add initial complete webui, more ai commands for moderation, add api

webui/app/api/user/delete/route.ts

@@ -0,0 +1,59 @@
+import { NextRequest, NextResponse } from "next/server";
+import { validateSession } from "@/lib/auth";
+import { SESSION_COOKIE_NAME } from "@/lib/auth-constants";
+import { db } from "@/lib/db";
+import { usersTable, sessionsTable, twoFactorTable } from "@/lib/schema";
+import { eq } from "drizzle-orm";
+
+export async function DELETE(request: NextRequest) {
+  try {
+    const cookieToken = request.cookies.get(SESSION_COOKIE_NAME)?.value;
+    const authHeader = request.headers.get('authorization');
+    const bearerToken = authHeader?.startsWith('Bearer ') ? authHeader.slice(7) : null;
+    const sessionToken = bearerToken || cookieToken;
+
+    if (!sessionToken) {
+      return NextResponse.json({ error: "Authentication required" }, { status: 401 });
+    }
+
+    const sessionData = await validateSession(sessionToken);
+
+    if (!sessionData || !sessionData.user) {
+      return NextResponse.json({ error: "Invalid or expired session" }, { status: 401 });
+    }
+
+    const userId = sessionData.user.telegramId;
+
+    await db.transaction(async (tx) => {
+      await tx.delete(sessionsTable)
+        .where(eq(sessionsTable.userId, userId));
+
+      await tx.delete(twoFactorTable)
+        .where(eq(twoFactorTable.userId, userId));
+
+      await tx.delete(usersTable)
+        .where(eq(usersTable.telegramId, userId));
+    });
+
+    const response = NextResponse.json({
+      success: true,
+      message: "Account deleted successfully"
+    });
+
+    response.cookies.set(SESSION_COOKIE_NAME, '', {
+      httpOnly: true,
+      secure: process.env.NODE_ENV === "production",
+      sameSite: "lax",
+      expires: new Date(0),
+      path: "/",
+    });
+
+    return response;
+
+  } catch (error) {
+    console.error("Error deleting account:", error);
+    return NextResponse.json({
+      error: "Failed to delete account"
+    }, { status: 500 });
+  }
+}

webui/app/api/user/profile/route.ts

@@ -0,0 +1,46 @@
+import { NextRequest, NextResponse } from "next/server";
+import { validateSession } from "@/lib/auth";
+import { SESSION_COOKIE_NAME } from "@/lib/auth-constants";
+
+export async function GET(request: NextRequest) {
+  try {
+    const cookieToken = request.cookies.get(SESSION_COOKIE_NAME)?.value;
+    const authHeader = request.headers.get('authorization');
+    const bearerToken = authHeader?.startsWith('Bearer ') ? authHeader.slice(7) : null;
+    const sessionToken = bearerToken || cookieToken;
+
+    if (!sessionToken) {
+      return NextResponse.json({ error: "Authentication required" }, { status: 401 });
+    }
+
+    const sessionData = await validateSession(sessionToken);
+
+    if (!sessionData || !sessionData.user) {
+      return NextResponse.json({ error: "Invalid or expired session" }, { status: 401 });
+    }
+
+    const { user } = sessionData;
+    const sanitizedUser = {
+      telegramId: user.telegramId,
+      username: user.username,
+      firstName: user.firstName,
+      lastName: user.lastName,
+      aiEnabled: user.aiEnabled,
+      showThinking: user.showThinking,
+      customAiModel: user.customAiModel,
+      aiTemperature: user.aiTemperature,
+      aiRequests: user.aiRequests,
+      aiCharacters: user.aiCharacters,
+      disabledCommands: user.disabledCommands,
+      languageCode: user.languageCode,
+    };
+
+    return NextResponse.json(sanitizedUser);
+
+  } catch (error) {
+    console.error("Error in profile API:", error);
+    return NextResponse.json({
+      error: "Internal server error"
+    }, { status: 500 });
+  }
+}

