Implement Owner Panel features and maintenance mode handling
- Introduced the Owner Panel with new routes and UI components for managing guilds, user blacklists, feature flags, and bot presence. - Added maintenance mode functionality to prevent non-owner users from executing commands during maintenance periods. - Enhanced localization with new keys for Owner Panel features in both English and German. - Updated job processing to include a presence refresh job, ensuring the bot's status is regularly updated. - Improved environment configuration to support owner user IDs for access control.
This commit is contained in:
77
apps/webui/src/app/api/owner/team/route.ts
Normal file
77
apps/webui/src/app/api/owner/team/route.ts
Normal file
@@ -0,0 +1,77 @@
|
||||
import { NextResponse } from 'next/server';
|
||||
import { OwnerTeamUpsertSchema } from '@nexumi/shared';
|
||||
import { toApiErrorResponse } from '@/lib/auth';
|
||||
import { writeOwnerAudit } from '@/lib/owner-audit';
|
||||
import { requireOwner } from '@/lib/owner-auth';
|
||||
import { env } from '@/lib/env';
|
||||
import { prisma } from '@/lib/prisma';
|
||||
|
||||
export async function GET() {
|
||||
try {
|
||||
await requireOwner('VIEWER');
|
||||
const members = await prisma.ownerTeamMember.findMany({ orderBy: { createdAt: 'asc' } });
|
||||
return NextResponse.json({
|
||||
bootstrapOwnerIds: env.OWNER_USER_IDS ?? [],
|
||||
members
|
||||
});
|
||||
} catch (error) {
|
||||
return toApiErrorResponse(error);
|
||||
}
|
||||
}
|
||||
|
||||
export async function PUT(request: Request) {
|
||||
try {
|
||||
const session = await requireOwner('OWNER');
|
||||
const body = OwnerTeamUpsertSchema.parse(await request.json());
|
||||
const before = await prisma.ownerTeamMember.findUnique({ where: { userId: body.userId } });
|
||||
const member = await prisma.ownerTeamMember.upsert({
|
||||
where: { userId: body.userId },
|
||||
create: {
|
||||
userId: body.userId,
|
||||
role: body.role,
|
||||
note: body.note ?? null
|
||||
},
|
||||
update: {
|
||||
role: body.role,
|
||||
note: body.note ?? null
|
||||
}
|
||||
});
|
||||
await writeOwnerAudit(prisma, {
|
||||
actorUserId: session.user.id,
|
||||
action: before ? 'team.update' : 'team.create',
|
||||
targetType: 'OwnerTeamMember',
|
||||
targetId: member.id,
|
||||
before,
|
||||
after: member
|
||||
});
|
||||
return NextResponse.json(member);
|
||||
} catch (error) {
|
||||
return toApiErrorResponse(error);
|
||||
}
|
||||
}
|
||||
|
||||
export async function DELETE(request: Request) {
|
||||
try {
|
||||
const session = await requireOwner('OWNER');
|
||||
const { searchParams } = new URL(request.url);
|
||||
const userId = searchParams.get('userId');
|
||||
if (!userId) {
|
||||
return NextResponse.json({ error: 'userId required' }, { status: 400 });
|
||||
}
|
||||
const before = await prisma.ownerTeamMember.findUnique({ where: { userId } });
|
||||
if (!before) {
|
||||
return NextResponse.json({ error: 'Not found' }, { status: 404 });
|
||||
}
|
||||
await prisma.ownerTeamMember.delete({ where: { userId } });
|
||||
await writeOwnerAudit(prisma, {
|
||||
actorUserId: session.user.id,
|
||||
action: 'team.delete',
|
||||
targetType: 'OwnerTeamMember',
|
||||
targetId: before.id,
|
||||
before
|
||||
});
|
||||
return NextResponse.json({ ok: true });
|
||||
} catch (error) {
|
||||
return toApiErrorResponse(error);
|
||||
}
|
||||
}
|
||||
Reference in New Issue
Block a user