@promptbook/cli 0.103.0-1 → 0.103.0-100

package/apps/agents-server/src/app/api/api-tokens/route.ts

@@ -0,0 +1,76 @@
+import { $getTableName } from '../../../database/$getTableName';
+import { $provideSupabase } from '../../../database/$provideSupabase';
+import { isUserAdmin } from '../../../utils/isUserAdmin';
+import { randomUUID } from 'crypto';
+import { NextRequest, NextResponse } from 'next/server';
+
+export async function GET(request: NextRequest) {
+    if (!(await isUserAdmin())) {
+        return NextResponse.json({ error: 'Unauthorized' }, { status: 401 });
+    }
+
+    const supabase = $provideSupabase();
+    const table = await $getTableName('ApiTokens');
+
+    const { data, error } = await supabase.from(table).select('*').order('createdAt', { ascending: false });
+
+    if (error) {
+        return NextResponse.json({ error: error.message }, { status: 500 });
+    }
+
+    return NextResponse.json(data);
+}
+
+export async function POST(request: NextRequest) {
+    if (!(await isUserAdmin())) {
+        return NextResponse.json({ error: 'Unauthorized' }, { status: 401 });
+    }
+
+    try {
+        const body = await request.json();
+        const { note } = body;
+
+        const token = `ptbk_${randomUUID().replace(/-/g, '')}`;
+
+        const supabase = $provideSupabase();
+        const table = await $getTableName('ApiTokens');
+
+        const { data, error } = await supabase
+            .from(table)
+            .insert({ token, note })
+            .select()
+            .single();
+
+        if (error) {
+            return NextResponse.json({ error: error.message }, { status: 500 });
+        }
+
+        return NextResponse.json(data);
+    } catch (e) {
+        return NextResponse.json({ error: 'Invalid request body' }, { status: 400 });
+    }
+}
+
+export async function DELETE(request: NextRequest) {
+    if (!(await isUserAdmin())) {
+        return NextResponse.json({ error: 'Unauthorized' }, { status: 401 });
+    }
+
+    const searchParams = request.nextUrl.searchParams;
+    const id = searchParams.get('id');
+
+    if (!id) {
+        return NextResponse.json({ error: 'ID is required' }, { status: 400 });
+    }
+
+    const supabase = $provideSupabase();
+    const table = await $getTableName('ApiTokens');
+
+    const { error } = await supabase.from(table).delete().eq('id', parseInt(id, 10));
+
+    if (error) {
+        return NextResponse.json({ error: error.message }, { status: 500 });
+    }
+
+    return NextResponse.json({ success: true });
+}

