feat: admin panel — dashboard, articles list, editor, auth, cover regen, AI generate

app/admin/api/articles/[id]/cover/route.js

@@ -0,0 +1,18 @@
+import { NextResponse } from 'next/server';
+import { checkAdminAuth } from '@/lib/adminAuth';
+import { adminBackfillCovers } from '@/lib/engine';
+
+export async function POST(req, { params }) {
+  if (!(await checkAdminAuth())) return NextResponse.json({ error: 'Unauthorized' }, { status: 401 });
+  const { id } = await params;
+  // Сбрасываем cover_url и запускаем backfill для этой статьи
+  const { adminUpdateArticle } = await import('@/lib/engine');
+  await adminUpdateArticle(id, { cover_url: null });
+  // backfill подхватит статью без обложки
+  const result = await adminBackfillCovers(1);
+  const article = result.results?.[0];
+  if (article?.status === 'ok') {
+    return NextResponse.json({ cover_url: article.url });
+  }
+  return NextResponse.json({ error: 'Cover generation failed' }, { status: 500 });
+}

app/admin/api/articles/[id]/route.js

@@ -0,0 +1,18 @@
+import { NextResponse } from 'next/server';
+import { checkAdminAuth } from '@/lib/adminAuth';
+import { adminUpdateArticle, adminDeleteArticle } from '@/lib/engine';
+
+export async function PATCH(req, { params }) {
+  if (!(await checkAdminAuth())) return NextResponse.json({ error: 'Unauthorized' }, { status: 401 });
+  const { id } = await params;
+  const body = await req.json();
+  const result = await adminUpdateArticle(id, body);
+  return NextResponse.json(result);
+}
+
+export async function DELETE(req, { params }) {
+  if (!(await checkAdminAuth())) return NextResponse.json({ error: 'Unauthorized' }, { status: 401 });
+  const { id } = await params;
+  const result = await adminDeleteArticle(id);
+  return NextResponse.json(result);
+}

app/admin/api/articles/generate/route.js

@@ -0,0 +1,17 @@
+import { NextResponse } from 'next/server';
+import { checkAdminAuth } from '@/lib/adminAuth';
+
+const ENGINE_URL = process.env.ENGINE_URL || 'http://127.0.0.1:3040';
+const ENGINE_SECRET = process.env.ENGINE_SECRET || 'zeropost_internal_2026';
+
+export async function POST(req) {
+  if (!(await checkAdminAuth())) return NextResponse.json({ error: 'Unauthorized' }, { status: 401 });
+  const body = await req.json();
+  const res = await fetch(`${ENGINE_URL}/api/articles/generate`, {
+    method: 'POST',
+    headers: { 'Content-Type': 'application/json', 'x-internal-secret': ENGINE_SECRET },
+    body: JSON.stringify(body),
+  });
+  if (!res.ok) return NextResponse.json({ error: await res.text() }, { status: res.status });
+  return NextResponse.json(await res.json());
+}

app/admin/api/login/route.js

@@ -0,0 +1,18 @@
+import { NextResponse } from 'next/server';
+import { SESSION_COOKIE, VALID_TOKEN } from '@/lib/adminAuth';
+
+export async function POST(req) {
+  const { password } = await req.json();
+  if (password !== VALID_TOKEN) {
+    return NextResponse.json({ error: 'Invalid password' }, { status: 401 });
+  }
+  const res = NextResponse.json({ ok: true });
+  res.cookies.set(SESSION_COOKIE, VALID_TOKEN, {
+    httpOnly: true,
+    secure: process.env.NODE_ENV === 'production',
+    sameSite: 'lax',
+    maxAge: 60 * 60 * 24 * 30, // 30 дней
+    path: '/',
+  });
+  return res;
+}

app/admin/api/logout/route.js

@@ -0,0 +1,8 @@
+import { NextResponse } from 'next/server';
+import { SESSION_COOKIE } from '@/lib/adminAuth';
+
+export async function POST() {
+  const res = NextResponse.json({ ok: true });
+  res.cookies.set(SESSION_COOKIE, '', { maxAge: 0, path: '/' });
+  return res;
+}

