Some checks failed
CI / E2E Tests (push) Has been skipped
CodeQL Analysis / CodeQL (javascript-typescript) (push) Failing after 1m23s
Deploy / Build API Image (push) Failing after 33s
Deploy / Deploy to Staging (push) Has been skipped
CI / Lint → Typecheck → Test → Build (22) (push) Failing after 9s
Deploy / Build Web Image (push) Failing after 11s
Deploy / Build AI Services Image (push) Failing after 9s
E2E Tests / Playwright E2E (push) Failing after 18s
Security Scanning / Dependency Audit (pnpm) (push) Failing after 2s
Security Scanning / Trivy Scan — API Image (push) Failing after 59s
Security Scanning / Trivy Scan — Web Image (push) Failing after 51s
Security Scanning / Trivy Scan — AI Services Image (push) Failing after 34s
Security Scanning / Trivy Filesystem Scan (push) Failing after 24s
Deploy / Smoke Test Staging (push) Has been skipped
Deploy / Deploy to Production (push) Has been skipped
Security Scanning / Security Gate (push) Failing after 1s
Deploy / Rollback Production (push) Has been skipped
Deploy / Smoke Test Production (push) Has been skipped
Deploy / Rollback Staging (push) Has been skipped
Foundation for Phase E (AI advisor / AI valuation on listing detail).
An admin sets the Anthropic Claude credentials once in the new
"/admin/settings/ai" page; downstream features read them via
SystemSettingsService.
Database
--------
- New Prisma model SystemSetting { key @id, value Text, valueType,
isSecret, updatedAt, updatedBy }. db:push applied cleanly.
Backend
-------
- SystemSettingsService — canonical getter/setter for
ai.api_url / ai.api_key / ai.model. maskApiKey() returns the last 4
chars prefixed with "sk-ant-...". Exposes unmasked getAiSettings()
for server-side consumers (AI advisor handlers).
- GET /admin/settings/ai — returns { apiUrl, apiKeyMasked, model,
hasApiKey, updatedAt }. Never emits the raw key.
- PATCH /admin/settings/ai — body accepts partial { apiUrl, apiKey,
model }. apiKey sentinel "__UNCHANGED__" preserves the stored value;
empty string clears it; any other value overwrites.
- CQRS: get-ai-settings query + update-ai-settings command. Registered
in admin.module.ts; service exported via modules/admin/index.ts so
Phase E can inject it.
Frontend
--------
- adminApi.getAiSettings() / updateAiSettings() added to
lib/admin-api.ts with shared AiSettings + UpdateAiSettingsPayload
types.
- New Lucide-only nav entry "Cài đặt AI" (Sparkles) in admin layout.
- /admin/settings/ai/page.tsx — Card with API URL input, masked API
key input with Eye/EyeOff toggle, "Xoá key" button, model Select
(claude-opus-4-5 / sonnet-4-5 / haiku-4-5 + custom input), save
button with inline success/error banners, "last updated" timestamp.
- i18n keys adminNav.settings + adminNav.aiSettings in vi.json/en.json.
Constraints
-----------
- No new packages. Runtime imports for NestJS-DI classes preserved.
- Key NOT encrypted at rest (MVP); documented in service comment as
future hardening.
- Page inherits existing admin auth guard via (admin) layout.
Verification
------------
- API typecheck clean.
- Web typecheck clean in touched files.
- API suite: 1975 / 1975 pass.
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
156 lines
5.4 KiB
TypeScript
156 lines
5.4 KiB
TypeScript
'use client';
|
|
|
|
import {
|
|
LayoutDashboard,
|
|
Users,
|
|
ClipboardList,
|
|
ShieldCheck,
|
|
LogOut,
|
|
Menu,
|
|
Sparkles,
|
|
X,
|
|
} from 'lucide-react';
|
|
import { usePathname, useRouter } from 'next/navigation';
|
|
import { useTranslations } from 'next-intl';
|
|
import { useEffect, useState } from 'react';
|
|
import { Button } from '@/components/ui/button';
|
|
import { LanguageSwitcher } from '@/components/ui/language-switcher';
|
|
import { Link } from '@/i18n/navigation';
|
|
import { useAuthStore } from '@/lib/auth-store';
|
|
import { cn } from '@/lib/utils';
|
|
|
|
export default function AdminLayout({ children }: { children: React.ReactNode }) {
|
|
const pathname = usePathname();
|
|
const router = useRouter();
|
|
const { user, isAuthenticated, isInitialized, logout } = useAuthStore();
|
|
const [sidebarOpen, setSidebarOpen] = useState(false);
|
|
const t = useTranslations();
|
|
|
