{{ t('agent.section.credit_log') }}
-
-
diff --git a/apps/admin/src/views/Agents.vue b/apps/admin/src/views/Agents.vue
index 809cd3b..345ea67 100644
--- a/apps/admin/src/views/Agents.vue
+++ b/apps/admin/src/views/Agents.vue
@@ -26,7 +26,10 @@ import {
shouldCompactAmount as shouldCompact,
} from '../utils/format-amount';
import AdminTableEmpty from '../components/AdminTableEmpty.vue';
+import InviteCodePanel from '../components/InviteCodePanel.vue';
+import RatePercentInput from '../components/RatePercentInput.vue';
import AgentCreditContext from '../components/AgentCreditContext.vue';
+import { formatRatePercent, percentToDecimalRate } from '../utils/rate-percent';
import {
fetchAdminAgentCreditContext,
maxCreditIncreaseAmount,
@@ -186,7 +189,7 @@ async function submitEdit() {
status: editForm.value.status,
phone: editForm.value.phone.trim() || undefined,
email: editForm.value.email.trim() || undefined,
- cashbackRate: editForm.value.cashbackRate,
+ cashbackRate: percentToDecimalRate(editForm.value.cashbackRate),
});
ElMessage.success(t('msg.saved'));
editVisible.value = false;
@@ -298,7 +301,7 @@ function creditTypeLabel(type: string) {
- {{ row.cashbackRate }}
+ {{ formatRatePercent(row.cashbackRate) }}
{{ row.phone ?? '—' }}
@@ -361,14 +364,7 @@ function creditTypeLabel(type: string) {
-
@@ -393,14 +389,7 @@ function creditTypeLabel(type: string) {
-
{{ formatAmount(detail.childAgentExposure) }}
- {{ detail.cashbackRate }}
+ {{ formatRatePercent(detail.cashbackRate) }}
{{ detail.phone ?? '—' }}
{{ detail.email ?? '—' }}
@@ -486,6 +475,8 @@ function creditTypeLabel(type: string) {
+
-
- {{ t('agent.hint.credit_limit') }}
{{ t('agent.hint.cashback_example') }}
{{ t('agent.section.credit_log') }}
preview.value?.items ?? []);
const detailItems = computed(() => detail.value?.items ?? []);
function formatRate(value: string | number | null | undefined) {
- const n = Number(value);
- if (!Number.isFinite(n)) return '—';
- return `${(n * 100).toFixed(2)}%`;
+ return formatRatePercent(value);
}
function formatPeriodDate(value: string) {
@@ -613,9 +612,9 @@ onMounted(loadHistory);
}
.rules-help-btn:hover {
- color: var(--green-glow);
- border-color: rgba(47, 181, 106, 0.45);
- background: rgba(47, 181, 106, 0.08);
+ color: #f5f5f5;
+ border-color: rgba(255, 255, 255, 0.14);
+ background: rgba(255, 255, 255, 0.04);
}
.rules-list {
@@ -708,7 +707,7 @@ onMounted(loadHistory);
.pstat-green {
color: var(--green-glow);
- text-shadow: 0 0 20px rgba(47, 181, 106, 0.35);
+ text-shadow: none;
}
.pstat-label {
diff --git a/apps/admin/src/views/Contents.vue b/apps/admin/src/views/Contents.vue
index 26aa851..4d1f979 100644
--- a/apps/admin/src/views/Contents.vue
+++ b/apps/admin/src/views/Contents.vue
@@ -835,15 +835,15 @@ void load();
font-size: 12px;
font-family: inherit;
cursor: pointer;
- border: 1px solid rgba(47, 181, 106, 0.5);
- background: rgba(47, 181, 106, 0.1);
- color: #2fb56a;
+ border: 1px solid rgba(212, 175, 55, 0.5);
+ background: rgba(212, 175, 55, 0.1);
+ color: var(--gold-text);
font-weight: 600;
transition: all 0.15s;
}
.banner-upload-btn:hover {
- background: rgba(47, 181, 106, 0.2);
+ background: rgba(212, 175, 55, 0.2);
}
.banner-upload-btn.is-uploading {
@@ -905,8 +905,8 @@ void load();
}
.media-picker-card:hover {
- border-color: rgba(47, 181, 106, 0.5);
- box-shadow: 0 2px 12px rgba(47, 181, 106, 0.15);
+ border-color: rgba(212, 175, 55, 0.5);
+ box-shadow: 0 2px 12px rgba(212, 175, 55, 0.15);
}
.media-picker-thumb {
diff --git a/apps/admin/src/views/Dashboard.vue b/apps/admin/src/views/Dashboard.vue
index 0ad09ee..660405f 100644
--- a/apps/admin/src/views/Dashboard.vue
+++ b/apps/admin/src/views/Dashboard.vue
@@ -8,6 +8,7 @@ import EChartPanel from '../components/dashboard/EChartPanel.vue';
import { buildCombinedTrendOption, buildTriplePieOption } from '../utils/dashboard-charts';
import { betStatusLabel } from '../utils/bet-labels';
import { useAdminLocale } from '../composables/useAdminLocale';
+import InviteCodePanel from '../components/InviteCodePanel.vue';
const { t, locale, localeTag } = useAdminLocale();
const router = useRouter();
@@ -86,7 +87,7 @@ const mainTrendOption = computed(() =>
[
{
name: t('dash.chart_stake'),
- color: '#248f54',
+ color: '#d4d4d4',
values: s.value?.trend7d?.map((d) => toNum(d.stake)) ?? [],
},
{
@@ -111,7 +112,7 @@ const distributionOption = computed(() => {
const raw = s.value?.bets.todayByStatus ?? {};
const betColors: Record = {
PENDING: '#fb923c',
- WON: '#248f54',
+ WON: '#d4d4d4',
LOST: '#f87171',
VOID: '#6b7280',
REFUNDED: '#60a5fa',
@@ -120,7 +121,7 @@ const distributionOption = computed(() => {
const matchSegs = m
? [
{ label: t('dash.match_draft'), value: m.draft, color: '#6b7280' },
- { label: t('dash.match_published'), value: m.published, color: '#248f54' },
+ { label: t('dash.match_published'), value: m.published, color: '#d4d4d4' },
{ label: t('dash.match_closed'), value: m.closed, color: '#60a5fa' },
{ label: t('dash.match_pending_settle'), value: m.pendingSettlement, color: '#fb923c' },
{ label: t('dash.match_settled'), value: m.settled ?? 0, color: '#5eead4' },
@@ -137,7 +138,7 @@ const distributionOption = computed(() => {
const userSegs = u
? [
- { label: t('dash.user_active'), value: u.playersActive, color: '#248f54' },
+ { label: t('dash.user_active'), value: u.playersActive, color: '#d4d4d4' },
{ label: t('dash.user_suspended'), value: u.playersSuspended, color: '#f87171' },
{ label: t('dash.user_direct'), value: u.playersDirect, color: '#60a5fa' },
{ label: t('dash.user_agents'), value: u.agentsTotal, color: '#a78bfa' },
@@ -231,6 +232,7 @@ const kpiSecondary = computed(() => {
+
= {
PENDING: '#fb923c',
- WON: '#248f54',
+ WON: '#d4d4d4',
LOST: '#f87171',
VOID: '#6b7280',
REFUNDED: '#60a5fa',
@@ -122,7 +122,7 @@ const distributionOption = computed(() => {
{
label: t('agent_dash.credit_available'),
value: toNum(c.availableCredit),
- color: '#248f54',
+ color: '#d4d4d4',
},
{
label: t('agent_dash.credit_used'),
@@ -142,7 +142,7 @@ const distributionOption = computed(() => {
const playerSegs = p
? [
- { label: t('dash.user_active'), value: p.active, color: '#248f54' },
+ { label: t('dash.user_active'), value: p.active, color: '#d4d4d4' },
{ label: t('dash.user_suspended'), value: p.suspended, color: '#f87171' },
].filter((x) => x.value > 0)
: [];
@@ -322,9 +322,10 @@ const kpiSecondary = computed(() => {
}
.overview-board {
- border-radius: 14px;
- border: 1px solid #1e1e1e;
- background: linear-gradient(180deg, rgba(36, 143, 84, 0.06) 0%, rgba(0, 0, 0, 0) 120px);
+ margin-top: 12px;
+ border-radius: 8px;
+ border: 1px solid rgba(255, 255, 255, 0.08);
+ background: #111111;
}
.overview-board :deep(.el-card__body) {
padding: 20px 22px 16px;
@@ -374,23 +375,23 @@ const kpiSecondary = computed(() => {
}
.kpi-cell--link:hover,
.kpi-cell--link:focus-visible {
- border-color: rgba(77, 214, 138, 0.35);
- background: rgba(36, 143, 84, 0.1);
+ border-color: rgba(255, 255, 255, 0.12);
+ background: rgba(255, 255, 255, 0.04);
outline: none;
}
.kpi-label {
display: block;
- font-size: 11px;
- color: #666;
+ font-size: 12px;
+ color: #737373;
margin-bottom: 6px;
}
.kpi-value {
display: block;
font-size: 22px;
- font-weight: 800;
- color: var(--green-text);
+ font-weight: 500;
+ color: #f5f5f5;
line-height: 1.15;
- letter-spacing: -0.5px;
+ letter-spacing: -0.02em;
}
.kpi-value.sm {
font-size: 17px;
diff --git a/apps/admin/src/views/agent/Players.vue b/apps/admin/src/views/agent/Players.vue
index 5362563..39b7ac8 100644
--- a/apps/admin/src/views/agent/Players.vue
+++ b/apps/admin/src/views/agent/Players.vue
@@ -33,6 +33,9 @@ import type { TableInstance } from 'element-plus';
import WalletTransferContext from '../../components/WalletTransferContext.vue';
import AgentCreditContext from '../../components/AgentCreditContext.vue';
import PlayerWalletLedgerDialog from '../../components/PlayerWalletLedgerDialog.vue';
+import InviteManageDialog from '../../components/InviteManageDialog.vue';
+import AdminPlayerRowActions from '../../components/AdminPlayerRowActions.vue';
+import AdminRowActionsDropdown from '../../components/AdminRowActionsDropdown.vue';
import {
depositAmountCap,
parsePlayerAvailable,
@@ -46,6 +49,7 @@ import { formatAgentLevelNumeral } from '../../utils/agent-level-label';
const { t, localeTag } = useAdminLocale();
const auth = useAuthStore();
+const inviteDialogOpen = ref(false);
const profile = ref<{
level?: number;
@@ -638,8 +642,14 @@ function statusTagType(s: string) {
@@ -301,10 +303,14 @@ const kpiSecondary = computed(() => {
margin-bottom: 14px;
}
+.invite-board {
+ margin-bottom: 12px;
+}
+
.overview-board {
- border-radius: 14px;
- border: 1px solid #1e1e1e;
- background: linear-gradient(180deg, rgba(36, 143, 84, 0.06) 0%, rgba(0, 0, 0, 0) 120px);
+ border-radius: 8px;
+ border: 1px solid rgba(255, 255, 255, 0.08);
+ background: #111111;
margin-bottom: 28px;
}
.overview-board :deep(.el-card__body) {
@@ -348,23 +354,23 @@ const kpiSecondary = computed(() => {
}
.kpi-cell--link:hover,
.kpi-cell--link:focus-visible {
- border-color: rgba(77, 214, 138, 0.35);
- background: rgba(36, 143, 84, 0.1);
+ border-color: rgba(255, 255, 255, 0.12);
+ background: rgba(255, 255, 255, 0.04);
outline: none;
}
.kpi-label {
display: block;
- font-size: 11px;
- color: #666;
+ font-size: 12px;
+ color: #737373;
margin-bottom: 6px;
}
.kpi-value {
display: block;
font-size: 22px;
- font-weight: 800;
- color: var(--green-text);
+ font-weight: 500;
+ color: #f5f5f5;
line-height: 1.15;
- letter-spacing: -0.5px;
+ letter-spacing: -0.02em;
}
.kpi-value.sm {
font-size: 17px;
diff --git a/apps/admin/src/views/DepositManage.vue b/apps/admin/src/views/DepositManage.vue
new file mode 100644
index 0000000..43c50be
--- /dev/null
+++ b/apps/admin/src/views/DepositManage.vue
@@ -0,0 +1,111 @@
+
+
+
+
+
-
- {{ detail.id }}
- {{ detail.username }}
-
- {{ detail.managedPassword ?? '—' }}
-
-
- {{ t('user.hint.password_reset_to_view') }}
-
-
+
+ {{ detail.id }}
+ {{ detail.username }}
+
{{ statusLabel(detail.status) }}
-
-
+
+
{{ detail.parentUsername ?? t('common.platform_direct') }}
-
-
+
+
{{ formatAmount(detail.availableBalance) }}
（{{ formatAmountFull(detail.availableBalance) }}）
-
-
+
+
{{ formatAmount(detail.frozenBalance) }}
（{{ formatAmountFull(detail.frozenBalance) }}）
-
- {{ detail.phone ?? '—' }}
- {{ detail.email ?? '—' }}
- {{ detail.betCount }}
- {{ formatAmount(detail.totalStake) }}
- {{ formatAmount(detail.totalReturn) }}
-
+
+ {{ detail.betCount }}
+ {{ formatAmount(detail.totalStake) }}
+ {{ formatAmount(detail.totalReturn) }}
+ {{ detail.phone ?? '—' }}
+
{{ detail.lastLoginAt ? formatTime(detail.lastLoginAt) : t('common.never_login') }}
-
- {{ t('user.login_fail_value', { n: detail.loginFailCount }) }}
-
- {{ formatTime(detail.createdAt) }}
-
-
+
+ {{ t('user.login_fail_value', { n: detail.loginFailCount }) }}
+ {{ detail.email ?? '—' }}
+ {{ formatTime(detail.createdAt) }}
+
+ {{ detail.managedPassword ?? '—' }}
+ {{ t('user.hint.password_reset_to_view') }}
+
+
@@ -903,22 +901,3 @@ function statusLabel(s: string) {
margin-bottom: 10px;
}
-
-
diff --git a/apps/admin/src/views/agent-form.ts b/apps/admin/src/views/agent-form.ts
index b05cf50..4b469b0 100644
--- a/apps/admin/src/views/agent-form.ts
+++ b/apps/admin/src/views/agent-form.ts
@@ -1,4 +1,5 @@
import { FormValidationError } from '../i18n/form-validation';
+import { decimalRateToPercent, percentToDecimalRate } from '../utils/rate-percent';
export interface PromotableUserOption {
id: string;
@@ -64,6 +65,7 @@ export interface AgentRow {
phone: string | null;
email: string | null;
locale: string;
+ inviteCode?: string | null;
createdAt: string;
}
@@ -131,7 +133,7 @@ export function editFormFromAgentDetail(d: AgentDetail): AgentEditForm {
status: d.status,
phone: d.phone ?? '',
email: d.email ?? '',
- cashbackRate: Number(d.cashbackRate),
+ cashbackRate: decimalRateToPercent(d.cashbackRate),
maxSingleDeposit: d.maxSingleDeposit ? Number(d.maxSingleDeposit) : 0,
maxDailyDeposit: d.maxDailyDeposit ? Number(d.maxDailyDeposit) : 0,
managedPassword: d.managedPassword ?? null,
@@ -164,7 +166,7 @@ export function buildCreateAgentPayload(form: AgentCreateForm) {
return {
userId: form.userId,
creditLimit: form.creditLimit,
- cashbackRate: form.cashbackRate,
+ cashbackRate: percentToDecimalRate(form.cashbackRate),
maxSingleDeposit: form.maxSingleDeposit > 0 ? form.maxSingleDeposit : undefined,
maxDailyDeposit: form.maxDailyDeposit > 0 ? form.maxDailyDeposit : undefined,
phone: form.phone.trim() || undefined,
diff --git a/apps/admin/src/views/agent/Dashboard.vue b/apps/admin/src/views/agent/Dashboard.vue
index e7c3197..c88b575 100644
--- a/apps/admin/src/views/agent/Dashboard.vue
+++ b/apps/admin/src/views/agent/Dashboard.vue
@@ -86,7 +86,7 @@ const mainTrendOption = computed(() =>
[
{
name: t('dash.chart_stake'),
- color: '#248f54',
+ color: '#d4d4d4',
values: s.value?.trend7d?.map((d) => toNum(d.stake)) ?? [],
},
{
@@ -111,7 +111,7 @@ const distributionOption = computed(() => {
const raw = s.value?.bets.todayByStatus ?? {};
const betColors: Record
+
+
+
+
+
+
diff --git a/apps/admin/src/views/DepositOrders.vue b/apps/admin/src/views/DepositOrders.vue
new file mode 100644
index 0000000..9be8f9d
--- /dev/null
+++ b/apps/admin/src/views/DepositOrders.vue
@@ -0,0 +1,331 @@
+
+
+
+
+
+
+
+
+
+
+
+
+
+
diff --git a/apps/admin/src/views/Login.vue b/apps/admin/src/views/Login.vue
index f319e34..2fe4596 100644
--- a/apps/admin/src/views/Login.vue
+++ b/apps/admin/src/views/Login.vue
@@ -238,8 +238,8 @@ label {
}
.field::placeholder { color: #3a3a3a; }
.field:focus {
- border-color: var(--green-mid);
- box-shadow: 0 0 0 3px rgba(47, 181, 106, 0.15);
+ border-color: rgba(255, 255, 255, 0.28);
+ box-shadow: none;
}
.field:-webkit-autofill,
.field:-webkit-autofill:focus {
@@ -249,24 +249,23 @@ label {
}
.btn-login {
margin-top: 6px;
- height: 46px;
- background: var(--primary-grad);
- border: 1px solid var(--green-border);
- border-radius: 8px;
- color: #fff;
- font-size: 15px;
- font-weight: 800;
+ height: 44px;
+ background: #f5f5f5;
+ border: 1px solid #f5f5f5;
+ border-radius: 6px;
+ color: #0a0a0a;
+ font-size: 14px;
+ font-weight: 500;
font-family: inherit;
- letter-spacing: 0.15em;
- box-shadow: var(--primary-shadow);
- text-shadow: 0 1px 1px rgba(0, 0, 0, 0.25);
- transition: background 0.2s, box-shadow 0.2s;
+ letter-spacing: 0;
+ box-shadow: none;
+ transition: background 0.15s, border-color 0.15s;
}
.btn-login:hover:not(:disabled) {
- background: var(--primary-grad-hover);
- border-color: rgba(120, 230, 170, 0.45);
- color: #fff;
- box-shadow: 0 1px 0 rgba(255, 255, 255, 0.16) inset, 0 4px 14px rgba(0, 0, 0, 0.45), 0 0 20px rgba(47, 181, 106, 0.3);
+ background: #ffffff;
+ border-color: #ffffff;
+ color: #0a0a0a;
+ box-shadow: none;
}
.btn-login:disabled { opacity: 0.4; cursor: not-allowed; }
.quick-label {
@@ -308,7 +307,7 @@ label {
}
.quick-acc {
font-size: 12px;
- color: var(--green-text);
+ color: var(--gold-text);
font-weight: 600;
font-family: monospace;
}
diff --git a/apps/admin/src/views/MediaLibrary.vue b/apps/admin/src/views/MediaLibrary.vue
index 9ccc33e..637be69 100644
--- a/apps/admin/src/views/MediaLibrary.vue
+++ b/apps/admin/src/views/MediaLibrary.vue
@@ -345,10 +345,10 @@ async function doUpload() {
}
.tab-btn:hover { border-color: #444; color: #ccc; }
.tab-btn.active {
- background: rgba(47, 181, 106, 0.14);
- border-color: rgba(47, 181, 106, 0.5);
- color: #2fb56a;
- font-weight: 600;
+ background: rgba(255, 255, 255, 0.06);
+ border-color: rgba(255, 255, 255, 0.12);
+ color: #f5f5f5;
+ font-weight: 500;
}
.btn {
@@ -369,13 +369,13 @@ async function doUpload() {
}
.btn-ghost:hover:not(:disabled) { border-color: #444; color: #ccc; }
.btn-primary {
- background: linear-gradient(135deg, #2fb56a, #248f54);
- color: #fff;
- font-weight: 600;
- border-color: transparent;
- box-shadow: 0 2px 8px rgba(47, 181, 106, 0.3);
+ background: #f5f5f5;
+ color: #0a0a0a;
+ font-weight: 500;
+ border-color: #f5f5f5;
+ box-shadow: none;
}
-.btn-primary:hover:not(:disabled) { filter: brightness(1.08); }
+.btn-primary:hover:not(:disabled) { background: #ffffff; border-color: #ffffff; }
/* ── Grid ── */
.file-grid {
@@ -435,9 +435,9 @@ async function doUpload() {
letter-spacing: 0.04em;
}
.badge-used {
- background: rgba(47, 181, 106, 0.2);
- color: #2fb56a;
- border: 1px solid rgba(47, 181, 106, 0.35);
+ background: rgba(212, 175, 55, 0.2);
+ color: #c9a227;
+ border: 1px solid rgba(212, 175, 55, 0.35);
}
.badge-unused {
background: rgba(120, 120, 120, 0.18);
@@ -611,8 +611,8 @@ async function doUpload() {
}
.drop-zone:hover,
.drop-zone.drop-active {
- border-color: rgba(47, 181, 106, 0.5);
- background: rgba(47, 181, 106, 0.04);
+ border-color: rgba(212, 175, 55, 0.5);
+ background: rgba(212, 175, 55, 0.04);
}
.drop-hint {
font-size: 13px;
diff --git a/apps/admin/src/views/PaymentMethods.vue b/apps/admin/src/views/PaymentMethods.vue
new file mode 100644
index 0000000..2f2678a
--- /dev/null
+++ b/apps/admin/src/views/PaymentMethods.vue
@@ -0,0 +1,380 @@
+
+
+
+
+
+
+
+
+
+
+ | {{ t('deposit.order_no') }} | +{{ t('deposit.player') }} | +{{ t('common.type') }} | +{{ t('deposit.amount') }} | +{{ t('deposit.screenshot') }} | +{{ t('common.status') }} | +{{ t('deposit.approved_amount') }} | +{{ t('deposit.reviewer') }} | +{{ t('deposit.time') }} | +{{ t('common.actions') }} | +
|---|---|---|---|---|---|---|---|---|---|
| {{ row.orderNo }} | +{{ row.playerUsername || row.playerId }} | +{{ row.methodType }} | +{{ formatAmount(row.amount) }} | +
+ |
+ {{ statusLabel(row.status) }} | +{{ row.approvedAmount ? formatAmount(row.approvedAmount) : '-' }} | +{{ row.reviewerUsername || '-' }} | +{{ new Date(row.createdAt).toLocaleString() }} | ++ + + + + + {{ row.rejectReason }} + + | +
+
+ {{ page }} / {{ Math.ceil(total / pageSize) }}
+
+
+
+
+
+
+
+
+
+
+
+
+
+ {{ t('deposit.approve_title') }}
+
+
+
+ {{ t('deposit.player') }}: {{ approveTarget.playerUsername }}
