├── .gitignore
├── requirements.txt
├── .dockerignore
├── Dockerfile
├── .env.example
├── .github
    └── workflows
    │   └── docker-build.yml
├── docker-compose.yml
├── templates
    ├── error.html
    ├── admin_login.html
    ├── index.html
    ├── admin.html
    └── invite.html
├── README.md
└── main.py


/.gitignore:
--------------------------------------------------------------------------------
1 | /.venv
2 | .env
3 | test_add_user.py
4 | test_email_list.py
5 | test_invite.py
6 | auto_invite.py
7 | .claude/settings.local.json
8 | 


--------------------------------------------------------------------------------
/requirements.txt:
--------------------------------------------------------------------------------
1 | flask>=3.0.0
2 | flask-session>=0.8.0
3 | python-dotenv>=1.0.0
4 | requests>=2.31.0
5 | redis>=5.0.0
6 | gunicorn>=21.0.0
7 | apscheduler>=3.10.0
8 | 


--------------------------------------------------------------------------------
/.dockerignore:
--------------------------------------------------------------------------------
 1 | .git
 2 | .gitignore
 3 | .env
 4 | .env.*
 5 | !.env.example
 6 | __pycache__
 7 | *.pyc
 8 | *.pyo
 9 | .venv
10 | venv
11 | .idea
12 | .vscode
13 | *.md
14 | Dockerfile
15 | docker-compose*.yml
16 | .dockerignore
17 | 


--------------------------------------------------------------------------------
/Dockerfile:
--------------------------------------------------------------------------------
 1 | FROM python:3.11-slim
 2 | 
 3 | WORKDIR /app
 4 | 
 5 | # 安装系统依赖
 6 | RUN apt-get update && apt-get install -y --no-install-recommends curl && rm -rf /var/lib/apt/lists/*
 7 | 
 8 | # 安装 Python 依赖
 9 | COPY requirements.txt .
10 | RUN pip install --no-cache-dir -r requirements.txt
11 | 
12 | # 复制应用代码
13 | COPY . .
14 | 
15 | # 暴露端口
16 | EXPOSE 5000
17 | 
18 | # 启动命令
19 | CMD ["gunicorn", "--bind", "0.0.0.0:5000", "--workers", "2", "--threads", "4", "main:app"]
20 | 


--------------------------------------------------------------------------------
/.env.example:
--------------------------------------------------------------------------------
 1 | # Flask
 2 | SECRET_KEY=your-secret-key-change-this
 3 | 
 4 | # ChatGPT Team 配置
 5 | AUTHORIZATION_TOKEN=Bearer xxx
 6 | ACCOUNT_ID=your-account-id
 7 | 
 8 | # Linux DO OAuth (在 https://connect.linux.do 申请)
 9 | LINUXDO_CLIENT_ID=your-client-id
10 | LINUXDO_CLIENT_SECRET=your-client-secret
11 | LINUXDO_REDIRECT_URI=http://your-domain.com/callback
12 | 
13 | # 邮箱平台配置
14 | EMAIL_API_AUTH=your-email-api-auth
15 | EMAIL_API_BASE=https://your-cloud-mail-api.com/api/public
16 | EMAIL_DOMAIN=your-email-domain.com
17 | EMAIL_ROLE=your-email-role
18 | 
19 | # 最低信任等级要求 (0-4)
20 | MIN_TRUST_LEVEL=1
21 | 
22 | # 后台管理密码
23 | ADMIN_PASSWORD=your-admin-password
24 | 
25 | # Redis 配置
26 | REDIS_HOST=localhost
27 | REDIS_PORT=6379
28 | REDIS_PASSWORD=
29 | REDIS_DB=0
30 | 


--------------------------------------------------------------------------------
/.github/workflows/docker-build.yml:
--------------------------------------------------------------------------------
 1 | name: Build and Push Docker Image
 2 | 
 3 | on:
 4 |   push:
 5 |     branches:
 6 |       - main
 7 |     tags:
 8 |       - 'v*'
 9 |   pull_request:
10 |     branches:
11 |       - main
12 |   workflow_dispatch:
13 | 
14 | env:
15 |   REGISTRY: ghcr.io
16 |   IMAGE_NAME: ${{ github.repository }}
17 | 
18 | jobs:
19 |   build:
20 |     runs-on: ubuntu-latest
21 |     permissions:
22 |       contents: read
23 |       packages: write
24 | 
25 |     steps:
26 |       - name: Checkout repository
27 |         uses: actions/checkout@v4
28 | 
29 |       - name: Set up Docker Buildx
30 |         uses: docker/setup-buildx-action@v3
31 | 
32 |       - name: Log in to Container Registry
33 |         if: github.event_name != 'pull_request'
34 |         uses: docker/login-action@v3
35 |         with:
36 |           registry: ${{ env.REGISTRY }}
37 |           username: ${{ github.actor }}
38 |           password: ${{ secrets.GITHUB_TOKEN }}
39 | 
40 |       - name: Extract metadata (tags, labels)
41 |         id: meta
42 |         uses: docker/metadata-action@v5
43 |         with:
44 |           images: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}
45 |           tags: |
46 |             type=ref,event=branch
47 |             type=ref,event=pr
48 |             type=semver,pattern={{version}}
49 |             type=semver,pattern={{major}}.{{minor}}
50 |             type=sha,prefix=
51 |             type=raw,value=latest,enable={{is_default_branch}}
52 | 
53 |       - name: Build and push Docker image
54 |         uses: docker/build-push-action@v5
55 |         with:
56 |           context: .
57 |           platforms: linux/amd64
58 |           push: ${{ github.event_name != 'pull_request' }}
59 |           tags: ${{ steps.meta.outputs.tags }}
60 |           labels: ${{ steps.meta.outputs.labels }}
61 |           cache-from: type=gha
62 |           cache-to: type=gha,mode=max
63 | 


--------------------------------------------------------------------------------
/docker-compose.yml:
--------------------------------------------------------------------------------
 1 | version: '3.8'
 2 | 
 3 | services:
 4 |   web:
 5 |     image: ghcr.io/james-6-23/team-invite-kfc:latest
 6 |     container_name: team-invite-web
 7 |     restart: unless-stopped
 8 |     ports:
 9 |       - "39001:5000"
10 |     healthcheck:
11 |       test: ["CMD", "curl", "-f", "http://localhost:5000/health"]
12 |       interval: 30s
13 |       timeout: 10s
14 |       retries: 3
15 |       start_period: 10s
16 |     environment:
17 |       - SECRET_KEY=${SECRET_KEY:-your-secret-key-here}
18 |       # ChatGPT Team
19 |       - AUTHORIZATION_TOKEN=${AUTHORIZATION_TOKEN}
20 |       - ACCOUNT_ID=${ACCOUNT_ID}
21 |       # Linux DO OAuth
22 |       - LINUXDO_CLIENT_ID=${LINUXDO_CLIENT_ID}
23 |       - LINUXDO_CLIENT_SECRET=${LINUXDO_CLIENT_SECRET}
24 |       - LINUXDO_REDIRECT_URI=${LINUXDO_REDIRECT_URI:-http://127.0.0.1:39001/callback}
25 |       # 邮箱平台
26 |       - EMAIL_API_AUTH=${EMAIL_API_AUTH}
27 |       - EMAIL_API_BASE=${EMAIL_API_BASE}
28 |       - EMAIL_DOMAIN=${EMAIL_DOMAIN}
29 |       - EMAIL_ROLE=${EMAIL_ROLE:-gpt-team}
30 |       # Redis
31 |       - REDIS_HOST=redis
32 |       - REDIS_PORT=6379
33 |       - REDIS_PASSWORD=${REDIS_PASSWORD:-}
34 |       - REDIS_DB=0
35 |       # 其他配置
36 |       - MIN_TRUST_LEVEL=${MIN_TRUST_LEVEL:-1}
37 |       - ADMIN_PASSWORD=${ADMIN_PASSWORD:-admin123}
38 |     depends_on:
39 |       - redis
40 |     networks:
41 |       - team-invite-network
42 | 
43 |   redis:
44 |     image: redis:7-alpine
45 |     container_name: team-invite-redis
46 |     restart: unless-stopped
47 |     command: >
48 |       sh -c "if [ -n \"$$REDIS_PASSWORD\" ]; then
49 |         redis-server --appendonly yes --requirepass $$REDIS_PASSWORD;
50 |       else
51 |         redis-server --appendonly yes;
52 |       fi"
53 |     environment:
54 |       - REDIS_PASSWORD=${REDIS_PASSWORD:-}
55 |     volumes:
56 |       - redis-data:/data
57 |     networks:
58 |       - team-invite-network
59 | 
60 | volumes:
61 |   redis-data:
62 |     driver: local
63 | 
64 | networks:
65 |   team-invite-network:
66 |     driver: bridge
67 | 


--------------------------------------------------------------------------------
/templates/error.html:
--------------------------------------------------------------------------------
 1 | <!DOCTYPE html>
 2 | <html lang="zh-CN" class="dark">
 3 | 
 4 | <head>
 5 |     <meta charset="UTF-8">
 6 |     <meta name="viewport" content="width=device-width, initial-scale=1.0">
 7 |     <title>错误 - Team 邀请助手</title>
 8 |     <script src="https://cdn.tailwindcss.com"></script>
 9 |     <link href="https://fonts.googleapis.com/css2?family=Inter:wght@300;400;500;600;700&display=swap" rel="stylesheet">
10 |     <script>
11 |         tailwind.config = {
12 |             darkMode: 'class',
13 |             theme: {
14 |                 extend: {
15 |                     fontFamily: {
16 |                         sans: ['Inter', '-apple-system', 'BlinkMacSystemFont', 'Segoe UI', 'Roboto', 'sans-serif'],
17 |                     },
18 |                     colors: {
19 |                         ios: {
20 |                             bg: '#000000',
21 |                             card: 'rgba(28, 28, 30, 0.65)',
22 |                             border: 'rgba(255, 255, 255, 0.12)',
23 |                             blue: '#0A84FF',
24 |                             gray: '#8E8E93',
25 |                         }
26 |                     },
27 |                     animation: {
28 |                         'shake': 'shake 0.5s cubic-bezier(.36,.07,.19,.97) both',
29 |                     },
30 |                     keyframes: {
31 |                         shake: {
32 |                             '10%, 90%': { transform: 'translate3d(-1px, 0, 0)' },
33 |                             '20%, 80%': { transform: 'translate3d(2px, 0, 0)' },
34 |                             '30%, 50%, 70%': { transform: 'translate3d(-4px, 0, 0)' },
35 |                             '40%, 60%': { transform: 'translate3d(4px, 0, 0)' }
36 |                         }
37 |                     },
38 |                 }
39 |             }
40 |         }
41 |     </script>
42 |     <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.5.1/css/all.min.css">
43 |     <style>
44 |         body {
45 |             background: #000000;
46 |             font-family: 'Inter', sans-serif;
47 |             -webkit-font-smoothing: antialiased;
48 |         }
49 | 
50 |         .bg-mesh {
51 |             position: fixed;
52 |             inset: 0;
53 |             z-index: -1;
54 |             background:
55 |                 radial-gradient(circle at 50% -20%, rgba(255, 69, 58, 0.15), transparent 60%),
56 |                 radial-gradient(circle at 80% 50%, rgba(255, 69, 58, 0.05), transparent 40%);
57 |             opacity: 0.8;
58 |         }
59 |     </style>
60 | </head>
61 | 
62 | <body class="text-white min-h-screen flex items-center justify-center p-4">
63 |     <div class="bg-mesh"></div>
64 | 
65 |     <div class="text-center max-w-[320px] animate-shake">
66 |         <div
67 |             class="inline-flex items-center justify-center w-20 h-20 rounded-full bg-red-500/10 border border-red-500/20 mb-6 shadow-2xl shadow-red-900/20">
68 |             <i class="fa-solid fa-circle-exclamation text-4xl text-red-500"></i>
69 |         </div>
70 | 
71 |         <h1 class="text-2xl font-bold tracking-tight text-white mb-3">Something Went Wrong</h1>
72 | 
73 |         <p class="text-[15px] text-zinc-400 mb-8 leading-relaxed">{{ message }}</p>
74 | 
75 |         <a href="/"
76 |             class="inline-flex items-center justify-center gap-2 px-6 py-3.5 bg-[#0A84FF] hover:bg-[#0077ED] text-white font-semibold rounded-2xl transition-all active:scale-95 shadow-lg shadow-blue-900/20 w-full">
77 |             <i class="fa-solid fa-arrow-left text-sm"></i>
78 |             Back to Home
79 |         </a>
80 |     </div>
81 | </body>
82 | 
83 | </html>


--------------------------------------------------------------------------------
/README.md:
--------------------------------------------------------------------------------
  1 | # 🚀 Linux.do ChatGPT Team 邀请助手
  2 | 
  3 | <div align="center">
  4 | 
  5 | **Linux.do 社区 ChatGPT Team 自动邀请系统**
  6 | 
  7 | [![Docker](https://img.shields.io/badge/Docker-Ready-blue?logo=docker)](https://ghcr.io/james-6-23/team-invite-kfc)
  8 | [![Python](https://img.shields.io/badge/Python-3.10+-green?logo=python)](https://python.org)
  9 | [![Flask](https://img.shields.io/badge/Flask-3.0+-red?logo=flask)](https://flask.palletsprojects.com)
 10 | [![Redis](https://img.shields.io/badge/Redis-7+-orange?logo=redis)](https://redis.io)
 11 | 
 12 | </div>
 13 | 
 14 | ---
 15 | 
 16 | ## 📖 项目简介
 17 | 
 18 | 这是一个专为 Linux.do 社区定制的 ChatGPT Team 自动邀请系统。它集成了 Linux DO OAuth 登录，并利用开源项目 [Cloud Mail](https://github.com/maillab/cloud-mail) 作为邮件服务后端，实现了从邮箱生成到邀请发送的全自动化流程。
 19 | 
 20 | ## ✨ 功能特性
 21 | 
 22 | - 🔐 **Linux DO OAuth 登录** - 安全的第三方认证，支持信任等级验证
 23 | - 📧 **智能邮箱分配** - 集成 [Cloud Mail](https://github.com/maillab/cloud-mail)，自动生成临时邮箱
 24 | - 🎫 **自动邀请流程** - 一键发送 ChatGPT Team 邀请
 25 | - 🔢 **验证码自动获取** - 自动从邮件系统提取验证码
 26 | - 🛡️ **并发控制** - Redis 分布式锁机制防止超卖和并发问题
 27 | - 📊 **后台管理** - 完整的邀请记录、统计面板及成员管理
 28 | - 💾 **可靠存储** - Redis 持久化数据存储和 Session 管理
 29 | - 🔄 **自动维护** - 后台定时任务自动刷新缓存和处理过期邀请
 30 | - 🌓 **现代化 UI** - 支持深色/浅色主题切换
 31 | 
 32 | ---
 33 | 
 34 | ## 🏗️ 技术栈
 35 | 
 36 | | 组件 | 技术 |
 37 | |------|------|
 38 | | **后端框架** | Flask 3.0+ |
 39 | | **邮件服务** | [Cloud Mail](https://github.com/maillab/cloud-mail) (Cloudflare Workers) |
 40 | | **Session 存储** | Flask-Session + Redis |
 41 | | **数据持久化** | Redis 7+ |
 42 | | **定时任务** | APScheduler |
 43 | | **容器化** | Docker + Docker Compose |
 44 | | **部署** | Gunicorn |
 45 | 
 46 | ---
 47 | 
 48 | ## 🚀 快速部署
 49 | 
 50 | ### 前置准备
 51 | 
 52 | 本项目依赖 [Cloud Mail](https://github.com/maillab/cloud-mail) 作为邮件后端。请先参考 Cloud Mail 文档部署您自己的邮件服务，并获取 API 地址和鉴权信息。
 53 | 
 54 | ### 方式一：Docker Compose 部署（推荐）
 55 | 
 56 | #### 1. 克隆仓库
 57 | 
 58 | ```bash
 59 | git clone https://github.com/james-6-23/team-invite-kfc.git
 60 | cd team-invite-kfc
 61 | ```
 62 | 
 63 | #### 2. 配置环境变量
 64 | 
 65 | ```bash
 66 | cp .env.example .env
 67 | # 编辑 .env 填写配置，特别是邮件服务相关的配置
 68 | ```
 69 | 
 70 | #### 3. 启动服务
 71 | 
 72 | ```bash
 73 | docker-compose up -d
 74 | ```
 75 | 
 76 | #### 4. 访问应用
 77 | 
 78 | 打开浏览器访问 `http://localhost:39001`
 79 | 
 80 | ### 方式二：本地开发运行
 81 | 
 82 | #### 1. 环境准备
 83 | 
 84 | ```bash
 85 | python -m venv .venv
 86 | source .venv/bin/activate  # Linux/macOS
 87 | # .venv\Scripts\activate  # Windows
 88 | 
 89 | pip install -r requirements.txt
 90 | ```
 91 | 
 92 | #### 2. 启动 Redis
 93 | 
 94 | 需确保本地安装并运行 Redis (默认端口 6379)。
 95 | 
 96 | #### 3. 运行应用
 97 | 
 98 | ```bash
 99 | cp .env.example .env
100 | # 填写配置
101 | python main.py
102 | ```
103 | 
104 | ---
105 | 
106 | ## ⚙️ 配置说明
107 | 
108 | ### 核心配置
109 | 
110 | | 变量 | 说明 | 必填 | 默认值 |
111 | |------|------|:----:|--------|
112 | | `SECRET_KEY` | Flask 密钥（生产环境请修改） | ✅ | `dev_secret_key` |
113 | | `AUTHORIZATION_TOKEN` | ChatGPT Team 邀请者 Token | ✅ | - |
114 | | `ACCOUNT_ID` | ChatGPT Team 账户 ID | ✅ | - |
115 | 
116 | ### Linux DO OAuth 配置
117 | 
118 | | 变量 | 说明 | 必填 | 默认值 |
119 | |------|------|:----:|--------|
120 | | `LINUXDO_CLIENT_ID` | OAuth Client ID | ✅ | - |
121 | | `LINUXDO_CLIENT_SECRET` | OAuth Client Secret | ✅ | - |
122 | | `LINUXDO_REDIRECT_URI` | OAuth 回调地址 | ✅ | `http://127.0.0.1:39001/callback` |
123 | 
124 | > 💡 在 [connect.linux.do](https://connect.linux.do) 申请 OAuth 应用
125 | 
126 | ### 邮箱平台配置 (Cloud Mail)
127 | 
128 | | 变量 | 说明 | 必填 | 默认值 |
129 | |------|------|:----:|--------|
130 | | `EMAIL_API_AUTH` | Cloud Mail API 密钥 | ✅ | - |
131 | | `EMAIL_API_BASE` | Cloud Mail API 地址 | ❌ | `https://your-cloud-mail.com/api/public` |
132 | | `EMAIL_DOMAIN` | 邮箱域名 | ❌ | `your-domain.com` |
133 | | `EMAIL_ROLE` | 邮箱角色标识 | ❌ | `gpt-team` |
134 | 
135 | ### 其他配置
136 | 
137 | | 变量 | 说明 | 必填 | 默认值 |
138 | |------|------|:----:|--------|
139 | | `ADMIN_PASSWORD` | 后台管理密码 | ❌ | `admin123` |
140 | | `MIN_TRUST_LEVEL` | 最低信任等级要求 (0-4) | ❌ | `1` |
141 | | `REDIS_HOST` | Redis 主机地址 | ❌ | `localhost` |
142 | 
143 | ---
144 | 
145 | ## 🔗 相关链接
146 | 
147 | - 📧 邮件后端: [Cloud Mail (Open Source)](https://github.com/maillab/cloud-mail)
148 | - 💬 Linux DO: [https://linux.do/](https://linux.do/)
149 | - 🤖 ChatGPT: [https://chatgpt.com/](https://chatgpt.com/)
150 | - 🔑 OAuth 申请: [https://connect.linux.do/](https://connect.linux.do/)
151 | 
152 | ---
153 | 
154 | ## 📝 更新日志
155 | 
156 | ### v1.0.0
157 | - ✅ Linux DO OAuth 登录集成
158 | - ✅ 集成 Cloud Mail 邮件服务
159 | - ✅ 自动邀请与验证码提取
160 | - ✅ 后台管理面板与数据统计
161 | - ✅ Redis 分布式锁与持久化
162 | - ✅ Docker 容器化支持
163 | 
164 | ---
165 | 
166 | ## 📄 许可证
167 | 
168 | MIT License
169 | 
170 | ---
171 | 
172 | <div align="center">
173 | 
174 | Made with ❤️ for Linux.do Community
175 | 
176 | </div>
177 | 


--------------------------------------------------------------------------------
/templates/admin_login.html:
--------------------------------------------------------------------------------
  1 | <!DOCTYPE html>
  2 | <html lang="zh-CN" class="dark">
  3 | 
  4 | <head>
  5 |     <meta charset="UTF-8">
  6 |     <meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalable=no">
  7 |     <title>后台登录 - Team 邀请助手</title>
  8 |     <script src="https://cdn.tailwindcss.com"></script>
  9 |     <link href="https://fonts.googleapis.com/css2?family=Inter:wght@300;400;500;600;700&display=swap" rel="stylesheet">
 10 |     <link href="https://fonts.googleapis.com/css2?family=JetBrains+Mono:wght@400;500;600&display=swap" rel="stylesheet">
 11 |     <script>
 12 |         tailwind.config = {
 13 |             darkMode: 'class',
 14 |             theme: {
 15 |                 extend: {
 16 |                     fontFamily: {
 17 |                         sans: ['Inter', '-apple-system', 'BlinkMacSystemFont', 'Segoe UI', 'Roboto', 'sans-serif'],
 18 |                         mono: ['JetBrains Mono', 'SF Mono', 'Menlo', 'Monaco', 'Courier New', 'monospace'],
 19 |                     },
 20 |                     colors: {
 21 |                         ios: {
 22 |                             bg: '#000000',
 23 |                             card: 'rgba(28, 28, 30, 0.65)',
 24 |                             border: 'rgba(255, 255, 255, 0.12)',
 25 |                             blue: '#0A84FF',
 26 |                             gray: '#8E8E93',
 27 |                         }
 28 |                     },
 29 |                     animation: {
 30 |                         'float': 'float 6s ease-in-out infinite',
 31 |                         'fade-in': 'fadeIn 0.6s cubic-bezier(0.16, 1, 0.3, 1) forwards',
 32 |                         'scale-in': 'scaleIn 0.5s cubic-bezier(0.16, 1, 0.3, 1) forwards',
 33 |                     },
 34 |                     keyframes: {
 35 |                         float: {
 36 |                             '0%, 100%': { transform: 'translateY(0)' },
 37 |                             '50%': { transform: 'translateY(-10px)' },
 38 |                         },
 39 |                         fadeIn: {
 40 |                             'from': { opacity: '0' },
 41 |                             'to': { opacity: '1' },
 42 |                         },
 43 |                         scaleIn: {
 44 |                             'from': { opacity: '0', transform: 'scale(0.95)' },
 45 |                             'to': { opacity: '1', transform: 'scale(1)' },
 46 |                         }
 47 |                     },
 48 |                 }
 49 |             }
 50 |         }
 51 |     </script>
 52 |     <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.5.1/css/all.min.css">
 53 |     <style>
 54 |         body {
 55 |             background: #000000;
 56 |             font-family: 'Inter', sans-serif;
 57 |             -webkit-font-smoothing: antialiased;
 58 |             overflow-x: hidden;
 59 |         }
 60 | 
 61 |         .bg-mesh {
 62 |             position: fixed;
 63 |             inset: 0;
 64 |             z-index: -1;
 65 |             background:
 66 |                 radial-gradient(circle at 0% 0%, rgba(10, 132, 255, 0.15) 0%, transparent 50%),
 67 |                 radial-gradient(circle at 100% 100%, rgba(88, 86, 214, 0.15) 0%, transparent 50%);
 68 |             opacity: 0.8;
 69 |         }
 70 | 
 71 |         .glass-card {
 72 |             background: rgba(20, 20, 25, 0.7);
 73 |             backdrop-filter: blur(40px) saturate(180%);
 74 |             -webkit-backdrop-filter: blur(40px) saturate(180%);
 75 |             border: 1px solid rgba(255, 255, 255, 0.08);
 76 |             box-shadow: 0 25px 50px -12px rgba(0, 0, 0, 0.5);
 77 |         }
 78 | 
 79 |         .left-panel {
 80 |             background: linear-gradient(135deg, rgba(255, 255, 255, 0.03) 0%, rgba(255, 255, 255, 0.01) 100%);
 81 |             border-right: 1px solid rgba(255, 255, 255, 0.05);
 82 |         }
 83 | 
 84 |         .ios-input {
 85 |             background: rgba(0, 0, 0, 0.3);
 86 |             border: 1px solid rgba(255, 255, 255, 0.1);
 87 |             transition: all 0.3s ease;
 88 |         }
 89 | 
 90 |         .ios-input:focus {
 91 |             background: rgba(0, 0, 0, 0.5);
 92 |             border-color: #0A84FF;
 93 |             box-shadow: 0 0 0 4px rgba(10, 132, 255, 0.15);
 94 |             outline: none;
 95 |         }
 96 | 
 97 |         .action-btn {
 98 |             background: linear-gradient(135deg, #0A84FF 0%, #0077ED 100%);
 99 |             transition: all 0.3s cubic-bezier(0.4, 0, 0.2, 1);
100 |             box-shadow: 0 4px 12px rgba(10, 132, 255, 0.3), inset 0 1px 1px rgba(255, 255, 255, 0.2);
101 |         }
102 | 
103 |         .action-btn:hover {
104 |             transform: translateY(-2px);
105 |             box-shadow: 0 8px 24px rgba(10, 132, 255, 0.4), inset 0 1px 1px rgba(255, 255, 255, 0.2);
106 |         }
107 | 
108 |         .action-btn:active {
109 |             transform: translateY(0);
110 |         }
111 |     </style>
112 | </head>
113 | 
114 | <body class="text-white min-h-screen flex items-center justify-center p-4">
115 |     <div class="bg-mesh"></div>
116 | 
117 |     <!-- Main Card Container (16:9 Aspect Ratio on Desktop) -->
118 |     <div
119 |         class="relative w-full max-w-5xl aspect-auto md:aspect-[16/9] glass-card rounded-[40px] p-2 flex flex-col md:flex-row overflow-hidden shadow-2xl animate-scale-in ring-1 ring-white/10">
120 | 
121 |         <!-- Left Panel: Brand & Visuals -->
122 |         <div
123 |             class="left-panel w-full md:w-[45%] rounded-[32px] p-8 md:p-12 flex flex-col justify-between relative overflow-hidden group">
124 |             <!-- Background Gradients -->
125 |             <div
126 |                 class="absolute top-0 left-0 w-full h-full bg-gradient-to-br from-blue-500/10 via-transparent to-transparent opacity-50">
127 |             </div>
128 | 
129 |             <!-- Header -->
130 |             <div class="relative z-10">
131 |                 <div
132 |                     class="w-12 h-12 rounded-2xl bg-white/10 border border-white/10 flex items-center justify-center mb-6 backdrop-blur-md">
133 |                     <i class="fa-solid fa-layer-group text-blue-400"></i>
134 |                 </div>
135 |                 <h1 class="text-3xl font-bold tracking-tight mb-2">管理后台</h1>
136 |                 <p class="text-zinc-500 text-sm font-medium tracking-wide">SYSTEM ADMINISTRATION</p>
137 |             </div>
138 | 
139 |             <!-- Center Visual -->
140 |             <div class="flex-1 flex items-center justify-center relative z-10 my-8">
141 |                 <div class="relative w-40 h-40 flex items-center justify-center">
142 |                     <div class="absolute inset-0 bg-blue-500/20 blur-[60px] rounded-full animate-pulse"></div>
143 |                     <div
144 |                         class="relative w-32 h-32 rounded-3xl bg-gradient-to-br from-white/10 to-white/5 border border-white/10 flex items-center justify-center backdrop-blur-xl animate-float shadow-2xl">
145 |                         <i class="fa-solid fa-lock text-4xl text-white/80"></i>
146 |                     </div>
147 |                 </div>
148 |             </div>
149 | 
150 |             <!-- Footer -->
151 |             <div class="relative z-10">
152 |                 <div class="flex items-center gap-3 text-[11px] text-zinc-600 font-mono border-t border-white/5 pt-4">
153 |                     <span class="w-1.5 h-1.5 rounded-full bg-blue-500 animate-pulse"></span>
154 |                     <span>SECURE GATEWAY v2.0</span>
155 |                 </div>
156 |             </div>
157 |         </div>
158 | 
159 |         <!-- Right Panel: Login Form -->
160 |         <div class="w-full md:w-[55%] p-8 md:p-16 flex flex-col justify-center relative">
161 |             <div class="max-w-sm mx-auto w-full">
162 |                 <div class="text-center mb-8">
163 |                     <h2 class="text-2xl font-bold text-white mb-2">身份验证</h2>
164 |                     <p class="text-zinc-500 text-sm">请输入管理员访问密码以继续</p>
165 |                 </div>
166 | 
167 |                 <form action="/admin/login" method="POST" class="space-y-6">
168 |                     {% if error %}
169 |                     <div
170 |                         class="p-3 rounded-xl bg-red-500/10 border border-red-500/20 text-red-400 text-xs text-center font-medium animate-fade-in flex items-center justify-center gap-2">
171 |                         <i class="fa-solid fa-circle-exclamation"></i>
172 |                         {{ error }}
173 |                     </div>
174 |                     {% endif %}
175 | 
176 |                     <div class="space-y-2">
177 |                         <label
178 |                             class="text-[11px] font-semibold text-zinc-500 uppercase tracking-wider ml-1">访问密码</label>
179 |                         <div class="relative group">
180 |                             <i
181 |                                 class="fa-solid fa-key absolute left-4 top-1/2 -translate-y-1/2 text-zinc-500 group-focus-within:text-blue-500 transition-colors"></i>
182 |                             <input type="password" name="password" placeholder="请输入密码..." required
183 |                                 class="ios-input w-full pl-11 pr-4 py-4 rounded-xl text-white placeholder-zinc-600 font-medium text-sm">
184 |                         </div>
185 |                     </div>
186 | 
187 |                     <button type="submit"
188 |                         class="w-full py-4 rounded-xl action-btn text-white font-bold text-sm tracking-wide flex items-center justify-center gap-2 group">
189 |                         <span>确认登录</span>
190 |                         <i class="fa-solid fa-arrow-right transition-transform group-hover:translate-x-1"></i>
191 |                     </button>
192 | 
193 |                     <div class="pt-4 text-center">
194 |                         <a href="/"
195 |                             class="text-xs text-zinc-500 hover:text-white transition-colors flex items-center justify-center gap-2 inline-flex py-2 px-4 rounded-lg hover:bg-white/5">
196 |                             <i class="fa-solid fa-chevron-left text-[10px]"></i>
197 |                             <span>返回首页</span>
198 |                         </a>
199 |                     </div>
200 |                 </form>
201 |             </div>
202 |         </div>
203 |     </div>
204 | 
205 | </body>
206 | 
207 | </html>