app/admin/articles/[id]/page.js

@@ -0,0 +1,29 @@
+import { requireAdminAuth } from '@/lib/adminAuth';
+import { adminGetArticle } from '@/lib/engine';
+import ArticleEditor from '@/components/admin/ArticleEditor';
+import { notFound } from 'next/navigation';
+
+export const dynamic = 'force-dynamic';
+
+export async function generateMetadata({ params }) {
+  const { id } = await params;
+  if (id === 'new') return { title: 'Новая статья' };
+  try {
+    const a = await adminGetArticle(id);
+    return { title: a?.title ? `Редактировать: ${a.title.slice(0, 40)}` : 'Редактировать' };
+  } catch { return { title: 'Редактировать' }; }
+}
+
+export default async function AdminArticlePage({ params }) {
+  await requireAdminAuth();
+  const { id } = await params;
+
+  let article = null;
+  if (id !== 'new') {
+    try { article = await adminGetArticle(id); }
+    catch { notFound(); }
+    if (!article) notFound();
+  }
+
+  return <ArticleEditor article={article} />;
+}

app/admin/articles/new/page.js

@@ -0,0 +1,9 @@
+import ArticleEditor from '@/components/admin/ArticleEditor';
+import { requireAdminAuth } from '@/lib/adminAuth';
+
+export const metadata = { title: 'Новая статья' };
+
+export default async function NewArticlePage() {
+  await requireAdminAuth();
+  return <ArticleEditor article={null} />;
+}

app/admin/articles/page.js

@@ -0,0 +1,100 @@
+import Link from 'next/link';
+import { requireAdminAuth } from '@/lib/adminAuth';
+import { adminListArticles } from '@/lib/engine';
+import { Plus, Pencil, Eye } from 'lucide-react';
+
+export const dynamic = 'force-dynamic';
+export const metadata = { title: 'Статьи' };
+
+export default async function AdminArticlesPage() {
+  await requireAdminAuth();
+  const raw = await adminListArticles({ limit: 100 });
+  const articles = Array.isArray(raw) ? raw : raw?.articles || [];
+
+  return (
+    <div className="space-y-6">
+      <div className="flex items-center justify-between">
+        <h1 className="text-2xl font-bold text-neutral-900 dark:text-neutral-100">Статьи</h1>
+        <Link
+          href="/admin/articles/new"
+          className="inline-flex items-center gap-2 px-4 py-2 rounded-lg bg-emerald-500 hover:bg-emerald-600 text-white text-sm font-medium transition-colors"
+        >
+          <Plus className="w-4 h-4" />
+          Новая статья
+        </Link>
+      </div>
+
+      <div className="bg-white dark:bg-neutral-900 rounded-xl border border-neutral-200 dark:border-neutral-800 overflow-hidden">
+        <table className="w-full text-sm">
+          <thead>
+            <tr className="border-b border-neutral-100 dark:border-neutral-800 text-left">
+              <th className="px-5 py-3 text-xs font-semibold text-neutral-500 uppercase tracking-wide">Статья</th>
+              <th className="px-3 py-3 text-xs font-semibold text-neutral-500 uppercase tracking-wide hidden md:table-cell">Теги</th>
+              <th className="px-3 py-3 text-xs font-semibold text-neutral-500 uppercase tracking-wide">Статус</th>
+              <th className="px-3 py-3 text-xs font-semibold text-neutral-500 uppercase tracking-wide hidden lg:table-cell">Дата</th>
+              <th className="px-3 py-3 text-xs font-semibold text-neutral-500 uppercase tracking-wide">Действия</th>
+            </tr>
+          </thead>
+          <tbody className="divide-y divide-neutral-100 dark:divide-neutral-800">
+            {articles.map(a => (
+              <tr key={a.id} className="hover:bg-neutral-50 dark:hover:bg-neutral-800 transition-colors group">
+                <td className="px-5 py-3.5">
+                  <div className="flex items-center gap-3">
+                    <div className="w-12 h-8 rounded-md overflow-hidden bg-neutral-100 dark:bg-neutral-800 shrink-0">
+                      {a.cover_url && <img src={a.cover_url} alt="" className="w-full h-full object-cover" />}
+                    </div>
+                    <div className="min-w-0">
+                      <div className="font-medium text-neutral-900 dark:text-neutral-100 truncate max-w-xs">{a.title}</div>
+                      <div className="text-xs text-neutral-400 truncate max-w-xs">{a.slug}</div>
+                    </div>
+                  </div>
+                </td>
+                <td className="px-3 py-3.5 hidden md:table-cell">
+                  <div className="flex flex-wrap gap-1">
+                    {(a.tags || []).slice(0, 3).map(t => (
+                      <span key={t} className="text-xs bg-neutral-100 dark:bg-neutral-800 text-neutral-500 px-1.5 py-0.5 rounded">#{t}</span>
+                    ))}
+                  </div>
+                </td>
+                <td className="px-3 py-3.5">
+                  <span className={`text-xs px-2 py-0.5 rounded-full font-medium ${
+                    a.status === 'published'
+                      ? 'bg-emerald-50 dark:bg-emerald-950 text-emerald-600 dark:text-emerald-400'
+                      : 'bg-amber-50 dark:bg-amber-950 text-amber-600 dark:text-amber-400'
+                  }`}>
+                    {a.status === 'published' ? 'Опубликована' : 'Черновик'}
+                  </span>
+                </td>
+                <td className="px-3 py-3.5 text-xs text-neutral-400 hidden lg:table-cell">
+                  {a.published_at ? new Date(a.published_at).toLocaleDateString('ru-RU') : '—'}
+                </td>
+                <td className="px-3 py-3.5">
+                  <div className="flex items-center gap-1">
+                    <Link
+                      href={`/admin/articles/${a.id}`}
+                      className="p-1.5 rounded-lg hover:bg-neutral-100 dark:hover:bg-neutral-700 text-neutral-400 hover:text-neutral-700 dark:hover:text-neutral-200 transition-colors"
+                      title="Редактировать"
+                    >
+                      <Pencil className="w-3.5 h-3.5" />
+                    </Link>
+                    <Link
+                      href={`/blog/${a.slug}`}
+                      target="_blank"
+                      className="p-1.5 rounded-lg hover:bg-neutral-100 dark:hover:bg-neutral-700 text-neutral-400 hover:text-neutral-700 dark:hover:text-neutral-200 transition-colors"
+                      title="Открыть на сайте"
+                    >
+                      <Eye className="w-3.5 h-3.5" />
+                    </Link>
+                  </div>
+                </td>
+              </tr>
+            ))}
+          </tbody>
+        </table>
+        {articles.length === 0 && (
+          <div className="px-5 py-12 text-center text-sm text-neutral-400">Статей пока нет</div>
+        )}
+      </div>
+    </div>
+  );
+}