+
+
+ {{ t('deposit.submitted_amount') }}: {{ formatAmount(approveTarget.amount) }}
+
+
+ {{ t('deposit.screenshot') }}:
+ ![]()
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ ![]()
+
+
+
+
+
+
+
+
+
+
+
+
+
+
diff --git a/apps/admin/src/views/Settlement.vue b/apps/admin/src/views/Settlement.vue
index 9835a2c..6f1353d 100644
--- a/apps/admin/src/views/Settlement.vue
+++ b/apps/admin/src/views/Settlement.vue
@@ -836,7 +836,7 @@ onMounted(() => {
.leg-badge {
margin-left: 4px;
font-size: 10px;
- color: var(--green-text, #2fb56a);
+ color: var(--gold-text, #dcc078);
}
.bet-content-cell {
@@ -922,7 +922,7 @@ onMounted(() => {
.vs {
font-size: 13px;
font-weight: 700;
- color: var(--green-text, #2fb56a);
+ color: var(--gold-text, #dcc078);
flex-shrink: 0;
}
@@ -1062,7 +1062,7 @@ onMounted(() => {
.pstat-green {
color: var(--green-glow);
- text-shadow: 0 0 20px rgba(47, 181, 106, 0.35);
+ text-shadow: none;
}
.pstat-orange {
diff --git a/apps/admin/src/views/Users.vue b/apps/admin/src/views/Users.vue
index 3be08af..94fa3a8 100644
--- a/apps/admin/src/views/Users.vue
+++ b/apps/admin/src/views/Users.vue
@@ -27,6 +27,8 @@ import {
shouldCompactAmount as shouldCompact,
} from '../utils/format-amount';
import AdminTableEmpty from '../components/AdminTableEmpty.vue';
+import AdminDetailGrid from '../components/AdminDetailGrid.vue';
+import AdminDetailItem from '../components/AdminDetailItem.vue';
import WalletTransferContext from '../components/WalletTransferContext.vue';
import { useAdminPlayerTransfer } from '../composables/useAdminPlayerTransfer';
@@ -788,50 +790,46 @@ function statusLabel(s: string) {
- | {{ t('common.type') }} | +{{ t('deposit.display_name') }} | +{{ t('deposit.details') }} | +{{ t('deposit.sort') }} | +{{ t('deposit.active') }} | +{{ t('deposit.show_player') }} | +{{ t('common.actions') }} | +
|---|---|---|---|---|---|---|
| {{ row.methodType }} | +{{ row.displayName || '-' }} | +
+
+ {{ row.bankName }}
+ {{ row.accountHolder }} · {{ row.accountNumber }}
+
+
+ {{ row.usdtAddress }}
+ |
+ {{ row.sortOrder }} | ++ {{ row.isActive ? 'ON' : 'OFF' }} + | ++ {{ row.showOnPlayer ? 'ON' : 'OFF' }} + | ++ + + + + | +
+
+
+
+ {{ editingId ? t('deposit.edit_method') : t('deposit.create_method') }}
+
+
+
+
+
+
+
+
+
+
+
+ {{ t('deposit.multilingual_hint') }}
+
+ {{ t('deposit.lang_zh') }}
+
+
+
+ {{ t('deposit.lang_en') }}
+
+
+
+ {{ t('deposit.lang_ms') }}
+
+
+
+
+
+
+
+
+
+ {{ t('deposit.lang_zh') }}
+
+
+
+ {{ t('deposit.lang_en') }}
+
+
+
+ {{ t('deposit.lang_ms') }}
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ ![]()
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ {{ t('invite.menu_btn') }}
+
+
+
@@ -921,9 +938,6 @@ function statusTagType(s: string) {
-
-
-
= {
PENDING: '#fb923c',
- WON: '#248f54',
+ WON: '#d4d4d4',
LOST: '#f87171',
VOID: '#6b7280',
REFUNDED: '#60a5fa',
@@ -71,7 +71,7 @@ const distributionOption = computed(() => {
const matchSegs = m
? [
{ label: t('dash.match_draft'), value: m.draft, color: '#6b7280' },
- { label: t('dash.match_published'), value: m.published, color: '#248f54' },
+ { label: t('dash.match_published'), value: m.published, color: '#d4d4d4' },
{ label: t('dash.match_closed'), value: m.closed, color: '#60a5fa' },
{ label: t('dash.match_pending_settle'), value: m.pendingSettlement, color: '#fb923c' },
{ label: t('dash.match_settled'), value: m.settled ?? 0, color: '#5eead4' },
diff --git a/apps/admin/src/views/dashboard/DashboardPlayers.vue b/apps/admin/src/views/dashboard/DashboardPlayers.vue
index b8c465b..d7b277f 100644
--- a/apps/admin/src/views/dashboard/DashboardPlayers.vue
+++ b/apps/admin/src/views/dashboard/DashboardPlayers.vue
@@ -54,7 +54,7 @@ const userDistributionOption = computed(() => {
const u = s.value?.users;
const userSegs = u
? [
- { label: t('dash.user_active'), value: u.playersActive, color: '#248f54' },
+ { label: t('dash.user_active'), value: u.playersActive, color: '#d4d4d4' },
{ label: t('dash.user_suspended'), value: u.playersSuspended, color: '#f87171' },
{ label: t('dash.user_direct'), value: u.playersDirect, color: '#60a5fa' },
{ label: t('dash.user_agents'), value: u.agentsTotal, color: '#a78bfa' },
diff --git a/apps/admin/src/views/dashboard/dashboard-board.css b/apps/admin/src/views/dashboard/dashboard-board.css
index 8f1d30a..936bc86 100644
--- a/apps/admin/src/views/dashboard/dashboard-board.css
+++ b/apps/admin/src/views/dashboard/dashboard-board.css
@@ -3,30 +3,30 @@
}
.state-card {
- border-radius: 14px;
- border: 1px solid #2a2220;
- background: rgba(255, 69, 58, 0.06);
+ border-radius: 8px;
+ border: 1px solid rgba(255, 255, 255, 0.08);
+ background: rgba(255, 69, 58, 0.04);
text-align: center;
padding: 8px 0 4px;
}
.state-title {
- font-size: 15px;
- font-weight: 700;
- color: #ff8a80;
+ font-size: 14px;
+ font-weight: 500;
+ color: #fca5a5;
margin-bottom: 6px;
}
.state-hint {
font-size: 13px;
- color: #888;
+ color: #737373;
margin-bottom: 14px;
}
.overview-board {
- border-radius: 14px;
- border: 1px solid #1e1e1e;
- background: linear-gradient(180deg, rgba(36, 143, 84, 0.06) 0%, rgba(0, 0, 0, 0) 120px);
+ border-radius: 8px;
+ border: 1px solid rgba(255, 255, 255, 0.08);
+ background: #111111;
margin-bottom: 28px;
}
@@ -45,13 +45,12 @@
.board-hint {
font-size: 12px;
- color: #666;
+ color: #737373;
}
.dash-updated {
font-size: 11px;
- color: #555;
- letter-spacing: 0.02em;
+ color: #525252;
}
.kpi-grid {
@@ -71,9 +70,9 @@
.kpi-cell {
padding: 12px 14px;
- border-radius: 10px;
- border: 1px solid #222;
- background: rgba(255, 255, 255, 0.03);
+ border-radius: 8px;
+ border: 1px solid rgba(255, 255, 255, 0.06);
+ background: rgba(255, 255, 255, 0.02);
}
.kpi-cell.compact {
@@ -87,25 +86,25 @@
.kpi-cell--link:hover,
.kpi-cell--link:focus-visible {
- border-color: rgba(77, 214, 138, 0.35);
- background: rgba(36, 143, 84, 0.1);
+ border-color: rgba(255, 255, 255, 0.12);
+ background: rgba(255, 255, 255, 0.04);
outline: none;
}
.kpi-label {
display: block;
- font-size: 11px;
- color: #666;
+ font-size: 12px;
+ color: #737373;
margin-bottom: 6px;
}
.kpi-value {
display: block;
font-size: 22px;
- font-weight: 800;
- color: var(--green-text);
+ font-weight: 500;
+ color: #f5f5f5;
line-height: 1.15;
- letter-spacing: -0.5px;
+ letter-spacing: -0.02em;
}
.kpi-value.sm {
@@ -115,7 +114,7 @@
.kpi-sub {
display: block;
font-size: 11px;
- color: #555;
+ color: #525252;
margin-top: 4px;
}
@@ -123,15 +122,15 @@
display: inline-block;
margin-top: 6px;
font-size: 10px;
- font-weight: 600;
- color: #888;
+ font-weight: 500;
+ color: #737373;
padding: 2px 6px;
border-radius: 4px;
background: rgba(255, 255, 255, 0.04);
}
.kpi-delta.up {
- color: #4ade80;
+ color: #a3a3a3;
}
.kpi-delta.down {
@@ -139,13 +138,13 @@
}
.charts-stack {
- border-top: 1px solid #1a1a1a;
+ border-top: 1px solid rgba(255, 255, 255, 0.06);
padding-top: 12px;
}
.chart-main-caption {
font-size: 11px;
- color: #555;
+ color: #525252;
text-align: center;
margin: -8px 0 8px;
}
diff --git a/apps/admin/src/views/matches/LeagueOutrightPanel.vue b/apps/admin/src/views/matches/LeagueOutrightPanel.vue
index 60cb67d..a18582b 100644
--- a/apps/admin/src/views/matches/LeagueOutrightPanel.vue
+++ b/apps/admin/src/views/matches/LeagueOutrightPanel.vue
@@ -169,8 +169,8 @@ watch(
margin-bottom: 10px;
padding: 10px 12px;
border-radius: 8px;
- background: rgba(47, 181, 106, 0.04);
- border: 1px solid rgba(47, 181, 106, 0.14);
+ background: rgba(212, 175, 55, 0.04);
+ border: 1px solid rgba(212, 175, 55, 0.14);
}
.panel-head {
display: flex;
diff --git a/apps/admin/src/views/user-form.ts b/apps/admin/src/views/user-form.ts
index a151cd2..2f54183 100644
--- a/apps/admin/src/views/user-form.ts
+++ b/apps/admin/src/views/user-form.ts
@@ -1,4 +1,6 @@
import { FormValidationError } from '../i18n/form-validation';
+import { decimalRateToPercent } from '../utils/rate-percent';
+import { percentToDecimalRate } from '../utils/rate-percent';
/** 玩家用户名：仅英文字母与数字，3–32 位 */
export const PLAYER_USERNAME_PATTERN = /^[a-zA-Z0-9]{3,32}$/;
@@ -46,6 +48,9 @@ export interface PlayerEditForm {
email: string;
managedPassword: string | null;
newPassword: string;
+ customCashbackRate: number;
+ defaultCashbackRate: number;
+ useCustomCashback: boolean;
}
export interface PlayerRow {
@@ -57,6 +62,7 @@ export interface PlayerRow {
parentUsername: string | null;
/** 归属代理链：一级代理、二级代理（如有） */
affiliationAgents?: string[];
+ inviteCode?: string | null;
phone: string | null;
email: string | null;
managedPassword: string | null;
@@ -73,6 +79,8 @@ export interface PlayerDetail extends PlayerRow {
loginFailCount: number;
lockedUntil: string | null;
updatedAt: string;
+ customCashbackRate: string | null;
+ defaultCashbackRate: string;
}
/** 玩家归属标签，格式：玩家-平台 | 玩家-一级代理 | 玩家-一级代理-二级代理 */
@@ -124,6 +132,9 @@ export function emptyPlayerEditForm(): PlayerEditForm {
email: '',
managedPassword: null,
newPassword: '',
+ customCashbackRate: 0,
+ defaultCashbackRate: 0,
+ useCustomCashback: false,
};
}
@@ -146,6 +157,10 @@ export function editFormFromDetail(d: PlayerDetail): PlayerEditForm {
email: d.email ?? '',
managedPassword: d.managedPassword ?? null,
newPassword: '',
+ customCashbackRate:
+ d.customCashbackRate != null ? decimalRateToPercent(d.customCashbackRate) : 0,
+ defaultCashbackRate: decimalRateToPercent(d.defaultCashbackRate),
+ useCustomCashback: d.customCashbackRate != null,
};
}
@@ -164,7 +179,7 @@ export function buildCreatePlayerPayload(form: PlayerCreateForm) {
email: form.email.trim() || undefined,
asTier1Agent: true,
creditLimit: form.creditLimit,
- cashbackRate: form.cashbackRate,
+ cashbackRate: percentToDecimalRate(form.cashbackRate),
maxSingleDeposit: form.maxSingleDeposit > 0 ? form.maxSingleDeposit : undefined,
maxDailyDeposit: form.maxDailyDeposit > 0 ? form.maxDailyDeposit : undefined,
};
diff --git a/apps/api/prisma/migrations/20260611020438_add_deposit_models/migration.sql b/apps/api/prisma/migrations/20260611020438_add_deposit_models/migration.sql
new file mode 100644
index 0000000..98ff93a
--- /dev/null
+++ b/apps/api/prisma/migrations/20260611020438_add_deposit_models/migration.sql
@@ -0,0 +1,61 @@
+-- CreateTable
+CREATE TABLE "payment_methods" (
+ "id" BIGSERIAL NOT NULL,
+ "method_type" VARCHAR(20) NOT NULL,
+ "bank_name" VARCHAR(128),
+ "account_holder" VARCHAR(128),
+ "account_number" VARCHAR(128),
+ "usdt_address" VARCHAR(256),
+ "qr_code_url" VARCHAR(500),
+ "display_name" VARCHAR(128),
+ "sort_order" INTEGER NOT NULL DEFAULT 0,
+ "is_active" BOOLEAN NOT NULL DEFAULT true,
+ "show_on_player" BOOLEAN NOT NULL DEFAULT true,
+ "created_by" BIGINT,
+ "created_at" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+ "updated_at" TIMESTAMP(3) NOT NULL,
+
+ CONSTRAINT "payment_methods_pkey" PRIMARY KEY ("id")
+);
+
+-- CreateTable
+CREATE TABLE "deposit_orders" (
+ "id" BIGSERIAL NOT NULL,
+ "order_no" VARCHAR(64) NOT NULL,
+ "player_id" BIGINT NOT NULL,
+ "payment_method_id" BIGINT NOT NULL,
+ "method_type" VARCHAR(20) NOT NULL,
+ "amount" DECIMAL(18,4) NOT NULL,
+ "screenshot_url" VARCHAR(500) NOT NULL,
+ "status" VARCHAR(20) NOT NULL DEFAULT 'PENDING',
+ "approved_amount" DECIMAL(18,4),
+ "reviewer_id" BIGINT,
+ "reviewed_at" TIMESTAMP(3),
+ "reject_reason" VARCHAR(500),
+ "remark" VARCHAR(500),
+ "created_at" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+ "updated_at" TIMESTAMP(3) NOT NULL,
+
+ CONSTRAINT "deposit_orders_pkey" PRIMARY KEY ("id")
+);
+
+-- CreateIndex
+CREATE INDEX "payment_methods_method_type_is_active_idx" ON "payment_methods"("method_type", "is_active");
+
+-- CreateIndex
+CREATE UNIQUE INDEX "deposit_orders_order_no_key" ON "deposit_orders"("order_no");
+
+-- CreateIndex
+CREATE INDEX "deposit_orders_player_id_idx" ON "deposit_orders"("player_id");
+
+-- CreateIndex
+CREATE INDEX "deposit_orders_status_idx" ON "deposit_orders"("status");
+
+-- CreateIndex
+CREATE INDEX "deposit_orders_created_at_idx" ON "deposit_orders"("created_at");
+
+-- AddForeignKey
+ALTER TABLE "deposit_orders" ADD CONSTRAINT "deposit_orders_player_id_fkey" FOREIGN KEY ("player_id") REFERENCES "users"("id") ON DELETE RESTRICT ON UPDATE CASCADE;
+
+-- AddForeignKey
+ALTER TABLE "deposit_orders" ADD CONSTRAINT "deposit_orders_payment_method_id_fkey" FOREIGN KEY ("payment_method_id") REFERENCES "payment_methods"("id") ON DELETE RESTRICT ON UPDATE CASCADE;
diff --git a/apps/api/prisma/migrations/20260611020452_add_deposit_models/migration.sql b/apps/api/prisma/migrations/20260611020452_add_deposit_models/migration.sql
new file mode 100644
index 0000000..af5102c
--- /dev/null
+++ b/apps/api/prisma/migrations/20260611020452_add_deposit_models/migration.sql
@@ -0,0 +1 @@
+-- This is an empty migration.
\ No newline at end of file
diff --git a/apps/api/prisma/migrations/20260611120000_user_invite_code/migration.sql b/apps/api/prisma/migrations/20260611120000_user_invite_code/migration.sql
new file mode 100644
index 0000000..e0a5e51
--- /dev/null
+++ b/apps/api/prisma/migrations/20260611120000_user_invite_code/migration.sql
@@ -0,0 +1,11 @@
+-- AlterTable
+ALTER TABLE "users" ADD COLUMN "invite_code" VARCHAR(16);
+
+-- Backfill existing admins and agents with deterministic unique codes
+UPDATE "users"
+SET "invite_code" = UPPER(SUBSTR(MD5("id"::text || ':invite'), 1, 8))
+WHERE "user_type" IN ('ADMIN', 'AGENT')
+ AND "invite_code" IS NULL;
+
+-- CreateIndex
+CREATE UNIQUE INDEX "users_invite_code_key" ON "users"("invite_code");
diff --git a/apps/api/prisma/migrations/20260611140000_user_invite_sponsor/migration.sql b/apps/api/prisma/migrations/20260611140000_user_invite_sponsor/migration.sql
new file mode 100644
index 0000000..114adb6
--- /dev/null
+++ b/apps/api/prisma/migrations/20260611140000_user_invite_sponsor/migration.sql
@@ -0,0 +1,8 @@
+-- AlterTable
+ALTER TABLE "users" ADD COLUMN "invite_sponsor_id" BIGINT;
+
+-- CreateIndex
+CREATE INDEX "users_invite_sponsor_id_idx" ON "users"("invite_sponsor_id");
+
+-- AddForeignKey
+ALTER TABLE "users" ADD CONSTRAINT "users_invite_sponsor_id_fkey" FOREIGN KEY ("invite_sponsor_id") REFERENCES "users"("id") ON DELETE SET NULL ON UPDATE CASCADE;
diff --git a/apps/api/prisma/migrations/20260611150000_user_invites_history/migration.sql b/apps/api/prisma/migrations/20260611150000_user_invites_history/migration.sql
new file mode 100644
index 0000000..566ed18
--- /dev/null
+++ b/apps/api/prisma/migrations/20260611150000_user_invites_history/migration.sql
@@ -0,0 +1,56 @@
+-- CreateTable
+CREATE TABLE "user_invites" (
+ "id" BIGSERIAL NOT NULL,
+ "code" VARCHAR(16) NOT NULL,
+ "sponsor_id" BIGINT NOT NULL,
+ "status" VARCHAR(20) NOT NULL DEFAULT 'ACTIVE',
+ "register_count" INTEGER NOT NULL DEFAULT 0,
+ "created_at" TIMESTAMP(3) NOT NULL DEFAULT CURRENT_TIMESTAMP,
+ "revoked_at" TIMESTAMP(3),
+
+ CONSTRAINT "user_invites_pkey" PRIMARY KEY ("id")
+);
+
+-- CreateIndex
+CREATE UNIQUE INDEX "user_invites_code_key" ON "user_invites"("code");
+CREATE INDEX "user_invites_sponsor_id_idx" ON "user_invites"("sponsor_id");
+CREATE INDEX "user_invites_status_idx" ON "user_invites"("status");
+CREATE INDEX "user_invites_created_at_idx" ON "user_invites"("created_at");
+
+-- AddForeignKey
+ALTER TABLE "user_invites" ADD CONSTRAINT "user_invites_sponsor_id_fkey" FOREIGN KEY ("sponsor_id") REFERENCES "users"("id") ON DELETE RESTRICT ON UPDATE CASCADE;
+
+-- AlterTable
+ALTER TABLE "users" ADD COLUMN "used_invite_id" BIGINT;
+CREATE INDEX "users_used_invite_id_idx" ON "users"("used_invite_id");
+ALTER TABLE "users" ADD CONSTRAINT "users_used_invite_id_fkey" FOREIGN KEY ("used_invite_id") REFERENCES "user_invites"("id") ON DELETE SET NULL ON UPDATE CASCADE;
+
+-- Backfill existing invite codes into history
+INSERT INTO "user_invites" ("code", "sponsor_id", "status", "register_count", "created_at")
+SELECT u."invite_code", u."id", 'ACTIVE', 0, COALESCE(u."updated_at", u."created_at")
+FROM "users" u
+WHERE u."invite_code" IS NOT NULL
+ AND u."user_type" IN ('ADMIN', 'AGENT')
+ON CONFLICT ("code") DO NOTHING;
+
+-- Link players to invite records when possible
+UPDATE "users" p
+SET "used_invite_id" = ui."id"
+FROM "user_invites" ui
+WHERE p."invite_sponsor_id" = ui."sponsor_id"
+ AND p."user_type" = 'PLAYER'
+ AND p."used_invite_id" IS NULL
+ AND ui."status" = 'ACTIVE'
+ AND ui."code" = (
+ SELECT s."invite_code" FROM "users" s WHERE s."id" = p."invite_sponsor_id"
+ );
+
+UPDATE "user_invites" ui
+SET "register_count" = sub.cnt
+FROM (
+ SELECT "used_invite_id" AS id, COUNT(*)::int AS cnt
+ FROM "users"
+ WHERE "used_invite_id" IS NOT NULL
+ GROUP BY "used_invite_id"
+) sub
+WHERE ui."id" = sub.id;
diff --git a/apps/api/prisma/migrations/20260611160000_user_invite_cashback_rate/migration.sql b/apps/api/prisma/migrations/20260611160000_user_invite_cashback_rate/migration.sql
new file mode 100644
index 0000000..9a2f438
--- /dev/null
+++ b/apps/api/prisma/migrations/20260611160000_user_invite_cashback_rate/migration.sql
@@ -0,0 +1,3 @@
+-- Per-invite cashback rate (admin can set when generating)
+ALTER TABLE "user_invites"
+ ADD COLUMN "cashback_rate" DECIMAL(8, 4);
diff --git a/apps/api/prisma/schema.prisma b/apps/api/prisma/schema.prisma
index 8fc559a..3123621 100644
--- a/apps/api/prisma/schema.prisma
+++ b/apps/api/prisma/schema.prisma
@@ -17,9 +17,12 @@ model User {
parentId BigInt? @map("parent_id")
agentLevel Int? @map("agent_level")
locale String @default("en-US") @db.VarChar(10)
- createdAt DateTime @default(now()) @map("created_at")
- updatedAt DateTime @updatedAt @map("updated_at")
- deletedAt DateTime? @map("deleted_at")
+ inviteCode String? @unique @map("invite_code") @db.VarChar(16)
+ inviteSponsorId BigInt? @map("invite_sponsor_id")
+ usedInviteId BigInt? @map("used_invite_id")
+ createdAt DateTime @default(now()) @map("created_at")
+ updatedAt DateTime @updatedAt @map("updated_at")
+ deletedAt DateTime? @map("deleted_at")
auth UserAuth?
wallet Wallet?
@@ -27,15 +30,41 @@ model User {
adminRole AdminUserRole?
bets Bet[]
preferences UserPreference?
