Files
collective-lists/apps/web/src/lib/components/layout/MobileDrawer.svelte
Oier Bravo Urtasun 27afda74f1 feat(fase-13): admin UI + sidebar entry + isServerAdmin store + e2e SA-01..04
13.3 admin UI:
  - (admin) route group with own layout + red banner + sidebar (Collectives,
    Admins, Audit log, Server). +layout.ts is client-rendered (ssr=false),
    same rationale as the (app) group.
  - /admin/collectives — paginated list via admin_list_collectives, search
    by name, soft-delete / restore / hard-delete modals (hard-delete needs
    explicit checkbox; force toggle bypasses the 30-day wait server-side).
  - /admin/collectives/[id] — members list with kick action; recent actions
    for the collective filtered from admin_actions.
  - /admin/admins — list via server_admins join to users (disambiguated by
    FK name — there are TWO FKs to users so the embed needs the explicit
    server_admins_user_id_fkey); promote modal does an email lookup; revoke
    button is replaced by "you (cannot revoke yourself while sole admin)"
    when applicable.
  - /admin/audit — paginated feed (default 50), action filter.
  - /admin/server — server-layer default-section toggles backed by
    admin_set_default_section + the new admin_clear_default_section RPC
    (added because patching the JSONB to `true` is NOT equivalent to "no
    opinion" — `true` explicitly overrides a collective OFF).

13.4 sidebar/drawer entry:
  - $isServerAdmin store (writable; +$isServerAdminLoaded for the gate
    race) refreshed on every onAuthStateChange in root layout, cleared on
    sign-out. Cached so the sidebar tile is synchronous.
  - DesktopSidebar + MobileDrawer render the entry only when the store is
    true. Distinct red icon so it never blends with normal nav.

Stores wiring:
  - features.ts gains serverSectionDefaults writable + enabledSections
    derived now reads server > collective > user > default. Loader
    piggybacks on loadCurrentUserFeatures so the server layer is fetched
    once per sign-in.
  - serverAdmin.ts new module — refreshServerAdminFlag() + clearServerAdminFlag().
  - Tracks isServerAdminLoaded so the (admin) layout doesn't redirect away
    during the millisecond between SIGNED_IN and the RPC resolving (caught
    empirically — every hard-load to /admin/* bounced to / without it).

13.5 tests:
  - admin.test.ts (SA-01..SA-04) with new loginAsAdmin fixture. Ana is the
    seed admin (server_admins seeded via supabase/seed.sql).
  - SA-04 + SV-02 reset their server-layer JSONB via the new
    admin_clear_default_section RPC so the suites don't leak state into
    each other.

Migration 025 adds admin_clear_default_section(text) — same SECURITY DEFINER
+ audit pattern as the rest. pgTAP 017 updated (23 plans, AR-T13b + the
SECURITY DEFINER list now includes the clear RPC).

