Admin

name	type	size	perms	modified	actions
[parent directory]
seeds/	dir	-	0775	2026-08-24 19:33:04
access.ts	file	3,219 B	0664	2026-07-17 07:04:48	edit
admin-actions.ts	file	7,455 B	0664	2026-07-17 04:27:31	edit
admin-crud-sql.ts	file	7,813 B	0664	2026-07-17 04:27:31	edit
admin-crud.ts	file	8,719 B	0664	2026-07-17 04:27:31	edit
admin-db.ts	file	7,223 B	0664	2026-07-17 04:27:31	edit
admin-guard.ts	file	3,448 B	0664	2026-07-17 07:04:48	edit
admin-impersonate.ts	file	2,483 B	0664	2026-07-17 04:27:31	edit
admin-schema.ts	file	4,180 B	0664	2026-07-17 04:27:31	edit
admin-users.ts	file	21,677 B	0664	2026-07-17 04:27:31	edit
attendance.ts	file	5,655 B	0664	2026-07-17 04:27:31	edit
audit.ts	file	1,477 B	0664	2026-07-17 04:27:31	edit
auth.ts	file	10,391 B	0664	2026-07-17 07:04:48	edit
batch.ts	file	546 B	0664	2026-07-17 04:27:31	edit
chunk-reload.ts	file	1,642 B	0664	2026-07-17 04:27:31	edit
constants.ts	file	432 B	0664	2026-07-17 04:27:31	edit
csv.ts	file	1,296 B	0664	2026-07-17 04:27:31	edit
feature-links.ts	file	4,186 B	0664	2026-07-17 07:04:48	edit
hits-harian.ts	file	6,852 B	0664	2026-07-17 04:27:31	edit
hits-hutang.ts	file	8,082 B	0664	2026-07-17 04:27:31	edit
hits-kajian-db.ts	file	2,394 B	0664	2026-07-17 04:27:31	edit
hits-kajian.ts	file	4,533 B	0664	2026-07-17 04:27:31	edit
hits-kaldik-parse.ts	file	4,313 B	0664	2026-07-17 04:27:31	edit
hits-ketua.ts	file	5,151 B	0664	2026-07-17 04:27:31	edit
hits-koreksi.ts	file	3,943 B	0664	2026-07-17 04:27:31	edit
hits-pertemuan.ts	file	6,819 B	0664	2026-07-17 04:27:31	edit
hits-presensi-parse.ts	file	4,519 B	0664	2026-07-17 04:27:31	edit
hits-ranking.ts	file	9,247 B	0664	2026-07-17 04:27:31	edit
hits-rekap.ts	file	9,371 B	0664	2026-07-17 04:27:31	edit
hits-sheets.ts	file	2,898 B	0664	2026-07-17 04:27:31	edit
hits-sync.ts	file	8,656 B	0664	2026-07-17 04:27:31	edit
hits-tabayyun.ts	file	1,843 B	0664	2026-07-17 04:27:31	edit
hits.ts	file	1,712 B	0664	2026-07-17 04:27:31	edit
laporan-maahir-xlsx.ts	file	13,110 B	0664	2026-07-17 04:27:31	edit
laporan-maahir.ts	file	12,563 B	0664	2026-07-17 04:27:31	edit
laporan.ts	file	11,540 B	0664	2026-07-17 04:27:31	edit
maahir-libur.ts	file	3,018 B	0664	2026-07-17 04:27:31	edit
maahir-presensi.ts	file	11,810 B	0664	2026-07-17 04:27:31	edit
maahir-rekap.ts	file	8,246 B	0664	2026-07-17 04:27:31	edit
maintenance.ts	file	5,263 B	0664	2026-07-17 04:27:31	edit
matrix-compute.ts	file	20,072 B	0664	2026-07-17 04:27:31	edit
matrix-indicators.ts	file	6,507 B	0664	2026-07-17 04:27:31	edit
month.ts	file	879 B	0664	2026-07-17 04:27:31	edit
penilaian-rubrik.ts	file	4,908 B	0664	2026-07-17 04:27:31	edit
pg-core.ts	file	4,626 B	0664	2026-07-17 04:27:31	edit
pg-shim.ts	file	18,790 B	0664	2026-07-17 04:27:31	edit
pg-storage.ts	file	5,997 B	0664	2026-07-17 04:27:31	edit
program-kelas.ts	file	3,789 B	0664	2026-07-17 07:04:48	edit
random-password.ts	file	348 B	0664	2026-07-17 04:27:31	edit
recording-cache.ts	file	3,173 B	0664	2026-07-17 04:27:31	edit
risk.ts	file	4,428 B	0664	2026-07-17 04:27:31	edit
roles.ts	file	408 B	0664	2026-07-17 07:04:48	edit
scales.ts	file	1,206 B	0664	2026-07-17 04:27:31	edit
session-log.ts	file	1,922 B	0664	2026-07-17 04:27:31	edit
session.ts	file	4,204 B	0664	2026-07-17 04:27:31	edit
storage.ts	file	2,143 B	0664	2026-07-17 04:27:31	edit
supabase-admin.ts	file	852 B	0664	2026-07-17 04:27:31	edit
supabase-browser.ts	file	605 B	0664	2026-07-17 04:27:31	edit
supabase-page.ts	file	783 B	0664	2026-07-17 04:27:31	edit
url.ts	file	806 B	0664	2026-07-17 04:27:31	edit
wa-log.ts	file	1,417 B	0664	2026-07-17 04:27:31	edit
week.ts	file	9,764 B	0664	2026-07-17 04:27:31	edit
whatsapp.ts	file	26,236 B	0664	2026-07-17 04:27:31	edit

