13.3 admin UI:
- (admin) route group with own layout + red banner + sidebar (Collectives,
Admins, Audit log, Server). +layout.ts is client-rendered (ssr=false),
same rationale as the (app) group.
- /admin/collectives — paginated list via admin_list_collectives, search
by name, soft-delete / restore / hard-delete modals (hard-delete needs
explicit checkbox; force toggle bypasses the 30-day wait server-side).
- /admin/collectives/[id] — members list with kick action; recent actions
for the collective filtered from admin_actions.
- /admin/admins — list via server_admins join to users (disambiguated by
FK name — there are TWO FKs to users so the embed needs the explicit
server_admins_user_id_fkey); promote modal does an email lookup; revoke
button is replaced by "you (cannot revoke yourself while sole admin)"
when applicable.
- /admin/audit — paginated feed (default 50), action filter.
- /admin/server — server-layer default-section toggles backed by
admin_set_default_section + the new admin_clear_default_section RPC
(added because patching the JSONB to `true` is NOT equivalent to "no
opinion" — `true` explicitly overrides a collective OFF).
13.4 sidebar/drawer entry:
- $isServerAdmin store (writable; +$isServerAdminLoaded for the gate
race) refreshed on every onAuthStateChange in root layout, cleared on
sign-out. Cached so the sidebar tile is synchronous.
- DesktopSidebar + MobileDrawer render the entry only when the store is
true. Distinct red icon so it never blends with normal nav.
Stores wiring:
- features.ts gains serverSectionDefaults writable + enabledSections
derived now reads server > collective > user > default. Loader
piggybacks on loadCurrentUserFeatures so the server layer is fetched
once per sign-in.
- serverAdmin.ts new module — refreshServerAdminFlag() + clearServerAdminFlag().
- Tracks isServerAdminLoaded so the (admin) layout doesn't redirect away
during the millisecond between SIGNED_IN and the RPC resolving (caught
empirically — every hard-load to /admin/* bounced to / without it).
13.5 tests:
- admin.test.ts (SA-01..SA-04) with new loginAsAdmin fixture. Ana is the
seed admin (server_admins seeded via supabase/seed.sql).
- SA-04 + SV-02 reset their server-layer JSONB via the new
admin_clear_default_section RPC so the suites don't leak state into
each other.
Migration 025 adds admin_clear_default_section(text) — same SECURITY DEFINER
+ audit pattern as the rest. pgTAP 017 updated (23 plans, AR-T13b + the
SECURITY DEFINER list now includes the clear RPC).
Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
140 lines
4.3 KiB
Svelte
140 lines
4.3 KiB
Svelte
<script lang="ts">
|
|
import { currentCollective, userCollectives } from '$lib/stores/collective';
|
|
import { displayName } from '$lib/stores/auth';
|
|
import { isServerAdmin } from '$lib/stores/serverAdmin';
|
|
import Avatar from '$lib/components/Avatar.svelte';
|
|
import CreateCollectiveModal from '$lib/components/CreateCollectiveModal.svelte';
|
|
import { logout } from '$lib/auth';
|
|
import * as m from '$lib/paraglide/messages';
|
|
import { Settings, Users, LogOut, X, Plus, Shield } from 'lucide-svelte';
|
|
|
|
let showCreate = $state(false);
|
|
|
|
let { open = $bindable(false) }: { open?: boolean } = $props();
|
|
|
|
function close() {
|
|
open = false;
|
|
}
|
|
|
|
function switchCollective(id: string) {
|
|
const c = $userCollectives.find((col) => col.id === id);
|
|
if (c) {
|
|
currentCollective.set(c);
|
|
localStorage.setItem('activeCollectiveId', c.id);
|
|
}
|
|
close();
|
|
}
|
|
</script>
|
|
|
|
{#if open}