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
2026-05-18 05:30:56 +02:00

140 lines
4.3 KiB
Svelte

<script lang="ts">
import { currentCollective, userCollectives } from '$lib/stores/collective';
import { displayName } from '$lib/stores/auth';
import { isServerAdmin } from '$lib/stores/serverAdmin';
import Avatar from '$lib/components/Avatar.svelte';
import CreateCollectiveModal from '$lib/components/CreateCollectiveModal.svelte';
import { logout } from '$lib/auth';
import * as m from '$lib/paraglide/messages';
import { Settings, Users, LogOut, X, Plus, Shield } from 'lucide-svelte';
let showCreate = $state(false);
let { open = $bindable(false) }: { open?: boolean } = $props();
function close() {
open = false;
}
function switchCollective(id: string) {
const c = $userCollectives.find((col) => col.id === id);
if (c) {
currentCollective.set(c);
localStorage.setItem('activeCollectiveId', c.id);
}
close();
}
</script>
{#if open}
<!-- Backdrop -->
<button
type="button"
aria-label="Close menu"
onclick={close}
class="fixed inset-0 z-40 bg-black/30 backdrop-blur-sm md:hidden"
></button>
<!-- Drawer -->
<aside
data-testid="mobile-drawer"
class="fixed inset-y-0 left-0 z-50 flex w-72 max-w-[85vw] flex-col bg-surface-raised shadow-[0px_20px_40px_rgba(15,23,42,0.06)] md:hidden"
>
<div class="flex h-14 items-center justify-between px-4">
<span class="text-sm font-semibold text-text-primary">{m.app_name()}</span>
<button
type="button"
onclick={close}
aria-label="Close"
class="rounded p-1 text-slate-500 hover:bg-black/5 dark:hover:bg-white/5"
>
<X size={18} strokeWidth={1.5} />
</button>
</div>
<!-- Collective switcher -->
<div class="px-2 py-2">
<p class="px-2 pb-1 text-[11px] font-semibold uppercase tracking-wide text-text-secondary">
{m.nav_collective()}
</p>
<div class="flex flex-col gap-0.5">
{#each $userCollectives as c}
<button
type="button"
onclick={() => switchCollective(c.id)}
class="flex items-center gap-2 rounded-md px-2 py-2 text-left text-sm hover:bg-black/5 dark:hover:bg-white/5 {c.id === $currentCollective?.id ? 'font-semibold text-slate-900 dark:text-slate-50' : 'text-slate-600 dark:text-slate-400'}"
>
<span class="text-base">{c.emoji}</span>
<span class="truncate">{c.name}</span>
</button>
{/each}
</div>
<button
type="button"
onclick={() => {
close();
showCreate = true;
}}
class="mt-2 flex w-full items-center gap-2 rounded-md px-2 py-2 text-left text-sm text-text-secondary hover:bg-black/5 dark:hover:bg-white/5"
>
<Plus size={14} strokeWidth={1.5} />
{m.sidebar_create_collective()}
</button>
<a
href="/collective/manage"
onclick={close}
class="mt-1 flex items-center gap-2 rounded-md px-2 py-2 text-sm text-text-secondary hover:bg-black/5 dark:hover:bg-white/5"
>
<Users size={14} strokeWidth={1.5} />
{m.manage_title()}
</a>
</div>
<!-- Spacer -->
<div class="flex-1"></div>
<!-- Footer: user, settings, sign out -->
<div class="border-t-0 px-2 py-3">
<div class="flex items-center gap-2 px-2 pb-2">
<Avatar name={$displayName} size={28} />
<span class="truncate text-sm font-medium text-text-primary">{$displayName}</span>
</div>
{#if $isServerAdmin}
<!-- Fase 13.4: server-admin entry. Same gating as DesktopSidebar. -->
<a
href="/admin"
onclick={close}
data-testid="drawer-admin-link"
class="flex items-center gap-2 rounded-md px-2 py-2 text-sm font-medium text-red-700 hover:bg-red-50 dark:text-red-300 dark:hover:bg-red-950/40"
>
<Shield size={14} strokeWidth={1.5} />
{m.admin_menu_entry()}
</a>
{/if}
<a
href="/settings"
onclick={close}
class="flex items-center gap-2 rounded-md px-2 py-2 text-sm text-text-secondary hover:bg-black/5 dark:hover:bg-white/5"
>
<Settings size={14} strokeWidth={1.5} />
{m.nav_settings()}
</a>
<button
type="button"
onclick={() => {
close();
void logout();
}}
class="flex w-full items-center gap-2 rounded-md px-2 py-2 text-left text-sm text-text-secondary hover:bg-black/5 dark:hover:bg-white/5"
>
<LogOut size={14} strokeWidth={1.5} />
{m.settings_logout()}
</button>
</div>
</aside>
{/if}
{#if showCreate}
<CreateCollectiveModal onClose={() => (showCreate = false)} />
{/if}