--------------------------------------------------------------------------------
/templates/index.html:
--------------------------------------------------------------------------------
  1 | <!DOCTYPE html>
  2 | <html lang="zh-CN" class="dark">
  3 | 
  4 | <head>
  5 |     <meta charset="UTF-8">
  6 |     <meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalable=no">
  7 |     <title>ChatGPT Team KFC</title>
  8 |     <script src="https://cdn.tailwindcss.com"></script>
  9 |     <link href="https://fonts.googleapis.com/css2?family=Inter:wght@300;400;500;600;700&display=swap" rel="stylesheet">
 10 |     <link href="https://fonts.googleapis.com/css2?family=JetBrains+Mono:wght@400;500;600&display=swap" rel="stylesheet">
 11 |     <script>
 12 |         tailwind.config = {
 13 |             darkMode: 'class',
 14 |             theme: {
 15 |                 extend: {
 16 |                     fontFamily: {
 17 |                         sans: ['Inter', '-apple-system', 'BlinkMacSystemFont', 'Segoe UI', 'Roboto', 'sans-serif'],
 18 |                         mono: ['JetBrains Mono', 'SF Mono', 'Menlo', 'Monaco', 'Courier New', 'monospace'],
 19 |                     },
 20 |                     colors: {
 21 |                         ios: {
 22 |                             bg: '#000000',
 23 |                             card: 'rgba(28, 28, 30, 0.65)',
 24 |                             border: 'rgba(255, 255, 255, 0.12)',
 25 |                             blue: '#0A84FF',
 26 |                             gray: '#8E8E93',
 27 |                         }
 28 |                     },
 29 |                     animation: {
 30 |                         'float': 'float 6s ease-in-out infinite',
 31 |                         'fade-in': 'fadeIn 0.6s cubic-bezier(0.16, 1, 0.3, 1) forwards',
 32 |                         'scale-in': 'scaleIn 0.5s cubic-bezier(0.16, 1, 0.3, 1) forwards',
 33 |                     },
 34 |                     keyframes: {
 35 |                         float: {
 36 |                             '0%, 100%': { transform: 'translateY(0)' },
 37 |                             '50%': { transform: 'translateY(-10px)' },
 38 |                         },
 39 |                         fadeIn: {
 40 |                             'from': { opacity: '0' },
 41 |                             'to': { opacity: '1' },
 42 |                         },
 43 |                         scaleIn: {
 44 |                             'from': { opacity: '0', transform: 'scale(0.95)' },
 45 |                             'to': { opacity: '1', transform: 'scale(1)' },
 46 |                         }
 47 |                     },
 48 |                 }
 49 |             }
 50 |         }
 51 |     </script>
 52 |     <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.5.1/css/all.min.css">
 53 |     <style>
 54 |         body {
 55 |             background: #000000;
 56 |             font-family: 'Inter', sans-serif;
 57 |             -webkit-font-smoothing: antialiased;
 58 |             overflow-x: hidden;
 59 |         }
 60 | 
 61 |         .bg-mesh {
 62 |             position: fixed;
 63 |             inset: 0;
 64 |             z-index: -1;
 65 |             background:
 66 |                 radial-gradient(circle at 0% 0%, rgba(10, 132, 255, 0.15) 0%, transparent 50%),
 67 |                 radial-gradient(circle at 100% 100%, rgba(88, 86, 214, 0.15) 0%, transparent 50%);
 68 |             opacity: 0.8;
 69 |         }
 70 | 
 71 |         .glass-card {
 72 |             background: rgba(20, 20, 25, 0.7);
 73 |             backdrop-filter: blur(40px) saturate(180%);
 74 |             -webkit-backdrop-filter: blur(40px) saturate(180%);
 75 |             border: 1px solid rgba(255, 255, 255, 0.08);
 76 |             box-shadow: 0 25px 50px -12px rgba(0, 0, 0, 0.5);
 77 |         }
 78 | 
 79 |         .left-panel {
 80 |             background: linear-gradient(135deg, rgba(255, 255, 255, 0.03) 0%, rgba(255, 255, 255, 0.01) 100%);
 81 |             border-right: 1px solid rgba(255, 255, 255, 0.05);
 82 |         }
 83 | 
 84 |         .stat-item {
 85 |             background: rgba(255, 255, 255, 0.03);
 86 |             border: 1px solid rgba(255, 255, 255, 0.05);
 87 |             transition: all 0.3s cubic-bezier(0.4, 0, 0.2, 1);
 88 |         }
 89 | 
 90 |         .stat-item:hover {
 91 |             background: rgba(255, 255, 255, 0.06);
 92 |             transform: translateY(-2px);
 93 |         }
 94 | 
 95 |         .action-btn {
 96 |             background: linear-gradient(135deg, #0A84FF 0%, #0077ED 100%);
 97 |             transition: all 0.3s cubic-bezier(0.4, 0, 0.2, 1);
 98 |             box-shadow: 0 4px 12px rgba(10, 132, 255, 0.3), inset 0 1px 1px rgba(255, 255, 255, 0.2);
 99 |         }
100 | 
101 |         .action-btn:hover {
102 |             transform: translateY(-2px);
103 |             box-shadow: 0 8px 24px rgba(10, 132, 255, 0.4), inset 0 1px 1px rgba(255, 255, 255, 0.2);
104 |         }
105 | 
106 |         .liquid-btn {
107 |             background: linear-gradient(var(--liquid-button-color) 0 0) no-repeat calc(200% - var(--liquid-button-fill, 0%)) 100% / 200% var(--liquid-button-fill, 0.2em);
108 |             color: hsl(var(--primary));
109 |             transition: background 0.3s var(--liquid-button-delay, 0s), color 0.3s var(--liquid-button-delay, 0s), background-position 0.3s calc(0.3s - var(--liquid-button-delay, 0s));
110 |             --liquid-button-color: rgba(255, 255, 255, 0.1);
111 |         }
112 | 
113 |         .liquid-btn:hover {
114 |             --liquid-button-fill: 100%;
115 |             --liquid-button-delay: 0.1s;
116 |         }
117 | 
118 |         .link-icon {
119 |             transition: all 0.3s ease;
120 |         }
121 | 
122 |         .link-icon:hover {
123 |             transform: translateY(-3px) scale(1.1);
124 |         }
125 | 
126 |         /* 炫酷脉冲文字效果 */
127 |         .glow-text {
128 |             background: linear-gradient(90deg, #0A84FF, #30D158, #FFD60A, #FF453A, #BF5AF2, #0A84FF);
129 |             background-size: 300% 100%;
130 |             -webkit-background-clip: text;
131 |             background-clip: text;
132 |             -webkit-text-fill-color: transparent;
133 |             animation: gradient-flow 4s ease infinite, text-glow-pulse 2s ease-in-out infinite;
134 |         }
135 | 
136 |         @keyframes gradient-flow {
137 | 
138 |             0%,
139 |             100% {
140 |                 background-position: 0% 50%;
141 |             }
142 | 
143 |             50% {
144 |                 background-position: 100% 50%;
145 |             }
146 |         }
147 | 
148 |         @keyframes text-glow-pulse {
149 | 
150 |             0%,
151 |             100% {
152 |                 filter: drop-shadow(0 0 8px rgba(10, 132, 255, 0.6)) drop-shadow(0 0 20px rgba(10, 132, 255, 0.3));
153 |             }
154 | 
155 |             50% {
156 |                 filter: drop-shadow(0 0 15px rgba(48, 209, 88, 0.8)) drop-shadow(0 0 30px rgba(48, 209, 88, 0.4));
157 |             }
158 |         }
159 |     </style>
160 | </head>
161 | 
162 | <body class="text-white min-h-screen flex items-center justify-center p-4">
163 |     <div class="bg-mesh"></div>
164 | 
165 |     <!-- 车已翻 Error Screen (默认隐藏) -->
166 |     <div id="crashed-screen" class="hidden fixed inset-0 z-50 flex items-center justify-center bg-black">
167 |         <div class="text-center animate-fade-in">
168 |             <div class="text-8xl mb-8">🚗💥</div>
169 |             <h1 class="text-6xl md:text-8xl font-black text-red-500 mb-4 tracking-tight">车已翻</h1>
170 |             <p class="text-zinc-500 text-lg mb-8">Team 账户状态异常，服务暂时不可用</p>
171 |             <button onclick="location.reload()"
172 |                 class="px-6 py-3 rounded-xl bg-white/5 border border-white/10 text-zinc-400 hover:bg-white/10 hover:text-white transition-all">
173 |                 <i class="fa-solid fa-refresh mr-2"></i>重新检查
174 |             </button>
175 |         </div>
176 |     </div>
177 | 
178 |     <!-- Loading Screen -->
179 |     <div id="loading-screen" class="fixed inset-0 z-40 flex items-center justify-center bg-black">
180 |         <div class="text-center">
181 |             <div class="w-12 h-12 border-2 border-white/20 border-t-white/80 rounded-full animate-spin mb-4 mx-auto">
182 |             </div>
183 |             <p class="text-zinc-500 text-sm">正在检查车况...</p>
184 |         </div>
185 |     </div>
186 | 
187 |     <!-- Main Card Container (16:9 Aspect Ratio on Desktop) -->
188 |     <div id="main-content"
189 |         class="hidden relative w-full max-w-5xl aspect-auto md:aspect-[16/9] glass-card rounded-[40px] p-2 flex flex-col md:flex-row overflow-hidden shadow-2xl animate-scale-in ring-1 ring-white/10">
190 | 
191 |         <!-- Left Panel: Brand & Visuals -->
192 |         <!-- Left Panel: Brand & Visuals -->
193 |         <div
194 |             class="left-panel w-full md:w-[45%] rounded-[32px] p-6 md:p-8 flex flex-col justify-between relative overflow-hidden group">
195 |             <!-- Background Gradients -->
196 |             <div
197 |                 class="absolute top-0 left-0 w-full h-full bg-gradient-to-br from-blue-500/10 via-transparent to-transparent opacity-50">
198 |             </div>
199 | 
200 |             <!-- Animated Background Mesh -->
201 |             <div
202 |                 class="absolute top-[-20%] right-[-20%] w-64 h-64 bg-blue-500/20 rounded-full blur-[80px] animate-float opacity-30 pointer-events-none">
203 |             </div>
204 | 
205 |             <!-- Header -->
206 |             <div class="relative z-10 shrink-0">
207 |                 <div
208 |                     class="w-14 h-14 rounded-2xl bg-gradient-to-br from-[#30D158]/20 to-[#0A84FF]/20 border border-white/10 flex items-center justify-center mb-4 backdrop-blur-md shadow-lg animation-float ring-1 ring-white/5">
209 |                     <img src="https://cdn.oaistatic.com/assets/favicon-l4nq08hd.svg" alt="ChatGPT"
210 |                         class="w-8 h-8 object-contain filter drop-shadow-[0_0_8px_rgba(255,255,255,0.3)]">
211 |                 </div>
212 |                 <!-- Title Group -->
213 |                 <div>
214 |                     <h1
215 |                         class="text-2xl md:text-3xl font-bold tracking-tight mb-1 bg-clip-text text-transparent bg-gradient-to-br from-white via-white to-white/70">
216 |                         ChatGPT Team</h1>
217 |                     <div class="flex items-center gap-2">
218 |                         <span class="relative flex h-2 w-2">
219 |                             <span
220 |                                 class="animate-ping absolute inline-flex h-full w-full rounded-full bg-green-400 opacity-75"></span>
221 |                             <span class="relative inline-flex rounded-full h-2 w-2 bg-green-500"></span>
222 |                         </span>
223 |                         <p class="text-zinc-400 text-xs font-medium tracking-wide">Linux.do 社区专属通道</p>
224 |                     </div>
225 |                 </div>
226 |             </div>
227 | 
228 |             <!-- Stats/Visuals -->
229 |             <div class="flex-1 flex flex-col justify-center gap-3 relative z-10 my-4 overflow-hidden">
230 |                 <!-- 核心数据 - 三列紧凑布局 -->
231 |                 <div class="grid grid-cols-3 gap-2">
232 |                     <div
233 |                         class="p-3 rounded-xl text-center group bg-white/[0.03] border border-white/5 backdrop-blur-sm hover:bg-white/[0.08] transition-all duration-300 hover:scale-[1.02] hover:border-blue-500/20 hover:shadow-lg shadow-black/20">
234 |                         <div class="text-[11px] text-zinc-500 mb-1 font-medium tracking-wide">已上车</div>
235 |                         <div class="text-2xl font-bold text-blue-400 drop-shadow-sm group-hover:text-blue-300 transition-colors"
236 |                             id="stat-in-use">--</div>
237 |                     </div>
238 |                     <div
239 |                         class="p-3 rounded-xl text-center group bg-white/[0.03] border border-white/5 backdrop-blur-sm hover:bg-white/[0.08] transition-all duration-300 hover:scale-[1.02] hover:border-amber-500/20 hover:shadow-lg shadow-black/20">
240 |                         <div class="text-[11px] text-zinc-500 mb-1 font-medium tracking-wide">待上车</div>
241 |                         <div class="text-2xl font-bold text-amber-400 drop-shadow-sm group-hover:text-amber-300 transition-colors"
242 |                             id="stat-pending">--</div>
243 |                     </div>
244 |                     <div
245 |                         class="p-3 rounded-xl text-center group bg-white/[0.03] border border-white/5 backdrop-blur-sm hover:bg-white/[0.08] transition-all duration-300 hover:scale-[1.02] hover:border-zinc-500/20 hover:shadow-lg shadow-black/20">
246 |                         <div class="text-[11px] text-zinc-500 mb-1 font-medium tracking-wide">总车位</div>
247 |                         <div class="text-2xl font-bold text-zinc-200 drop-shadow-sm group-hover:text-white transition-colors"
248 |                             id="stat-total">--</div>
249 |                     </div>
250 |                 </div>
251 | 
252 |                 <!-- 剩余名额突出显示 -->
253 |                 <div
254 |                     class="p-4 rounded-xl bg-gradient-to-br from-white/[0.04] to-transparent border border-white/5 backdrop-blur-sm hover:border-green-500/20 transition-all duration-300 group shadow-lg shadow-black/10 relative overflow-hidden">
255 |                     <div
256 |                         class="absolute inset-0 bg-green-500/5 opacity-0 group-hover:opacity-100 transition-opacity duration-300">
257 |                     </div>
258 |                     <div class="flex items-center justify-between relative z-10">
259 |                         <div class="flex items-center gap-3">
260 |                             <div
261 |                                 class="w-10 h-10 rounded-lg bg-green-500/10 flex items-center justify-center border border-green-500/10 group-hover:bg-green-500/20 group-hover:scale-110 transition-all duration-300 ring-1 ring-inset ring-green-500/5">
262 |                                 <i class="fa-solid fa-ticket text-green-400 text-base drop-shadow-md"></i>
263 |                             </div>
264 |                             <div>
265 |                                 <div class="text-[11px] text-zinc-500 font-medium tracking-wide mb-0.5">剩余名额
266 |                                 </div>
267 |                                 <div class="text-2xl font-bold text-green-400 tracking-tight drop-shadow-sm"
268 |                                     id="stat-available">--</div>
269 |                             </div>
270 |                         </div>
271 |                         <div class="text-right min-w-[40%] pl-4">
272 |                             <div class="w-full h-2 bg-zinc-800/50 rounded-full overflow-hidden border border-white/5"
273 |                                 id="capacity-bar">
274 |                                 <div class="h-full bg-gradient-to-r from-green-500 to-emerald-300 shadow-[0_0_10px_rgba(16,185,129,0.4)] transition-all duration-1000 relative"
275 |                                     style="width: 0%">
276 |                                     <div class="absolute right-0 top-0 bottom-0 w-1 bg-white/50 blur-[1px]"></div>
277 |                                 </div>
278 |                             </div>
279 |                             <div class="text-xs text-zinc-400 mt-1.5 font-mono text-right" id="capacity-text">--%
280 |                             </div>
281 |                         </div>
282 |                     </div>
283 |                 </div>
284 | 
285 |                 <!-- 订阅信息 - 简化版 -->
286 |                 <div
287 |                     class="p-4 rounded-xl bg-white/[0.02] border border-white/5 backdrop-blur-sm group hover:bg-white/[0.04] transition-all duration-300">
288 |                     <div class="flex items-center justify-between mb-3 pb-2 border-b border-white/5 border-dashed">
289 |                         <span class="text-[11px] text-zinc-500 font-medium tracking-wide flex items-center gap-1.5">
290 |                             <i class="fa-solid fa-server text-[10px] opacity-70"></i>
291 |                             TEAM-STATUS
292 |                         </span>
293 |                         <div class="flex gap-1.5" id="sub-badges"></div>
294 |                     </div>
295 |                     <div class="grid grid-cols-2 gap-3 text-xs">
296 |                         <div class="flex flex-col gap-1">
297 |                             <span class="text-zinc-500 text-[11px]">有效期至</span>
298 |                             <span class="text-zinc-300 font-mono" id="sub-end-date">
299 |                                 <span class="animate-pulse w-16 h-3 bg-white/10 inline-block rounded"></span>
300 |                             </span>
301 |                         </div>
302 |                         <div class="flex flex-col gap-1 text-right">
303 |                             <span class="text-zinc-500 text-[11px]">更新时间</span>
304 |                             <span class="text-zinc-400 font-mono truncate" id="sub-updated">--</span>
305 |                         </div>
306 |                     </div>
307 |                 </div>
308 |             </div>
309 | 
310 |             <!-- Footer -->
311 |             <div class="relative z-10 shrink-0">
312 |                 <div class="flex items-center gap-3 pt-3 border-t border-white/5">
313 |                     <a href="{{ email_web_url }}" target="_blank"
314 |                         class="link-icon w-7 h-7 rounded-lg bg-white/5 flex items-center justify-center hover:bg-white/10 hover:text-white text-zinc-500 transition-all border border-transparent hover:border-white/10">
315 |                         <i class="fa-solid fa-inbox text-[10px]"></i>
316 |                     </a>
317 |                     <a href="https://chatgpt.com/" target="_blank"
318 |                         class="link-icon w-7 h-7 rounded-lg bg-white/5 flex items-center justify-center hover:bg-white/10 hover:text-white text-zinc-500 transition-all border border-transparent hover:border-white/10">
319 |                         <i class="fa-solid fa-robot text-[10px]"></i>
320 |                     </a>
321 |                     <a href="https://linux.do/" target="_blank"
322 |                         class="link-icon w-7 h-7 rounded-lg bg-white/5 flex items-center justify-center hover:bg-white/10 hover:text-white text-zinc-500 transition-all border border-transparent hover:border-white/10">
323 |                         <i class="fa-solid fa-comments text-[10px]"></i>
324 |                     </a>
325 |                 </div>
326 |             </div>
327 |         </div>
328 | 
329 |         <!-- Right Panel: Login Action -->
330 |         <div class="w-full md:w-[55%] p-8 md:p-16 flex flex-col justify-center relative bg-black/20">
331 |             <div class="max-w-sm mx-auto w-full">
332 |                 <div class="text-center mb-10">
333 |                     <h2 class="text-2xl font-bold mb-3 glow-text">感谢vv佬</h2>
334 |                     <p class="text-zinc-500 text-sm leading-relaxed">
335 |                         车门焊死 随时翻车
336 |                     </p>
337 |                 </div>
338 | 
339 |                 <!-- Status Badge -->
340 |                 <div class="flex justify-center mb-8">
341 |                     <div id="availability-badge"
342 |                         class="inline-flex items-center gap-2 px-4 py-2 rounded-full text-xs font-semibold bg-white/5 border border-white/10 backdrop-blur-md">
343 |                         <span class="w-1.5 h-1.5 rounded-full bg-zinc-500"></span>
344 |                         <span>检查名额中...</span>
345 |                     </div>
346 |                 </div>
347 | 
348 |                 <!-- Login Button -->
349 |                 <!-- Login Button -->
350 |                 <a href="/login" id="login-btn" tabIndex="0"
351 |                     class="liquid-btn relative inline-flex gap-2 whitespace-nowrap rounded-lg text-sm font-medium cursor-pointer overflow-hidden disabled:pointer-events-none disabled:opacity-50 outline-none focus-visible:border-ring focus-visible:ring-ring/50 focus-visible:ring-[3px] aria-invalid:ring-destructive/20 dark:aria-invalid:ring-destructive/40 aria-invalid:border-destructive hover:bg-white/10 text-white h-12 px-6 py-2 items-center justify-center w-full transition-all duration-300 border border-white/10">
352 |                     <div class="flex items-center justify-center gap-3">
353 |                         <div class="flex-shrink-0 w-6 h-6 flex items-center justify-center">
354 |                             <svg width="24" height="24" viewBox="0 0 120 120" xmlns="http://www.w3.org/2000/svg"
355 |                                 fill="none" style="min-width: 24px; min-height: 24px; flex-shrink: 0;">
356 |                                 <clipPath id="a">
357 |                                     <circle cx="60" cy="60" r="47"></circle>
358 |                                 </clipPath>
359 |                                 <circle fill="#f0f0f0" cx="60" cy="60" r="50"></circle>
360 |                                 <rect fill="#1c1c1e" clip-path="url(#a)" x="10" y="10" width="100" height="30"></rect>
361 |                                 <rect fill="#f0f0f0" clip-path="url(#a)" x="10" y="40" width="100" height="40"></rect>
362 |                                 <rect fill="#ffb003" clip-path="url(#a)" x="10" y="80" width="100" height="30"></rect>
363 |                             </svg>
364 |                         </div>
365 |                         <span class="transition-all duration-300 font-bold tracking-wide">使用 Linux Do 账户登录</span>
366 |                     </div>
367 |                 </a>
368 | 
369 |                 <!-- Full Notice (Hidden by default) -->
370 |                 <div id="seats-full-notice"
371 |                     class="hidden mt-6 p-4 rounded-xl bg-red-500/5 border border-red-500/10 text-center animate-fade-in">
372 |                     <div class="text-red-400 font-medium text-sm mb-1">⛔ 暂无名额</div>
373 |                     <div class="text-red-400/60 text-xs">当前车次已满员，请等待下一班</div>
374 |                 </div>
375 | 
376 |                 <div class="mt-8 text-center">
377 |                     <div
378 |                         class="inline-flex items-center gap-1.5 px-3 py-1 rounded bg-white/5 border border-white/5 text-[10px] text-zinc-500">
379 |                         <i class="fa-solid fa-shield-halved text-zinc-500"></i>
380 |                         <span>需要信任等级 1 级以上</span>
381 |                     </div>
382 |                 </div>
383 |             </div>
384 |         </div>
385 |     </div>
386 | 
387 |     <script>
388 |         function formatDate(dateInput) {
389 |             if (!dateInput) return '--';
390 |             // Handle both ISO string and Unix timestamp
391 |             const date = typeof dateInput === 'string' ? new Date(dateInput) : new Date(dateInput * 1000);
392 |             return date.toLocaleString('zh-CN', { year: 'numeric', month: '2-digit', day: '2-digit', hour: '2-digit', minute: '2-digit', hour12: false });
393 |         }
394 | 
395 |         function loadStats() {
396 |             const badge = document.getElementById('availability-badge');
397 | 
398 |             fetch('/stats')
399 |                 .then(r => r.json())
400 |                 .then(data => {
401 |                     if (!data.success) return;
402 |                     const d = data.data;
403 |                     const available = (d.seats_entitled || 0) - (d.seats_in_use || 0) - (d.pending_invites || 0);
404 | 
405 |                     // Update Left Panel Stats
406 |                     animateValue("stat-in-use", 0, d.seats_in_use || 0, 1000);
407 |                     animateValue("stat-pending", 0, d.pending_invites || 0, 1000);
408 |                     animateValue("stat-total", 0, d.seats_entitled || 0, 1000);
409 |                     animateValue("stat-available", 0, available, 1000);
410 | 
411 |                     // Update capacity bar - 显示空闲比例（保留一位小数）
412 |                     const total = d.seats_entitled || 1;
413 |                     const used = (d.seats_in_use || 0) + (d.pending_invites || 0);
414 |                     const availablePercent = ((available / total) * 100).toFixed(1);
415 |                     const capacityBar = document.querySelector('#capacity-bar > div');
416 |                     const capacityText = document.getElementById('capacity-text');
417 |                     if (capacityBar) capacityBar.style.width = availablePercent + '%';
418 |                     if (capacityText) capacityText.textContent = availablePercent + '% 空闲';
419 | 
420 |                     // Update Subscription Badges - simplified
421 |                     const badgeContainer = document.getElementById('sub-badges');
422 |                     if (badgeContainer) {
423 |                         let html = '';
424 |                         if (d.plan_type) {
425 |                             html += `<span class="px-2.5 py-1 rounded text-[11px] font-medium bg-blue-500/10 text-blue-400 border border-blue-500/20">${d.plan_type.toUpperCase()}</span>`;
426 |                         }
427 |                         if (d.will_renew !== undefined) {
428 |                             html += `<span class="px-2.5 py-1 rounded text-[11px] font-medium ${d.will_renew ? 'bg-green-500/10 text-green-400 border-green-500/20' : 'bg-amber-500/10 text-amber-400 border-amber-500/20'} border">${d.will_renew ? '自动续费' : '不续费'}</span>`;
429 |                         }
430 |                         badgeContainer.innerHTML = html;
431 |                     }
432 | 
433 |                     // Update Dates
434 |                     if (d.active_until) {
435 |                         const dateEl = document.getElementById('sub-end-date');
436 |                         if (dateEl) {
437 |                             dateEl.textContent = formatDate(d.active_until).split(' ')[0];
438 |                         }
439 |                     }
440 |                     if (data.updated_at) {
441 |                         const updatedEl = document.getElementById('sub-updated');
442 |                         if (updatedEl) updatedEl.textContent = data.updated_at;
443 |                     }
444 | 
445 |                     // Update UI State
446 |                     const loginBtn = document.getElementById('login-btn');
447 |                     const fullNotice = document.getElementById('seats-full-notice');
448 | 
449 |                     if (available <= 0) {
450 |                         // 名额已满 - 红色
451 |                         badge.className = 'inline-flex items-center gap-2 px-4 py-2 rounded-full text-xs font-semibold bg-red-500/10 border border-red-500/20 text-red-400 backdrop-blur-md transition-all';
452 |                         badge.innerHTML = '<span class="w-1.5 h-1.5 rounded-full bg-red-500"></span><span>名额已满</span>';
453 |                         loginBtn.classList.add('opacity-50', 'pointer-events-none', 'grayscale');
454 |                         fullNotice.classList.remove('hidden');
455 |                     } else if (available <= 5) {
456 |                         // 名额紧张 (<=5) - 红色警告
457 |                         badge.className = 'inline-flex items-center gap-2 px-4 py-2 rounded-full text-xs font-semibold bg-red-500/10 border border-red-500/20 text-red-400 backdrop-blur-md transition-all';
458 |                         badge.innerHTML = '<span class="w-1.5 h-1.5 rounded-full bg-red-500 animate-pulse"></span><span>即将满员 (仅剩 ' + available + ')</span>';
459 |                         loginBtn.classList.remove('opacity-50', 'pointer-events-none', 'grayscale');
460 |                         fullNotice.classList.add('hidden');
461 |                     } else if (available <= 20) {
462 |                         // 名额较少 (<=20) - 橙色
463 |                         badge.className = 'inline-flex items-center gap-2 px-4 py-2 rounded-full text-xs font-semibold bg-amber-500/10 border border-amber-500/20 text-amber-400 backdrop-blur-md transition-all';
464 |                         badge.innerHTML = '<span class="w-1.5 h-1.5 rounded-full bg-amber-500 animate-pulse"></span><span>名额紧张 (剩余 ' + available + ')</span>';
465 |                         loginBtn.classList.remove('opacity-50', 'pointer-events-none', 'grayscale');
466 |                         fullNotice.classList.add('hidden');
467 |                     } else {
468 |                         // 名额充足 (>20) - 绿色
469 |                         badge.className = 'inline-flex items-center gap-2 px-4 py-2 rounded-full text-xs font-semibold bg-green-500/10 border border-green-500/20 text-green-400 backdrop-blur-md transition-all';
470 |                         badge.innerHTML = '<span class="w-1.5 h-1.5 rounded-full bg-green-500 animate-pulse"></span><span>名额充足 (剩余 ' + available + ')</span>';
471 |                         loginBtn.classList.remove('opacity-50', 'pointer-events-none', 'grayscale');
472 |                         fullNotice.classList.add('hidden');
473 |                     }
474 |                 })
475 |                 .catch(() => {
476 |                     badge.innerHTML = '<span class="w-1.5 h-1.5 rounded-full bg-yellow-500"></span><span>系统维护中</span>';
477 |                 });
478 |         }
479 | 
480 |         function animateValue(id, start, end, duration) {
481 |             const obj = document.getElementById(id);
482 |             if (!obj) return;
483 |             let startTimestamp = null;
484 |             const step = (timestamp) => {
485 |                 if (!startTimestamp) startTimestamp = timestamp;
486 |                 const progress = Math.min((timestamp - startTimestamp) / duration, 1);
487 |                 obj.innerHTML = Math.floor(progress * (end - start) + start);
488 |                 if (progress < 1) {
489 |                     window.requestAnimationFrame(step);
490 |                 }
491 |             };
492 |             window.requestAnimationFrame(step);
493 |         }
494 | 
495 |         function showCrashed() {
496 |             document.getElementById('loading-screen').classList.add('hidden');
497 |             document.getElementById('main-content').classList.add('hidden');
498 |             document.getElementById('crashed-screen').classList.remove('hidden');
499 |         }
500 | 
501 |         function showMain() {
502 |             document.getElementById('loading-screen').classList.add('hidden');
503 |             document.getElementById('crashed-screen').classList.add('hidden');
504 |             document.getElementById('main-content').classList.remove('hidden');
505 |         }
506 | 
507 |         // 初始检查 Team 状态
508 |         function checkTeamStatus() {
509 |             fetch('/stats')
510 |                 .then(r => r.json())
511 |                 .then(data => {
512 |                     if (!data.success) {
513 |                         // API 返回失败，车已翻
514 |                         showCrashed();
515 |                         return;
516 |                     }
517 |                     // 成功，显示主界面
518 |                     showMain();
519 |                     loadStats();
520 |                     setInterval(loadStats, 30000);
521 |                 })
522 |                 .catch(err => {
523 |                     // 网络错误或服务不可用，车已翻
524 |                     console.error('Team status check failed:', err);
525 |                     showCrashed();
526 |                 });
527 |         }
528 | 
529 |         // 页面加载时检查状态
530 |         checkTeamStatus();
531 |     </script>
532 | </body>
533 | 
534 | </html>


