mirror of
https://github.com/DayuanJiang/next-ai-draw-io.git
synced 2026-09-02 01:20:23 +08:00
* feat: add file-based admin settings panel at /admin
Settings saved in the panel are written to data/settings.json and
overlaid onto process.env, taking precedence over environment
variables and applying immediately without restart. Enable by setting
ADMIN_PASSWORD; on serverless platforms without persistent disk the
panel degrades to read-only.
* polish: admin panel UI improvements
- Provider logos in credential rows (shared ProviderLogo component,
extracted from model-config-dialog)
- Scroll-spy active state in the sidebar nav
- Green success state in the save bar that clears after a few seconds
- Wider content column (max-w-6xl) for less wasted space on desktop
* polish: admin panel section toggles and reorder
- Move Quota & Rate Limits to the end of the settings page
- Add enable switches to Observability and Quota sections; default off
with fields grayed out, auto-on when any field is already configured
* polish: make section enable switch more visible
Wrap the switch in a labeled pill ('Enabled'/'Disabled') with border
and background so the off state is clearly visible.
* refactor: derive admin registry from PROVIDER_INFO, simplify page state
- Provider options, labels, and base-URL placeholders now come from
PROVIDER_INFO instead of hand-copied lists (fixes SiliconFlow .com/.cn
placeholder drift; panel names now match the model-config dialog)
- Replace free-text subgroup strings + SUBGROUP_PROVIDERS reverse map
with a typed provider field on SettingDef
- Precompute SETTINGS_BY_GROUP and PROVIDER_SUBGROUPS at module level
- Merge justSaved into saveMessage, drop unused mainRef, hoist
fetchSettings out of the component, dedupe savedText logic
- Serialize from SETTINGS_REGISTRY directly; json validators in a map
instead of a hardcoded key check
- Make allowPrivateUrls a function so ALLOW_PRIVATE_URLS edits in the
admin panel apply without restart
* feat: graphical model management in admin panel
Replace the provider credential fields and raw AI_MODELS_CONFIG JSON
textarea with a Models section mirroring the in-app model settings UI:
provider instance list with logos, credential fields per provider type,
model add/remove with suggestions, per-model connectivity test, and a
default-provider star.
On save the server derives everything the runtime needs into
settings.json: credential env vars (with _2 suffixes for multiple
instances of one provider), AI_MODELS_CONFIG, and AI_PROVIDER/AI_MODEL
for the default. Secrets round-trip as masked markers and are never
sent back to the browser. The general settings registry now only
covers non-provider settings (generation, access, features,
observability, quota).
* fix: allow testing unsaved providers in admin panel
The test button previously looked up credentials by providerId in the
saved settings, so testing a newly added (unsaved) provider failed with
'Unknown provider or model'. The test endpoint now accepts the client's
current provider state; newly typed secrets are used as-is and masked
markers are resolved against the stored values, so testing works both
before and after saving.
* fix: merge env AI_MODELS_CONFIG with admin panel providers
Previously, saving in the admin panel wrote a complete AI_MODELS_CONFIG
into settings.json, which (by overlay precedence) replaced any config
from .env or ai-models.json — admins lost their env-configured models.
The panel no longer writes AI_MODELS_CONFIG. Instead its providers are
merged with the env baseline at read time in loadRawServerModelsConfig,
and panel credentials go to ADMIN_-prefixed env vars wired up via
apiKeyEnv/baseUrlEnv so they never shadow standard vars. Env-based
providers now appear read-only in the panel, name clashes are rejected,
and a panel default overrides the env default. data/ is now gitignored.
* fix: block global-credential providers already managed via env
Bedrock, Vertex AI, and Ollama credentials live in fixed env vars with
no apiKeyEnv redirection, so a panel instance of one of these would
silently override the credentials that env-configured models rely on.
The API now rejects saving such a provider when the env config already
uses that type, and the Add Provider dropdown disables it with a
'managed via env' note.
* fix: address admin panel review findings
- Security: test-model no longer resolves a stored secret when the
request's baseUrl/provider differs from the stored entry, closing a
path where a tampered baseUrl could exfiltrate a saved key
- Save failures are now visible: the save bar shows the error in red
(was masked by the persistent 'Unsaved changes' text), and per-field
validation errors from the settings API are surfaced under each field
- The Observability/Quota enable switch is now real: toggling off stages
deletion of the group's saved values, and the toggle no longer snaps
back to Enabled after saving
- Env provider's default star is hidden when a panel provider is the
active default (no more double star)
- Clearing a credential field reverts to the stored value instead of
silently deleting it; an explicit X button removes a stored secret
- Form inputs are disabled during an in-flight save
* refactor(admin): split 1549-line admin page into focused modules
Extract admin-shared.ts (types + fetch helper), setting-field.tsx
(registry-driven fields), and models-section.tsx (provider/model
manager) from page.tsx. Pure mechanical move, no behavior change.
