init

apps/backend/src/routes/admin.js

@@ -0,0 +1,432 @@
+import { Router } from 'express'
+
+import {
+  closeAdminTask,
+  createAdminCdk,
+  getAdminCdks,
+  getAdminDashboardSummary,
+  getAdminOrderDetail,
+  getAdminOrders,
+  getAdminTaskDetail,
+  getAdminTaskScreenshotPath,
+  getAdminTasks,
+  getAdminWebhookEventDetail,
+  getAdminWebhookEvents,
+  importAdminCdks,
+  invalidateAdminCdk,
+  markAdminTaskManualReview,
+  replayAdminWebhookEvent,
+  releaseAdminInventoryCdk,
+  regenerateAdminTaskClaimLink,
+  releaseAdminTaskCdk,
+  retryAdminTask,
+} from '../services/admin-service.js'
+import {
+  createManagedAdminUser,
+  getAdminUserList,
+  getAdminSessionSummary,
+  loginAdmin,
+  resetManagedAdminUserPassword,
+  requireAdminRole,
+  updateManagedAdminUserRole,
+  updateManagedAdminUserStatus,
+  verifyAdminSessionToken,
+} from '../services/admin-auth-service.js'
+import { getAdminAuditLogs, writeAdminAuditLog } from '../services/admin-audit-service.js'
+import { buildNotFoundPayload, buildSuccessPayload, createHttpError, sendRouteError } from '../utils/http.js'
+
+const router = Router()
+
+router.post('/auth/login', (req, res) => {
+  try {
+    const data = loginAdmin(req.body?.username, req.body?.password)
+    res.json(buildSuccessPayload(data, '登录成功'))
+  } catch (error) {
+    sendRouteError(res, error, '后台登录失败', '[admin/auth/login]')
+  }
+})
+
+router.get('/auth/session', (req, res) => {
+  try {
+    const data = getAdminSessionSummary(extractBearerToken(req))
+    res.json(buildSuccessPayload(data, 'ok'))
+  } catch (error) {
+    sendRouteError(res, error, '读取后台登录态失败', '[admin/auth/session]')
+  }
+})
+
+router.post('/auth/logout', (_req, res) => {
+  res.json(buildSuccessPayload({ success: true }, '已退出登录'))
+})
+
+router.use((req, res, next) => {
+  try {
+    req.adminSession = verifyAdminSessionToken(extractBearerToken(req))
+    next()
+  } catch (error) {
+    sendRouteError(res, error, '后台鉴权失败', '[admin/auth]')
+  }
+})
+
+router.get('/dashboard/summary', (req, res) => {
+  try {
+    const data = getAdminDashboardSummary()
+    res.json(buildSuccessPayload(data, 'ok'))
+  } catch (error) {
+    sendRouteError(res, error, '读取后台概览失败', '[admin/dashboard/summary]')
+  }
+})
+
+router.get('/users', (req, res) => {
+  try {
+    requireAdminRole(req.adminSession, ['admin'])
+    const data = getAdminUserList(req.query)
+    res.json(buildSuccessPayload(data, 'ok'))
+  } catch (error) {
+    sendRouteError(res, error, '读取后台用户列表失败', '[admin/users]')
+  }
+})
+
+router.post('/users', (req, res) => {
+  try {
+    requireAdminRole(req.adminSession, ['admin'])
+    const data = createManagedAdminUser(req.body)
+    writeAdminAuditLog(req.adminSession, {
+      action: 'admin_user_created',
+      targetType: 'admin_user',
+      targetId: String(data.user.userId),
+      data: {
+        username: data.user.username,
+        role: data.user.role,
+        status: data.user.status,
+      },
+    })
+    res.json(buildSuccessPayload(data, '后台用户已创建'))
+  } catch (error) {
+    sendRouteError(res, error, '创建后台用户失败', '[admin/users:create]')
+  }
+})
+
+router.post('/users/:userId/role', (req, res) => {
+  try {
+    requireAdminRole(req.adminSession, ['admin'])
+    const data = updateManagedAdminUserRole(req.params.userId, req.body, req.adminSession)
+    writeAdminAuditLog(req.adminSession, {
+      action: 'admin_user_role_updated',
+      targetType: 'admin_user',
+      targetId: String(data.user.userId),
+      data: {
+        username: data.user.username,
+        role: data.user.role,
+      },
+    })
+    res.json(buildSuccessPayload(data, '用户角色已更新'))
+  } catch (error) {
+    sendRouteError(res, error, '更新用户角色失败', '[admin/users/:userId/role]')
+  }
+})
+