app/admin/layout.js

@@ -0,0 +1,16 @@
+import { requireAdminAuth } from '@/lib/adminAuth';
+import AdminNav from '@/components/admin/AdminNav';
+
+export const metadata = { title: { default: 'Admin — ZeroPost', template: '%s — Admin' } };
+
+export default async function AdminLayout({ children }) {
+  await requireAdminAuth();
+  return (
+    <div className="min-h-screen bg-stone-50 dark:bg-neutral-950">
+      <AdminNav />
+      <main className="max-w-6xl mx-auto px-4 py-8">
+        {children}
+      </main>
+    </div>
+  );
+}

app/admin/login/page.js

@@ -0,0 +1,61 @@
+'use client';
+import { useState } from 'react';
+import { useRouter } from 'next/navigation';
+
+export default function AdminLoginPage() {
+  const router = useRouter();
+  const [password, setPassword] = useState('');
+  const [error, setError] = useState('');
+  const [loading, setLoading] = useState(false);
+
+  async function handleSubmit(e) {
+    e.preventDefault();
+    setLoading(true);
+    setError('');
+    const res = await fetch('/admin/api/login', {
+      method: 'POST',
+      headers: { 'Content-Type': 'application/json' },
+      body: JSON.stringify({ password }),
+    });
+    if (res.ok) {
+      router.push('/admin');
+      router.refresh();
+    } else {
+      setError('Неверный пароль');
+      setLoading(false);
+    }
+  }
+
+  return (
+    <div className="min-h-screen flex items-center justify-center bg-stone-50 dark:bg-neutral-950">
+      <div className="w-full max-w-sm">
+        <div className="mb-8 text-center">
+          <div className="inline-flex items-center justify-center w-12 h-12 rounded-xl bg-emerald-500 text-white font-bold text-xl mb-4">Z</div>
+          <h1 className="text-xl font-bold text-neutral-900 dark:text-neutral-100">ZeroPost Admin</h1>
+          <p className="text-sm text-neutral-500 mt-1">Введите пароль для входа</p>
+        </div>
+        <form onSubmit={handleSubmit} className="bg-white dark:bg-neutral-900 rounded-2xl shadow-sm border border-neutral-200 dark:border-neutral-800 p-6 space-y-4">
+          <div>
+            <label className="block text-sm font-medium text-neutral-700 dark:text-neutral-300 mb-1.5">Пароль</label>
+            <input
+              type="password"
+              value={password}
+              onChange={e => setPassword(e.target.value)}
+              className="w-full px-3 py-2 rounded-lg border border-neutral-200 dark:border-neutral-700 bg-stone-50 dark:bg-neutral-800 text-neutral-900 dark:text-neutral-100 text-sm focus:outline-none focus:ring-2 focus:ring-emerald-500"
+              placeholder="••••••••"
+              autoFocus
+            />
+          </div>
+          {error && <p className="text-sm text-red-500">{error}</p>}
+          <button
+            type="submit"
+            disabled={loading || !password}
+            className="w-full py-2 rounded-lg bg-emerald-500 hover:bg-emerald-600 disabled:opacity-50 text-white font-medium text-sm transition-colors"
+          >
+            {loading ? 'Вход...' : 'Войти'}
+          </button>
+        </form>
+      </div>
+    </div>
+  );
+}