* feat(admin): share credential fields with user dialog and localize panel
Extract ProviderCredentialsFields (display name + per-provider
credential inputs) used by both the user ModelConfigDialog and the
admin Models panel; secret input passed via renderSecret (plaintext
vs masked), test button via footer slot. Add full i18n for the admin
panel across en/zh/ja/zh-Hant, reusing modelConfig.* for shared parts.
* fix(admin): address Copilot review findings
- Reflect built-in defaults for boolean settings (ALLOW_PRIVATE_URLS
defaults on) and allow clearing a saved boolean back to default,
so the SSRF toggle matches actual runtime behavior.
- Harden JSON loading: filter settings values to strings only, and
schema-validate stored ADMIN_PROVIDERS entries, dropping malformed
ones instead of letting them reach runtime code.
- Set beforeunload returnValue so the unsaved-changes prompt shows in
all browsers; reject non-finite numbers in settings validation.
- Fix README/CN/JA docs that claimed the panel auto-generates
AI_MODELS_CONFIG (providers are merged at read time, not written).
- Add unit tests for corrupted-file value filtering and provider
schema validation.
* docs: move admin panel details to dedicated docs/{en,cn,ja}/admin-panel.md
The READMEs now carry a short blurb + link, matching the existing
per-topic docs (docker.md, ai-providers.md, ...). Removes the ~22-line
inline section and the duplicated data/settings.json mentions.
* fix(admin): address follow-up Copilot findings on the prior fixes
- loadAdminProviders now validates against a stored-shape schema where
secrets are plain strings, so a hand-edited ADMIN_PROVIDERS holding an
{isSet} marker is dropped instead of later crashing maskSecret().
- loadSettings guards against array values (typeof [] === 'object'),
which would otherwise overlay numeric keys onto process.env.
- Admin SecretInput uses the bare id so the shared component's
<Label htmlFor> stays associated (only one ProviderDetail mounts).
- Add tests: marker-secret rejection, array-values guard, bedrock
multi-secret round-trip.
313 lines
11 KiB
TypeScript
313 lines
11 KiB
TypeScript
import { Eye, EyeOff, X } from "lucide-react"
|
|
import { useState } from "react"
|
|
import { Button } from "@/components/ui/button"
|
|
import { Input } from "@/components/ui/input"
|
|
import { Label } from "@/components/ui/label"
|
|
import {
|
|
Select,
|
|
SelectContent,
|
|
SelectItem,
|
|
SelectTrigger,
|
|
SelectValue,
|
|
} from "@/components/ui/select"
|
|
import { Switch } from "@/components/ui/switch"
|
|
import { useDictionary } from "@/hooks/use-dictionary"
|
|
import type { SettingDef } from "@/lib/admin/settings-registry"
|
|
import { formatMessage } from "@/lib/i18n/utils"
|
|
import { cn } from "@/lib/utils"
|
|
import {
|
|
isSecretValue,
|
|
type SecretValue,
|
|
type SettingState,
|
|
savedTextOf,
|
|
} from "./admin-shared"
|
|
|
|
// ── Small shared UI bits ─────────────────────────────────────────────
|
|
|
|
export function SourceChip({ source }: { source: "file" | "env" | "default" }) {
|
|
const dict = useDictionary()
|
|
if (source === "default") return null
|
|
return (
|
|
<span
|
|
className={cn(
|
|
"rounded px-1.5 py-0.5 text-[10px] font-medium uppercase tracking-wide",
|
|
source === "file"
|
|
? "bg-primary/10 text-primary"
|
|
: "bg-muted text-muted-foreground",
|
|
)}
|
|
title={
|
|
source === "file"
|
|
? dict.admin.sourceSavedTitle
|
|
: dict.admin.sourceEnvTitle
|
|
}
|
|
>
|
|
{source === "file" ? dict.admin.sourceSaved : dict.admin.sourceEnv}
|
|
</span>
|
|
)
|
|
}
|
|
|
|
export function RestartBadge() {
|
|
const dict = useDictionary()
|
|
return (
|
|
<span className="rounded bg-amber-500/10 px-1.5 py-0.5 text-[10px] font-medium uppercase tracking-wide text-amber-600 dark:text-amber-400">
|
|
{dict.admin.restartRequired}
|
|
</span>
|
|
)
|
|
}
|
|
|
|
// Secret input: shows masked hint as placeholder, typing replaces.
