add initial complete webui, more ai commands for moderation, add api

webui/app/api/auth/logout/route.ts

@@ -0,0 +1,34 @@
+import { NextRequest, NextResponse } from "next/server";
+import { invalidateSession } from "@/lib/auth";
+import { SESSION_COOKIE_NAME } from "@/lib/auth-constants";
+
+export async function POST(request: NextRequest) {
+  try {
+    const cookieToken = request.cookies.get(SESSION_COOKIE_NAME)?.value;
+    const authHeader = request.headers.get('authorization');
+    const bearerToken = authHeader?.startsWith('Bearer ') ? authHeader.slice(7) : null;
+    const sessionToken = bearerToken || cookieToken;
+
+    if (sessionToken) {
+      await invalidateSession(sessionToken);
+    }
+
+    const response = NextResponse.json({ success: true });
+
+    response.cookies.set(SESSION_COOKIE_NAME, '', {
+      httpOnly: true,
+      secure: process.env.NODE_ENV === "production",
+      sameSite: "lax",
+      expires: new Date(0),
+      path: "/",
+    });
+
+    return response;
+
+  } catch (error) {
+    console.error("Error in logout API:", error);
+    return NextResponse.json({
+      error: "Internal server error"
+    }, { status: 500 });
+  }
+}

webui/app/api/auth/username/route.ts

@@ -0,0 +1,91 @@
+import { NextRequest, NextResponse } from "next/server";
+import { eq } from "drizzle-orm";
+import * as schema from "@/lib/schema";
+import { db } from "@/lib/db";
+
+export async function POST(request: NextRequest) {
+  try {
+    const requestContentType = request.headers.get('content-type');
+    if (!requestContentType || !requestContentType.includes('application/json')) {
+      return NextResponse.json({ success: false, error: "Invalid content type" }, { status: 400 });
+    }
+
+    const body = await request.json();
+    const { username } = body;
+
+    if (!username) {
+      return NextResponse.json({ success: false, error: "Username is required" }, { status: 400 });
+    }
+
+    if (typeof username !== 'string' || username.length < 3 || username.length > 32) {
+      return NextResponse.json({ success: false, error: "Invalid username format" }, { status: 400 });
+    }
+
+    const cleanUsername = username.replace('@', '');
+
+    const user = await db.query.usersTable.findFirst({
+      where: eq(schema.usersTable.username, cleanUsername),
+      columns: {
+        telegramId: true,
+        username: true,
+      },
+    });
+
+    if (!user) {
+      const botUsername = process.env.botUsername || "KowalskiNodeBot";
+      return NextResponse.json({ success: false, error: `Please DM @${botUsername} before signing in.` }, { status: 404 });
+    }
+
+    const botApiUrl = process.env.botApiUrl || "http://kowalski:3030";
+    const fullUrl = `${botApiUrl}/2fa/get`;
+
+    const botApiResponse = await fetch(fullUrl, {
+      method: "POST",
+      headers: {
+        "Content-Type": "application/json",
+      },
+      body: JSON.stringify({ userId: user.telegramId }),
+    });
+
+    if (!botApiResponse.ok) {
+      const errorText = await botApiResponse.text();
+      console.error("Bot API error response:", errorText);
+      return NextResponse.json({
+        success: false,
+        error: `Bot API error: ${botApiResponse.status} - ${errorText.slice(0, 200)}`
+      }, { status: 500 });
+    }
+
+    const contentType = botApiResponse.headers.get("content-type");
+    if (!contentType || !contentType.includes("application/json")) {
+      const errorText = await botApiResponse.text();
+      console.error("Bot API returned non-JSON:", errorText.slice(0, 200));
+      return NextResponse.json({
+        success: false,
+        error: "Bot API returned invalid response format"
+      }, { status: 500 });
+    }
+
+    const botApiResult = await botApiResponse.json();
+
+    if (!botApiResult.generated) {
+      return NextResponse.json({
+        success: false,
+        error: botApiResult.error || "Failed to send 2FA code"
+      }, { status: 500 });
+    }
+
+    return NextResponse.json({
+      success: true,
+      message: "2FA code sent successfully",
+      userId: user.telegramId
+    });
+
+  } catch (error) {
+    console.error("Error in username API:", error);
+    return NextResponse.json({
+      success: false,
+      error: "Internal server error"
+    }, { status: 500 });
+  }
+}