--------------------------------------------------------------------------------
/templates/admin.html:
--------------------------------------------------------------------------------
  1 | <!DOCTYPE html>
  2 | <html lang="zh-CN" class="dark">
  3 | 
  4 | <head>
  5 |     <meta charset="UTF-8">
  6 |     <meta name="viewport" content="width=device-width, initial-scale=1.0">
  7 |     <title>后台管理 - Team 邀请助手</title>
  8 |     <script src="https://cdn.tailwindcss.com"></script>
  9 |     <link href="https://fonts.googleapis.com/css2?family=Inter:wght@300;400;500;600;700&display=swap" rel="stylesheet">
 10 |     <script>
 11 |         tailwind.config = {
 12 |             darkMode: 'class',
 13 |             theme: {
 14 |                 extend: {
 15 |                     fontFamily: {
 16 |                         sans: ['Inter', '-apple-system', 'BlinkMacSystemFont', 'Segoe UI', 'Roboto', 'sans-serif'],
 17 |                         mono: ['SF Mono', 'Menlo', 'Monaco', 'Courier New', 'monospace'],
 18 |                     },
 19 |                     colors: {
 20 |                         ios: {
 21 |                             bg: '#000000',
 22 |                             card: 'rgba(28, 28, 30, 0.65)',
 23 |                             border: 'rgba(255, 255, 255, 0.12)',
 24 |                             blue: '#0A84FF',
 25 |                             gray: '#8E8E93',
 26 |                         }
 27 |                     },
 28 |                     animation: {
 29 |                         'fade-in': 'fadeIn 0.6s cubic-bezier(0.16, 1, 0.3, 1) forwards',
 30 |                     },
 31 |                     keyframes: {
 32 |                         fadeIn: {
 33 |                             'from': { opacity: '0' },
 34 |                             'to': { opacity: '1' },
 35 |                         }
 36 |                     },
 37 |                 }
 38 |             }
 39 |         }
 40 |     </script>
 41 |     <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.5.1/css/all.min.css">
 42 |     <style>
 43 |         body {
 44 |             background: #000000;
 45 |             font-family: 'Inter', sans-serif;
 46 |             -webkit-font-smoothing: antialiased;
 47 |         }
 48 | 
 49 |         .bg-mesh {
 50 |             position: fixed;
 51 |             inset: 0;
 52 |             z-index: -1;
 53 |             background: radial-gradient(ellipse 80% 50% at 50% -20%, rgba(139, 92, 246, 0.08), transparent);
 54 |             opacity: 0.6;
 55 |         }
 56 | 
 57 |         .glass-card {
 58 |             background: var(--ios-card, rgba(28, 28, 30, 0.65));
 59 |             border: 1px solid rgba(255, 255, 255, 0.1);
 60 |         }
 61 | 
 62 |         .table-row {
 63 |             transition: background 0.2s ease;
 64 |         }
 65 | 
 66 |         .table-row:hover {
 67 |             background: rgba(255, 255, 255, 0.03);
 68 |         }
 69 | 
 70 |         .stat-card {
 71 |             background: rgba(255, 255, 255, 0.03);
 72 |             border: 1px solid rgba(255, 255, 255, 0.05);
 73 |             transition: all 0.2s ease;
 74 |         }
 75 | 
 76 |         .stat-card:hover {
 77 |             background: rgba(255, 255, 255, 0.06);
 78 |             transform: translateY(-1px);
 79 |         }
 80 | 
 81 |         /* Custom Scrollbar */
 82 |         ::-webkit-scrollbar {
 83 |             width: 8px;
 84 |             height: 8px;
 85 |         }
 86 | 
 87 |         ::-webkit-scrollbar-track {
 88 |             background: transparent;
 89 |         }
 90 | 
 91 |         ::-webkit-scrollbar-thumb {
 92 |             background: rgba(255, 255, 255, 0.1);
 93 |             border-radius: 4px;
 94 |         }
 95 | 
 96 |         ::-webkit-scrollbar-thumb:hover {
 97 |             background: rgba(255, 255, 255, 0.2);
 98 |         }
 99 | 
100 |         /* Tab Styles */
101 |         .tab-btn {
102 |             position: relative;
103 |         }
104 | 
105 |         .tab-btn::after {
106 |             content: '';
107 |             position: absolute;
108 |             bottom: -1px;
109 |             left: 0;
110 |             right: 0;
111 |             height: 2px;
112 |             background: transparent;
113 |             transition: all 0.2s ease;
114 |         }
115 | 
116 |         .tab-btn.active {
117 |             color: white;
118 |         }
119 | 
120 |         .tab-btn.active::after {
121 |             background: #60a5fa;
122 |             /* blue-400 */
123 |         }
124 |     </style>
125 | </head>
126 | 
127 | <body class="text-white min-h-screen p-4 sm:p-8">
128 |     <div class="bg-mesh"></div>
129 | 
130 |     <div class="max-w-7xl mx-auto animate-fade-in">
131 |         <!-- Header -->
132 |         <div class="flex items-end justify-between mb-8">
133 |             <div class="flex items-center gap-4">
134 |                 <div
135 |                     class="w-12 h-12 rounded-[18px] bg-gradient-to-br from-violet-500/20 to-purple-500/20 border border-white/5 flex items-center justify-center shadow-lg shadow-violet-900/10">
136 |                     <i class="fa-solid fa-shield-halved text-violet-400 text-lg"></i>
137 |                 </div>
138 |                 <div>
139 |                     <h1 class="text-2xl font-bold tracking-tight text-white">管理后台</h1>
140 |                     <p class="text-sm text-zinc-500 font-medium">Team 邀请管理系统</p>
141 |                 </div>
142 |             </div>
143 |             <div class="flex items-center gap-4">
144 |                 <a href="/"
145 |                     class="flex items-center gap-2 text-sm text-zinc-400 hover:text-white transition-colors py-2 px-4 rounded-lg hover:bg-white/5 font-medium">
146 |                     <i class="fa-solid fa-home text-xs"></i> 首页
147 |                 </a>
148 |                 <a href="/admin/logout"
149 |                     class="flex items-center gap-2 text-sm text-zinc-400 hover:text-red-400 transition-colors py-2 px-4 rounded-lg hover:bg-white/5 font-medium">
150 |                     <i class="fa-solid fa-right-from-bracket text-xs"></i> 退出登录
151 |                 </a>
152 |             </div>
153 |         </div>
154 | 
155 |         <!-- Stats Grid (Always Visible) -->
156 |         <div class="grid grid-cols-1 sm:grid-cols-4 gap-4 mb-8">
157 |             <div class="stat-card p-6 rounded-2xl group">
158 |                 <div class="flex items-center justify-between mb-3">
159 |                     <div class="text-sm font-semibold text-zinc-500 tracking-wider">已上车</div>
160 |                     <i
161 |                         class="fa-solid fa-user-check text-zinc-600 text-lg group-hover:text-blue-500 transition-colors"></i>
162 |                 </div>
163 |                 <div class="text-4xl font-bold text-white group-hover:text-blue-400 transition-colors" id="stat-in-use">-
164 |                 </div>
165 |             </div>
166 |             <div class="stat-card p-6 rounded-2xl group">
167 |                 <div class="flex items-center justify-between mb-3">
168 |                     <div class="text-sm font-semibold text-zinc-500 tracking-wider">待上车</div>
169 |                     <i
170 |                         class="fa-solid fa-clock text-zinc-600 text-lg group-hover:text-amber-500 transition-colors"></i>
171 |                 </div>
172 |                 <div class="text-4xl font-bold text-white group-hover:text-amber-400 transition-colors"
173 |                     id="stat-pending">-</div>
174 |             </div>
175 |             <div class="stat-card p-6 rounded-2xl group">
176 |                 <div class="flex items-center justify-between mb-3">
177 |                     <div class="text-sm font-semibold text-zinc-500 tracking-wider">总车位</div>
178 |                     <i
179 |                         class="fa-solid fa-users text-zinc-600 text-lg group-hover:text-zinc-400 transition-colors"></i>
180 |                 </div>
181 |                 <div class="text-4xl font-bold text-white group-hover:text-zinc-300 transition-colors" id="stat-total">-
182 |                 </div>
183 |             </div>
184 |             <div class="stat-card p-6 rounded-2xl group">
185 |                 <div class="flex items-center justify-between mb-3">
186 |                     <div class="text-sm font-semibold text-zinc-500 tracking-wider">剩余名额</div>
187 |                     <i
188 |                         class="fa-solid fa-ticket text-zinc-600 text-lg group-hover:text-green-500 transition-colors"></i>
189 |                 </div>
190 |                 <div class="text-4xl font-bold text-white group-hover:text-green-400 transition-colors"
191 |                     id="stat-available">-</div>
192 |             </div>
193 |         </div>
194 | 
195 |         <!-- Tabs Navigation -->
196 |         <div class="flex items-center gap-1 mb-6 border-b border-white/10 px-2 overflow-x-auto">
197 |             <button onclick="switchTab('pending')" id="tab-btn-pending"
198 |                 class="tab-btn px-4 py-3 text-sm font-medium text-zinc-400 hover:text-zinc-200 transition-colors flex items-center gap-2 whitespace-nowrap active">
199 |                 <i class="fa-solid fa-clock text-yellow-500/80"></i>
200 |                 待处理邀请
201 |                 <span id="tab-count-pending"
202 |                     class="bg-white/10 text-zinc-300 px-1.5 py-0.5 rounded textxs hidden">0</span>
203 |             </button>
204 |             <button onclick="switchTab('members')" id="tab-btn-members"
205 |                 class="tab-btn px-4 py-3 text-sm font-medium text-zinc-400 hover:text-zinc-200 transition-colors flex items-center gap-2 whitespace-nowrap">
206 |                 <i class="fa-solid fa-users text-blue-500/80"></i>
207 |                 空间成员
208 |                 <span id="tab-count-members"
209 |                     class="bg-white/10 text-zinc-300 px-1.5 py-0.5 rounded text-xs hidden">0</span>
210 |             </button>
211 |             <button onclick="switchTab('records')" id="tab-btn-records"
212 |                 class="tab-btn px-4 py-3 text-sm font-medium text-zinc-400 hover:text-zinc-200 transition-colors flex items-center gap-2 whitespace-nowrap">
213 |                 <i class="fa-solid fa-list text-zinc-500"></i>
214 |                 近期活动记录
215 |             </button>
216 |         </div>
217 | 
218 |         <!-- Tab Contents -->
219 | 
220 |         <!-- PENDING TAB -->
221 |         <div id="tab-content-pending" class="block">
222 |             <div class="glass-card rounded-2xl overflow-hidden shadow-2xl">
223 |                 <div class="p-5 border-b border-white/5 flex items-center justify-between bg-white/[0.02]">
224 |                     <h2 class="font-semibold text-base text-white flex items-center gap-2">
225 |                         <i class="fa-solid fa-clock text-yellow-500 text-sm"></i>
226 |                         待处理邀请列表
227 |                     </h2>
228 |                     <button onclick="loadPendingInvites()" id="refresh-pending-btn"
229 |                         class="text-sm font-medium text-yellow-400 hover:text-yellow-300 transition-colors flex items-center gap-2 px-3 py-1.5 rounded-lg hover:bg-yellow-500/10">
230 |                         <i id="refresh-pending-icon" class="fa-solid fa-refresh text-xs transition-transform"></i> 刷新
231 |                     </button>
232 |                 </div>
233 | 
234 |                 <div class="overflow-x-auto min-h-[400px]">
235 |                     <table class="w-full text-left border-collapse">
236 |                         <thead>
237 |                             <tr
238 |                                 class="text-xs uppercase tracking-wider text-zinc-500 border-b border-white/5 bg-white/[0.01]">
239 |                                 <th class="p-4 font-semibold">邮箱地址</th>
240 |                                 <th class="p-4 font-semibold">角色</th>
241 |                                 <th class="p-4 font-semibold">邀请时间</th>
242 |                                 <th class="p-4 font-semibold">ID</th>
243 |                             </tr>
244 |                         </thead>
245 |                         <tbody id="pending-body" class="text-[13px] text-zinc-300">
246 |                             <tr>
247 |                                 <td colspan="4" class="p-8 text-center text-zinc-500">
248 |                                     <i class="fa-solid fa-spinner animate-spin mr-2"></i> 正在加载...
249 |                                 </td>
250 |                             </tr>
251 |                         </tbody>
252 |                     </table>
253 |                     <!-- Empty State for Pending -->
254 |                     <div id="pending-empty" class="hidden py-24 text-center">
255 |                         <div class="w-12 h-12 rounded-full bg-white/5 flex items-center justify-center mx-auto mb-3">
256 |                             <i class="fa-solid fa-check-double text-xl text-green-500"></i>
257 |                         </div>
258 |                         <h3 class="text-white font-medium mb-1">没有待处理邀请</h3>
259 |                         <p class="text-sm text-zinc-500">所有邀请已被处理完毕</p>
260 |                     </div>
261 |                 </div>
262 | 
263 |                 <!-- Pending Pagination -->
264 |                 <div id="pending-pagination"
265 |                     class="border-t border-white/5 p-4 flex items-center justify-between bg-white/[0.02] hidden">
266 |                     <div class="text-xs text-zinc-500">
267 |                         显示 <span id="pending-start">0</span> - <span id="pending-end">0</span> 条，共 <span
268 |                             id="pending-total-items">0</span> 条
269 |                     </div>
270 |                     <div class="flex gap-2">
271 |                         <button onclick="changePage('pending', -1)" id="pending-prev"
272 |                             class="px-3 py-1 text-xs font-medium rounded border border-white/10 text-zinc-400 hover:text-white hover:bg-white/5 disabled:opacity-50 disabled:cursor-not-allowed">
273 |                             上一页
274 |                         </button>
275 |                         <span id="pending-page-info"
276 |                             class="px-2 py-1 text-xs text-zinc-400 font-mono flex items-center">1/1</span>
277 |                         <button onclick="changePage('pending', 1)" id="pending-next"
278 |                             class="px-3 py-1 text-xs font-medium rounded border border-white/10 text-zinc-400 hover:text-white hover:bg-white/5 disabled:opacity-50 disabled:cursor-not-allowed">
279 |                             下一页
280 |                         </button>
281 |                     </div>
282 |                 </div>
283 |             </div>
284 |         </div>
285 | 
286 |         <!-- MEMBERS TAB -->
287 |         <div id="tab-content-members" class="hidden">
288 |             <div class="glass-card rounded-2xl overflow-hidden shadow-2xl">
289 |                 <div class="p-5 border-b border-white/5 flex items-center justify-between bg-white/[0.02]">
290 |                     <h2 class="font-semibold text-base text-white flex items-center gap-2">
291 |                         <i class="fa-solid fa-users text-blue-500 text-sm"></i>
292 |                         空间成员列表
293 |                     </h2>
294 |                     <button onclick="loadMembers()" id="refresh-members-btn"
295 |                         class="text-sm font-medium text-blue-400 hover:text-blue-300 transition-colors flex items-center gap-2 px-3 py-1.5 rounded-lg hover:bg-blue-500/10">
296 |                         <i id="refresh-members-icon" class="fa-solid fa-refresh text-xs transition-transform"></i> 刷新
297 |                     </button>
298 |                 </div>
299 | 
300 |                 <div class="overflow-x-auto min-h-[400px]">
301 |                     <table class="w-full text-left border-collapse">
302 |                         <thead>
303 |                             <tr
304 |                                 class="text-xs uppercase tracking-wider text-zinc-500 border-b border-white/5 bg-white/[0.01]">
305 |                                 <th class="p-4 font-semibold">用户名</th>
306 |                                 <th class="p-4 font-semibold">邮箱地址</th>
307 |                                 <th class="p-4 font-semibold">角色</th>
308 |                                 <th class="p-4 font-semibold">加入时间</th>
309 |                                 <th class="p-4 font-semibold">状态</th>
310 |                             </tr>
311 |                         </thead>
312 |                         <tbody id="members-body" class="text-[13px] text-zinc-300">
313 |                             <tr>
314 |                                 <td colspan="5" class="p-8 text-center text-zinc-500">
315 |                                     <i class="fa-solid fa-spinner animate-spin mr-2"></i> 正在加载...
316 |                                 </td>
317 |                             </tr>
318 |                         </tbody>
319 |                     </table>
320 |                     <!-- Empty State for Members -->
321 |                     <div id="members-empty" class="hidden py-24 text-center">
322 |                         <div class="w-12 h-12 rounded-full bg-white/5 flex items-center justify-center mx-auto mb-3">
323 |                             <i class="fa-solid fa-user-slash text-xl text-zinc-500"></i>
324 |                         </div>
325 |                         <h3 class="text-white font-medium mb-1">暂无成员</h3>
326 |                         <p class="text-sm text-zinc-500">空间内还没有成员</p>
327 |                     </div>
328 |                 </div>
329 | 
330 |                 <!-- Members Pagination -->
331 |                 <div id="members-pagination"
332 |                     class="border-t border-white/5 p-4 flex items-center justify-between bg-white/[0.02] hidden">
333 |                     <div class="text-xs text-zinc-500">
334 |                         显示 <span id="members-start">0</span> - <span id="members-end">0</span> 条，共 <span
335 |                             id="members-total-items">0</span> 条
336 |                     </div>
337 |                     <div class="flex gap-2">
338 |                         <button onclick="changePage('members', -1)" id="members-prev"
339 |                             class="px-3 py-1 text-xs font-medium rounded border border-white/10 text-zinc-400 hover:text-white hover:bg-white/5 disabled:opacity-50 disabled:cursor-not-allowed">
340 |                             上一页
341 |                         </button>
342 |                         <span id="members-page-info"
343 |                             class="px-2 py-1 text-xs text-zinc-400 font-mono flex items-center">1/1</span>
344 |                         <button onclick="changePage('members', 1)" id="members-next"
345 |                             class="px-3 py-1 text-xs font-medium rounded border border-white/10 text-zinc-400 hover:text-white hover:bg-white/5 disabled:opacity-50 disabled:cursor-not-allowed">
346 |                             下一页
347 |                         </button>
348 |                     </div>
349 |                 </div>
350 |             </div>
351 |         </div>
352 | 
353 |         <!-- RECORDS TAB -->
354 |         <div id="tab-content-records" class="hidden">
355 |             <div class="glass-card rounded-2xl overflow-hidden shadow-2xl">
356 |                 <div class="p-5 border-b border-white/5 flex items-center justify-between bg-white/[0.02]">
357 |                     <h2 class="font-semibold text-base text-white flex items-center gap-2">
358 |                         <i class="fa-solid fa-list text-zinc-500 text-sm"></i>
359 |                         近期活动记录
360 |                     </h2>
361 |                     <button onclick="loadRecords()" id="refresh-records-btn"
362 |                         class="text-sm font-medium text-blue-400 hover:text-blue-300 transition-colors flex items-center gap-2 px-3 py-1.5 rounded-lg hover:bg-blue-500/10">
363 |                         <i id="refresh-records-icon" class="fa-solid fa-refresh text-xs transition-transform"></i> 刷新数据
364 |                     </button>
365 |                 </div>
366 | 
367 |                 <div class="overflow-x-auto min-h-[400px]">
368 |                     <table class="w-full text-left border-collapse">
369 |                         <thead>
370 |                             <tr
371 |                                 class="text-xs uppercase tracking-wider text-zinc-500 border-b border-white/5 bg-white/[0.01]">
372 |                                 <th class="p-5 font-semibold w-24">ID</th>
373 |                                 <th class="p-5 font-semibold">用户</th>
374 |                                 <th class="p-5 font-semibold">信任等级</th>
375 |                                 <th class="p-5 font-semibold">分配邮箱</th>
376 |                                 <th class="p-5 font-semibold">密码</th>
377 |                                 <th class="p-5 font-semibold">状态</th>
378 |                                 <th class="p-5 font-semibold">时间</th>
379 |                                 <th class="p-5 font-semibold">IP 地址</th>
380 |                             </tr>
381 |                         </thead>
382 |                         <tbody id="records-body" class="text-[13px] text-zinc-300">
383 |                             <tr>
384 |                                 <td colspan="8" class="p-10 text-center text-zinc-500">
385 |                                     <i class="fa-solid fa-spinner animate-spin mr-2"></i> 正在加载数据...
386 |                                 </td>
387 |                             </tr>
388 |                         </tbody>
389 |                     </table>
390 |                     <!-- Empty State -->
391 |                     <div id="records-empty" class="hidden py-24 text-center">
392 |                         <div class="w-16 h-16 rounded-full bg-white/5 flex items-center justify-center mx-auto mb-4">
393 |                             <i class="fa-solid fa-inbox text-2xl text-zinc-600"></i>
394 |                         </div>
395 |                         <h3 class="text-white font-medium mb-1 text-lg">暂无记录</h3>
396 |                         <p class="text-sm text-zinc-500">所有新的邀请记录将显示在这里</p>
397 |                     </div>
398 |                 </div>
399 | 
400 |                 <!-- Records Pagination -->
401 |                 <div id="records-pagination"
402 |                     class="border-t border-white/5 p-4 flex items-center justify-between bg-white/[0.02] hidden">
403 |                     <div class="text-xs text-zinc-500">
404 |                         显示 <span id="records-start">0</span> - <span id="records-end">0</span> 条，共 <span
405 |                             id="records-total-items">0</span> 条
406 |                     </div>
407 |                     <div class="flex gap-2">
408 |                         <button onclick="changePage('records', -1)" id="records-prev"
409 |                             class="px-3 py-1 text-xs font-medium rounded border border-white/10 text-zinc-400 hover:text-white hover:bg-white/5 disabled:opacity-50 disabled:cursor-not-allowed">
410 |                             上一页
411 |                         </button>
412 |                         <span id="records-page-info"
413 |                             class="px-2 py-1 text-xs text-zinc-400 font-mono flex items-center">1/1</span>
414 |                         <button onclick="changePage('records', 1)" id="records-next"
415 |                             class="px-3 py-1 text-xs font-medium rounded border border-white/10 text-zinc-400 hover:text-white hover:bg-white/5 disabled:opacity-50 disabled:cursor-not-allowed">
416 |                             下一页
417 |                         </button>
418 |                     </div>
419 |                 </div>
420 |             </div>
421 |         </div>
422 |     </div>
423 | 
424 |     <script>
425 |         // Data Store
426 |         const appStore = {
427 |             pending: { items: [], page: 1, pageSize: 12 },
428 |             members: { items: [], page: 1, pageSize: 12 },
429 |             records: { items: [], page: 1, pageSize: 12 }
430 |         };
431 | 
432 |         function switchTab(tabName) {
433 |             // Update buttons
434 |             document.querySelectorAll('.tab-btn').forEach(btn => btn.classList.remove('active'));
435 |             document.getElementById(`tab-btn-${tabName}`).classList.add('active');
436 | 
437 |             // Update content
438 |             ['pending', 'members', 'records'].forEach(name => {
439 |                 const el = document.getElementById(`tab-content-${name}`);
440 |                 if (name === tabName) {
441 |                     el.classList.remove('hidden');
442 |                     el.classList.add('block');
443 |                 } else {
444 |                     el.classList.add('hidden');
445 |                     el.classList.remove('block');
446 |                 }
447 |             });
448 |         }
449 | 
450 |         function formatDateTime(isoString) {
451 |             if (!isoString) return '-';
452 |             const date = new Date(isoString);
453 |             return date.toLocaleString('zh-CN', {
454 |                 year: 'numeric',
455 |                 month: '2-digit',
456 |                 day: '2-digit',
457 |                 hour: '2-digit',
458 |                 minute: '2-digit',
459 |                 second: '2-digit',
460 |                 hour12: false
461 |             });
462 |         }
463 | 
464 |         // Generic render function for pagination
465 |         function renderTable(type, renderRowCallback) {
466 |             const store = appStore[type];
467 |             const tbody = document.getElementById(`${type}-body`);
468 |             const emptyState = document.getElementById(`${type}-empty`);
469 |             const pagination = document.getElementById(`${type}-pagination`);
470 | 
471 |             if (!store.items || store.items.length === 0) {
472 |                 tbody.innerHTML = '';
473 |                 emptyState.classList.remove('hidden');
474 |                 pagination.classList.add('hidden');
475 |                 return;
476 |             }
477 | 
478 |             emptyState.classList.add('hidden');
479 |             pagination.classList.remove('hidden');
480 | 
481 |             // Calculate pagination
482 |             const total = store.items.length;
483 |             const totalPages = Math.ceil(total / store.pageSize);
484 |             // Ensure page is valid
485 |             if (store.page > totalPages) store.page = totalPages;
486 |             if (store.page < 1) store.page = 1;
487 | 
488 |             const startIdx = (store.page - 1) * store.pageSize;
489 |             const endIdx = Math.min(startIdx + store.pageSize, total);
490 |             const pageItems = store.items.slice(startIdx, endIdx);
491 | 
492 |             // Render Rows
493 |             tbody.innerHTML = pageItems.map(renderRowCallback).join('');
494 | 
495 |             // Update Pagination UI
496 |             document.getElementById(`${type}-prev`).disabled = store.page <= 1;
497 |             document.getElementById(`${type}-next`).disabled = store.page >= totalPages;
498 |             document.getElementById(`${type}-page-info`).textContent = `${store.page} / ${totalPages}`;
499 |             document.getElementById(`${type}-start`).textContent = startIdx + 1;
500 |             document.getElementById(`${type}-end`).textContent = endIdx;
501 |             document.getElementById(`${type}-total-items`).textContent = total;
502 |         }
503 | 
504 |         function changePage(type, delta) {
505 |             const store = appStore[type];
506 |             store.page += delta;
507 | 
508 |             if (type === 'pending') {
509 |                 renderTable('pending', renderPendingRow);
510 |             } else if (type === 'members') {
511 |                 renderTable('members', renderMembersRow);
512 |             } else if (type === 'records') {
513 |                 renderTable('records', renderRecordsRow);
514 |             }
515 |         }
516 | 
517 |         // Render Callbacks
518 |         function renderPendingRow(item) {
519 |             return `
520 |                 <tr class="table-row border-b border-white/5 last:border-0">
521 |                     <td class="p-4">
522 |                         <div class="font-mono text-sm text-yellow-400 select-all">${item.email_address}</div>
523 |                     </td>
524 |                     <td class="p-4">
525 |                         <span class="px-2 py-0.5 rounded bg-blue-500/10 text-blue-400 text-[11px] border border-blue-500/10">${item.role}</span>
526 |                     </td>
527 |                     <td class="p-4 text-[12px] text-zinc-400">${formatDateTime(item.created_time)}</td>
528 |                     <td class="p-4 text-[10px] text-zinc-600 font-mono">${item.id.slice(0, 8)}...</td>
529 |                 </tr>
530 |             `;
531 |         }
532 | 
533 |         function renderMembersRow(item) {
534 |             const roleClass = item.role === 'account-owner'
535 |                 ? 'bg-purple-500/10 text-purple-400 border-purple-500/10'
536 |                 : 'bg-blue-500/10 text-blue-400 border-blue-500/10';
537 |             const roleText = item.role === 'account-owner' ? '管理员' : '成员';
538 |             const statusClass = item.deactivated_time
539 |                 ? 'bg-red-500/10 text-red-400 border-red-500/10'
540 |                 : 'bg-green-500/10 text-green-400 border-green-500/10';
541 |             const statusText = item.deactivated_time ? '已停用' : '活跃';
542 | 
543 |             return `
544 |                 <tr class="table-row border-b border-white/5 last:border-0">
545 |                     <td class="p-4">
546 |                         <div class="text-white font-medium">${item.name || '-'}</div>
547 |                     </td>
548 |                     <td class="p-4">
549 |                         <div class="font-mono text-sm text-zinc-300 select-all">${item.email}</div>
550 |                     </td>
551 |                     <td class="p-4">
552 |                         <span class="px-2 py-0.5 rounded text-[11px] border ${roleClass}">${roleText}</span>
553 |                     </td>
554 |                     <td class="p-4 text-[12px] text-zinc-400">${formatDateTime(item.created_time)}</td>
555 |                     <td class="p-4">
556 |                         <span class="px-2 py-0.5 rounded text-[11px] border ${statusClass}">${statusText}</span>
557 |                     </td>
558 |                 </tr>
559 |             `;
560 |         }
561 | 
562 |         function renderRecordsRow(r) {
563 |             return `
564 |                 <tr class="table-row border-b border-white/5 last:border-0 group">
565 |                     <td class="p-4 text-zinc-500 font-mono text-sm">#${r.id}</td>
566 |                     <td class="p-4">
567 |                         <div class="text-white font-medium text-sm">${r.linuxdo_name || r.linuxdo_username || '-'}</div>
568 |                         <div class="text-xs text-zinc-500">@${r.linuxdo_username}</div>
569 |                     </td>
570 |                     <td class="p-4">
571 |                         <span class="px-2.5 py-1 rounded bg-white/5 text-zinc-400 text-xs border border-white/5">TL${r.trust_level}</span>
572 |                     </td>
573 |                     <td class="p-4 font-mono text-sm text-zinc-400 select-all">${r.email}</td>
574 |                     <td class="p-4 font-mono text-sm text-zinc-500">${r.password}</td>
575 |                     <td class="p-4">
576 |                         ${r.success
577 |                     ? '<span class="px-2.5 py-1 rounded-full bg-green-500/10 text-green-400 text-xs border border-green-500/10 font-medium">Success</span>'
578 |                     : '<span class="px-2.5 py-1 rounded-full bg-red-500/10 text-red-400 text-xs border border-red-500/10 font-medium">Failed</span>'
579 |                 }
580 |                     </td>
581 |                     <td class="p-4 text-sm text-zinc-500">${r.created_at}</td>
582 |                     <td class="p-4 text-sm text-zinc-600 font-mono">${r.ip}</td>
583 |                 </tr>
584 |             `;
585 |         }
586 | 
587 |         // 存储基础数据用于计算
588 |         let statsData = { seats_entitled: 0, seats_in_use: 0 };
589 | 
590 |         function loadStats() {
591 |             fetch('/stats')
592 |                 .then(r => r.json())
593 |                 .then(data => {
594 |                     if (data.success && data.data) {
595 |                         const d = data.data;
596 |                         statsData.seats_entitled = d.seats_entitled || 0;
597 |                         statsData.seats_in_use = d.seats_in_use || 0;
598 | 
599 |                         document.getElementById('stat-in-use').textContent = statsData.seats_in_use;
600 |                         document.getElementById('stat-pending').textContent = d.pending_invites || 0;
601 |                         document.getElementById('stat-total').textContent = statsData.seats_entitled;
602 |                         updateAvailableSeats();
603 |                     }
604 |                 })
605 |                 .catch(() => { });
606 |         }
607 | 
608 |         // 重新计算并更新剩余名额
609 |         function updateAvailableSeats() {
610 |             const inUse = parseInt(document.getElementById('stat-in-use').textContent) || 0;
611 |             const pending = parseInt(document.getElementById('stat-pending').textContent) || 0;
612 |             const total = statsData.seats_entitled || parseInt(document.getElementById('stat-total').textContent) || 0;
613 |             const available = total - inUse - pending;
614 |             document.getElementById('stat-available').textContent = available;
615 |         }
616 | 
617 |         // 刷新动画辅助函数
618 |         function startRefreshAnimation(iconId) {
619 |             const icon = document.getElementById(iconId);
620 |             if (icon) {
621 |                 icon.classList.add('animate-spin');
622 |             }
623 |         }
624 | 
625 |         function stopRefreshAnimation(iconId) {
626 |             const icon = document.getElementById(iconId);
627 |             if (icon) {
628 |                 icon.classList.remove('animate-spin');
629 |             }
630 |         }
631 | 
632 |         function loadPendingInvites() {
633 |             startRefreshAnimation('refresh-pending-icon');
634 |             fetch('/api/admin/pending-invites')
635 |                 .then(r => r.json())
636 |                 .then(data => {
637 |                     if (data.success) {
638 |                         appStore.pending.items = data.items || [];
639 |                         renderTable('pending', renderPendingRow);
640 | 
641 |                         // Update badge - 使用 total 而不是 items.length
642 |                         const total = data.total || 0;
643 |                         const badge = document.getElementById('tab-count-pending');
644 |                         badge.textContent = total;
645 |                         if (total > 0) badge.classList.remove('hidden');
646 |                         else badge.classList.add('hidden');
647 | 
648 |                         // 同步更新顶部"待上车"数字
649 |                         document.getElementById('stat-pending').textContent = total;
650 |                         // 重新计算剩余名额
651 |                         updateAvailableSeats();
652 |                     }
653 |                 })
654 |                 .catch(err => console.error(err))
655 |                 .finally(() => stopRefreshAnimation('refresh-pending-icon'));
656 |         }
657 | 
658 |         function loadMembers() {
659 |             startRefreshAnimation('refresh-members-icon');
660 |             fetch('/api/admin/members')
661 |                 .then(r => r.json())
662 |                 .then(data => {
663 |                     if (data.success) {
664 |                         appStore.members.items = data.items || [];
665 |                         renderTable('members', renderMembersRow);
666 | 
667 |                         // Update badge - 使用 total 而不是 items.length
668 |                         const total = data.total || 0;
669 |                         const badge = document.getElementById('tab-count-members');
670 |                         badge.textContent = total;
671 |                         if (total > 0) badge.classList.remove('hidden');
672 |                         else badge.classList.add('hidden');
673 | 
674 |                         // 同步更新顶部"已上车"数字
675 |                         document.getElementById('stat-in-use').textContent = total;
676 |                         // 重新计算剩余名额
677 |                         updateAvailableSeats();
678 |                     }
679 |                 })
680 |                 .catch(err => console.error(err))
681 |                 .finally(() => stopRefreshAnimation('refresh-members-icon'));
682 |         }
683 | 
684 |         function loadRecords() {
685 |             startRefreshAnimation('refresh-records-icon');
686 |             fetch('/api/admin/records')
687 |                 .then(r => r.json())
688 |                 .then(data => {
689 |                     if (data.success) {
690 |                         appStore.records.items = data.records || [];
691 |                         renderTable('records', renderRecordsRow);
692 |                     }
693 |                 })
694 |                 .catch(err => console.error(err))
695 |                 .finally(() => stopRefreshAnimation('refresh-records-icon'));
696 |         }
697 | 
698 |         // 初始化加载
699 |         loadStats();
700 |         loadPendingInvites();
701 |         loadMembers();
702 |         loadRecords();
703 | 
704 |         // 定时刷新
705 |         setInterval(loadStats, 30000);
706 |         setInterval(loadPendingInvites, 60000);
707 | 
708 |         // Default Tab
709 |         switchTab('pending');
710 |     </script>
711 | </body>
712 | 
713 | </html>