app/admin/page.js

@@ -0,0 +1,158 @@
+import Link from 'next/link';
+import { requireAdminAuth } from '@/lib/adminAuth';
+import { adminListArticles, getStats } from '@/lib/engine';
+import { FileText, Eye, TrendingUp, Plus, Image, RefreshCw } from 'lucide-react';
+
+export const dynamic = 'force-dynamic';
+export const metadata = { title: 'Дашборд' };
+
+function StatCard({ label, value, icon: Icon, color = 'emerald' }) {
+  const colors = {
+    emerald: 'bg-emerald-50 dark:bg-emerald-950 text-emerald-600 dark:text-emerald-400',
+    blue: 'bg-blue-50 dark:bg-blue-950 text-blue-600 dark:text-blue-400',
+    amber: 'bg-amber-50 dark:bg-amber-950 text-amber-600 dark:text-amber-400',
+  };
+  return (
+    <div className="bg-white dark:bg-neutral-900 rounded-xl border border-neutral-200 dark:border-neutral-800 p-5">
+      <div className="flex items-center gap-3 mb-3">
+        <div className={`w-9 h-9 rounded-lg flex items-center justify-center ${colors[color]}`}>
+          <Icon className="w-4.5 h-4.5 w-[18px] h-[18px]" />
+        </div>
+        <span className="text-sm text-neutral-500 dark:text-neutral-400">{label}</span>
+      </div>
+      <div className="text-2xl font-bold text-neutral-900 dark:text-neutral-100">{value ?? '—'}</div>
+    </div>
+  );
+}
+
+export default async function AdminDashboard() {
+  await requireAdminAuth();
+
+  const [articles, stats] = await Promise.allSettled([
+    adminListArticles({ limit: 50 }),
+    getStats(),
+  ]);
+
+  const arts = articles.status === 'fulfilled' ? (Array.isArray(articles.value) ? articles.value : articles.value?.articles || []) : [];
+  const st = stats.status === 'fulfilled' ? stats.value : null;
+
+  const published = arts.filter(a => a.status === 'published').length;
+  const drafts = arts.filter(a => a.status === 'draft').length;
+  const withoutCover = arts.filter(a => !a.cover_url).length;
+  const recentArts = arts.slice(0, 8);
+
+  return (
+    <div className="space-y-8">
+      <div className="flex items-center justify-between">
+        <div>
+          <h1 className="text-2xl font-bold text-neutral-900 dark:text-neutral-100">Дашборд</h1>
+          <p className="text-sm text-neutral-500 mt-0.5">Управление контентом zeropost.ru</p>
+        </div>
+        <Link
+          href="/admin/articles/new"
+          className="inline-flex items-center gap-2 px-4 py-2 rounded-lg bg-emerald-500 hover:bg-emerald-600 text-white text-sm font-medium transition-colors"
+        >
+          <Plus className="w-4 h-4" />
+          Новая статья
+        </Link>
+      </div>
+
+      {/* Статистика */}
+      <div className="grid grid-cols-2 lg:grid-cols-4 gap-4">
+        <StatCard label="Опубликовано" value={published} icon={FileText} color="emerald" />
+        <StatCard label="Черновики" value={drafts} icon={FileText} color="amber" />
+        <StatCard label="Просмотры (всего)" value={st?.total_views ?? '—'} icon={Eye} color="blue" />
+        <StatCard label="Без обложки" value={withoutCover} icon={Image} color={withoutCover > 0 ? 'amber' : 'emerald'} />
+      </div>
+
+      {/* Быстрые действия */}
+      <div className="bg-white dark:bg-neutral-900 rounded-xl border border-neutral-200 dark:border-neutral-800 p-5">
+        <h2 className="text-sm font-semibold text-neutral-900 dark:text-neutral-100 mb-4">Быстрые действия</h2>
+        <div className="flex flex-wrap gap-3">
+          <Link
+            href="/admin/articles/new"
+            className="inline-flex items-center gap-2 px-3 py-2 rounded-lg border border-neutral-200 dark:border-neutral-700 text-sm hover:bg-neutral-50 dark:hover:bg-neutral-800 transition-colors"
+          >
+            <Plus className="w-4 h-4 text-emerald-500" />
+            Написать статью
+          </Link>
