feat: admin dashboard API + separate admin routes file

routes/admin.js: GET /dashboard, /users, POST /credit, PATCH /plans/:id, /credit-costs/:op index.js: app.use('/api/admin', adminRoutes) — чистый монтаж без хаков dashboard: users (total/7d/30d), channels by platform, posts (total/today/week), revenue (YuKassa), AI costs (30d), registrations chart (14d), pending drafts alert
2026-06-13 00:09:53 +03:00
parent ad9f054701
commit f18b83c59b
3 changed files with 168 additions and 1 deletions
@@ -0,0 +1,116 @@
+/**
+ * admin.js — admin-only API routes.
+ * Монтируется на /api/admin
+ */
+const express = require('express');
+const router  = express.Router();
+const { query } = require('../config/db');
+
+function uid(req) { return req.headers['x-user-id'] ? parseInt(req.headers['x-user-id']) : null; }
+
+async function requireAdmin(req, res) {
+  const adminId = uid(req);
+  if (!adminId) { res.status(401).json({ error: 'x-user-id required' }); return null; }
+  const { rows: [u] } = await query('SELECT is_admin FROM users WHERE id=$1', [adminId]);
+  if (!u?.is_admin) { res.status(403).json({ error: 'Forbidden' }); return null; }
+  return adminId;
+}
+
+// GET /api/admin/dashboard
+router.get('/dashboard', async (req, res) => {
+  if (!await requireAdmin(req, res)) return;
+  try {
+    const [users, channels, posts, drafts, revenue, ai, regs] = await Promise.all([
+      query(`SELECT count(*)::int as total,
+        count(*) FILTER (WHERE created_at > NOW()-INTERVAL '7 days')::int as new_7d,
+        count(*) FILTER (WHERE created_at > NOW()-INTERVAL '30 days')::int as new_30d
+        FROM users`),
+      query(`SELECT platform, count(*)::int as cnt FROM channels WHERE is_active=true GROUP BY platform`),
+      query(`SELECT count(*)::int as total,
+        count(*) FILTER (WHERE published_at > NOW()-INTERVAL '24 hours')::int as today,
+        count(*) FILTER (WHERE published_at > NOW()-INTERVAL '7 days')::int as week
+        FROM scheduled_posts WHERE status='sent'`),
+      query(`SELECT count(*)::int as pending FROM post_drafts WHERE status='pending'`),
+      query(`SELECT coalesce(sum(amount_rub),0)::int as total_rub,
+        count(*) FILTER (WHERE status='succeeded')::int as paid_count,
+        coalesce(sum(amount_rub) FILTER (WHERE created_at > NOW()-INTERVAL '30 days'),0)::int as month_rub
+        FROM payment_orders WHERE status='succeeded'`),
+      query(`SELECT coalesce(sum(cost_rub),0)::numeric(10,2) as month_rub,
+        count(*)::int as calls,
+        count(*) FILTER (WHERE NOT succeeded)::int as errors
+        FROM ai_usage WHERE created_at > NOW()-INTERVAL '30 days'`),
+      query(`SELECT date_trunc('day', created_at)::date as day, count(*)::int as cnt
+        FROM users WHERE created_at > NOW()-INTERVAL '14 days'
+        GROUP BY 1 ORDER BY 1`),
+    ]);
+    res.json({
+      users:   users.rows[0],
+      channels: channels.rows,
+      posts:   posts.rows[0],
+      drafts:  drafts.rows[0],
+      revenue: revenue.rows[0],
+      ai:      { ...ai.rows[0], cost_rub: parseFloat(ai.rows[0].month_rub) },
+      registrations_14d: regs.rows,
+    });
+  } catch (err) { res.status(500).json({ error: err.message }); }
+});
+
+// GET /api/admin/users — балансы всех пользователей
+router.get('/users', async (req, res) => {
+  if (!await requireAdmin(req, res)) return;
+  try {
+    const { rows } = await query(`
+      SELECT u.id, u.email, u.name, u.created_at,
+             ub.credits, ub.reset_at,
+             p.name as plan_name, p.code as plan_code, p.price_rub
+      FROM users u
+      LEFT JOIN user_balance ub ON ub.user_id = u.id
+      LEFT JOIN user_subscriptions us ON us.user_id = u.id
+        AND us.status='active' AND (us.expires_at IS NULL OR us.expires_at > NOW())
+      LEFT JOIN plans p ON p.id = us.plan_id
+      ORDER BY u.created_at DESC
+    `);
+    res.json(rows);
+  } catch (err) { res.status(500).json({ error: err.message }); }
+});
+
+// POST /api/admin/credit — начислить кредиты
+router.post('/credit', async (req, res) => {
+  if (!await requireAdmin(req, res)) return;
+  const { user_id, amount, description = 'Ручное начисление' } = req.body;
+  if (!user_id || !amount) return res.status(400).json({ error: 'user_id и amount обязательны' });
+  try {
+    const billing = require('../services/billing');
+    const result = await billing.credit(user_id, amount, 'bonus', description, { by_admin: uid(req) });
+    res.json(result);
+  } catch (err) { res.status(500).json({ error: err.message }); }
+});
+
+// PATCH /api/admin/plans/:id
+router.patch('/plans/:id', async (req, res) => {
+  if (!await requireAdmin(req, res)) return;
+  const { price_rub, credits_month, channels_max, name } = req.body;
+  try {
+    const sets = []; const vals = [];
+    if (price_rub    !== undefined) sets.push(`price_rub=$${vals.push(price_rub)}`);
+    if (credits_month!== undefined) sets.push(`credits_month=$${vals.push(credits_month)}`);
+    if (channels_max !== undefined) sets.push(`channels_max=$${vals.push(channels_max)}`);
+    if (name         !== undefined) sets.push(`name=$${vals.push(name)}`);
+    if (!sets.length) return res.status(400).json({ error: 'nothing to update' });
+    vals.push(req.params.id);
+    const { rows: [plan] } = await query(`UPDATE plans SET ${sets.join(',')} WHERE id=$${vals.length} RETURNING *`, vals);
+    res.json(plan);
+  } catch (err) { res.status(500).json({ error: err.message }); }
+});
+
+// PATCH /api/admin/credit-costs/:operation
+router.patch('/credit-costs/:operation', async (req, res) => {
+  if (!await requireAdmin(req, res)) return;
+  const { credits } = req.body;
+  try {
+    await query('UPDATE credit_costs SET credits=$1 WHERE operation=$2', [credits, req.params.operation]);
+    res.json({ ok: true, operation: req.params.operation, credits });
+  } catch (err) { res.status(500).json({ error: err.message }); }
+});
+
+module.exports = router;