feat(FR-2209): control header project selector, confirm admin-mode switch, and fix sider go-back on admin pages (#6656)

Resolves #6645 (FR-2553)

Part of FR-2209 Project Admin Management stack (PR-1b).
Stacks on #6653.

## Summary
- In admin mode, when a project-admin user selects a project they are not an admin of in the header `ProjectSelect`, a confirm modal asks before exiting admin mode
- Confirm modal content includes the target project name (new `{{projectName}}` placeholder in `header.SwitchOutOfAdminConfirmContent`)
- While the modal is open, the selector optimistically shows the target project with a loading state; cancel reverts to the current project, confirm commits and navigates back to the last-visited general page
- Fix sider "go back" button silently doing nothing on admin category pages (e.g. `/project-admin-users`) for users whose effective admin role filters the page out of their admin menu — superadmin visiting via URL, or a project-admin whose current project lacks admin rights. Added a role-independent `isCurrentPathAdminCategory` flag (derived from `ALL_ADMIN_PAGE_KEYS` + `PROJECT_ADMIN_PAGE_KEY_SET` + `storage-settings`) and used it to guard `goBackPath` writes, so an admin path is never stored as the "last visited general page"
- Simplify `useCurrentUserProjectRoles`: drop `isProjectAdminForId`/`deriveProjectAdminIds` helpers, `MyRolesAssignmentNode` shape, and `rawAssignments`. `projectAdminIds` now contains full project UUIDs sourced from `role.scopes` (new backend schema), so call sites use plain `Array.includes` against `useCurrentProject().id`. `useEffectiveAdminRole` correctly compares `currentProjectId` against this simplified list.
- Translate the two new `header.*` keys into all 19 target languages
- Regenerate `data/schema.graphql` against core 26.4.1 (adds `AddRevisionOptions` and updates version annotations)

## Verification
- `bash scripts/verify.sh` → `=== ALL PASS ===`

## Test plan
- [ ] As a project-admin user, enter admin mode and switch the header project selector to a project where you are not an admin → confirm modal appears with the target project name
- [ ] Cancel the modal → selector reverts to the previously selected project, no navigation occurs
- [ ] Confirm the modal → project switches, admin mode exits, UI navigates to the last-visited general page
- [ ] Repeat for superadmin and domain admin: the selector remains visible and switching does not trigger the modal (no regression)
- [ ] On `/project-admin-users` as a project admin, click the sider "go back" button → navigates to the previously visited general page (not the same admin page)
- [ ] Visit `/project-admin-users` as a superadmin via URL, navigate to `/session`, then enter admin mode and use "go back" → returns to `/session` (not `/project-admin-users`)

Author: yomybaby

data/schema.graphql

@@ -5,19 +5,26 @@
 import {
   useCurrentDomainValue,
   useSuspendedBackendaiClient,
+  useWebUINavigate,
 } from '../../hooks';
 import {
   useCurrentProjectValue,
   useSetCurrentProject,
 } from '../../hooks/useCurrentProject';
+import {
+  useCurrentUserProjectRoles,
+  useEffectiveAdminRole,
+} from '../../hooks/useCurrentUserProjectRoles';
+import { useWebUIMenuItems } from '../../hooks/useWebUIMenuItems';
 import BAINotificationButton from '../BAINotificationButton';
 import LoginSessionExtendButton from '../LoginSessionExtendButton';
 import ProjectSelect from '../ProjectSelect';
 import ReverseThemeProvider from '../ReverseThemeProvider';
 import UserDropdownMenu from '../UserDropdownMenu';
 import WEBUIHelpButton from '../WEBUIHelpButton';
 import WebUIThemeToggleButton from '../WebUIThemeToggleButton';
-import { theme, Button, Typography, Grid, Divider } from 'antd';
+import { useSessionStorageState } from 'ahooks';
+import { theme, Button, Modal, Typography, Grid, Divider } from 'antd';
 import { createStyles } from 'antd-style';
 import { BAIFlex, BAIFlexProps } from 'backend.ai-ui';
 import { MenuIcon } from 'lucide-react';
@@ -48,12 +55,43 @@ const WebUIHeader: React.FC<WebUIHeaderProps> = ({ onClickMenuIcon }) => {
   const setCurrentProject = useSetCurrentProject();
   const baiClient = useSuspendedBackendaiClient();
   const gridBreakpoint = Grid.useBreakpoint();
+  const webuiNavigate = useWebUINavigate();
+  const { isSelectedAdminCategoryMenu, defaultMenuPath } = useWebUIMenuItems();
+  const effectiveAdminRole = useEffectiveAdminRole();
+  const { projectAdminIds } = useCurrentUserProjectRoles();
+
+  // Last visited general page — shared with WebUISider's "go back" button so
+  // that exiting admin mode returns the user to where they were last. See
+  // WebUISider.tsx (`backendaiwebui.last_visited_general_path`).
+  const [goBackPath] = useSessionStorageState<string | undefined>(
+    'backendaiwebui.last_visited_general_path',
+  );
 
