diff --git a/.dockerignore b/.dockerignore new file mode 100644 index 0000000..776ad08 --- /dev/null +++ b/.dockerignore @@ -0,0 +1,12 @@ +node_modules +.next +.git +.env +.env.local +*.db +docker +.github +.w4c +tests +README.md +coverage diff --git a/.env.example b/.env.example new file mode 100644 index 0000000..325de68 --- /dev/null +++ b/.env.example @@ -0,0 +1,15 @@ +# --- Core ------------------------------------------------------------------- +# SQLite in development; point at Postgres in production (see README). +DATABASE_URL="file:./dev.db" +# Public origin used for absolute URLs (sitemap, OG, checkout redirects). +NEXT_PUBLIC_SITE_URL="http://localhost:3000" + +# --- Payments (optional) ---------------------------------------------------- +# Leave empty to use the built-in mock provider (no keys needed). +STRIPE_SECRET_KEY="" +STRIPE_WEBHOOK_SECRET="" + +# --- Email (optional) ------------------------------------------------------- +# Leave empty to use the built-in log provider (no keys needed). +RESEND_API_KEY="" +EMAIL_FROM="Acme " diff --git a/.eslintrc.json b/.eslintrc.json new file mode 100644 index 0000000..3b8ecbf --- /dev/null +++ b/.eslintrc.json @@ -0,0 +1,7 @@ +{ + "extends": "next/core-web-vitals", + "rules": { + "@next/next/no-img-element": "off", + "react/no-unescaped-entities": "off" + } +} diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml new file mode 100644 index 0000000..be6fc50 --- /dev/null +++ b/.github/workflows/ci.yml @@ -0,0 +1,33 @@ +name: CI + +on: + push: + branches: [main] + pull_request: + +jobs: + quality: + runs-on: ubuntu-latest + env: + DATABASE_URL: "file:./ci.db" + NEXT_PUBLIC_SITE_URL: "http://localhost:3000" + steps: + - uses: actions/checkout@v4 + - uses: actions/setup-node@v4 + with: + node-version: 22 + cache: npm + - run: npm ci + - run: npm run lint + - run: npm run typecheck + - run: npm run db:setup + - run: npm test + - run: npm run build + - name: e2e smoke + run: | + npm start & + for i in $(seq 1 60); do + if curl -sf http://127.0.0.1:3000/api/health >/dev/null; then break; fi + sleep 1 + done + npm run test:e2e diff --git a/.gitignore b/.gitignore new file mode 100644 index 0000000..ee7ee5d --- /dev/null +++ b/.gitignore @@ -0,0 +1,11 @@ +node_modules +.next +out +dist +coverage +.env +.env.local +*.db +*.db-journal +.vercel +next-env.d.ts diff --git a/.w4c/preview.png b/.w4c/preview.png new file mode 100644 index 0000000..c253980 Binary files /dev/null and b/.w4c/preview.png differ diff --git a/.w4c/qa.json b/.w4c/qa.json new file mode 100644 index 0000000..1cf3494 --- /dev/null +++ b/.w4c/qa.json @@ -0,0 +1,38 @@ +{ + "install": "npm ci", + "setup": "npm run db:setup", + "lint": "npm run lint", + "typecheck": "npm run typecheck", + "unit": "npm run test", + "build": "npm run build", + "start": "npm run start", + "e2e": "node tests/e2e/smoke.mjs", + "port": 3000, + "health": "/api/health", + "env": { + "DATABASE_URL": "file:./dev.db", + "NEXT_PUBLIC_SITE_URL": "http://localhost:3000" + }, + "routes": [ + { "path": "/", "expect": [200] }, + { "path": "/pricing", "expect": [200] }, + { "path": "/login", "expect": [200] }, + { "path": "/register", "expect": [200] }, + { "path": "/legal/privacy", "expect": [200] }, + { "path": "/dashboard", "expect": [307, 302] }, + { "path": "/admin", "expect": [307, 302] }, + { "path": "/admin/customers", "expect": [307, 302] }, + { "path": "/admin/deals", "expect": [307, 302] }, + { "path": "/admin/import", "expect": [307, 302] }, + { "path": "/admin/audit", "expect": [307, 302] }, + { "path": "/admin/users", "expect": [307, 302] }, + { "path": "/api/health", "expect": [200] }, + { "path": "/api/auth/me", "expect": [401] }, + { "path": "/api/admin/customers", "expect": [401] }, + { "path": "/api/admin/audit", "expect": [401] }, + { "path": "/api/admin/export/customers", "expect": [401] }, + { "path": "/sitemap.xml", "expect": [200] }, + { "path": "/robots.txt", "expect": [200] } + ], + "timeout": { "install": 900, "build": 900, "boot": 120 } +} diff --git a/.w4c/template.json b/.w4c/template.json new file mode 100644 index 0000000..8c15c57 --- /dev/null +++ b/.w4c/template.json @@ -0,0 +1,28 @@ +{ + "schema": 2, + "system": "v2", + "id": "admin-next", + "case": "admin", + "stack": "next", + "title": "Admin / CRM — Next.js", + "description": "Ready-to-run internal tool: an entity registry with CRUD, roles, CSV import/export and an audit log.", + "tags": ["internal", "crm", "admin", "csv"], + "preview": ".w4c/preview.png", + "demoUrl": "https://admin-next.demo.wiz4chat.com", + "agentId": "w4c-start2", + "defaultName": "my-crm", + "featured": true, + "env": [ + { "key": "DATABASE_URL", "required": false, "note": "SQLite by default; Postgres in production" }, + { "key": "NEXT_PUBLIC_SITE_URL", "required": false, "note": "Public origin for sitemap/OG" } + ], + "modules": [ + { "id": "s3-storage", "skill": "integration-s3-storage" }, + { "id": "resend-email", "skill": "integration-resend-email" } + ], + "seededAccounts": [ + { "role": "admin", "email": "admin@example.com", "password": "password" }, + { "role": "editor", "email": "editor@example.com", "password": "password" }, + { "role": "viewer", "email": "viewer@example.com", "password": "password" } + ] +} diff --git a/README.md b/README.md index 5396bdb..603a633 100644 --- a/README.md +++ b/README.md @@ -1,3 +1,65 @@ -# templates2.Admin.Next +# Admin / CRM — Next.js (templates2) -Ready-to-run internal tool: an entity registry with CRUD, roles, CSV import/export and an audit log. \ No newline at end of file +A **ready-to-run** internal tool built on the v2 Next.js base: an entity registry (Customers, +Deals) with CRUD, roles, CSV import/export and an audit log. Everything works on the first run — +SQLite + mock providers need no keys. + +## Quickstart + +```bash +npm ci +cp .env.example .env # SQLite + mock providers by default — no keys needed +npm run db:setup # prisma db push + seed (20 customers, 15 deals, audit trail) +npm run dev # http://localhost:3000/admin +``` + +## Demo accounts (seeded) + +| Role | Email | Password | Can do | +|---|---|---|---| +| admin | `admin@example.com` | `password` | read, create/edit, delete, import/export | +| editor | `editor@example.com` | `password` | read, create/edit, import/export | +| viewer | `viewer@example.com` | `password` | read only | + +Roles are enforced **server-side** on every admin API route (`lib/server/guard.ts` + +`lib/rbac.ts`); the UI merely hides what a role cannot do. + +## What this case adds on top of the base + +- **Entity registry** — `Customer` and `Deal` with list (search, column filter, sort, pagination), + detail, create/edit and delete (delete asks for confirmation). `components/admin/CustomersManager` + and `DealsManager` drive the `/admin/customers` and `/admin/deals` pages. +- **Dashboard** — counters (customers, leads, deals, won value), a deals-by-stage bar chart and + recent activity on `/admin` (`lib/server/crm.ts#overview`). +- **CSV import** — `/admin/import` validates a CSV, shows a per-row error report and a preview of + the first valid rows, then commits. Export is a `text/csv` download. +- **Audit log** — every mutation writes an `AuditLog` row (`lib/server/audit.ts`); `/admin/audit` + lists it and filters by action. +- **Loading / empty / error states** on every list and the import wizard. + +## API + +| Method | Path | Role | +|---|---|---| +| GET | `/api/admin/customers?q=&status=&sort=&page=` | viewer+ | +| POST | `/api/admin/customers` | editor+ | +| GET / PATCH / DELETE | `/api/admin/customers/:id` | viewer+ / editor+ / admin | +| GET / POST | `/api/admin/deals` | viewer+ / editor+ | +| PATCH / DELETE | `/api/admin/deals/:id` | editor+ / admin | +| POST | `/api/admin/import/customers` (`{ csv, commit }`) | editor+ | +| GET | `/api/admin/export/customers` | viewer+ | +| GET | `/api/admin/audit?action=` | viewer+ | + +## Data model + +`prisma/schema.prisma`: the base `User`, `Session`, `Subscription`, `AuditLog` plus `Customer` +and `Deal`. SQLite in development; point `DATABASE_URL` at Postgres for production. + +## Quality + +```bash +node ../templates2/qa.mjs Admin.Next # from the repo root: node templates2/qa.mjs Admin.Next +``` + +The harness runs validate → clone → install → lint → typecheck → unit → build → boot → routes → +e2e → screenshot. See [`../CONTRACT.md`](../CONTRACT.md) for the Definition of Done. diff --git a/app/(app)/dashboard/page.tsx b/app/(app)/dashboard/page.tsx new file mode 100644 index 0000000..d4c5d19 --- /dev/null +++ b/app/(app)/dashboard/page.tsx @@ -0,0 +1,59 @@ +import Link from 'next/link'; +import { Badge, Card } from '@/components/ui'; +import { requireUser } from '@/lib/server/auth'; +import { db } from '@/lib/server/db'; +import { getPlan } from '@/lib/plans'; +import { t } from '@/lib/i18n'; + +export const dynamic = 'force-dynamic'; + +export default async function DashboardPage() { + const user = await requireUser(); + const sub = await db.subscription.findUnique({ where: { userId: user.id } }); + const plan = getPlan(sub?.plan); + const usedCalls = await db.auditLog.count({ where: { actorId: user.id } }); + + const usage = [ + { label: 'Seats', used: 1, limit: plan.limits.seats }, + { label: 'API calls', used: usedCalls, limit: plan.limits.apiCalls }, + ]; + + return ( +
+
+
+

