Admin: recompensas de reclutamiento (recruit-a-friend)

- lib/admin-recruit.ts: list/create/delete sobre home_recruitreward
  (required_friends, reward_name, item_id, item_quantity, item_link, icon_class).
- API: POST /api/admin/recruit, DELETE /api/admin/recruit/[id] (403 sin admin).
- UI: /admin/recruit con AdminRecruitManager (alta ordenada por amigos requeridos),
  enlace desde el índice del admin.
- i18n es/en (Admin): 10 claves nuevas.

Verificado: build OK, /admin/recruit 307→login, APIs 403 sin admin,
columnas confirmadas en la migración 0001_initial.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

web-next/app/[locale]/admin/page.tsx

@@ -42,6 +42,11 @@ export default async function AdminPage({ params }: { params: Promise<{ locale:
             {t('manageUsers')}
           </Link>
         </li>
+        <li>
+          <Link href="/admin/recruit" className="text-sky-400 hover:underline">
+            {t('manageRecruit')}
+          </Link>
+        </li>
       </ul>
     </main>
   )

web-next/app/[locale]/admin/recruit/page.tsx

@@ -0,0 +1,24 @@
+import { getTranslations, setRequestLocale } from 'next-intl/server'
+import { redirect } from '@/i18n/navigation'
+import { getSession } from '@/lib/session'
+import { isAdmin } from '@/lib/admin'
+import { listRecruitRewards } from '@/lib/admin-recruit'
+import { AdminRecruitManager } from '@/components/AdminRecruitManager'
+
+export const dynamic = 'force-dynamic'
+
+export default async function AdminRecruitPage({ params }: { params: Promise<{ locale: string }> }) {
+  const { locale } = await params
+  setRequestLocale(locale)
+  const t = await getTranslations('Admin')
+  const session = await getSession()
+  if (!session.bnetId) redirect({ href: '/login', locale })
+  if (!(await isAdmin(session))) redirect({ href: '/', locale })
+  const rewards = await listRecruitRewards()
+  return (
+    <main className="mx-auto max-w-3xl px-4 py-8">
+      <h1 className="mb-6 text-2xl font-bold text-amber-500">{t('recruit')}</h1>
+      <AdminRecruitManager initial={rewards} />
+    </main>
+  )
+}

web-next/app/api/admin/recruit/[id]/route.ts

@@ -0,0 +1,11 @@
+import { getSession } from '@/lib/session'
+import { isAdmin } from '@/lib/admin'
+import { deleteRecruitReward } from '@/lib/admin-recruit'
+
+export async function DELETE(_request: Request, { params }: { params: Promise<{ id: string }> }) {
+  const session = await getSession()
+  if (!(await isAdmin(session))) return Response.json({ success: false, error: 'forbidden' }, { status: 403 })
+  const { id } = await params
+  await deleteRecruitReward(Number(id))
+  return Response.json({ success: true })
+}

web-next/app/api/admin/recruit/route.ts

@@ -0,0 +1,23 @@
+import { getSession } from '@/lib/session'
+import { isAdmin } from '@/lib/admin'
+import { createRecruitReward } from '@/lib/admin-recruit'
+
+export async function POST(request: Request) {
+  const session = await getSession()
+  if (!(await isAdmin(session))) return Response.json({ success: false, error: 'forbidden' }, { status: 403 })
+  let b: Record<string, unknown> = {}
+  try { b = await request.json() } catch { return Response.json({ success: false, error: 'invalidRequest' }, { status: 400 }) }
+
+  const required_friends = Number(b.requiredFriends)
+  const reward_name = String(b.rewardName ?? '').trim()
+  const item_id = Number(b.itemId)
+  const item_quantity = Number(b.itemQuantity) || 1
+  const item_link = String(b.itemLink ?? '').trim()
+  const icon_class = String(b.iconClass ?? '').trim()
+
+  if (!(required_friends > 0) || !reward_name || !(item_id > 0)) {
+    return Response.json({ success: false, error: 'emptyError' })
+  }
+  const id = await createRecruitReward({ required_friends, reward_name, item_id, item_quantity, item_link, icon_class })
+  return Response.json({ success: true, id })
+}