users
|
|
.Include(user => user.AiCompanion)
|
|
.Include(user => user.FeaturePermissions)
|
|
.AsQueryable();
|
|
if (!string.IsNullOrWhiteSpace(search))
|
|
query = query.Where(user => user.Username.Contains(search));
|
|
if (banned.HasValue)
|
|
query = query.Where(user => user.IsBanned == banned.Value);
|
|
|
|
var total = await query.CountAsync();
|
|
var users = await query
|
|
.OrderByDescending(user => user.CreatedAt)
|
|
.Skip((Math.Max(1, page) - 1) * Math.Clamp(limit, 1, 100))
|
|
.Take(Math.Clamp(limit, 1, 100))
|
|
.ToListAsync();
|
|
var ids = users.Select(user => user.Id).ToArray();
|
|
var transactionCounts = await db.Transactions
|
|
.IgnoreQueryFilters()
|
|
.Where(transaction => ids.Contains(transaction.UserId))
|
|
.GroupBy(transaction => transaction.UserId)
|
|
.Select(group => new { UserId = group.Key, Count = group.Count() })
|
|
.ToDictionaryAsync(item => item.UserId, item => item.Count);
|
|
var aiTransactionCounts = await db.Transactions
|
|
.IgnoreQueryFilters()
|
|
.Where(transaction =>
|
|
ids.Contains(transaction.UserId) &&
|
|
TransactionSourceRules.AiAssisted.Contains(transaction.Source))
|
|
.GroupBy(transaction => transaction.UserId)
|
|
.Select(group => new { UserId = group.Key, Count = group.Count() })
|
|
.ToDictionaryAsync(item => item.UserId, item => item.Count);
|
|
|
|
var list = users.Select(user =>
|
|
{
|
|
var quota = AiChatQuotaService.GetStatus(user);
|
|
return new
|
|
{
|
|
user.Id,
|
|
user.Username,
|
|
user.Nickname,
|
|
AppMode = user.AppMode == AppMode.AiFirst ? "ai" : "normal",
|
|
user.IsBanned,
|
|
user.CreatedAt,
|
|
user.LastLoginAt,
|
|
user.AccountClosureRequestedAt,
|
|
user.AccountClosureScheduledAt,
|
|
AiEnabled = user.FeaturePermissions.Any(permission =>
|
|
permission.PermissionKey == FeaturePermissionKeys.Ai &&
|
|
permission.IsEnabled),
|
|
AiChatLimit = quota.Limit,
|
|
AiChatUsed = quota.Used,
|
|
AiChatRemaining = quota.Remaining,
|
|
AiChatPeriod = AiChatQuotaService.PeriodKey(quota.Period),
|
|
AiChatResetAt = quota.ResetAt,
|
|
Companion = user.AiCompanion == null
|
|
? null
|
|
: new
|
|
{
|
|
user.AiCompanion.AvatarKey,
|
|
user.AiCompanion.PersonaKey,
|
|
user.AiCompanion.CustomName,
|
|
},
|
|
TxCount = transactionCounts.GetValueOrDefault(user.Id),
|
|
AiTxCount = aiTransactionCounts.GetValueOrDefault(user.Id),
|
|
};
|
|
}).ToList();
|
|
return Ok(new { total, page, list });
|
|
}
|
|
[HttpPut("users/{id:long}/ban")] public async Task<IActionResult> ToggleBan(long id) { var u = await db.Users.FindAsync(id); if (u is null) return NotFound(); u.IsBanned = !u.IsBanned; u.AuthVersion++; await db.SaveChangesAsync(); return Ok(new { u.Id, u.Username, u.IsBanned }); }
|
|
[HttpPut("users/{id:long}/cancel-closure")] public async Task<IActionResult> CancelClosure(long id) { var u = await db.Users.FindAsync(id); if (u is null) return NotFound(); if (!u.AccountClosureScheduledAt.HasValue) return Conflict(new ApiError("CLOSURE_NOT_PENDING", "账号未处于注销流程")); u.AccountClosureRequestedAt = null; u.AccountClosureScheduledAt = null; u.AuthVersion++; await db.SaveChangesAsync(); return Ok(new { u.Id, u.Username, cancelled = true }); }
|
|
[HttpPut("users/{id:long}/permissions")]
|
|
public async Task<IActionResult> UpdatePermissions(long id, UpdateUserPermissionsRequest req)
|
|
{
|
|
var user = await db.Users.FindAsync(id);
|
|
if (user is null) return NotFound();
|
|
var permission = await db.UserFeaturePermissions.FirstOrDefaultAsync(p =>