package/apps/agents-server/src/app/api/auth/change-password/route.ts

@@ -0,0 +1,75 @@
+import { NextResponse } from 'next/server';
+import { $getTableName } from '../../../../database/$getTableName';
+import { $provideSupabaseForServer } from '../../../../database/$provideSupabaseForServer';
+import { AgentsServerDatabase } from '../../../../database/schema';
+import { hashPassword, verifyPassword } from '../../../../utils/auth';
+import { getCurrentUser } from '../../../../utils/getCurrentUser';
+
+export async function POST(request: Request) {
+    try {
+        const user = await getCurrentUser();
+        if (!user) {
+            return NextResponse.json({ error: 'Unauthorized' }, { status: 401 });
+        }
+
+        const body = await request.json();
+        const { currentPassword, newPassword } = body;
+
+        if (!currentPassword || !newPassword) {
+            return NextResponse.json({ error: 'Missing password fields' }, { status: 400 });
+        }
+
+        // Special check for environment admin
+        if (user.username === 'admin' && process.env.ADMIN_PASSWORD) {
+            // Environment admin cannot change password through this API
+            // They must change the env variable
+            return NextResponse.json(
+                {
+                    error: 'You cannot change the admin password. Please update the `ADMIN_PASSWORD` environment variable.',
+                },
+                { status: 403 },
+            );
+        }
+
+        const supabase = $provideSupabaseForServer();
+        const { data: userData, error: fetchError } = await supabase
+            .from(await $getTableName('User'))
+            .select('*')
+            .eq('username', user.username)
+            .single();
+
+        if (fetchError || !userData) {
+            return NextResponse.json({ error: 'User not found' }, { status: 404 });
+        }
+
+        const userRow = userData as AgentsServerDatabase['public']['Tables']['User']['Row'];
+
+        // Verify current password
+        const isValid = await verifyPassword(currentPassword, userRow.passwordHash);
+        if (!isValid) {
+            return NextResponse.json({ error: 'Invalid current password' }, { status: 401 });
+        }
+
+        // Hash new password
+        const newPasswordHash = await hashPassword(newPassword);
+
+        // Update password
+        const { error: updateError } = await supabase
+            .from(await $getTableName('User'))
+            .update({
+                passwordHash: newPasswordHash,
+                updatedAt: new Date().toISOString(),
+            })
+            .eq('id', userRow.id);
+
+        if (updateError) {
+            console.error('Error updating password:', updateError);
+            return NextResponse.json({ error: 'Failed to update password' }, { status: 500 });
+        }
+
+        return NextResponse.json({ success: true });
+    } catch (error) {
+        console.error('Change password error:', error);
+        return NextResponse.json({ error: 'Internal server error' }, { status: 500 });
+    }
+}

package/apps/agents-server/src/app/api/auth/login/route.ts

@@ -0,0 +1,27 @@
+import { authenticateUser } from '../../../../utils/authenticateUser';
+import { setSession } from '../../../../utils/session';
+import { NextResponse } from 'next/server';
+
+export async function POST(request: Request) {
+    try {
+        const body = await request.json();
+        const { username, password } = body;
+
+        if (!username || !password) {
+            return NextResponse.json({ error: 'Username and password are required' }, { status: 400 });
+        }
+
+        const user = await authenticateUser(username, password);
+
+        if (user) {
+            await setSession(user);
+            return NextResponse.json({ success: true });
+        } else {
+            return NextResponse.json({ error: 'Invalid credentials' }, { status: 401 });
+        }
+
+    } catch (error) {
+        console.error('Login error:', error);
+        return NextResponse.json({ error: 'Internal server error' }, { status: 500 });
+    }
+}

package/apps/agents-server/src/app/api/auth/logout/route.ts

@@ -0,0 +1,7 @@
+import { clearSession } from '../../../../utils/session';
+import { NextResponse } from 'next/server';
+
+export async function POST() {
+    await clearSession();
+    return NextResponse.json({ success: true });
+}

package/apps/agents-server/src/app/api/chat/route.ts

@@ -0,0 +1,32 @@
+import { createOpenAiExecutionTools } from '@promptbook-local/openai';
+
+export async function GET(request: Request) {
+    const { searchParams } = new URL(request.url);
+    const message = searchParams.get('message') || 'Hello, who are you?';
+
+    const llmTools = createOpenAiExecutionTools({
+        apiKey: process.env.OPENAI_API_KEY,
+    });
+
+    const response = await llmTools.callChatModel({
+        title: 'Test Chat Call',
+        parameters: {},
+        modelRequirements: {
+            modelVariant: 'CHAT',
+            modelName: 'gpt-3.5-turbo',
+        },
+        content: message,
+    });
+
+    /*
+    return new Response(JSON.stringify(response, null, 4), {
+        status: 200,
+        headers: { 'Content-Type': 'application/json' },
+    });
+    */
+
+    return new Response(response.content, {
+        status: 200,
+        headers: { 'Content-Type': 'text/markdown' },
+    });
+}