+ depositOrders DepositOrder[] @relation("PlayerDepositOrders")
- parent User? @relation("UserHierarchy", fields: [parentId], references: [id])
- children User[] @relation("UserHierarchy")
+ parent User? @relation("UserHierarchy", fields: [parentId], references: [id])
+ children User[] @relation("UserHierarchy")
+ inviteSponsor User? @relation("InviteSponsor", fields: [inviteSponsorId], references: [id])
+ invitedPlayers User[] @relation("InviteSponsor")
+ usedInvite UserInvite? @relation("UsedInvite", fields: [usedInviteId], references: [id])
+ invites UserInvite[] @relation("UserInvites")
@@index([userType])
@@index([parentId])
+ @@index([inviteSponsorId])
+ @@index([usedInviteId])
@@map("users")
}
+model UserInvite {
+ id BigInt @id @default(autoincrement())
+ code String @unique @db.VarChar(16)
+ sponsorId BigInt @map("sponsor_id")
+ status String @default("ACTIVE") @db.VarChar(20)
+ registerCount Int @default(0) @map("register_count")
+ createdAt DateTime @default(now()) @map("created_at")
+ revokedAt DateTime? @map("revoked_at")
+ cashbackRate Decimal? @map("cashback_rate") @db.Decimal(8, 4)
+
+ sponsor User @relation("UserInvites", fields: [sponsorId], references: [id])
+ registrations User[] @relation("UsedInvite")
+
+ @@index([sponsorId])
+ @@index([status])
+ @@index([createdAt])
+ @@map("user_invites")
+}
+
model UserAuth {
id BigInt @id @default(autoincrement())
userId BigInt @unique @map("user_id")
@@ -613,6 +642,56 @@ model UploadedFile {
@@map("uploaded_files")
}
+// ============ Manual Deposit / Recharge ============
+
+model PaymentMethod {
+ id BigInt @id @default(autoincrement())
+ methodType String @map("method_type") @db.VarChar(20)
+ bankName String? @map("bank_name") @db.VarChar(128)
+ accountHolder String? @map("account_holder") @db.VarChar(128)
+ accountNumber String? @map("account_number") @db.VarChar(128)
+ usdtAddress String? @map("usdt_address") @db.VarChar(256)
+ qrCodeUrl String? @map("qr_code_url") @db.VarChar(500)
+ displayName String? @map("display_name") @db.VarChar(128)
+ sortOrder Int @default(0) @map("sort_order")
+ isActive Boolean @default(true) @map("is_active")
+ showOnPlayer Boolean @default(true) @map("show_on_player")
+ createdBy BigInt? @map("created_by")
+ createdAt DateTime @default(now()) @map("created_at")
+ updatedAt DateTime @updatedAt @map("updated_at")
+
+ depositOrders DepositOrder[]
+
+ @@index([methodType, isActive])
+ @@map("payment_methods")
+}
+
+model DepositOrder {
+ id BigInt @id @default(autoincrement())
+ orderNo String @unique @map("order_no") @db.VarChar(64)
+ playerId BigInt @map("player_id")
+ paymentMethodId BigInt @map("payment_method_id")
+ methodType String @map("method_type") @db.VarChar(20)
+ amount Decimal @db.Decimal(18, 4)
+ screenshotUrl String @map("screenshot_url") @db.VarChar(500)
+ status String @default("PENDING") @db.VarChar(20)
+ approvedAmount Decimal? @map("approved_amount") @db.Decimal(18, 4)
+ reviewerId BigInt? @map("reviewer_id")
+ reviewedAt DateTime? @map("reviewed_at")
+ rejectReason String? @map("reject_reason") @db.VarChar(500)
+ remark String? @db.VarChar(500)
+ createdAt DateTime @default(now()) @map("created_at")
+ updatedAt DateTime @updatedAt @map("updated_at")
+
+ player User @relation("PlayerDepositOrders", fields: [playerId], references: [id])
+ paymentMethod PaymentMethod @relation(fields: [paymentMethodId], references: [id])
+
+ @@index([playerId])
+ @@index([status])
+ @@index([createdAt])
+ @@map("deposit_orders")
+}
+
// ============ System Config & Audit ============
model SystemConfig {
diff --git a/apps/api/src/applications/admin/admin-permissions.ts b/apps/api/src/applications/admin/admin-permissions.ts
index 231f6d1..53f84c0 100644
--- a/apps/api/src/applications/admin/admin-permissions.ts
+++ b/apps/api/src/applications/admin/admin-permissions.ts
@@ -17,4 +17,6 @@ export const P = {
content: 'content.manage',
audit: 'audit.view',
resetDatabase: 'settings.reset_database',
+ depositManage: 'deposit.manage',
+ depositReview: 'deposit.review',
} as const;
diff --git a/apps/api/src/applications/admin/admin.controller.ts b/apps/api/src/applications/admin/admin.controller.ts
index 5ce4fcd..27c1d76 100644
--- a/apps/api/src/applications/admin/admin.controller.ts
+++ b/apps/api/src/applications/admin/admin.controller.ts
@@ -41,6 +41,7 @@ import { SystemConfigService } from '../../shared/config/system-config.service';
import { P } from './admin-permissions';
import { DatabaseResetService } from '../../infrastructure/database/database-reset.service';
import { SmokeTestService } from '../../domains/operations/smoke-tests/smoke-test.service';
+import { DepositService } from '../../domains/deposit/deposit.service';
import {
IsString,
IsNumber,
@@ -56,7 +57,7 @@ import {
} from 'class-validator';
import type { ZhiboMatchExport, ZhiboMatchesBundleExport } from '../../domains/catalog/zhibo-match.types';
-const UPLOAD_CATEGORIES = ['banners', 'teams', 'contents'] as const;
+const UPLOAD_CATEGORIES = ['banners', 'teams', 'contents', 'payments', 'deposits'] as const;
type UploadCategory = (typeof UPLOAD_CATEGORIES)[number];
const IMAGE_MIME_EXT: Record = {
@@ -236,6 +237,25 @@ class UpdatePlayerAdminDto {
@IsString()
@MinLength(8)
password?: string;
+
+ /** 玩家专属返水比例（小数）；null 或 0 表示清除单独设置、使用默认 */
+ @IsOptional()
+ @ValidateIf((_, v) => v != null)
+ @IsNumber()
+ @Min(0)
+ cashbackRate?: number | null;
+}
+
+class PlatformDirectCashbackSettingsDto {
+ @IsOptional()
+ @IsNumber()
+ @Min(0)
+ platformDirectRate?: number;
+
+ @IsOptional()
+ @IsNumber()
+ @Min(0)
+ adminInviteRate?: number;
}
class PlayerAccountSettingsDto {
@@ -912,6 +932,7 @@ export class AdminController {
private bettingLimits: BettingLimitsService,
private databaseReset: DatabaseResetService,
private smokeTests: SmokeTestService,
+ private depositService: DepositService,
) {}
@Get('dashboard')
@@ -1080,7 +1101,15 @@ export class AdminController {
@Param('id') id: string,
@Body() dto: UpdatePlayerAdminDto,
) {
- const detail = await this.users.updatePlayerAdmin(BigInt(id), dto);
+ const detail = await this.users.updatePlayerAdmin(BigInt(id), {
+ status: dto.status,
+ locale: dto.locale,
+ phone: dto.phone,
+ email: dto.email,
+ username: dto.username,
+ password: dto.password,
+ cashbackRate: dto.cashbackRate,
+ });
await this.audit.log({
operatorId,
operatorType: 'ADMIN',
@@ -2003,6 +2032,20 @@ export class AdminController {
return jsonResponse(detail);
}
+ @Get('settings/cashback/platform-direct')
+ @RequirePermissions(P.cashback, P.reports)
+ async getPlatformDirectCashbackSettings() {
+ const settings = await this.systemConfig.getPlatformDirectCashbackSettings();
+ return jsonResponse(settings);
+ }
+
+ @Put('settings/cashback/platform-direct')
+ @RequirePermissions(P.cashback)
+ async updatePlatformDirectCashbackSettings(@Body() dto: PlatformDirectCashbackSettingsDto) {
+ const settings = await this.systemConfig.updatePlatformDirectCashbackSettings(dto);
+ return jsonResponse(settings);
+ }
+
@Post('cashbacks/preview')
@RequirePermissions(P.cashback, P.reports)
async cashbackPreview(@Body() dto: CashbackPreviewDto) {
@@ -2307,4 +2350,134 @@ export class AdminController {
);
return jsonResponse(result);
}
+
+ // ============ Payment Methods ============
+
+ @Post('payment-methods')
+ @RequirePermissions(P.depositManage)
+ async createPaymentMethod(
+ @CurrentUser('id') operatorId: bigint,
+ @Body() body: {
+ methodType: string;
+ bankName?: string;
+ accountHolder?: string;
+ accountNumber?: string;
+ usdtAddress?: string;
+ qrCodeUrl?: string;
+ displayName?: string;
+ sortOrder?: number;
+ isActive?: boolean;
+ showOnPlayer?: boolean;
+ translations?: {
+ displayName?: Record;
+ bankName?: Record;
+ };
+ },
+ ) {
+ if (!body.methodType || !['BANK', 'USDT'].includes(body.methodType)) {
+ throw appBadRequest('INVALID_METHOD_TYPE');
+ }
+ const method = await this.depositService.createPaymentMethod({
+ ...body,
+ createdBy: operatorId,
+ });
+ return jsonResponse(method);
+ }
+
+ @Get('payment-methods')
+ @RequirePermissions(P.depositManage)
+ async listPaymentMethods(@Query('methodType') methodType?: string) {
+ const items = await this.depositService.listPaymentMethods({
+ methodType: methodType || undefined,
+ });
+ return jsonResponse(items);
+ }
+
+ @Put('payment-methods/:id')
+ @RequirePermissions(P.depositManage)
+ async updatePaymentMethod(
+ @Param('id') id: string,
+ @Body() body: {
+ bankName?: string;
+ accountHolder?: string;
+ accountNumber?: string;
+ usdtAddress?: string;
+ qrCodeUrl?: string;
+ displayName?: string;
+ sortOrder?: number;
+ isActive?: boolean;
+ showOnPlayer?: boolean;
+ translations?: {
+ displayName?: Record;
+ bankName?: Record;
+ };
+ },
+ ) {
+ const method = await this.depositService.updatePaymentMethod(BigInt(id), body);
+ return jsonResponse(method);
+ }
+
+ @Delete('payment-methods/:id')
+ @RequirePermissions(P.depositManage)
+ async deletePaymentMethod(@Param('id') id: string) {
+ await this.depositService.deletePaymentMethod(BigInt(id));
+ return jsonResponse({ success: true });
+ }
+
+ // ============ Deposit Orders (Admin Review) ============
+
+ @Get('deposit-orders')
+ @RequirePermissions(P.depositReview)
+ async listDepositOrders(
+ @Query('page') page?: string,
+ @Query('pageSize') pageSize?: string,
+ @Query('status') status?: string,
+ @Query('keyword') keyword?: string,
+ @Query('methodType') methodType?: string,
+ @Query('dateFrom') dateFrom?: string,
+ @Query('dateTo') dateTo?: string,
+ ) {
+ const result = await this.depositService.listDepositOrders({
+ page: page ? parseInt(page, 10) : undefined,
+ pageSize: pageSize ? parseInt(pageSize, 10) : undefined,
+ status: status || undefined,
+ keyword: keyword || undefined,
+ methodType: methodType || undefined,
+ dateFrom: dateFrom ? new Date(dateFrom) : undefined,
+ dateTo: dateTo ? new Date(dateTo) : undefined,
+ });
+ return jsonResponse(result);
+ }
+
+ @Post('deposit-orders/:id/approve')
+ @RequirePermissions(P.depositReview)
+ async approveDepositOrder(
+ @CurrentUser('id') operatorId: bigint,
+ @Param('id') id: string,
+ @Body() body: { approvedAmount?: number; remark?: string },
+ ) {
+ const result = await this.depositService.approveDepositOrder(
+ BigInt(id),
+ operatorId,
+ body.approvedAmount,
+ body.remark,
+ );
+ return jsonResponse(result);
+ }
+
+ @Post('deposit-orders/:id/reject')
+ @RequirePermissions(P.depositReview)
+ async rejectDepositOrder(
+ @CurrentUser('id') operatorId: bigint,
+ @Param('id') id: string,
+ @Body() body: { reason: string },
+ ) {
+ if (!body.reason?.trim()) throw appBadRequest('REASON_REQUIRED');
+ const result = await this.depositService.rejectDepositOrder(
+ BigInt(id),
+ operatorId,
+ body.reason.trim(),
+ );
+ return jsonResponse(result);
+ }
}
diff --git a/apps/api/src/applications/admin/admin.module.ts b/apps/api/src/applications/admin/admin.module.ts
index 67d7064..fb56c93 100644
--- a/apps/api/src/applications/admin/admin.module.ts
+++ b/apps/api/src/applications/admin/admin.module.ts
@@ -14,6 +14,7 @@ import { I18nModule } from '../../domains/operations/i18n/i18n.module';
import { BetsModule } from '../../domains/betting/bets.module';
import { DatabaseModule } from '../../infrastructure/database/database.module';
import { SmokeTestModule } from '../../domains/operations/smoke-tests/smoke-test.module';
+import { DepositModule } from '../../domains/deposit/deposit.module';
@Module({
imports: [
@@ -29,6 +30,7 @@ import { SmokeTestModule } from '../../domains/operations/smoke-tests/smoke-test
BetsModule,
DatabaseModule,
SmokeTestModule,
+ DepositModule,
],
controllers: [AdminController],
providers: [AdminDashboardService, PermissionsGuard],
diff --git a/apps/api/src/applications/player/player.controller.ts b/apps/api/src/applications/player/player.controller.ts
index 1364d6d..7c69583 100644
--- a/apps/api/src/applications/player/player.controller.ts
+++ b/apps/api/src/applications/player/player.controller.ts
@@ -8,11 +8,19 @@ import {
Query,
Headers,
UseGuards,
+ UseInterceptors,
+ UploadedFile,
} from '@nestjs/common';
+import { FileInterceptor } from '@nestjs/platform-express';
import { ApiTags, ApiBearerAuth } from '@nestjs/swagger';
+import { randomUUID } from 'crypto';
+import { mkdir, writeFile } from 'fs/promises';
+import { extname, join } from 'path';
import { JwtAuthGuard, PlayerGuard } from '../../domains/identity/guards';
import { CurrentUser, Public } from '../../shared/common/decorators';
import { jsonResponse } from '../../shared/common/filters';
+import { appBadRequest } from '../../shared/common/app-error';
+import { getUploadRoot } from '../../shared/uploads/upload-paths';
import { UsersService } from '../../domains/identity/users.service';
import { SystemConfigService } from '../../shared/config/system-config.service';
import { WalletService } from '../../domains/ledger/wallet.service';
@@ -21,6 +29,7 @@ import { OutrightService } from '../../domains/catalog/outright.service';
import { BetsService } from '../../domains/betting/bets.service';
import { ContentService } from '../../domains/operations/content/content.service';
import { CashbackService } from '../../domains/operations/cashback/cashback.service';
+import { DepositService } from '../../domains/deposit/deposit.service';
import { IsString, IsNumber, IsArray, ValidateNested, Min, IsOptional } from 'class-validator';
import { Type } from 'class-transformer';
@@ -98,6 +107,7 @@ export class PlayerController {
private content: ContentService,
private cashback: CashbackService,
private systemConfig: SystemConfigService,
+ private deposit: DepositService,
) {}
private async formatPlayerProfile(user: NonNullable>>) {
@@ -290,4 +300,68 @@ export class PlayerController {
const items = await this.cashback.getUserCashbacks(userId);
return jsonResponse(items);
}
+
+ // ============ Deposit / Recharge ============
+
+ @Get('payment-methods')
+ async paymentMethods(
+ @Query('methodType') methodType?: string,
+ @CurrentUser('locale') userLocale?: string,
+ @Headers('x-locale') headerLocale?: string,
+ ) {
+ const locale = userLocale || headerLocale || 'zh-CN';
+ const items = await this.deposit.listPlayerPaymentMethods(methodType || undefined, locale);
+ return jsonResponse(items);
+ }
+
+ @Post('deposit-orders')
+ @UseInterceptors(FileInterceptor('screenshot', { limits: { fileSize: 5 * 1024 * 1024 } }))
+ async createDepositOrder(
+ @CurrentUser('id') userId: bigint,
+ @UploadedFile() file: { originalname: string; mimetype: string; buffer: Buffer; size: number } | undefined,
+ @Body() body: { paymentMethodId: string; amount: string },
+ ) {
+ if (!file) throw appBadRequest('SCREENSHOT_REQUIRED');
+ if (!file.mimetype.startsWith('image/')) throw appBadRequest('FILE_MUST_BE_IMAGE');
+
+ const amount = parseFloat(body.amount);
+ if (!amount || amount <= 0) throw appBadRequest('INVALID_AMOUNT');
+ if (!body.paymentMethodId) throw appBadRequest('PAYMENT_METHOD_REQUIRED');
+
+ // Save screenshot
+ const ext = extname(file.originalname || '.jpg').toLowerCase() || '.jpg';
+ const filename = `${Date.now()}-${randomUUID().slice(0, 8)}${ext}`;
+ const root = getUploadRoot();
+ const targetDir = join(root, 'deposits');
+ await mkdir(targetDir, { recursive: true });
+ await writeFile(join(targetDir, filename), file.buffer);
+ const screenshotUrl = `/uploads/deposits/${filename}`;
+
+ const order = await this.deposit.createDepositOrder(
+ userId,
+ BigInt(body.paymentMethodId),
+ amount,
+ screenshotUrl,
+ );
+
+ return jsonResponse({
+ id: order.id.toString(),
+ orderNo: order.orderNo,
+ amount: order.amount.toString(),
+ status: order.status,
+ createdAt: order.createdAt,
+ });
+ }
+
+ @Get('deposit-orders')
+ async myDepositOrders(
+ @CurrentUser('id') userId: bigint,
+ @Query('page') page?: string,
+ ) {
+ const result = await this.deposit.getPlayerDepositOrders(
+ userId,
+ page ? parseInt(page, 10) : 1,
+ );
+ return jsonResponse(result);
+ }
}
diff --git a/apps/api/src/applications/player/player.module.ts b/apps/api/src/applications/player/player.module.ts
index 0112cc8..e3155d7 100644
--- a/apps/api/src/applications/player/player.module.ts
+++ b/apps/api/src/applications/player/player.module.ts
@@ -6,9 +6,10 @@ import { MatchesModule } from '../../domains/catalog/matches.module';
import { BetsModule } from '../../domains/betting/bets.module';
import { ContentModule } from '../../domains/operations/content/content.module';
import { CashbackModule } from '../../domains/operations/cashback/cashback.module';
+import { DepositModule } from '../../domains/deposit/deposit.module';
@Module({
- imports: [UsersModule, WalletModule, MatchesModule, BetsModule, ContentModule, CashbackModule],
+ imports: [UsersModule, WalletModule, MatchesModule, BetsModule, ContentModule, CashbackModule, DepositModule],
controllers: [PlayerController],
})
export class PlayerModule {}
diff --git a/apps/api/src/domains/agent/agents.service.ts b/apps/api/src/domains/agent/agents.service.ts
index 843cb70..390f2cd 100644
--- a/apps/api/src/domains/agent/agents.service.ts
+++ b/apps/api/src/domains/agent/agents.service.ts
@@ -9,6 +9,7 @@ import { Decimal } from '@prisma/client/runtime/library';
import { generateBatchNo } from '../../shared/common/decorators';
import { assertPlayerUsername } from '@thebet365/shared';
import { appBadRequest, appForbidden, appNotFound } from '../../shared/common/app-error';
+import { assignInviteCodeWithHistory } from '../../shared/common/invite-code.util';
function dec(v: Decimal | null | undefined) {
return v?.toString() ?? '0';
@@ -774,6 +775,7 @@ export class AgentsService {
phone: p.user.preferences?.phone ?? null,
email: p.user.preferences?.email ?? null,
locale: p.user.locale,
+ inviteCode: p.user.inviteCode ?? null,
createdAt: p.createdAt,
updatedAt: p.updatedAt,
};
@@ -849,6 +851,7 @@ export class AgentsService {
email: profile.user.preferences?.email ?? null,
managedPassword: profile.user.preferences?.managedPassword ?? null,
locale: profile.user.locale,
+ inviteCode: profile.user.inviteCode ?? null,
lastLoginAt: profile.user.auth?.lastLoginAt ?? null,
loginFailCount: profile.user.auth?.loginFailCount ?? 0,
createdAt: profile.createdAt,
@@ -1232,6 +1235,7 @@ export class AgentsService {
parentId: null,
},
});
+ await assignInviteCodeWithHistory(tx, userId);
if (user.preferences) {
await tx.userPreference.update({
@@ -1295,10 +1299,17 @@ export class AgentsService {
) {
await this.validateAgentLevel(data.level, data.parentAgentId);
+ let resolvedCashbackRate = data.cashbackRate ?? 0;
if (data.parentAgentId) {
+ const parentProfile = await this.prisma.agentProfile.findUnique({
+ where: { userId: data.parentAgentId },
+ select: { cashbackRate: true },
+ });
+ resolvedCashbackRate =
+ data.cashbackRate ?? (parentProfile ? Number(parentProfile.cashbackRate) : 0);
await this.assertChildAgentWithinParent(data.parentAgentId, {
creditLimit: data.creditLimit ?? 0,
- cashbackRate: data.cashbackRate ?? 0,
+ cashbackRate: resolvedCashbackRate,
maxSingleDeposit: data.maxSingleDeposit,
maxDailyDeposit: data.maxDailyDeposit,
});
@@ -1320,6 +1331,7 @@ export class AgentsService {
locale,
},
});
+ await assignInviteCodeWithHistory(tx, user.id);
await tx.userAuth.create({
data: { userId: user.id, passwordHash: hash },
@@ -1340,7 +1352,7 @@ export class AgentsService {
level: data.level,
parentAgentId: data.parentAgentId,
creditLimit: data.creditLimit ?? 0,
- cashbackRate: data.cashbackRate ?? 0,
+ cashbackRate: resolvedCashbackRate,
maxSingleDeposit,
maxDailyDeposit,
},
@@ -1522,11 +1534,27 @@ export class AgentsService {
}
async getDirectPlayers(agentId: bigint) {
- return this.prisma.user.findMany({
- where: { parentId: agentId, userType: 'PLAYER' },
- include: { wallet: true },
+ const rows = await this.prisma.user.findMany({
+ where: { parentId: agentId, userType: 'PLAYER', deletedAt: null },
+ include: {
+ wallet: true,
+ usedInvite: { select: { code: true } },
+ },
orderBy: { createdAt: 'desc' },
});
+ return rows.map((u) => ({
+ id: u.id.toString(),
+ username: u.username,
+ status: u.status,
+ createdAt: u.createdAt,
+ inviteCode: u.usedInvite?.code ?? null,
+ wallet: u.wallet
+ ? {
+ availableBalance: u.wallet.availableBalance.toString(),
+ frozenBalance: u.wallet.frozenBalance.toString(),
+ }
+ : undefined,
+ }));
}
async getChildAgents(agentId: bigint) {
diff --git a/apps/api/src/domains/deposit/deposit.module.ts b/apps/api/src/domains/deposit/deposit.module.ts
new file mode 100644
index 0000000..5825612
--- /dev/null
+++ b/apps/api/src/domains/deposit/deposit.module.ts
@@ -0,0 +1,10 @@
+import { Module } from '@nestjs/common';
+import { DepositService } from './deposit.service';
+import { WalletModule } from '../ledger/wallet.module';
+
+@Module({
+ imports: [WalletModule],
+ providers: [DepositService],
+ exports: [DepositService],
+})
+export class DepositModule {}
diff --git a/apps/api/src/domains/deposit/deposit.service.ts b/apps/api/src/domains/deposit/deposit.service.ts
new file mode 100644
index 0000000..4f6d019
--- /dev/null
+++ b/apps/api/src/domains/deposit/deposit.service.ts
@@ -0,0 +1,440 @@
+import { Injectable } from '@nestjs/common';
+import { Prisma } from '@prisma/client';
+import { Decimal } from '@prisma/client/runtime/library';
+import { resolveTranslationFallback } from '@thebet365/shared';
+import { PrismaService } from '../../shared/prisma/prisma.service';