{t('dashboard.title')}

+

{t('dashboard.welcome', { name: user.name || user.email })}

+
+ {plan.name} +
+ + {t('pricing.choose')}}> +

+ {plan.name} — ${plan.price} / month +

+ + + +
    + {usage.map((u) => { + const pct = Math.min(100, Math.round((u.used / u.limit) * 100)); + return ( +
  • +
    + {u.label} + + {u.used} / {u.limit} + +
    +
    +
    +
    +
    • + ); + })} +
+ +
+ ); +} diff --git a/app/(app)/layout.tsx b/app/(app)/layout.tsx new file mode 100644 index 0000000..f5818a2 --- /dev/null +++ b/app/(app)/layout.tsx @@ -0,0 +1,12 @@ +import { SiteHeader } from '@/components/SiteHeader'; +import { SiteFooter } from '@/components/SiteFooter'; + +export default function AppLayout({ children }: { children: React.ReactNode }) { + return ( +
+ +
{children}
+ +
+ ); +} diff --git a/app/(auth)/layout.tsx b/app/(auth)/layout.tsx new file mode 100644 index 0000000..c36e6dc --- /dev/null +++ b/app/(auth)/layout.tsx @@ -0,0 +1,13 @@ +import Link from 'next/link'; +import { t } from '@/lib/i18n'; + +export default function AuthLayout({ children }: { children: React.ReactNode }) { + return ( +
+ + {t('brand.name')} + +
{children}
+
+ ); +} diff --git a/app/(auth)/login/page.tsx b/app/(auth)/login/page.tsx new file mode 100644 index 0000000..3b76b82 --- /dev/null +++ b/app/(auth)/login/page.tsx @@ -0,0 +1,15 @@ +import { Suspense } from 'react'; +import { redirect } from 'next/navigation'; +import { AuthForm } from '@/components/AuthForm'; +import { getCurrentUser } from '@/lib/server/auth'; + +export const dynamic = 'force-dynamic'; + +export default async function LoginPage() { + if (await getCurrentUser()) redirect('/dashboard'); + return ( + Loading…

}> + + + ); +} diff --git a/app/(auth)/register/page.tsx b/app/(auth)/register/page.tsx new file mode 100644 index 0000000..2ffbaee --- /dev/null +++ b/app/(auth)/register/page.tsx @@ -0,0 +1,15 @@ +import { Suspense } from 'react'; +import { redirect } from 'next/navigation'; +import { AuthForm } from '@/components/AuthForm'; +import { getCurrentUser } from '@/lib/server/auth'; + +export const dynamic = 'force-dynamic'; + +export default async function RegisterPage() { + if (await getCurrentUser()) redirect('/dashboard'); + return ( + Loading…

}> + + + ); +} diff --git a/app/(marketing)/layout.tsx b/app/(marketing)/layout.tsx new file mode 100644 index 0000000..b77354a --- /dev/null +++ b/app/(marketing)/layout.tsx @@ -0,0 +1,12 @@ +import { SiteHeader } from '@/components/SiteHeader'; +import { SiteFooter } from '@/components/SiteFooter'; + +export default function MarketingLayout({ children }: { children: React.ReactNode }) { + return ( +
+ +
{children}
+ +
+ ); +} diff --git a/app/(marketing)/legal/privacy/page.tsx b/app/(marketing)/legal/privacy/page.tsx new file mode 100644 index 0000000..0bfe977 --- /dev/null +++ b/app/(marketing)/legal/privacy/page.tsx @@ -0,0 +1,10 @@ +export default function PrivacyPage() { + return ( +
+

Privacy Policy

+

+ This is a placeholder legal page. Replace it with your own policy before going live. +

+
+ ); +} diff --git a/app/(marketing)/legal/terms/page.tsx b/app/(marketing)/legal/terms/page.tsx new file mode 100644 index 0000000..65d9a97 --- /dev/null +++ b/app/(marketing)/legal/terms/page.tsx @@ -0,0 +1,10 @@ +export default function TermsPage() { + return ( +
+

Terms of Service

+

+ This is a placeholder legal page. Replace it with your own terms before going live. +

+
+ ); +} diff --git a/app/(marketing)/page.tsx b/app/(marketing)/page.tsx new file mode 100644 index 0000000..95c8fea --- /dev/null +++ b/app/(marketing)/page.tsx @@ -0,0 +1,44 @@ +import Link from 'next/link'; +import { t } from '@/lib/i18n'; + +const features = ['auth', 'billing', 'admin', 'seo'] as const; + +export default function HomePage() { + const jsonLd = { + '@context': 'https://schema.org', + '@type': 'WebSite', + name: t('brand.name'), + url: process.env.NEXT_PUBLIC_SITE_URL || 'http://localhost:3000', + }; + return ( + <> +