web-next: herramientas de PD (transferir, comercio, códigos de promoción)

- /transfer-d-points: transferir PD a la cuenta dueña de un personaje
  (requiere token de seguridad; movimiento atómico con FOR UPDATE).
- /trade-points: comercio PD<->oro mediante códigos de 1 solo uso
  (contraseña + token + Turnstile; oro al creador por SOAP; expira 1h;
  lock de 5s tras canjear; rollback total si falla la entrega).
- /promo-code: canje de códigos por PD/PV (sensibles a mayúsculas/minúsculas,
  usos limitados, 1 canje por cuenta).
- /admin/promo: panel para crear / editar / activar / desactivar / borrar
  códigos de promoción.
- Tablas nuevas (sql/): home_tradecode, home_promocode, home_promoredemption.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

web-next/components/AdminPromoManager.tsx

@@ -0,0 +1,143 @@
+'use client'
+
+import { useState } from 'react'
+import { useTranslations } from 'next-intl'
+import type { PromoCode } from '@/lib/admin-promo'
+
+export function AdminPromoManager({ initial }: { initial: PromoCode[] }) {
+  const t = useTranslations('Admin')
+  const [codes, setCodes] = useState(initial)
+  const [form, setForm] = useState({ code: '', pd: '0', pv: '0', maxUses: '1', expiresAt: '' })
+  const [busy, setBusy] = useState(false)
+  const [error, setError] = useState<string | null>(null)
+
+  function upd(k: string, v: string) {
+    setForm((f) => ({ ...f, [k]: v }))
+  }
+
+  async function create(e: React.FormEvent) {
+    e.preventDefault()
+    if (busy || !form.code.trim()) return
+    setBusy(true)
+    setError(null)
+    try {
+      const res = await fetch('/api/admin/promo', {
+        method: 'POST',
+        headers: { 'Content-Type': 'application/json' },
+        credentials: 'same-origin',
+        body: JSON.stringify({
+          code: form.code.trim(),
+          pd: Number(form.pd),
+          pv: Number(form.pv),
+          maxUses: Number(form.maxUses),
+          expiresAt: form.expiresAt,
+        }),
+      })
+      const data: { success?: boolean; id?: number; error?: string } = await res.json()
+      if (data.success && data.id) {
+        setCodes([
+          {
+            id: data.id,
+            code: form.code.trim(),
+            pd: Number(form.pd),
+            pv: Number(form.pv),
+            max_uses: Number(form.maxUses),
+            uses: 0,
+            active: 1,
+            expires_at: form.expiresAt ? new Date(form.expiresAt).toISOString() : null,
+            redemptions: 0,
+          },
+          ...codes,
+        ])
+        setForm({ code: '', pd: '0', pv: '0', maxUses: '1', expiresAt: '' })
+      } else {
+        setError(data.error === 'duplicate' ? t('promoDuplicate') : t('promoEmptyError'))
+      }
+    } finally {
+      setBusy(false)
+    }
+  }
+
+  async function remove(id: number) {
+    if (!confirm(t('promoConfirmDelete'))) return
+    const res = await fetch(`/api/admin/promo/${id}`, { method: 'DELETE', credentials: 'same-origin' })
+    if ((await res.json()).success) setCodes(codes.filter((c) => c.id !== id))
+  }
+
+  return (
+    <div>
+      <form onSubmit={create} className="admin-form info-box-light separate2">
+        <input value={form.code} onChange={(e) => upd('code', e.target.value)} placeholder={t('promoCode')} />
+        <input type="number" min="0" value={form.pd} onChange={(e) => upd('pd', e.target.value)} placeholder={t('promoPd')} />
+        <input type="number" min="0" value={form.pv} onChange={(e) => upd('pv', e.target.value)} placeholder={t('promoPv')} />
+        <input type="number" min="1" value={form.maxUses} onChange={(e) => upd('maxUses', e.target.value)} placeholder={t('promoMaxUses')} />
+        <input type="datetime-local" value={form.expiresAt} onChange={(e) => upd('expiresAt', e.target.value)} placeholder={t('promoExpires')} />
+        <button type="submit" disabled={busy}>{busy ? t('creating') : t('createPromo')}</button>
+      </form>
+      {error && <p className="red-form-response centered">{error}</p>}
+      <br />
+      {codes.length === 0 ? (
+        <p className="second-brown centered">{t('noPromo')}</p>
+      ) : (
+        <table className="max-center-table">
+          <tbody>
+            {codes.map((c) => (
+              <PromoRow key={c.id} promo={c} onDelete={() => remove(c.id)} />
+            ))}
+          </tbody>
+        </table>
+      )}
+    </div>
+  )
+}
+
+function PromoRow({ promo, onDelete }: { promo: PromoCode; onDelete: () => void }) {
+  const t = useTranslations('Admin')
+  const [pd, setPd] = useState(String(promo.pd))
+  const [pv, setPv] = useState(String(promo.pv))
+  const [maxUses, setMaxUses] = useState(String(promo.max_uses))
+  const [active, setActive] = useState(promo.active === 1)
+  const [busy, setBusy] = useState(false)
+  const [saved, setSaved] = useState(false)
+
+  async function save() {
+    setBusy(true)
+    setSaved(false)
+    try {
+      const res = await fetch(`/api/admin/promo/${promo.id}`, {
+        method: 'PATCH',
+        headers: { 'Content-Type': 'application/json' },
+        credentials: 'same-origin',
+        body: JSON.stringify({ pd: Number(pd), pv: Number(pv), maxUses: Number(maxUses), active }),
+      })
+      if ((await res.json()).success) {
+        setSaved(true)
+        setTimeout(() => setSaved(false), 2000)
+      }
+    } finally {
+      setBusy(false)
+    }
+  }
+
+  return (
+    <tr className="team-center-table-tr">
+      <td className="lefted separate">
+        <span className="yellow-info">{promo.code}</span>
+        <p className="third-brown small-font">
+          {t('promoUses')}: {promo.uses}/{promo.max_uses} · {t('promoRedemptions')}: {promo.redemptions}
+          {promo.expires_at ? ` · ${new Date(promo.expires_at).toLocaleString('es-ES')}` : ''}
+        </p>
+      </td>
+      <td className="real-info-box">
+        <label className="small-font">{t('promoPd')} <input type="number" min="0" value={pd} onChange={(e) => setPd(e.target.value)} className="admin-mini-input" /></label>{' '}
+        <label className="small-font">{t('promoPv')} <input type="number" min="0" value={pv} onChange={(e) => setPv(e.target.value)} className="admin-mini-input" /></label>{' '}
+        <label className="small-font">{t('promoMaxUses')} <input type="number" min="1" value={maxUses} onChange={(e) => setMaxUses(e.target.value)} className="admin-mini-input" /></label>{' '}
+        <label className="small-font"><input type="checkbox" checked={active} onChange={(e) => setActive(e.target.checked)} /> {t('promoActive')}</label>
+      </td>
+      <td className="real-info-box">
+        <button onClick={save} disabled={busy} className="nw-tool-btn">{saved ? t('saved') : t('save')}</button>{' '}
+        <button onClick={onDelete} className="nw-tool-btn red-info2">{t('delete')}</button>
+      </td>
+    </tr>
+  )
+}