feat: Bibliothek + Admin

- Bibliothek: grid, before/after slider, rename, download, folder assign, delete, multi-select - Admin: stats+costs, OpenRouter key (masked/encrypted), budget, defaults, Picdrop config+test, models (list/add from OpenRouter/set default/delete), users (add/set password) - api: items/:id PATCH+DELETE, folders CRUD, admin/{settings,stats,models,test-picdrop,users} - lib/picdrop.ts (SFTP/FTPS test+upload, temp->rename)
2026-07-23 15:22:12 +00:00
parent dce7515c9b
commit 25d0a5cd97
13 changed files with 621 additions and 0 deletions
@@ -0,0 +1,45 @@
+import type { APIRoute } from 'astro';
+import { one, query } from '../../../lib/db';
+import { listImageModels } from '../../../lib/openrouter';
+
+export const prerender = false;
+const json = (b: unknown, s = 200) =>
+  new Response(JSON.stringify(b), { status: s, headers: { 'Content-Type': 'application/json' } });
+
+// GET: gespeicherte Modelle; ?available=1 zusätzlich die von OpenRouter verfügbaren.
+export const GET: APIRoute = async ({ url }) => {
+  const models = await query('SELECT * FROM models ORDER BY sort, label');
+  const out: any = { models };
+  if (url.searchParams.get('available') === '1') {
+    try {
+      const avail = await listImageModels();
+      out.available = avail.map((m: any) => ({
+        model_id: m.id, name: m.name,
+        supports_alpha: (m.supported_parameters?.background?.values || []).includes('transparent')
+          || !!m.supported_parameters?.background,
+      }));
+    } catch (e: any) { out.available_error = e?.friendly || 'Modellliste nicht abrufbar.'; }
+  }
+  return json(out);
+};
+
+// POST: Modell anlegen/aktualisieren (upsert by model_id) oder Aktion (toggle/default/delete).
+export const POST: APIRoute = async ({ request }) => {
+  const b = await request.json();
+  if (b.action === 'delete' && b.id) { await query('DELETE FROM models WHERE id=$1', [b.id]); return json({ ok: true }); }
+  if (b.action === 'default' && b.id) {
+    await query('UPDATE models SET is_default=false'); await query('UPDATE models SET is_default=true WHERE id=$1', [b.id]);
+    return json({ ok: true });
+  }
+  if (!b.model_id || !b.label) return json({ error: 'model_id + label nötig.' }, 400);
+  const existing = await one<{ id: string }>('SELECT id FROM models WHERE model_id=$1', [b.model_id]);
+  if (existing) {
+    await query(`UPDATE models SET label=$2, description=$3, active=$4, supports_alpha=$5, sort=$6 WHERE id=$1`,
+      [existing.id, b.label, b.description || null, b.active ?? true, b.supports_alpha ?? false, b.sort ?? 0]);
+    return json({ id: existing.id });
+  }
+  const row = await one(`INSERT INTO models (model_id, label, description, active, supports_alpha, sort)
+    VALUES ($1,$2,$3,$4,$5,$6) RETURNING *`,
+    [b.model_id, b.label, b.description || null, b.active ?? true, b.supports_alpha ?? false, b.sort ?? 0]);
+  return json({ model: row });
+};
@@ -0,0 +1,38 @@
+import type { APIRoute } from 'astro';
+import { one, query } from '../../../lib/db';
+import { encrypt, maskSecret, decrypt } from '../../../lib/crypto';
+
+export const prerender = false;
+const json = (b: unknown, s = 200) =>
+  new Response(JSON.stringify(b), { status: s, headers: { 'Content-Type': 'application/json' } });
+
+export const GET: APIRoute = async () => {
+  const s = await one<any>('SELECT * FROM settings WHERE id=1');
+  if (!s) return json({ settings: null });
+  let orMask = '';
+  if (s.openrouter_key_enc) { try { orMask = maskSecret(decrypt(s.openrouter_key_enc)); } catch { orMask = 'gesetzt'; } }
+  return json({ settings: {
+    openrouter_key_masked: orMask, openrouter_key_set: !!s.openrouter_key_enc,
+    picdrop_host: s.picdrop_host, picdrop_protocol: s.picdrop_protocol, picdrop_port: s.picdrop_port,
