Dashboard

Bocnex administration

Organizers—

Pending Events—

Approved Events—

Votes Recorded—

Recent pending events

Add homepage banner

Current banners

Total votes—

Free—

Code—

Paid—

Views—

Shares—

CTA Clicks—

Saves—

Admin account

Organizer verification and event approval are separate systems. Verifying an organizer does not approve their events.

const URL='https://kdobbfewvrzawdsmydet.supabase.co',KEY='sb_publishable_2nJkWJX8Sw26iRRHrWDkVw_-3mQRjPN';
const bootMarker=document.getElementById('bcxadm-boot-marker'); if(bootMarker) bootMarker.style.display='none';
const loginMsg0=document.getElementById('loginMsg');
if(!window.supabase){ if(loginMsg0) loginMsg0.textContent='Could not load the secure Bocnex connection. Check your internet connection and reload this page.'; throw new Error('Supabase library failed to load'); }
const sb=window.supabase.createClient(URL,KEY,{auth:{persistSession:true,autoRefreshToken:true,detectSessionInUrl:true}});let me=null,profiles=[],events=[],slides=[],votes=[],promos=[];
if(loginMsg0) loginMsg0.textContent='Sign in with your Bocnex administrator account.';
const $=id=>document.getElementById(id),esc=s=>String(s??'').replace(/[&<>"']/g,c=>({'&':'&amp;','<':'&lt;','>':'&gt;','"':'&quot;',"'":'&#39;'}[c]));
function toast(t){$('bcxadm-toast').textContent=t;$('bcxadm-toast').classList.add('show');setTimeout(()=>$('bcxadm-toast').classList.remove('show'),2600)}function closeModal(){$('bcxadm-modal').classList.remove('show')}function modal(h){$('modalBody').innerHTML=h;$('bcxadm-modal').classList.add('show')}
function busy(btn,on,label){if(!btn)return;if(on){btn.dataset.old=btn.innerHTML;btn.disabled=true;btn.innerHTML='<span class="bcxadm-spinner"></span>'+label}else{btn.disabled=false;btn.innerHTML=btn.dataset.old||label}}
async function bcxadmRealLogin(){let b=$('loginBtn');busy(b,true,'Signing in…');$('loginMsg').textContent='Checking administrator access…';let {data,error}=await sb.auth.signInWithPassword({email:$('email').value.trim(),password:$('password').value});if(error){$('loginMsg').textContent=error.message;busy(b,false,'Sign in');return}await enter(data.user);busy(b,false,'Sign in')}
async function enter(user){let {data:p,error}=await sb.from('profiles').select('*').eq('id',user.id).single();if(error||!p||p.role!=='admin'||p.account_status!=='active'){await sb.auth.signOut();$('loginMsg').textContent='This account does not have active Bocnex Admin access.';return}me=p;$('bcxadm-login').style.setProperty('display','none','important');$('bcxadm-shell').style.setProperty('display','grid','important');$('adminInfo').innerHTML='<b>'+esc(p.display_name||p.full_name||user.email)+'</b><br>'+esc(user.email);await refreshAll()}
async function logout(){await sb.auth.signOut();location.reload()}
window.bcxadmRestoreSession=async function(){
  try{
    const {data:{session},error}=await sb.auth.getSession();
    if(error) throw error;
    if(session&&session.user){ await enter(session.user); return true; }
    $('bcxadm-login').style.setProperty('display','grid','important');
    $('loginMsg').textContent='Ready. Enter your admin email and password.';
    return false;
  }catch(e){
    $('bcxadm-login').style.setProperty('display','grid','important');
    $('loginMsg').textContent='Could not restore the admin session. Please sign in.';
    return false;
  }
}
async function refreshAll(){
  let [pr,ev,sl,vo,pi]=await Promise.all([
    sb.from('profiles').select('*').order('created_at',{ascending:false}),
    sb.from('events').select('*').order('created_at',{ascending:false}),
    sb.from('homepage_slides').select('*').order('sort_order'),