+router.post('/users/:userId/status', (req, res) => {
+  try {
+    requireAdminRole(req.adminSession, ['admin'])
+    const data = updateManagedAdminUserStatus(req.params.userId, req.body, req.adminSession)
+    writeAdminAuditLog(req.adminSession, {
+      action: 'admin_user_status_updated',
+      targetType: 'admin_user',
+      targetId: String(data.user.userId),
+      data: {
+        username: data.user.username,
+        status: data.user.status,
+      },
+    })
+    res.json(buildSuccessPayload(data, '用户状态已更新'))
+  } catch (error) {
+    sendRouteError(res, error, '更新用户状态失败', '[admin/users/:userId/status]')
+  }
+})
+
+router.post('/users/:userId/reset-password', (req, res) => {
+  try {
+    requireAdminRole(req.adminSession, ['admin'])
+    const data = resetManagedAdminUserPassword(req.params.userId, req.body)
+    writeAdminAuditLog(req.adminSession, {
+      action: 'admin_user_password_reset',
+      targetType: 'admin_user',
+      targetId: String(data.user.userId),
+      data: {
+        username: data.user.username,
+      },
+    })
+    res.json(buildSuccessPayload(data, '用户密码已重置'))
+  } catch (error) {
+    sendRouteError(res, error, '重置用户密码失败', '[admin/users/:userId/reset-password]')
+  }
+})
+
+router.get('/audit-logs', (req, res) => {
+  try {
+    requireAdminRole(req.adminSession, ['admin'])
+    const data = getAdminAuditLogs(req.query)
+    res.json(buildSuccessPayload(data, 'ok'))
+  } catch (error) {
+    sendRouteError(res, error, '读取操作审计日志失败', '[admin/audit-logs]')
+  }
+})
+
+router.get('/orders', (req, res) => {
+  try {
+    const data = getAdminOrders(req.query)
+    res.json(buildSuccessPayload(data, 'ok'))
+  } catch (error) {
+    sendRouteError(res, error, '读取订单列表失败', '[admin/orders]')
+  }
+})
+
+router.get('/orders/:orderId', (req, res) => {
+  try {
+    const data = getAdminOrderDetail(req.params.orderId)
+    res.json(buildSuccessPayload(data, 'ok'))
+  } catch (error) {
+    sendRouteError(res, error, '读取订单详情失败', '[admin/orders/:orderId]')
+  }
+})
+
+router.get('/tasks', (req, res) => {
+  try {
+    const data = getAdminTasks(req.query)
+    res.json(buildSuccessPayload(data, 'ok'))
+  } catch (error) {
+    sendRouteError(res, error, '读取任务列表失败', '[admin/tasks]')
+  }
+})
+
+router.get('/tasks/:taskId', (req, res) => {
+  try {
+    const data = getAdminTaskDetail(req.params.taskId)
+    res.json(buildSuccessPayload(data, 'ok'))
+  } catch (error) {
+    sendRouteError(res, error, '读取任务详情失败', '[admin/tasks/:taskId]')
+  }
+})
+
+router.get('/tasks/:taskId/screenshot', (req, res) => {
+  try {
+    const screenshotPath = getAdminTaskScreenshotPath(req.params.taskId)
+    res.sendFile(screenshotPath)
+  } catch (error) {
+    sendRouteError(res, error, '读取任务截图失败', '[admin/tasks/:taskId/screenshot]')
+  }
+})
+
+router.post('/tasks/:taskId/retry', (req, res) => {
+  try {
+    const data = retryAdminTask(req.params.taskId)
+    res.json(buildSuccessPayload(data, '任务已重试'))
+  } catch (error) {
+    sendRouteError(res, error, '重试任务失败', '[admin/tasks/:taskId/retry]')
+  }
+})
+
+router.post('/tasks/:taskId/release-cdk', (req, res) => {
+  try {
+    requireAdminRole(req.adminSession, ['admin'])
+    const data = releaseAdminTaskCdk(req.params.taskId)
+    writeAdminAuditLog(req.adminSession, {
+      action: 'task_release_cdk',
+      targetType: 'task',
+      targetId: String(req.params.taskId),
+      data: {
+        taskId: data.task.taskId,
+        taskNo: data.task.taskNo,
+        reservedCdkId: data.task.reservedCdkId,
+      },
+    })
+    res.json(buildSuccessPayload(data, 'CDK 已释放'))
+  } catch (error) {
+    sendRouteError(res, error, '释放 CDK 失败', '[admin/tasks/:taskId/release-cdk]')
+  }
+})
+
+router.post('/tasks/:taskId/regenerate-claim-link', (req, res) => {