webui/app/api/user/settings/route.ts

@@ -0,0 +1,103 @@
+import { NextRequest, NextResponse } from "next/server";
+import { eq } from "drizzle-orm";
+import { validateSession } from "@/lib/auth";
+import { SESSION_COOKIE_NAME } from "@/lib/auth-constants";
+import { db } from "@/lib/db";
+import * as schema from "@/lib/schema";
+
+interface UserUpdates {
+  aiEnabled?: boolean;
+  showThinking?: boolean;
+  customAiModel?: string;
+  aiTemperature?: number;
+  disabledCommands?: string[];
+  languageCode?: string;
+  updatedAt?: Date;
+}
+
+export async function PATCH(request: NextRequest) {
+  try {
+    const cookieToken = request.cookies.get(SESSION_COOKIE_NAME)?.value;
+    const authHeader = request.headers.get('authorization');
+    const bearerToken = authHeader?.startsWith('Bearer ') ? authHeader.slice(7) : null;
+    const sessionToken = bearerToken || cookieToken;
+
+    if (!sessionToken) {
+      return NextResponse.json({ error: "Authentication required" }, { status: 401 });
+    }
+
+    const sessionData = await validateSession(sessionToken);
+
+    if (!sessionData || !sessionData.user) {
+      return NextResponse.json({ error: "Invalid or expired session" }, { status: 401 });
+    }
+
+    const contentType = request.headers.get('content-type');
+    if (!contentType || !contentType.includes('application/json')) {
+      return NextResponse.json({ error: "Invalid content type" }, { status: 400 });
+    }
+
+    const updates = await request.json();
+    const userId = sessionData.user.telegramId;
+
+    if (!updates || typeof updates !== 'object') {
+      return NextResponse.json({ error: "Invalid request body" }, { status: 400 });
+    }
+
+    const allowedFields = [
+      'aiEnabled',
+      'showThinking',
+      'customAiModel',
+      'aiTemperature',
+      'disabledCommands',
+      'languageCode'
+    ];
+
+    const filteredUpdates: UserUpdates = {};
+
+    for (const [key, value] of Object.entries(updates)) {
+      if (allowedFields.includes(key)) {
+        if (key === 'aiEnabled' || key === 'showThinking') {
+          filteredUpdates[key] = Boolean(value);
+        } else if (key === 'aiTemperature') {
+          const temp = Number(value);
+          if (temp >= 0.1 && temp <= 2.0) {
+            filteredUpdates[key] = temp;
+          } else {
+            return NextResponse.json({ error: "Temperature must be between 0.1 and 2.0" }, { status: 400 });
+          }
+        } else if (key === 'customAiModel' || key === 'languageCode') {
+          if (typeof value === 'string' && value.length > 0 && value.length < 100) {
+            filteredUpdates[key] = value;
+          } else {
+            return NextResponse.json({ error: `Invalid ${key}` }, { status: 400 });
+          }
+        } else if (key === 'disabledCommands') {
+          if (Array.isArray(value) && value.every(item => typeof item === 'string' && item.length < 50) && value.length < 100) {
+            filteredUpdates[key] = value;
+          } else {
+            return NextResponse.json({ error: "Invalid disabled commands" }, { status: 400 });
+          }
+        }
+      }
+    }
+
+    if (Object.keys(filteredUpdates).length === 0) {
+      return NextResponse.json({ error: "No valid updates provided" }, { status: 400 });
+    }
+
+    filteredUpdates.updatedAt = new Date();
+
+    await db.update(schema.usersTable)
+      .set(filteredUpdates)
+      .where(eq(schema.usersTable.telegramId, userId));
+
+    return NextResponse.json({ success: true });
+
+  } catch (error) {
+    console.error("Error in settings API:", error);
+    return NextResponse.json({
+      error: "Internal server error"
+    }, { status: 500 });
+  }
+}