   const [isPendingProjectChanged, startProjectChangedTransition] =
     useTransition();
   const [optimisticProjectId, setOptimisticProjectId] = useState(
     currentProject.id,
   );
+  // Tracks whether the admin-exit confirm modal is currently open. While open,
+  // the select optimistically shows the target project and a loading state,
+  // even though we haven't committed the change yet.
+  const [isConfirmingProjectSwitch, setIsConfirmingProjectSwitch] =
+    useState(false);
+  const isProjectChanging =
+    isPendingProjectChanged || isConfirmingProjectSwitch;
+
+  const [modal, modalContextHolder] = Modal.useModal();
+
+  const applyProjectChange = (projectInfo: {
+    projectId: string;
+    projectName: string;
+    projectResourcePolicy: unknown;
+  }) => {
+    setOptimisticProjectId(projectInfo.projectId);
+    startProjectChangedTransition(() => {
+      setCurrentProject(projectInfo);
+    });
+  };
 
   const { styles } = useStyles();
 
@@ -107,19 +145,55 @@ const WebUIHeader: React.FC<WebUIHeaderProps> = ({ onClickMenuIcon }) => {
               minWidth: 100,
               maxWidth: gridBreakpoint.lg ? undefined : 150,
             }}
-            loading={isPendingProjectChanged}
-            disabled={isPendingProjectChanged}
+            loading={isProjectChanging}
+            disabled={isProjectChanging}
             className="non-draggable"
             showSearch
             domain={currentDomainName}
-            value={
-              isPendingProjectChanged ? optimisticProjectId : currentProject?.id
-            }
+            value={isProjectChanging ? optimisticProjectId : currentProject?.id}
             onSelectProject={(projectInfo) => {
-              setOptimisticProjectId(projectInfo.projectId);
-              startProjectChangedTransition(() => {
-                setCurrentProject(projectInfo);
-              });
+              const isTargetProjectAdmin = projectAdminIds.includes(
+                projectInfo.projectId,
+              );
+
+              // In admin mode, switching to a project the user is NOT a
+              // project-admin of means leaving admin mode. Confirm first so
+              // the user doesn't accidentally lose their admin context.
+              if (
+                isSelectedAdminCategoryMenu &&
+                effectiveAdminRole === 'currentProjectAdmin' &&
+                !isTargetProjectAdmin
+              ) {
+                // Optimistically show the target project (with loading) while
+                // the confirm modal is open, so the user sees where they are
+                // about to switch to.
+                setOptimisticProjectId(projectInfo.projectId);
+                setIsConfirmingProjectSwitch(true);
+                modal.confirm({
+                  title: t('header.SwitchOutOfAdminConfirmTitle'),
+                  content: t('header.SwitchOutOfAdminConfirmContent', {
+                    projectName: projectInfo.projectName,
+                  }),
+                  okText: t('button.Confirm'),
+                  cancelText: t('button.Cancel'),
+                  onOk: () => {
+                    setIsConfirmingProjectSwitch(false);
+                    applyProjectChange(projectInfo);
+                    // Exit admin mode by navigating to the last-visited
+                    // general page (or the default menu path as fallback).
+                    webuiNavigate(goBackPath || defaultMenuPath);
+                  },
+                  onCancel: () => {
+                    // Revert the optimistic selection back to the current
+                    // project so the dropdown reflects the unchanged state.
+                    setIsConfirmingProjectSwitch(false);
+                    setOptimisticProjectId(currentProject.id);
+                  },
+                });
+                return;
+              }
+
+              applyProjectChange(projectInfo);
             }}
           />
         </Suspense>
@@ -163,6 +237,7 @@ const WebUIHeader: React.FC<WebUIHeaderProps> = ({ onClickMenuIcon }) => {
           }}
         />
       </BAIFlex>
+      {modalContextHolder}
     </BAIFlex>
   );
 };

