@yunsoft/yuncms-api 0.1.9 → 0.1.11

package/src/routes/ai.js

@@ -0,0 +1,80 @@
+import express from 'express';
+
+function authError() {
+  const error = new Error('Yapay Zeka requires an authenticated YunCMS account');
+  error.code = 'UNAUTHORIZED';
+  return error;
+}
+
+function requireAuthenticated(req) {
+  if (req?.authMethod === 'public' || !req?.accountability?.user) throw authError();
+}
+
+function requireAdministrator(req) {
+  requireAuthenticated(req);
+  if (req.accountability?.admin === true || req.accountability?.system === true) return;
+  const error = new Error('Yapay Zeka settings require administrator access');
+  error.code = 'FORBIDDEN';
+  throw error;
+}
+
+export function aiRequestAccess(body = {}) {
+  const allowWrites = body?.allow_writes === true;
+  return {
+    allowWrites,
+    allowDeletes: allowWrites && body?.allow_deletes === true,
+  };
+}
+
+export function createAiRouter({ assistant, settingsStore } = {}) {
+  if (!assistant) throw new Error('AI assistant service is required');
+  if (!settingsStore) throw new Error('AI settings store is required');
+  const router = express.Router();
+
+  router.get('/status', async (req, res, next) => {
+    try {
+      requireAuthenticated(req);
+      return res.json({ data: await assistant.status(), request_id: req.id });
+    } catch (error) {
+      return next(error);
+    }
+  });
+
+  router.get('/settings', async (req, res, next) => {
+    try {
+      requireAdministrator(req);
+      return res.json({ data: await settingsStore.readAdmin(), request_id: req.id });
+    } catch (error) {
+      return next(error);
+    }
+  });
+
+  router.patch('/settings', async (req, res, next) => {
+    try {
+      requireAdministrator(req);
+      const data = await settingsStore.update(req.body ?? {});
+      return res.json({ data, request_id: req.id });
+    } catch (error) {
+      return next(error);
+    }
+  });
+
+  router.post('/chat', async (req, res, next) => {
+    try {
+      requireAuthenticated(req);
+      const access = aiRequestAccess(req.body);
+      const result = await assistant.chat(req, {
+        messages: req.body?.messages,
+        locale: req.body?.locale,
+        ...access,
+      });
+      return res.json({ data: result, request_id: req.id });
+    } catch (error) {
+      return next(error);
+    }
+  });
+
+  return router;
+}
+
+export { requireAdministrator, requireAuthenticated };

package/src/routes/studio-navigation.js

@@ -0,0 +1,59 @@
+import express from 'express';
+
+import { serviceOptionsFromRequest } from '../service-options.js';
+
+function navigationService(req) {
+  const Service = req.context.services.NavigationGroupsService;
+  return new Service(serviceOptionsFromRequest(req));
+}
+
+function requireStudioUser(req) {
+  if (req?.authMethod !== 'public' && req?.accountability?.user) return;
+  const error = new Error('Studio navigation requires an authenticated YunCMS account');
+  error.code = 'UNAUTHORIZED';
+  throw error;
+}
+
+export function createStudioNavigationRouter() {
+  const router = express.Router();
+
+  router.get('/groups', async (req, res, next) => {
+    try {
+      requireStudioUser(req);
+      return res.json({ data: await navigationService(req).readMany(), request_id: req.id });
+    } catch (error) {
+      return next(error);
+    }
+  });
+
+  router.post('/groups', async (req, res, next) => {
+    try {
+      requireStudioUser(req);
+      return res.status(201).json({ data: await navigationService(req).createOne(req.body ?? {}), request_id: req.id });
+    } catch (error) {
+      return next(error);
+    }
+  });
+
+  router.patch('/groups/:id', async (req, res, next) => {
+    try {
+      requireStudioUser(req);
+      return res.json({ data: await navigationService(req).updateOne(req.params.id, req.body ?? {}), request_id: req.id });
+    } catch (error) {
+      return next(error);
+    }
+  });
+
+  router.delete('/groups/:id', async (req, res, next) => {
+    try {
+      requireStudioUser(req);
+      return res.json({ data: await navigationService(req).deleteOne(req.params.id), request_id: req.id });
+    } catch (error) {
+      return next(error);
+    }
+  });
+
+  return router;
+}
+
+export { requireStudioUser };

package/src/server.js

@@ -20,11 +20,16 @@ import {
   SmtpMailer,
 } from '@yunsoft/yuncms-core';
 import { createApp } from './app.js';
+import { AiAssistantService } from './ai/service.js';
+import { loadOrCreateAiSettingsKey } from './ai/secret-key.js';
+import { AiSettingsStore } from './ai/settings-store.js';
 import { INTERNAL_AUDIT_EVENTS } from './audit-events.js';
 import { loadExternalAuthConfig } from './external-auth/config.js';
 import { ExternalAuthProviderRegistry } from './external-auth/providers.js';
 import { loadExtensionRuntime } from './extensions/runtime.js';
 import { createMcpRouter } from './mcp.js';
+import { McpSettingsStore } from './mcp/settings-store.js';
+import { createAiRouter } from './routes/ai.js';
 
 loadEnvFileIfPresent();
 await assertMaintenanceStartupAllowed({ cwd: process.cwd(), env: process.env });
@@ -103,6 +108,10 @@ function registerInternalAudit({ emitter, services }) {
 
 async function start() {
   await assertDatabaseCompatible(pool);
+  const aiKey = await loadOrCreateAiSettingsKey();
+  const aiSettingsStore = new AiSettingsStore({ database: pool, key: aiKey.key });
+  if (aiKey.created) logger.info('YunCMS AI settings encryption key created');
+
   if (redisClient) {
     try {
       await redisClient.connect();
@@ -124,7 +133,10 @@ async function start() {
     database: pool,
     logger,
   });
-  const mcpRouter = createMcpRouter({ config, logger });
+  const aiAssistant = new AiAssistantService({ settingsStore: aiSettingsStore, logger });
+  const aiRouter = createAiRouter({ assistant: aiAssistant, settingsStore: aiSettingsStore });
+  const mcpSettingsStore = new McpSettingsStore({ database: pool });
+  const mcpRouter = createMcpRouter({ settingsStore: mcpSettingsStore, logger });
   mailer?.setEmitter(emitter);
   registerInternalAudit({ emitter, services });
 
@@ -152,6 +164,7 @@ async function start() {
     redisClient,
     externalAuthRegistry,
     endpointExtensions: extensionRuntime.endpointExtensions,
+    aiRouter,
     mcpRouter,
   });