|
|
// With keepOnEmpty, clearing the field reverts to the stored value
|
|
// ("keep") instead of deleting it — explicit deletion is via the X button.
|
|
export function SecretInput({
|
|
id,
|
|
value,
|
|
disabled,
|
|
keepOnEmpty,
|
|
onChange,
|
|
}: {
|
|
id: string
|
|
value: string | SecretValue | undefined
|
|
disabled?: boolean
|
|
keepOnEmpty?: boolean
|
|
onChange: (value: string | SecretValue) => void
|
|
}) {
|
|
const dict = useDictionary()
|
|
const [show, setShow] = useState(false)
|
|
// The stored marker as it was at mount, to revert to on empty
|
|
const [original] = useState(value)
|
|
const hadStored = isSecretValue(original)
|
|
const text = typeof value === "string" ? value : ""
|
|
const placeholder = isSecretValue(value)
|
|
? formatMessage(dict.admin.savedReplace, { hint: value.hint })
|
|
: dict.admin.notSet
|
|
const handleText = (t: string) => {
|
|
if (t === "" && keepOnEmpty && hadStored && original) {
|
|
onChange(original)
|
|
} else {
|
|
onChange(t)
|
|
}
|
|
}
|
|
return (
|
|
<div className="flex items-center gap-1">
|
|
<Input
|
|
id={id}
|
|
type={show ? "text" : "password"}
|
|
value={text}
|
|
disabled={disabled}
|
|
spellCheck={false}
|
|
autoComplete="off"
|
|
placeholder={placeholder}
|
|
className="h-9 font-mono text-xs"
|
|
onChange={(e) => handleText(e.target.value)}
|
|
/>
|
|
<Button
|
|
type="button"
|
|
variant="ghost"
|
|
size="icon"
|
|
className="shrink-0"
|
|
aria-label={show ? dict.admin.hideValue : dict.admin.showValue}
|
|
onClick={() => setShow((s) => !s)}
|
|
>
|
|
{show ? (
|
|
<EyeOff className="h-4 w-4" aria-hidden="true" />
|
|
) : (
|
|
<Eye className="h-4 w-4" aria-hidden="true" />
|
|
)}
|
|
</Button>
|
|
{keepOnEmpty && (hadStored || text) && !disabled && (
|
|
<Button
|
|
type="button"
|
|
variant="ghost"
|
|
size="icon"
|
|
className="shrink-0"
|
|
aria-label={dict.admin.removeValue}
|
|
title={dict.admin.removeValueTitle}
|
|
onClick={() => onChange("")}
|
|
>
|
|
<X className="h-4 w-4" aria-hidden="true" />
|
|
</Button>
|
|
)}
|
|
</div>
|
|
)
|
|
}
|
|
|
|
// ── General settings field (registry-driven) ─────────────────────────
|
|
|
|
export function SettingField({
|
|
def,
|
|
state,
|
|
pendingValue,
|
|
error,
|
|
disabled,
|
|
onChange,
|
|
}: {
|
|
def: SettingDef
|
|
state: SettingState | undefined
|
|
pendingValue: string | null | undefined
|
|
error?: string
|
|
disabled: boolean
|
|
onChange: (value: string | null) => void
|
|
}) {
|
|
const dict = useDictionary()
|
|
const isDirty = pendingValue !== undefined
|
|
const source = state?.source ?? "default"
|
|
const currentValue = isDirty ? (pendingValue ?? "") : savedTextOf(state)
|
|
const secretState = state && isSecretValue(state.value) ? state.value : null
|
|
|
|
// Localized label/description keyed by env var name, falling back to the
|
|
// registry's English (the registry stays canonical for the server).
|
|
const t = (
|
|
dict.admin.settings as Record<
|
|
string,
|
|
{ label?: string; description?: string } | undefined
|
|
>
|
|
)[def.key]
|
|
const label = t?.label ?? def.label
|
|
const description = t?.description ?? def.description
|
|
|
|
const inputId = `setting-${def.key}`
|
|
const errorId = `${inputId}-error`
|
|
|
|
let control: React.ReactNode
|
|
switch (def.type) {
|
|
case "boolean": {
|
|
// When unset, reflect the built-in runtime default so the toggle
|
|
// matches actual behavior (e.g. ALLOW_PRIVATE_URLS defaults on).