    sb.from('votes').select('id,event_id,vote_type,quantity,created_at').order('created_at',{ascending:false}).limit(250),
    sb.from('promotion_interactions').select('id,event_id,interaction_type,created_at').order('created_at',{ascending:false}).limit(500)
  ]);
  profiles=pr.data||[]; events=ev.data||[]; slides=sl.data||[]; votes=vo.data||[]; promos=pi.data||[];
  renderAll();
  if(ev.error){
    const msg='<div class="bcxadm-empty" style="color:#b52626"><b>Could not load events</b><br>'+esc(ev.error.message)+'</div>';
    $('dashPending').innerHTML=msg; $('pendingList').innerHTML=msg;
  }
}
function go(id,b){document.querySelectorAll('.bcxadm-page').forEach(x=>x.classList.remove('bcxadm-active'));$(id).classList.add('bcxadm-active');document.querySelectorAll('.bcxadm-nav').forEach(x=>x.classList.remove('bcxadm-active'));(b||document.querySelector('[data-page="'+id+'"]'))?.classList.add('bcxadm-active');$('title').textContent={dashboard:'Dashboard',pending:'Pending Events',events:'All Events',organizers:'Organizers',slider:'Homepage Slider',voting:'Voting Activity',promotions:'Promotions',settings:'Settings'}[id]||id}
function status(e){return '<span class="bcxadm-badge '+esc(e.moderation_status)+'">'+esc((e.moderation_status||'draft').replaceAll('_',' '))+'</span>'}function owner(id){let p=profiles.find(x=>x.id===id);return p?.display_name||p?.organization_name||p?.full_name||'Organizer'}
function eventRow(e,review=false){return '<div class="bcxadm-row"><div><strong>'+esc(e.title)+'</strong><div class="bcxadm-muted">'+esc(e.event_type)+' · '+esc(owner(e.organizer_id))+' · '+status(e)+'</div></div><div class="bcxadm-actions"><button class="bcxadm-btn bcxadm-soft" onclick="viewEvent(\''+e.id+'\')">View</button>'+(review?'<button class="bcxadm-btn bcxadm-primary" onclick="reviewEvent(\''+e.id+'\')">Review</button>':'')+'</div></div>'}
function renderAll(){$('cOrg').textContent=profiles.filter(x=>x.role==='organizer').length;$('cPending').textContent=events.filter(x=>x.moderation_status==='pending_review').length;$('cApproved').textContent=events.filter(x=>x.moderation_status==='approved').length;$('cVotes').textContent=votes.reduce((a,x)=>a+(+x.quantity||0),0);let pe=events.filter(x=>x.moderation_status==='pending_review');$('dashPending').innerHTML=pe.slice(0,6).map(x=>eventRow(x,true)).join('')||'<div class="bcxadm-empty">No pending events.</div>';$('pendingList').innerHTML=pe.map(x=>eventRow(x,true)).join('')||'<div class="bcxadm-empty">No events waiting for review.</div>';$('eventList').innerHTML=events.map(x=>eventRow(x,false)).join('')||'<div class="bcxadm-empty">No events.</div>';renderOrganizers();renderSlides();renderVotes();renderPromos()}
function renderOrganizers(){let q=($('orgSearch')?.value||'').toLowerCase(),a=profiles.filter(x=>x.role==='organizer'&&(!q||[x.full_name,x.display_name,x.organization_name,x.email,x.phone,x.whatsapp_number].join(' ').toLowerCase().includes(q)));$('orgList').innerHTML=a.map(p=>'<div class="bcxadm-row"><div class="bcxadm-who"><img class="bcxadm-avatar" src="'+esc(p.profile_photo_url||'')+'"><div><strong>'+esc(p.display_name||p.full_name||'Organizer')+' '+(p.is_verified?'<span class="bcxadm-badge bcxadm-verified">✓ Verified</span>':'')+'</strong><div class="bcxadm-muted">'+esc(p.organization_name||p.phone||p.country||'')+' · '+esc(p.account_status)+'</div></div></div><div class="bcxadm-actions"><button class="bcxadm-btn bcxadm-soft" onclick="viewOrganizer(\''+p.id+'\')">View</button><button class="bcxadm-btn '+(p.is_verified?'bcxadm-danger':'bcxadm-primary')+'" onclick="setVerify(\''+p.id+'\','+(!p.is_verified)+',this)">'+(p.is_verified?'Unverify':'Verify')+'</button><button class="bcxadm-btn '+(p.account_status==='active'?'bcxadm-danger':'bcxadm-green')+'" onclick="setAccount(\''+p.id+'\',\''+(p.account_status==='active'?'suspended':'active')+'\',this)">'+(p.account_status==='active'?'Suspend':'Restore')+'</button></div></div>').join('')||'<div class="bcxadm-empty">No organizers found.</div>'}