package/apps/agents-server/src/app/api/chat-feedback/[id]/route.ts

@@ -0,0 +1,38 @@
+import { NextRequest, NextResponse } from 'next/server';
+import { $getTableName } from '../../../../database/$getTableName';
+import { $provideSupabase } from '../../../../database/$provideSupabase';
+import { isUserAdmin } from '../../../../utils/isUserAdmin';
+
+/**
+ * Delete a single chat feedback entry by ID.
+ */
+export async function DELETE(request: NextRequest, context: { params: Promise<{ id: string }> }) {
+    if (!(await isUserAdmin())) {
+        return NextResponse.json({ error: 'Unauthorized' }, { status: 401 });
+    }
+
+
+    const rawId = (await context.params).id;
+    const id = Number.parseInt(rawId, 10);
+
+    if (!Number.isFinite(id) || id <= 0) {
+        return NextResponse.json({ error: 'Invalid id' }, { status: 400 });
+    }
+
+    try {
+        const supabase = $provideSupabase();
+        const table = await $getTableName('ChatFeedback');
+
+        const { error } = await supabase.from(table).delete().eq('id', id);
+
+        if (error) {
+            console.error('Delete chat feedback row error:', error);
+            return NextResponse.json({ error: 'Internal server error' }, { status: 500 });
+        }
+
+        return NextResponse.json({ success: true });
+    } catch (error) {
+        console.error('Delete chat feedback row error:', error);
+        return NextResponse.json({ error: 'Internal server error' }, { status: 500 });
+    }
+}

package/apps/agents-server/src/app/api/chat-feedback/export/route.ts

@@ -0,0 +1,55 @@
+import { NextRequest, NextResponse } from 'next/server';
+import { $getTableName } from '../../../../database/$getTableName';
+import { $provideSupabase } from '../../../../database/$provideSupabase';
+import { convertToCsv } from '../../../../utils/convertToCsv';
+import { isUserAdmin } from '../../../../utils/isUserAdmin';
+
+/**
+ * Export chat feedback as CSV.
+ *
+ * Query params:
+ * - agentName: filter by agent name (optional)
+ */
+export async function GET(request: NextRequest) {
+    if (!(await isUserAdmin())) {
+        return NextResponse.json({ error: 'Unauthorized' }, { status: 401 });
+    }
+
+    try {
+        const searchParams = request.nextUrl.searchParams;
+        const agentName = searchParams.get('agentName');
+
+        const supabase = $provideSupabase();
+        const table = await $getTableName('ChatFeedback');
+
+        let query = supabase.from(table).select('*');
+
+        if (agentName) {
+            query = query.eq('agentName', agentName);
+        }
+
+        query = query.order('createdAt', { ascending: false });
+
+        const { data, error } = await query;
+
+        if (error) {
+            console.error('Export chat feedback error:', error);
+            return NextResponse.json({ error: 'Internal server error' }, { status: 500 });
+        }
+
+        const csv = convertToCsv((data || []) as Record<string, unknown>[]);
+        const filename = agentName
+            ? `chat-feedback-${agentName}-${new Date().toISOString()}.csv`
+            : `chat-feedback-${new Date().toISOString()}.csv`;
+
+        return new NextResponse(csv, {
+            headers: {
+                'Content-Type': 'text/csv',
+                'Content-Disposition': `attachment; filename="${filename}"`,
+            },
+        });
+    } catch (error) {
+        console.error('Export chat feedback error:', error);
+        return NextResponse.json({ error: 'Internal server error' }, { status: 500 });
+    }
+}