+    picdrop_user: s.picdrop_user, picdrop_base_path: s.picdrop_base_path,
+    picdrop_password_set: !!s.picdrop_password_enc,
+    default_dpi: s.default_dpi, default_crop_mode: s.default_crop_mode, concurrency: s.concurrency,
+    cricut_sheet_cm: s.cricut_sheet_cm, monthly_budget: s.monthly_budget, n8n_webhook_url: s.n8n_webhook_url,
+  } });
+};
+
+export const PATCH: APIRoute = async ({ request }) => {
+  const b = await request.json();
+  const sets: string[] = []; const args: any[] = [];
+  const set = (col: string, val: any) => { args.push(val); sets.push(`${col}=$${args.length}`); };
+
+  if (b.openrouter_key) set('openrouter_key_enc', encrypt(String(b.openrouter_key)));
+  if (b.picdrop_password) set('picdrop_password_enc', encrypt(String(b.picdrop_password)));
+  for (const col of ['picdrop_host', 'picdrop_protocol', 'picdrop_port', 'picdrop_user', 'picdrop_base_path',
+    'default_dpi', 'default_crop_mode', 'concurrency', 'cricut_sheet_cm', 'monthly_budget', 'n8n_webhook_url']) {
+    if (col in b) set(col, b[col] === '' ? null : b[col]);
+  }
+  if (!sets.length) return json({ ok: true });
+  await query(`UPDATE settings SET ${sets.join(',')} WHERE id=1`, args);
+  return json({ ok: true });
+};
@@ -0,0 +1,25 @@
+import type { APIRoute } from 'astro';
+import { query, one } from '../../../lib/db';
+
+export const prerender = false;
+
+export const GET: APIRoute = async () => {
+  const total = await one<{ n: string }>(`SELECT count(*)::text n FROM items WHERE status='done'`);
+  const failed = await one<{ n: string }>(`SELECT count(*)::text n FROM items WHERE status='failed'`);
+  const cost = async (days: number | null) => (await one<{ c: string }>(
+    `SELECT COALESCE(sum(cost),0)::text c FROM items WHERE cost IS NOT NULL` +
+    (days ? ` AND created_at > now() - interval '${days} days'` : ''))
+  )?.c || '0';
+  const byModel = await query(`SELECT COALESCE(model_used,'—') m, count(*)::int n, COALESCE(sum(cost),0)::float c
+    FROM items WHERE status='done' GROUP BY 1 ORDER BY n DESC`);
+  const last = await one<{ t: string }>(`SELECT max(created_at)::text t FROM items`);
+
+  const totalN = Number(total?.n || 0), failedN = Number(failed?.n || 0);
+  return new Response(JSON.stringify({
+    total: totalN, failed: failedN,
+    error_rate: totalN + failedN ? Math.round((failedN / (totalN + failedN)) * 100) : 0,
+    cost_today: Number(await cost(1)), cost_7: Number(await cost(7)),
+    cost_30: Number(await cost(30)), cost_all: Number(await cost(null)),
+    by_model: byModel, last_activity: last?.t || null,
+  }), { headers: { 'Content-Type': 'application/json' } });
+};
@@ -0,0 +1,12 @@
+import type { APIRoute } from 'astro';
+import { loadConfig, testConnection } from '../../../lib/picdrop';
+
+export const prerender = false;
+const json = (b: unknown, s = 200) =>
+  new Response(JSON.stringify(b), { status: s, headers: { 'Content-Type': 'application/json' } });
+
+export const POST: APIRoute = async () => {
+  const cfg = await loadConfig();
+  if (!cfg) return json({ ok: false, message: 'Picdrop nicht vollständig konfiguriert.' });
+  return json(await testConnection(cfg));
+};
@@ -0,0 +1,28 @@
+import type { APIRoute } from 'astro';
+import { one, query } from '../../../lib/db';
+import { hashPassword } from '../../../lib/auth';
+
+export const prerender = false;
+const json = (b: unknown, s = 200) =>
+  new Response(JSON.stringify(b), { status: s, headers: { 'Content-Type': 'application/json' } });
+
+export const GET: APIRoute = async () => {
+  const users = await query('SELECT id, username, role, display_name, created_at FROM users ORDER BY username');
+  return json({ users });
+};
+
+// POST: neuen Nutzer anlegen ODER Passwort setzen (bei vorhandenem username/id).