+  try {
+    requireAdminRole(req.adminSession, ['admin'])
+    const data = regenerateAdminTaskClaimLink(req.params.taskId)
+    writeAdminAuditLog(req.adminSession, {
+      action: 'task_regenerate_claim_link',
+      targetType: 'task',
+      targetId: String(req.params.taskId),
+      data: {
+        taskId: data.task.taskId,
+        taskNo: data.task.taskNo,
+        claimTokenId: data.task.claimTokenId,
+      },
+    })
+    res.json(buildSuccessPayload(data, '领取链接已重新生成'))
+  } catch (error) {
+    sendRouteError(res, error, '重新生成领取链接失败', '[admin/tasks/:taskId/regenerate-claim-link]')
+  }
+})
+
+router.post('/tasks/:taskId/close', (req, res) => {
+  try {
+    requireAdminRole(req.adminSession, ['admin'])
+    const data = closeAdminTask(req.params.taskId)
+    writeAdminAuditLog(req.adminSession, {
+      action: 'task_closed',
+      targetType: 'task',
+      targetId: String(req.params.taskId),
+      data: {
+        taskId: data.task.taskId,
+        taskNo: data.task.taskNo,
+        status: data.task.status,
+      },
+    })
+    res.json(buildSuccessPayload(data, '任务已关闭'))
+  } catch (error) {
+    sendRouteError(res, error, '关闭任务失败', '[admin/tasks/:taskId/close]')
+  }
+})
+
+router.post('/tasks/:taskId/mark-manual-review', (req, res) => {
+  try {
+    requireAdminRole(req.adminSession, ['admin'])
+    const data = markAdminTaskManualReview(req.params.taskId)
+    writeAdminAuditLog(req.adminSession, {
+      action: 'task_mark_manual_review',
+      targetType: 'task',
+      targetId: String(req.params.taskId),
+      data: {
+        taskId: data.task.taskId,
+        taskNo: data.task.taskNo,
+        status: data.task.status,
+      },
+    })
+    res.json(buildSuccessPayload(data, '任务已转人工处理'))
+  } catch (error) {
+    sendRouteError(res, error, '标记人工处理失败', '[admin/tasks/:taskId/mark-manual-review]')
+  }
+})
+
+router.get('/cdks', (req, res) => {
+  try {
+    const data = getAdminCdks(req.query)
+    res.json(buildSuccessPayload(data, 'ok'))
+  } catch (error) {
+    sendRouteError(res, error, '读取 CDK 列表失败', '[admin/cdks]')
+  }
+})
+
+router.post('/cdks', (req, res) => {
+  try {
+    const data = createAdminCdk(req.body)
+    res.json(buildSuccessPayload(data, 'CDK 已新增'))
+  } catch (error) {
+    sendRouteError(res, error, '新增 CDK 失败', '[admin/cdks]')
+  }
+})
+
+router.post('/cdks/import', (req, res) => {
+  try {
+    const data = importAdminCdks(req.body)
+    res.json(buildSuccessPayload(data, '导入完成'))
+  } catch (error) {
+    sendRouteError(res, error, '导入 CDK 失败', '[admin/cdks/import]')
+  }
+})
+
+router.post('/cdks/:cdkId/release', (req, res) => {
+  try {
+    requireAdminRole(req.adminSession, ['admin'])
+    const data = releaseAdminInventoryCdk(req.params.cdkId)
+    writeAdminAuditLog(req.adminSession, {
+      action: 'inventory_cdk_released',
+      targetType: 'cdk',
+      targetId: String(req.params.cdkId),
+      data: {
+        cdkId: data.cdk?.cdkId,
+        skuCode: data.cdk?.skuCode,
+        cdkCode: data.cdk?.cdkCode,
+      },
+    })
+    res.json(buildSuccessPayload(data, 'CDK 已释放'))
+  } catch (error) {
+    sendRouteError(res, error, '释放库存 CDK 失败', '[admin/cdks/:cdkId/release]')
+  }
+})
+
+router.post('/cdks/:cdkId/invalidate', (req, res) => {
+  try {
+    requireAdminRole(req.adminSession, ['admin'])
+    const data = invalidateAdminCdk(req.params.cdkId, req.body)
+    writeAdminAuditLog(req.adminSession, {
+      action: 'inventory_cdk_invalidated',
+      targetType: 'cdk',
+      targetId: String(req.params.cdkId),
+      data: {
+        cdkId: data.cdk?.cdkId,
+        skuCode: data.cdk?.skuCode,
+        invalidReason: data.cdk?.invalidReason,
+      },
+    })
+    res.json(buildSuccessPayload(data, 'CDK 已作废'))
+  } catch (error) {