--------------------------------------------------------------------------------
/templates/invite.html:
--------------------------------------------------------------------------------
   1 | <!DOCTYPE html>
   2 | <html lang="zh-CN">
   3 | 
   4 | <head>
   5 |     <meta charset="UTF-8">
   6 |     <meta name="viewport"
   7 |         content="width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalable=no, viewport-fit=cover">
   8 |     <title>Team -获取验证码</title>
   9 |     <script src="https://cdn.tailwindcss.com"></script>
  10 |     <link
  11 |         href="https://fonts.googleapis.com/css2?family=Inter:wght@300;400;500;600;700;800&family=JetBrains+Mono:wght@400;500&display=swap"
  12 |         rel="stylesheet">
  13 |     <script>
  14 |         tailwind.config = {
  15 |             darkMode: 'class',
  16 |             theme: {
  17 |                 extend: {
  18 |                     fontFamily: {
  19 |                         sans: ['Inter', '-apple-system', 'sans-serif'],
  20 |                         mono: ['JetBrains Mono', 'SF Mono', 'monospace'],
  21 |                     },
  22 |                     colors: {
  23 |                         ios: {
  24 |                             bg: '#000000',
  25 |                             card: 'rgba(30, 30, 32, 0.70)',
  26 |                             border: 'rgba(255, 255, 255, 0.1)',
  27 |                             blue: '#0A84FF',
  28 |                             green: '#30D158',
  29 |                             red: '#FF453A',
  30 |                             yellow: '#FFD60A',
  31 |                             gray: '#98989D',
  32 |                         }
  33 |                     },
  34 |                     animation: {
  35 |                         'float': 'float 10s ease-in-out infinite',
  36 |                         'pulse-slow': 'pulse 3s cubic-bezier(0.4, 0, 0.6, 1) infinite',
  37 |                     },
  38 |                     keyframes: {
  39 |                         float: {
  40 |                             '0%, 100%': { transform: 'translateY(0) rotate(0deg)' },
  41 |                             '50%': { transform: 'translateY(-20px) rotate(1deg)' },
  42 |                         }
  43 |                     }
  44 |                 }
  45 |             }
  46 |         }
  47 |     </script>
  48 |     <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.5.1/css/all.min.css">
  49 |     <style>
  50 |         :root {
  51 |             --bg-color: #000000;
  52 |             --card-bg: rgba(30, 30, 32, 0.6);
  53 |             --card-border: rgba(255, 255, 255, 0.12);
  54 |             --text-primary: #ffffff;
  55 |             --text-secondary: #a1a1aa;
  56 |             --text-muted: #71717a;
  57 |             --panel-bg: rgba(0, 0, 0, 0.25);
  58 |             --panel-border: rgba(255, 255, 255, 0.06);
  59 |             --input-bg: rgba(255, 255, 255, 0.03);
  60 |             --input-border: rgba(255, 255, 255, 0.08);
  61 |             --input-hover-bg: rgba(255, 255, 255, 0.06);
  62 |             --mesh-opacity: 0.8;
  63 |         }
  64 | 
  65 |         .light {
  66 |             --bg-color: #f4f4f5;
  67 |             --card-bg: rgba(255, 255, 255, 0.85);
  68 |             --card-border: rgba(0, 0, 0, 0.08);
  69 |             --text-primary: #18181b;
  70 |             --text-secondary: #52525b;
  71 |             --text-muted: #a1a1aa;
  72 |             --panel-bg: rgba(0, 0, 0, 0.03);
  73 |             --panel-border: rgba(0, 0, 0, 0.06);
  74 |             --input-bg: rgba(0, 0, 0, 0.03);
  75 |             --input-border: rgba(0, 0, 0, 0.08);
  76 |             --input-hover-bg: rgba(0, 0, 0, 0.06);
  77 |             --mesh-opacity: 0.3;
  78 |         }
  79 | 
  80 |         body {
  81 |             background: var(--bg-color);
  82 |             overflow-x: hidden;
  83 |             overflow-y: auto;
  84 |             transition: background 0.3s ease;
  85 |             -webkit-overflow-scrolling: touch;
  86 |         }
  87 | 
  88 |         /* 移动端滚动优化 */
  89 |         @media (max-width: 768px) {
  90 |             body {
  91 |                 overflow-y: auto;
  92 |                 min-height: 100vh;
  93 |                 min-height: 100dvh; /* 动态视口高度 */
  94 |             }
  95 |         }
  96 | 
  97 |         .bg-mesh {
  98 |             position: fixed;
  99 |             inset: -50%;
 100 |             z-index: -1;
 101 |             background:
 102 |                 radial-gradient(circle at 50% 50%, rgba(10, 132, 255, 0.15), transparent 50%),
 103 |                 radial-gradient(circle at 80% 20%, rgba(48, 209, 88, 0.1), transparent 40%),
 104 |                 radial-gradient(circle at 20% 80%, rgba(94, 92, 230, 0.15), transparent 40%);
 105 |             animation: float 20s ease-in-out infinite alternate;
 106 |             opacity: var(--mesh-opacity);
 107 |             transition: opacity 0.3s ease;
 108 |         }
 109 | 
 110 |         .access-card {
 111 |             background: var(--card-bg);
 112 |             backdrop-filter: blur(40px) saturate(180%);
 113 |             -webkit-backdrop-filter: blur(40px) saturate(180%);
 114 |             border: 1px solid var(--card-border);
 115 |             box-shadow:
 116 |                 0 0 0 1px rgba(0, 0, 0, 0.1),
 117 |                 0 20px 40px -10px rgba(0, 0, 0, 0.2),
 118 |                 0 0 80px rgba(0, 0, 0, 0.1);
 119 |             position: relative;
 120 |             overflow: hidden;
 121 |             transition: background 0.3s ease, border-color 0.3s ease, box-shadow 0.3s ease;
 122 |         }
 123 | 
 124 |         .access-card::before {
 125 |             content: '';
 126 |             position: absolute;
 127 |             inset: 0;
 128 |             background: linear-gradient(120deg, rgba(255, 255, 255, 0.05) 0%, transparent 40%);
 129 |             pointer-events: none;
 130 |             z-index: 10;
 131 |         }
 132 | 
 133 |         .light .access-card::before {
 134 |             background: linear-gradient(120deg, rgba(255, 255, 255, 0.5) 0%, transparent 40%);
 135 |         }
 136 | 
 137 |         .scan-line {
 138 |             position: absolute;
 139 |             top: 0;
 140 |             left: 0;
 141 |             width: 100%;
 142 |             height: 2px;
 143 |             background: linear-gradient(90deg, transparent, #0A84FF, transparent);
 144 |             opacity: 0.5;
 145 |             animation: scan 4s linear infinite;
 146 |             z-index: 5;
 147 |             pointer-events: none;
 148 |         }
 149 | 
 150 |         @keyframes scan {
 151 |             0% {
 152 |                 transform: translateY(-100%);
 153 |                 opacity: 0;
 154 |             }
 155 | 
 156 |             50% {
 157 |                 opacity: 0.8;
 158 |             }
 159 | 
 160 |             100% {
 161 |                 transform: translateY(500%);
 162 |                 opacity: 0;
 163 |             }
 164 |         }
 165 | 
 166 |         .cyber-panel {
 167 |             background: var(--panel-bg);
 168 |             border: 1px solid var(--panel-border);
 169 |             transition: background 0.3s ease, border-color 0.3s ease;
 170 |         }
 171 | 
 172 |         .ghost-input-group {
 173 |             background: var(--input-bg);
 174 |             border: 1px solid var(--input-border);
 175 |             transition: all 0.2s;
 176 |         }
 177 | 
 178 |         .ghost-input-group:hover {
 179 |             background: var(--input-hover-bg);
 180 |             border-color: var(--input-border);
 181 |         }
 182 | 
 183 |         /* 主题文字颜色适配 */
 184 |         .theme-text {
 185 |             color: var(--text-primary);
 186 |             transition: color 0.3s ease;
 187 |         }
 188 | 
 189 |         .theme-text-secondary {
 190 |             color: var(--text-secondary);
 191 |             transition: color 0.3s ease;
 192 |         }
 193 | 
 194 |         .theme-text-muted {
 195 |             color: var(--text-muted);
 196 |             transition: color 0.3s ease;
 197 |         }
 198 | 
 199 |         /* 主题切换按钮 */
 200 |         .theme-toggle {
 201 |             width: 36px;
 202 |             height: 36px;
 203 |             border-radius: 10px;
 204 |             background: var(--input-bg);
 205 |             border: 1px solid var(--input-border);
 206 |             display: flex;
 207 |             align-items: center;
 208 |             justify-content: center;
 209 |             cursor: pointer;
 210 |             transition: all 0.2s ease;
 211 |         }
 212 | 
 213 |         .theme-toggle:hover {
 214 |             background: var(--input-hover-bg);
 215 |             transform: scale(1.05);
 216 |         }
 217 | 
 218 |         .theme-toggle:active {
 219 |             transform: scale(0.95);
 220 |         }
 221 | 
 222 |         .theme-toggle i {
 223 |             font-size: 14px;
 224 |             transition: transform 0.3s ease, opacity 0.2s ease;
 225 |         }
 226 | 
 227 |         .light .theme-toggle .fa-moon {
 228 |             display: none;
 229 |         }
 230 | 
 231 |         .light .theme-toggle .fa-sun {
 232 |             display: block;
 233 |         }
 234 | 
 235 |         html:not(.light) .theme-toggle .fa-sun {
 236 |             display: none;
 237 |         }
 238 | 
 239 |         html:not(.light) .theme-toggle .fa-moon {
 240 |             display: block;
 241 |         }
 242 | 
 243 |         .action-btn {
 244 |             background: #0A84FF;
 245 |             box-shadow: 0 0 20px rgba(10, 132, 255, 0.3);
 246 |             transition: all 0.2s cubic-bezier(0.2, 0.8, 0.2, 1);
 247 |         }
 248 | 
 249 |         .action-btn:hover {
 250 |             background: #007aff;
 251 |             transform: translateY(-1px);
 252 |             box-shadow: 0 4px 25px rgba(10, 132, 255, 0.4);
 253 |         }
 254 | 
 255 |         .action-btn:active {
 256 |             transform: scale(0.98);
 257 |         }
 258 | 
 259 |         .action-btn:disabled {
 260 |             opacity: 0.6;
 261 |             cursor: not-allowed;
 262 |             filter: grayscale(0.8);
 263 |         }
 264 | 
 265 |         .text-glow {
 266 |             text-shadow: 0 0 20px rgba(255, 255, 255, 0.1);
 267 |         }
 268 | 
 269 |         .code-glow {
 270 |             text-shadow: 0 0 15px rgba(48, 209, 88, 0.4);
 271 |         }
 272 | 
 273 |         .ratio-16-9-desktop {
 274 |             aspect-ratio: 16/9;
 275 |         }
 276 | 
 277 |         /* 平板适配 */
 278 |         @media (max-width: 1024px) {
 279 |             .ratio-16-9-desktop {
 280 |                 aspect-ratio: auto;
 281 |                 height: auto;
 282 |                 min-height: auto;
 283 |                 max-height: none;
 284 |             }
 285 |         }
 286 | 
 287 |         /* 移动端适配 */
 288 |         @media (max-width: 768px) {
 289 |             .ratio-16-9-desktop {
 290 |                 aspect-ratio: auto;
 291 |                 height: auto;
 292 |                 min-height: auto;
 293 |                 max-height: none;
 294 |                 border-radius: 24px !important;
 295 |             }
 296 | 
 297 |             .mobile-compact-header {
 298 |                 padding-top: 0.75rem !important;
 299 |                 padding-bottom: 0.5rem !important;
 300 |             }
 301 | 
 302 |             .mobile-compact-profile {
 303 |                 padding-top: 1rem !important;
 304 |                 padding-bottom: 1rem !important;
 305 |             }
 306 | 
 307 |             .mobile-hide {
 308 |                 display: none !important;
 309 |             }
 310 | 
 311 |             .mobile-small-avatar .avatar-inner {
 312 |                 width: 5rem !important;
 313 |                 height: 5rem !important;
 314 |             }
 315 | 
 316 |             .mobile-compact-footer {
 317 |                 padding-top: 0.5rem !important;
 318 |             }
 319 |         }
 320 | 
 321 |         /* 小屏手机适配 */
 322 |         @media (max-width: 380px) {
 323 |             .ratio-16-9-desktop {
 324 |                 border-radius: 20px !important;
 325 |             }
 326 | 
 327 |             .mobile-xs-text {
 328 |                 font-size: 0.75rem !important;
 329 |             }
 330 | 
 331 |             .mobile-xs-code {
 332 |                 font-size: 1.75rem !important;
 333 |                 letter-spacing: 0.1em !important;
 334 |             }
 335 |         }
 336 | 
 337 |         .vert-divider {
 338 |             width: 1px;
 339 |             background: linear-gradient(to bottom, transparent, rgba(255, 255, 255, 0.1), transparent);
 340 |         }
 341 | 
 342 |         /* Left Panel Specific Styles */
 343 |         .identity-panel {
 344 |             background: linear-gradient(180deg, rgba(0, 0, 0, 0.1) 0%, rgba(10, 132, 255, 0.03) 100%);
 345 |         }
 346 | 
 347 |         .avatar-ring {
 348 |             background: conic-gradient(from 180deg, rgba(10, 132, 255, 0.4), rgba(48, 209, 88, 0.4), rgba(94, 92, 230, 0.4), rgba(10, 132, 255, 0.4));
 349 |             padding: 3px;
 350 |             border-radius: 50%;
 351 |         }
 352 | 
 353 |         .avatar-inner {
 354 |             background: #1c1c1e;
 355 |             border-radius: 50%;
 356 |             overflow: hidden;
 357 |         }
 358 | 
 359 |         .trust-badge {
 360 |             background: linear-gradient(135deg, rgba(10, 132, 255, 0.2) 0%, rgba(94, 92, 230, 0.2) 100%);
 361 |             border: 1px solid rgba(10, 132, 255, 0.3);
 362 |         }
 363 | 
 364 |         /* 复制按钮动画 */
 365 |         .copy-btn {
 366 |             transition: all 0.2s cubic-bezier(0.4, 0, 0.2, 1);
 367 |         }
 368 | 
 369 |         .copy-btn:hover {
 370 |             transform: scale(1.05);
 371 |         }
 372 | 
 373 |         .copy-btn:active {
 374 |             transform: scale(0.95);
 375 |         }
 376 | 
 377 |         .copy-btn i {
 378 |             transition: all 0.2s ease;
 379 |         }
 380 | 
 381 |         /* Toast 动画 */
 382 |         @keyframes toastSlideIn {
 383 |             from {
 384 |                 opacity: 0;
 385 |                 transform: translateX(100px) scale(0.8);
 386 |             }
 387 |             to {
 388 |                 opacity: 1;
 389 |                 transform: translateX(0) scale(1);
 390 |             }
 391 |         }
 392 | 
 393 |         @keyframes toastSlideOut {
 394 |             from {
 395 |                 opacity: 1;
 396 |                 transform: translateX(0) scale(1);
 397 |             }
 398 |             to {
 399 |                 opacity: 0;
 400 |                 transform: translateX(100px) scale(0.8);
 401 |             }
 402 |         }
 403 | 
 404 |         .toast-enter {
 405 |             animation: toastSlideIn 0.3s cubic-bezier(0.16, 1, 0.3, 1) forwards;
 406 |         }
 407 | 
 408 |         .toast-exit {
 409 |             animation: toastSlideOut 0.3s cubic-bezier(0.4, 0, 1, 1) forwards;
 410 |         }
 411 | 
 412 |         /* Toast 移动端适配 */
 413 |         @media (max-width: 768px) {
 414 |             .toast-mobile {
 415 |                 top: auto !important;
 416 |                 bottom: 1.5rem !important;
 417 |                 right: 1rem !important;
 418 |                 left: 1rem !important;
 419 |                 max-width: none !important;
 420 |             }
 421 |         }
 422 | 
 423 |         /* 复制验证码按钮 */
 424 |         #copy-code-btn {
 425 |             transition: all 0.2s cubic-bezier(0.4, 0, 0.2, 1);
 426 |         }
 427 |     </style>
 428 | </head>
 429 | 
 430 | <body class="text-white min-h-screen w-full flex flex-col items-center justify-center p-3 sm:p-4 md:p-8 py-4 sm:py-6 md:py-8">
 431 |     <div class="bg-mesh"></div>
 432 | 
 433 |     <!-- MAIN CONTAINER (16:9 on Desktop) -->
 434 |     <div
 435 |         class="access-card w-full max-w-[1280px] rounded-[24px] sm:rounded-[32px] ratio-16-9-desktop flex flex-col md:flex-row relative group transition-all duration-700">
 436 |         <div class="scan-line"></div>
 437 | 
 438 |         <!-- LEFT PANEL: IDENTITY (35%) -->
 439 |         <div class="identity-panel relative w-full md:w-[35%] p-4 sm:p-6 md:p-10 flex flex-col justify-between z-20">
 440 |             <!-- Header -->
 441 |             <div class="flex items-center justify-between">
 442 |                 <div class="text-xs font-mono theme-text-muted tracking-widest opacity-60">
 443 |                     KFC-GPT-TEAM
 444 |                 </div>
 445 |                 <div class="flex items-center gap-2">
 446 |                     <!-- 主题切换按钮 -->
 447 |                     <button id="theme-toggle" class="theme-toggle theme-text-secondary" title="切换主题">
 448 |                         <i class="fa-solid fa-moon"></i>
 449 |                         <i class="fa-solid fa-sun"></i>
 450 |                     </button>
 451 |                     <div
 452 |                         class="px-2.5 py-1 rounded-lg text-[10px] font-bold bg-white/5 border border-white/10 theme-text-secondary tracking-wider backdrop-blur-sm">
 453 |                         通行证
 454 |                     </div>
 455 |                 </div>
 456 |             </div>
 457 | 
 458 |             <!-- User Profile -->
 459 |             <div class="flex flex-col items-center text-center my-auto py-3 sm:py-4 md:py-6">
 460 |                 <!-- Avatar Container -->
 461 |                 <div class="relative mb-4 sm:mb-6 group-hover:scale-105 transition-transform duration-500">
 462 |                     <!-- Glow Effect -->
 463 |                     <div
 464 |                         class="absolute inset-0 bg-blue-500 rounded-full blur-3xl opacity-20 animate-pulse-slow scale-150 hidden sm:block">
 465 |                     </div>
 466 | 
 467 |                     <!-- Avatar Ring -->
 468 |                     <div class="avatar-ring relative">
 469 |                         <div class="avatar-inner w-20 h-20 sm:w-28 sm:h-28 md:w-36 md:h-36 flex items-center justify-center">
 470 |                             <!-- Avatar Image (set by JS or Jinja) -->
 471 |                             <img id="user-avatar" src="https://avatars.githubusercontent.com/u/0?v=4"
 472 |                                 data-jinja-src="{{ user.avatar_template | replace('{size}', '128') }}" alt="avatar"
 473 |                                 class="w-full h-full object-cover">
 474 |                         </div>
 475 |                     </div>
 476 | 
 477 |                     <!-- Trust Level Badge -->
 478 |                     <div
 479 |                         class="trust-badge absolute -bottom-2 sm:-bottom-3 left-1/2 -translate-x-1/2 px-3 sm:px-4 py-1 sm:py-1.5 rounded-full flex items-center gap-1.5 sm:gap-2 shadow-lg backdrop-blur-md">
 480 |                         <span class="w-1.5 h-1.5 sm:w-2 sm:h-2 rounded-full bg-blue-500 animate-pulse"></span>
 481 |                         <span id="user-trust-level" class="text-[10px] sm:text-[11px] font-bold tracking-wider text-blue-300">等级
 482 |                             3</span>
 483 |                     </div>
 484 |                 </div>
 485 | 
 486 |                 <!-- User Name -->
 487 |                 <h2 id="user-display-name" class="text-xl sm:text-2xl md:text-3xl font-bold tracking-tight mb-1 sm:mb-2 text-glow theme-text">
 488 |                     Shane User
 489 |                 </h2>
 490 | 
 491 |                 <!-- Username Tag -->
 492 |                 <p id="user-handle" class="text-xs sm:text-sm theme-text-muted font-mono flex items-center gap-2">
 493 |                     <span class="w-1 h-1 rounded-full bg-green-500"></span>
 494 |                     @shane
 495 |                 </p>
 496 | 
 497 |                 <!-- Member Since (Decorative) -->
 498 |                 <div
 499 |                     class="mt-3 sm:mt-6 px-3 sm:px-4 py-1.5 sm:py-2 rounded-xl bg-white/5 border border-white/5 text-[9px] sm:text-[10px] theme-text-muted tracking-wider">
 500 |                     已认证会员
 501 |                 </div>
 502 |             </div>
 503 | 
 504 |             <!-- Footer / System Status -->
 505 |             <div class="space-y-2 sm:space-y-3">
 506 |                 <div class="cyber-panel p-3 sm:p-4 rounded-xl sm:rounded-2xl">
 507 |                     <div class="flex items-center justify-between text-[10px] sm:text-[11px] font-medium">
 508 |                         <span class="theme-text-muted tracking-wider">系统状态</span>
 509 |                         <span id="seats-info" class="theme-text-secondary flex items-center gap-1.5 sm:gap-2">
 510 |                             <span class="w-1.5 h-1.5 rounded-full bg-zinc-500"></span> 连接中...
 511 |                         </span>
 512 |                     </div>
 513 |                 </div>
 514 |                 <a href="/logout"
 515 |                     class="flex items-center justify-center gap-2 text-[11px] sm:text-xs theme-text-muted hover:text-red-400 transition-colors py-1.5 sm:py-2 rounded-xl hover:bg-red-500/10">
 516 |                     <i class="fa-solid fa-power-off"></i> 安全退出
 517 |                 </a>
 518 |             </div>
 519 |         </div>
 520 | 
 521 |         <!-- DIVIDER (Desktop only) -->
 522 |         <div class="hidden md:block vert-divider h-full"></div>
 523 | 
 524 |         <!-- Mobile Divider -->
 525 |         <div class="block md:hidden w-full h-px bg-gradient-to-r from-transparent via-white/10 to-transparent my-2"></div>
 526 | 
 527 |         <!-- RIGHT PANEL: OPERATIONAL (65%) -->
 528 |         <div class="relative w-full md:w-[65%] p-4 sm:p-6 md:p-10 flex flex-col z-20 overflow-hidden">
 529 |             <!-- Top Links -->
 530 |             <div class="flex justify-end gap-2 sm:gap-4 mb-4 sm:mb-6 md:mb-10">
 531 |                 <a href="{{ email_web_url }}" target="_blank"
 532 |                     class="text-[11px] sm:text-xs text-zinc-500 hover:text-blue-400 transition-colors flex items-center gap-1 sm:gap-1.5 px-2 sm:px-3 py-1 sm:py-1.5 rounded-lg hover:bg-white/5">
 533 |                     <i class="fa-solid fa-inbox"></i> <span class="hidden xs:inline">邮箱</span>
 534 |                 </a>
 535 |                 <a href="https://chatgpt.com/" target="_blank"
 536 |                     class="text-[11px] sm:text-xs text-zinc-500 hover:text-blue-400 transition-colors flex items-center gap-1 sm:gap-1.5 px-2 sm:px-3 py-1 sm:py-1.5 rounded-lg hover:bg-white/5">
 537 |                     <img src="https://cdn.oaistatic.com/assets/favicon-l4nq08hd.svg" alt="ChatGPT" class="w-3.5 h-3.5 sm:w-4 sm:h-4 object-contain"> <span class="hidden xs:inline">ChatGPT</span>
 538 |                 </a>
 539 |                 <a href="https://linux.do/" target="_blank"
 540 |                     class="text-[11px] sm:text-xs text-zinc-500 hover:text-blue-400 transition-colors flex items-center gap-1 sm:gap-1.5 px-2 sm:px-3 py-1 sm:py-1.5 rounded-lg hover:bg-white/5">
 541 |                     <i class="fa-solid fa-comments"></i> <span class="hidden xs:inline">社区</span>
 542 |                 </a>
 543 |             </div>
 544 | 
 545 |             <!-- Main Interactive Area -->
 546 |             <div class="flex-1 flex flex-col justify-center">
 547 | 
 548 |                 <!-- Credentials Grid -->
 549 |                 <div class="grid grid-cols-1 sm:grid-cols-2 gap-3 sm:gap-4 mb-4 sm:mb-6">
 550 |                     <!-- Email Field -->
 551 |                     <div class="ghost-input-group p-3 sm:p-4 rounded-xl sm:rounded-2xl flex flex-col justify-center relative">
 552 |                         <div class="text-[9px] sm:text-[10px] font-bold theme-text-muted tracking-wider mb-1.5 sm:mb-2">专属邮箱</div>
 553 |                         <div class="flex items-center justify-between gap-2 sm:gap-3">
 554 |                             <div class="font-mono text-xs sm:text-sm md:text-base theme-text truncate select-all"
 555 |                                 id="assigned-email">
 556 |                                 shane@kyx03.de
 557 |                             </div>
 558 |                             <button onclick="copyEmail()"
 559 |                                 class="copy-btn w-8 h-8 sm:w-9 sm:h-9 rounded-lg sm:rounded-xl bg-white/5 hover:bg-blue-500/20 flex items-center justify-center theme-text-muted hover:text-blue-400 shrink-0">
 560 |                                 <i id="copy-icon" class="fa-regular fa-copy text-xs sm:text-sm"></i>
 561 |                             </button>
 562 |                         </div>
 563 |                     </div>
 564 | 
 565 |                     <!-- Password Field -->
 566 |                     <div class="ghost-input-group p-3 sm:p-4 rounded-xl sm:rounded-2xl flex flex-col justify-center relative">
 567 |                         <div class="text-[9px] sm:text-[10px] font-bold theme-text-muted tracking-wider mb-1.5 sm:mb-2">登录密码</div>
 568 |                         <div class="flex items-center justify-between gap-2 sm:gap-3">
 569 |                             <div class="font-mono text-xs sm:text-sm md:text-base theme-text tracking-wide"
 570 |                                 id="assigned-password">kfcvivo50</div>
 571 |                             <button onclick="copyPassword()"
 572 |                                 class="copy-btn w-8 h-8 sm:w-9 sm:h-9 rounded-lg sm:rounded-xl bg-white/5 hover:bg-blue-500/20 flex items-center justify-center theme-text-muted hover:text-blue-400 shrink-0">
 573 |                                 <i id="copy-pwd-icon" class="fa-regular fa-copy text-xs sm:text-sm"></i>
