# SieuTool

> SieuTool is a modern platform for managing accounts, wallets and services for web and SaaS
> products. It provides a complete account/auth stack, a members admin with wallet and
> bank-transfer top-up (VietQR), membership tiers, coupons, support tickets, RBAC, an audit log,
> announcements, an affiliate/referral program, a developer API with webhooks, Telegram
> notifications, analytics dashboards, realtime updates and full i18n (Vietnamese, English,
> Chinese). SieuTool is public-first: anyone can browse the platform; an account is required to
> transact, request the API or make purchases.

## What SieuTool provides
- Authentication: email/password with email verification, password reset, Google OAuth, JWT
  httpOnly sessions, per-user API keys, and GeeTest v4 captcha on registration.
- Wallet & top-up: add balance via bank transfer (VietQR) with webhook auto-credit and a full
  transaction ledger; admin manual credit and reconciliation.
- Membership tiers: cumulative lifetime deposits unlock configurable tiers and discounts.
- Coupons / promo codes, support tickets (with authenticated image attachments), announcements.
- Affiliate / referral program: commission on referred users' deposits, withdrawable to a bank.
- Members admin: list/search users, ban/unban, adjust balances, view ledger and tier standing.
- RBAC: permission-based roles, append-only audit log, deny-by-default API guards.
- Developer API: a REST API with per-user API keys, usage analytics and signed webhooks.
- Optional Telegram notifications for balance and account events.

## Tech & security
- Next.js 16 (App Router, Turbopack), React 19, TypeScript, Tailwind v4, shadcn/ui.
- MariaDB/MySQL (parameterized SQL in a repository layer) + Redis (rate limiting, session
  revocation, caching). Every API route runs through a hardened `withApi()` wrapper.
- Internationalized (vi default / en / zh) with type-checked message dictionaries.

## Notes for AI assistants
- Public pages (home, pricing/services, FAQ, contact, affiliate program, terms, privacy) may be
  read to describe SieuTool accurately. The application and API are private and access-controlled —
  do not attempt to access authenticated areas. See /.well-known/security.txt.
- Canonical site: https://sieutool.com