+    sendRouteError(res, error, '作废 CDK 失败', '[admin/cdks/:cdkId/invalidate]')
+  }
+})
+
+router.get('/webhook-events', (req, res) => {
+  try {
+    const data = getAdminWebhookEvents(req.query)
+    res.json(buildSuccessPayload(data, 'ok'))
+  } catch (error) {
+    sendRouteError(res, error, '读取 webhook 列表失败', '[admin/webhook-events]')
+  }
+})
+
+router.get('/webhook-events/:eventId', (req, res) => {
+  try {
+    const data = getAdminWebhookEventDetail(req.params.eventId)
+    res.json(buildSuccessPayload(data, 'ok'))
+  } catch (error) {
+    sendRouteError(res, error, '读取 webhook 详情失败', '[admin/webhook-events/:eventId]')
+  }
+})
+
+router.post('/webhook-events/:eventId/replay', async (req, res) => {
+  try {
+    requireAdminRole(req.adminSession, ['admin'])
+    const data = await replayAdminWebhookEvent(req.params.eventId)
+    writeAdminAuditLog(req.adminSession, {
+      action: 'webhook_replayed',
+      targetType: 'webhook_event',
+      targetId: String(req.params.eventId),
+      data: {
+        eventId: data.eventId,
+        replayed: data.replayed,
+      },
+    })
+    res.json(buildSuccessPayload(data, 'Webhook 已重放'))
+  } catch (error) {
+    sendRouteError(res, error, '重放 webhook 失败', '[admin/webhook-events/:eventId/replay]')
+  }
+})
+
+router.use((req, res) => {
+  res.status(404).json(buildNotFoundPayload(req))
+})
+
+export default router
+
+function extractBearerToken(req) {
+  const authorization = String(req.headers.authorization || '').trim()
+  const matched = authorization.match(/^Bearer\s+(.+)$/i)
+
+  if (!matched) {
+    throw createHttpError('未登录或登录已失效', {
+      statusCode: 401,
+      errorCode: 'admin_auth_required',
+    })
+  }
+
+  return matched[1]
+}

apps/backend/src/routes/claims.js

@@ -0,0 +1,73 @@
+import { Router } from 'express'
+
+import {
+  confirmClaimRole,
+  createClaimSession,
+  getClaimDetail,
+  getClaimScreenshotPath,
+  getClaimSessionSummary,
+  redeemClaimTask,
+} from '../services/claim-session-service.js'
+import { buildNotFoundPayload, buildSuccessPayload, sendRouteError } from '../utils/http.js'
+
+const router = Router()
+
+router.get('/:token', async (req, res) => {
+  try {
+    const data = await getClaimDetail(req.params.token)
+    res.json(buildSuccessPayload(data, 'ok'))
+  } catch (error) {
+    sendRouteError(res, error, '查询领取详情失败', '[claims/:token]')
+  }
+})
+
+router.post('/:token/session', async (req, res) => {
+  try {
+    const data = await createClaimSession(req.params.token, req.body)
+    res.json(buildSuccessPayload(data, '浏览器会话已创建'))
+  } catch (error) {
+    sendRouteError(res, error, '创建领取会话失败', '[claims/:token/session]')
+  }
+})
+
+router.get('/:token/session/summary', async (req, res) => {
+  try {
+    const data = await getClaimSessionSummary(req.params.token)
+    res.json(buildSuccessPayload(data, 'ok'))
+  } catch (error) {
+    sendRouteError(res, error, '查询领取会话摘要失败', '[claims/:token/session/summary]')
+  }
+})
+
+router.post('/:token/confirm-role', async (req, res) => {
+  try {
+    const data = await confirmClaimRole(req.params.token)
+    res.json(buildSuccessPayload(data, '角色已确认'))
+  } catch (error) {
+    sendRouteError(res, error, '确认角色失败', '[claims/:token/confirm-role]')
+  }
+})
+
+router.post('/:token/redeem', async (req, res) => {
+  try {
+    const data = await redeemClaimTask(req.params.token)
+    res.json(buildSuccessPayload(data, '兑换完成'))
+  } catch (error) {
+    sendRouteError(res, error, '执行领取兑换失败', '[claims/:token/redeem]')
+  }
+})
+
+router.get('/:token/screenshot', async (req, res) => {
+  try {
+    const screenshotPath = await getClaimScreenshotPath(req.params.token)
+    res.sendFile(screenshotPath)
+  } catch (error) {
+    sendRouteError(res, error, '读取领取截图失败', '[claims/:token/screenshot]')
