alexei.dolgolyov
1c0a7cb850
Phase 4 — New Widget Types: - Clock/Weather, System Stats, RSS/Feed, Calendar, Markdown, Metric/Counter, Link Group, Camera/Stream widgets - Backend services with caching for each data source - Full creation form with dynamic config fields per type Phase 5 — Visual & Styling Enhancements: - Glassmorphism card style (solid/glass/outline) - Board-level themes with per-board hue/saturation - Animated SVG status rings replacing static dots - Card size options (compact/medium/large) - Custom CSS injection (admin + per-board, sanitized) - Wallpaper backgrounds with blur/overlay/parallax Phase 6 — Functional Features: - Favorites bar with drag-and-drop reordering - Recent apps tracking with privacy toggle - Uptime dashboard page (/status, guest-accessible) - Notifications system (Discord/Slack/Telegram/HTTP webhooks) - App tags with filtering in board view - Multi-URL app cards with expandable sub-links - Personal API tokens with scoped permissions - Audit log with retention and admin viewer Phase 7 — Quality of Life: - Onboarding wizard (5-step first-launch setup) - App URL health preview with favicon/title detection - Board templates (4 built-in + custom import/export) - Keyboard shortcut overlay (j/k nav, 1-9 boards, ? help) 212 files changed, 15641 insertions, 980 deletions. Build, lint, type check, and 222 tests all pass.
94 lines
5.1 KiB
Markdown
94 lines
5.1 KiB
Markdown
# Phase 6: Admin Panel
|
|
|
|
**Status:** ✅ Complete
|
|
**Parent plan:** [PLAN.md](./PLAN.md)
|
|
**Domain:** fullstack
|
|
|
|
## Objective
|
|
|
|
Build the admin panel with user management, group management, app management, board management, and system settings configuration.
|
|
|
|
## Tasks
|
|
|
|
- [x] Task 1: Create `src/routes/admin/+layout.server.ts` — admin auth guard (role check)
|
|
- [x] Task 2: Create `src/routes/admin/+layout.svelte` — admin layout with nav
|
|
- [x] Task 3: Create `src/routes/api/users/+server.ts` — GET (list), POST (create user)
|
|
- [x] Task 4: Create `src/routes/api/users/[id]/+server.ts` — GET, PATCH, DELETE
|
|
- [x] Task 5: Create `src/routes/api/groups/+server.ts` — GET (list), POST (create group)
|
|
- [x] Task 6: Create `src/routes/api/groups/[id]/+server.ts` — GET, PATCH, DELETE
|
|
- [x] Task 7: Create `src/routes/api/admin/settings/+server.ts` — GET, PATCH system settings
|
|
- [x] Task 8: Create `src/routes/admin/users/+page.server.ts` — load users
|
|
- [x] Task 9: Create `src/routes/admin/users/+page.svelte` — user management page
|
|
- [x] Task 10: Create `src/routes/admin/groups/+page.server.ts` — load groups
|
|
- [x] Task 11: Create `src/routes/admin/groups/+page.svelte` — group management page
|
|
- [x] Task 12: Create `src/routes/admin/settings/+page.server.ts` — load/update settings
|
|
- [x] Task 13: Create `src/routes/admin/settings/+page.svelte` — system settings page
|
|
- [x] Task 14: Create `src/lib/components/admin/UserTable.svelte` — user list with actions
|
|
- [x] Task 15: Create `src/lib/components/admin/GroupTable.svelte` — group list with actions
|
|
- [x] Task 16: Create `src/lib/components/admin/SettingsForm.svelte` — settings form
|
|
- [x] Task 17: Create `src/lib/components/admin/PermissionEditor.svelte` — permission assignment UI
|
|
- [x] Task 18: Create `src/routes/api/search/+server.ts` — global search endpoint (searches apps + boards)
|
|
|
|
## Files to Modify/Create
|
|
|
|
- `src/routes/admin/+layout.server.ts`
|
|