+import { WalletService } from '../ledger/wallet.service';
+import { appBadRequest } from '../../shared/common/app-error';
+
+function generateOrderNo(): string {
+ const ts = Date.now().toString(36).toUpperCase();
+ const rand = Math.random().toString(36).substring(2, 8).toUpperCase();
+ return `DEP${ts}${rand}`;
+}
+
+@Injectable()
+export class DepositService {
+ constructor(
+ private prisma: PrismaService,
+ private wallet: WalletService,
+ ) {}
+
+ // ============ Payment Methods (Admin CRUD) ============
+
+ async createPaymentMethod(data: {
+ methodType: string;
+ bankName?: string;
+ accountHolder?: string;
+ accountNumber?: string;
+ usdtAddress?: string;
+ qrCodeUrl?: string;
+ displayName?: string;
+ sortOrder?: number;
+ isActive?: boolean;
+ showOnPlayer?: boolean;
+ createdBy?: bigint;
+ translations?: {
+ displayName?: Record;
+ bankName?: Record;
+ };
+ }) {
+ const method = await this.prisma.paymentMethod.create({
+ data: {
+ methodType: data.methodType,
+ bankName: data.bankName,
+ accountHolder: data.accountHolder,
+ accountNumber: data.accountNumber,
+ usdtAddress: data.usdtAddress,
+ qrCodeUrl: data.qrCodeUrl,
+ displayName: data.displayName,
+ sortOrder: data.sortOrder ?? 0,
+ isActive: data.isActive ?? true,
+ showOnPlayer: data.showOnPlayer ?? true,
+ createdBy: data.createdBy,
+ },
+ });
+ if (data.translations) {
+ await this.upsertPaymentMethodTranslations(method.id, data.translations);
+ }
+ return method;
+ }
+
+ async updatePaymentMethod(
+ id: bigint,
+ data: {
+ bankName?: string;
+ accountHolder?: string;
+ accountNumber?: string;
+ usdtAddress?: string;
+ qrCodeUrl?: string;
+ displayName?: string;
+ sortOrder?: number;
+ isActive?: boolean;
+ showOnPlayer?: boolean;
+ translations?: {
+ displayName?: Record;
+ bankName?: Record;
+ };
+ },
+ ) {
+ const { translations, ...rest } = data;
+ const method = await this.prisma.paymentMethod.update({
+ where: { id },
+ data: rest,
+ });
+ if (translations) {
+ await this.upsertPaymentMethodTranslations(id, translations);
+ }
+ return method;
+ }
+
+ async deletePaymentMethod(id: bigint) {
+ return this.prisma.paymentMethod.update({
+ where: { id },
+ data: { isActive: false, showOnPlayer: false },
+ });
+ }
+
+ async listPaymentMethods(filters?: { methodType?: string }) {
+ const where: Prisma.PaymentMethodWhereInput = {};
+ if (filters?.methodType) {
+ where.methodType = filters.methodType;
+ }
+ const items = await this.prisma.paymentMethod.findMany({
+ where,
+ orderBy: [{ sortOrder: 'asc' }, { createdAt: 'desc' }],
+ });
+ // Attach translations for admin editing
+ const ids = items.map((m) => m.id);
+ const translations = ids.length
+ ? await this.prisma.entityTranslation.findMany({
+ where: { entityType: 'PAYMENT_METHOD', entityId: { in: ids } },
+ })
+ : [];
+ const tMap = new Map>>();
+ for (const t of translations) {
+ const key = t.entityId.toString();
+ if (!tMap.has(key)) tMap.set(key, {});
+ const entityMap = tMap.get(key)!;
+ if (!entityMap[t.fieldName]) entityMap[t.fieldName] = {};
+ entityMap[t.fieldName][t.locale] = t.value;
+ }
+ return items.map((m) => ({
+ ...m,
+ translations: tMap.get(m.id.toString()) ?? {},
+ }));
+ }
+
+ async listPlayerPaymentMethods(methodType?: string, locale?: string) {
+ const where: Prisma.PaymentMethodWhereInput = {
+ isActive: true,
+ showOnPlayer: true,
+ };
+ if (methodType) {
+ where.methodType = methodType;
+ }
+ const items = await this.prisma.paymentMethod.findMany({
+ where,
+ orderBy: [{ sortOrder: 'asc' }, { createdAt: 'desc' }],
+ select: {
+ id: true,
+ methodType: true,
+ bankName: true,
+ accountHolder: true,
+ accountNumber: true,
+ usdtAddress: true,
+ qrCodeUrl: true,
+ displayName: true,
+ sortOrder: true,
+ },
+ });
+ // Resolve translations for player locale
+ if (locale && items.length) {
+ const ids = items.map((m) => m.id);
+ const translations = await this.prisma.entityTranslation.findMany({
+ where: { entityType: 'PAYMENT_METHOD', entityId: { in: ids } },
+ });
+ const tMap = new Map>>();
+ for (const t of translations) {
+ const key = t.entityId.toString();
+ if (!tMap.has(key)) tMap.set(key, {});
+ const entityMap = tMap.get(key)!;
+ if (!entityMap[t.fieldName]) entityMap[t.fieldName] = {};
+ entityMap[t.fieldName][t.locale] = t.value;
+ }
+ return items.map((m) => {
+ const t = tMap.get(m.id.toString());
+ const resolvedDisplayName = t?.displayName
+ ? resolveTranslationFallback(t.displayName, locale) || m.displayName
+ : m.displayName;
+ const resolvedBankName = t?.bankName
+ ? resolveTranslationFallback(t.bankName, locale) || m.bankName
+ : m.bankName;
+ return { ...m, displayName: resolvedDisplayName, bankName: resolvedBankName };
+ });
+ }
+ return items;
+ }
+
+ // ============ Translation helpers ============
+
+ private async upsertPaymentMethodTranslations(
+ entityId: bigint,
+ translations: {
+ displayName?: Record;
+ bankName?: Record;
+ },
+ ) {
+ for (const fieldName of ['displayName', 'bankName'] as const) {
+ const fieldTranslations = translations[fieldName];
+ if (!fieldTranslations) continue;
+ for (const [locale, value] of Object.entries(fieldTranslations)) {
+ await this.prisma.entityTranslation.upsert({
+ where: {
+ entityType_entityId_locale_fieldName: {
+ entityType: 'PAYMENT_METHOD',
+ entityId,
+ locale,
+ fieldName,
+ },
+ },
+ create: { entityType: 'PAYMENT_METHOD', entityId, locale, fieldName, value },
+ update: { value },
+ });
+ }
+ }
+ }
+
+ // ============ Deposit Orders ============
+
+ async createDepositOrder(
+ playerId: bigint,
+ paymentMethodId: bigint,
+ amount: number,
+ screenshotUrl: string,
+ ) {
+ const method = await this.prisma.paymentMethod.findUnique({
+ where: { id: paymentMethodId },
+ });
+ if (!method || !method.isActive) {
+ throw appBadRequest('PAYMENT_METHOD_NOT_FOUND');
+ }
+
+ const order = await this.prisma.depositOrder.create({
+ data: {
+ orderNo: generateOrderNo(),
+ playerId,
+ paymentMethodId,
+ methodType: method.methodType,
+ amount: new Decimal(amount),
+ screenshotUrl,
+ status: 'PENDING',
+ },
+ });
+
+ return order;
+ }
+
+ async getPlayerDepositOrders(playerId: bigint, page = 1, pageSize = 20) {
+ const skip = (page - 1) * pageSize;
+ const where = { playerId };
+
+ const [items, total] = await Promise.all([
+ this.prisma.depositOrder.findMany({
+ where,
+ orderBy: { createdAt: 'desc' },
+ skip,
+ take: pageSize,
+ include: {
+ paymentMethod: {
+ select: { bankName: true, usdtAddress: true, displayName: true, methodType: true },
+ },
+ },
+ }),
+ this.prisma.depositOrder.count({ where }),
+ ]);
+
+ return {
+ items: items.map((o) => ({
+ id: o.id.toString(),
+ orderNo: o.orderNo,
+ methodType: o.methodType,
+ amount: o.amount.toString(),
+ screenshotUrl: o.screenshotUrl,
+ status: o.status,
+ approvedAmount: o.approvedAmount?.toString() ?? null,
+ rejectReason: o.rejectReason,
+ remark: o.remark,
+ createdAt: o.createdAt,
+ reviewedAt: o.reviewedAt,
+ paymentMethodName: o.paymentMethod?.displayName ?? o.paymentMethod?.bankName ?? o.paymentMethod?.usdtAddress ?? null,
+ })),
+ total,
+ page,
+ pageSize,
+ };
+ }
+
+ async listDepositOrders(params: {
+ page?: number;
+ pageSize?: number;
+ status?: string;
+ keyword?: string;
+ methodType?: string;
+ dateFrom?: Date;
+ dateTo?: Date;
+ }) {
+ const page = Math.max(1, params.page ?? 1);
+ const pageSize = Math.min(100, Math.max(1, params.pageSize ?? 20));
+ const skip = (page - 1) * pageSize;
+
+ const where: Prisma.DepositOrderWhereInput = {};
+
+ if (params.status) {
+ where.status = params.status;
+ }
+
+ if (params.methodType) {
+ where.methodType = params.methodType;
+ }
+
+ if (params.dateFrom || params.dateTo) {
+ where.createdAt = {};
+ if (params.dateFrom) where.createdAt.gte = params.dateFrom;
+ if (params.dateTo) where.createdAt.lte = params.dateTo;
+ }
+
+ if (params.keyword?.trim()) {
+ const players = await this.prisma.user.findMany({
+ where: {
+ userType: 'PLAYER',
+ deletedAt: null,
+ username: { contains: params.keyword.trim(), mode: 'insensitive' },
+ },
+ select: { id: true },
+ take: 100,
+ });
+ if (!players.length) {
+ return { items: [], total: 0, page, pageSize };
+ }
+ where.playerId = { in: players.map((p) => p.id) };
+ }
+
+ const [rows, total] = await Promise.all([
+ this.prisma.depositOrder.findMany({
+ where,
+ orderBy: { createdAt: 'desc' },
+ skip,
+ take: pageSize,
+ include: {
+ paymentMethod: {
+ select: { bankName: true, usdtAddress: true, displayName: true, methodType: true },
+ },
+ },
+ }),
+ this.prisma.depositOrder.count({ where }),
+ ]);
+
+ // Enrich with player usernames and reviewer info
+ const playerIds = [...new Set(rows.map((r) => r.playerId))];
+ const reviewerIds = [...new Set(rows.map((r) => r.reviewerId).filter((id): id is bigint => id != null))];
+
+ const [players, reviewers] = await Promise.all([
+ playerIds.length
+ ? this.prisma.user.findMany({
+ where: { id: { in: playerIds } },
+ select: { id: true, username: true },
+ })
+ : [],
+ reviewerIds.length
+ ? this.prisma.user.findMany({
+ where: { id: { in: reviewerIds } },
+ select: { id: true, username: true },
+ })
+ : [],
+ ]);
+
+ const playerMap = new Map(players.map((p) => [p.id.toString(), p.username]));
+ const reviewerMap = new Map(reviewers.map((r) => [r.id.toString(), r.username]));
+
+ return {
+ items: rows.map((o) => ({
+ id: o.id.toString(),
+ orderNo: o.orderNo,
+ playerId: o.playerId.toString(),
+ playerUsername: playerMap.get(o.playerId.toString()) ?? null,
+ methodType: o.methodType,
+ amount: o.amount.toString(),
+ screenshotUrl: o.screenshotUrl,
+ status: o.status,
+ approvedAmount: o.approvedAmount?.toString() ?? null,
+ reviewerId: o.reviewerId?.toString() ?? null,
+ reviewerUsername: o.reviewerId ? (reviewerMap.get(o.reviewerId.toString()) ?? null) : null,
+ rejectReason: o.rejectReason,
+ remark: o.remark,
+ createdAt: o.createdAt,
+ reviewedAt: o.reviewedAt,
+ paymentMethodName: o.paymentMethod?.displayName ?? o.paymentMethod?.bankName ?? o.paymentMethod?.usdtAddress ?? null,
+ })),
+ total,
+ page,
+ pageSize,
+ };
+ }
+
+ async approveDepositOrder(
+ orderId: bigint,
+ operatorId: bigint,
+ approvedAmount?: number,
+ remark?: string,
+ ) {
+ return this.prisma.$transaction(async (tx) => {
+ const order = await tx.depositOrder.findUnique({ where: { id: orderId } });
+ if (!order) throw appBadRequest('ORDER_NOT_FOUND');
+ if (order.status !== 'PENDING') throw appBadRequest('ORDER_NOT_PENDING');
+
+ const creditAmount = approvedAmount != null ? new Decimal(approvedAmount) : order.amount;
+
+ await tx.depositOrder.update({
+ where: { id: orderId },
+ data: {
+ status: 'APPROVED',
+ approvedAmount: creditAmount,
+ reviewerId: operatorId,
+ reviewedAt: new Date(),
+ remark: remark ?? null,
+ },
+ });
+
+ // Credit player wallet
+ await this.wallet.deposit(
+ order.playerId,
+ creditAmount,
+ operatorId,
+ remark ?? `Deposit order ${order.orderNo}`,
+ order.orderNo,
+ 'PLAYER_DEPOSIT',
+ );
+
+ return { success: true };
+ });
+ }
+
+ async rejectDepositOrder(orderId: bigint, operatorId: bigint, reason: string) {
+ const order = await this.prisma.depositOrder.findUnique({ where: { id: orderId } });
+ if (!order) throw appBadRequest('ORDER_NOT_FOUND');
+ if (order.status !== 'PENDING') throw appBadRequest('ORDER_NOT_PENDING');
+
+ await this.prisma.depositOrder.update({
+ where: { id: orderId },
+ data: {
+ status: 'REJECTED',
+ reviewerId: operatorId,
+ reviewedAt: new Date(),
+ rejectReason: reason,
+ },
+ });
+
+ return { success: true };
+ }
+}
diff --git a/apps/api/src/domains/identity/auth.controller.ts b/apps/api/src/domains/identity/auth.controller.ts
index 76694fb..907fbc0 100644
--- a/apps/api/src/domains/identity/auth.controller.ts
+++ b/apps/api/src/domains/identity/auth.controller.ts
@@ -1,8 +1,9 @@
-import { Controller, Get, Post, Body, UseGuards } from '@nestjs/common';
+import { Controller, Get, Post, Delete, Body, UseGuards, Query, Param } from '@nestjs/common';
import { ApiTags, ApiBearerAuth } from '@nestjs/swagger';
import { AuthService } from './auth.service';
+import { InvitesService } from './invites.service';
import { SystemConfigService } from '../../shared/config/system-config.service';
-import { LoginDto, ChangePasswordDto } from './auth.dto';
+import { LoginDto, ChangePasswordDto, RegisterDto, GenerateInviteDto } from './auth.dto';
import { Public, CurrentUser } from '../../shared/common/decorators';
import { JwtAuthGuard } from './guards';
import { jsonResponse } from '../../shared/common/filters';
@@ -12,6 +13,7 @@ import { jsonResponse } from '../../shared/common/filters';
export class AuthController {
constructor(
private auth: AuthService,
+ private invites: InvitesService,
private systemConfig: SystemConfigService,
) {}
@@ -22,6 +24,98 @@ export class AuthController {
return jsonResponse(result);
}
+ @Public()
+ @Post('player/auth/register')
+ async playerRegister(@Body() dto: RegisterDto) {
+ const result = await this.auth.registerPlayer({
+ username: dto.username,
+ password: dto.password,
+ inviteCode: dto.inviteCode,
+ locale: dto.locale,
+ });
+ return jsonResponse(result);
+ }
+
+ @UseGuards(JwtAuthGuard)
+ @ApiBearerAuth()
+ @Get('manage/invite')
+ async manageInvite(@CurrentUser('id') userId: bigint) {
+ const info = await this.auth.getInviteInfo(userId);
+ return jsonResponse(info);
+ }
+
+ @UseGuards(JwtAuthGuard)
+ @ApiBearerAuth()
+ @Post('manage/invite/generate')
+ async manageInviteGenerate(
+ @CurrentUser('id') userId: bigint,
+ @CurrentUser('userType') userType: string,
+ @Body() dto: GenerateInviteDto,
+ ) {
+ const info = await this.auth.generateInviteCode(userId, userType, dto.cashbackRate);
+ return jsonResponse(info);
+ }
+
+ @UseGuards(JwtAuthGuard)
+ @ApiBearerAuth()
+ @Get('manage/invites')
+ async manageInvites(
+ @CurrentUser('id') userId: bigint,
+ @CurrentUser('userType') userType: string,
+ @Query('page') page?: string,
+ @Query('pageSize') pageSize?: string,
+ @Query('status') status?: string,
+ @Query('sponsorId') sponsorId?: string,
+ @Query('keyword') keyword?: string,
+ ) {
+ const result = await this.invites.listInvites(
+ { id: userId, userType },
+ {
+ page: page ? parseInt(page, 10) : 1,
+ pageSize: pageSize ? parseInt(pageSize, 10) : 20,
+ status,
+ sponsorId,
+ keyword,
+ },
+ );
+ return jsonResponse(result);
+ }
+
+ @UseGuards(JwtAuthGuard)
+ @ApiBearerAuth()
+ @Get('manage/invites/sponsors')
+ async manageInviteSponsors(
+ @CurrentUser('id') userId: bigint,
+ @CurrentUser('userType') userType: string,
+ ) {
+ const items = await this.invites.listSponsorOptions({ id: userId, userType });
+ return jsonResponse({ items });
+ }
+
+ @UseGuards(JwtAuthGuard)
+ @ApiBearerAuth()
+ @Post('manage/invites/:id/revoke')
+ async manageInviteRevoke(
+ @CurrentUser('id') userId: bigint,
+ @CurrentUser('userType') userType: string,
+ @Param('id') id: string,
+ ) {
+ const item = await this.invites.revokeInvite({ id: userId, userType }, BigInt(id));
+ return jsonResponse(item);
+ }
+
+ @UseGuards(JwtAuthGuard)
+ @ApiBearerAuth()
+ @Delete('manage/invites/:id')
+ async manageInviteDelete(
+ @CurrentUser('id') userId: bigint,
+ @CurrentUser('userType') userType: string,
+ @Param('id') id: string,
+ ) {
+ const result = await this.invites.deleteInvite({ id: userId, userType }, BigInt(id));
+ return jsonResponse(result);
+ }
+
@Public()
@Post('admin/auth/login')
async adminLogin(@Body() dto: LoginDto) {
@@ -64,6 +158,11 @@ export class AuthController {
maxAgentLevel === 0 || level < maxAgentLevel;
}
+ let inviteCode: string | null = null;
+ if (userType === 'ADMIN' || userType === 'AGENT') {
+ inviteCode = (await this.auth.getInviteInfo(userId)).inviteCode;
+ }
+
return jsonResponse({
id: userId.toString(),
username,
@@ -73,6 +172,7 @@ export class AuthController {
agentLevel: level,
maxAgentLevel,
canManageSubAgents,
+ inviteCode,
});
}
diff --git a/apps/api/src/domains/identity/auth.dto.ts b/apps/api/src/domains/identity/auth.dto.ts
index 5aeda4a..c035c37 100644
--- a/apps/api/src/domains/identity/auth.dto.ts
+++ b/apps/api/src/domains/identity/auth.dto.ts
@@ -1,4 +1,4 @@
-import { IsString, MinLength } from 'class-validator';
+import { IsString, MinLength, IsOptional, IsNumber } from 'class-validator';
import { ApiProperty } from '@nestjs/swagger';
export class LoginDto {
@@ -12,6 +12,27 @@ export class LoginDto {
password!: string;
}
+export class RegisterDto {
+ @ApiProperty()
+ @IsString()
+ username!: string;
+
+ @ApiProperty()
+ @IsString()
+ @MinLength(8)
+ password!: string;
+
+ @ApiProperty({ required: false })
+ @IsOptional()
+ @IsString()
+ inviteCode?: string;
+
+ @ApiProperty({ required: false })
+ @IsOptional()
+ @IsString()
+ locale?: string;
+}
+
export class ChangePasswordDto {
@ApiProperty()
@IsString()
@@ -22,3 +43,10 @@ export class ChangePasswordDto {
@MinLength(8)
newPassword!: string;
}
+
+export class GenerateInviteDto {
+ @ApiProperty({ required: false, description: 'Decimal cashback rate, e.g. 0.01 = 1%. Admin only.' })
+ @IsOptional()
+ @IsNumber()
+ cashbackRate?: number;
+}
diff --git a/apps/api/src/domains/identity/auth.module.ts b/apps/api/src/domains/identity/auth.module.ts
index aa9dcd4..ae6a5c4 100644
--- a/apps/api/src/domains/identity/auth.module.ts
+++ b/apps/api/src/domains/identity/auth.module.ts
@@ -3,6 +3,7 @@ import { JwtModule } from '@nestjs/jwt';
import { PassportModule } from '@nestjs/passport';
import { ConfigModule, ConfigService } from '@nestjs/config';
import { AuthService } from './auth.service';
+import { InvitesService } from './invites.service';
import { JwtStrategy } from './jwt.strategy';
import { AuthController } from './auth.controller';
import { SystemConfigModule } from '../../shared/config/system-config.module';
@@ -20,8 +21,8 @@ import { SystemConfigModule } from '../../shared/config/system-config.module';
inject: [ConfigService],
}),
],
- providers: [AuthService, JwtStrategy],
+ providers: [AuthService, InvitesService, JwtStrategy],
controllers: [AuthController],
- exports: [AuthService, JwtModule],
+ exports: [AuthService, InvitesService, JwtModule],
})
export class AuthModule {}
diff --git a/apps/api/src/domains/identity/auth.service.ts b/apps/api/src/domains/identity/auth.service.ts
index f3be0e8..823be8b 100644
--- a/apps/api/src/domains/identity/auth.service.ts
+++ b/apps/api/src/domains/identity/auth.service.ts
@@ -1,10 +1,13 @@
import { Injectable } from '@nestjs/common';
-import { appForbidden, appUnauthorized } from '../../shared/common/app-error';
+import { Decimal } from '@prisma/client/runtime/library';
+import { appForbidden, appUnauthorized, appBadRequest, appNotFound } from '../../shared/common/app-error';
import { JwtService } from '@nestjs/jwt';
import { ConfigService } from '@nestjs/config';
import * as bcrypt from 'bcryptjs';
+import { assertPlayerUsername } from '@thebet365/shared';
import { PrismaService } from '../../shared/prisma/prisma.service';
import { SystemConfigService } from '../../shared/config/system-config.service';
+import { InvitesService } from './invites.service';
const MAX_LOGIN_FAILS = 5;
const LOCK_DURATION_MS = 15 * 60 * 1000;
@@ -23,6 +26,7 @@ export class AuthService {
private jwt: JwtService,
private config: ConfigService,
private systemConfig: SystemConfigService,
+ private invites: InvitesService,
) {}
/** 平台管理员 / 代理统一登录（按 userType 签发对应 JWT） */
@@ -129,6 +133,125 @@ export class AuthService {
};
}
+ async resolveInviteSponsor(inviteCodeRaw?: string | null) {
+ const resolved = await this.invites.resolveActiveInvite(inviteCodeRaw);
+ return {
+ sponsorId: resolved.sponsorId,
+ parentId: resolved.parentId,
+ inviteId: resolved.inviteId,
+ };
+ }
+
+ async registerPlayer(data: {
+ username: string;
+ password: string;
+ inviteCode?: string;
+ locale?: string;
+ }) {
+ const username = data.username.trim();
+ if (!username) {
+ throw appBadRequest('USERNAME_REQUIRED');
+ }
+ try {
+ assertPlayerUsername(username);
+ } catch {
+ throw appBadRequest('USERNAME_FORMAT_INVALID');
+ }
+ if (!data.password || data.password.length < 8) {
+ throw appBadRequest('PASSWORD_MIN_LENGTH');
+ }
+
+ const { parentId, sponsorId, inviteId } = await this.resolveInviteSponsor(data.inviteCode);
+ const inviteSponsorId = parentId == null && sponsorId != null ? sponsorId : null;
+
+ const existing = await this.prisma.user.findUnique({
+ where: { username },
+ select: { id: true },
+ });
+ if (existing) {
+ throw appBadRequest('USERNAME_TAKEN');
+ }
+
+ const hash = await this.hashPassword(data.password);
+ const locale = data.locale?.trim() || 'zh-CN';
+
+ const user = await this.prisma.$transaction(async (tx) => {
+ const created = await tx.user.create({
+ data: {
+ username,
+ userType: 'PLAYER',
+ parentId,
+ inviteSponsorId,
+ locale,
+ },
+ });
+
+ await tx.userAuth.create({
+ data: { userId: created.id, passwordHash: hash },
+ });
+
+ await tx.wallet.create({
+ data: { userId: created.id },
+ });
+
+ await tx.userPreference.create({
+ data: { userId: created.id, locale },
+ });
+
+ if (inviteId) {
+ await this.invites.recordRegistration(inviteId, created.id, tx);
+ const invite = await tx.userInvite.findUnique({
+ where: { id: inviteId },
+ select: { cashbackRate: true },
+ });
+ if (invite?.cashbackRate != null && new Decimal(invite.cashbackRate).gt(0)) {
+ await tx.cashbackRule.updateMany({
+ where: { targetType: 'USER', targetId: created.id },
+ data: { isActive: false },
+ });
+ await tx.cashbackRule.create({
+ data: {
+ name: `Player ${created.id.toString()}`,