 574 |                             </button>
 575 |                         </div>
 576 |                     </div>
 577 |                 </div>
 578 | 
 579 |                 <!-- Code Section -->
 580 |                 <div class="cyber-panel rounded-xl sm:rounded-2xl p-3 sm:p-4 md:p-5 text-center relative overflow-hidden mb-3 sm:mb-4">
 581 |                     <div class="absolute inset-0 bg-gradient-to-t from-blue-500/5 to-transparent pointer-events-none">
 582 |                     </div>
 583 | 
 584 |                     <div class="text-[10px] sm:text-xs font-mono text-blue-400 mb-1.5 sm:mb-2 opacity-90 tracking-widest font-semibold">验证码</div>
 585 | 
 586 |                     <div id="code-display"
 587 |                         class="text-3xl sm:text-4xl md:text-5xl font-mono font-bold tracking-[0.12em] sm:tracking-[0.15em] text-zinc-600 transition-all duration-300 relative z-10 py-0.5 sm:py-1">
 588 |                         --- ---
 589 |                     </div>
 590 | 
 591 |                     <div id="code-status" class="text-xs sm:text-sm text-zinc-500 mt-1.5 sm:mt-2 tracking-wide">点击下方按钮获取</div>
 592 | 
 593 |                     <!-- 验证码时间显示 -->
 594 |                     <div id="code-time" class="text-[10px] sm:text-xs text-zinc-500 mt-1.5 sm:mt-2 hidden">
 595 |                         <i class="fa-regular fa-clock mr-1"></i>
 596 |                         <span id="code-time-text">--</span>
 597 |                     </div>
 598 | 
 599 |                     <!-- 复制验证码按钮 -->
 600 |                     <button id="copy-code-btn" onclick="copyCode()"
 601 |                         class="mt-2 sm:mt-3 px-3 sm:px-4 py-1.5 sm:py-2 rounded-lg bg-white/5 hover:bg-blue-500/20 border border-white/10 hover:border-blue-500/30 text-zinc-400 hover:text-blue-400 transition-all text-[11px] sm:text-xs font-medium inline-flex items-center gap-1.5 sm:gap-2 opacity-50 cursor-not-allowed"
 602 |                         disabled>
 603 |                         <i id="copy-code-icon" class="fa-regular fa-copy"></i>
 604 |                         <span>复制验证码</span>
 605 |                     </button>
 606 |                 </div>
 607 | 
 608 |                 <!-- Action Button -->
 609 |                 <button id="get-code-btn" onclick="getCode()"
 610 |                     class="w-full py-3 sm:py-4 rounded-xl sm:rounded-2xl action-btn text-white font-bold text-sm sm:text-base tracking-wide flex items-center justify-center gap-2 sm:gap-3 relative overflow-hidden group/btn">
 611 |                     <i class="fa-solid fa-fingerprint text-base sm:text-lg opacity-80"></i>
 612 |                     <span>获取验证码</span>
 613 |                 </button>
 614 |             </div>
 615 | 
 616 |             <!-- Bottom Decoration -->
 617 |             <div class="mt-3 sm:mt-4 flex justify-between items-center text-[9px] sm:text-[10px] theme-text-muted">
 618 |                 <span><i class="fa-solid fa-lock mr-1"></i>安全加密连接</span>
 619 |                 <span id="user-id-footer">用户: shane</span>
 620 |             </div>
 621 |         </div>
 622 |     </div>
 623 | 
 624 |     <!-- JS Logic -->
 625 |     <script>
 626 |         // --- CONFIGURATION ---
 627 |         const SERVER_DATA = {
 628 |             username: '{{ user.username | lower }}',
 629 |             name: '{{ user.name or user.username }}',
 630 |             trustLevel: '{{ user.trust_level }}',
 631 |             avatarUrl: '{{ user.avatar_template | replace("{size}", "128") }}',
 632 |             emailDomain: '{{ email_domain }}'
 633 |         };
 634 | 
 635 |         // 邀请结果（如果有）
 636 |         const INVITE_RESULT = {
 637 |             success: {{ 'true' if invite_result.success else 'false' }},
 638 |             email: '{{ invite_result.email or "" }}',
 639 |             password: '{{ invite_result.password or "kfcvivo50" }}',
 640 |             message: '{{ invite_result.message or "" }}',
 641 |             seats_full: {{ 'true' if invite_result.seats_full else 'false' }},
 642 |             banned: {{ 'true' if invite_result.banned else 'false' }}
 643 |         };
 644 | 
 645 |         // 是否需要执行邀请（新登录用户）
 646 |         const NEED_INVITE = {{ 'true' if need_invite else 'false' }};
 647 | 
 648 |         // 邀请状态：in_space / pending / new
 649 |         const INVITE_STATUS = '{{ invite_status }}';
 650 | 
 651 |         // 是否已有待处理邀请（已邀请用户重新登录）
 652 |         const PENDING_INVITE = {
 653 |             exists: {{ 'true' if pending_invite.email else 'false' }},
 654 |             email: '{{ pending_invite.email or "" }}',
 655 |             password: '{{ pending_invite.password or "kfcvivo50" }}'
 656 |         };
 657 | 
 658 |         // 用户邮箱信息（从后端获取）
 659 |         const USER_EMAIL = '{{ user_email or "" }}';
 660 |         const USER_PASSWORD = '{{ user_password or "kfcvivo50" }}';
 661 | 
 662 |         // Use server data directly (Jinja will populate these values)
 663 |         const USER = {
 664 |             username: SERVER_DATA.username,
 665 |             name: SERVER_DATA.name || SERVER_DATA.username,
 666 |             trustLevel: SERVER_DATA.trustLevel,
 667 |             avatarUrl: SERVER_DATA.avatarUrl
 668 |         };
 669 | 
 670 |         // 使用邮箱：优先后端传递的，其次是待处理邀请，再次是邀请结果，最后是默认生成的
 671 |         const email = USER_EMAIL || PENDING_INVITE.email || INVITE_RESULT.email || (USER.username + 'kfc@' + SERVER_DATA.emailDomain);
 672 |         const password = USER_PASSWORD || PENDING_INVITE.password || INVITE_RESULT.password || 'kfcvivo50';
 673 | 
 674 |         // --- POPULATE UI ---
 675 |         document.getElementById('user-avatar').src = USER.avatarUrl;
 676 |         document.getElementById('user-display-name').textContent = USER.name;
 677 |         document.getElementById('user-handle').innerHTML = `<span class="w-1 h-1 rounded-full bg-green-500"></span> @${USER.username}`;
 678 |         document.getElementById('user-trust-level').textContent = `等级 ${USER.trustLevel}`;
 679 |         document.getElementById('assigned-email').textContent = email;
 680 |         document.getElementById('assigned-password').textContent = password;
 681 |         document.getElementById('user-id-footer').textContent = `用户: ${USER.username}`;
 682 | 
 683 |         // --- UTILITY FUNCTIONS ---
 684 |         function copyEmail() {
 685 |             const emailText = document.getElementById('assigned-email').textContent.trim();
 686 |             copyToClip(emailText, 'copy-icon', '邮箱已复制');
 687 |         }
 688 | 
 689 |         function copyPassword() {
 690 |             const pwdText = document.getElementById('assigned-password').textContent.trim();
 691 |             copyToClip(pwdText, 'copy-pwd-icon', '密码已复制');
 692 |         }
 693 | 
 694 |         function copyToClip(text, iconId, toastMsg) {
 695 |             if (!text) {
 696 |                 showMessage('没有可复制的内容', 'error');
 697 |                 return;
 698 |             }
 699 |             navigator.clipboard.writeText(text).then(() => {
 700 |                 const icon = document.getElementById(iconId);
 701 |                 const btn = icon.parentElement;
 702 | 
 703 |                 // 图标动画
 704 |                 icon.className = 'fa-solid fa-check text-green-400 scale-125';
 705 |                 btn.classList.add('ring-2', 'ring-green-500/50', 'bg-green-500/20');
 706 | 
 707 |                 // 显示 toast
 708 |                 showMessage(toastMsg || '已复制到剪贴板', 'success');
 709 | 
 710 |                 setTimeout(() => {
 711 |                     icon.className = 'fa-regular fa-copy text-sm';
 712 |                     btn.classList.remove('ring-2', 'ring-green-500/50', 'bg-green-500/20');
 713 |                 }, 1500);
 714 |             }).catch(() => {
 715 |                 showMessage('复制失败，请手动复制', 'error');
 716 |             });
 717 |         }
 718 | 
 719 |         // 当前验证码存储
 720 |         let currentCode = null;
 721 | 
 722 |         function copyCode() {
 723 |             if (!currentCode) {
 724 |                 showMessage('请先获取验证码', 'error');
 725 |                 return;
 726 |             }
 727 |             navigator.clipboard.writeText(currentCode).then(() => {
 728 |                 const icon = document.getElementById('copy-code-icon');
 729 |                 const btn = document.getElementById('copy-code-btn');
 730 | 
 731 |                 // 动画效果
 732 |                 icon.className = 'fa-solid fa-check text-green-400 scale-125';
 733 |                 btn.classList.add('ring-2', 'ring-green-500/50', 'bg-green-500/20', 'border-green-500/50');
 734 |                 btn.querySelector('span').textContent = '已复制!';
 735 | 
 736 |                 showMessage('验证码已复制', 'success');
 737 | 
 738 |                 setTimeout(() => {
 739 |                     icon.className = 'fa-regular fa-copy';
 740 |                     btn.classList.remove('ring-2', 'ring-green-500/50', 'bg-green-500/20', 'border-green-500/50');
 741 |                     btn.querySelector('span').textContent = '复制验证码';
 742 |                 }, 1500);
 743 |             }).catch(() => {
 744 |                 showMessage('复制失败，请手动复制', 'error');
 745 |             });
 746 |         }
 747 | 
 748 |         function enableCopyCodeBtn(code) {
 749 |             currentCode = code;
 750 |             const btn = document.getElementById('copy-code-btn');
 751 |             btn.disabled = false;
 752 |             btn.classList.remove('opacity-50', 'cursor-not-allowed');
 753 |             btn.classList.add('hover:scale-105', 'active:scale-95');
 754 |         }
 755 | 
 756 |         function showMessage(text, type) {
 757 |             // 移除现有的 toast（如果存在）
 758 |             const existingToast = document.getElementById('global-toast');
 759 |             if (existingToast) {
 760 |                 existingToast.remove();
 761 |             }
 762 | 
 763 |             // 创建新的 toast
 764 |             const toast = document.createElement('div');
 765 |             toast.id = 'global-toast';
 766 | 
 767 |             // 根据类型设置样式
 768 |             const isError = type === 'error';
 769 |             const bgColor = isError
 770 |                 ? 'bg-gradient-to-r from-red-500/95 to-red-600/95'
 771 |                 : 'bg-gradient-to-r from-green-500/95 to-emerald-600/95';
 772 |             const icon = isError ? 'fa-circle-xmark' : 'fa-circle-check';
 773 |             const ringColor = isError ? 'ring-red-400/30' : 'ring-green-400/30';
 774 | 
 775 |             // 移动端底部显示，桌面端右上角显示
 776 |             const isMobile = window.innerWidth < 768;
 777 |             const positionClass = isMobile
 778 |                 ? 'bottom-4 left-4 right-4 top-auto'
 779 |                 : 'top-6 right-6';
 780 |             toast.className = `fixed ${positionClass} z-[9999] px-4 sm:px-5 py-3 sm:py-3.5 rounded-xl sm:rounded-2xl ${bgColor} backdrop-blur-xl shadow-2xl text-white text-xs sm:text-sm font-medium flex items-center gap-2 sm:gap-3 toast-enter ring-1 ${ringColor}`;
 781 |             toast.innerHTML = `
 782 |                 <div class="w-6 h-6 rounded-full ${isError ? 'bg-red-400/30' : 'bg-green-400/30'} flex items-center justify-center">
 783 |                     <i class="fa-solid ${icon} text-xs"></i>
 784 |                 </div>
 785 |                 <span class="font-medium">${text}</span>
 786 |             `;
 787 | 
 788 |             document.body.appendChild(toast);
 789 | 
 790 |             // 2.5秒后消失
 791 |             setTimeout(() => {
 792 |                 toast.classList.remove('toast-enter');
 793 |                 toast.classList.add('toast-exit');
 794 |                 setTimeout(() => toast.remove(), 300);
 795 |             }, 2500);
 796 |         }
 797 | 
 798 |         function loadStats() {
 799 |             fetch('/stats').then(r => r.json()).then(data => {
 800 |                 if (!data.success) return;
 801 |                 const d = data.data;
 802 |                 const available = (d.seats_entitled || 0) - (d.seats_in_use || 0) - (d.pending_invites || 0);
 803 |                 const info = document.getElementById('seats-info');
 804 |                 if (available > 0) {
 805 |                     info.innerHTML = '<span class="w-1.5 h-1.5 rounded-full bg-green-500 animate-pulse"></span> <span class="text-green-400">在线 (剩余 ' + available + ' 个)</span>';
 806 |                 } else {
 807 |                     info.innerHTML = '<span class="w-1.5 h-1.5 rounded-full bg-red-500"></span> <span class="text-red-400">名额已满</span>';
 808 |                 }
 809 |             }).catch(() => {
 810 |                 document.getElementById('seats-info').innerHTML = '<span class="w-1.5 h-1.5 rounded-full bg-yellow-500"></span> <span class="text-yellow-400">离线</span>';
 811 |             });
 812 |         }
 813 | 
 814 |         // --- 显示验证码时间 ---
 815 |         function showCodeTime(timeStr) {
 816 |             const timeEl = document.getElementById('code-time');
 817 |             const timeTextEl = document.getElementById('code-time-text');
 818 |             if (timeStr) {
 819 |                 timeTextEl.textContent = timeStr;
 820 |                 timeEl.classList.remove('hidden');
 821 |             } else {
 822 |                 timeEl.classList.add('hidden');
 823 |             }
 824 |         }
 825 | 
 826 |         // --- 显示验证码 ---
 827 |         function displayCode(code, emailTime) {
 828 |             const codeDisplay = document.getElementById('code-display');
 829 |             const codeStatus = document.getElementById('code-status');
 830 |             const btn = document.getElementById('get-code-btn');
 831 | 
 832 |             const fmt = code.length === 6 ? code.slice(0, 3) + ' ' + code.slice(3) : code;
 833 |             codeDisplay.textContent = fmt;
 834 |             codeDisplay.className = 'text-3xl sm:text-4xl md:text-5xl font-mono font-bold tracking-[0.12em] sm:tracking-[0.15em] text-[#30D158] code-glow transition-all duration-300 relative z-10 py-0.5 sm:py-1';
 835 |             codeStatus.textContent = '验证码已就绪 ✓';
 836 | 
 837 |             // 显示验证码时间
 838 |             showCodeTime(emailTime);
 839 | 
 840 |             // 启用复制按钮
 841 |             enableCopyCodeBtn(code);
 842 | 
 843 |             // 恢复按钮
 844 |             btn.disabled = false;
 845 |             btn.querySelector('i').className = 'fa-solid fa-rotate text-xl';
 846 |             btn.querySelector('span').textContent = '刷新验证码';
 847 | 
 848 |             loadStats();
 849 |             showMessage('验证码获取成功', 'success');
 850 |         }
 851 | 
 852 |         // --- 获取验证码（用户点击按钮触发） ---
 853 |         async function getCode() {
 854 |             const btn = document.getElementById('get-code-btn');
 855 |             const codeDisplay = document.getElementById('code-display');
 856 |             const codeStatus = document.getElementById('code-status');
 857 | 
 858 |             btn.disabled = true;
 859 |             btn.querySelector('span').textContent = '获取中...';
 860 |             btn.querySelector('i').className = 'fa-solid fa-spinner animate-spin text-xl';
 861 |             codeStatus.textContent = '正在获取验证码...';
 862 | 
 863 |             try {
 864 |                 // 1. 先检查是否有验证码
 865 |                 const pollResp = await fetch('/api/poll-code');
 866 |                 const pollData = await pollResp.json();
 867 | 
 868 |                 if (pollData.found && pollData.code) {
 869 |                     // 有验证码，显示
 870 |                     displayCode(pollData.code, pollData.email_time);
 871 |                     return;
 872 |                 }
 873 | 
 874 |                 // 2. 没有验证码
 875 |                 if (pollData.success && !pollData.found) {
 876 |                     // 有待处理邀请但没有验证码
 877 |                     codeStatus.textContent = '暂无验证码邮件';
 878 |                     showMessage('暂无验证码邮件，请稍后再试', 'error');
 879 |                     resetBtn(10);
 880 |                     return;
 881 |                 }
 882 | 
 883 |                 // 3. 没有待处理邀请，执行新邀请
 884 |                 codeStatus.textContent = '正在发送邀请...';
 885 |                 const inviteResp = await fetch('/api/auto-invite', { method: 'POST' });
 886 |                 const inviteData = await inviteResp.json();
 887 | 
 888 |                 if (inviteData.banned) {
 889 |                     codeStatus.textContent = '车已翻 - 服务暂不可用';
 890 |                     codeDisplay.textContent = '⛔ 封禁';
 891 |                     codeDisplay.className = 'text-3xl sm:text-4xl md:text-5xl font-mono font-bold tracking-[0.12em] sm:tracking-[0.15em] text-red-500 transition-all duration-300 relative z-10 py-0.5 sm:py-1';
 892 |                     btn.querySelector('span').textContent = '服务不可用';
 893 |                     btn.querySelector('i').className = 'fa-solid fa-ban text-xl';
 894 |                     showMessage(inviteData.message, 'error');
 895 |                     return;
 896 |                 }
 897 | 
 898 |                 if (inviteData.seats_full) {
 899 |                     codeStatus.textContent = '名额已满，请等待下一班';
 900 |                     codeDisplay.textContent = '🚫 满员';
 901 |                     codeDisplay.className = 'text-3xl sm:text-4xl md:text-5xl font-mono font-bold tracking-[0.12em] sm:tracking-[0.15em] text-amber-500 transition-all duration-300 relative z-10 py-0.5 sm:py-1';
 902 |                     btn.querySelector('span').textContent = '名额已满';
 903 |                     btn.querySelector('i').className = 'fa-solid fa-user-slash text-xl';
 904 |                     showMessage(inviteData.message, 'error');
 905 |                     return;
 906 |                 }
 907 | 
 908 |                 if (inviteData.success) {
 909 |                     // 更新显示的邮箱
 910 |                     if (inviteData.result && inviteData.result.email) {
 911 |                         document.getElementById('assigned-email').textContent = inviteData.result.email;
 912 |                     }
 913 |                     codeStatus.textContent = '邀请已发送，请稍后点击获取验证码';
 914 |                     showMessage('邀请发送成功，请稍等30秒后再次点击获取验证码', 'success');
 915 |                     resetBtn(30);
 916 |                 } else {
 917 |                     codeStatus.textContent = inviteData.message || '邀请失败';
 918 |                     showMessage(inviteData.message || '邀请失败', 'error');
 919 |                     resetBtn(10);
 920 |                 }
 921 |             } catch (err) {
 922 |                 codeStatus.textContent = '网络错误';
 923 |                 showMessage('网络错误，请重试', 'error');
 924 |                 resetBtn(5);
 925 |             }
 926 |         }
 927 | 
 928 |         // --- 重置按钮（带冷却时间） ---
 929 |         function resetBtn(cooldownTime = 10) {
 930 |             const btn = document.getElementById('get-code-btn');
 931 |             let cooldown = cooldownTime;
 932 |             btn.disabled = true;
 933 | 
 934 |             const countdownInterval = setInterval(() => {
 935 |                 btn.querySelector('i').className = 'fa-solid fa-clock text-xl opacity-60';
 936 |                 btn.querySelector('span').textContent = `${cooldown}秒后可再次获取`;
 937 |                 cooldown--;
 938 | 
 939 |                 if (cooldown < 0) {
 940 |                     clearInterval(countdownInterval);
 941 |                     btn.disabled = false;
 942 |                     btn.querySelector('i').className = 'fa-solid fa-fingerprint text-xl';
 943 |                     btn.querySelector('span').textContent = '获取验证码';
 944 |                 }
 945 |             }, 1000);
 946 |         }
 947 | 
 948 |         // --- 根据状态初始化页面 ---
 949 |         function initPage() {
 950 |             const codeDisplay = document.getElementById('code-display');
 951 |             const codeStatus = document.getElementById('code-status');
 952 |             const btn = document.getElementById('get-code-btn');
 953 |             const copyCodeBtn = document.getElementById('copy-code-btn');
 954 | 
 955 |             // 状态1: 用户已在空间中
 956 |             if (INVITE_STATUS === 'in_space') {
 957 |                 codeDisplay.textContent = '已入空间';
 958 |                 codeDisplay.className = 'text-3xl sm:text-4xl md:text-5xl font-mono font-bold tracking-[0.12em] sm:tracking-[0.15em] text-green-400 code-glow transition-all duration-300 relative z-10 py-0.5 sm:py-1';
 959 |                 codeStatus.textContent = '您已成功加入 ChatGPT Team 空间';
 960 |                 btn.innerHTML = '<i class="fa-solid fa-check-circle text-xl"></i><span>已完成</span>';
 961 |                 btn.disabled = true;
 962 |                 btn.classList.remove('action-btn');
 963 |                 btn.classList.add('bg-green-500/20', 'border', 'border-green-500/30', 'cursor-default');
 964 |                 copyCodeBtn.classList.add('hidden');
 965 |                 showMessage('您已是空间成员，无需再次邀请', 'success');
 966 |                 return;
 967 |             }
 968 | 
 969 |             // 状态2: 用户有待处理邀请（可以获取验证码）
 970 |             if (INVITE_STATUS === 'pending' || (PENDING_INVITE.exists && !NEED_INVITE)) {
 971 |                 codeStatus.textContent = '您已有待处理的邀请，点击下方按钮获取验证码';
 972 |                 showMessage('检测到您已有待处理的邀请', 'success');
 973 |                 return;
 974 |             }
 975 | 
 976 |             // 状态3: 新用户，需要发送邀请
 977 |             if (NEED_INVITE) {
 978 |                 codeStatus.textContent = '正在发送邀请...';
 979 |                 btn.disabled = true;
 980 |                 btn.querySelector('span').textContent = '处理中...';
 981 |                 btn.querySelector('i').className = 'fa-solid fa-spinner animate-spin text-xl';
 982 | 
 983 |                 fetch('/api/auto-invite', { method: 'POST' })
 984 |                     .then(r => r.json())
 985 |                     .then(data => {
 986 |                         if (data.banned) {
 987 |                             codeStatus.textContent = '车已翻 - 服务暂不可用';
 988 |                             codeDisplay.textContent = '⛔ 封禁';
 989 |                             codeDisplay.className = 'text-3xl sm:text-4xl md:text-5xl font-mono font-bold tracking-[0.12em] sm:tracking-[0.15em] text-red-500 transition-all duration-300 relative z-10 py-0.5 sm:py-1';
 990 |                             btn.querySelector('span').textContent = '服务不可用';
 991 |                             btn.querySelector('i').className = 'fa-solid fa-ban text-xl';
 992 |                             showMessage(data.message, 'error');
 993 |                         } else if (data.seats_full) {
 994 |                             codeStatus.textContent = '名额已满';
 995 |                             codeDisplay.textContent = '🚫 满员';
 996 |                             codeDisplay.className = 'text-3xl sm:text-4xl md:text-5xl font-mono font-bold tracking-[0.12em] sm:tracking-[0.15em] text-amber-500 transition-all duration-300 relative z-10 py-0.5 sm:py-1';
 997 |                             btn.querySelector('span').textContent = '名额已满';
 998 |                             btn.querySelector('i').className = 'fa-solid fa-user-slash text-xl';
 999 |                             showMessage(data.message, 'error');
1000 |                         } else if (data.success) {
1001 |                             if (data.result && data.result.email) {
1002 |                                 document.getElementById('assigned-email').textContent = data.result.email;
1003 |                             }
1004 |                             codeStatus.textContent = '邀请已发送，请点击下方按钮获取验证码';
1005 |                             showMessage('邀请发送成功', 'success');
1006 |                             resetBtn(30);
1007 |                         } else {
1008 |                             codeStatus.textContent = data.message || '邀请失败';
1009 |                             showMessage(data.message || '邀请失败', 'error');
1010 |                             resetBtn(10);
1011 |                         }
1012 |                     })
1013 |                     .catch(() => {
1014 |                         codeStatus.textContent = '网络错误';
1015 |                         showMessage('网络错误', 'error');
1016 |                         resetBtn(5);
1017 |                     });
1018 |                 return;
1019 |             }
1020 | 
1021 |             // 默认状态
1022 |             codeStatus.textContent = '点击下方按钮获取验证码';
1023 |         }
1024 | 
1025 |         // --- 主题切换 ---
1026 |         function initTheme() {
1027 |             const saved = localStorage.getItem('theme');
1028 |             if (saved === 'light') {
1029 |                 document.documentElement.classList.add('light');
1030 |             } else if (saved === 'dark') {
1031 |                 document.documentElement.classList.remove('light');
1032 |             } else {
1033 |                 // 跟随系统
1034 |                 if (window.matchMedia('(prefers-color-scheme: light)').matches) {
1035 |                     document.documentElement.classList.add('light');
1036 |                 }
1037 |             }
1038 |         }
1039 | 
1040 |         function toggleTheme() {
1041 |             const isLight = document.documentElement.classList.toggle('light');
1042 |             localStorage.setItem('theme', isLight ? 'light' : 'dark');
1043 |         }
1044 | 
1045 |         // 初始化主题
1046 |         initTheme();
1047 | 
1048 |         // 绑定切换按钮
1049 |         document.getElementById('theme-toggle').addEventListener('click', toggleTheme);
1050 | 
1051 |         // --- INIT ---
1052 |         loadStats();
1053 |         setInterval(loadStats, 30000);
1054 |         initPage();
1055 |     </script>
1056 | </body>
1057 | 
1058 | </html>


