Implement Owner Panel features and maintenance mode handling

- Introduced the Owner Panel with new routes and UI components for managing guilds, user blacklists, feature flags, and bot presence.
- Added maintenance mode functionality to prevent non-owner users from executing commands during maintenance periods.
- Enhanced localization with new keys for Owner Panel features in both English and German.
- Updated job processing to include a presence refresh job, ensuring the bot's status is regularly updated.
- Improved environment configuration to support owner user IDs for access control.
This commit is contained in:
smueller
2026-07-22 16:10:30 +02:00
parent bcbfa07697
commit 8a8aefb4fb
42 changed files with 2385 additions and 50 deletions

View File

@@ -0,0 +1,77 @@
import { NextResponse } from 'next/server';
import { OwnerTeamUpsertSchema } from '@nexumi/shared';
import { toApiErrorResponse } from '@/lib/auth';
import { writeOwnerAudit } from '@/lib/owner-audit';
import { requireOwner } from '@/lib/owner-auth';
import { env } from '@/lib/env';
import { prisma } from '@/lib/prisma';
export async function GET() {
try {
await requireOwner('VIEWER');
const members = await prisma.ownerTeamMember.findMany({ orderBy: { createdAt: 'asc' } });
return NextResponse.json({
bootstrapOwnerIds: env.OWNER_USER_IDS ?? [],
members
});
} catch (error) {
return toApiErrorResponse(error);
}
}
export async function PUT(request: Request) {
try {
const session = await requireOwner('OWNER');
const body = OwnerTeamUpsertSchema.parse(await request.json());
const before = await prisma.ownerTeamMember.findUnique({ where: { userId: body.userId } });
const member = await prisma.ownerTeamMember.upsert({
where: { userId: body.userId },
create: {
userId: body.userId,
role: body.role,
note: body.note ?? null
},
update: {
role: body.role,
note: body.note ?? null
}
});
await writeOwnerAudit(prisma, {
actorUserId: session.user.id,
action: before ? 'team.update' : 'team.create',
targetType: 'OwnerTeamMember',
targetId: member.id,
before,
after: member
});
return NextResponse.json(member);
} catch (error) {
return toApiErrorResponse(error);
}
}
export async function DELETE(request: Request) {
try {
const session = await requireOwner('OWNER');
const { searchParams } = new URL(request.url);
const userId = searchParams.get('userId');
if (!userId) {
return NextResponse.json({ error: 'userId required' }, { status: 400 });
}
const before = await prisma.ownerTeamMember.findUnique({ where: { userId } });
if (!before) {
return NextResponse.json({ error: 'Not found' }, { status: 404 });
}
await prisma.ownerTeamMember.delete({ where: { userId } });
await writeOwnerAudit(prisma, {
actorUserId: session.user.id,
action: 'team.delete',
targetType: 'OwnerTeamMember',
targetId: before.id,
before
});
return NextResponse.json({ ok: true });
} catch (error) {
return toApiErrorResponse(error);
}
}