|
|
p.UserId == id && p.PermissionKey == FeaturePermissionKeys.Ai);
|
|
var now = DateTime.UtcNow;
|
|
if (permission is null)
|
|
{
|
|
permission = new UserFeaturePermission
|
|
{
|
|
UserId = id,
|
|
PermissionKey = FeaturePermissionKeys.Ai,
|
|
CreatedAt = now,
|
|
};
|
|
db.UserFeaturePermissions.Add(permission);
|
|
}
|
|
permission.IsEnabled = req.Ai;
|
|
permission.UpdatedAt = now;
|
|
if (!req.Ai) user.AppMode = AppMode.Normal;
|
|
await db.SaveChangesAsync();
|
|
return Ok(new { user.Id, permissions = new { ai = permission.IsEnabled } });
|
|
}
|
|
|
|
[HttpPut("users/{id:long}/ai-quota")]
|
|
public async Task<IActionResult> UpdateAiChatQuota(
|
|
long id,
|
|
UpdateAiChatQuotaRequest req)
|
|
{
|
|
if (req.Limit is < 0 or > 1_000_000)
|
|
return BadRequest(new ApiError(
|
|
"AI_QUOTA_LIMIT_INVALID",
|
|
"AI 对话次数必须在 0 到 1000000 之间，0 表示不限次数"));
|
|
if (!AiChatQuotaService.TryParsePeriod(req.Period, out var period))
|
|
return BadRequest(new ApiError(
|
|
"AI_QUOTA_PERIOD_INVALID",
|
|
"周期仅支持 day、week 或 month"));
|
|
|
|
var user = await db.Users.FindAsync(id);
|
|
if (user is null) return NotFound();
|
|
var periodChanged = user.AiChatPeriod != period;
|
|
user.AiChatLimit = req.Limit;
|
|
user.AiChatPeriod = period;
|
|
if (periodChanged || req.ResetUsage)
|
|
{
|
|
var (windowStart, _) = AiChatQuotaService.CurrentWindow(period);
|
|
user.AiChatWindowStartedAt = windowStart;
|
|
user.AiChatUsed = 0;
|
|
}
|
|
await db.SaveChangesAsync();
|
|
var quota = AiChatQuotaService.GetStatus(user);
|
|
return Ok(new
|
|
{
|
|
user.Id,
|
|
aiChatQuota = new
|
|
{
|
|
quota.Limit,
|
|
quota.Used,
|
|
quota.Remaining,
|
|
period = AiChatQuotaService.PeriodKey(quota.Period),
|
|
quota.ResetAt,
|
|
},
|
|
});
|
|
}
|
|
|
|
[HttpGet("users/{id:long}/stats")] public async Task<IActionResult> UserStats(long id) { var u = await db.Users.FindAsync(id); if (u is null) return NotFound(); var txCount = await db.Transactions.IgnoreQueryFilters().CountAsync(t => t.UserId == id); var aiCount = await db.Transactions.IgnoreQueryFilters().CountAsync(t => t.UserId == id && TransactionSourceRules.AiAssisted.Contains(t.Source)); var undone = await db.Transactions.IgnoreQueryFilters().CountAsync(t => t.UserId == id && t.IsDeleted && TransactionSourceRules.AiAssisted.Contains(t.Source)); return Ok(new { totalTransactions = txCount, aiBooked = aiCount, aiAccuracy = aiCount == 0 ? 0 : Math.Round((1.0 - (double)undone / aiCount) * 100, 1) }); }
|
|
|
|
private static bool IsSecret(string key) =>
|
|
key.Equals("llm.api_key", StringComparison.OrdinalIgnoreCase) ||
|
|
key.Contains("secret", StringComparison.OrdinalIgnoreCase) ||
|
|
key.Contains("password", StringComparison.OrdinalIgnoreCase) ||
|
|
key.EndsWith("token", StringComparison.OrdinalIgnoreCase);
|
|
}
|
|
|
|
public record UpdateConfigRequest(string Value);
|
|
public record CreateConfigRequest(string Key, string Value);
|
|
public record UpsertPersonaRequest(string Key, string Name, string Description, string SampleLine, string PromptTemplate, bool IsEnabled = true);
|
|
public record UpsertAvatarRequest(string Key, string Name, string SpeechTic, string? ImageUrl, bool IsEnabled = true);
|
|
public record UpsertStickerRequest(string Key, string Label, string GroupKey, string? TriggerTags, string? ImageUrl, bool IsEnabled = true);
|
|
public record UpsertCategoryRequest(string Name, string IconKey, string Type);
|
|
|