react/src/components/MainLayout/WebUIHeader.tsx

@@ -27,7 +27,7 @@ import {
 } from 'antd';
 import { filterOutEmpty, BAIFlex } from 'backend.ai-ui';
 import * as _ from 'lodash-es';
-import { ArrowLeftIcon, SettingsIcon } from 'lucide-react';
+import { ArrowLeftIcon, ShieldUserIcon } from 'lucide-react';
 import React, { useContext, useEffect, useRef } from 'react';
 import { useTranslation } from 'react-i18next';
 import { useLocation } from 'react-router-dom';
@@ -71,6 +71,7 @@ const WebUISider: React.FC<WebUISiderProps> = (props) => {
     groupedGeneralMenu,
     groupedAdminMenu,
     isSelectedAdminCategoryMenu,
+    isCurrentPathAdminCategory,
     isCurrentPageUnauthorized,
     firstAvailableAdminMenuItem,
     defaultMenuPath,
@@ -82,12 +83,19 @@ const WebUISider: React.FC<WebUISiderProps> = (props) => {
     'backendaiwebui.last_visited_general_path',
   );
 
-  // Store the last visited general menu path when the admin category menu is not selected
+  // Store the last visited general (non-admin) menu path so the admin header's
+  // "go back" button can return the user to where they were. Use the role-
+  // independent `isCurrentPathAdminCategory` instead of
+  // `isSelectedAdminCategoryMenu`: the latter is role-filtered and would
+  // misclassify an admin page as "general" for users whose admin menu
+  // excludes that page (e.g. superadmin on `/project-admin-users`), which
+  // would pollute `goBackPath` with an admin path and make a later go-back
+  // navigate to the same page.
   useEffect(() => {
-    if (isSelectedAdminCategoryMenu === false) {
+    if (!isCurrentPathAdminCategory) {
       setGoBackPath(location.pathname);
     }
-  }, [setGoBackPath, location.pathname, isSelectedAdminCategoryMenu]);
+  }, [setGoBackPath, location.pathname, isCurrentPathAdminCategory]);
 
   const adminHeader = (
     <BAIFlex align="center">
@@ -222,7 +230,7 @@ const WebUISider: React.FC<WebUISiderProps> = (props) => {
                     {t('webui.menu.AdminSettings')}
                   </WebUILink>
                 ),
-                icon: <SettingsIcon style={{ color: token.colorInfo }} />,
+                icon: <ShieldUserIcon style={{ color: token.colorInfo }} />,
                 key: 'admin-settings',
               },
               ...groupedGeneralMenu,

react/src/components/MainLayout/WebUISider.tsx

@@ -6,10 +6,7 @@ import { ProjectSelectorQuery } from '../__generated__/ProjectSelectorQuery.grap
 import { useSuspendedBackendaiClient } from '../hooks';
 import { useCurrentUserInfo, useCurrentUserRole } from '../hooks/backendai';
 import useControllableState_deprecated from '../hooks/useControllableState';
-import {
-  isProjectAdminForId,
-  useCurrentUserProjectRoles,
-} from '../hooks/useCurrentUserProjectRoles';
+import { useCurrentUserProjectRoles } from '../hooks/useCurrentUserProjectRoles';
 import { theme, Tooltip } from 'antd';
 import { BAIFlex, BAISelect, BAISelectProps } from 'backend.ai-ui';
 import * as _ from 'lodash-es';
@@ -132,7 +129,8 @@ const ProjectSelect: React.FC<ProjectSelectProps> = ({
         label: getLabel(key),
         title: key,
         options: _.map(_.sortBy(value, 'name'), (project) => {
-          const showBadge = isProjectAdminForId(project?.id, projectAdminIds);
+          const showBadge =
+            !!project?.id && projectAdminIds.includes(project.id);
           return {
             label: showBadge ? (
               <BAIFlex gap={token.marginXS} align="center">