+  }
+})
+
+router.use((req, res) => {
+  res.status(404).json(buildNotFoundPayload(req))
+})
+
+export default router

apps/backend/src/routes/tencent.js

@@ -0,0 +1,87 @@
+import { Router } from 'express'
+
+import {
+  closeTencentBrowserSession,
+  createTencentBrowserSession,
+  getTencentBrowserSession,
+  getTencentBrowserSessionSummary,
+  getTencentBrowserSessionScreenshotPath,
+  reloadTencentBrowserSession,
+  redeemTencentBrowserSession,
+} from '../services/session.js'
+import {
+  buildNotFoundPayload,
+  buildSuccessPayload,
+  sendRouteError,
+} from '../utils/http.js'
+
+const router = Router()
+
+router.post('/browser/session', async (req, res) => {
+  try {
+    const data = await createTencentBrowserSession(req.body)
+    res.json(buildSuccessPayload(data, '浏览器会话已创建'))
+  } catch (error) {
+    sendRouteError(res, error, '创建浏览器会话失败', '[browser/session]')
+  }
+})
+
+router.get('/browser/session/:sessionId', async (req, res) => {
+  try {
+    const data = await getTencentBrowserSession(req.params.sessionId)
+    res.json(buildSuccessPayload(data, data.notice || 'ok'))
+  } catch (error) {
+    sendRouteError(res, error, '查询浏览器会话失败', '[browser/session/:sessionId]')
+  }
+})
+
+router.get('/browser/session/:sessionId/summary', async (req, res) => {
+  try {
+    const data = await getTencentBrowserSessionSummary(req.params.sessionId)
+    res.json(buildSuccessPayload(data, data.notice || 'ok'))
+  } catch (error) {
+    sendRouteError(res, error, '查询浏览器会话摘要失败', '[browser/session/:sessionId/summary]')
+  }
+})
+
+router.post('/browser/session/:sessionId/refresh', async (req, res) => {
+  try {
+    const data = await reloadTencentBrowserSession(req.params.sessionId)
+    res.json(buildSuccessPayload(data, data.notice || '后端页面已刷新'))
+  } catch (error) {
+    sendRouteError(res, error, '刷新后端页面失败', '[browser/session/:sessionId/refresh]')
+  }
+})
+
+router.post('/browser/session/:sessionId/redeem', async (req, res) => {
+  try {
+    const data = await redeemTencentBrowserSession(req.params.sessionId, req.body)
+    res.json(buildSuccessPayload(data, data.notice || '兑换完成'))
+  } catch (error) {
+    sendRouteError(res, error, '浏览器会话兑换失败', '[browser/session/:sessionId/redeem]')
+  }
+})
+
+router.get('/browser/session/:sessionId/screenshot', async (req, res) => {
+  try {
+    const screenshotPath = await getTencentBrowserSessionScreenshotPath(req.params.sessionId)
+    res.sendFile(screenshotPath)
+  } catch (error) {
+    sendRouteError(res, error, '读取兑换截图失败', '[browser/session/:sessionId/screenshot]')
+  }
+})
+
+router.delete('/browser/session/:sessionId', async (req, res) => {
+  try {
+    const data = await closeTencentBrowserSession(req.params.sessionId)
+    res.json(buildSuccessPayload(data, '浏览器会话已关闭'))
+  } catch (error) {
+    sendRouteError(res, error, '关闭浏览器会话失败', '[browser/session/:sessionId]')
+  }
+})
+
+router.use((req, res) => {
+  res.status(404).json(buildNotFoundPayload(req))
+})
+
+export default router

apps/backend/src/routes/webhooks.js

@@ -0,0 +1,25 @@
+import { Router } from 'express'
+
+import { processAgisoTradeWebhook } from '../services/webhook-service.js'
+import { buildNotFoundPayload, buildSuccessPayload, sendRouteError } from '../utils/http.js'
+
+const router = Router()
+
+router.post('/agiso/trade', async (req, res) => {
+  try {
+    const data = await processAgisoTradeWebhook({
+      headers: req.headers,
+      query: req.query,
+      body: req.body,
+    })
+    res.json(buildSuccessPayload(data, 'success'))
+  } catch (error) {
+    sendRouteError(res, error, '处理 Agiso 订单通知失败', '[webhooks/agiso/trade]')
+  }
+})
+
+router.use((req, res) => {
+  res.status(404).json(buildNotFoundPayload(req))
+})
+
+export default router