Admin: recompensas de reclutamiento (recruit-a-friend)

- lib/admin-recruit.ts: list/create/delete sobre home_recruitreward
  (required_friends, reward_name, item_id, item_quantity, item_link, icon_class).
- API: POST /api/admin/recruit, DELETE /api/admin/recruit/[id] (403 sin admin).
- UI: /admin/recruit con AdminRecruitManager (alta ordenada por amigos requeridos),
  enlace desde el índice del admin.
- i18n es/en (Admin): 10 claves nuevas.

Verificado: build OK, /admin/recruit 307→login, APIs 403 sin admin,
columnas confirmadas en la migración 0001_initial.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
This commit is contained in:
2026-07-13 00:41:31 +00:00
parent d382adcd59
commit c6c56c3d95
8 changed files with 238 additions and 2 deletions
+5
View File
@@ -42,6 +42,11 @@ export default async function AdminPage({ params }: { params: Promise<{ locale:
{t('manageUsers')}
</Link>
</li>
<li>
<Link href="/admin/recruit" className="text-sky-400 hover:underline">
{t('manageRecruit')}
</Link>
</li>
</ul>
</main>
)
@@ -0,0 +1,24 @@
import { getTranslations, setRequestLocale } from 'next-intl/server'
import { redirect } from '@/i18n/navigation'
import { getSession } from '@/lib/session'
import { isAdmin } from '@/lib/admin'
import { listRecruitRewards } from '@/lib/admin-recruit'
import { AdminRecruitManager } from '@/components/AdminRecruitManager'
export const dynamic = 'force-dynamic'
export default async function AdminRecruitPage({ params }: { params: Promise<{ locale: string }> }) {
const { locale } = await params
setRequestLocale(locale)
const t = await getTranslations('Admin')
const session = await getSession()
if (!session.bnetId) redirect({ href: '/login', locale })
if (!(await isAdmin(session))) redirect({ href: '/', locale })
const rewards = await listRecruitRewards()
return (
<main className="mx-auto max-w-3xl px-4 py-8">
<h1 className="mb-6 text-2xl font-bold text-amber-500">{t('recruit')}</h1>
<AdminRecruitManager initial={rewards} />
</main>
)
}
@@ -0,0 +1,11 @@
import { getSession } from '@/lib/session'
import { isAdmin } from '@/lib/admin'
import { deleteRecruitReward } from '@/lib/admin-recruit'
export async function DELETE(_request: Request, { params }: { params: Promise<{ id: string }> }) {
const session = await getSession()
if (!(await isAdmin(session))) return Response.json({ success: false, error: 'forbidden' }, { status: 403 })
const { id } = await params
await deleteRecruitReward(Number(id))
return Response.json({ success: true })
}
+23
View File
@@ -0,0 +1,23 @@
import { getSession } from '@/lib/session'
import { isAdmin } from '@/lib/admin'
import { createRecruitReward } from '@/lib/admin-recruit'
export async function POST(request: Request) {
const session = await getSession()
if (!(await isAdmin(session))) return Response.json({ success: false, error: 'forbidden' }, { status: 403 })
let b: Record<string, unknown> = {}
try { b = await request.json() } catch { return Response.json({ success: false, error: 'invalidRequest' }, { status: 400 }) }
const required_friends = Number(b.requiredFriends)
const reward_name = String(b.rewardName ?? '').trim()
const item_id = Number(b.itemId)
const item_quantity = Number(b.itemQuantity) || 1
const item_link = String(b.itemLink ?? '').trim()
const icon_class = String(b.iconClass ?? '').trim()
if (!(required_friends > 0) || !reward_name || !(item_id > 0)) {
return Response.json({ success: false, error: 'emptyError' })
}
const id = await createRecruitReward({ required_friends, reward_name, item_id, item_quantity, item_link, icon_class })
return Response.json({ success: true, id })
}
+112
View File
@@ -0,0 +1,112 @@
'use client'
import { useState } from 'react'
import { useTranslations } from 'next-intl'
import type { RecruitReward } from '@/lib/admin-recruit'
const EMPTY = { requiredFriends: '', rewardName: '', itemId: '', itemQuantity: '1', itemLink: '', iconClass: '' }
export function AdminRecruitManager({ initial }: { initial: RecruitReward[] }) {
const t = useTranslations('Admin')
const [rewards, setRewards] = useState(initial)
const [form, setForm] = useState(EMPTY)
const [busy, setBusy] = useState(false)
function upd(k: string, v: string) {
setForm((f) => ({ ...f, [k]: v }))
}
async function create(e: React.FormEvent) {
e.preventDefault()
if (busy || !(Number(form.requiredFriends) > 0) || !form.rewardName.trim() || !(Number(form.itemId) > 0)) return
setBusy(true)
try {
const res = await fetch('/api/admin/recruit', {
method: 'POST',
headers: { 'Content-Type': 'application/json' },
credentials: 'same-origin',
body: JSON.stringify(form),
})
const data: { success?: boolean; id?: number } = await res.json()
if (data.success && data.id) {
setRewards(
[
...rewards,
{
id: data.id,
required_friends: Number(form.requiredFriends),
reward_name: form.rewardName,
item_id: Number(form.itemId),
item_quantity: Number(form.itemQuantity) || 1,
item_link: form.itemLink,
icon_class: form.iconClass,
},
].sort((a, b) => a.required_friends - b.required_friends),
)
setForm(EMPTY)
}
} finally {
setBusy(false)
}
}
async function remove(id: number) {
