Refactor giveaway job processing and update environment documentation

- Enhanced the handling of the `giveawayCreate` job in the bot's job processing for improved consistency.
- Clarified the usage of `BOT_TOKEN` in the `.env.example` file for both the bot and WebUI.
- Integrated the `bullmq` dependency into the WebUI package to bolster job management capabilities.

apps/webui/src/app/api/guilds/[guildId]/stats/route.ts

@@ -0,0 +1,46 @@
+import { StatsConfigDashboardPatchSchema } from '@nexumi/shared';
+import { type NextRequest, NextResponse } from 'next/server';
+import { requireGuildAccess, toApiErrorResponse } from '@/lib/auth';
+import { writeDashboardAudit } from '@/lib/audit';
+import { getStatsDashboard, updateStatsDashboard } from '@/lib/module-configs/stats';
+import { prisma } from '@/lib/prisma';
+
+interface RouteParams {
+  params: Promise<{ guildId: string }>;
+}
+
+export async function GET(_request: NextRequest, { params }: RouteParams) {
+  const { guildId } = await params;
+  try {
+    await requireGuildAccess(guildId);
+    const config = await getStatsDashboard(guildId);
+    return NextResponse.json(config);
+  } catch (error) {
+    return toApiErrorResponse(error);
+  }
+}
+
+export async function PATCH(request: NextRequest, { params }: RouteParams) {
+  const { guildId } = await params;
+  try {
+    const session = await requireGuildAccess(guildId);
+    const body = await request.json();
+    const patch = StatsConfigDashboardPatchSchema.parse(body);
+
+    const before = await getStatsDashboard(guildId);
+    const after = await updateStatsDashboard(guildId, patch);
+
+    await writeDashboardAudit(prisma, {
+      guildId,
+      actorUserId: session.user.id,
+      action: 'stats.update',
+      path: `/dashboard/${guildId}/stats`,
+      before,
+      after
+    });
+
+    return NextResponse.json(after);
+  } catch (error) {
+    return toApiErrorResponse(error);
+  }
+}

apps/webui/src/app/api/guilds/[guildId]/suggestions/items/[suggestionId]/action/route.ts

@@ -0,0 +1,34 @@
+import { SuggestionActionSchema } from '@nexumi/shared';
+import { type NextRequest, NextResponse } from 'next/server';
+import { requireGuildAccess, toApiErrorResponse } from '@/lib/auth';
+import { writeDashboardAudit } from '@/lib/audit';
+import { applySuggestionAction } from '@/lib/module-configs/suggestions';
+import { prisma } from '@/lib/prisma';
+
+interface RouteParams {
+  params: Promise<{ guildId: string; suggestionId: string }>;
+}
+
+export async function POST(request: NextRequest, { params }: RouteParams) {
+  const { guildId, suggestionId } = await params;
+  try {
+    const session = await requireGuildAccess(guildId);
+    const body = await request.json();
+    const action = SuggestionActionSchema.parse(body);
+
+    const after = await applySuggestionAction(guildId, suggestionId, action, session.user.id);
+
+    await writeDashboardAudit(prisma, {
+      guildId,
+      actorUserId: session.user.id,
+      action: `suggestions.${action.status}`,
+      path: `/dashboard/${guildId}/suggestions`,
+      before: null,
+      after
+    });
+
+    return NextResponse.json(after);
+  } catch (error) {
+    return toApiErrorResponse(error);
+  }
+}

apps/webui/src/app/api/guilds/[guildId]/suggestions/items/route.ts

@@ -0,0 +1,24 @@
+import { SuggestionListQuerySchema } from '@nexumi/shared';
+import { type NextRequest, NextResponse } from 'next/server';
+import { requireGuildAccess, toApiErrorResponse } from '@/lib/auth';
+import { listSuggestions } from '@/lib/module-configs/suggestions';
+
+interface RouteParams {
+  params: Promise<{ guildId: string }>;
+}
+
+export async function GET(request: NextRequest, { params }: RouteParams) {
+  const { guildId } = await params;
+  try {
+    await requireGuildAccess(guildId);
+    const searchParams = request.nextUrl.searchParams;
+    const query = SuggestionListQuerySchema.parse({
+      status: searchParams.get('status') ?? undefined,
+      limit: searchParams.get('limit') ?? undefined
+    });
+    const suggestions = await listSuggestions(guildId, query);
+    return NextResponse.json({ suggestions });
+  } catch (error) {
+    return toApiErrorResponse(error);
+  }
+}

apps/webui/src/app/api/guilds/[guildId]/suggestions/route.ts

@@ -0,0 +1,46 @@
+import { SuggestionConfigDashboardPatchSchema } from '@nexumi/shared';
+import { type NextRequest, NextResponse } from 'next/server';
+import { requireGuildAccess, toApiErrorResponse } from '@/lib/auth';
+import { writeDashboardAudit } from '@/lib/audit';
+import { getSuggestionConfigDashboard, updateSuggestionConfigDashboard } from '@/lib/module-configs/suggestions';
+import { prisma } from '@/lib/prisma';
+
+interface RouteParams {
+  params: Promise<{ guildId: string }>;
+}
+
+export async function GET(_request: NextRequest, { params }: RouteParams) {
+  const { guildId } = await params;
+  try {
+    await requireGuildAccess(guildId);
+    const config = await getSuggestionConfigDashboard(guildId);
+    return NextResponse.json(config);
+  } catch (error) {
+    return toApiErrorResponse(error);
+  }
+}
+
+export async function PATCH(request: NextRequest, { params }: RouteParams) {
+  const { guildId } = await params;
+  try {
+    const session = await requireGuildAccess(guildId);
+    const body = await request.json();
+    const patch = SuggestionConfigDashboardPatchSchema.parse(body);
+
+    const before = await getSuggestionConfigDashboard(guildId);
+    const after = await updateSuggestionConfigDashboard(guildId, patch);
+
+    await writeDashboardAudit(prisma, {
+      guildId,
+      actorUserId: session.user.id,
+      action: 'suggestions.update',
+      path: `/dashboard/${guildId}/suggestions`,
+      before,
+      after
+    });
+
+    return NextResponse.json(after);
+  } catch (error) {
+    return toApiErrorResponse(error);
+  }
+}