+ targetType: 'USER',
+ targetId: created.id,
+ rate: invite.cashbackRate,
+ isActive: true,
+ },
+ });
+ }
+ }
+
+ return created;
+ });
+
+ return this.login(username, data.password, 'player');
+ }
+
+ async getInviteInfo(userId: bigint) {
+ const user = await this.prisma.user.findUnique({
+ where: { id: userId },
+ select: { inviteCode: true, userType: true, deletedAt: true },
+ });
+ if (!user || user.deletedAt) {
+ throw appNotFound('USER_NOT_FOUND');
+ }
+ if (user.userType !== 'ADMIN' && user.userType !== 'AGENT') {
+ throw appForbidden('ACCESS_DENIED_PORTAL');
+ }
+ return { inviteCode: user.inviteCode ?? null };
+ }
+
+ async generateInviteCode(
+ userId: bigint,
+ userType: string,
+ cashbackRate?: number,
+ ) {
+ return this.invites.generateInviteCode(userId, {
+ userType,
+ cashbackRate: cashbackRate ?? null,
+ });
+ }
+
async changePassword(userId: bigint, oldPassword: string, newPassword: string) {
const auth = await this.prisma.userAuth.findUnique({ where: { userId } });
if (!auth) throw appUnauthorized('USER_NOT_FOUND');
diff --git a/apps/api/src/domains/identity/invites.service.ts b/apps/api/src/domains/identity/invites.service.ts
new file mode 100644
index 0000000..48daaa3
--- /dev/null
+++ b/apps/api/src/domains/identity/invites.service.ts
@@ -0,0 +1,401 @@
+import { Injectable } from '@nestjs/common';
+import { Prisma } from '@prisma/client';
+import { appBadRequest, appForbidden, appNotFound } from '../../shared/common/app-error';
+import { PrismaService } from '../../shared/prisma/prisma.service';
+import {
+ INVITE_STATUS_ACTIVE,
+ INVITE_STATUS_REVOKED,
+ normalizeInviteCode,
+ rotateUserInviteCode,
+} from '../../shared/common/invite-code.util';
+
+export interface InviteListQuery {
+ page?: number;
+ pageSize?: number;
+ status?: string;
+ sponsorId?: string;
+ keyword?: string;
+}
+
+function formatInviteRow(row: {
+ id: bigint;
+ code: string;
+ status: string;
+ createdAt: Date;
+ revokedAt: Date | null;
+ cashbackRate: Prisma.Decimal | null;
+ sponsor: {
+ id: bigint;
+ username: string;
+ userType: string;
+ agentLevel: number | null;
+ };
+ registrations?: { id: bigint; username: string }[];
+}) {
+ const registrant = row.registrations?.[0] ?? null;
+ return {
+ id: row.id.toString(),
+ code: row.code,
+ status: row.status,
+ createdAt: row.createdAt.toISOString(),
+ revokedAt: row.revokedAt?.toISOString() ?? null,
+ cashbackRate: row.cashbackRate?.toString() ?? null,
+ sponsorId: row.sponsor.id.toString(),
+ sponsorUsername: row.sponsor.username,
+ sponsorUserType: row.sponsor.userType,
+ sponsorAgentLevel: row.sponsor.agentLevel,
+ registeredPlayerId: registrant ? registrant.id.toString() : null,
+ registeredPlayerUsername: registrant?.username ?? null,
+ };
+}
+
+const inviteListInclude = {
+ sponsor: {
+ select: { id: true, username: true, userType: true, agentLevel: true },
+ },
+ registrations: {
+ where: { userType: 'PLAYER', deletedAt: null },
+ select: { id: true, username: true },
+ take: 1,
+ },
+} as const;
+
+@Injectable()
+export class InvitesService {
+ constructor(private prisma: PrismaService) {}
+
+ async getSelfAndDescendantIds(agentId: bigint): Promise {
+ const rows = await this.prisma.agentClosure.findMany({
+ where: { ancestorId: agentId },
+ select: { descendantId: true },
+ });
+ return rows.map((r) => r.descendantId);
+ }
+
+ private async assertSponsorInScope(
+ operator: { id: bigint; userType: string },
+ sponsorId: bigint,
+ ) {
+ if (operator.userType === 'ADMIN') return;
+ if (operator.userType !== 'AGENT') {
+ throw appForbidden('ACCESS_DENIED_PORTAL');
+ }
+ const allowed = await this.getSelfAndDescendantIds(operator.id);
+ if (!allowed.some((id) => id === sponsorId)) {
+ throw appForbidden('ACCESS_DENIED_PORTAL');
+ }
+ }
+
+ async resolveActiveInvite(inviteCodeRaw?: string | null) {
+ const inviteCode = normalizeInviteCode(inviteCodeRaw ?? '');
+ if (!inviteCode) {
+ return { inviteId: null as bigint | null, sponsorId: null as bigint | null, parentId: null as bigint | null };
+ }
+
+ const invite = await this.prisma.userInvite.findUnique({
+ where: { code: inviteCode },
+ include: {
+ sponsor: {
+ select: {
+ id: true,
+ userType: true,
+ status: true,
+ deletedAt: true,
+ agentProfile: { select: { blockDirectPlayerLogin: true } },
+ },
+ },
+ registrations: {
+ where: { deletedAt: null },
+ select: { id: true },
+ take: 1,
+ },
+ },
+ });
+
+ if (!invite || invite.status !== INVITE_STATUS_ACTIVE) {
+ throw appBadRequest('INVITE_CODE_INVALID');
+ }
+ if (invite.registrations.length > 0) {
+ throw appBadRequest('INVITE_CODE_ALREADY_USED');
+ }
+
+ const sponsor = invite.sponsor;
+ if (!sponsor || sponsor.deletedAt) {
+ throw appBadRequest('INVITE_CODE_INVALID');
+ }
+ if (sponsor.userType !== 'ADMIN' && sponsor.userType !== 'AGENT') {
+ throw appBadRequest('INVITE_CODE_INVALID');
+ }
+ if (sponsor.status === 'DISABLED') {
+ throw appBadRequest('INVITE_CODE_NOT_AVAILABLE');
+ }
+ if (sponsor.userType === 'AGENT') {
+ if (sponsor.status === 'SUSPENDED') {
+ throw appBadRequest('INVITE_CODE_NOT_AVAILABLE');
+ }
+ if (sponsor.agentProfile?.blockDirectPlayerLogin) {
+ throw appBadRequest('INVITE_CODE_NOT_AVAILABLE');
+ }
+ }
+
+ return {
+ inviteId: invite.id,
+ sponsorId: sponsor.id,
+ parentId: sponsor.userType === 'AGENT' ? sponsor.id : null,
+ };
+ }
+
+ async recordRegistration(inviteId: bigint, playerId: bigint, tx: Prisma.TransactionClient) {
+ const invite = await tx.userInvite.findUnique({
+ where: { id: inviteId },
+ include: {
+ sponsor: { select: { inviteCode: true } },
+ registrations: {
+ where: { deletedAt: null },
+ select: { id: true },
+ take: 1,
+ },
+ },
+ });
+ if (!invite) {
+ throw appBadRequest('INVITE_CODE_INVALID');
+ }
+ if (invite.registrations.length > 0) {
+ throw appBadRequest('INVITE_CODE_ALREADY_USED');
+ }
+
+ await tx.user.update({
+ where: { id: playerId },
+ data: { usedInviteId: inviteId },
+ });
+
+ const now = new Date();
+ await tx.userInvite.update({
+ where: { id: inviteId },
+ data: {
+ registerCount: 1,
+ status: INVITE_STATUS_REVOKED,
+ revokedAt: now,
+ },
+ });
+
+ if (invite.sponsor.inviteCode === invite.code) {
+ await tx.user.update({
+ where: { id: invite.sponsorId },
+ data: { inviteCode: null },
+ });
+ }
+ }
+
+ async generateInviteCode(
+ userId: bigint,
+ options?: { userType?: string; cashbackRate?: number | null },
+ ) {
+ const user = await this.prisma.user.findUnique({
+ where: { id: userId },
+ select: { userType: true, deletedAt: true },
+ });
+ if (!user || user.deletedAt) {
+ throw appNotFound('USER_NOT_FOUND');
+ }
+ if (user.userType !== 'ADMIN' && user.userType !== 'AGENT') {
+ throw appForbidden('ACCESS_DENIED_PORTAL');
+ }
+
+ let cashbackRate: Prisma.Decimal | null = null;
+ if (options?.cashbackRate != null) {
+ if (user.userType !== 'ADMIN') {
+ throw appForbidden('ACCESS_DENIED_PORTAL');
+ }
+ if (!Number.isFinite(options.cashbackRate) || options.cashbackRate < 0) {
+ throw appBadRequest('INVITE_CASHBACK_RATE_INVALID');
+ }
+ cashbackRate = new Prisma.Decimal(options.cashbackRate);
+ }
+
+ const inviteCode = await rotateUserInviteCode(this.prisma, userId, cashbackRate);
+ return {
+ inviteCode,
+ cashbackRate: cashbackRate?.toString() ?? null,
+ };
+ }
+
+ async listInvites(
+ operator: { id: bigint; userType: string },
+ query: InviteListQuery,
+ ) {
+ const page = Math.max(1, query.page ?? 1);
+ const pageSize = Math.min(100, Math.max(1, query.pageSize ?? 20));
+ const where: Prisma.UserInviteWhereInput = {};
+
+ if (query.status === INVITE_STATUS_ACTIVE || query.status === INVITE_STATUS_REVOKED) {
+ where.status = query.status;
+ }
+
+ const keyword = query.keyword?.trim();
+ if (keyword) {
+ where.code = { contains: normalizeInviteCode(keyword) };
+ }
+
+ if (operator.userType === 'ADMIN') {
+ if (query.sponsorId?.trim()) {
+ where.sponsorId = BigInt(query.sponsorId.trim());
+ }
+ } else if (operator.userType === 'AGENT') {
+ const allowedIds = await this.getSelfAndDescendantIds(operator.id);
+ if (query.sponsorId?.trim()) {
+ const sid = BigInt(query.sponsorId.trim());
+ if (!allowedIds.some((id) => id === sid)) {
+ throw appForbidden('ACCESS_DENIED_PORTAL');
+ }
+ where.sponsorId = sid;
+ } else {
+ where.sponsorId = { in: allowedIds };
+ }
+ } else {
+ throw appForbidden('ACCESS_DENIED_PORTAL');
+ }
+
+ const [total, rows] = await Promise.all([
+ this.prisma.userInvite.count({ where }),
+ this.prisma.userInvite.findMany({
+ where,
+ include: inviteListInclude,
+ orderBy: [{ createdAt: 'desc' }, { id: 'desc' }],
+ skip: (page - 1) * pageSize,
+ take: pageSize,
+ }),
+ ]);
+
+ return {
+ items: rows.map(formatInviteRow),
+ total,
+ page,
+ pageSize,
+ };
+ }
+
+ async listSponsorOptions(operator: { id: bigint; userType: string }) {
+ if (operator.userType === 'ADMIN') {
+ const rows = await this.prisma.user.findMany({
+ where: {
+ userType: { in: ['ADMIN', 'AGENT'] },
+ deletedAt: null,
+ },
+ select: { id: true, username: true, userType: true, agentLevel: true },
+ orderBy: [{ userType: 'asc' }, { username: 'asc' }],
+ });
+ return rows.map((r) => ({
+ id: r.id.toString(),
+ username: r.username,
+ userType: r.userType,
+ agentLevel: r.agentLevel,
+ }));
+ }
+
+ if (operator.userType !== 'AGENT') {
+ throw appForbidden('ACCESS_DENIED_PORTAL');
+ }
+
+ const ids = await this.getSelfAndDescendantIds(operator.id);
+ const rows = await this.prisma.user.findMany({
+ where: { id: { in: ids }, deletedAt: null },
+ select: { id: true, username: true, userType: true, agentLevel: true },
+ orderBy: [{ agentLevel: 'asc' }, { username: 'asc' }],
+ });
+ return rows.map((r) => ({
+ id: r.id.toString(),
+ username: r.username,
+ userType: r.userType,
+ agentLevel: r.agentLevel,
+ }));
+ }
+
+ async revokeInvite(
+ operator: { id: bigint; userType: string },
+ inviteId: bigint,
+ ) {
+ const invite = await this.prisma.userInvite.findUnique({
+ where: { id: inviteId },
+ include: { sponsor: { select: { id: true, inviteCode: true } } },
+ });
+ if (!invite) {
+ throw appNotFound('INVITE_NOT_FOUND');
+ }
+ if (invite.status === INVITE_STATUS_REVOKED) {
+ const full = await this.prisma.userInvite.findUnique({
+ where: { id: inviteId },
+ include: inviteListInclude,
+ });
+ if (!full) throw appNotFound('INVITE_NOT_FOUND');
+ return formatInviteRow(full);
+ }
+
+ await this.assertSponsorInScope(operator, invite.sponsorId);
+
+ if (operator.userType === 'AGENT' && invite.sponsorId !== operator.id) {
+ throw appForbidden('ACCESS_DENIED_PORTAL');
+ }
+
+ const updated = await this.prisma.$transaction(async (tx) => {
+ const row = await tx.userInvite.update({
+ where: { id: inviteId },
+ data: { status: INVITE_STATUS_REVOKED, revokedAt: new Date() },
+ include: {
+ sponsor: {
+ select: { id: true, username: true, userType: true, agentLevel: true, inviteCode: true },
+ },
+ registrations: {
+ where: { userType: 'PLAYER', deletedAt: null },
+ select: { id: true, username: true },
+ take: 1,
+ },
+ },
+ });
+
+ if (row.sponsor.inviteCode === row.code) {
+ await tx.user.update({
+ where: { id: row.sponsorId },
+ data: { inviteCode: null },
+ });
+ }
+
+ return row;
+ });
+
+ return formatInviteRow(updated);
+ }
+
+ async deleteInvite(
+ operator: { id: bigint; userType: string },
+ inviteId: bigint,
+ ) {
+ const invite = await this.prisma.userInvite.findUnique({
+ where: { id: inviteId },
+ select: { id: true, status: true, sponsorId: true },
+ });
+ if (!invite) {
+ throw appNotFound('INVITE_NOT_FOUND');
+ }
+ if (invite.status !== INVITE_STATUS_REVOKED) {
+ throw appBadRequest('INVITE_MUST_REVOKE_FIRST');
+ }
+
+ const usedBy = await this.prisma.user.findFirst({
+ where: { usedInviteId: inviteId, deletedAt: null },
+ select: { id: true },
+ });
+ if (usedBy) {
+ throw appBadRequest('INVITE_CANNOT_DELETE_USED');
+ }
+
+ await this.assertSponsorInScope(operator, invite.sponsorId);
+
+ if (operator.userType === 'AGENT' && invite.sponsorId !== operator.id) {
+ throw appForbidden('ACCESS_DENIED_PORTAL');
+ }
+
+ await this.prisma.userInvite.delete({ where: { id: inviteId } });
+ return { success: true };
+ }
+}
diff --git a/apps/api/src/domains/identity/users.module.ts b/apps/api/src/domains/identity/users.module.ts
index 6004921..ad4c773 100644
--- a/apps/api/src/domains/identity/users.module.ts
+++ b/apps/api/src/domains/identity/users.module.ts
@@ -1,9 +1,10 @@
import { Module } from '@nestjs/common';
import { UsersService } from './users.service';
import { AgentsModule } from '../agent/agents.module';
+import { CashbackModule } from '../operations/cashback/cashback.module';
@Module({
- imports: [AgentsModule],
+ imports: [AgentsModule, CashbackModule],
providers: [UsersService],
exports: [UsersService],
})
diff --git a/apps/api/src/domains/identity/users.service.ts b/apps/api/src/domains/identity/users.service.ts
index b6d0228..52b06b8 100644
--- a/apps/api/src/domains/identity/users.service.ts
+++ b/apps/api/src/domains/identity/users.service.ts
@@ -4,7 +4,9 @@ import { SUPPORTED_LOCALES, isValidAvatarKey, assertPlayerUsername } from '@theb
import { PrismaService } from '../../shared/prisma/prisma.service';
import { SystemConfigService } from '../../shared/config/system-config.service';
import { AgentsService } from '../agent/agents.service';
+import { CashbackService } from '../operations/cashback/cashback.service';
import { appBadRequest, appForbidden, appNotFound } from '../../shared/common/app-error';
+import { Decimal } from '@prisma/client/runtime/library';
export type PlayerListFilters = {
keyword?: string;
@@ -19,6 +21,7 @@ export class UsersService {
private prisma: PrismaService,
private agents: AgentsService,
private systemConfig: SystemConfigService,
+ private cashback: CashbackService,
) {}
private buildAffiliationAgents(
@@ -103,6 +106,7 @@ export class UsersService {
parent?: { username: string; agentLevel: number | null } | null;
} | null;
auth?: { lastLoginAt: Date | null } | null;
+ usedInvite?: { code: string } | null;
},
bet?: { count: number; totalStake: string; totalReturn: string },
affiliationChain?: string[],
@@ -116,6 +120,7 @@ export class UsersService {
parentId: u.parentId?.toString() ?? null,
parentUsername: u.parent?.username ?? null,
affiliationAgents,
+ inviteCode: u.usedInvite?.code ?? null,
phone: u.preferences?.phone ?? null,
email: u.preferences?.email ?? null,
managedPassword: u.preferences?.managedPassword ?? null,
@@ -281,6 +286,7 @@ export class UsersService {
},
},
auth: { select: { lastLoginAt: true } },
+ usedInvite: { select: { code: true } },
},
skip,
take: pageSize,
@@ -320,17 +326,23 @@ export class UsersService {
},
},
auth: { select: { lastLoginAt: true, loginFailCount: true, lockedUntil: true } },
+ usedInvite: { select: { code: true } },
},
});
if (!user) throw appNotFound('PLAYER_NOT_FOUND');
const affiliationMap = await this.buildAffiliationChainMap([user.parentId]);
- const [betCount, betStake] = await Promise.all([
+ const [betCount, betStake, customCashbackRate, defaultCashbackRate] = await Promise.all([
this.prisma.bet.count({ where: { userId: playerId } }),
this.prisma.bet.aggregate({
where: { userId: playerId },
_sum: { stake: true, actualReturn: true },
}),
+ this.cashback.getPlayerCustomCashbackRate(playerId),
+ this.cashback.resolvePlayerDefaultCashbackRate({
+ parentId: user.parentId,
+ inviteSponsorId: user.inviteSponsorId,
+ }),
]);
return {
@@ -345,6 +357,8 @@ export class UsersService {
betCount,
totalStake: betStake._sum.stake?.toString() ?? '0',
totalReturn: betStake._sum.actualReturn?.toString() ?? '0',
+ customCashbackRate: customCashbackRate?.toString() ?? null,
+ defaultCashbackRate: defaultCashbackRate.toString(),
};
}
@@ -357,6 +371,7 @@ export class UsersService {
email?: string;
username?: string;
password?: string;
+ cashbackRate?: number | null;
},
) {
const user = await this.prisma.user.findFirst({
@@ -440,6 +455,17 @@ export class UsersService {
});
}
+ if (data.cashbackRate !== undefined) {
+ if (data.cashbackRate != null && (!Number.isFinite(data.cashbackRate) || data.cashbackRate < 0)) {
+ throw appBadRequest('CASHBACK_RATE_NEGATIVE');
+ }
+ const rate =
+ data.cashbackRate != null && data.cashbackRate > 0
+ ? new Decimal(data.cashbackRate)
+ : null;
+ await this.cashback.setPlayerCustomCashbackRate(playerId, rate);
+ }
+
return this.getPlayerAdminDetail(playerId);
}
diff --git a/apps/api/src/domains/ledger/wallet.service.ts b/apps/api/src/domains/ledger/wallet.service.ts
index c3dfc0c..a665beb 100644
--- a/apps/api/src/domains/ledger/wallet.service.ts
+++ b/apps/api/src/domains/ledger/wallet.service.ts
@@ -287,7 +287,7 @@ export class WalletService {
let typeWhere: Record = {};
if (typeFilter === 'deposit') {
- typeWhere = { transactionType: { in: ['MANUAL_DEPOSIT', 'DEPOSIT', 'MANUAL_ADJUST'] } };
+ typeWhere = { transactionType: { in: ['MANUAL_DEPOSIT', 'DEPOSIT', 'MANUAL_ADJUST', 'PLAYER_DEPOSIT'] } };
} else if (typeFilter === 'withdraw') {
typeWhere = { transactionType: { in: ['MANUAL_WITHDRAW', 'WITHDRAW'] } };
} else if (typeFilter === 'bet') {
@@ -312,7 +312,7 @@ export class WalletService {
private walletTypeCategoryWhere(category?: string): Prisma.WalletTransactionWhereInput {
const cat = category?.trim();
if (cat === 'deposit') {
- return { transactionType: { in: ['MANUAL_DEPOSIT', 'DEPOSIT', 'MANUAL_ADJUST'] } };
+ return { transactionType: { in: ['MANUAL_DEPOSIT', 'DEPOSIT', 'MANUAL_ADJUST', 'PLAYER_DEPOSIT'] } };
}
if (cat === 'withdraw') {
return { transactionType: { in: ['MANUAL_WITHDRAW', 'WITHDRAW'] } };
@@ -341,6 +341,99 @@ export class WalletService {
return {};
}
+ private static readonly DEPOSIT_RECHARGE_TYPES = new Set([
+ 'MANUAL_DEPOSIT',
+ 'DEPOSIT',
+ 'PLAYER_DEPOSIT',
+ ]);
+
+ private paymentMethodDisplayName(pm: {
+ displayName: string | null;
+ bankName: string | null;
+ usdtAddress: string | null;
+ methodType: string;
+ } | null | undefined): string | null {
+ if (!pm) return null;
+ return pm.displayName ?? pm.bankName ?? pm.usdtAddress ?? pm.methodType ?? null;
+ }
+
+ private async resolveDepositMethodsForRows(
+ rows: Array<{ id: bigint; transactionType: string; referenceId: string | null; operatorId: bigint | null }>,
+ ) {
+ const rechargeRows = rows.filter((r) => WalletService.DEPOSIT_RECHARGE_TYPES.has(r.transactionType));
+ const result = new Map<
+ string,
+ { depositMethodKey: string | null; depositMethodName: string | null }
+ >();
+
+ if (!rechargeRows.length) return result;
+
+ const orderNos = [
+ ...new Set(
+ rechargeRows
+ .filter((r) => r.transactionType === 'PLAYER_DEPOSIT' && r.referenceId)
+ .map((r) => r.referenceId!),
+ ),
+ ];
+ const manualOperatorIds = [
+ ...new Set(
+ rechargeRows
+ .filter((r) => r.transactionType !== 'PLAYER_DEPOSIT' && r.operatorId)
+ .map((r) => r.operatorId!),
+ ),
+ ];
+
+ const [orders, operators] = await Promise.all([
+ orderNos.length
+ ? this.prisma.depositOrder.findMany({
+ where: { orderNo: { in: orderNos } },
+ include: {
+ paymentMethod: {
+ select: {
+ displayName: true,
+ bankName: true,
+ usdtAddress: true,
+ methodType: true,
+ },
+ },
+ },
+ })
+ : [],
+ manualOperatorIds.length
+ ? this.prisma.user.findMany({
+ where: { id: { in: manualOperatorIds } },
+ select: { id: true, userType: true },
+ })
+ : [],
+ ]);
+
+ const orderByNo = new Map(orders.map((o) => [o.orderNo, o]));
+ const operatorTypeById = new Map(operators.map((o) => [o.id.toString(), o.userType]));
+
+ for (const row of rechargeRows) {
+ const rowKey = row.id.toString();
+ if (row.transactionType === 'PLAYER_DEPOSIT' && row.referenceId) {
+ const order = orderByNo.get(row.referenceId);
+ result.set(rowKey, {
+ depositMethodKey: null,
+ depositMethodName: this.paymentMethodDisplayName(order?.paymentMethod),
+ });
+ continue;
+ }
+
+ const operatorType = row.operatorId
+ ? operatorTypeById.get(row.operatorId.toString())
+ : null;
+ let depositMethodKey = 'MANUAL';
+ if (operatorType === 'ADMIN') depositMethodKey = 'MANUAL_ADMIN';
+ else if (operatorType === 'AGENT') depositMethodKey = 'MANUAL_AGENT';
+
+ result.set(rowKey, { depositMethodKey, depositMethodName: null });
+ }
+
+ return result;
+ }
+
async listWalletTransactionsAdmin(params: {
page?: number;
pageSize?: number;
@@ -495,11 +588,13 @@ export class WalletService {
const playerById = new Map(players.map((p) => [p.id.toString(), p]));
const operatorById = new Map(operators.map((u) => [u.id.toString(), u.username]));
const parentById = new Map(parentAgents.map((a) => [a.id.toString(), a.username]));
+ const depositMethodByRowId = await this.resolveDepositMethodsForRows(rows);
return {
items: rows.map((row) => {
const player = playerById.get(row.userId.toString());
const parentId = player?.parentId;
+ const depositMethod = depositMethodByRowId.get(row.id.toString());
return {
id: row.id.toString(),
transactionId: row.transactionId,
@@ -516,6 +611,8 @@ export class WalletService {
referenceType: row.referenceType,
referenceId: row.referenceId,
betNo: row.referenceType === 'BET' ? row.referenceId : null,
+ depositMethodKey: depositMethod?.depositMethodKey ?? null,
+ depositMethodName: depositMethod?.depositMethodName ?? null,
operatorId: row.operatorId?.toString() ?? null,
operatorUsername: row.operatorId
? (operatorById.get(row.operatorId.toString()) ?? null)
diff --git a/apps/api/src/domains/operations/cashback/cashback.service.ts b/apps/api/src/domains/operations/cashback/cashback.service.ts
index f9e83d2..ae4275a 100644