if (!confirm(t('confirmDelete'))) return
const res = await fetch(`/api/admin/recruit/${id}`, { method: 'DELETE', credentials: 'same-origin' })
if ((await res.json()).success) setRewards(rewards.filter((r) => r.id !== id))
}
const field = 'nw-input'
return (
<div>
<form onSubmit={create} className="mb-8 grid gap-3 nw-card sm:grid-cols-2">
<label className="text-sm">
<span className="mb-1 block text-nw-muted">{t('requiredFriends')}</span>
<input type="number" min="1" value={form.requiredFriends} onChange={(e) => upd('requiredFriends', e.target.value)} placeholder="1" className={field} />
</label>
<label className="text-sm">
<span className="mb-1 block text-nw-muted">{t('rewardName')}</span>
<input value={form.rewardName} onChange={(e) => upd('rewardName', e.target.value)} placeholder="Montura épica" className={field} />
</label>
<label className="text-sm">
<span className="mb-1 block text-nw-muted">{t('itemId')}</span>
<input type="number" min="1" value={form.itemId} onChange={(e) => upd('itemId', e.target.value)} placeholder="49284" className={field} />
</label>
<label className="text-sm">
<span className="mb-1 block text-nw-muted">{t('itemQuantity')}</span>
<input type="number" min="1" value={form.itemQuantity} onChange={(e) => upd('itemQuantity', e.target.value)} className={field} />
</label>
<label className="text-sm">
<span className="mb-1 block text-nw-muted">{t('itemLink')}</span>
<input value={form.itemLink} onChange={(e) => upd('itemLink', e.target.value)} placeholder="https://…" className={field} />
</label>
<label className="text-sm">
<span className="mb-1 block text-nw-muted">{t('iconClass')}</span>
<input value={form.iconClass} onChange={(e) => upd('iconClass', e.target.value)} placeholder="icontinyl q3" className={field} />
</label>
<button type="submit" disabled={busy} className="nw-btn disabled:opacity-60 sm:col-span-2">
{busy ? t('creating') : t('create')}
</button>
</form>
{rewards.length === 0 ? (
<p className="text-amber-200/70">{t('noRewards')}</p>
) : (
<ul className="divide-y divide-amber-900/40">
{rewards.map((r) => (
<li key={r.id} className="flex items-center justify-between gap-4 py-3">
<div>
<p className="font-semibold text-amber-300">{r.reward_name}</p>
<p className="text-xs text-amber-200/50">
{t('requiredFriendsShort', { n: r.required_friends })} · item {r.item_id} ×{r.item_quantity}
</p>
</div>
<button onClick={() => remove(r.id)} className="rounded border border-red-900/60 px-3 py-1 text-sm text-red-400 hover:bg-red-950/40">
{t('delete')}
</button>
</li>
))}
</ul>
)}
</div>
)
}
+41
View File
@@ -0,0 +1,41 @@
import type { RowDataPacket, ResultSetHeader } from 'mysql2'
import { db, DB } from './db'
export interface RecruitReward {
id: number
required_friends: number
reward_name: string
item_id: number
item_quantity: number
item_link: string
icon_class: string
}
export async function listRecruitRewards(): Promise<RecruitReward[]> {
const [rows] = await db(DB.default).query<RowDataPacket[]>(
'SELECT id, required_friends, reward_name, item_id, item_quantity, item_link, icon_class FROM home_recruitreward ORDER BY required_friends, id',
)
return rows.map((r) => ({
id: r.id,
required_friends: r.required_friends,
reward_name: r.reward_name,
item_id: r.item_id,
item_quantity: r.item_quantity,
item_link: r.item_link,
icon_class: r.icon_class,
}))
}
export async function createRecruitReward(data: Omit<RecruitReward, 'id'>): Promise<number> {
const [res] = await db(DB.default).query<ResultSetHeader>(
`INSERT INTO home_recruitreward
(required_friends, reward_name, item_id, item_quantity, item_link, icon_class)
VALUES (?, ?, ?, ?, ?, ?)`,
[data.required_friends, data.reward_name, data.item_id, data.item_quantity, data.item_link, data.icon_class],
)
return res.insertId
}
export async function deleteRecruitReward(id: number): Promise<void> {
await db(DB.default).query('DELETE FROM home_recruitreward WHERE id = ?', [id])
}
+11 -1
View File
@@ -345,7 +345,17 @@
"unban": "Unban",
"banReasonPrompt": "Ban reason:",
"banDaysPrompt": "Ban days (0 = permanent):",
"confirmUnban": "Unban {name}?"
"confirmUnban": "Unban {name}?",
"manageRecruit": "Manage recruit rewards",
"recruit": "Recruit-a-friend rewards",
"requiredFriends": "Required friends",
"rewardName": "Reward name",
"itemId": "Item ID",
"itemQuantity": "Quantity",
"itemLink": "Item link",
"iconClass": "Icon class",
"noRewards": "No rewards.",
"requiredFriendsShort": "{n} friend(s)"
},
"Vote": {
"title": "Vote for us",
+11 -1
View File
@@ -345,7 +345,17 @@
"unban": "Desbanear",
"banReasonPrompt": "Motivo del baneo:",
"banDaysPrompt": "Días de baneo (0 = permanente):",
"confirmUnban": "¿Desbanear a {name}?"
"confirmUnban": "¿Desbanear a {name}?",
"manageRecruit": "Gestionar recompensas de reclutamiento",
"recruit": "Recompensas de reclutamiento",
"requiredFriends": "Amigos requeridos",
"rewardName": "Nombre de la recompensa",
"itemId": "ID del objeto",
"itemQuantity": "Cantidad",
"itemLink": "Enlace del objeto",
"iconClass": "Clase del icono",
"noRewards": "No hay recompensas.",
"requiredFriendsShort": "{n} amigo(s)"
},
"Vote": {
"title": "Votar por nosotros",