Changeset 0.10.0 (#56)

src/js/app.js

@@ -1381,6 +1381,11 @@ function initListeners() {
     document.getElementById('auditPrevBtn')?.addEventListener('click', () => { if (UI._auditPage > 1) UI.loadAuditLog(UI._auditPage - 1); });
     document.getElementById('auditNextBtn')?.addEventListener('click', () => UI.loadAuditLog(UI._auditPage + 1));
 
+    // Admin — usage
+    document.getElementById('usageRefreshBtn')?.addEventListener('click', () => UI.loadAdminUsage());
+    document.getElementById('usagePeriod')?.addEventListener('change', () => UI.loadAdminUsage());
+    document.getElementById('usageGroupBy')?.addEventListener('change', () => UI.loadAdminUsage());
+
     // Input
     const input = document.getElementById('messageInput');
     input.addEventListener('keydown', (e) => {
@@ -1807,6 +1812,23 @@ async function createAdminUser() {
     } catch (e) { UI.toast(e.message, 'error'); }
 }
 
+async function adminResetUserPassword(id, username) {
+    const pw = prompt(
+        `Reset password for "${username}"?\n\n` +
+        `⚠️ WARNING: This will DESTROY the user's personal vault.\n` +
+        `All personal API keys (BYOK) will be permanently deleted.\n` +
+        `The user will need to re-add any personal provider keys.\n\n` +
+        `Enter new password (min 8 chars):`
+    );
+    if (!pw) return;
+    if (pw.length < 8) { UI.toast('Password must be at least 8 characters', 'warning'); return; }
+    if (!confirm(`Final confirmation: Reset password AND destroy personal vault for "${username}"?`)) return;
+    try {
+        await API.adminResetPassword(id, pw);
+        UI.toast(`Password reset for ${username}. Vault destroyed.`, 'success');
+    } catch (e) { UI.toast(e.message, 'error'); }
+}
+
 async function deleteGlobalProvider(id) {
     if (!confirm('Delete this global provider?')) return;
     try { await API.adminDeleteGlobalConfig(id); UI.toast('Provider deleted', 'success'); await UI.loadAdminProviders(); }
@@ -1905,6 +1927,59 @@ async function bulkSetVisibility(visibility) {
     } catch (e) { UI.toast(e.message, 'error'); hint.textContent = 'Failed'; }
 }
 
+// ── Admin Roles ────────────────────────────
+
+async function adminRoleProviderChanged(role, slot) {
+    const provId = document.getElementById(`role-${role}-${slot}-provider`)?.value;
+    const modelSelect = document.getElementById(`role-${role}-${slot}-model`);
+    if (!modelSelect) return;
+
+    modelSelect.innerHTML = '<option value="">— select model —</option>';
+    if (!provId || !window._adminModelList) return;
+
+    const models = window._adminModelList.filter(m => m.provider_config_id === provId);
+    models.forEach(m => {
+        const opt = document.createElement('option');
+        opt.value = m.model_id;
+        opt.textContent = m.display_name || m.model_id;
+        modelSelect.appendChild(opt);
+    });
+}
+
+async function adminSaveRole(role) {
+    const status = document.getElementById(`role-${role}-status`);
+    try {
+        const getBinding = (slot) => {
+            const prov = document.getElementById(`role-${role}-${slot}-provider`)?.value;
+            const model = document.getElementById(`role-${role}-${slot}-model`)?.value;
+            return (prov && model) ? { provider_config_id: prov, model_id: model } : null;
+        };
+        await API.adminUpdateRole(role, {
+            primary: getBinding('primary'),
+            fallback: getBinding('fallback')
+        });
+        if (status) { status.textContent = '✓ Saved'; status.style.color = 'var(--success)'; }
+        setTimeout(() => { if (status) status.textContent = ''; }, 3000);
+    } catch (e) {
+        if (status) { status.textContent = '✗ ' + e.message; status.style.color = 'var(--error)'; }
+    }
+}
+
+async function adminTestRole(role) {
+    const status = document.getElementById(`role-${role}-status`);
+    if (status) { status.textContent = 'Testing...'; status.style.color = 'var(--text-muted)'; }
+    try {
+        const result = await API.adminTestRole(role);
+        if (status) {
+            const fb = result.used_fallback ? ' (fallback)' : '';
+            status.textContent = `✓ ${result.model}${fb}`;
+            status.style.color = 'var(--success)';
+        }
+    } catch (e) {
+        if (status) { status.textContent = '✗ ' + e.message; status.style.color = 'var(--error)'; }
+    }
+}
+
 // ── User Model Preferences ──────────────────
 
 async function toggleUserModelVisibility(modelId, currentlyHidden) {