+export const POST: APIRoute = async ({ request }) => {
+  const b = await request.json();
+  if (b.id && b.password) {
+    await query('UPDATE users SET password_hash=$2 WHERE id=$1', [b.id, await hashPassword(b.password)]);
+    return json({ ok: true });
+  }
+  if (!b.username || !b.password) return json({ error: 'username + password nötig.' }, 400);
+  const exists = await one('SELECT id FROM users WHERE username=$1', [b.username.trim()]);
+  if (exists) return json({ error: 'Benutzername vergeben.' }, 400);
+  const row = await one(`INSERT INTO users (username, role, display_name, password_hash)
+    VALUES ($1,$2,$3,$4) RETURNING id, username, role, display_name`,
+    [b.username.trim(), b.role === 'admin' ? 'admin' : 'user', b.display_name || b.username.trim(), await hashPassword(b.password)]);
+  return json({ user: row });
+};
@@ -0,0 +1,20 @@
+import type { APIRoute } from 'astro';
+import { one, query } from '../../../lib/db';
+
+export const prerender = false;
+const json = (b: unknown, s = 200) =>
+  new Response(JSON.stringify(b), { status: s, headers: { 'Content-Type': 'application/json' } });
+
+export const PATCH: APIRoute = async ({ params, request, locals }) => {
+  if (!locals.user) return new Response('Unauthorized', { status: 401 });
+  const b = await request.json();
+  const row = await one(`UPDATE folders SET name=COALESCE($2,name), picdrop_gallery=$3 WHERE id=$1 RETURNING *`,
+    [params.id, b.name?.trim() || null, b.picdrop_gallery ?? null]);
+  return json({ folder: row });
+};
+
+export const DELETE: APIRoute = async ({ params, locals }) => {
+  if (!locals.user) return new Response('Unauthorized', { status: 401 });
+  await query('DELETE FROM folders WHERE id=$1', [params.id]);
+  return json({ ok: true });
+};
@@ -0,0 +1,22 @@
+import type { APIRoute } from 'astro';
+import { one, query } from '../../../lib/db';
+
+export const prerender = false;
+const json = (b: unknown, s = 200) =>
+  new Response(JSON.stringify(b), { status: s, headers: { 'Content-Type': 'application/json' } });
+
+export const GET: APIRoute = async ({ locals }) => {
+  if (!locals.user) return new Response('Unauthorized', { status: 401 });
+  const rows = await query(`SELECT f.*, (SELECT count(*) FROM items WHERE folder_id=f.id)::int AS count
+                            FROM folders f ORDER BY f.name`);
+  return json({ folders: rows });
+};
+
+export const POST: APIRoute = async ({ request, locals }) => {
+  if (!locals.user) return new Response('Unauthorized', { status: 401 });
+  const b = await request.json();
+  if (!b.name?.trim()) return json({ error: 'Name fehlt.' }, 400);
+  const row = await one(`INSERT INTO folders (name, picdrop_gallery) VALUES ($1,$2) RETURNING *`,
+    [b.name.trim(), b.picdrop_gallery || null]);
+  return json({ folder: row });
+};
@@ -0,0 +1,27 @@
+import type { APIRoute } from 'astro';
+import { one, query } from '../../../lib/db';
+import { deleteObject } from '../../../lib/storage';
+
+export const prerender = false;
+const json = (b: unknown, s = 200) =>
+  new Response(JSON.stringify(b), { status: s, headers: { 'Content-Type': 'application/json' } });
+
+export const PATCH: APIRoute = async ({ params, request, locals }) => {
+  if (!locals.user) return new Response('Unauthorized', { status: 401 });
+  const b = await request.json();
+  const sets: string[] = []; const args: any[] = [];
+  if (typeof b.filename === 'string') { args.push(b.filename.trim()); sets.push(`filename=$${args.length}`); }
+  if ('folder_id' in b) { args.push(b.folder_id || null); sets.push(`folder_id=$${args.length}`); }
+  if (!sets.length) return json({ error: 'Nichts zu ändern.' }, 400);
+  args.push(params.id);
+  const row = await one(`UPDATE items SET ${sets.join(',')} WHERE id=$${args.length} RETURNING id, filename, folder_id`, args);
+  return json({ item: row });
+};
+
+export const DELETE: APIRoute = async ({ params, locals }) => {
+  if (!locals.user) return new Response('Unauthorized', { status: 401 });
+  const it = await one<{ result_path: string | null }>('SELECT result_path FROM items WHERE id=$1', [params.id]);
+  if (it?.result_path) await deleteObject(it.result_path).catch(() => {});
+  await query('DELETE FROM items WHERE id=$1', [params.id]);
+  return json({ ok: true });
+};