editing: admin-crud.ts

import 'server-only';
import { getPool, poolExec } from './pg-core';
import { logAudit } from './audit';
import { loadAccessesForWa } from './access';
import { ADMIN_WA } from './constants';
import type { RoleAccess } from '@/types/db';
import {
  TABLES_SQL,
  TABLE_EXISTS_SQL,
  COLUMNS_SQL,
  PK_SQL,
  ENUM_SQL,
  buildBrowseQuery,
  buildInsertQuery,
  buildUpdateQuery,
  buildDeleteQuery,
} from './admin-crud-sql';

/**
 * admin-crud.ts — table browser CRUD terpandu (superadmin-only).
 *
 * Semua nama tabel divalidasi lewat information_schema; nilai selalu lewat
 * parameter. Tulis (insert/update/delete) dibungkus transaksi: preview jumlah
 * baris + ROLLBACK bila `confirm !== true`, COMMIT bila `confirm === true`.
 * Tiap mutasi diaudit ke audit_log.
 */

const TEXT_TYPES = new Set(['text', 'character varying', 'character', 'citext', 'name']);

export interface ColumnMeta {
  name: string;
  dataType: string;
  udtName: string;
  nullable: boolean;
  isPk: boolean;
  hasDefault: boolean;
  isGenerated: boolean;
  isText: boolean;
  enumValues?: string[];
}

export interface BrowseResult {
  columns: ColumnMeta[];
  rows: Record<string, any>[];
  total: number;
  page: number;
  pageSize: number;
  pkColumns: string[];
}

export interface MutateResult {
  rowCount: number;
  committed: boolean;
  requiresConfirm: boolean;
  wouldAffect: number;
  rows: Record<string, any>[];
}

async function assertTable(table: string): Promise<void> {
  const { rows } = await poolExec(TABLE_EXISTS_SQL, [table]);
  if (!rows.length) throw new Error(`Tabel tidak dikenal: ${table}`);
}

export async function getTables(): Promise<{ name: string; rows: number }[]> {
  const { rows } = await poolExec(TABLES_SQL);
  return rows.map((r: any) => ({ name: r.name as string, rows: Number(r.rows ?? 0) }));
}

export async function getColumns(table: string): Promise<ColumnMeta[]> {
  await assertTable(table);
  const [{ rows: cols }, { rows: pks }] = await Promise.all([
    poolExec(COLUMNS_SQL, [table]),
    poolExec(PK_SQL, [table]),
  ]);
  const pkSet = new Set(pks.map((r: any) => r.column_name));
  const enumCache = new Map<string, string[]>();
  const out: ColumnMeta[] = [];
  for (const c of cols) {
    let enumValues: string[] | undefined;
    if (c.data_type === 'USER-DEFINED') {
      if (!enumCache.has(c.udt_name)) {
        const { rows: ev } = await poolExec(ENUM_SQL, [c.udt_name]);
        enumCache.set(c.udt_name, ev.map((r: any) => r.enumlabel));
      }
      const vals = enumCache.get(c.udt_name)!;
      if (vals.length) enumValues = vals;
    }
    out.push({
      name: c.column_name,
      dataType: c.data_type,
      udtName: c.udt_name,
      nullable: c.is_nullable === 'YES',
      isPk: pkSet.has(c.column_name),
      hasDefault: c.column_default != null,
      isGenerated: c.is_generated === 'ALWAYS' || c.identity_generation != null,
      isText: TEXT_TYPES.has(c.data_type),
      enumValues,
    });
  }
  return out;
}

export async function browseTable(
  table: string,
  opts: { search?: string; page?: number; pageSize?: number }
): Promise<BrowseResult> {
  const columns = await getColumns(table);
  const pageSize = Math.min(Math.max(opts.pageSize ?? 50, 1), 200);
  const page = Math.max(opts.page ?? 0, 0);
  const textColumns = columns.filter((c) => c.isText).map((c) => c.name);
  const pkColumns = columns.filter((c) => c.isPk).map((c) => c.name);
  const orderColumns = pkColumns.length ? pkColumns : columns[0] ? [columns[0].name] : [];

