Changeset 0.7.0 (#37)

2026-02-21 12:43:33 +00:00
parent 925b70f98c
commit a95e246cd7
18 changed files with 1424 additions and 115 deletions
--- a/server/handlers/presets.go
+++ b/server/handlers/presets.go
@@ -0,0 +1,517 @@
+package handlers
+
+import (
+	"database/sql"
+	"net/http"
+	"strings"
+
+	"github.com/gin-gonic/gin"
+
+	"git.gobha.me/xcaliber/chat-switchboard/database"
+	"git.gobha.me/xcaliber/chat-switchboard/models"
+)
+
+// PresetHandler handles model preset CRUD operations.
+type PresetHandler struct{}
+
+// NewPresetHandler creates a new handler.
+func NewPresetHandler() *PresetHandler {
+	return &PresetHandler{}
+}
+
+// ── Request/Response Types ─────────────────
+
+type createPresetRequest struct {
+	Name         string   `json:"name" binding:"required"`
+	Description  string   `json:"description"`
+	BaseModelID  string   `json:"base_model_id" binding:"required"`
+	APIConfigID  *string  `json:"api_config_id,omitempty"`
+	SystemPrompt string   `json:"system_prompt"`
+	Temperature  *float64 `json:"temperature,omitempty"`
+	MaxTokens    *int     `json:"max_tokens,omitempty"`
+	ToolsEnabled string   `json:"tools_enabled,omitempty"`
+	Icon         string   `json:"icon,omitempty"`
+	IsShared     bool     `json:"is_shared"`
+}
+
+type updatePresetRequest struct {
+	Name         *string  `json:"name,omitempty"`
+	Description  *string  `json:"description,omitempty"`
+	BaseModelID  *string  `json:"base_model_id,omitempty"`
+	APIConfigID  *string  `json:"api_config_id,omitempty"`
+	SystemPrompt *string  `json:"system_prompt,omitempty"`
+	Temperature  *float64 `json:"temperature,omitempty"`
+	MaxTokens    *int     `json:"max_tokens,omitempty"`
+	ToolsEnabled *string  `json:"tools_enabled,omitempty"`
+	Icon         *string  `json:"icon,omitempty"`
+	IsShared     *bool    `json:"is_shared,omitempty"`
+	IsActive     *bool    `json:"is_active,omitempty"`
+}
+
+type presetResponse struct {
+	models.ModelPreset
+	ProviderName string `json:"provider_name,omitempty"`
+	BaseModelName string `json:"base_model_name,omitempty"`
+}
+
+// ── User Preset Endpoints ──────────────────
+// These require user_providers_enabled for personal presets.
+
+// ListUserPresets returns all presets visible to the user:
+// their own personal presets + all global presets + shared presets.
+// GET /api/v1/presets
+func (h *PresetHandler) ListUserPresets(c *gin.Context) {
+	userID := getUserID(c)
+
+	rows, err := database.DB.Query(`
+		SELECT mp.id, mp.name, mp.description, mp.base_model_id, mp.api_config_id,
+		       mp.system_prompt, mp.temperature, mp.max_tokens, mp.tools_enabled,
+		       mp.scope, mp.team_id, mp.created_by, mp.is_shared, mp.is_active,
+		       mp.icon, mp.created_at, mp.updated_at,
+		       COALESCE(ac.name, '') as provider_name
+		FROM model_presets mp
+		LEFT JOIN api_configs ac ON mp.api_config_id = ac.id
+		WHERE mp.is_active = true
+		  AND (
+		    mp.scope = 'global'
+		    OR (mp.scope = 'personal' AND mp.created_by = $1)
+		    OR (mp.scope = 'personal' AND mp.is_shared = true)
+		  )
+		ORDER BY mp.scope ASC, mp.name ASC
+	`, userID)
+	if err != nil {
+		c.JSON(http.StatusInternalServerError, gin.H{"error": "failed to list presets"})
+		return
+	}
+	defer rows.Close()
+
+	presets := make([]presetResponse, 0)
+	for rows.Next() {
+		var p presetResponse
+		if err := rows.Scan(
+			&p.ID, &p.Name, &p.Description, &p.BaseModelID, &p.APIConfigID,
+			&p.SystemPrompt, &p.Temperature, &p.MaxTokens, &p.ToolsEnabled,
+			&p.Scope, &p.TeamID, &p.CreatedBy, &p.IsShared, &p.IsActive,
+			&p.Icon, &p.CreatedAt, &p.UpdatedAt, &p.ProviderName,
+		); err != nil {
+			continue
+		}
+		presets = append(presets, p)
+	}
+
+	c.JSON(http.StatusOK, gin.H{"presets": presets})
+}
+
+// CreateUserPreset creates a personal preset for the current user.