--- a/apps/api/src/domains/operations/cashback/cashback.service.ts
+++ b/apps/api/src/domains/operations/cashback/cashback.service.ts
@@ -2,6 +2,7 @@ import { Injectable } from '@nestjs/common';
import { Prisma } from '@prisma/client';
import { PrismaService } from '../../../shared/prisma/prisma.service';
import { WalletService } from '../../ledger/wallet.service';
+import { SystemConfigService } from '../../../shared/config/system-config.service';
import { Decimal } from '@prisma/client/runtime/library';
import { generateBatchNo } from '../../../shared/common/decorators';
import { appBadRequest } from '../../../shared/common/app-error';
@@ -33,6 +34,7 @@ export class CashbackService {
constructor(
private prisma: PrismaService,
private wallet: WalletService,
+ private systemConfig: SystemConfigService,
) {}
/** 已被待发放/已发放返水批次占用的注单 */
@@ -55,14 +57,15 @@ export class CashbackService {
eligibleBetCount: number;
skippedClaimedCount: number;
}> {
- const [settledBets, rules, agentProfiles, claimedBetIds] = await Promise.all([
+ const [settledBets, rules, agentProfiles, claimedBetIds, platformDirectRateRaw] =
+ await Promise.all([
this.prisma.bet.findMany({
where: {
status: { in: ['WON', 'LOST'] },
settledAt: { gte: periodStart, lte: periodEnd },
},
include: {
- user: { select: { id: true, parentId: true } },
+ user: { select: { id: true, parentId: true, inviteSponsorId: true } },
selections: { select: { marketType: true } },
},
}),
@@ -71,11 +74,46 @@ export class CashbackService {
select: { userId: true, cashbackRate: true },
}),
this.loadClaimedBetIds(),
+ this.systemConfig.getPlatformDirectCashbackSettings(),
]);
+ const platformDirectDefaultRate = new Decimal(platformDirectRateRaw.platformDirectRate);
+ const adminInviteDefaultRate = new Decimal(platformDirectRateRaw.adminInviteRate);
+
const agentRateById = new Map(
agentProfiles.map((p) => [p.userId.toString(), new Decimal(p.cashbackRate)]),
);
+ const sponsorTypeById = new Map();
+ const sponsorIds = [
+ ...new Set(
+ settledBets
+ .map((b) => b.user.inviteSponsorId)
+ .filter((id): id is bigint => id != null),
+ ),
+ ];
+ if (sponsorIds.length > 0) {
+ const sponsors = await this.prisma.user.findMany({
+ where: { id: { in: sponsorIds } },
+ select: { id: true, userType: true },
+ });
+ for (const sponsor of sponsors) {
+ sponsorTypeById.set(sponsor.id.toString(), sponsor.userType);
+ }
+ }
+
+ const resolveDefaultRate = (user: {
+ parentId: bigint | null;
+ inviteSponsorId: bigint | null;
+ }) => {
+ if (user.parentId) {
+ return agentRateById.get(user.parentId.toString()) ?? new Decimal(0);
+ }
+ if (user.inviteSponsorId) {
+ const sponsorType = sponsorTypeById.get(user.inviteSponsorId.toString());
+ if (sponsorType === 'ADMIN') return adminInviteDefaultRate;
+ }
+ return platformDirectDefaultRate;
+ };
const ruleRows: CashbackRuleRow[] = rules.map((r) => ({
targetType: r.targetType,
targetId: r.targetId,
@@ -93,9 +131,7 @@ export class CashbackService {
for (const bet of settledBets) {
const agentId = bet.user.parentId;
- const agentDefaultRate = agentId
- ? agentRateById.get(agentId.toString()) ?? new Decimal(0)
- : new Decimal(0);
+ const agentDefaultRate = resolveDefaultRate(bet.user);
const marketTypes = bet.selections.map((s) => s.marketType);
const rate = resolveCashbackRateForBet({
userId: bet.userId,
@@ -538,4 +574,64 @@ export class CashbackService {
createdAt: item.createdAt,
}));
}
+
+ async getPlayerCustomCashbackRate(userId: bigint): Promise {
+ const rule = await this.prisma.cashbackRule.findFirst({
+ where: {
+ targetType: 'USER',
+ targetId: userId,
+ isActive: true,
+ marketType: null,
+ },
+ orderBy: { updatedAt: 'desc' },
+ });
+ if (!rule) return null;
+ const rate = new Decimal(rule.rate);
+ return rate.gt(0) ? rate : null;
+ }
+
+ async setPlayerCustomCashbackRate(userId: bigint, rate: Decimal | null) {
+ await this.prisma.$transaction(async (tx) => {
+ await tx.cashbackRule.updateMany({
+ where: { targetType: 'USER', targetId: userId },
+ data: { isActive: false },
+ });
+ if (rate && rate.gt(0)) {
+ await tx.cashbackRule.create({
+ data: {
+ name: `Player ${userId.toString()}`,
+ targetType: 'USER',
+ targetId: userId,
+ rate,
+ isActive: true,
+ },
+ });
+ }
+ });
+ }
+
+ async resolvePlayerDefaultCashbackRate(params: {
+ parentId: bigint | null;
+ inviteSponsorId?: bigint | null;
+ }): Promise {
+ if (params.parentId) {
+ const profile = await this.prisma.agentProfile.findUnique({
+ where: { userId: params.parentId },
+ select: { cashbackRate: true },
+ });
+ return profile ? new Decimal(profile.cashbackRate) : new Decimal(0);
+ }
+
+ const settings = await this.systemConfig.getPlatformDirectCashbackSettings();
+ if (params.inviteSponsorId) {
+ const sponsor = await this.prisma.user.findUnique({
+ where: { id: params.inviteSponsorId },
+ select: { userType: true },
+ });
+ if (sponsor?.userType === 'ADMIN') {
+ return new Decimal(settings.adminInviteRate);
+ }
+ }
+ return new Decimal(settings.platformDirectRate);
+ }
}
diff --git a/apps/api/src/infrastructure/database/run-seed.ts b/apps/api/src/infrastructure/database/run-seed.ts
index 86f9a11..e5637b0 100644
--- a/apps/api/src/infrastructure/database/run-seed.ts
+++ b/apps/api/src/infrastructure/database/run-seed.ts
@@ -1,6 +1,7 @@
import { PrismaClient } from '@prisma/client';
import * as bcrypt from 'bcryptjs';
import { syncWc2026OutrightMarket } from '../../domains/catalog/wc2026-outright.sync';
+import { ensureUserInviteCode } from '../../shared/common/invite-code.util';
export const DEMO_ACCOUNTS = [
'admin / Admin@123',
@@ -746,5 +747,13 @@ export async function runSeed(client: PrismaClient) {
},
}).catch(() => {});
+ const staffWithoutInvite = await prisma.user.findMany({
+ where: { userType: { in: ['ADMIN', 'AGENT'] }, inviteCode: null },
+ select: { id: true },
+ });
+ for (const row of staffWithoutInvite) {
+ await ensureUserInviteCode(prisma, row.id);
+ }
+
console.log(`Seed completed! ${DEMO_ACCOUNTS.join(', ')}`);
}
diff --git a/apps/api/src/shared/common/invite-code.util.ts b/apps/api/src/shared/common/invite-code.util.ts
new file mode 100644
index 0000000..96bb332
--- /dev/null
+++ b/apps/api/src/shared/common/invite-code.util.ts
@@ -0,0 +1,114 @@
+import { Prisma } from '@prisma/client';
+import type { PrismaService } from '../prisma/prisma.service';
+
+const INVITE_CODE_CHARS = 'ABCDEFGHJKLMNPQRSTUVWXYZ23456789';
+const INVITE_CODE_LENGTH = 8;
+
+export const INVITE_STATUS_ACTIVE = 'ACTIVE';
+export const INVITE_STATUS_REVOKED = 'REVOKED';
+
+export function normalizeInviteCode(input: string): string {
+ return input.trim().toUpperCase();
+}
+
+export function generateInviteCodeCandidate(): string {
+ let code = '';
+ for (let i = 0; i < INVITE_CODE_LENGTH; i++) {
+ code += INVITE_CODE_CHARS[Math.floor(Math.random() * INVITE_CODE_CHARS.length)];
+ }
+ return code;
+}
+
+type InviteCodeDb = Pick;
+
+function isInviteCodeUniqueViolation(err: unknown): boolean {
+ return err instanceof Prisma.PrismaClientKnownRequestError && err.code === 'P2002';
+}
+
+async function isCodeTaken(db: InviteCodeDb, code: string): Promise {
+ const [userHit, inviteHit] = await Promise.all([
+ db.user.findUnique({ where: { inviteCode: code }, select: { id: true } }),
+ db.userInvite.findUnique({ where: { code }, select: { id: true } }),
+ ]);
+ return Boolean(userHit || inviteHit);
+}
+
+export async function generateUniqueInviteCode(
+ db: InviteCodeDb,
+ maxAttempts = 12,
+): Promise {
+ for (let attempt = 0; attempt < maxAttempts; attempt++) {
+ const code = generateInviteCodeCandidate();
+ if (!(await isCodeTaken(db, code))) return code;
+ }
+ throw new Error('Failed to generate unique invite code');
+}
+
+/** Create history record and set as the user's current invite code. */
+export async function assignInviteCodeWithHistory(
+ db: InviteCodeDb,
+ sponsorId: bigint,
+ cashbackRate?: Prisma.Decimal | null,
+): Promise {
+ for (let attempt = 0; attempt < 12; attempt++) {
+ const candidate = generateInviteCodeCandidate();
+ if (await isCodeTaken(db, candidate)) continue;
+ try {
+ await db.userInvite.create({
+ data: {
+ code: candidate,
+ sponsorId,
+ status: INVITE_STATUS_ACTIVE,
+ ...(cashbackRate != null ? { cashbackRate } : {}),
+ },
+ });
+ await db.user.update({
+ where: { id: sponsorId },
+ data: { inviteCode: candidate },
+ });
+ return candidate;
+ } catch (err) {
+ if (!isInviteCodeUniqueViolation(err)) throw err;
+ }
+ }
+ throw new Error('Failed to assign invite code');
+}
+
+/** Revoke active codes and assign a new one with history. */
+export async function rotateUserInviteCode(
+ db: InviteCodeDb,
+ userId: bigint,
+ cashbackRate?: Prisma.Decimal | null,
+): Promise {
+ await db.userInvite.updateMany({
+ where: { sponsorId: userId, status: INVITE_STATUS_ACTIVE },
+ data: { status: INVITE_STATUS_REVOKED, revokedAt: new Date() },
+ });
+ return assignInviteCodeWithHistory(db, userId, cashbackRate);
+}
+
+/** Assign a stable invite code once per staff user (admin/agent). */
+export async function ensureUserInviteCode(db: InviteCodeDb, userId: bigint): Promise {
+ const existing = await db.user.findUnique({
+ where: { id: userId },
+ select: { inviteCode: true },
+ });
+ if (existing?.inviteCode) {
+ const history = await db.userInvite.findUnique({
+ where: { code: existing.inviteCode },
+ select: { id: true },
+ });
+ if (!history) {
+ await db.userInvite.create({
+ data: {
+ code: existing.inviteCode,
+ sponsorId: userId,
+ status: INVITE_STATUS_ACTIVE,
+ },
+ });
+ }
+ return existing.inviteCode;
+ }
+
+ return assignInviteCodeWithHistory(db, userId);
+}
diff --git a/apps/api/src/shared/config/system-config.service.ts b/apps/api/src/shared/config/system-config.service.ts
index f0847b4..e31da0f 100644
--- a/apps/api/src/shared/config/system-config.service.ts
+++ b/apps/api/src/shared/config/system-config.service.ts
@@ -7,6 +7,15 @@ export const AGENT_SUSPEND_FREEZE_DIRECT_PLAYERS = 'agent.suspend_freeze_direct_
export const AGENT_SUSPEND_BLOCK_PLAYER_LOGIN = 'agent.suspend_block_player_login';
export const AGENT_MAX_LEVEL = 'agent.max_level';
export const AGENT_DEFAULT_SUB_CREDIT_RATIO = 'agent.default_sub_credit_ratio';
+export const CASHBACK_PLATFORM_DIRECT_RATE = 'cashback.platform_direct_rate';
+export const CASHBACK_ADMIN_INVITE_RATE = 'cashback.admin_invite_rate';
+
+export type PlatformDirectCashbackSettings = {
+ /** 平台直属玩家默认返水比例（小数，0.01 = 1%） */
+ platformDirectRate: number;
+ /** 管理员邀请注册玩家返水比例；未配置时与 platformDirectRate 相同 */
+ adminInviteRate: number;
+};
export type AgentHierarchySettings = {
/** 最大代理层级；0 = 不限制 */
@@ -155,4 +164,62 @@ export class SystemConfigService {
}
return this.getAgentHierarchySettings();
}
+
+ async getDecimalRate(key: string, defaultValue = 0): Promise {
+ const row = await this.prisma.systemConfig.findUnique({ where: { configKey: key } });
+ if (!row) return defaultValue;
+ const parsed = parseFloat(row.configValue);
+ return Number.isFinite(parsed) && parsed >= 0 ? parsed : defaultValue;
+ }
+
+ async setDecimalRate(key: string, value: number, description?: string) {
+ const safe = Math.max(0, value);
+ await this.prisma.systemConfig.upsert({
+ where: { configKey: key },
+ create: {
+ configKey: key,
+ configValue: String(safe),
+ description,
+ },
+ update: { configValue: String(safe) },
+ });
+ }
+
+ async getPlatformDirectCashbackSettings(): Promise {
+ const platformDirectRate = await this.getDecimalRate(CASHBACK_PLATFORM_DIRECT_RATE, 0);
+ const adminInviteConfigured = await this.prisma.systemConfig.findUnique({
+ where: { configKey: CASHBACK_ADMIN_INVITE_RATE },
+ });
+ const adminInviteRate = adminInviteConfigured
+ ? await this.getDecimalRate(CASHBACK_ADMIN_INVITE_RATE, platformDirectRate)
+ : platformDirectRate;
+ return { platformDirectRate, adminInviteRate };
+ }
+
+ async updatePlatformDirectCashbackSettings(data: {
+ platformDirectRate?: number;
+ adminInviteRate?: number;
+ }) {
+ if (data.platformDirectRate !== undefined) {
+ if (!Number.isFinite(data.platformDirectRate) || data.platformDirectRate < 0) {
+ throw new Error('platformDirectRate must be a non-negative number');
+ }
+ await this.setDecimalRate(
+ CASHBACK_PLATFORM_DIRECT_RATE,
+ data.platformDirectRate,
+ '平台直属玩家默认返水比例（小数，如 0.01 = 1%）',
+ );
+ }
+ if (data.adminInviteRate !== undefined) {
+ if (!Number.isFinite(data.adminInviteRate) || data.adminInviteRate < 0) {
+ throw new Error('adminInviteRate must be a non-negative number');
+ }
+ await this.setDecimalRate(
+ CASHBACK_ADMIN_INVITE_RATE,
+ data.adminInviteRate,
+ '管理员邀请注册玩家返水比例（小数，如 0.01 = 1%）',
+ );
+ }
+ return this.getPlatformDirectCashbackSettings();
+ }
}
diff --git a/apps/player/package.json b/apps/player/package.json
index a32faf3..bac11a1 100644
--- a/apps/player/package.json
+++ b/apps/player/package.json
@@ -11,10 +11,12 @@
"dependencies": {
"@thebet365/shared": "workspace:*",
"axios": "^1.7.9",
+ "browser-image-compression": "^2.0.2",
"pinia": "^2.3.1",
"vue": "^3.5.13",
"vue-i18n": "^11.1.1",
- "vue-router": "^4.5.0"
+ "vue-router": "^4.5.0",
+ "vue3-slide-verify": "^1.1.8"
},
"devDependencies": {
"@vitejs/plugin-vue": "^5.2.1",
diff --git a/apps/player/src/api/index.ts b/apps/player/src/api/index.ts
index 0bdddd8..9bfface 100644
--- a/apps/player/src/api/index.ts
+++ b/apps/player/src/api/index.ts
@@ -18,7 +18,7 @@ api.interceptors.response.use(
if (err.response?.status === 401) {
const url: string = err.config?.url ?? '';
// Don't redirect on login/auth failures — let the caller handle the error
- if (!url.includes('/auth/login')) {
+ if (!url.includes('/auth/login') && !url.includes('/auth/register')) {
localStorage.removeItem('token');
// 不再强制跳转登录页，让调用方处理 401
}
diff --git a/apps/player/src/components/CashBalanceChip.vue b/apps/player/src/components/CashBalanceChip.vue
index 5155dbe..b171c6f 100644
--- a/apps/player/src/components/CashBalanceChip.vue
+++ b/apps/player/src/components/CashBalanceChip.vue
@@ -1,11 +1,13 @@
-
- {{ t('agent.hint.credit_limit') }}
- {{ t('agent.hint.deposit_limit_empty') }}
@@ -1029,20 +1043,70 @@ function statusTagType(s: string) {
.credit-item { display: flex; flex-direction: column; gap: 4px; }
.credit-label { font-size: 12px; color: #666; }
.credit-value { font-size: 18px; font-weight: 700; color: #e0e0e0; font-variant-numeric: tabular-nums; }
-.credit-value.c-green { color: #67c23a; }
+.credit-value.c-green { color: var(--gold-text); }
.credit-divider { width: 1px; height: 32px; background: #2a2a2a; }
/* ─── Tabs ─── */
-.portal-top-tabs { margin-bottom: 8px; }
+.portal-tabs-shell {
+ position: relative;
+ display: flex;
+ flex-direction: column;
+ margin-bottom: 8px;
+}
+
+.portal-top-tabs { margin-bottom: 0; }
+.portal-top-tabs--with-invite :deep(.el-tabs__header) {
+ margin-bottom: 0;
+ padding-right: 108px;
+}
+
.portal-top-tabs :deep(.el-tabs__item) { font-size: 14px; }
+.invite-prominent-btn {
+ position: absolute;
+ right: 0;
+ top: 0;
+ z-index: 2;
+ min-width: 96px;
+ height: 38px;
+ padding: 0 22px;
+ font-size: 15px;
+ font-weight: 700;
+ letter-spacing: 0.06em;
+ border-radius: 8px;
+ box-shadow: 0 2px 10px rgba(201, 162, 39, 0.22);
+}
+
+.invite-code-cell {
+ font-family: ui-monospace, monospace;
+ font-weight: 700;
+ letter-spacing: 0.06em;
+ color: var(--gold-text);
+}
+
/* ─── Inner content ─── */
.inner-toolbar { display: flex; align-items: center; justify-content: flex-end; gap: 8px; margin-bottom: 8px; }
.inner-table { border-radius: 6px; }
.expandable-table :deep(.row-expandable) { cursor: pointer; }
-.action-btns {
- display: flex; align-items: center; justify-content: center;
- gap: 4px; flex-wrap: nowrap; white-space: nowrap;
+.agent-portal-mgr :deep(.el-table) {
+ min-width: 720px;
+}
+
+.inner-toolbar {
+ flex-wrap: wrap;
+ row-gap: 8px;
+}
+
+@media (max-width: 900px) {
+ .portal-top-tabs--with-invite :deep(.el-tabs__header) {
+ padding-right: 0;
+ }
+
+ .invite-prominent-btn {
+ position: static;
+ align-self: flex-end;
+ margin: 0 0 8px;
+ }
}
/* ─── Expansion ─── */
@@ -1072,22 +1136,3 @@ function statusTagType(s: string) {
.edit-stats { margin-top: 8px; }
.compact-edit-form :deep(.el-form-item) { margin-bottom: 10px; }
-
-
diff --git a/apps/admin/src/views/agent/SubAgents.vue b/apps/admin/src/views/agent/SubAgents.vue
index f5ac142..539bffd 100644
--- a/apps/admin/src/views/agent/SubAgents.vue
+++ b/apps/admin/src/views/agent/SubAgents.vue
@@ -301,9 +301,6 @@ function statusLabel(status: string) {
/>
{{ t('agent_portal.sub_agent_credit_hint') }}
{{ t('agent.hint.deposit_limit_empty') }}
@@ -401,7 +398,7 @@ function statusLabel(status: string) {
font-variant-numeric: tabular-nums;
}
.credit-value.c-green {
- color: #67c23a;
+ color: var(--gold-text);
}
.credit-divider {
width: 1px;
diff --git a/apps/admin/src/views/agent/agent-player-form.ts b/apps/admin/src/views/agent/agent-player-form.ts
index 30ba99b..fec8a4d 100644
--- a/apps/admin/src/views/agent/agent-player-form.ts
+++ b/apps/admin/src/views/agent/agent-player-form.ts
@@ -16,6 +16,7 @@ export interface AgentPlayerRow {
username: string;
status: string;
createdAt: string;
+ inviteCode?: string | null;
wallet?: { availableBalance: string; frozenBalance?: string };
}
diff --git a/apps/admin/src/views/agent/agent-sub-agent-form.ts b/apps/admin/src/views/agent/agent-sub-agent-form.ts
index 7446991..0a634dd 100644
--- a/apps/admin/src/views/agent/agent-sub-agent-form.ts
+++ b/apps/admin/src/views/agent/agent-sub-agent-form.ts
@@ -79,7 +79,6 @@ export function buildAgentSubAgentCreatePayload(form: AgentSubAgentCreateForm) {
username: form.username.trim(),
password: form.password,
creditLimit: form.creditLimit,
- cashbackRate: form.cashbackRate,
maxSingleDeposit: form.maxSingleDeposit > 0 ? form.maxSingleDeposit : undefined,
maxDailyDeposit: form.maxDailyDeposit > 0 ? form.maxDailyDeposit : undefined,
};
diff --git a/apps/admin/src/views/dashboard/DashboardMatches.vue b/apps/admin/src/views/dashboard/DashboardMatches.vue
index 55b8147..cf4a9e0 100644
--- a/apps/admin/src/views/dashboard/DashboardMatches.vue
+++ b/apps/admin/src/views/dashboard/DashboardMatches.vue
@@ -38,7 +38,7 @@ const mainTrendOption = computed(() =>
[
{
name: t('dash.chart_stake'),
- color: '#248f54',
+ color: '#d4d4d4',
values: s.value?.trend7d?.map((d) => toNum(d.stake)) ?? [],
},
{
@@ -62,7 +62,7 @@ const distributionOption = computed(() => {
const raw = s.value?.bets.todayByStatus ?? {};
const betColors: Record
-
-
-
+ = {
RESETTLE_REVERSE: 'wallet.tx_resettle',
DEPOSIT: 'wallet.tx_deposit',
WITHDRAW: 'wallet.tx_withdraw',
+ PLAYER_DEPOSIT: 'wallet.tx_deposit',
};
export function txTypeKey(type: string): string {
diff --git a/apps/player/src/views/LoginView.vue b/apps/player/src/views/LoginView.vue
index c0a7fc9..b4dd3c2 100644
--- a/apps/player/src/views/LoginView.vue
+++ b/apps/player/src/views/LoginView.vue
@@ -51,6 +51,13 @@ function continueBrowsing() {
const target = isGuestBrowsablePath(redirect) ? redirect || '/' : '/';
router.replace(target);
}
+
+function goRegister() {
+ router.push({
+ path: '/register',
+ query: route.query.redirect ? { redirect: route.query.redirect as string } : {},
+ });
+}
@@ -68,10 +75,13 @@ function continueBrowsing() {
-
@@ -144,6 +154,25 @@ label {
color: rgba(255, 255, 255, 0.75);
}
+.btn-skip-light {
+ position: absolute;
+ bottom: calc(20px + env(safe-area-inset-bottom));
+ left: 50%;
+ transform: translateX(-50%);
+ padding: 8px 16px;
+ border: none;
+ background: transparent;
+ color: rgba(255, 255, 255, 0.45);
+ font-size: 13px;
+ font-weight: 300;
+ cursor: pointer;
+ white-space: nowrap;
+}
+
+.btn-skip-light:active {
+ color: rgba(255, 255, 255, 0.65);
+}
+
.error {
color: var(--danger);
font-size: 13px;
diff --git a/apps/player/src/views/ProfileView.vue b/apps/player/src/views/ProfileView.vue
index b4b3fca..0e55bc4 100644
--- a/apps/player/src/views/ProfileView.vue
+++ b/apps/player/src/views/ProfileView.vue
@@ -3,7 +3,7 @@ import { ref, onMounted, computed } from 'vue';
import { useRouter, RouterLink } from 'vue-router';
import { useI18n } from 'vue-i18n';
import api from '../api';
-import { formatMoney } from '../utils/localeDisplay';
+import { formatMoney, formatMoneyCompact } from '../utils/localeDisplay';
import LocaleFlag from '../components/LocaleFlag.vue';
import { useAuthStore } from '../stores/auth';
import { useAppLocale } from '../composables/useAppLocale';
@@ -53,7 +53,7 @@ function runCountUp(target: number) {
const displayedBalance = computed(() =>
animating.value
? formatMoney(displayAmount.value, locale.value)
- : formatMoney(profile.value?.wallet?.availableBalance, locale.value),
+ : formatMoneyCompact(profile.value?.wallet?.availableBalance, locale.value),
);
async function fetchProfile() {
@@ -93,7 +93,7 @@ function logout() {
+
+
+
+
+
+
diff --git a/apps/player/src/components/UserAvatarMenu.vue b/apps/player/src/components/UserAvatarMenu.vue
index 29597f0..8a2aee4 100644
--- a/apps/player/src/components/UserAvatarMenu.vue
+++ b/apps/player/src/components/UserAvatarMenu.vue
@@ -45,6 +45,11 @@ function goEdit() {
router.push('/profile/edit');
}
+function goRecharge() {
+ close();
+ router.push('/wallet/recharge');
+}
+
function logout() {
close();
auth.logout();
@@ -60,6 +65,7 @@ function logout() {
@@ -139,6 +145,11 @@ function logout() {
background: rgba(255, 255, 255, 0.04);
}
+.menu-item.recharge {
+ color: var(--primary-light);
+ font-weight: 700;
+}
+
.menu-item.danger {
color: var(--danger);
}