// ── Coercion nilai form (string) → tipe kolom ───────────────────────────────
function coerce(meta: ColumnMeta | undefined, raw: any): any {
  if (raw === null || raw === undefined) return null;
  if (typeof raw === 'boolean') return raw;
  const s = String(raw);
  if (s === '') return meta && meta.nullable ? null : meta && !meta.isText ? null : '';
  if (!meta) return s;
  if (meta.dataType === 'boolean') return s === 'true' || s === 't' || s === '1';
  // int/uuid/timestamp/numeric/enum/json/jsonb → biar PostgreSQL yang cast dari text
  return s;
}

async function resolveActor(actor?: RoleAccess | null): Promise<RoleAccess | null> {
  if (actor) return actor;
  const a = await loadAccessesForWa(ADMIN_WA);
  return a[0] ?? null;
}

async function txRun(
  text: string,
  params: any[],
  confirm: boolean
): Promise<{ rowCount: number; committed: boolean; rows: any[] }> {
  const client = await getPool().connect();
  try {
    await client.query('BEGIN');
    const res = await client.query(text, params);
    const rowCount = res.rowCount ?? 0;
    if (confirm) {
      await client.query('COMMIT');
      return { rowCount, committed: true, rows: res.rows ?? [] };
    }
    await client.query('ROLLBACK');
    return { rowCount, committed: false, rows: res.rows ?? [] };
  } catch (e) {
    await client.query('ROLLBACK').catch(() => {});
    throw e;
  } finally {
    client.release();
  }
}

async function auditCrud(
  actor: RoleAccess | null | undefined,
  action: string,
  table: string,
  detail: Record<string, unknown>
): Promise<void> {
  const a = await resolveActor(actor);
  if (!a) return;
  await logAudit({ actor: a, action, targetTable: table, targetId: null, detail: { source: 'browser', ...detail } });
}

export async function insertRow(
  table: string,
  values: Record<string, any>,
  opts: { confirm: boolean; actor?: RoleAccess | null }
): Promise<MutateResult> {
  const columns = await getColumns(table);
  const metaByName = new Map(columns.map((c) => [c.name, c]));
  const cols: string[] = [];
  const params: any[] = [];
  for (const c of columns) {
    if (c.isGenerated) continue;
    if (!Object.prototype.hasOwnProperty.call(values, c.name)) continue;
    const v = values[c.name];
    if ((v === '' || v === null || v === undefined) && (c.hasDefault || c.nullable)) continue; // biar default/NULL
    cols.push(c.name);
    params.push(coerce(metaByName.get(c.name), v));
  }
  const q = buildInsertQuery(table, cols, params);
  const r = await txRun(q.text, q.params, opts.confirm);
  await auditCrud(opts.actor, 'admin_insert', table, { columns: cols, committed: r.committed });
  return { rowCount: r.rowCount, committed: r.committed, requiresConfirm: !r.committed, wouldAffect: r.rowCount, rows: r.rows };
}

export async function updateRow(
  table: string,
  pk: Record<string, any>,
  changes: Record<string, any>,
  opts: { confirm: boolean; actor?: RoleAccess | null }
): Promise<MutateResult> {
  const columns = await getColumns(table);
  const metaByName = new Map(columns.map((c) => [c.name, c]));
  const pkCols = columns.filter((c) => c.isPk).map((c) => c.name);
  if (!pkCols.length) throw new Error('Tabel tanpa primary key — pakai SQL Console.');

const setEntries = Object.entries(changes).filter(([k]) => metaByName.has(k) && !pkCols.includes(k));
  if (!setEntries.length) throw new Error('Tak ada perubahan.');
  const setCols = setEntries.map(([k]) => k);
  const setVals = setEntries.map(([k, v]) => coerce(metaByName.get(k), v));
  const pkVals = pkCols.map((c) => coerce(metaByName.get(c), pk[c]));

const q = buildUpdateQuery(table, setCols, setVals, pkCols, pkVals);
  const r = await txRun(q.text, q.params, opts.confirm);
  await auditCrud(opts.actor, 'admin_update', table, { pk, columns: setCols, rowCount: r.rowCount, committed: r.committed });
  return { rowCount: r.rowCount, committed: r.committed, requiresConfirm: !r.committed, wouldAffect: r.rowCount, rows: r.rows };
}

export async function deleteRow(
  table: string,
  pk: Record<string, any>,
  opts: { confirm: boolean; actor?: RoleAccess | null }
): Promise<MutateResult> {
  const columns = await getColumns(table);
  const metaByName = new Map(columns.map((c) => [c.name, c]));
  const pkCols = columns.filter((c) => c.isPk).map((c) => c.name);
  if (!pkCols.length) throw new Error('Tabel tanpa primary key — pakai SQL Console.');
  const pkVals = pkCols.map((c) => coerce(metaByName.get(c), pk[c]));

const q = buildDeleteQuery(table, pkCols, pkVals);
  const r = await txRun(q.text, q.params, opts.confirm);
  await auditCrud(opts.actor, 'admin_delete', table, { pk, rowCount: r.rowCount, committed: r.committed });
  return { rowCount: r.rowCount, committed: r.committed, requiresConfirm: !r.committed, wouldAffect: r.rowCount, rows: r.rows };
}

cancel

Admin

editing: admin-crud.ts

Deskripsi Program

Informasi Donatur

Gerakan Sehat Bermanfaat

Terkumpul

Target

Tentukan Nominal Sedekahmu

Gerakan Sehat Bermanfaat

⁠Masukkan Nominal Sedekah *

Terkumpul

Target