package/apps/agents-server/src/app/api/chat-feedback/route.ts

@@ -0,0 +1,157 @@
+import { NextRequest, NextResponse } from 'next/server';
+import { $getTableName } from '../../../database/$getTableName';
+import { $provideSupabase } from '../../../database/$provideSupabase';
+import { isUserAdmin } from '../../../utils/isUserAdmin';
+
+const DEFAULT_PAGE_SIZE = 20;
+const MAX_PAGE_SIZE = 100;
+
+type SortField = 'createdAt' | 'agentName' | 'id';
+type SortOrder = 'asc' | 'desc';
+
+function parsePositiveInt(value: string | null, fallback: number): number {
+    if (!value) return fallback;
+    const parsed = parseInt(value, 10);
+    if (Number.isNaN(parsed) || parsed <= 0) return fallback;
+    return parsed;
+}
+
+function parseSortField(value: string | null): SortField {
+    if (value === 'agentName' || value === 'id') return value;
+    return 'createdAt';
+}
+
+function parseSortOrder(value: string | null): SortOrder {
+    return value === 'asc' ? 'asc' : 'desc';
+}
+
+/**
+ * List chat feedback with filters, search and pagination.
+ *
+ * Query params:
+ * - page: number (1-based)
+ * - pageSize: number (items per page)
+ * - agentName: filter by agent name
+ * - search: free-text search across agentName, url, ip, textRating, userNote and expectedAnswer
+ * - sortBy: createdAt | agentName | id (default: createdAt)
+ * - sortOrder: asc | desc (default: desc)
+ */
+export async function GET(request: NextRequest) {
+    if (!(await isUserAdmin())) {
+        return NextResponse.json({ error: 'Unauthorized' }, { status: 401 });
+    }
+
+    try {
+        const searchParams = request.nextUrl.searchParams;
+
+        const page = parsePositiveInt(searchParams.get('page'), 1);
+        const pageSize = Math.min(
+            MAX_PAGE_SIZE,
+            parsePositiveInt(searchParams.get('pageSize'), DEFAULT_PAGE_SIZE),
+        );
+        const agentName = searchParams.get('agentName');
+        const search = searchParams.get('search')?.trim() || '';
+        const sortBy = parseSortField(searchParams.get('sortBy'));
+        const sortOrder = parseSortOrder(searchParams.get('sortOrder'));
+
+        const supabase = $provideSupabase();
+        const table = await $getTableName('ChatFeedback');
+
+        let query = supabase
+            .from(table)
+            .select('*', { count: 'exact' });
+
+        if (agentName) {
+            query = query.eq('agentName', agentName);
+        }
+
+        if (search) {
+            // Note: We intentionally limit search to simple text columns
+            // to keep the query portable and efficient.
+            //
+            // This searches across:
+            // - agentName
+            // - url
+            // - ip
+            // - textRating
+            // - userNote
+            // - expectedAnswer
+            const escaped = search.replace(/%/g, '\\%').replace(/_/g, '\\_');
+            query = query.or(
+                [
+                    `agentName.ilike.%${escaped}%`,
+                    `url.ilike.%${escaped}%`,
+                    `ip.ilike.%${escaped}%`,
+                    `textRating.ilike.%${escaped}%`,
+                    `userNote.ilike.%${escaped}%`,
+                    `expectedAnswer.ilike.%${escaped}%`,
+                ].join(','),
+            );
+        }
+
+        query = query.order(sortBy, { ascending: sortOrder === 'asc' });
+
+        const from = (page - 1) * pageSize;
+        const to = from + pageSize - 1;
+
+        query = query.range(from, to);
+
+        const { data, error, count } = await query;
+
+        if (error) {
+            console.error('List chat feedback error:', error);
+            return NextResponse.json({ error: 'Internal server error' }, { status: 500 });
+        }
+
+        return NextResponse.json({
+            items: data ?? [],
+            total: count ?? 0,
+            page,
+            pageSize,
+            sortBy,
+            sortOrder,
+        });
+    } catch (error) {
+        console.error('List chat feedback error:', error);
+        return NextResponse.json({ error: 'Internal server error' }, { status: 500 });
+    }
+}
+
+/**
+ * Delete chat feedback for a specific agent.
+ *
+ * Query params:
+ * - agentName: name of the agent whose feedback should be removed
+ */
+export async function DELETE(request: NextRequest) {
+    if (!(await isUserAdmin())) {
+        return NextResponse.json({ error: 'Unauthorized' }, { status: 401 });
+    }
+
+    const searchParams = request.nextUrl.searchParams;
+    const agentName = searchParams.get('agentName');
+
+    if (!agentName) {
+        return NextResponse.json({ error: 'agentName is required' }, { status: 400 });
+    }
+
+    try {
+        const supabase = $provideSupabase();
+        const table = await $getTableName('ChatFeedback');
+
+        const { error } = await supabase
+            .from(table)
+            .delete()
+            .eq('agentName', agentName);
+
+        if (error) {
+            console.error('Clear chat feedback error:', error);
+            return NextResponse.json({ error: 'Internal server error' }, { status: 500 });
+        }
+
+        return NextResponse.json({ success: true });
+    } catch (error) {
+        console.error('Clear chat feedback error:', error);
+        return NextResponse.json({ error: 'Internal server error' }, { status: 500 });
+    }
+}

