Add production-ready SuperAdmin API features for tenants, SMS, servers, and plugins.

Includes mobile auth, get_user/get_version, SMS wallet parity endpoints, appearance backfill, and related Prisma migrations.

Co-authored-by: Cursor <cursoragent@cursor.com>

src/tenants/dto/create-tenant.dto.ts

@@ -80,6 +80,11 @@ export class CreateTenantDto {
   @IsObject()
   appUiConfig?: Record<string, unknown>;
 
+  @IsOptional()
+  @IsString()
+  @MaxLength(64)
+  appVersion?: string;
+
   @IsOptional()
   @IsBoolean()
   isActive?: boolean;

src/tenants/tenants.controller.ts

@@ -1,4 +1,5 @@
 import {
+  BadRequestException,
   Body,
   Controller,
   Delete,
@@ -7,25 +8,73 @@ import {
   Patch,
   Post,
   Query,
+  UploadedFile,
   UseGuards,
+  UseInterceptors,
 } from '@nestjs/common';
+import { ConfigService } from '@nestjs/config';
+import { FileInterceptor } from '@nestjs/platform-express';
 import { ProductType } from '@prisma/client';
+import { diskStorage } from 'multer';
+import { extname } from 'path';
 import { JwtAuthGuard } from '../auth/jwt-auth.guard';
 import { CurrentUser } from '../auth/current-user.decorator';
+import {
+  AVATARS_DIR,
+  ensureUploadsDirs,
+  publicApiBase,
+} from '../uploads/uploads.util';
 import { CreateTenantDto } from './dto/create-tenant.dto';
 import { UpdateTenantDto } from './dto/update-tenant.dto';
 import { TenantsService } from './tenants.service';
 
+const IMAGE_MIME = /^image\/(jpeg|png|gif|webp|svg\+xml)$/i;
+
 @Controller('tenants')
 @UseGuards(JwtAuthGuard)
 export class TenantsController {
-  constructor(private readonly tenantsService: TenantsService) {}
+  constructor(
+    private readonly tenantsService: TenantsService,
+    private readonly config: ConfigService,
+  ) {}
 
   @Get()
   findAll(@Query('product') product?: ProductType) {
     return this.tenantsService.findAll(product);
   }
 
+  @Post('upload-avatar')
+  @UseInterceptors(
+    FileInterceptor('file', {
+      storage: diskStorage({
+        destination: (_req, _file, cb) => {
+          ensureUploadsDirs();
+          cb(null, AVATARS_DIR);
+        },
+        filename: (_req, file, cb) => {
+          const safeExt = extname(file.originalname).toLowerCase() || '.png';
+          const name = `avatar_${Date.now()}_${Math.random().toString(36).slice(2, 8)}${safeExt}`;
+          cb(null, name);
+        },
+      }),
+      limits: { fileSize: 2 * 1024 * 1024 },
+      fileFilter: (_req, file, cb) => {
+        if (!IMAGE_MIME.test(file.mimetype)) {
+          cb(new BadRequestException('فقط تصویر (jpg/png/gif/webp/svg) مجاز است') as any, false);
+          return;
+        }
+        cb(null, true);
+      },
+    }),
+  )
+  uploadAvatar(@UploadedFile() file: Express.Multer.File) {
+    if (!file) {
+      throw new BadRequestException('فایل ارسال نشده است');
+    }
+    const base = publicApiBase(this.config);
+    return { url: `${base}/uploads/avatars/${file.filename}` };
+  }
+
   @Get(':id')
   findOne(@Param('id') id: string) {
     return this.tenantsService.findOne(id);

src/tenants/tenants.module.ts

@@ -1,8 +1,10 @@
 import { Module } from '@nestjs/common';
+import { NotificationsModule } from '../notifications/notifications.module';
 import { TenantsController } from './tenants.controller';
 import { TenantsService } from './tenants.service';
 
 @Module({
+  imports: [NotificationsModule],
   controllers: [TenantsController],
   providers: [TenantsService],
   exports: [TenantsService],

src/tenants/tenants.service.ts

@@ -6,6 +6,7 @@ import {
 import { Prisma, ProductType, Tenant } from '@prisma/client';
 import { PrismaService } from '../prisma/prisma.service';
 import { AuditService } from '../audit/audit.service';
+import { AdminNotifyService } from '../notifications/admin-notify.service';
 import { CreateTenantDto } from './dto/create-tenant.dto';
 import { UpdateTenantDto } from './dto/update-tenant.dto';
 
@@ -14,6 +15,7 @@ export class TenantsService {
   constructor(
     private readonly prisma: PrismaService,
     private readonly audit: AuditService,
+    private readonly notify: AdminNotifyService,
   ) {}
 
   async findAll(product?: ProductType) {
@@ -36,6 +38,7 @@ export class TenantsService {
         appUrl: true,
         adminUrl: true,
         appUiConfig: true,
+        appVersion: true,
         isActive: true,
         notes: true,
         createdAt: true,
@@ -78,6 +81,7 @@ export class TenantsService {
           appUiConfig: dto.appUiConfig
             ? (dto.appUiConfig as Prisma.InputJsonValue)
             : undefined,
+          appVersion: dto.appVersion?.trim() || '1',
           isActive: dto.isActive ?? true,
           notes: dto.notes,
         },
@@ -92,6 +96,10 @@ export class TenantsService {
         after: this.sanitize(tenant) as unknown as Prisma.InputJsonValue,
       });
 
+      this.notify.notifyAdmins(
+        `سوپرادمین: نسخه جدید «${tenant.nameFa}» (${tenant.domain}) ایجاد شد.`,
+      );
+
       return this.sanitize(tenant);
     } catch (error) {
       this.handleUnique(error);
@@ -136,6 +144,9 @@ export class TenantsService {
           ...(dto.appUiConfig !== undefined && {
             appUiConfig: dto.appUiConfig as Prisma.InputJsonValue,
           }),
+          ...(dto.appVersion !== undefined && {
+            appVersion: dto.appVersion.trim() || '1',
+          }),
           ...(dto.isActive !== undefined && { isActive: dto.isActive }),
           ...(dto.notes !== undefined && { notes: dto.notes }),
         },
@@ -151,6 +162,22 @@ export class TenantsService {
         after: this.sanitize(tenant) as unknown as Prisma.InputJsonValue,
       });
 
+      const bits: string[] = [];
+      if (before.isActive !== tenant.isActive) {
+        bits.push(tenant.isActive ? 'فعال شد' : 'غیرفعال شد');
+      }
+      if (before.appVersion !== tenant.appVersion) {
+        bits.push(`ورژن ${before.appVersion} → ${tenant.appVersion}`);
+      }
+      if (before.nameFa !== tenant.nameFa || before.domain !== tenant.domain) {
+        bits.push('هویت/دامنه تغییر کرد');
+      }
+      this.notify.notifyAdmins(
+        bits.length
+          ? `سوپرادمین: نسخه «${tenant.nameFa}» — ${bits.join('؛ ')}`
+          : `سوپرادمین: نسخه «${tenant.nameFa}» به‌روزرسانی شد.`,
+      );
+
       return this.sanitize(tenant);
     } catch (error) {
       this.handleUnique(error);
@@ -175,6 +202,10 @@ export class TenantsService {
       before: this.sanitize(before) as unknown as Prisma.InputJsonValue,
     });
 
+    this.notify.notifyAdmins(
+      `سوپرادمین: نسخه «${before.nameFa}» (${before.domain}) حذف شد.`,
+    );
+
     return { ok: true };
   }