+          <Link
+            href="/admin/articles"
+            className="inline-flex items-center gap-2 px-3 py-2 rounded-lg border border-neutral-200 dark:border-neutral-700 text-sm hover:bg-neutral-50 dark:hover:bg-neutral-800 transition-colors"
+          >
+            <FileText className="w-4 h-4 text-blue-500" />
+            Все статьи
+          </Link>
+          {withoutCover > 0 && (
+            <BackfillButton count={withoutCover} />
+          )}
+        </div>
+      </div>
+
+      {/* Последние статьи */}
+      <div className="bg-white dark:bg-neutral-900 rounded-xl border border-neutral-200 dark:border-neutral-800">
+        <div className="flex items-center justify-between px-5 py-4 border-b border-neutral-100 dark:border-neutral-800">
+          <h2 className="text-sm font-semibold text-neutral-900 dark:text-neutral-100">Последние статьи</h2>
+          <Link href="/admin/articles" className="text-xs text-emerald-600 dark:text-emerald-400 hover:underline">
+            Все →
+          </Link>
+        </div>
+        <div className="divide-y divide-neutral-100 dark:divide-neutral-800">
+          {recentArts.map(a => (
+            <Link
+              key={a.id}
+              href={`/admin/articles/${a.id}`}
+              className="flex items-center gap-4 px-5 py-3.5 hover:bg-neutral-50 dark:hover:bg-neutral-800 transition-colors group"
+            >
+              {/* Обложка-превью */}
+              <div className="w-14 h-9 rounded-lg overflow-hidden bg-neutral-100 dark:bg-neutral-800 shrink-0">
+                {a.cover_url ? (
+                  <img src={a.cover_url} alt="" className="w-full h-full object-cover" />
+                ) : (
+                  <div className="w-full h-full flex items-center justify-center">
+                    <Image className="w-4 h-4 text-neutral-300" />
+                  </div>
+                )}
+              </div>
+              <div className="flex-1 min-w-0">
+                <div className="text-sm font-medium text-neutral-900 dark:text-neutral-100 truncate group-hover:text-emerald-600 dark:group-hover:text-emerald-400 transition-colors">
+                  {a.title}
+                </div>
+                <div className="flex items-center gap-2 mt-0.5">
+                  <span className={`text-xs px-1.5 py-0.5 rounded-full font-medium ${
+                    a.status === 'published'
+                      ? 'bg-emerald-50 dark:bg-emerald-950 text-emerald-600 dark:text-emerald-400'
+                      : 'bg-amber-50 dark:bg-amber-950 text-amber-600 dark:text-amber-400'
+                  }`}>
+                    {a.status === 'published' ? 'Опубликовано' : 'Черновик'}
+                  </span>
+                  {a.tags?.slice(0, 2).map(t => (
+                    <span key={t} className="text-xs text-neutral-400">#{t}</span>
+                  ))}
+                </div>
+              </div>
+              <div className="text-xs text-neutral-400 shrink-0">
+                {a.published_at ? new Date(a.published_at).toLocaleDateString('ru-RU', { day: 'numeric', month: 'short' }) : '—'}
+              </div>
+            </Link>
+          ))}
+        </div>
+      </div>
+    </div>
+  );
+}
+
+// Кнопка backfill — клиентская
+function BackfillButton({ count }) {
+  return (
+    <form action="/admin/api/backfill" method="POST">
+      <Link
+        href="/admin/articles?backfill=1"
+        className="inline-flex items-center gap-2 px-3 py-2 rounded-lg border border-amber-200 dark:border-amber-800 text-sm text-amber-700 dark:text-amber-400 hover:bg-amber-50 dark:hover:bg-amber-950 transition-colors"
+      >
+        <RefreshCw className="w-4 h-4" />
+        Догенерировать обложки ({count})
+      </Link>
+    </form>
+  );
+}