package/apps/agents-server/src/app/api/chat-history/[id]/route.ts

@@ -0,0 +1,37 @@
+import { NextRequest, NextResponse } from 'next/server';
+import { $getTableName } from '../../../../database/$getTableName';
+import { $provideSupabase } from '../../../../database/$provideSupabase';
+import { isUserAdmin } from '../../../../utils/isUserAdmin';
+
+/**
+ * Delete a single chat history entry by ID.
+ */
+export async function DELETE(request: NextRequest, context: { params: Promise<{ id: string }> }) {
+    if (!(await isUserAdmin())) {
+        return NextResponse.json({ error: 'Unauthorized' }, { status: 401 });
+    }
+
+    const rawId = (await context.params).id;
+    const id = Number.parseInt(rawId, 10);
+
+    if (!Number.isFinite(id) || id <= 0) {
+        return NextResponse.json({ error: 'Invalid id' }, { status: 400 });
+    }
+
+    try {
+        const supabase = $provideSupabase();
+        const table = await $getTableName('ChatHistory');
+
+        const { error } = await supabase.from(table).delete().eq('id', id);
+
+        if (error) {
+            console.error('Delete chat history row error:', error);
+            return NextResponse.json({ error: 'Internal server error' }, { status: 500 });
+        }
+
+        return NextResponse.json({ success: true });
+    } catch (error) {
+        console.error('Delete chat history row error:', error);
+        return NextResponse.json({ error: 'Internal server error' }, { status: 500 });
+    }
+}

package/apps/agents-server/src/app/api/chat-history/export/route.ts

@@ -0,0 +1,55 @@
+import { NextRequest, NextResponse } from 'next/server';
+import { $getTableName } from '../../../../database/$getTableName';
+import { $provideSupabase } from '../../../../database/$provideSupabase';
+import { convertToCsv } from '../../../../utils/convertToCsv';
+import { isUserAdmin } from '../../../../utils/isUserAdmin';
+
+/**
+ * Export chat history as CSV.
+ *
+ * Query params:
+ * - agentName: filter by agent name (optional)
+ */
+export async function GET(request: NextRequest) {
+    if (!(await isUserAdmin())) {
+        return NextResponse.json({ error: 'Unauthorized' }, { status: 401 });
+    }
+
+    try {
+        const searchParams = request.nextUrl.searchParams;
+        const agentName = searchParams.get('agentName');
+
+        const supabase = $provideSupabase();
+        const table = await $getTableName('ChatHistory');
+
+        let query = supabase.from(table).select('*');
+
+        if (agentName) {
+            query = query.eq('agentName', agentName);
+        }
+
+        query = query.order('createdAt', { ascending: false });
+
+        const { data, error } = await query;
+
+        if (error) {
+            console.error('Export chat history error:', error);
+            return NextResponse.json({ error: 'Internal server error' }, { status: 500 });
+        }
+
+        const csv = convertToCsv((data || []) as Record<string, unknown>[]);
+        const filename = agentName
+            ? `chat-history-${agentName}-${new Date().toISOString()}.csv`
+            : `chat-history-${new Date().toISOString()}.csv`;
+
+        return new NextResponse(csv, {
+            headers: {
+                'Content-Type': 'text/csv',
+                'Content-Disposition': `attachment; filename="${filename}"`,
+            },
+        });
+    } catch (error) {
+        console.error('Export chat history error:', error);
+        return NextResponse.json({ error: 'Internal server error' }, { status: 500 });
+    }
+}