--------------------------------------------------------------------------------
/main.py:
--------------------------------------------------------------------------------
   1 | from flask import Flask, render_template, request, jsonify, redirect, url_for, session
   2 | from flask_session import Session
   3 | import requests
   4 | import os
   5 | import re
   6 | import secrets
   7 | import time
   8 | import json
   9 | import redis
  10 | import atexit
  11 | from dotenv import load_dotenv
  12 | import logging
  13 | from datetime import datetime, timedelta, timezone
  14 | from apscheduler.schedulers.background import BackgroundScheduler
  15 | 
  16 | load_dotenv()
  17 | 
  18 | app = Flask(__name__)
  19 | app.secret_key = os.getenv("SECRET_KEY", "dev_secret_key")
  20 | 
  21 | # Session 配置 - 使用 Redis 存储
  22 | app.config['SESSION_TYPE'] = 'redis'
  23 | app.config['SESSION_PERMANENT'] = True
  24 | app.config['PERMANENT_SESSION_LIFETIME'] = timedelta(days=7)
  25 | app.config['SESSION_KEY_PREFIX'] = 'team_invite:session:'
  26 | app.config['SESSION_USE_SIGNER'] = True
  27 | 
  28 | # ==================== 日志配置 ====================
  29 | logging.getLogger("werkzeug").setLevel(logging.ERROR)
  30 | 
  31 | # 自定义日志格式
  32 | log_formatter = logging.Formatter(
  33 |     '[%(asctime)s] %(levelname)s | %(message)s',
  34 |     datefmt='%Y-%m-%d %H:%M:%S'
  35 | )
  36 | 
  37 | # 配置应用日志
  38 | app.logger.setLevel(logging.INFO)
  39 | for handler in app.logger.handlers:
  40 |     handler.setFormatter(log_formatter)
  41 | 
  42 | # 如果没有 handler，添加一个
  43 | if not app.logger.handlers:
  44 |     stream_handler = logging.StreamHandler()
  45 |     stream_handler.setFormatter(log_formatter)
  46 |     app.logger.addHandler(stream_handler)
  47 | 
  48 | 
  49 | class No404Filter(logging.Filter):
  50 |     def filter(self, record):
  51 |         return not (getattr(record, "status_code", None) == 404)
  52 | 
  53 | 
  54 | logging.getLogger("werkzeug").addFilter(No404Filter())
  55 | 
  56 | 
  57 | def log_info(module: str, action: str, message: str = "", **kwargs):
  58 |     """统一 INFO 日志格式"""
  59 |     extra = " | ".join(f"{k}={v}" for k, v in kwargs.items()) if kwargs else ""
  60 |     log_msg = f"[{module}] {action}"
  61 |     if message:
  62 |         log_msg += f" - {message}"
  63 |     if extra:
  64 |         log_msg += f" | {extra}"
  65 |     app.logger.info(log_msg)
  66 | 
  67 | 
  68 | def log_error(module: str, action: str, message: str = "", **kwargs):
  69 |     """统一 ERROR 日志格式"""
  70 |     extra = " | ".join(f"{k}={v}" for k, v in kwargs.items()) if kwargs else ""
  71 |     log_msg = f"[{module}] {action}"
  72 |     if message:
  73 |         log_msg += f" - {message}"
  74 |     if extra:
  75 |         log_msg += f" | {extra}"
  76 |     app.logger.error(log_msg)
  77 | 
  78 | 
  79 | def log_warn(module: str, action: str, message: str = "", **kwargs):
  80 |     """统一 WARNING 日志格式"""
  81 |     extra = " | ".join(f"{k}={v}" for k, v in kwargs.items()) if kwargs else ""
  82 |     log_msg = f"[{module}] {action}"
  83 |     if message:
  84 |         log_msg += f" - {message}"
  85 |     if extra:
  86 |         log_msg += f" | {extra}"
  87 |     app.logger.warning(log_msg)
  88 | 
  89 | # ChatGPT Team 配置
  90 | _token = os.getenv("AUTHORIZATION_TOKEN", "")
  91 | AUTHORIZATION_TOKEN = _token if _token.startswith("Bearer ") else f"Bearer {_token}"
  92 | ACCOUNT_ID = os.getenv("ACCOUNT_ID")
  93 | 
  94 | # Cloudflare Turnstile (保留兼容)
  95 | CF_TURNSTILE_SECRET_KEY = os.getenv("CF_TURNSTILE_SECRET_KEY")
  96 | CF_TURNSTILE_SITE_KEY = os.getenv("CF_TURNSTILE_SITE_KEY")
  97 | 
  98 | # Linux DO OAuth 配置
  99 | LINUXDO_CLIENT_ID = os.getenv("LINUXDO_CLIENT_ID")
 100 | LINUXDO_CLIENT_SECRET = os.getenv("LINUXDO_CLIENT_SECRET")
 101 | LINUXDO_REDIRECT_URI = os.getenv("LINUXDO_REDIRECT_URI", "http://127.0.0.1:39001/callback")
 102 | LINUXDO_AUTHORIZE_URL = "https://connect.linux.do/oauth2/authorize"
 103 | LINUXDO_TOKEN_URL = "https://connect.linux.do/oauth2/token"
 104 | LINUXDO_USER_URL = "https://connect.linux.do/api/user"
 105 | 
 106 | # 邮箱平台配置
 107 | EMAIL_API_AUTH = os.getenv("EMAIL_API_AUTH")
 108 | EMAIL_API_BASE = os.getenv("EMAIL_API_BASE")
 109 | EMAIL_DOMAIN = os.getenv("EMAIL_DOMAIN")
 110 | EMAIL_ROLE = os.getenv("EMAIL_ROLE", "gpt-team")
 111 | # Derive web URL from API base (assumes API is at /api/public or similar, trims path)
 112 | EMAIL_WEB_URL = os.getenv("EMAIL_WEB_URL")
 113 | if not EMAIL_WEB_URL and EMAIL_API_BASE:
 114 |     from urllib.parse import urlparse
 115 |     parsed = urlparse(EMAIL_API_BASE)
 116 |     EMAIL_WEB_URL = f"{parsed.scheme}://{parsed.netloc}"
 117 | 
 118 | 
 119 | # 信任等级要求
 120 | MIN_TRUST_LEVEL = int(os.getenv("MIN_TRUST_LEVEL", "1"))
 121 | 
 122 | # 缓存配置
 123 | STATS_CACHE_TTL = 120  # 统计数据缓存时间（秒）
 124 | STATS_REFRESH_INTERVAL = 60  # 后台刷新间隔（秒）
 125 | 
 126 | # Redis 配置
 127 | REDIS_HOST = os.getenv("REDIS_HOST", "localhost")
 128 | REDIS_PORT = int(os.getenv("REDIS_PORT", "6379"))
 129 | REDIS_PASSWORD = os.getenv("REDIS_PASSWORD", "")
 130 | REDIS_DB = int(os.getenv("REDIS_DB", "0"))
 131 | 
 132 | # Redis 连接池
 133 | redis_pool = redis.ConnectionPool(
 134 |     host=REDIS_HOST,
 135 |     port=REDIS_PORT,
 136 |     password=REDIS_PASSWORD or None,
 137 |     db=REDIS_DB,
 138 |     decode_responses=True,
 139 |     max_connections=50,  # 增加连接数以支持高并发
 140 |     socket_connect_timeout=5,
 141 |     socket_timeout=5,
 142 |     retry_on_timeout=True
 143 | )
 144 | redis_client = redis.Redis(connection_pool=redis_pool)
 145 | 
 146 | # Session 使用 Redis 存储（需要单独的连接，不使用 decode_responses）
 147 | session_redis = redis.Redis(
 148 |     host=REDIS_HOST,
 149 |     port=REDIS_PORT,
 150 |     password=REDIS_PASSWORD or None,
 151 |     db=REDIS_DB
 152 | )
 153 | app.config['SESSION_REDIS'] = session_redis
 154 | Session(app)
 155 | 
 156 | # Redis Key
 157 | INVITE_RECORDS_KEY = "team_invite:records"
 158 | INVITE_COUNTER_KEY = "team_invite:counter"
 159 | INVITE_LOCK_KEY = "team_invite:lock"
 160 | STATS_CACHE_KEY = "team_invite:stats_cache"
 161 | PENDING_INVITES_CACHE_KEY = "team_invite:pending_invites"
 162 | RATE_LIMIT_KEY = "team_invite:rate_limit"
 163 | 
 164 | # 后台管理密码
 165 | ADMIN_PASSWORD = os.getenv("ADMIN_PASSWORD", "admin123")
 166 | 
 167 | # 统一密码
 168 | DEFAULT_PASSWORD = "kfcvivo50"
 169 | 
 170 | # 限流配置
 171 | RATE_LIMIT_MAX_REQUESTS = 5  # 每个 IP 每分钟最大请求数
 172 | RATE_LIMIT_WINDOW = 60  # 限流窗口（秒）
 173 | 
 174 | 
 175 | def get_client_ip_address():
 176 |     if "CF-Connecting-IP" in request.headers:
 177 |         return request.headers["CF-Connecting-IP"]
 178 |     if "X-Forwarded-For" in request.headers:
 179 |         return request.headers["X-Forwarded-For"].split(",")[0].strip()
 180 |     return request.remote_addr or "unknown"
 181 | 
 182 | 
 183 | def check_rate_limit(identifier=None):
 184 |     """检查请求限流
 185 | 
 186 |     Args:
 187 |         identifier: 限流标识，默认使用客户端 IP
 188 | 
 189 |     Returns:
 190 |         tuple: (is_allowed, remaining, reset_time)
 191 |     """
 192 |     if identifier is None:
 193 |         identifier = get_client_ip_address()
 194 | 
 195 |     key = f"{RATE_LIMIT_KEY}:{identifier}"
 196 | 
 197 |     try:
 198 |         # 使用 Redis pipeline 实现原子操作
 199 |         pipe = redis_client.pipeline()
 200 |         pipe.incr(key)
 201 |         pipe.ttl(key)
 202 |         results = pipe.execute()
 203 | 
 204 |         current_count = results[0]
 205 |         ttl = results[1]
 206 | 
 207 |         # 如果是新 key，设置过期时间
 208 |         if ttl == -1:
 209 |             redis_client.expire(key, RATE_LIMIT_WINDOW)
 210 |             ttl = RATE_LIMIT_WINDOW
 211 | 
 212 |         remaining = max(0, RATE_LIMIT_MAX_REQUESTS - current_count)
 213 |         is_allowed = current_count <= RATE_LIMIT_MAX_REQUESTS
 214 | 
 215 |         return is_allowed, remaining, ttl
 216 |     except Exception as e:
 217 |         log_error("RateLimit", "限流检查失败", str(e))
 218 |         return True, RATE_LIMIT_MAX_REQUESTS, RATE_LIMIT_WINDOW  # 出错时放行
 219 | 
 220 | 
 221 | def build_base_headers():
 222 |     return {
 223 |         "accept": "*/*",
 224 |         "accept-language": "zh-CN,zh;q=0.9",
 225 |         "authorization": AUTHORIZATION_TOKEN,
 226 |         "chatgpt-account-id": ACCOUNT_ID,
 227 |         "user-agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36",
 228 |     }
 229 | 
 230 | 
 231 | def build_invite_headers():
 232 |     headers = build_base_headers()
 233 |     headers.update(
 234 |         {
 235 |             "content-type": "application/json",
 236 |             "origin": "https://chatgpt.com",
 237 |             "referer": "https://chatgpt.com/",
 238 |             'sec-ch-ua': '"Chromium";v="135", "Not)A;Brand";v="99", "Google Chrome";v="135"',
 239 |             "sec-ch-ua-mobile": "?0",
 240 |             "sec-ch-ua-platform": '"Windows"',
 241 |         }
 242 |     )
 243 |     return headers
 244 | 
 245 | 
 246 | def parse_emails(raw_emails):
 247 |     if not raw_emails:
 248 |         return [], []
 249 |     parts = raw_emails.replace("\n", ",").split(",")
 250 |     emails = [p.strip() for p in parts if p.strip()]
 251 |     valid = [e for e in emails if e.count("@") == 1]
 252 |     return emails, valid
 253 | 
 254 | 
 255 | def validate_turnstile(turnstile_response):
 256 |     if not turnstile_response:
 257 |         return False
 258 |     data = {
 259 |         "secret": CF_TURNSTILE_SECRET_KEY,
 260 |         "response": turnstile_response,
 261 |         "remoteip": get_client_ip_address(),
 262 |     }
 263 |     try:
 264 |         response = requests.post(
 265 |             "https://challenges.cloudflare.com/turnstile/v0/siteverify",
 266 |             data=data,
 267 |             timeout=10,
 268 |         )
 269 |         result = response.json()
 270 |         return result.get("success", False)
 271 |     except Exception:
 272 |         return False
 273 | 
 274 | 
 275 | class TeamBannedException(Exception):
 276 |     """Team 账号被封禁异常"""
 277 |     pass
 278 | 
 279 | 
 280 | def get_cached_stats():
 281 |     """从 Redis 获取缓存的统计数据"""
 282 |     try:
 283 |         cached = redis_client.get(STATS_CACHE_KEY)
 284 |         if cached:
 285 |             return json.loads(cached)
 286 |     except Exception as e:
 287 |         log_error("Cache", "读取统计缓存失败", str(e))
 288 |     return None
 289 | 
 290 | 
 291 | def set_cached_stats(stats_data):
 292 |     """将统计数据存入 Redis 缓存"""
 293 |     try:
 294 |         cache_obj = {
 295 |             "data": stats_data,
 296 |             "timestamp": time.time(),
 297 |             "updated_at": datetime.now(timezone(timedelta(hours=8))).strftime("%Y-%m-%d %H:%M:%S")
 298 |         }
 299 |         redis_client.setex(STATS_CACHE_KEY, STATS_CACHE_TTL, json.dumps(cache_obj))
 300 |     except Exception as e:
 301 |         log_error("Cache", "写入统计缓存失败", str(e))
 302 | 
 303 | 
 304 | def get_cached_pending_invites():
 305 |     """从 Redis 获取缓存的待处理邀请"""
 306 |     try:
 307 |         cached = redis_client.get(PENDING_INVITES_CACHE_KEY)
 308 |         if cached:
 309 |             return json.loads(cached)
 310 |     except Exception as e:
 311 |         log_error("Cache", "读取待处理邀请缓存失败", str(e))
 312 |     return None
 313 | 
 314 | 
 315 | def set_cached_pending_invites(items, total):
 316 |     """将待处理邀请存入 Redis 缓存"""
 317 |     try:
 318 |         cache_obj = {
 319 |             "items": items,
 320 |             "total": total,
 321 |             "timestamp": time.time()
 322 |         }
 323 |         redis_client.setex(PENDING_INVITES_CACHE_KEY, STATS_CACHE_TTL, json.dumps(cache_obj))
 324 |     except Exception as e:
 325 |         log_error("Cache", "写入待处理邀请缓存失败", str(e))
 326 | 
 327 | 
 328 | def fetch_stats_from_api():
 329 |     """从 API 获取最新统计数据（内部使用）"""
 330 |     base_headers = build_base_headers()
 331 |     subs_url = f"https://chatgpt.com/backend-api/subscriptions?account_id={ACCOUNT_ID}"
 332 |     invites_url = f"https://chatgpt.com/backend-api/accounts/{ACCOUNT_ID}/invites?offset=0&limit=1&query="
 333 | 
 334 |     subs_resp = requests.get(subs_url, headers=base_headers, timeout=10)
 335 | 
 336 |     # 检查是否被封禁 (401/403 表示账号异常)
 337 |     if subs_resp.status_code in [401, 403]:
 338 |         log_error("Stats", "账号异常", "Team account banned or unauthorized", status=subs_resp.status_code)
 339 |         raise TeamBannedException("Team 账号状态异常")
 340 |     subs_resp.raise_for_status()
 341 |     subs_data = subs_resp.json()
 342 | 
 343 |     invites_resp = requests.get(invites_url, headers=base_headers, timeout=10)
 344 |     if invites_resp.status_code in [401, 403]:
 345 |         log_error("Stats", "账号异常", "Team account banned or unauthorized", status=invites_resp.status_code)
 346 |         raise TeamBannedException("Team 账号状态异常")
 347 |     invites_resp.raise_for_status()
 348 |     invites_data = invites_resp.json()
 349 | 
 350 |     return {
 351 |         "seats_in_use": subs_data.get("seats_in_use"),
 352 |         "seats_entitled": subs_data.get("seats_entitled"),
 353 |         "pending_invites": invites_data.get("total"),
 354 |         "plan_type": subs_data.get("plan_type"),
 355 |         "active_start": subs_data.get("active_start"),
 356 |         "active_until": subs_data.get("active_until"),
 357 |         "billing_period": subs_data.get("billing_period"),
 358 |         "billing_currency": subs_data.get("billing_currency"),
 359 |         "will_renew": subs_data.get("will_renew"),
 360 |         "is_delinquent": subs_data.get("is_delinquent"),
 361 |     }
 362 | 
 363 | 
 364 | def refresh_stats(force=False):
 365 |     """获取统计数据（优先从缓存读取）"""
 366 |     if not force:
 367 |         cached = get_cached_stats()
 368 |         if cached:
 369 |             return cached["data"], cached.get("updated_at")
 370 | 
 371 |     # 缓存不存在或强制刷新，从 API 获取
 372 |     stats = fetch_stats_from_api()
 373 |     set_cached_stats(stats)
 374 |     updated_at = datetime.now(timezone(timedelta(hours=8))).strftime("%Y-%m-%d %H:%M:%S")
 375 |     log_info("Stats", "统计数据已刷新", seats_in_use=stats.get("seats_in_use"), pending=stats.get("pending_invites"))
 376 |     return stats, updated_at
 377 | 
 378 | 
 379 | def background_refresh_stats():
 380 |     """后台刷新统计数据（由定时任务调用）"""
 381 |     try:
 382 |         stats = fetch_stats_from_api()
 383 |         set_cached_stats(stats)
 384 |         log_info("Background", "统计数据刷新完成", seats=stats.get("seats_in_use"), pending=stats.get("pending_invites"))
 385 |     except TeamBannedException:
 386 |         log_error("Background", "统计刷新失败", "账号被封禁")
 387 |     except Exception as e:
 388 |         log_error("Background", "统计刷新失败", str(e))
 389 | 
 390 | 
 391 | # ==================== Linux DO OAuth 相关函数 ====================
 392 | 
 393 | def generate_email_for_user(username):
 394 |     """根据用户信息生成邮箱地址: {username}kfc@domain"""
 395 |     safe_username = re.sub(r'[^a-zA-Z0-9]', '', username.lower())[:20]
 396 |     return f"{safe_username}kfc@{EMAIL_DOMAIN}"
 397 | 
 398 | 
 399 | def generate_password():
 400 |     """返回统一密码"""
 401 |     return DEFAULT_PASSWORD
 402 | 
 403 | 
 404 | def create_email_user(email, password, role_name):
 405 |     """在邮箱平台创建用户"""
 406 |     url = f"{EMAIL_API_BASE}/addUser"
 407 |     headers = {
 408 |         "Authorization": EMAIL_API_AUTH,
 409 |         "Content-Type": "application/json"
 410 |     }
 411 |     payload = {
 412 |         "list": [{"email": email, "password": password, "roleName": role_name}]
 413 |     }
 414 |     try:
 415 |         log_info("Email", "创建邮箱", email=email, role=role_name)
 416 |         response = requests.post(url, headers=headers, json=payload, timeout=10)
 417 |         data = response.json()
 418 |         success = data.get("code") == 200
 419 |         msg = data.get("message", "Unknown error")
 420 |         if success:
 421 |             log_info("Email", "创建成功", email=email)
 422 |         else:
 423 |             log_warn("Email", "创建失败", msg, email=email, code=data.get("code"))
 424 |         return success, msg
 425 |     except Exception as e:
 426 |         log_error("Email", "创建异常", str(e), email=email)
 427 |         return False, str(e)
 428 | 
 429 | 
 430 | def fetch_pending_invites_from_api(limit=1000):
 431 |     """从 API 获取待处理邀请列表（内部使用）
 432 | 
 433 |     支持分页获取所有数据
 434 |     """
 435 |     headers = build_base_headers()
 436 |     all_items = []
 437 |     offset = 0
 438 |     page_size = 100  # API 单次最大返回数
 439 |     total = 0
 440 | 
 441 |     try:
 442 |         while True:
 443 |             url = f"https://chatgpt.com/backend-api/accounts/{ACCOUNT_ID}/invites?offset={offset}&limit={page_size}&query="
 444 |             response = requests.get(url, headers=headers, timeout=10)
 445 | 
 446 |             if response.status_code != 200:
 447 |                 log_error("Invite", "获取待处理邀请失败", status=response.status_code)
 448 |                 break
 449 | 
 450 |             data = response.json()
 451 |             items = data.get("items", [])
 452 |             total = data.get("total", 0)
 453 |             all_items.extend(items)
 454 | 
 455 |             # 如果获取的数据少于 page_size，说明已经是最后一页
 456 |             if len(items) < page_size or len(all_items) >= total or len(all_items) >= limit:
 457 |                 break
 458 | 
 459 |             offset += page_size
 460 | 
 461 |         return all_items[:limit], total
 462 |     except Exception as e:
 463 |         log_error("Invite", "获取待处理邀请异常", str(e))
 464 |         return [], 0
 465 | 
 466 | 
 467 | def get_pending_invites(force=False):
 468 |     """获取待处理邀请列表（优先从缓存读取）"""
 469 |     if not force:
 470 |         cached = get_cached_pending_invites()
 471 |         if cached:
 472 |             return cached["items"], cached["total"]
 473 | 
 474 |     # 缓存不存在或强制刷新
 475 |     items, total = fetch_pending_invites_from_api(100)
 476 |     set_cached_pending_invites(items, total)
 477 |     return items, total
 478 | 
 479 | 
 480 | def check_invite_pending(email):
 481 |     """检查邮箱是否在待处理邀请列表中（实时查询，不使用缓存）"""
 482 |     items, _ = fetch_pending_invites_from_api(100)
 483 |     for item in items:
 484 |         if item.get("email_address", "").lower() == email.lower():
 485 |             return True
 486 |     return False
 487 | 
 488 | 
 489 | def check_user_already_invited(email):
 490 |     """检查用户是否已经被邀请过（在待处理邀请列表中）
 491 | 
 492 |     优先使用缓存，避免登录时阻塞太久
 493 |     """
 494 |     # 先检查缓存
 495 |     cached = get_cached_pending_invites()
 496 |     if cached:
 497 |         items = cached.get("items", [])
 498 |         for item in items:
 499 |             if item.get("email_address", "").lower() == email.lower():
 500 |                 return True
 501 | 
 502 |     # 缓存没有，实时查询一次
 503 |     items, _ = fetch_pending_invites_from_api(100)
 504 |     for item in items:
 505 |         if item.get("email_address", "").lower() == email.lower():
 506 |             return True
 507 |     return False
 508 | 
 509 | 
 510 | def fetch_space_members_from_api(limit=1000):
 511 |     """从 API 获取空间成员列表
 512 | 
 513 |     支持分页获取所有数据
 514 |     """
 515 |     headers = build_base_headers()