function viewOrganizer(id){let p=profiles.find(x=>x.id===id),oe=events.filter(x=>x.organizer_id===id);modal('<h2>'+esc(p.display_name||p.full_name)+'</h2><p>'+ (p.is_verified?'<span class="bcxadm-badge bcxadm-verified">✓ Verified organizer</span>':'<span class="bcxadm-badge">Not verified</span>')+'</p><p class="bcxadm-muted"><b>Full name:</b> '+esc(p.full_name)+'<br><b>Organization:</b> '+esc(p.organization_name)+'<br><b>Type:</b> '+esc(p.organization_type)+'<br><b>Phone:</b> '+esc(p.phone)+'<br><b>WhatsApp:</b> '+esc(p.whatsapp_number)+'<br><b>Location:</b> '+esc([p.city,p.country].filter(Boolean).join(', '))+'<br><b>Website:</b> '+esc(p.website_url)+'<br><b>Bio:</b> '+esc(p.bio)+'</p><h3>Events ('+oe.length+')</h3>'+oe.map(x=>eventRow(x,x.moderation_status==='pending_review')).join('')+'<button class="bcxadm-btn bcxadm-soft" onclick="closeModal()">Close</button>')}
async function setVerify(id,val,b){busy(b,true,val?'Verifying…':'Updating…');let note=val?prompt('Optional admin verification note:',''):'Unverified by Bocnex Admin';let {error}=await sb.rpc('admin_set_organizer_verification',{p_organizer_id:id,p_verified:val,p_note:note});if(error)toast(error.message);else{toast(val?'Organizer verified':'Verification removed');await refreshAll()}busy(b,false,'Done')}
async function setAccount(id,s,b){if(!confirm((s==='suspended'?'Suspend':'Restore')+' this organizer account?'))return;busy(b,true,'Updating…');let {error}=await sb.rpc('admin_set_account_status',{p_user_id:id,p_status:s});if(error)toast(error.message);else{toast('Account updated');await refreshAll()}busy(b,false,'Done')}
async function viewEvent(id){let e=events.find(x=>x.id===id),{data:cats}=await sb.from('categories').select('*').eq('event_id',id),{data:noms}=await sb.from('nominees').select('*').eq('event_id',id);modal('<h2>'+esc(e.title)+'</h2>'+status(e)+'<p class="bcxadm-muted"><b>Organizer:</b> '+esc(owner(e.organizer_id))+'<br><b>Type:</b> '+esc(e.event_type)+'<br><b>Description:</b> '+esc(e.description)+'<br><b>Location:</b> '+esc(e.location)+'<br><b>Start:</b> '+esc(e.start_at)+'<br><b>End:</b> '+esc(e.end_at)+'</p><h3>Voting content</h3><p class="bcxadm-muted">'+(cats?.length||0)+' categories · '+(noms?.length||0)+' nominees</p>'+(e.cover_url?'<img src="'+esc(e.cover_url)+'" style="width:100%;border-radius:14px;max-height:280px;object-fit:cover">':'')+'<br><button class="bcxadm-btn bcxadm-soft" onclick="closeModal()">Close</button>')}
async function reviewEvent(id){let e=events.find(x=>x.id===id);modal('<h2>Review Event</h2><p><b>'+esc(e.title)+'</b></p><p class="bcxadm-muted">Organizer: '+esc(owner(e.organizer_id))+'</p><textarea id="reviewNote" class="bcxadm-field" rows="4" placeholder="Admin note / reason"><\/textarea><div class="bcxadm-actions"><button class="bcxadm-btn bcxadm-green" onclick="doReview(\''+id+'\',\'approved\',this)">Approve</button><button class="bcxadm-btn bcxadm-soft" onclick="doReview(\''+id+'\',\'changes_required\',this)">Request Changes</button><button class="bcxadm-btn bcxadm-danger" onclick="doReview(\''+id+'\',\'rejected\',this)">Reject</button><button class="bcxadm-btn bcxadm-danger" onclick="doReview(\''+id+'\',\'suspended\',this)">Suspend</button></div>')}
async function doReview(id,action,b){let note=$('reviewNote')?.value||null;busy(b,true,'Processing…');let {error}=await sb.rpc('admin_review_event',{p_event_id:id,p_action:action,p_note:note});if(error)toast(error.message);else{closeModal();toast('Event '+action.replaceAll('_',' '));await refreshAll()}busy(b,false,'Done')}