|
const adminNavItems = [
|
|
{ href: '/admin' as const, label: t('adminNav.dashboard'), icon: LayoutDashboard },
|
|
{ href: '/admin/users' as const, label: t('adminNav.users'), icon: Users },
|
|
{ href: '/admin/moderation' as const, label: t('adminNav.moderation'), icon: ClipboardList },
|
|
{ href: '/admin/kyc' as const, label: t('adminNav.kyc'), icon: ShieldCheck },
|
|
{ href: '/admin/settings/ai' as const, label: t('adminNav.aiSettings'), icon: Sparkles },
|
|
];
|
|
|
|
useEffect(() => {
|
|
// Once the auth store finished its initial cookie→profile probe:
|
|
// - no session → push to /login (don't leave a spinner forever)
|
|
// - authenticated but not ADMIN → push to regular dashboard
|
|
if (!isInitialized) return;
|
|
if (!isAuthenticated) {
|
|
router.replace(`/login?next=${encodeURIComponent(pathname)}`);
|
|
return;
|
|
}
|
|
if (user && user.role !== 'ADMIN') {
|
|
router.replace('/dashboard');
|
|
}
|
|
}, [isInitialized, isAuthenticated, user, router, pathname]);
|
|
|
|
if (!isInitialized || !user) {
|
|
return (
|
|
<div className="flex min-h-screen items-center justify-center" role="status">
|
|
<div className="text-muted-foreground">{t('common.loading')}</div>
|
|
</div>
|
|
);
|
|
}
|
|
|
|
if (user.role !== 'ADMIN') {
|
|
return null;
|
|
}
|
|
|
|
return (
|
|
<div className="flex min-h-screen bg-background">
|
|
{/* Mobile overlay */}
|
|
{sidebarOpen && (
|
|
<div
|
|
className="fixed inset-0 z-40 bg-black/50 lg:hidden"
|
|
onClick={() => setSidebarOpen(false)}
|
|
aria-hidden="true"
|
|
/>
|
|
)}
|
|
|
|
{/* Sidebar */}
|
|
<aside
|
|
role="navigation"
|
|
aria-label={t('nav.adminNav')}
|
|
className={cn(
|
|
'fixed inset-y-0 left-0 z-50 w-64 border-r bg-card transition-transform lg:static lg:translate-x-0',
|
|
sidebarOpen ? 'translate-x-0' : '-translate-x-full',
|
|
)}
|
|
>
|
|
<div className="flex h-14 items-center border-b px-4">
|
|
<Link href="/admin" className="flex items-center gap-2">
|
|
<span className="text-lg font-bold text-primary">{t('common.goodgo')}</span>
|
|
<span className="rounded bg-primary/10 px-1.5 py-0.5 text-xs font-semibold text-primary">
|
|
{t('common.admin')}
|
|
</span>
|
|
</Link>
|
|
<button
|
|
aria-label={t('adminNav.closeMenu')}
|
|
className="ml-auto lg:hidden"
|
|
onClick={() => setSidebarOpen(false)}
|
|
>
|
|
<X className="h-5 w-5" />
|
|
</button>
|
|
</div>
|
|
|
|
<nav aria-label={t('nav.adminNav')} className="flex flex-col gap-1 p-3">
|
|
{adminNavItems.map((item) => {
|
|
const Icon = item.icon;
|
|
const isActive =
|
|
item.href === '/admin'
|
|
? pathname === '/admin' || pathname.match(/^\/(vi|en)\/admin$/)
|
|
: pathname.includes(item.href);
|
|
return (
|
|
<Link
|
|
key={item.href}
|
|
href={item.href}
|
|
onClick={() => setSidebarOpen(false)}
|
|
className={cn(
|
|
'flex items-center gap-3 rounded-md px-3 py-2 text-sm font-medium transition-colors',
|
|
isActive
|
|
? 'bg-primary/10 text-primary'
|
|
: 'text-muted-foreground hover:bg-accent hover:text-accent-foreground',
|
|
)}
|
|
>
|
|
<Icon className="h-4 w-4" aria-hidden="true" />
|
|
{item.label}
|
|
</Link>
|
|
);
|
|
})}
|
|
</nav>
|
|
|
|
<div className="mt-auto border-t p-3">
|
|
<div className="mb-2 flex items-center justify-between px-3">
|
|
<span className="text-xs text-muted-foreground truncate">{user.fullName}</span>
|
|
<LanguageSwitcher />
|
|
</div>
|
|
<Button
|
|
variant="ghost"
|
|
size="sm"
|
|
className="w-full justify-start gap-2"
|
|
onClick={() => logout()}
|
|
>
|
|
<LogOut className="h-4 w-4" aria-hidden="true" />
|
|
{t('common.logout')}
|
|
</Button>
|
|
</div>
|
|
</aside>
|
|
|
|
{/* Main content */}
|
|
<div className="flex flex-1 flex-col">
|
|
<header className="sticky top-0 z-30 flex h-14 items-center border-b bg-background/95 px-4 backdrop-blur lg:hidden">
|
|
<button aria-label={t('adminNav.openMenu')} onClick={() => setSidebarOpen(true)}>
|
|
<Menu className="h-5 w-5" />
|
|
</button>
|
|
<span className="ml-3 text-sm font-semibold">{t('common.goodgo')} {t('common.admin')}</span>
|
|
</header>
|
|
|
|
<main id="main-content" role="main" className="flex-1 p-4 md:p-6">{children}</main>
|
|
</div>
|
|
</div>
|
|
);
|
|
}
|