diff --git a/apps/player/src/layouts/MainLayout.vue b/apps/player/src/layouts/MainLayout.vue
index ff5ee83..1bdfff6 100644
--- a/apps/player/src/layouts/MainLayout.vue
+++ b/apps/player/src/layouts/MainLayout.vue
@@ -188,6 +188,7 @@ watch(
display: flex;
gap: 6px;
align-items: center;
+ min-width: 0;
}
.header-actions :deep(.locale-switch:not(.compact)),
.header-actions :deep(.cash-chip),
@@ -213,6 +214,8 @@ watch(
font-weight: 700;
cursor: pointer;
transition: background 0.2s;
+ flex-shrink: 1;
+ min-width: 0;
}
.support-btn:active {
diff --git a/apps/player/src/main.ts b/apps/player/src/main.ts
index aac7029..98e3a6b 100644
--- a/apps/player/src/main.ts
+++ b/apps/player/src/main.ts
@@ -70,16 +70,26 @@ const i18n = createI18n({
},
auth: {
login: '登录',
+ register: '注册账号',
logout: '退出登录',
username: '账号',
password: '密码',
+ invite_code: '邀请码',
+ optional: '选填',
captcha_placeholder: 'Captcha',
captcha_refresh: '点击换一张',
- captcha_wrong: '验证码错误',
+ captcha_wrong: '请完成滑块验证',
+ slide_to_verify: '向右滑动完成验证',
+ click_to_verify: '点击验证',
+ verified: '验证成功',
login_required: '请先登录',
login_hint: '登录后可下注及访问更多功能',
go_login: '去登录',
- continue_browsing: '暂不登录，继续浏览',
+ go_register: '没有账号？立即注册',
+ have_account: '已有账号？去登录',
+ register_btn: '注册',
+ register_failed: '注册失败，请重试',
+ continue_browsing: '暂不登录',
username_placeholder: '请输入账号',
password_placeholder: '请输入密码',
login_btn: '登录',
@@ -99,7 +109,7 @@ const i18n = createI18n({
unsettled: '未结算',
available: '可用',
no_records: '暂无账单记录',
- tx_deposit: '人工存款',
+ tx_deposit: '充值',
tx_withdraw: '人工提款',
tx_adjust: '人工调整',
tx_bet_freeze: '投注冻结',
@@ -116,7 +126,7 @@ const i18n = createI18n({
stats_net: '净额',
stats_cashback: '反水',
filter_all: '全部',
- filter_deposit: '存款',
+ filter_deposit: '充值',
filter_withdraw: '提款',
filter_bet: '投注',
filter_cashback: '反水',
@@ -135,7 +145,7 @@ const i18n = createI18n({
detail_tx_id: '流水号',
detail_not_found: '账单不存在',
ref_bet: '投注',
- ref_deposit: '存款',
+ ref_deposit: '充值',
ref_withdraw: '提款',
view_cashbacks: '返水明细',
view_cashbacks_detail: '查看返水周期明细',
@@ -143,6 +153,42 @@ const i18n = createI18n({
detail_cashback_link: '查看返水明细',
ref_cashback: '返水批次',
},
+ recharge: {
+ title: '充值',
+ history: '记录',
+ history_title: '充值记录',
+ bank_transfer: '银行转账',
+ bank_name: '银行名称',
+ account_holder: '账户名',
+ account_number: '账号',
+ usdt_address: 'USDT 地址',
+ amount_label: '充值金额',
+ amount_placeholder: '请输入充值金额',
+ screenshot_label: '上传转账截图',
+ upload_hint: '点击上传截图（最大 5MB）',
+ compressing: '压缩中',
+ submit: '提交充值',
+ submitting: '提交中',
+ submitted: '充值已提交',
+ pending_review: '管理员正在审核，请耐心等待',
+ new_recharge: '继续充值',
+ no_methods: '暂无可用充值方式',
+ select_method: '请选择充值方式',
+ enter_amount: '请输入充值金额',
+ upload_screenshot: '请上传转账截图',
+ submit_failed: '提交失败，请重试',
+ file_must_be_image: '请上传图片文件',
+ file_too_large: '文件不能超过 10MB',
+ status_pending: '审核中',
+ status_approved: '已通过',
+ status_rejected: '已拒绝',
+ no_orders: '暂无充值记录',
+ credited: '实际到账',
+ reject_reason: '拒绝原因',
+ apply_time: '申请时间',
+ review_time: '审核时间',
+ remark: '审核备注',
+ },
cashback: {
title: '返水明细',
list_title: '发放明细',
@@ -398,16 +444,26 @@ const i18n = createI18n({
},
auth:
{ login: 'Login',
+ register: 'Create Account',
logout: 'Log out',
username: 'Username',
password: 'Password',
+ invite_code: 'Invitation Code',
+ optional: 'Optional',
captcha_placeholder: 'Captcha',
captcha_refresh: 'Click to refresh',
- captcha_wrong: 'Invalid captcha',
+ captcha_wrong: 'Please complete the slider verification',
+ slide_to_verify: 'Slide to verify',
+ click_to_verify: 'Click to verify',
+ verified: 'Verified',
login_required: 'Login Required',
login_hint: 'Log in to place bets and access more features',
go_login: 'Go to login',
- continue_browsing: 'Continue browsing',
+ go_register: 'No account? Register now',
+ have_account: 'Already have an account? Log in',
+ register_btn: 'Register',
+ register_failed: 'Registration failed, please try again',
+ continue_browsing: 'Skip login',
username_placeholder: 'Enter username',
password_placeholder: 'Enter password',
login_btn: 'Log In',
@@ -471,6 +527,42 @@ const i18n = createI18n({
ref_cashback: 'Cashback batch',
detail_cashback_link: 'View cashback details',
},
+ recharge: {
+ title: 'Recharge',
+ history: 'History',
+ history_title: 'Recharge History',
+ bank_transfer: 'Bank Transfer',
+ bank_name: 'Bank Name',
+ account_holder: 'Account Holder',
+ account_number: 'Account Number',
+ usdt_address: 'USDT Address',
+ amount_label: 'Amount',
+ amount_placeholder: 'Enter recharge amount',
+ screenshot_label: 'Upload Screenshot',
+ upload_hint: 'Click to upload screenshot (max 5MB)',
+ compressing: 'Compressing',
+ submit: 'Submit',
+ submitting: 'Submitting',
+ submitted: 'Recharge Submitted',
+ pending_review: 'Admin is reviewing, please wait',
+ new_recharge: 'New Recharge',
+ no_methods: 'No payment methods available',
+ select_method: 'Please select a payment method',
+ enter_amount: 'Please enter the amount',
+ upload_screenshot: 'Please upload a screenshot',
+ submit_failed: 'Submit failed, please retry',
+ file_must_be_image: 'Please upload an image file',
+ file_too_large: 'File exceeds 10MB',
+ status_pending: 'Pending',
+ status_approved: 'Approved',
+ status_rejected: 'Rejected',
+ no_orders: 'No recharge records',
+ credited: 'Credited',
+ reject_reason: 'Rejection reason',
+ apply_time: 'Apply time',
+ review_time: 'Review time',
+ remark: 'Remark',
+ },
cashback: {
title: 'Cashback Details',
list_title: 'Payout details',
@@ -732,16 +824,26 @@ const i18n = createI18n({
},
auth: {
login: 'Log Masuk',
+ register: 'Daftar Akaun',
logout: 'Log Keluar',
username: 'Nama Pengguna',
password: 'Kata Laluan',
+ invite_code: 'Kod Jemputan',
+ optional: 'Pilihan',
captcha_placeholder: 'Captcha',
captcha_refresh: 'Klik untuk muat semula',
- captcha_wrong: 'Kod pengesahan salah',
+ captcha_wrong: 'Sila lengkapkan pengesahan gelongsor',
+ slide_to_verify: 'Gelongsor untuk mengesahkan',
+ click_to_verify: 'Klik untuk mengesahkan',
+ verified: 'Disahkan',
login_required: 'Sila Log Masuk',
login_hint: 'Log masuk untuk bertaruh dan akses lebih banyak ciri',
go_login: 'Pergi log masuk',
- continue_browsing: 'Teruskan melayari',
+ go_register: 'Tiada akaun? Daftar sekarang',
+ have_account: 'Sudah ada akaun? Log masuk',
+ register_btn: 'Daftar',
+ register_failed: 'Pendaftaran gagal, sila cuba lagi',
+ continue_browsing: 'Langkau log masuk',
username_placeholder: 'Masukkan nama pengguna',
password_placeholder: 'Masukkan kata laluan',
login_btn: 'Log Masuk',
@@ -805,6 +907,42 @@ const i18n = createI18n({
ref_cashback: 'Batch rebat',
detail_cashback_link: 'Lihat butiran rebat',
},
+ recharge: {
+ title: 'Topup',
+ history: 'Sejarah',
+ history_title: 'Sejarah Topup',
+ bank_transfer: 'Pindahan Bank',
+ bank_name: 'Nama Bank',
+ account_holder: 'Pemegang Akaun',
+ account_number: 'Nombor Akaun',
+ usdt_address: 'Alamat USDT',
+ amount_label: 'Jumlah',
+ amount_placeholder: 'Masukkan jumlah topup',
+ screenshot_label: 'Muat Naik Screenshot',
+ upload_hint: 'Klik untuk muat naik (maks 5MB)',
+ compressing: 'Memampat',
+ submit: 'Hantar',
+ submitting: 'Menghantar',
+ submitted: 'Topup Dihantar',
+ pending_review: 'Admin sedang menyemak, sila tunggu',
+ new_recharge: 'Topup Baru',
+ no_methods: 'Tiada kaedah pembayaran tersedia',
+ select_method: 'Sila pilih kaedah pembayaran',
+ enter_amount: 'Sila masukkan jumlah',
+ upload_screenshot: 'Sila muat naik screenshot',
+ submit_failed: 'Gagal, sila cuba lagi',
+ file_must_be_image: 'Sila muat naik fail imej',
+ file_too_large: 'Fail melebihi 10MB',
+ status_pending: 'Menunggu',
+ status_approved: 'Diluluskan',
+ status_rejected: 'Ditolak',
+ no_orders: 'Tiada rekod topup',
+ credited: 'Dikreditkan',
+ reject_reason: 'Sebab penolakan',
+ apply_time: 'Masa permohonan',
+ review_time: 'Masa semakan',
+ remark: 'Catatan',
+ },
cashback: {
title: 'Butiran Rebat',
list_title: 'Butiran pembayaran',
diff --git a/apps/player/src/router/index.ts b/apps/player/src/router/index.ts
index e5f7d10..0333502 100644
--- a/apps/player/src/router/index.ts
+++ b/apps/player/src/router/index.ts
@@ -5,6 +5,7 @@ const router = createRouter({
history: createWebHistory(),
routes: [
{ path: '/login', component: () => import('../views/LoginView.vue') },
+ { path: '/register', component: () => import('../views/RegisterView.vue') },
{
path: '/',
component: () => import('../layouts/MainLayout.vue'),
@@ -20,6 +21,8 @@ const router = createRouter({
{ path: 'wallet', component: () => import('../views/WalletView.vue'), meta: { keepAlive: true, requiresAuth: true } },
{ path: 'wallet/detail', component: () => import('../views/WalletDetailView.vue'), meta: { requiresAuth: true } },
{ path: 'wallet/cashbacks', component: () => import('../views/CashbackRecordsView.vue'), meta: { requiresAuth: true } },
+ { path: 'wallet/recharge', component: () => import('../views/RechargeView.vue'), meta: { requiresAuth: true } },
+ { path: 'wallet/recharge/history', component: () => import('../views/RechargeHistoryView.vue'), meta: { requiresAuth: true } },
{ path: 'wallet/transactions/:transactionId', component: () => import('../views/WalletTransactionDetailView.vue'), meta: { requiresAuth: true } },
{ path: 'profile', component: () => import('../views/ProfileView.vue'), meta: { keepAlive: true, requiresAuth: true } },
{ path: 'profile/cashbacks', component: () => import('../views/CashbackRecordsView.vue'), meta: { requiresAuth: true } },
@@ -31,7 +34,7 @@ const router = createRouter({
router.beforeEach((to) => {
const auth = useAuthStore();
- if (to.path === '/login' && auth.token) return '/';
+ if ((to.path === '/login' || to.path === '/register') && auth.token) return '/';
// 需要登录的页面 — 未登录时弹出登录提示，留在当前页
if (to.meta.requiresAuth && !auth.token) {
auth.showLoginPrompt(to.fullPath);
diff --git a/apps/player/src/stores/auth.ts b/apps/player/src/stores/auth.ts
index 05c562c..256a5e2 100644
--- a/apps/player/src/stores/auth.ts
+++ b/apps/player/src/stores/auth.ts
@@ -32,6 +32,23 @@ export const useAuthStore = defineStore('auth', () => {
return returnTo;
}
+ async function register(username: string, password: string, inviteCode?: string) {
+ const locale = localStorage.getItem('locale') || 'zh-CN';
+ const code = inviteCode?.trim();
+ const { data } = await api.post('/player/auth/register', {
+ username,
+ password,
+ locale,
+ ...(code ? { inviteCode: code } : {}),
+ });
+ token.value = data.data.token;
+ user.value = data.data.user;
+ localStorage.setItem('token', token.value);
+ localStorage.setItem('user', JSON.stringify(user.value));
+ loginReturnTo.value = '';
+ loginPromptVisible.value = false;
+ }
+
function logout() {
token.value = '';
user.value = null;
@@ -40,7 +57,7 @@ export const useAuthStore = defineStore('auth', () => {
}
return {
- token, user, login, logout,
+ token, user, login, register, logout,
loginPromptVisible, loginReturnTo,
showLoginPrompt, hideLoginPrompt,
};
diff --git a/apps/player/src/utils/walletTx.ts b/apps/player/src/utils/walletTx.ts
index 8fc3146..61dbe90 100644
--- a/apps/player/src/utils/walletTx.ts
+++ b/apps/player/src/utils/walletTx.ts
@@ -16,6 +16,7 @@ export const TX_KEY_MAP: Record
+
+
+ {{ validated ? t('auth.verified') : t('auth.click_to_verify') }}
+
+
+
+
+
+
+
![]()
@@ -197,15 +202,9 @@ function logout() {
margin-left: -5px;
margin-right: -5px;
line-height: 0;
- cursor: pointer;
box-sizing: border-box;
}
-.wallet-banner:active .wallet-banner-img {
- filter: brightness(0.9);
- transition: filter 0.1s;
-}
-
.wallet-banner-img {
width: 100%;
height: auto;
@@ -265,8 +264,6 @@ function logout() {
.card-balance {
margin: 0;
- width: 100%;
- max-width: 100%;
font-size: clamp(22px, 6.8vw, 36px);
font-weight: 900;
letter-spacing: -0.02em;
@@ -283,6 +280,12 @@ function logout() {
drop-shadow(0 0 10px rgba(212, 175, 55, 0.22));
}
+.card-balance-row {
+ display: flex;
+ align-items: center;
+ gap: 8px;
+}
+
.card-foot {
display: flex;
align-items: flex-end;
@@ -336,6 +339,30 @@ function logout() {
white-space: nowrap;
}
+.card-recharge-btn {
+ z-index: 3;
+ background: linear-gradient(135deg, #f0d060, #d4a830);
+ color: #1a1a1a;
+ border: none;
+ border-radius: 16px;
+ padding: 5px 14px;
+ font-size: 12px;
+ font-weight: 800;
+ letter-spacing: 0.04em;
+ cursor: pointer;
+ box-shadow:
+ 0 2px 8px rgba(0, 0, 0, 0.4),
+ 0 0 12px rgba(212, 175, 55, 0.25);
+ pointer-events: auto;
+ transition: transform 0.1s;
+ white-space: nowrap;
+ flex-shrink: 0;
+}
+
+.card-recharge-btn:active {
+ transform: scale(0.95);
+}
+
.settings-group {
background: var(--bg-card);
border: 1px solid var(--border);
diff --git a/apps/player/src/views/RechargeHistoryView.vue b/apps/player/src/views/RechargeHistoryView.vue
new file mode 100644
index 0000000..5b5ee94
--- /dev/null
+++ b/apps/player/src/views/RechargeHistoryView.vue
@@ -0,0 +1,208 @@
+
+
+
+ ,
+): string {
+ const raw = Object.keys(params)
+ .sort()
+ .reduce((acc, key) => {
+ const value = params[key];
+ if (value != null && value.trim() !== '') {
+ return acc + key + value;
+ }
+ return acc;
+ }, '');
+
+ return crypto.createHash('md5').update(raw + password, 'utf8').digest('hex').toLowerCase();
+}
+```
+
+### 6.3 创蓝 Client
+
+```typescript
+// src/lib/chuanglan/client.ts
+import { chuanglanConfig } from './config';
+import { generateChuanglanSign } from './sign';
+import type { ChuanglanSendResponse, SmsSendResult } from '@/types/sms';
+
+export async function sendChuanglanSms(
+ mobile: string,
+ msg: string,
+ uid?: string,
+): Promise {
+ const nonce = String(Date.now());
+
+ const body: Record = {
+ account: chuanglanConfig.account,
+ mobile,
+ msg,
+ };
+ if (uid) body.uid = uid;
+
+ const sign = generateChuanglanSign(chuanglanConfig.password, { ...body, nonce });
+
+ const controller = new AbortController();
+ const timer = setTimeout(() => controller.abort(), chuanglanConfig.readTimeoutMs);
+
+ try {
+ const res = await fetch(chuanglanConfig.endpoint, {
+ method: 'POST',
+ headers: {
+ 'Content-Type': 'application/json',
+ nonce,
+ sign,
+ },
+ body: JSON.stringify(body),
+ signal: controller.signal,
+ });
+
+ const data = (await res.json()) as ChuanglanSendResponse;
+
+ if (data.code === '0') {
+ return {
+ success: true,
+ code: data.code,
+ message: 'OK',
+ messageId: data.data?.messageId,
+ };
+ }
+
+ return { success: false, code: data.code, message: data.message };
+ } catch (err) {
+ const message = err instanceof Error ? err.message : 'Unknown error';
+ return { success: false, code: 'HTTP_ERROR', message };
+ } finally {
+ clearTimeout(timer);
+ }
+}
+```
+
+### 6.4 短信模板
+
+与 babylive-backend `sms.verify` 配置一致：
+
+```typescript
+// src/lib/sms/templates.ts
+import type { SmsLang } from '@/types/sms';
+
+const TEMPLATES: Record = {
+ default: '您的验证码是：{code}。5分钟内有效。',
+ zh: '您的验证码是：{code}。5分钟内有效。',
+ en: 'Your verification code is {code}. Valid for 5 minutes.',
+ vi: 'Mã xác minh của bạn là {code}. Có hiệu lực trong 5 phút.',
+ ms: 'Kod pengesahan anda ialah {code}. Sah selama 5 minit.',
+ kh: 'កូដផ្ទៀងផ្ទាត់របស់អ្នកគឺ {code} ។ មានសុពលភាពរយៈពេល ៥ នាទី។',
+};
+
+export function renderVerifySms(lang: SmsLang | undefined, code: string): string {
+ const key = lang?.trim() || 'zh';
+ const tpl = TEMPLATES[key] ?? TEMPLATES.default ?? TEMPLATES.zh;
+ return tpl.replace('{code}', code);
+}
+```
+
+```typescript
+// src/lib/sms/code.ts
+
+export function generateSixDigitCode(): string {
+ return String(Math.floor(Math.random() * 1_000_000)).padStart(6, '0');
+}
+```
+
+### 6.5 业务 Service（Redis）
+
+```typescript
+// src/lib/sms/service.ts
+import { randomUUID } from 'node:crypto';
+import { sendChuanglanSms } from '@/lib/chuanglan/client';
+import { smsConfig } from '@/lib/chuanglan/config';
+import { generateSixDigitCode } from './code';
+import { renderVerifySms } from './templates';
+import type { SmsLang } from '@/types/sms';
+
+// 按项目替换为 ioredis / @upstash/redis 等
+import { redis } from '@/lib/redis';
+
+const codeKey = (sessionId: string) => `sms:code:${sessionId}`;
+const phoneRateKey = (phone: string) => `sms:rate:phone:${phone}`;
+const ipRateKey = (ip: string) => `sms:rate:ip:${ip}`;
+
+export class SmsRateLimitError extends Error {
+ constructor() {
+ super('发送太频繁，请60秒后再试');
+ this.name = 'SmsRateLimitError';
+ }
+}
+
+export class SmsSendError extends Error {
+ code: string;
+ constructor(code: string, message: string) {
+ super(message);
+ this.name = 'SmsSendError';
+ this.code = code;
+ }
+}
+
+export async function sendVerifyCode(params: {
+ phone: string;
+ lang?: SmsLang;
+ clientIp: string;
+}): Promise<{ sessionId: string }> {
+ const { phone, lang, clientIp } = params;
+
+ const [phoneLimited, ipLimited] = await Promise.all([
+ redis.exists(phoneRateKey(phone)),
+ redis.exists(ipRateKey(clientIp)),
+ ]);
+ if (phoneLimited || ipLimited) throw new SmsRateLimitError();
+
+ const code = generateSixDigitCode();
+ const sessionId = randomUUID();
+ const msg = renderVerifySms(lang, code);
+
+ const result = await sendChuanglanSms(phone, msg, sessionId);
+ if (!result.success) {
+ throw new SmsSendError(result.code, result.message);
+ }
+
+ await Promise.all([
+ redis.set(codeKey(sessionId), JSON.stringify({ phone, code }), 'EX', smsConfig.codeTtlSeconds),
+ redis.set(phoneRateKey(phone), '1', 'EX', smsConfig.rateLimitSeconds),
+ redis.set(ipRateKey(clientIp), '1', 'EX', smsConfig.rateLimitSeconds),
+ ]);
+
+ return { sessionId };
+}
+
+export async function verifyCode(params: {
+ phone: string;
+ code: string;
+ sessionId: string;
+}): Promise {
+ const raw = await redis.get(codeKey(params.sessionId));
+ if (!raw) throw new Error('验证码已过期');
+
+ const cached = JSON.parse(raw) as { phone: string; code: string };
+ if (cached.phone !== params.phone || cached.code !== params.code) {
+ throw new Error('验证码错误');
+ }
+
+ await redis.del(codeKey(params.sessionId));
+}
+```
+
+---
+
+## 7. API Route（Next.js 示例）
+
+### 7.1 发送验证码
+
+```typescript
+// src/app/api/sms/send/route.ts
+import { NextRequest, NextResponse } from 'next/server';
+import { sendVerifyCode, SmsRateLimitError, SmsSendError } from '@/lib/sms/service';
+import type { SendSmsCodeRequest } from '@/types/sms';
+
+function getClientIp(req: NextRequest): string {
+ return (
+ req.headers.get('x-forwarded-for')?.split(',')[0]?.trim()
+ || req.headers.get('x-real-ip')
+ || '0.0.0.0'
+ );
+}
+
+export async function POST(req: NextRequest) {
+ const body = (await req.json()) as SendSmsCodeRequest;
+
+ if (!body.phone?.trim()) {
+ return NextResponse.json({ message: 'phone 必填' }, { status: 400 });
+ }
+
+ try {
+ const { sessionId } = await sendVerifyCode({
+ phone: body.phone.trim(),
+ lang: body.lang,
+ clientIp: getClientIp(req),
+ });
+ return NextResponse.json({ sessionId });
+ } catch (err) {
+ if (err instanceof SmsRateLimitError) {
+ return NextResponse.json({ message: err.message }, { status: 429 });
+ }
+ if (err instanceof SmsSendError) {
+ return NextResponse.json({ message: err.message, code: err.code }, { status: 502 });
+ }
+ return NextResponse.json({ message: '服务器错误' }, { status: 500 });
+ }
+}
+```
+
+### 7.2 校验验证码
+
+```typescript
+// src/app/api/sms/verify/route.ts
+import { NextRequest, NextResponse } from 'next/server';
+import { verifyCode } from '@/lib/sms/service';
+import type { VerifySmsCodeRequest } from '@/types/sms';
+
+export async function POST(req: NextRequest) {
+ const body = (await req.json()) as VerifySmsCodeRequest;
+
+ if (!body.phone || !body.code || !body.sessionId) {
+ return NextResponse.json({ message: '参数不完整' }, { status: 400 });
+ }
+
+ try {
+ await verifyCode(body);
+ return NextResponse.json({ ok: true });
+ } catch (err) {
+ const message = err instanceof Error ? err.message : '校验失败';
+ return NextResponse.json({ message }, { status: 400 });
+ }
+}
+```
+
+### 7.3 对外 API 契约
+
+**发送**
+
+```
+POST /api/sms/send
+Content-Type: application/json
+
+{ "phone": "8613800138000", "lang": "zh" }
+
+→ 200 { "sessionId": "uuid" }
+→ 429 { "message": "发送太频繁，请60秒后再试" }
+→ 502 { "message": "...", "code": "创蓝错误码" }
+```
+
+**校验**
+
+```
+POST /api/sms/verify
+Content-Type: application/json
+
+{ "phone": "8613800138000", "code": "123456", "sessionId": "uuid" }
+
+→ 200 { "ok": true }
+→ 400 { "message": "验证码错误或已过期" }
+```
+
+---
+
+## 8. 前端调用
+
+### 8.1 API Client
+
+```typescript
+// src/lib/api/sms.ts
+import type { SendSmsCodeResponse, SmsLang, VerifySmsCodeResponse } from '@/types/sms';
+
+export async function sendSmsCode(phone: string, lang: SmsLang = 'zh'): Promise {
+ const res = await fetch('/api/sms/send', {
+ method: 'POST',
+ headers: { 'Content-Type': 'application/json' },
+ body: JSON.stringify({ phone, lang }),
+ });
+
+ const json = await res.json();
+ if (!res.ok) throw new Error(json.message ?? '发送失败');
+ return (json as SendSmsCodeResponse).sessionId;
+}
+
+export async function verifySmsCode(
+ phone: string,
+ code: string,
+ sessionId: string,
+): Promise {
+ const res = await fetch('/api/sms/verify', {
+ method: 'POST',
+ headers: { 'Content-Type': 'application/json' },
+ body: JSON.stringify({ phone, code, sessionId }),
+ });
+
+ const json = await res.json();
+ if (!res.ok) throw new Error(json.message ?? '校验失败');
+ void json as VerifySmsCodeResponse;
+}
+```
+
+### 8.2 React Hook 示例
+
+```typescript
+// src/hooks/use-sms-code.ts
+'use client';
+
+import { useCallback, useRef, useState } from 'react';
+import { sendSmsCode } from '@/lib/api/sms';
+import type { SmsLang } from '@/types/sms';