webui/app/api/auth/verify/route.ts

@@ -0,0 +1,107 @@
+import { NextRequest, NextResponse } from "next/server";
+import { eq, and, gt } from "drizzle-orm";
+import * as schema from "@/lib/schema";
+import { db } from "@/lib/db";
+import { createSession, getSessionCookieOptions } from "@/lib/auth";
+import { SESSION_COOKIE_NAME } from "@/lib/auth-constants";
+
+export async function POST(request: NextRequest) {
+  try {
+    const contentType = request.headers.get('content-type');
+    if (!contentType || !contentType.includes('application/json')) {
+      return NextResponse.json({
+        success: false,
+        error: "Invalid content type"
+      }, { status: 400 });
+    }
+
+    const body = await request.json();
+    const { userId, code } = body;
+
+    if (!userId || !code) {
+      return NextResponse.json({
+        success: false,
+        error: "User ID and code are required"
+      }, { status: 400 });
+    }
+
+    if (typeof userId !== 'string' || typeof code !== 'string') {
+      return NextResponse.json({
+        success: false,
+        error: "Invalid input format"
+      }, { status: 400 });
+    }
+
+    if (!/^\d{6}$/.test(code)) {
+      return NextResponse.json({
+        success: false,
+        error: "Invalid code format"
+      }, { status: 400 });
+    }
+
+    const twoFactorRecord = await db.query.twoFactorTable.findFirst({
+      where: and(
+        eq(schema.twoFactorTable.userId, userId),
+        gt(schema.twoFactorTable.codeExpiresAt, new Date())
+      ),
+    });
+
+    if (!twoFactorRecord) {
+      return NextResponse.json({
+        success: false,
+        error: "No valid 2FA code found or code has expired"
+      }, { status: 404 });
+    }
+
+    if (twoFactorRecord.codeAttempts >= 5) {
+      await db.delete(schema.twoFactorTable)
+        .where(eq(schema.twoFactorTable.userId, userId));
+
+      return NextResponse.json({
+        success: false,
+        error: "Too many failed attempts. Please request a new code."
+      }, { status: 429 });
+    }
+
+    if (twoFactorRecord.currentCode !== code) {
+      await db.update(schema.twoFactorTable)
+        .set({
+          codeAttempts: twoFactorRecord.codeAttempts + 1,
+          updatedAt: new Date()
+        })
+        .where(eq(schema.twoFactorTable.userId, userId));
+
+      console.log(`2FA verification failed for user: ${userId}, attempts: ${twoFactorRecord.codeAttempts + 1}`);
+      return NextResponse.json({
+        success: false,
+        error: "Invalid 2FA code"
+      }, { status: 401 });
+    }
+
+    const session = await createSession(userId);
+
+    await db.delete(schema.twoFactorTable)
+      .where(eq(schema.twoFactorTable.userId, userId));
+
+    console.log("2FA verification successful for user:", userId);
+
+    const response = NextResponse.json({
+      success: true,
+      message: "2FA verification successful",
+      redirectTo: "/account",
+      sessionToken: session.sessionToken
+    });
+
+    const cookieOptions = getSessionCookieOptions();
+    response.cookies.set(SESSION_COOKIE_NAME, session.sessionToken, cookieOptions);
+
+    return response;
+
+  } catch (error) {
+    console.error("Error in verify API:", error);
+    return NextResponse.json({
+      success: false,
+      error: "Internal server error"
+    }, { status: 500 });
+  }
+}