|
|
const effective =
|
|
currentValue !== "" ? currentValue : (def.default ?? "false")
|
|
// A saved boolean can be cleared back to its env/default value.
|
|
const canClear =
|
|
(isDirty && pendingValue !== null) || source === "file"
|
|
control = (
|
|
<div className="flex items-center gap-3">
|
|
<Switch
|
|
id={inputId}
|
|
checked={effective === "true"}
|
|
disabled={disabled}
|
|
onCheckedChange={(checked) =>
|
|
onChange(checked ? "true" : "false")
|
|
}
|
|
/>
|
|
{canClear && !disabled && (
|
|
<Button
|
|
type="button"
|
|
variant="ghost"
|
|
size="sm"
|
|
className="h-7 px-2 text-xs text-muted-foreground"
|
|
onClick={() => onChange(null)}
|
|
>
|
|
{dict.admin.resetToDefault}
|
|
</Button>
|
|
)}
|
|
</div>
|
|
)
|
|
break
|
|
}
|
|
case "enum":
|
|
control = (
|
|
<Select
|
|
value={currentValue || undefined}
|
|
disabled={disabled}
|
|
onValueChange={onChange}
|
|
>
|
|
<SelectTrigger id={inputId} className="w-full max-w-xs">
|
|
<SelectValue placeholder={dict.admin.notSet} />
|
|
</SelectTrigger>
|
|
<SelectContent>
|
|
{def.options?.map((opt) => (
|
|
<SelectItem key={opt} value={opt}>
|
|
{opt}
|
|
</SelectItem>
|
|
))}
|
|
</SelectContent>
|
|
</Select>
|
|
)
|
|
break
|
|
case "secret":
|
|
control = (
|
|
<div className="w-full max-w-md">
|
|
<SecretInput
|
|
id={inputId}
|
|
value={
|
|
isDirty
|
|
? (pendingValue ?? "")
|
|
: (secretState ?? currentValue)
|
|
}
|
|
disabled={disabled}
|
|
onChange={(v) =>
|
|
onChange(typeof v === "string" ? v : "")
|
|
}
|
|
/>
|
|
</div>
|
|
)
|
|
break
|
|
case "number":
|
|
control = (
|
|
<Input
|
|
id={inputId}
|
|
type="number"
|
|
inputMode="numeric"
|
|
min={def.min}
|
|
max={def.max}
|
|
value={currentValue}
|
|
disabled={disabled}
|
|
placeholder={def.placeholder ?? dict.admin.notSet}
|
|
className="w-full max-w-xs tabular-nums"
|
|
aria-invalid={!!error}
|
|
aria-describedby={error ? errorId : undefined}
|
|
onChange={(e) => onChange(e.target.value)}
|
|
/>
|
|
)
|
|
break
|
|
default:
|
|
control = (
|
|
<Input
|
|
id={inputId}
|
|
type="text"
|
|
value={currentValue}
|
|
disabled={disabled}
|
|
spellCheck={false}
|
|
autoComplete="off"
|
|
placeholder={def.placeholder ?? dict.admin.notSet}
|
|
className="w-full max-w-md"
|
|
aria-invalid={!!error}
|
|
aria-describedby={error ? errorId : undefined}
|
|
onChange={(e) => onChange(e.target.value)}
|
|
/>
|
|
)
|
|
}
|
|
|
|
return (
|
|
<div className="border-b border-border/60 py-4 last:border-b-0">
|
|
<div className="mb-1.5 flex flex-wrap items-center gap-2">
|
|
<Label htmlFor={inputId} className="text-sm font-medium">
|
|
{label}
|
|
</Label>
|
|
<SourceChip source={source} />
|
|
{def.restartRequired && <RestartBadge />}
|
|
{isDirty && (
|
|
<span className="rounded bg-blue-500/10 px-1.5 py-0.5 text-[10px] font-medium uppercase tracking-wide text-blue-600 dark:text-blue-400">
|
|
{dict.admin.modified}
|
|
</span>
|
|
)}
|
|
</div>
|
|
{description && (
|
|
<p className="mb-2 max-w-prose text-xs text-muted-foreground">
|
|
{description}
|
|
</p>
|
|
)}
|
|
{control}
|
|
<p
|
|
id={errorId}
|
|
className={cn(
|
|
"text-xs text-destructive",
|
|
error ? "mt-1.5" : "sr-only",
|
|
)}
|
|
aria-live="polite"
|
|
>
|
|
{error ?? ""}
|
|
</p>
|
|
</div>
|
|
)
|
|
}
|