 516 |     all_items = []
 517 |     offset = 0
 518 |     page_size = 100  # API 单次最大返回数
 519 |     total = 0
 520 | 
 521 |     try:
 522 |         while True:
 523 |             url = f"https://chatgpt.com/backend-api/accounts/{ACCOUNT_ID}/users?offset={offset}&limit={page_size}&query="
 524 |             response = requests.get(url, headers=headers, timeout=10)
 525 | 
 526 |             if response.status_code != 200:
 527 |                 log_error("Members", "获取空间成员失败", status=response.status_code)
 528 |                 break
 529 | 
 530 |             data = response.json()
 531 |             items = data.get("items", [])
 532 |             total = data.get("total", 0)
 533 |             all_items.extend(items)
 534 | 
 535 |             # 如果获取的数据少于 page_size，说明已经是最后一页
 536 |             if len(items) < page_size or len(all_items) >= total or len(all_items) >= limit:
 537 |                 break
 538 | 
 539 |             offset += page_size
 540 | 
 541 |         return all_items[:limit], total
 542 |     except Exception as e:
 543 |         log_error("Members", "获取空间成员异常", str(e))
 544 |         return [], 0
 545 | 
 546 | 
 547 | def check_user_in_space(email):
 548 |     """检查用户是否已经在空间中（已接受邀请成为成员）
 549 | 
 550 |     Returns:
 551 |         bool: True 表示已在空间中
 552 |     """
 553 |     items, _ = fetch_space_members_from_api(100)
 554 |     for item in items:
 555 |         member_email = item.get("email", "").lower()
 556 |         if member_email == email.lower():
 557 |             return True
 558 |     return False
 559 | 
 560 | 
 561 | def get_user_invite_status(email):
 562 |     """获取用户的邀请状态
 563 | 
 564 |     Returns:
 565 |         str: 'in_space' - 已在空间中
 566 |              'pending' - 有待处理邀请
 567 |              'new' - 新用户，需要邀请
 568 |     """
 569 |     # 1. 先检查是否已在空间中
 570 |     if check_user_in_space(email):
 571 |         return 'in_space'
 572 | 
 573 |     # 2. 检查是否有待处理邀请
 574 |     if check_user_already_invited(email):
 575 |         return 'pending'
 576 | 
 577 |     # 3. 新用户
 578 |     return 'new'
 579 | 
 580 | 
 581 | def background_refresh_pending_invites():
 582 |     """后台刷新待处理邀请（由定时任务调用）"""
 583 |     try:
 584 |         items, total = fetch_pending_invites_from_api(100)
 585 |         set_cached_pending_invites(items, total)
 586 |         log_info("Background", "待处理邀请刷新完成", total=total)
 587 |     except Exception as e:
 588 |         log_error("Background", "待处理邀请刷新失败", str(e))
 589 | 
 590 | 
 591 | def send_chatgpt_invite(email):
 592 |     """发送 ChatGPT Team 邀请"""
 593 |     url = f"https://chatgpt.com/backend-api/accounts/{ACCOUNT_ID}/invites"
 594 |     headers = build_invite_headers()
 595 |     payload = {
 596 |         "email_addresses": [email],
 597 |         "role": "standard-user",
 598 |         "resend_emails": True
 599 |     }
 600 | 
 601 |     log_info("Invite", "发送邀请", email=email, account_id=ACCOUNT_ID[:8] + "..." if ACCOUNT_ID else "None")
 602 | 
 603 |     try:
 604 |         response = requests.post(url, headers=headers, json=payload, timeout=10)
 605 |         if response.status_code == 200:
 606 |             # 验证邀请是否真的发送成功
 607 |             if check_invite_pending(email):
 608 |                 log_info("Invite", "邀请成功(已验证)", email=email)
 609 |                 return True, "success"
 610 |             else:
 611 |                 log_warn("Invite", "邀请状态不确定", "API返回200但未在待处理列表中找到", email=email)
 612 |                 return True, "success"  # 仍然返回成功，可能有延迟
 613 |         else:
 614 |             log_error("Invite", "邀请失败", response.text[:200], email=email, status=response.status_code)
 615 |             return False, f"HTTP {response.status_code}: {response.text[:200]}"
 616 |     except Exception as e:
 617 |         log_error("Invite", "邀请异常", str(e), email=email)
 618 |         return False, str(e)
 619 | 
 620 | 
 621 | def get_verification_code(email, max_retries=10, interval=3):
 622 |     """从邮箱获取验证码
 623 | 
 624 |     Returns:
 625 |         tuple: (code, error, email_time) - 验证码、错误信息、邮件时间
 626 |     """
 627 |     url = f"{EMAIL_API_BASE}/emailList"
 628 |     headers = {
 629 |         "Authorization": EMAIL_API_AUTH,
 630 |         "Content-Type": "application/json"
 631 |     }
 632 |     payload = {"toEmail": email}
 633 | 
 634 |     log_info("Code", "获取验证码", email=email, max_retries=max_retries)
 635 | 
 636 |     for i in range(max_retries):
 637 |         try:
 638 |             response = requests.post(url, headers=headers, json=payload, timeout=10)
 639 |             data = response.json()
 640 | 
 641 |             if data.get("code") == 200:
 642 |                 emails = data.get("data", [])
 643 |                 if emails:
 644 |                     latest_email = emails[0]
 645 |                     subject = latest_email.get("subject", "")
 646 |                     email_time = latest_email.get("createTime", "")  # 获取邮件时间
 647 |                     match = re.search(r"代码为\s*(\d{6})", subject)
 648 |                     if match:
 649 |                         code = match.group(1)
 650 |                         log_info("Code", "验证码获取成功", email=email, code=code, attempt=i+1)
 651 |                         return code, None, email_time
 652 |         except Exception as e:
 653 |             log_error("Code", "获取异常", str(e), email=email, attempt=i+1)
 654 | 
 655 |         if i < max_retries - 1:
 656 |             time.sleep(interval)
 657 | 
 658 |     log_warn("Code", "验证码获取失败", email=email, attempts=max_retries)
 659 |     return None, "未能获取验证码", None
 660 | 
 661 | 
 662 | def is_logged_in():
 663 |     """检查用户是否已登录"""
 664 |     return "user" in session
 665 | 
 666 | 
 667 | def get_current_user():
 668 |     """获取当前登录用户"""
 669 |     return session.get("user")
 670 | 
 671 | 
 672 | def check_seats_available(force_refresh=False):
 673 |     """检查是否还有可用名额
 674 | 
 675 |     Args:
 676 |         force_refresh: 是否强制刷新数据（高并发场景下应该为 True）
 677 |     """
 678 |     try:
 679 |         data, _ = refresh_stats(force=force_refresh)
 680 |         if not data:
 681 |             return False, None  # 无法获取数据时默认拒绝（更安全）
 682 |         seats_in_use = data.get("seats_in_use", 0)
 683 |         seats_entitled = data.get("seats_entitled", 0)
 684 |         pending = data.get("pending_invites", 0)
 685 |         available = seats_entitled - seats_in_use - pending
 686 |         return available > 0, data
 687 |     except TeamBannedException:
 688 |         raise  # 传递给上层处理
 689 |     except Exception:
 690 |         return False, None  # 出错时默认拒绝
 691 | 
 692 | 
 693 | def acquire_invite_lock(user_id, timeout=30):
 694 |     """获取邀请分布式锁，防止并发超卖
 695 |     
 696 |     Args:
 697 |         user_id: 用户ID，用于锁的唯一标识
 698 |         timeout: 锁超时时间（秒）
 699 |     
 700 |     Returns:
 701 |         lock_token: 锁令牌，用于释放锁；None 表示获取失败
 702 |     """
 703 |     lock_key = f"{INVITE_LOCK_KEY}:{user_id}"
 704 |     lock_token = secrets.token_hex(8)
 705 |     
 706 |     # 使用 SET NX EX 原子操作获取锁
 707 |     acquired = redis_client.set(lock_key, lock_token, nx=True, ex=timeout)
 708 |     return lock_token if acquired else None
 709 | 
 710 | 
 711 | def release_invite_lock(user_id, lock_token):
 712 |     """释放邀请锁
 713 |     
 714 |     使用 Lua 脚本确保只有持有锁的人才能释放
 715 |     """
 716 |     lock_key = f"{INVITE_LOCK_KEY}:{user_id}"
 717 |     lua_script = """
 718 |     if redis.call("get", KEYS[1]) == ARGV[1] then
 719 |         return redis.call("del", KEYS[1])
 720 |     else
 721 |         return 0
 722 |     end
 723 |     """
 724 |     try:
 725 |         redis_client.eval(lua_script, 1, lock_key, lock_token)
 726 |     except Exception:
 727 |         pass  # 释放锁失败不影响主流程
 728 | 
 729 | 
 730 | def acquire_global_invite_lock(timeout=30):
 731 |     """获取全局邀请锁，用于检查和发送邀请的原子操作
 732 | 
 733 |     timeout 设置为 30 秒，足够完成创建邮箱和发送邀请的操作
 734 |     """
 735 |     lock_token = secrets.token_hex(8)
 736 |     acquired = redis_client.set(INVITE_LOCK_KEY, lock_token, nx=True, ex=timeout)
 737 |     return lock_token if acquired else None
 738 | 
 739 | 
 740 | def release_global_invite_lock(lock_token):
 741 |     """释放全局邀请锁"""
 742 |     lua_script = """
 743 |     if redis.call("get", KEYS[1]) == ARGV[1] then
 744 |         return redis.call("del", KEYS[1])
 745 |     else
 746 |         return 0
 747 |     end
 748 |     """
 749 |     try:
 750 |         redis_client.eval(lua_script, 1, INVITE_LOCK_KEY, lock_token)
 751 |     except Exception:
 752 |         pass
 753 | 
 754 | 
 755 | # ==================== 并发信号量控制 ====================
 756 | SEMAPHORE_KEY = "team_invite:semaphore"
 757 | SEMAPHORE_MAX_CONCURRENT = 20  # 最大同时处理 20 个邀请请求
 758 | SEMAPHORE_TIMEOUT = 60  # 信号量超时时间（秒）
 759 | 
 760 | 
 761 | def acquire_semaphore(timeout=SEMAPHORE_TIMEOUT):
 762 |     """获取信号量槽位，允许有限并发
 763 | 
 764 |     使用 Redis Sorted Set 实现分布式信号量
 765 |     - score: 过期时间戳
 766 |     - member: 唯一令牌
 767 | 
 768 |     Returns:
 769 |         str: 令牌，用于释放；None 表示获取失败
 770 |     """
 771 |     token = secrets.token_hex(8)
 772 |     now = time.time()
 773 |     expire_at = now + timeout
 774 | 
 775 |     try:
 776 |         # Lua 脚本：原子性地清理过期项并尝试获取槽位
 777 |         lua_script = """
 778 |         local key = KEYS[1]
 779 |         local max_concurrent = tonumber(ARGV[1])
 780 |         local now = tonumber(ARGV[2])
 781 |         local expire_at = tonumber(ARGV[3])
 782 |         local token = ARGV[4]
 783 | 
 784 |         -- 清理过期的槽位
 785 |         redis.call('ZREMRANGEBYSCORE', key, '-inf', now)
 786 | 
 787 |         -- 检查当前占用数
 788 |         local current = redis.call('ZCARD', key)
 789 | 
 790 |         if current < max_concurrent then
 791 |             -- 有空闲槽位，获取
 792 |             redis.call('ZADD', key, expire_at, token)
 793 |             return 1
 794 |         else
 795 |             return 0
 796 |         end
 797 |         """
 798 |         result = redis_client.eval(
 799 |             lua_script, 1, SEMAPHORE_KEY,
 800 |             SEMAPHORE_MAX_CONCURRENT, now, expire_at, token
 801 |         )
 802 | 
 803 |         if result == 1:
 804 |             return token
 805 |         return None
 806 |     except Exception as e:
 807 |         log_error("Semaphore", "获取信号量失败", str(e))
 808 |         return None
 809 | 
 810 | 
 811 | def release_semaphore(token):
 812 |     """释放信号量槽位"""
 813 |     try:
 814 |         redis_client.zrem(SEMAPHORE_KEY, token)
 815 |     except Exception:
 816 |         pass
 817 | 
 818 | 
 819 | def get_semaphore_status():
 820 |     """获取信号量状态"""
 821 |     try:
 822 |         now = time.time()
 823 |         # 清理过期项
 824 |         redis_client.zremrangebyscore(SEMAPHORE_KEY, '-inf', now)
 825 |         # 获取当前占用数
 826 |         current = redis_client.zcard(SEMAPHORE_KEY)
 827 |         return {
 828 |             "current": current,
 829 |             "max": SEMAPHORE_MAX_CONCURRENT,
 830 |             "available": SEMAPHORE_MAX_CONCURRENT - current
 831 |         }
 832 |     except Exception:
 833 |         return {"current": 0, "max": SEMAPHORE_MAX_CONCURRENT, "available": SEMAPHORE_MAX_CONCURRENT}
 834 | 
 835 | 
 836 | def add_invite_record(user, email, password, success, message=""):
 837 |     """添加邀请记录到 Redis"""
 838 |     try:
 839 |         record_id = redis_client.incr(INVITE_COUNTER_KEY)
 840 |         record = {
 841 |             "id": record_id,
 842 |             "linuxdo_id": user.get("id"),
 843 |             "linuxdo_username": user.get("username"),
 844 |             "linuxdo_name": user.get("name"),
 845 |             "trust_level": user.get("trust_level"),
 846 |             "email": email,
 847 |             "password": password,
 848 |             "success": success,
 849 |             "message": message,
 850 |             "created_at": datetime.now(timezone(timedelta(hours=8))).strftime("%Y-%m-%d %H:%M:%S"),
 851 |             "ip": get_client_ip_address()
 852 |         }
 853 |         redis_client.lpush(INVITE_RECORDS_KEY, json.dumps(record))
 854 |         return record
 855 |     except Exception as e:
 856 |         log_error("Redis", "保存记录失败", str(e))
 857 |         return None
 858 | 
 859 | 
 860 | def get_invite_records(limit=100):
 861 |     """从 Redis 获取邀请记录"""
 862 |     try:
 863 |         records = redis_client.lrange(INVITE_RECORDS_KEY, 0, limit - 1)
 864 |         return [json.loads(r) for r in records]
 865 |     except Exception as e:
 866 |         log_error("Redis", "获取记录失败", str(e))
 867 |         return []
 868 | 
 869 | 
 870 | def get_invite_stats():
 871 |     """获取邀请统计"""
 872 |     try:
 873 |         records = get_invite_records(1000)
 874 |         total = len(records)
 875 |         success_count = sum(1 for r in records if r.get("success"))
 876 |         return {
 877 |             "total_invites": total,
 878 |             "success_count": success_count,
 879 |             "fail_count": total - success_count
 880 |         }
 881 |     except Exception:
 882 |         return {"total_invites": 0, "success_count": 0, "fail_count": 0}
 883 | 
 884 | 
 885 | # ==================== 自动邀请处理 ====================
 886 | 
 887 | def process_auto_invite(user):
 888 |     """处理自动邀请流程（登录后自动调用）
 889 | 
 890 |     Returns:
 891 |         dict: 邀请结果，包含 success, email, password, message 等字段
 892 |     """
 893 |     user_id = user.get("id")
 894 |     username = user.get("username")
 895 |     client_ip = get_client_ip_address()
 896 | 
 897 |     result = {
 898 |         "success": False,
 899 |         "email": None,
 900 |         "password": None,
 901 |         "message": "",
 902 |         "code": None,
 903 |         "seats_full": False,
 904 |         "banned": False
 905 |     }
 906 | 
 907 |     # 1. 获取用户锁（防止同一用户重复提交）
 908 |     user_lock = acquire_invite_lock(user_id, timeout=60)
 909 |     if not user_lock:
 910 |         result["message"] = "您有一个邀请正在处理中，请稍后再试"
 911 |         return result
 912 | 
 913 |     try:
 914 |         # 2. 获取全局锁（防止并发超卖）
 915 |         global_lock = None
 916 |         for _ in range(3):
 917 |             global_lock = acquire_global_invite_lock(timeout=15)
 918 |             if global_lock:
 919 |                 break
 920 |             time.sleep(0.5)
 921 | 
 922 |         if not global_lock:
 923 |             result["message"] = "系统繁忙，请稍后再试"
 924 |             return result
 925 | 
 926 |         try:
 927 |             # 3. 检查名额
 928 |             try:
 929 |                 available, stats_data = check_seats_available(force_refresh=True)
 930 |             except TeamBannedException:
 931 |                 result["message"] = "车已翻 - Team 账号状态异常"
 932 |                 result["banned"] = True
 933 |                 return result
 934 | 
 935 |             if not available:
 936 |                 result["message"] = "车门已焊死，名额已满"
 937 |                 result["seats_full"] = True
 938 |                 return result
 939 | 
 940 |             # 4. 生成邮箱和密码
 941 |             email = generate_email_for_user(username)
 942 |             password = generate_password()
 943 |             result["email"] = email
 944 |             result["password"] = password
 945 | 
 946 |             log_info("Invite", "开始自动邀请流程", username=username, email=email, ip=client_ip)
 947 | 
 948 |             # 5. 创建邮箱用户
 949 |             success, msg = create_email_user(email, password, EMAIL_ROLE)
 950 |             if not success and "已存在" not in msg:
 951 |                 result["message"] = f"创建邮箱失败: {msg}"
 952 |                 add_invite_record(user, email, password, False, result["message"])
 953 |                 return result
 954 | 
 955 |             # 6. 发送 ChatGPT 邀请
 956 |             success, msg = send_chatgpt_invite(email)
 957 |             if not success:
 958 |                 result["message"] = f"发送邀请失败: {msg}"
 959 |                 add_invite_record(user, email, password, False, result["message"])
 960 |                 return result
 961 | 
 962 |             # 7. 邀请成功，保存待处理邀请信息用于轮询验证码
 963 |             session["pending_invite"] = {
 964 |                 "email": email,
 965 |                 "password": password,
 966 |                 "created_at": time.time()
 967 |             }
 968 | 
 969 |             result["success"] = True
 970 |             result["message"] = "邀请发送成功，正在等待验证码"
 971 |             add_invite_record(user, email, password, True, "邀请发送成功")
 972 | 
 973 |             return result
 974 | 
 975 |         finally:
 976 |             if global_lock:
 977 |                 release_global_invite_lock(global_lock)
 978 |     finally:
 979 |         release_invite_lock(user_id, user_lock)
 980 | 
 981 | 
 982 | # ==================== OAuth 路由 ====================
 983 | 
 984 | @app.route("/login")
 985 | def login():
 986 |     """重定向到 Linux DO OAuth 授权页面"""
 987 |     state = secrets.token_urlsafe(16)
 988 |     session["oauth_state"] = state
 989 | 
 990 |     params = {
 991 |         "client_id": LINUXDO_CLIENT_ID,
 992 |         "response_type": "code",
 993 |         "redirect_uri": LINUXDO_REDIRECT_URI,
 994 |         "state": state,
 995 |     }
 996 |     auth_url = f"{LINUXDO_AUTHORIZE_URL}?{'&'.join(f'{k}={v}' for k, v in params.items())}"
 997 |     return redirect(auth_url)
 998 | 
 999 | 
1000 | @app.route("/callback")
1001 | def callback():
1002 |     """OAuth 回调处理"""
1003 |     error = request.args.get("error")
1004 |     if error:
1005 |         return render_template("error.html", message=f"授权失败: {error}"), 400
1006 | 
1007 |     code = request.args.get("code")
1008 |     state = request.args.get("state")
1009 | 
1010 |     if not code:
1011 |         return render_template("error.html", message="未收到授权码"), 400
1012 | 
1013 |     if state != session.get("oauth_state"):
1014 |         return render_template("error.html", message="状态验证失败，请重试"), 400
1015 | 
1016 |     # 用授权码换取 access_token
1017 |     token_data = {
1018 |         "grant_type": "authorization_code",
1019 |         "code": code,
1020 |         "redirect_uri": LINUXDO_REDIRECT_URI,
1021 |         "client_id": LINUXDO_CLIENT_ID,
1022 |         "client_secret": LINUXDO_CLIENT_SECRET,
1023 |     }
1024 | 
1025 |     try:
1026 |         token_resp = requests.post(LINUXDO_TOKEN_URL, data=token_data, timeout=10)
1027 |         token_json = token_resp.json()
1028 | 
1029 |         if "access_token" not in token_json:
1030 |             log_error("Auth", "Token exchange failed", str(token_json))
1031 |             return render_template("error.html", message="获取令牌失败"), 400
1032 | 
1033 |         access_token = token_json["access_token"]
1034 | 
1035 |         # 获取用户信息
1036 |         user_resp = requests.get(
1037 |             LINUXDO_USER_URL,
1038 |             headers={"Authorization": f"Bearer {access_token}"},
1039 |             timeout=10
1040 |         )
1041 |         user_info = user_resp.json()
1042 | 
1043 |         # 检查信任等级
1044 |         trust_level = user_info.get("trust_level", 0)
1045 |         if trust_level < MIN_TRUST_LEVEL:
1046 |             return render_template(
1047 |                 "error.html",
1048 |                 message=f"您的信任等级为 {trust_level}，需要达到 {MIN_TRUST_LEVEL} 级才能使用此服务"
1049 |             ), 403
1050 | 
1051 |         # 保存用户信息到 session
1052 |         user = {