+
+const COOLDOWN_SECONDS = 60;
+
+export function useSmsCode(lang: SmsLang = 'zh') {
+ const [sessionId, setSessionId] = useState(null);
+ const [countdown, setCountdown] = useState(0);
+ const [sending, setSending] = useState(false);
+ const [error, setError] = useState(null);
+ const timerRef = useRef | null>(null);
+
+ const startCountdown = useCallback(() => {
+ setCountdown(COOLDOWN_SECONDS);
+ timerRef.current = setInterval(() => {
+ setCountdown((prev) => {
+ if (prev <= 1) {
+ if (timerRef.current) clearInterval(timerRef.current);
+ return 0;
+ }
+ return prev - 1;
+ });
+ }, 1000);
+ }, []);
+
+ const send = useCallback(async (phone: string) => {
+ if (countdown > 0 || sending) return;
+ setSending(true);
+ setError(null);
+ try {
+ const id = await sendSmsCode(phone, lang);
+ setSessionId(id);
+ startCountdown();
+ } catch (err) {
+ setError(err instanceof Error ? err.message : '发送失败');
+ } finally {
+ setSending(false);
+ }
+ }, [countdown, sending, lang, startCountdown]);
+
+ return { sessionId, countdown, sending, error, send };
+}
+```
+
+页面中使用：
+
+```tsx
+const { sessionId, countdown, sending, error, send } = useSmsCode('zh');
+
+
+
+// 提交表单时带上 sessionId + code 调 /api/sms/verify 或合并进登录/注册接口
+```
+
+---
+
+## 9. 手机号格式
+
+- 国际短信建议带国家码：`8613800138000`（`86` + 11 位）
+- 前端可在提交前统一格式化，或在 `service.ts` 中做 normalize
+- 创蓝账号为国际网关（`sgap.253.com`），非中国大陆号段需确认创蓝侧已开通对应路由
+
+---
+
+## 10. 业务规则（与 babylive 对齐）
+
+| 规则 | 值 |
+|------|-----|
+| 验证码位数 | 6 位数字 |
+| 验证码有效期 | 5 分钟 |
+| 同手机号冷却 | 60 秒 |
+| 同 IP 冷却 | 60 秒 |
+| 校验成功后 | 立即删除缓存（一次性） |
+
+---
+
+## 11. 签名自测
+
+接入后用固定参数验证签名是否与 Java 端一致：
+
+```typescript
+import { generateChuanglanSign } from '@/lib/chuanglan/sign';
+
+const sign = generateChuanglanSign('your_password', {
+ account: 'your_account',
+ mobile: '8613800138000',
+ msg: '您的验证码是：123456。5分钟内有效。',
+ uid: 'test-session-001',
+ nonce: '1718000000123',
+});
+
+console.log(sign);
+// 应与 Java SignUtil.generateSign 输出完全相同
+```
+
+检查清单：
+
+- [ ] key 字典序排序
+- [ ] 空 `uid` 不参与签名
+- [ ] `nonce` 在 Header + 签名参数，不在 Body
+- [ ] MD5 32 位小写
+- [ ] UTF-8 编码
+
+---
+
+## 12. 安全与运维
+
+1. `CHUANGLAN_*` 仅服务端环境变量，不进 `NEXT_PUBLIC_*`
+2. 日志中手机号脱敏、禁止打印验证码明文
+3. 生产环境 Redis 必开；无 Redis 时不可用内存 Map（Serverless 多实例会失效）
+4. `uid` / `sessionId` 建议用 UUID，便于与创蓝 `messageId` 对账
+5. 监控创蓝 `code` 分布与 `HTTP_ERROR` 比例
+
+---
+
+## 13. 接入步骤速查
+
+```
+1. 配置 .env.local（创蓝账号 + Redis）
+2. 复制 lib/chuanglan/*（sign + client）
+3. 复制 lib/sms/*（templates + service）
+4. 添加 /api/sms/send 与 /api/sms/verify
+5. 前端 useSmsCode + 表单提交携带 sessionId
+6. 跑签名自测，发一条真实短信验证
+```
+
+新项目按此文档从零接入即可，**无需依赖 babylive-backend 运行时**；签名算法以该仓库 `ChuanglanClient.java` 为准。
diff --git a/docs/手动充值功能说明.md b/docs/手动充值功能说明.md
new file mode 100644
index 0000000..afa8e75
--- /dev/null
+++ b/docs/手动充值功能说明.md
@@ -0,0 +1,269 @@
+## 手动充值功能说明文档
+
+---
+
+### 一、功能概述
+
+手动充值功能允许玩家通过银行转账或USDT方式进行充值，管理员在后台审核并确认充值后，系统自动为玩家上分。
+
+**核心流程**：
+
+```
+管理员配置收款方式（银行/USDT）
+ ↓
+玩家选择充值方式，输入金额，上传转账截图
+ ↓
+生成充值订单（状态：PENDING 审核中）
+ ↓
+管理员审核充值记录
+ ├─ 批准 → 自动给玩家钱包上分（可调整金额）
+ └─ 拒绝 → 记录拒绝原因
+```
+
+---
+
+### 二、数据库表结构
+
+#### `payment_methods` — 收款方式配置表
+
+| 字段 | 类型 | 说明 |
+|------|------|------|
+| `id` | BigInt | 主键 |
+| `method_type` | VARCHAR(20) | 类型：`BANK`（银行）/ `USDT` |
+| `bank_name` | VARCHAR(128) | 银行名称（BANK 类型使用） |
+| `account_holder` | VARCHAR(128) | 银行账户名（BANK 类型使用） |
+| `account_number` | VARCHAR(128) | 银行账号（BANK 类型使用） |
+| `usdt_address` | VARCHAR(256) | USDT 地址（USDT 类型使用） |
+| `qr_code_url` | VARCHAR(500) | USDT 二维码图片 URL（USDT 类型使用） |
+| `display_name` | VARCHAR(128) | 展示名称 |
+| `sort_order` | INT | 排序序号，越小越靠前 |
+| `is_active` | BOOLEAN | 是否启用（管理员可见性） |
+| `show_on_player` | BOOLEAN | 是否对玩家展示 |
+| `created_by` | BigInt | 创建者 ID |
+| `created_at` / `updated_at` | DateTime | 创建/更新时间 |
+
+#### `deposit_orders` — 充值订单表
+
+| 字段 | 类型 | 说明 |
+|------|------|------|
+| `id` | BigInt | 主键 |
+| `order_no` | VARCHAR(64) | 订单号（唯一），格式：`DEP{timestamp}{random}` |
+| `player_id` | BigInt | 玩家 ID |
+| `payment_method_id` | BigInt | 关联的收款方式 ID |
+| `method_type` | VARCHAR(20) | 冗余的类型（BANK/USDT），便于筛选 |
+| `amount` | DECIMAL(18,4) | 玩家申报的充值金额 |
+| `screenshot_url` | VARCHAR(500) | 转账截图 URL |
+| `status` | VARCHAR(20) | 状态：`PENDING` / `APPROVED` / `REJECTED` |
+| `approved_amount` | DECIMAL(18,4) | 实际批准的金额（批准时写入，可能与申报金额不同） |
+| `reviewer_id` | BigInt | 审核人 ID |
+| `reviewed_at` | DateTime | 审核时间 |
+| `reject_reason` | VARCHAR(500) | 拒绝原因 |
+| `remark` | VARCHAR(500) | 备注 |
+| `created_at` / `updated_at` | DateTime | 创建/更新时间 |
+
+---
+
+### 三、管理后台操作
+
+#### 3.1 配置收款方式
+
+**入口**：管理后台左侧菜单 → 「收款方式」
+
+支持两种类型：
+
+**银行转账**：
+- 填写银行名称（如：工商银行）
+- 填写账户持有人姓名
+- 填写银行账号
+- 设置展示名称（可选）
+- 设置排序、是否启用、是否展示给玩家
+
+**USDT 充值**：
+- 填写 USDT 收款地址
+- 上传 USDT 二维码图片（通过后台媒体库上传，类别为 `payments`）
+- 设置展示名称（可选）
+- 设置排序、是否启用、是否展示给玩家
+
+**操作说明**：
+- `Active` 开关：控制该收款方式是否启用（管理员可见）
+- `Show Player` 开关：控制是否在前台展示给玩家
+- 一个收款方式可以同时启用但不展示给玩家（用于暂停充值）
+- 支持创建多个同类型的收款方式
+
+#### 3.2 审核充值订单
+
+**入口**：管理后台左侧菜单 → 「充值审核」
+
+**列表功能**：
+- 显示所有充值订单，包含：订单号、玩家、收款方式类型、金额、截图、状态、批准金额、审核人、时间
+- 支持按状态筛选（全部/待审核/已批准/已拒绝）
+- 支持按类型筛选（全部/银行/USDT）
+- 支持按玩家用户名搜索
+- 点击截图缩略图可放大查看
+
+**批准操作**：
+1. 点击订单行的「Approve」按钮
+2. 在弹窗中查看截图
+3. 系统默认填入玩家申报的金额，管理员可根据截图实际情况调整金额
+4. 可选填写备注
+5. 点击「Confirm Approve」确认
+
+**批准后自动执行**：
+- 订单状态变为 `APPROVED`
+- 系统自动调用钱包充值服务，将批准金额添加到玩家可用余额
+- 生成一条钱包交易记录，类型为 `PLAYER_DEPOSIT`
+- 记录审核人和审核时间
+
+**拒绝操作**：
+1. 点击订单行的「Reject」按钮
+2. 在弹窗中必须填写拒绝原因
+3. 点击「Confirm Reject」确认
+
+**拒绝后**：
+- 订单状态变为 `REJECTED`
+- 记录拒绝原因和审核人
+- 玩家不会收到任何资金
+
+---
+
+### 四、玩家端操作
+
+#### 4.1 充值入口
+
+- 玩家登录后，进入「账单」页面
+- 顶部有一个「+ 充值」按钮，点击进入充值页面
+- 或直接访问 `/wallet/recharge`
+
+#### 4.2 充值流程
+
+1. **选择充值方式**：顶部有「银行转账」和「USDT」两个标签切换
+2. **选择收款账户**：系统展示管理员配置的可用收款方式列表，点击选中
+3. **查看收款信息**：
+ - 银行转账：显示银行名称、账户持有人、银行账号（支持点击复制）
+ - USDT：显示 USDT 地址（支持点击复制）和二维码图片
+4. **输入充值金额**：输入实际转账的金额
+5. **上传转账截图**：
+ - 点击上传区域选择图片
+ - 前端自动压缩图片（目标大小 ≤1MB，最大分辨率 1920px）
+ - 原文件限制 10MB，压缩后限制 5MB
+ - 支持预览和删除已选截图
+6. **提交充值**：点击提交按钮，系统创建充值订单
+7. **成功提示**：显示订单号，提示等待管理员审核
+
+#### 4.3 查看充值记录
+
+- 充值页面右上角有「记录」链接，或访问 `/wallet/recharge/history`
+- 显示所有充值订单列表，每条订单显示：
+ - 收款方式类型标签
+ - 充值金额
+ - 状态（审核中/已通过/已拒绝）
+ - 收款方式名称、提交时间
+ - 如果批准金额与申报金额不同，显示「实际到账」金额
+ - 如果被拒绝，显示拒绝原因
+- 支持下拉刷新
+
+---
+
+### 五、API 接口列表
+
+#### 管理后台接口
+
+| 方法 | 路径 | 权限 | 说明 |
+|------|------|------|------|
+| `POST` | `/admin/payment-methods` | `deposit.manage` | 创建收款方式 |
+| `GET` | `/admin/payment-methods` | `deposit.manage` | 查看所有收款方式 |
+| `PUT` | `/admin/payment-methods/:id` | `deposit.manage` | 更新收款方式 |
+| `DELETE` | `/admin/payment-methods/:id` | `deposit.manage` | 停用收款方式（软删除） |
+| `GET` | `/admin/deposit-orders` | `deposit.review` | 分页查看充值订单 |
+| `POST` | `/admin/deposit-orders/:id/approve` | `deposit.review` | 批准充值订单 |
+| `POST` | `/admin/deposit-orders/:id/reject` | `deposit.review` | 拒绝充值订单 |
+
+**充值订单列表查询参数**：
+- `page` — 页码（默认 1）
+- `pageSize` — 每页数量（默认 20，最大 100）
+- `status` — 状态筛选：`PENDING` / `APPROVED` / `REJECTED`
+- `keyword` — 玩家用户名关键词
+- `methodType` — 类型筛选：`BANK` / `USDT`
+- `dateFrom` / `dateTo` — 日期范围（ISO 格式）
+
+**批准充值订单请求体**：
+```json
+{
+ "approvedAmount": 100.00, // 可选，不传则使用玩家申报金额
+ "remark": "备注信息" // 可选
+}
+```
+
+**拒绝充值订单请求体**：
+```json
+{
+ "reason": "截图金额与申报金额不符" // 必填
+}
+```
+
+#### 玩家端接口
+
+| 方法 | 路径 | 认证 | 说明 |
+|------|------|------|------|
+| `GET` | `/player/payment-methods` | 需要 | 查看可用的收款方式列表 |
+| `POST` | `/player/deposit-orders` | 需要 | 提交充值订单（multipart/form-data） |
+| `GET` | `/player/deposit-orders` | 需要 | 查看自己的充值记录 |
+
+**提交充值订单**（multipart/form-data）：
+- `paymentMethodId` — 收款方式 ID
+- `amount` — 充值金额
+- `screenshot` — 转账截图图片文件（最大 5MB，仅接受图片类型）
+
+**查看收款方式请求参数**：
+- `methodType` — 可选，筛选类型：`BANK` / `USDT`
+
+---
+
+### 六、文件存储
+
+充值相关截图存储在 `uploads/deposits/` 目录下，文件命名格式：`{timestamp}-{random8}.{ext}`
+
+USDT 二维码图片通过管理员上传接口上传，存储在 `uploads/payments/` 目录下。
+
+**上传大小限制**：
+- 管理员上传（USDT 二维码）：5MB
+- 玩家上传（充值截图）：5MB（前端压缩后），原文件 10MB
+
+---
+
+### 七、错误码
+
+| 错误码 | 说明 |
+|--------|------|
+| `INVALID_METHOD_TYPE` | 无效的收款方式类型 |
+| `PAYMENT_METHOD_NOT_FOUND` | 收款方式不存在或已停用 |
+| `ORDER_NOT_FOUND` | 充值订单不存在 |
+| `ORDER_NOT_PENDING` | 订单不是待审核状态 |
+| `REASON_REQUIRED` | 拒绝原因为必填项 |
+| `SCREENSHOT_REQUIRED` | 转账截图为必填项 |
+| `FILE_MUST_BE_IMAGE` | 必须上传图片文件 |
+| `INVALID_AMOUNT` | 金额无效 |
+| `PAYMENT_METHOD_REQUIRED` | 未选择收款方式 |
+
+---
+
+### 八、权限配置
+
+新增两个后台权限码，需要在数据库中通过种子数据或手动添加到 `permissions` 表：
+
+| 权限码 | 说明 |
+|--------|------|
+| `deposit.manage` | 管理收款方式 |
+| `deposit.review` | 审核充值订单 |
+
+并将这些权限分配给需要操作充值功能的管理员角色（通过 `role_permissions` 表关联）。
+
+---
+
+### 九、注意事项
+
+1. **金额调整**：批准充值时，管理员可以调整实际充值金额。当玩家输入的金额与截图显示的不一致时，以截图为准进行调整。
+2. **并发审核**：批准操作在数据库事务中执行，会检查订单状态是否为 `PENDING`，防止多人同时审核同一笔订单。
+3. **停用收款方式**：删除操作为软删除（设置 `isActive=false` 和 `showOnPlayer=false`），不会删除历史记录。
+4. **截图审核**：管理员应仔细核对截图中的转账金额、时间、收款账户是否与配置的收款方式一致。
+5. **前端图片压缩**：使用 `browser-image-compression` 库在浏览器端压缩图片，减少上传时间和服务器存储压力。
diff --git a/packages/shared/src/api-errors.ts b/packages/shared/src/api-errors.ts
index 496efc9..a8d65f5 100644
--- a/packages/shared/src/api-errors.ts
+++ b/packages/shared/src/api-errors.ts
@@ -349,6 +349,46 @@ export const API_ERROR_MESSAGES = {
'en-US': 'Username already taken',
'ms-MY': 'Nama pengguna sudah digunakan',
},
+ INVITE_CODE_REQUIRED: {
+ 'zh-CN': '请填写邀请码',
+ 'en-US': 'Invitation code is required',
+ 'ms-MY': 'Kod jemputan diperlukan',
+ },
+ INVITE_CODE_INVALID: {
+ 'zh-CN': '邀请码无效或已失效',
+ 'en-US': 'Invalid or inactive invitation code',
+ 'ms-MY': 'Kod jemputan tidak sah atau tidak aktif',
+ },
+ INVITE_CODE_NOT_AVAILABLE: {
+ 'zh-CN': '该邀请码暂不可用于注册',
+ 'en-US': 'This invitation code is not available for registration',
+ 'ms-MY': 'Kod jemputan ini tidak tersedia untuk pendaftaran',
+ },
+ INVITE_NOT_FOUND: {
+ 'zh-CN': '邀请码记录不存在',
+ 'en-US': 'Invitation record not found',
+ 'ms-MY': 'Rekod jemputan tidak dijumpai',
+ },
+ INVITE_MUST_REVOKE_FIRST: {
+ 'zh-CN': '请先作废该邀请码后再删除',
+ 'en-US': 'Revoke the invitation code before deleting',
+ 'ms-MY': 'Batalkan kod jemputan dahulu sebelum padam',
+ },
+ INVITE_CODE_ALREADY_USED: {
+ 'zh-CN': '该邀请码已被使用，每个邀请码仅可注册一名玩家',
+ 'en-US': 'This invitation code has already been used; each code allows one registration only',
+ 'ms-MY': 'Kod jemputan ini telah digunakan; setiap kod hanya untuk satu pendaftaran',
+ },
+ INVITE_CANNOT_DELETE_USED: {
+ 'zh-CN': '已使用的邀请码不可删除',
+ 'en-US': 'Used invitation codes cannot be deleted',
+ 'ms-MY': 'Kod jemputan yang telah digunakan tidak boleh dipadam',
+ },
+ INVITE_CASHBACK_RATE_INVALID: {
+ 'zh-CN': '返水比例无效，请输入非负数',
+ 'en-US': 'Invalid cashback rate; must be a non-negative number',
+ 'ms-MY': 'Kadar rebat tidak sah; mesti nombor bukan negatif',
+ },
USERNAME_FORMAT_INVALID: {
'zh-CN': '玩家用户名仅可使用英文字母和数字（3–32 位），不可含中文或特殊符号',
'en-US': 'Username must be 3–32 letters or digits only',
@@ -699,6 +739,51 @@ export const API_ERROR_MESSAGES = {
'en-US': 'ACTIVE ticker requires body in at least one locale',
'ms-MY': 'Ticker aktif memerlukan kandungan',
},
+ INVALID_METHOD_TYPE: {
+ 'zh-CN': '无效的收款方式类型',
+ 'en-US': 'Invalid payment method type',
+ 'ms-MY': 'Jenis kaedah pembayaran tidak sah',
+ },
+ PAYMENT_METHOD_NOT_FOUND: {
+ 'zh-CN': '收款方式不存在或已停用',
+ 'en-US': 'Payment method not found or inactive',
+ 'ms-MY': 'Kaedah pembayaran tidak dijumpai atau tidak aktif',
+ },
+ ORDER_NOT_FOUND: {
+ 'zh-CN': '充值订单不存在',
+ 'en-US': 'Deposit order not found',
+ 'ms-MY': 'Pesanan deposit tidak dijumpai',
+ },
+ ORDER_NOT_PENDING: {
+ 'zh-CN': '订单已被审核或不是待审核状态',
+ 'en-US': 'Order is not in pending status',
+ 'ms-MY': 'Pesanan bukan dalam status menunggu',
+ },
+ REASON_REQUIRED: {
+ 'zh-CN': '请填写拒绝原因',
+ 'en-US': 'Rejection reason is required',
+ 'ms-MY': 'Sebab penolakan diperlukan',
+ },
+ SCREENSHOT_REQUIRED: {
+ 'zh-CN': '请上传转账截图',
+ 'en-US': 'Screenshot is required',
+ 'ms-MY': 'Screenshot diperlukan',
+ },
+ FILE_MUST_BE_IMAGE: {
+ 'zh-CN': '请上传图片文件',
+ 'en-US': 'File must be an image',
+ 'ms-MY': 'Fail mesti imej',
+ },
+ INVALID_AMOUNT: {
+ 'zh-CN': '金额无效',
+ 'en-US': 'Invalid amount',
+ 'ms-MY': 'Jumlah tidak sah',
+ },
+ PAYMENT_METHOD_REQUIRED: {
+ 'zh-CN': '请选择收款方式',
+ 'en-US': 'Payment method is required',
+ 'ms-MY': 'Kaedah pembayaran diperlukan',
+ },
} as const satisfies Record>;
export type ApiErrorCode = keyof typeof API_ERROR_MESSAGES;
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 13b98da..636a425 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -159,6 +159,9 @@ importers:
axios:
specifier: ^1.7.9
version: 1.16.1
+ browser-image-compression:
+ specifier: ^2.0.2
+ version: 2.0.2
pinia:
specifier: ^2.3.1
version: 2.3.1(typescript@5.7.3)(vue@3.5.35(typescript@5.7.3))
@@ -171,6 +174,9 @@ importers:
vue-router:
specifier: ^4.5.0
version: 4.6.4(vue@3.5.35(typescript@5.7.3))
+ vue3-slide-verify:
+ specifier: ^1.1.8
+ version: 1.1.8(typescript@5.7.3)
devDependencies:
'@vitejs/plugin-vue':
specifier: ^5.2.1
@@ -1727,6 +1733,9 @@ packages:
resolution: {integrity: sha512-yQbXgO/OSZVD2IsiLlro+7Hf6Q18EJrKSEsdoMzKePKXct3gvD8oLcOQdIzGupr5Fj+EDe8gO/lxc1BzfMpxvA==}
engines: {node: '>=8'}
+ browser-image-compression@2.0.2:
+ resolution: {integrity: sha512-pBLlQyUf6yB8SmmngrcOw3EoS4RpQ1BcylI3T9Yqn7+4nrQTXJD4sJDe5ODnJdrvNMaio5OicFo75rDyJD2Ucw==}
+
browserslist@4.28.2:
resolution: {integrity: sha512-48xSriZYYg+8qXna9kwqjIVzuQxi+KYWp2+5nCYnYKPTr0LvD89Jqk2Or5ogxz0NUMfIjhh2lIUX/LyX9B4oIg==}
engines: {node: ^6 || ^7 || ^8 || ^9 || ^10 || ^11 || ^12 || >=13.7}
@@ -3559,6 +3568,9 @@ packages:
resolution: {integrity: sha512-vIYxrBCC/N/K+Js3qSN88go7kIfNPssr/hHCesKCQNAjmgvYS2oqr69kIufEG+O4+PfezOH4EbIeHCfFov8ZgQ==}
hasBin: true
+ uzip@0.20201231.0:
+ resolution: {integrity: sha512-OZeJfZP+R0z9D6TmBgLq2LHzSSptGMGDGigGiEe0pr8UBe/7fdflgHlHBNDASTXB5jnFuxHpNaJywSg8YFeGng==}
+
v8-compile-cache-lib@3.0.1:
resolution: {integrity: sha512-wa7YjyUGfNZngI/vtK0UHAN+lgDCxBPCylVXGp0zu59Fz5aiGtNXaq3DhIov063MorB+VfufLh3JlF2KdTK3xg==}
@@ -3654,6 +3666,9 @@ packages:
peerDependencies:
typescript: '>=5.0.0'
+ vue3-slide-verify@1.1.8:
+ resolution: {integrity: sha512-qsGXM0w0pkPnI10p58neHQNAkMiGdX8ijGkvRo6eIYbFn3+6fQE05t8afdQsCY9llgG1chDrRD7H0XxV3Ts9Cw==}
+
vue@3.5.35:
resolution: {integrity: sha512-cx89fnr+0kVGHiNFG6y6s0bdjypJRFNZn6x3WPstNdQR1bi1mbB7h4v5IBGTsPJU3nK1+0Iqj3Zf+hZWMieR4Q==}
peerDependencies:
@@ -5413,6 +5428,10 @@ snapshots:
dependencies:
fill-range: 7.1.1
+ browser-image-compression@2.0.2:
+ dependencies:
+ uzip: 0.20201231.0
+
browserslist@4.28.2:
dependencies:
baseline-browser-mapping: 2.10.33
@@ -7393,6 +7412,8 @@ snapshots:
uuid@11.1.1: {}
+ uzip@0.20201231.0: {}
+
v8-compile-cache-lib@3.0.1: {}
v8-to-istanbul@9.3.0:
@@ -7451,6 +7472,12 @@ snapshots:
'@vue/language-core': 2.2.0(typescript@5.7.3)
typescript: 5.7.3
+ vue3-slide-verify@1.1.8(typescript@5.7.3):
+ dependencies:
+ vue: 3.5.35(typescript@5.7.3)
+ transitivePeerDependencies:
+ - typescript
+
vue@3.5.35(typescript@5.7.3):
dependencies:
'@vue/compiler-dom': 3.5.35
+
+
+
+
diff --git a/apps/player/src/views/RechargeView.vue b/apps/player/src/views/RechargeView.vue
new file mode 100644
index 0000000..4de79ab
--- /dev/null
+++ b/apps/player/src/views/RechargeView.vue
@@ -0,0 +1,399 @@
+
+
+
+
+
+
+
+ {{ t('recharge.history_title') }}
+ +
+
+
+
+
+
+
+ {{ t('recharge.no_orders') }}
+
+
+
+
+
+
+
+ {{ order.methodType }}
+ {{ statusLabel(order.status) }}
+
+
+
+ {{ formatMoney(order.amount, locale) }}
+
+ {{ t('recharge.credited') }}: {{ formatMoney(order.approvedAmount, locale) }}
+
+
+ {{ order.paymentMethodName || '-' }}
+
+
+
+
+ {{ t('recharge.apply_time') }}
+ {{ new Date(order.createdAt).toLocaleString() }}
+
+
+ {{ t('recharge.review_time') }}
+ {{ new Date(order.reviewedAt).toLocaleString() }}
+
+
+ {{ t('recharge.remark') }}: {{ order.remark }}
+
+
+ {{ t('recharge.reject_reason') }}: {{ order.rejectReason }}
+
+
+
+
+
+
diff --git a/apps/player/src/views/RegisterView.vue b/apps/player/src/views/RegisterView.vue
new file mode 100644
index 0000000..a5b22b7
--- /dev/null
+++ b/apps/player/src/views/RegisterView.vue
@@ -0,0 +1,161 @@
+
+
+
+
+
+
+
+ {{ t('recharge.title') }}
+ +
+
+
+
+
+
+
+
+ {{ t('recharge.submitted') }}
+{{ orderNo }}
+{{ t('recharge.pending_review') }}
+ +
+
+
+
+
+
+
+
+ {{ t('recharge.no_methods') }}
+
+
+
+
+
+
+ {{ t('recharge.bank_name') }}
+ {{ selectedMethod.bankName }}
+
+
+ {{ t('recharge.account_holder') }}
+ {{ selectedMethod.accountHolder }}
+
+
+ {{ t('recharge.account_number') }}
+
+ {{ selectedMethod.accountNumber }}
+
+
+
+
+
+
+ {{ t('recharge.usdt_address') }}
+
+ {{ selectedMethod.usdtAddress }}
+
+
+
+
+ ![]()
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ ![]()
+
+
+
+
+
+
+
+
diff --git a/docs/chuanglan-sms-js-guide.md b/docs/chuanglan-sms-js-guide.md
new file mode 100644
index 0000000..9812d72
--- /dev/null
+++ b/docs/chuanglan-sms-js-guide.md
@@ -0,0 +1,695 @@
+# 创蓝短信（Chuanglan）TypeScript 全栈接入指南
+
+> 适用场景：**全新独立项目**，TypeScript 全栈（Next.js / Remix / Nuxt 等），直连创蓝 API。
+> 服务商：创蓝 253 云通讯（国际短信网关）
+> API Endpoint：`https://sgap.253.com/send/sms`
+> 签名算法参考：`babylive-backend` 中 `ChuanglanClient.java` + `SignUtil.java`（已验证可用）
+
+---
+
+## 1. 整体架构
+
+创蓝 `account` / `password` 是服务端密钥，**只能在服务端调用**，浏览器/客户端绝不直接接触创蓝。
+
+```
+┌─────────────┐ POST /api/sms/send ┌──────────────────┐ POST + sign ┌─────────────┐
+│ 前端页面 │ ──────────────────────────▶│ TS 服务端 │ ──────────────────▶│ 创蓝 API │
+│ (React 等) │◀────────────────────────── │ API Route / tRPC │◀────────────────── │ 253.com │
+└─────────────┘ { sessionId } └──────────────────┘ messageId └─────────────┘
+ │
+ ▼
+ Redis / KV 缓存
+ （验证码 + 频控）
+```
+
+职责划分：
+
+| 层 | 职责 |
+|----|------|
+| 前端 | 收集手机号、触发发送、倒计时 60s、提交验证码 + `sessionId` |
+| 服务端 API | 频控、生成验证码、调创蓝、存/验缓存 |
+| `lib/chuanglan` | 签名 + HTTP 请求，不含业务逻辑 |
+| Redis | 验证码存储（5 分钟 TTL）、手机号/IP 频控（60 秒 TTL） |
+
+---
+
+## 2. 环境变量
+
+```bash
+# .env.local（勿提交 Git）
+
+CHUANGLAN_ACCOUNT=your_account
+CHUANGLAN_PASSWORD=your_password
+CHUANGLAN_ENDPOINT=https://sgap.253.com/send/sms
+CHUANGLAN_CONNECT_TIMEOUT_MS=10000
+CHUANGLAN_READ_TIMEOUT_MS=10000
+
+# 验证码业务
+SMS_CODE_TTL_SECONDS=300 # 5 分钟
+SMS_RATE_LIMIT_SECONDS=60 # 发送冷却
+
+REDIS_URL=redis://127.0.0.1:6379
+```
+
+创蓝账号信息可向运维索取（与 babylive-backend `application.yml` 中 `chuanglan.*` 同源）。
+
+---
+
+## 3. 推荐目录结构
+
+以 Next.js App Router 为例，其他 TS 全栈框架可平移 `lib/` 与 `types/`：
+
+```
+src/
+├── lib/
+│ ├── chuanglan/
+│ │ ├── client.ts # 创蓝 HTTP Client
+│ │ ├── sign.ts # MD5 签名
+│ │ └── config.ts # 读取环境变量
+│ └── sms/
+│ ├── templates.ts # 多语言短信模板
+│ ├── code.ts # 验证码生成
+│ └── service.ts # 发送 / 校验业务
+├── app/
+│ └── api/
+│ └── sms/
+│ ├── send/route.ts
+│ └── verify/route.ts
+├── types/
+│ └── sms.ts
+└── hooks/
+ └── use-sms-code.ts # 前端发送 + 倒计时
+```
+
+---
+
+## 4. 创蓝 API 协议
+
+### 4.1 请求
+
+**Method：** `POST`
+**URL：** `https://sgap.253.com/send/sms`
+
+**Headers：**
+
+| Header | 说明 |
+|--------|------|
+| `Content-Type` | `application/json` |
+| `nonce` | 毫秒时间戳字符串，如 `1718000000123` |
+| `sign` | MD5 签名，见 4.2 |
+
+**Body：**
+
+```json
+{
+ "account": "your_account",
+ "mobile": "8613800138000",
+ "msg": "您的验证码是：123456。5分钟内有效。",
+ "uid": "optional-session-id"
+}
+```
+
+| 字段 | 必填 | 说明 |
+|------|------|------|
+| account | 是 | 创蓝账号 |
+| mobile | 是 | 目标手机号，建议带国家码 |
+| msg | 是 | 短信正文 |
+| uid | 否 | 自定义 ID，建议传本次验证码会话 ID |
+
+> `nonce` 参与签名，放 Header，**不进 Body**。
+
+### 4.2 签名算法
+
+1. 取 Body 全部字段 + `nonce`，组成键值对
+2. 按 key **字典序升序**（等价 Java `TreeMap`）
+3. 依次拼接 `key + value`，**跳过空值**（`null` / `""` / 纯空白）
+4. 末尾追加 `password`
+5. 整体做 **MD5**，输出 **32 位小写** hex
+
+```
+sign = md5("account" + account + "mobile" + mobile + "msg" + msg + "nonce" + nonce + password)
+```
+
+### 4.3 响应
+
+成功（`code === "0"`）：
+
+```json
+{
+ "code": "0",
+ "message": "提交成功",
+ "data": { "messageId": "162575412960104448" }
+}
+```
+
+失败时 `code` 为非 `"0"` 字符串，`message` 为错误描述。
+
+---
+
+## 5. TypeScript 类型
+
+```typescript
+// src/types/sms.ts
+
+export type SmsLang = 'zh' | 'en' | 'vi' | 'ms' | 'kh';
+
+export interface ChuanglanSendBody {
+ account: string;
+ mobile: string;
+ msg: string;
+ uid?: string;
+}
+
+export interface ChuanglanSendResponse {
+ code: string;
+ message: string;
+ data?: { messageId: string };
+}
+
+export interface SmsSendResult {
+ success: boolean;
+ code: string;
+ message: string;
+ messageId?: string;
+}
+
+export interface SendSmsCodeRequest {
+ phone: string;
+ lang?: SmsLang;
+}
+
+export interface SendSmsCodeResponse {
+ sessionId: string;
+}
+
+export interface VerifySmsCodeRequest {
+ phone: string;
+ code: string;
+ sessionId: string;
+}
+
+export interface VerifySmsCodeResponse {
+ ok: true;
+}
+```
+
+---
+
+## 6. 服务端实现
+
+### 6.1 配置
+
+```typescript
+// src/lib/chuanglan/config.ts
+
+function required(name: string): string {
+ const v = process.env[name];
+ if (!v) throw new Error(`Missing env: ${name}`);
+ return v;
+}
+
+export const chuanglanConfig = {
+ account: required('CHUANGLAN_ACCOUNT'),
+ password: required('CHUANGLAN_PASSWORD'),
+ endpoint: process.env.CHUANGLAN_ENDPOINT ?? 'https://sgap.253.com/send/sms',
+ connectTimeoutMs: Number(process.env.CHUANGLAN_CONNECT_TIMEOUT_MS ?? 10_000),
+ readTimeoutMs: Number(process.env.CHUANGLAN_READ_TIMEOUT_MS ?? 10_000),
+} as const;
+
+export const smsConfig = {
+ codeTtlSeconds: Number(process.env.SMS_CODE_TTL_SECONDS ?? 300),
+ rateLimitSeconds: Number(process.env.SMS_RATE_LIMIT_SECONDS ?? 60),
+} as const;
+```
+
+### 6.2 签名
+
+```typescript
+// src/lib/chuanglan/sign.ts
+import crypto from 'node:crypto';
+
+export function generateChuanglanSign(
+ password: string,
+ params: Record
+
+
+