function renderSlides(){$('slideList').innerHTML=slides.map(s=>'<div class="bcxadm-row"><div class="bcxadm-who"><img class="bcxadm-slideimg" src="'+esc(s.image_url)+'"><div><strong>'+esc(s.title)+'</strong><div class="bcxadm-muted">Order '+s.sort_order+' · '+(s.is_active?'Active':'Hidden')+'</div></div></div><div class="bcxadm-actions"><button class="bcxadm-btn bcxadm-soft" onclick="toggleSlide(\''+s.id+'\','+(!s.is_active)+')">'+(s.is_active?'Hide':'Show')+'</button><button class="bcxadm-btn bcxadm-danger" onclick="deleteSlide(\''+s.id+'\',\''+encodeURIComponent(s.image_url)+'\')">Delete</button></div></div>').join('')||'<div class="bcxadm-empty">No homepage banners yet.</div>'}
async function addSlide(){let f=$('slideFile').files[0],b=$('slideAdd');if(!f)return toast('Choose a banner image');if(f.size>6*1024*1024)return toast('Image must be under 6 MB');busy(b,true,'Uploading…');let ext=(f.name.split('.').pop()||'webp').toLowerCase(),path='admin/'+crypto.randomUUID()+'.'+ext,{error:u}=await sb.storage.from('bocnex-sliders').upload(path,f,{upsert:false});if(u){toast(u.message);busy(b,false,'Upload banner');return}let pub=sb.storage.from('bocnex-sliders').getPublicUrl(path).data.publicUrl;let {error}=await sb.from('homepage_slides').insert({title:$('slideTitle').value.trim()||'Bocnex',subtitle:$('slideSubtitle').value.trim()||null,image_url:pub,button_label:$('slideButton').value.trim()||null,button_url:$('slideUrl').value.trim()||null,sort_order:+$('slideOrder').value||0,is_active:true,created_by:me.id});if(error){await sb.storage.from('bocnex-sliders').remove([path]);toast(error.message)}else{toast('Banner added');['slideTitle','slideSubtitle','slideButton','slideUrl'].forEach(x=>$(x).value='');$('slideFile').value='';await refreshAll()}busy(b,false,'Upload banner')}
async function toggleSlide(id,v){let {error}=await sb.from('homepage_slides').update({is_active:v}).eq('id',id);if(error)toast(error.message);else await refreshAll()}
async function deleteSlide(id,u){if(!confirm('Delete this homepage banner?'))return;let url=decodeURIComponent(u),mark='/storage/v1/object/public/bocnex-sliders/',path=url.includes(mark)?decodeURIComponent(url.split(mark)[1]):null;if(path)await sb.storage.from('bocnex-sliders').remove([path]);let {error}=await sb.from('homepage_slides').delete().eq('id',id);if(error)toast(error.message);else{toast('Banner deleted');await refreshAll()}}
function renderVotes(){let sum=t=>votes.filter(x=>!t||x.vote_type===t).reduce((a,x)=>a+(+x.quantity||0),0);$('vTotal').textContent=sum();$('vFree').textContent=sum('free');$('vCode').textContent=sum('code');$('vPaid').textContent=sum('paid');$('voteList').innerHTML=votes.slice(0,100).map(v=>'<div class="bcxadm-row"><div><strong>'+esc(v.vote_type)+' vote</strong><div class="bcxadm-muted">'+esc(v.event_id)+' · '+new Date(v.created_at).toLocaleString()+'</div></div><b>'+v.quantity+'</b></div>').join('')||'<div class="bcxadm-empty">No voting activity.</div>'}
function renderPromos(){let c=t=>promos.filter(x=>x.interaction_type===t).length;$('pViews').textContent=c('view');$('pShares').textContent=c('share');$('pClicks').textContent=c('cta_click');$('pSaves').textContent=c('save');$('promoList').innerHTML=promos.slice(0,100).map(p=>'<div class="bcxadm-row"><div><strong>'+esc(p.interaction_type.replaceAll('_',' '))+'</strong><div class="bcxadm-muted">'+esc(p.event_id)+' · '+new Date(p.created_at).toLocaleString()+'</div></div></div>').join('')||'<div class="bcxadm-empty">No promotion activity.</div>'}

0 Comments