- `src/routes/admin/+layout.svelte`
|
|
- `src/routes/admin/users/+page.server.ts`
|
|
- `src/routes/admin/users/+page.svelte`
|
|
- `src/routes/admin/groups/+page.server.ts`
|
|
- `src/routes/admin/groups/+page.svelte`
|
|
- `src/routes/admin/settings/+page.server.ts`
|
|
- `src/routes/admin/settings/+page.svelte`
|
|
- `src/routes/api/users/+server.ts`
|
|
- `src/routes/api/users/[id]/+server.ts`
|
|
- `src/routes/api/groups/+server.ts`
|
|
- `src/routes/api/groups/[id]/+server.ts`
|
|
- `src/routes/api/admin/settings/+server.ts`
|
|
- `src/routes/api/search/+server.ts`
|
|
- `src/lib/components/admin/*.svelte`
|
|
|
|
## Acceptance Criteria
|
|
|
|
- Admin-only routes are protected (non-admin users get 403/redirect)
|
|
- Users can be created, edited, deleted, assigned to groups
|
|
- Groups can be created, edited, deleted
|
|
- System settings can be viewed and updated (auth mode, registration, theme defaults, healthcheck defaults)
|
|
- Search API returns matching apps and boards filtered by user permissions
|
|
- All forms use Superforms + Zod validation
|
|
|
|
## Notes
|
|
|
|
- Admin role is checked in `+layout.server.ts` — redirect non-admins
|
|
- User creation by admin sets password directly (no email verification in MVP)
|
|
- OAuth config fields in settings are stored but non-functional until post-MVP Phase 2
|
|
- Permission editor UI: simple select dropdowns for entity + target + level
|
|
- ⚠️ Big Bang: functional but minimally styled until Phase 7
|
|
|
|
## Review Checklist
|
|
|
|
- [x] All tasks completed
|
|
- [x] Code follows project conventions
|
|
- [x] No unintended side effects
|
|
- [ ] Build passes
|
|
- [ ] Tests pass (new + existing)
|
|
|
|
## Handoff to Next Phase
|
|
|
|
**What was built:**
|
|
|
|
- Admin layout with auth guard (`requireAdmin`) and navigation (Users/Groups/Settings + Back to Dashboard)
|
|
- User management: full CRUD via Superforms, inline role editing, group membership management (add/remove), delete with confirmation
|
|
- Group management: full CRUD via Superforms, inline editing, member count display, default group toggle
|
|
- System settings: auth mode selector (local/oauth/both), registration toggle, OAuth config fields (stored, non-functional), theme defaults (dark/light + hex color), healthcheck defaults (JSON)
|
|
- Permission editor: reusable component with entity type/entity, target type/target, and level selectors, grant/revoke actions, existing permissions table
|
|
- Search API: `GET /api/search?q=term` searches apps (name, description, category) and boards (name, description), filters results by user permissions (admins see all, regular users filtered via `permissionService.checkPermission`)
|
|
- All API routes use the existing response envelope (`success`/`error` from `$lib/server/utils/response.ts`) and Zod validation schemas
|
|
- Admin API routes: `/api/users` (GET/POST), `/api/users/[id]` (GET/PATCH/DELETE), `/api/groups` (GET/POST), `/api/groups/[id]` (GET/PATCH/DELETE), `/api/admin/settings` (GET/PATCH)
|
|
- Self-deletion protection: admin cannot delete their own account
|
|
|
|
**Available for Phase 7:**
|
|
|
|
- All admin components in `src/lib/components/admin/` (UserTable, GroupTable, SettingsForm, PermissionEditor) — ready for UI polish
|
|
- Admin layout nav bar — can be styled with active states, icons
|
|
- PermissionEditor is a reusable client-side component with callback props (`onGrant`/`onRevoke`) — can be integrated into any admin page
|