1053 |             "id": user_info.get("id"),
1054 |             "username": user_info.get("username"),
1055 |             "name": user_info.get("name"),
1056 |             "avatar_template": user_info.get("avatar_template"),
1057 |             "trust_level": trust_level,
1058 |             "active": user_info.get("active"),
1059 |         }
1060 |         session["user"] = user
1061 | 
1062 |         log_info("Auth", "用户登录", username=user_info.get("username"), trust_level=trust_level)
1063 |         session.permanent = True  # 启用持久化 Session
1064 | 
1065 |         # 检查用户邀请状态（三种状态）
1066 |         user_email = generate_email_for_user(user["username"])
1067 |         invite_status = get_user_invite_status(user_email)
1068 | 
1069 |         # 保存用户邮箱信息
1070 |         session["user_email"] = user_email
1071 |         session["user_password"] = generate_password()
1072 | 
1073 |         if invite_status == 'in_space':
1074 |             # 用户已在空间中，不需要邀请也不需要验证码
1075 |             log_info("Auth", "用户已在空间中", username=user["username"], email=user_email)
1076 |             session["invite_status"] = "in_space"
1077 |             session["need_invite"] = False
1078 |             session["pending_invite"] = None
1079 |         elif invite_status == 'pending':
1080 |             # 用户有待处理邀请，可以获取验证码
1081 |             log_info("Auth", "用户有待处理邀请", username=user["username"], email=user_email)
1082 |             session["invite_status"] = "pending"
1083 |             session["need_invite"] = False
1084 |             session["pending_invite"] = {
1085 |                 "email": user_email,
1086 |                 "password": generate_password(),
1087 |                 "created_at": time.time()
1088 |             }
1089 |         else:
1090 |             # 新用户，需要发送邀请
1091 |             log_info("Auth", "新用户，需要邀请", username=user["username"], email=user_email)
1092 |             session["invite_status"] = "new"
1093 |             session["need_invite"] = True
1094 |             session["pending_invite"] = None
1095 | 
1096 |         return redirect(url_for("invite_page"))
1097 | 
1098 |     except Exception as e:
1099 |         log_error("Auth", "OAuth callback error", str(e))
1100 |         return render_template("error.html", message=f"认证过程出错: {str(e)}"), 500
1101 | 
1102 | 
1103 | @app.route("/logout")
1104 | def logout():
1105 |     """登出"""
1106 |     session.clear()
1107 |     return redirect(url_for("index"))
1108 | 
1109 | 
1110 | @app.route("/invite")
1111 | def invite_page():
1112 |     """邀请页面 - 需要登录"""
1113 |     if not is_logged_in():
1114 |         return redirect(url_for("login"))
1115 |     user = get_current_user()
1116 |     # 检查是否需要执行邀请（新登录用户）
1117 |     need_invite = session.pop("need_invite", False)
1118 |     invite_result = session.get("invite_result", {})
1119 |     # 获取待处理邀请信息（用于已邀请用户直接获取验证码）
1120 |     pending_invite = session.get("pending_invite") or {}
1121 |     # 获取邀请状态：in_space / pending / new
1122 |     invite_status = session.get("invite_status", "new")
1123 |     # 获取用户邮箱信息
1124 |     user_email = session.get("user_email", "")
1125 |     user_password = session.get("user_password", DEFAULT_PASSWORD)
1126 |         return render_template(
1127 |         "invite.html",
1128 |         user=user,
1129 |         invite_result=invite_result,
1130 |         need_invite=need_invite,
1131 |         pending_invite=pending_invite,
1132 |         invite_status=invite_status,
1133 |         user_email=user_email,
1134 |         user_password=user_password,
1135 |         email_web_url=EMAIL_WEB_URL,
1136 |         email_domain=EMAIL_DOMAIN
1137 |     )
1138 | 
1139 | 
1140 | @app.route("/api/auto-invite", methods=["POST"])
1141 | def auto_invite():
1142 |     """自动邀请 API - 执行完整的邀请流程（支持高并发）
1143 | 
1144 |     并发控制策略：
1145 |     1. IP 限流 - 防止单 IP 刷请求
1146 |     2. 用户锁 - 防止同一用户重复提交
1147 |     3. 信号量 - 限制同时处理的请求数（最多 20 个并发）
1148 |     4. 短暂全局锁 - 仅在检查名额时使用，快速释放
1149 |     """
1150 |     if not is_logged_in():
1151 |         return jsonify({"success": False, "message": "请先登录"}), 401
1152 | 
1153 |     user = get_current_user()
1154 |     user_id = user.get("id")
1155 |     client_ip = get_client_ip_address()
1156 | 
1157 |     # 0. IP 限流检查
1158 |     is_allowed, remaining, reset_time = check_rate_limit(client_ip)
1159 |     if not is_allowed:
1160 |         log_warn("RateLimit", "请求被限流", ip=client_ip, reset_in=reset_time)
1161 |         return jsonify({
1162 |             "success": False,
1163 |             "message": f"请求过于频繁，请 {reset_time} 秒后再试",
1164 |             "retry_after": reset_time,
1165 |             "rate_limited": True
1166 |         }), 429
1167 | 
1168 |     # 1. 获取用户锁（防止同一用户重复提交）
1169 |     user_lock = acquire_invite_lock(user_id, timeout=60)
1170 |     if not user_lock:
1171 |         return jsonify({
1172 |             "success": False,
1173 |             "message": "您有一个邀请正在处理中，请稍后再试",
1174 |             "retry_after": 10
1175 |         }), 429
1176 | 
1177 |     semaphore_token = None
1178 |     try:
1179 |         # 2. 获取信号量槽位（限制并发数，最多 20 个同时处理）
1180 |         semaphore_token = acquire_semaphore(timeout=60)
1181 |         if not semaphore_token:
1182 |             sem_status = get_semaphore_status()
1183 |             log_warn("Semaphore", "系统繁忙", current=sem_status["current"], max=sem_status["max"])
1184 |             return jsonify({
1185 |                 "success": False,
1186 |                 "message": f"系统繁忙，当前有 {sem_status['current']} 个请求正在处理，请稍后再试",
1187 |                 "retry_after": 5,
1188 |                 "queue_full": True
1189 |             }), 503
1190 | 
1191 |         # 3. 短暂获取全局锁，仅用于检查名额（快速释放）
1192 |         global_lock = None
1193 |         for _ in range(5):  # 重试5次获取全局锁
1194 |             global_lock = acquire_global_invite_lock(timeout=5)  # 短超时
1195 |             if global_lock:
1196 |                 break
1197 |             time.sleep(0.2)
1198 | 
1199 |         if not global_lock:
1200 |             return jsonify({
1201 |                 "success": False,
1202 |                 "message": "系统繁忙，请稍后再试",
1203 |                 "retry_after": 3
1204 |             }), 503
1205 | 
1206 |         # 4. 在锁内快速检查名额
1207 |         try:
1208 |             available, stats_data = check_seats_available(force_refresh=True)
1209 |         except TeamBannedException:
1210 |             release_global_invite_lock(global_lock)
1211 |             return jsonify({
1212 |                 "success": False,
1213 |                 "message": "车已翻 - Team 账号状态异常",
1214 |                 "banned": True
1215 |             }), 503
1216 | 
1217 |         # 立即释放全局锁，后续操作不需要锁
1218 |         release_global_invite_lock(global_lock)
1219 |         global_lock = None
1220 | 
1221 |         if not available:
1222 |             return jsonify({
1223 |                 "success": False,
1224 |                 "message": "车门已焊死，名额已满",
1225 |                 "seats_full": True,
1226 |                 "stats": stats_data
1227 |             })
1228 | 
1229 |         # 5. 名额充足，开始邀请流程（无需全局锁，信号量已限制并发）
1230 |         email = generate_email_for_user(user["username"])
1231 |         password = generate_password()
1232 | 
1233 |         log_info("Invite", "开始自动邀请流程", username=user["username"], email=email, ip=client_ip)
1234 | 
1235 |         result = {
1236 |             "email": email,
1237 |             "password": password,
1238 |             "steps": []
1239 |         }
1240 | 
1241 |         # 步骤1: 创建邮箱用户（并发执行，无锁）
1242 |         success, msg = create_email_user(email, password, EMAIL_ROLE)
1243 |         result["steps"].append({
1244 |             "step": 1,
1245 |             "name": "创建邮箱用户",
1246 |             "success": success,
1247 |             "message": msg if not success else "成功"
1248 |         })
1249 |         if not success and "已存在" not in msg:
1250 |             add_invite_record(user, email, password, False, f"创建邮箱失败: {msg}")
1251 |             return jsonify({"success": False, "message": f"创建邮箱失败: {msg}", "result": result})
1252 | 
1253 |         # 步骤2: 发送邀请（并发执行，无锁）
1254 |         success, msg = send_chatgpt_invite(email)
1255 |         result["steps"].append({
1256 |             "step": 2,
1257 |             "name": "发送 ChatGPT 邀请",
1258 |             "success": success,
1259 |             "message": "成功" if success else msg
1260 |         })
1261 |         if not success:
1262 |             add_invite_record(user, email, password, False, f"发送邀请失败: {msg}")
1263 |             return jsonify({"success": False, "message": f"发送邀请失败: {msg}", "result": result})
1264 | 
1265 |         # 步骤3: 获取验证码 (异步方式，先返回，让前端轮询)
1266 |         result["steps"].append({
1267 |             "step": 3,
1268 |             "name": "等待验证码",
1269 |             "success": True,
1270 |             "message": "邀请已发送，请稍后获取验证码"
1271 |         })
1272 | 
1273 |         session["pending_invite"] = {
1274 |             "email": email,
1275 |             "password": password,
1276 |             "created_at": time.time()
1277 |         }
1278 | 
1279 |         # 记录成功邀请
1280 |         add_invite_record(user, email, password, True, "邀请发送成功")
1281 | 
1282 |         return jsonify({
1283 |             "success": True,
1284 |             "message": "邀请流程已启动",
1285 |             "result": result,
1286 |             "next": "poll_code"
1287 |         })
1288 | 
1289 |     finally:
1290 |         # 释放信号量
1291 |         if semaphore_token:
1292 |             release_semaphore(semaphore_token)
1293 |         # 释放用户锁
1294 |         release_invite_lock(user_id, user_lock)
1295 | 
1296 | 
1297 | @app.route("/api/poll-code", methods=["GET"])
1298 | def poll_code():
1299 |     """轮询获取验证码"""
1300 |     if not is_logged_in():
1301 |         return jsonify({"success": False, "message": "请先登录"}), 401
1302 | 
1303 |     pending = session.get("pending_invite")
1304 |     if not pending:
1305 |         return jsonify({"success": False, "found": False, "message": "没有待处理的邀请"})
1306 | 
1307 |     email = pending["email"]
1308 |     code, error, email_time = get_verification_code(email, max_retries=1, interval=0)
1309 | 
1310 |     if code:
1311 |         return jsonify({
1312 |             "success": True,
1313 |             "found": True,
1314 |             "code": code,
1315 |             "email": email,
1316 |             "password": pending["password"],
1317 |             "email_time": email_time  # 返回邮件时间
1318 |         })
1319 |     else:
1320 |         return jsonify({
1321 |             "success": True,
1322 |             "found": False,
1323 |             "message": "暂无验证码邮件"
1324 |         })
1325 | 
1326 | 
1327 | @app.route("/")
1328 | def index():
1329 |     # 如果用户已登录，直接跳转到邀请页面
1330 |     if is_logged_in():
1331 |         return redirect(url_for("invite_page"))
1332 |     return render_template(
1333 |         "index.html",
1334 |         site_key=CF_TURNSTILE_SITE_KEY,
1335 |         email_web_url=EMAIL_WEB_URL
1336 |     )
1337 | 
1338 | 
1339 | @app.route("/send-invites", methods=["POST"])
1340 | def send_invites():
1341 |     client_ip = get_client_ip_address()
1342 | 
1343 |     raw_emails = request.form.get("emails", "").strip()
1344 |     email_list, valid_emails = parse_emails(raw_emails)
1345 | 
1346 |     cf_turnstile_response = request.form.get("cf-turnstile-response")
1347 |     turnstile_valid = validate_turnstile(cf_turnstile_response)
1348 | 
1349 |     if not turnstile_valid:
1350 |         log_warn("API", "CAPTCHA验证失败", ip=client_ip)
1351 |         return jsonify({"success": False, "message": "CAPTCHA verification failed. Please try again."})
1352 | 
1353 |     if not email_list:
1354 |         return jsonify({"success": False, "message": "Please enter at least one email address."})
1355 | 
1356 |     if not valid_emails:
1357 |         return jsonify({"success": False, "message": "Email addresses are not valid. Please check and try again."})
1358 | 
1359 |     headers = build_invite_headers()
1360 |     payload = {"email_addresses": valid_emails, "role": "standard-user", "resend_emails": True}
1361 |     invite_url = f"https://chatgpt.com/backend-api/accounts/{ACCOUNT_ID}/invites"
1362 | 
1363 |     try:
1364 |         resp = requests.post(invite_url, headers=headers, json=payload, timeout=10)
1365 |         if resp.status_code == 200:
1366 |             log_info("API", "批量邀请成功", count=len(valid_emails), ip=client_ip)
1367 |             return jsonify(
1368 |                 {
1369 |                     "success": True,
1370 |                     "message": f"Successfully sent invitations for: {', '.join(valid_emails)}",
1371 |                 }
1372 |             )
1373 |         else:
1374 |             log_error("API", "批量邀请失败", status=resp.status_code, ip=client_ip)
1375 |             return jsonify(
1376 |                 {
1377 |                     "success": False,
1378 |                     "message": "Failed to send invitations.",
1379 |                     "details": {"status_code": resp.status_code, "body": resp.text},
1380 |                 }
1381 |             )
1382 |     except Exception as e:
1383 |         log_error("API", "批量邀请异常", str(e), ip=client_ip)
1384 |         return jsonify({"success": False, "message": f"Error: {str(e)}"})
1385 | 
1386 | 
1387 | @app.route("/stats")
1388 | def stats():
1389 |     force_refresh = request.args.get("refresh") == "1"
1390 | 
1391 |     try:
1392 |         data, updated_at = refresh_stats(force=force_refresh)
1393 | 
1394 |         return jsonify(
1395 |             {
1396 |                 "success": True,
1397 |                 "data": data,
1398 |                 "updated_at": updated_at,
1399 |                 "cached": not force_refresh
1400 |             }
1401 |         )
1402 |     except TeamBannedException:
1403 |         log_error("Stats", "账号异常", "Team account banned")
1404 |         return jsonify({
1405 |             "success": False,
1406 |             "banned": True,
1407 |             "message": "车已翻 - Team 账号状态异常"
1408 |         }), 503
1409 |     except Exception as e:
1410 |         log_error("Stats", "获取统计失败", str(e))
1411 |         return jsonify({"success": False, "message": f"Error fetching stats: {str(e)}"}), 500
1412 | 
1413 | 
1414 | # ==================== 后台管理路由 ====================
1415 | 
1416 | @app.route("/admin")
1417 | def admin_page():
1418 |     """后台管理页面"""
1419 |     if not session.get("admin_logged_in"):
1420 |         return render_template("admin_login.html")
1421 |     return render_template("admin.html")
1422 | 
1423 | 
1424 | @app.route("/admin/login", methods=["POST"])
1425 | def admin_login():
1426 |     """后台登录"""
1427 |     password = request.form.get("password", "")
1428 |     if password == ADMIN_PASSWORD:
1429 |         session["admin_logged_in"] = True
1430 |         session.permanent = True  # 启用持久化 Session
1431 |         return redirect(url_for("admin_page"))
1432 |     return render_template("admin_login.html", error="密码错误")
1433 | 
1434 | 
1435 | @app.route("/admin/logout")
1436 | def admin_logout():
1437 |     """后台登出"""
1438 |     session.pop("admin_logged_in", None)
1439 |     return redirect(url_for("admin_page"))
1440 | 
1441 | 
1442 | @app.route("/api/admin/records")
1443 | def admin_records():
1444 |     """获取邀请记录"""
1445 |     if not session.get("admin_logged_in"):
1446 |         return jsonify({"success": False, "message": "未授权"}), 401
1447 |     
1448 |     # 从 Redis 获取记录（已按时间倒序）
1449 |     records = get_invite_records(200)
1450 |     return jsonify({
1451 |         "success": True,
1452 |         "records": records,
1453 |         "total": len(records)
1454 |     })
1455 | 
1456 | 
1457 | @app.route("/api/admin/stats")
1458 | def admin_stats():
1459 |     """获取统计概览"""
1460 |     if not session.get("admin_logged_in"):
1461 |         return jsonify({"success": False, "message": "未授权"}), 401
1462 |     
1463 |     stats = get_invite_stats()
1464 |     return jsonify({
1465 |         "success": True,
1466 |         "stats": stats
1467 |     })
1468 | 
1469 | 
1470 | @app.route("/api/admin/pending-invites")
1471 | def admin_pending_invites():
1472 |     """获取 ChatGPT Team 待处理邀请列表"""
1473 |     if not session.get("admin_logged_in"):
1474 |         return jsonify({"success": False, "message": "未授权"}), 401
1475 | 
1476 |     # 强制从 API 获取最新数据并更新缓存
1477 |     items, total = fetch_pending_invites_from_api(1000)
1478 |     set_cached_pending_invites(items, total)
1479 |     log_info("Admin", "查询待处理邀请", total=total, count=len(items))
1480 |     return jsonify({
1481 |         "success": True,
1482 |         "items": items,
1483 |         "total": total
1484 |     })
1485 | 
1486 | 
1487 | @app.route("/api/admin/members")
1488 | def admin_members():
1489 |     """获取 ChatGPT Team 空间成员列表"""
1490 |     if not session.get("admin_logged_in"):
1491 |         return jsonify({"success": False, "message": "未授权"}), 401
1492 | 
1493 |     # 强制从 API 获取最新数据（分页获取所有）
1494 |     items, total = fetch_space_members_from_api(1000)
1495 |     log_info("Admin", "查询空间成员", total=total, count=len(items))
1496 |     return jsonify({
1497 |         "success": True,
1498 |         "items": items,
1499 |         "total": total
1500 |     })
1501 | 
1502 | 
1503 | # ==================== 健康检查 ====================
1504 | 
1505 | @app.route("/health")
1506 | def health_check():
1507 |     """健康检查端点"""
1508 |     status = {"status": "healthy", "redis": False, "scheduler": False}
1509 |     try:
1510 |         redis_client.ping()
1511 |         status["redis"] = True
1512 |     except Exception:
1513 |         status["status"] = "degraded"
1514 | 
1515 |     if scheduler and scheduler.running:
1516 |         status["scheduler"] = True
1517 | 
1518 |     return jsonify(status)
1519 | 
1520 | 
1521 | @app.errorhandler(404)
1522 | def not_found(e):
1523 |     return jsonify({"error": "Not found"}), 404
1524 | 
1525 | 
1526 | # ==================== 后台定时任务 ====================
1527 | 
1528 | def init_scheduler():
1529 |     """初始化后台定时任务"""
1530 |     global scheduler
1531 |     scheduler = BackgroundScheduler(daemon=True)
1532 | 
1533 |     # 每 60 秒刷新统计数据
1534 |     scheduler.add_job(
1535 |         func=background_refresh_stats,
1536 |         trigger="interval",
1537 |         seconds=STATS_REFRESH_INTERVAL,
1538 |         id="refresh_stats",
1539 |         name="刷新统计数据",
1540 |         replace_existing=True
1541 |     )
1542 | 
1543 |     # 每 60 秒刷新待处理邀请
1544 |     scheduler.add_job(
1545 |         func=background_refresh_pending_invites,
1546 |         trigger="interval",
1547 |         seconds=STATS_REFRESH_INTERVAL,
1548 |         id="refresh_pending_invites",
1549 |         name="刷新待处理邀请",
1550 |         replace_existing=True
1551 |     )
1552 | 
1553 |     scheduler.start()
1554 |     log_info("Scheduler", "后台定时任务已启动", interval=f"{STATS_REFRESH_INTERVAL}s")
1555 | 
1556 |     # 注册退出时关闭调度器
1557 |     atexit.register(lambda: scheduler.shutdown())
1558 | 
1559 | 
1560 | # 全局调度器变量
1561 | scheduler = None
1562 | 
1563 | # 初始化调度器（仅在非 reloader 进程中运行）
1564 | if os.environ.get("WERKZEUG_RUN_MAIN") == "true" or not app.debug:
1565 |     init_scheduler()
1566 | 
1567 | 
1568 | if __name__ == "__main__":
1569 |     app.run(debug=True, host="127.0.0.1", port=39001)
1570 | 


--------------------------------------------------------------------------------