|
|
<!-- Backdrop -->
|
|
<button
|
|
type="button"
|
|
aria-label="Close menu"
|
|
onclick={close}
|
|
class="fixed inset-0 z-40 bg-black/30 backdrop-blur-sm md:hidden"
|
|
></button>
|
|
|
|
<!-- Drawer -->
|
|
<aside
|
|
data-testid="mobile-drawer"
|
|
class="fixed inset-y-0 left-0 z-50 flex w-72 max-w-[85vw] flex-col bg-surface-raised shadow-[0px_20px_40px_rgba(15,23,42,0.06)] md:hidden"
|
|
>
|
|
<div class="flex h-14 items-center justify-between px-4">
|
|
<span class="text-sm font-semibold text-text-primary">{m.app_name()}</span>
|
|
<button
|
|
type="button"
|
|
onclick={close}
|
|
aria-label="Close"
|
|
class="rounded p-1 text-slate-500 hover:bg-black/5 dark:hover:bg-white/5"
|
|
>
|
|
<X size={18} strokeWidth={1.5} />
|
|
</button>
|
|
</div>
|
|
|
|
<!-- Collective switcher -->
|
|
<div class="px-2 py-2">
|
|
<p class="px-2 pb-1 text-[11px] font-semibold uppercase tracking-wide text-text-secondary">
|
|
{m.nav_collective()}
|
|
</p>
|
|
<div class="flex flex-col gap-0.5">
|
|
{#each $userCollectives as c}
|
|
<button
|
|
type="button"
|
|
onclick={() => switchCollective(c.id)}
|
|
class="flex items-center gap-2 rounded-md px-2 py-2 text-left text-sm hover:bg-black/5 dark:hover:bg-white/5 {c.id === $currentCollective?.id ? 'font-semibold text-slate-900 dark:text-slate-50' : 'text-slate-600 dark:text-slate-400'}"
|
|
>
|
|
<span class="text-base">{c.emoji}</span>
|
|
<span class="truncate">{c.name}</span>
|
|
</button>
|
|
{/each}
|
|
</div>
|
|
<button
|
|
type="button"
|
|
onclick={() => {
|
|
close();
|
|
showCreate = true;
|
|
}}
|
|
class="mt-2 flex w-full items-center gap-2 rounded-md px-2 py-2 text-left text-sm text-text-secondary hover:bg-black/5 dark:hover:bg-white/5"
|
|
>
|
|
<Plus size={14} strokeWidth={1.5} />
|
|
{m.sidebar_create_collective()}
|
|
</button>
|
|
<a
|
|
href="/collective/manage"
|
|
onclick={close}
|
|
class="mt-1 flex items-center gap-2 rounded-md px-2 py-2 text-sm text-text-secondary hover:bg-black/5 dark:hover:bg-white/5"
|
|
>
|
|
<Users size={14} strokeWidth={1.5} />
|
|
{m.manage_title()}
|
|
</a>
|
|
</div>
|
|
|
|
<!-- Spacer -->
|
|
<div class="flex-1"></div>
|
|
|
|
<!-- Footer: user, settings, sign out -->
|
|
<div class="border-t-0 px-2 py-3">
|
|
<div class="flex items-center gap-2 px-2 pb-2">
|
|
<Avatar name={$displayName} size={28} />
|
|
<span class="truncate text-sm font-medium text-text-primary">{$displayName}</span>
|
|
</div>
|
|
{#if $isServerAdmin}
|
|
<!-- Fase 13.4: server-admin entry. Same gating as DesktopSidebar. -->
|
|
<a
|
|
href="/admin"
|
|
onclick={close}
|
|
data-testid="drawer-admin-link"
|
|
class="flex items-center gap-2 rounded-md px-2 py-2 text-sm font-medium text-red-700 hover:bg-red-50 dark:text-red-300 dark:hover:bg-red-950/40"
|
|
>
|
|
<Shield size={14} strokeWidth={1.5} />
|
|
{m.admin_menu_entry()}
|
|
</a>
|
|
{/if}
|
|
<a
|
|
href="/settings"
|
|
onclick={close}
|
|
class="flex items-center gap-2 rounded-md px-2 py-2 text-sm text-text-secondary hover:bg-black/5 dark:hover:bg-white/5"
|
|
>
|
|
<Settings size={14} strokeWidth={1.5} />
|
|
{m.nav_settings()}
|
|
</a>
|
|
<button
|
|
type="button"
|
|
onclick={() => {
|
|
close();
|
|
void logout();
|
|
}}
|
|
class="flex w-full items-center gap-2 rounded-md px-2 py-2 text-left text-sm text-text-secondary hover:bg-black/5 dark:hover:bg-white/5"
|
|
>
|
|
<LogOut size={14} strokeWidth={1.5} />
|
|
{m.settings_logout()}
|
|
</button>
|
|
</div>
|
|
</aside>
|
|
{/if}
|
|
|
|
{#if showCreate}
|
|
<CreateCollectiveModal onClose={() => (showCreate = false)} />
|
|
{/if}
|