+// POST /api/v1/presets
+func (h *PresetHandler) CreateUserPreset(c *gin.Context) {
+	userID := getUserID(c)
+
+	// Gate: personal presets require user_providers_enabled
+	if !isUserProvidersEnabled() {
+		c.JSON(http.StatusForbidden, gin.H{"error": "personal presets are disabled by admin"})
+		return
+	}
+
+	var req createPresetRequest
+	if err := c.ShouldBindJSON(&req); err != nil {
+		c.JSON(http.StatusBadRequest, gin.H{"error": err.Error()})
+		return
+	}
+
+	req.Name = strings.TrimSpace(req.Name)
+	if req.Name == "" {
+		c.JSON(http.StatusBadRequest, gin.H{"error": "name is required"})
+		return
+	}
+
+	// Validate api_config_id belongs to user if provided
+	if req.APIConfigID != nil && *req.APIConfigID != "" {
+		var count int
+		err := database.DB.QueryRow(`
+			SELECT COUNT(*) FROM api_configs
+			WHERE id = $1 AND (user_id = $2 OR is_global = true OR user_id IS NULL) AND is_active = true
+		`, *req.APIConfigID, userID).Scan(&count)
+		if err != nil || count == 0 {
+			c.JSON(http.StatusBadRequest, gin.H{"error": "invalid or inaccessible API config"})
+			return
+		}
+	}
+
+	toolsJSON := req.ToolsEnabled
+	if toolsJSON == "" {
+		toolsJSON = "[]"
+	}
+
+	var id string
+	err := database.DB.QueryRow(`
+		INSERT INTO model_presets (name, description, base_model_id, api_config_id,
+		       system_prompt, temperature, max_tokens, tools_enabled,
+		       scope, created_by, is_shared, icon)
+		VALUES ($1, $2, $3, $4, $5, $6, $7, $8::jsonb, 'personal', $9, $10, $11)
+		RETURNING id
+	`, req.Name, req.Description, req.BaseModelID, req.APIConfigID,
+		req.SystemPrompt, req.Temperature, req.MaxTokens, toolsJSON,
+		userID, req.IsShared, req.Icon,
+	).Scan(&id)
+
+	if err != nil {
+		c.JSON(http.StatusInternalServerError, gin.H{"error": "failed to create preset"})
+		return
+	}
+
+	c.JSON(http.StatusCreated, gin.H{"id": id})
+}
+
+// UpdateUserPreset updates a personal preset owned by the current user.
+// PUT /api/v1/presets/:id
+func (h *PresetHandler) UpdateUserPreset(c *gin.Context) {
+	userID := getUserID(c)
+	presetID := c.Param("id")
+
+	// Verify ownership
+	var createdBy, scope string
+	err := database.DB.QueryRow(
+		`SELECT created_by, scope FROM model_presets WHERE id = $1`, presetID,
+	).Scan(&createdBy, &scope)
+	if err == sql.ErrNoRows {
+		c.JSON(http.StatusNotFound, gin.H{"error": "preset not found"})
+		return
+	}
+	if scope != models.PresetScopePersonal || createdBy != userID {
+		c.JSON(http.StatusForbidden, gin.H{"error": "can only edit your own personal presets"})
+		return
+	}
+
+	var req updatePresetRequest
+	if err := c.ShouldBindJSON(&req); err != nil {
+		c.JSON(http.StatusBadRequest, gin.H{"error": err.Error()})
+		return
+	}
+
+	// Build dynamic SET clause
+	sets := []string{}
+	args := []interface{}{}
+	argN := 1
+
+	addField := func(col string, val interface{}) {
+		sets = append(sets, col+" = $"+itoa(argN))
+		args = append(args, val)
+		argN++
+	}
+
+	if req.Name != nil {
+		addField("name", strings.TrimSpace(*req.Name))
+	}
+	if req.Description != nil {
+		addField("description", *req.Description)
+	}
+	if req.BaseModelID != nil {
+		addField("base_model_id", *req.BaseModelID)
+	}
+	if req.APIConfigID != nil {
+		addField("api_config_id", *req.APIConfigID)
+	}
+	if req.SystemPrompt != nil {
+		addField("system_prompt", *req.SystemPrompt)
+	}
+	if req.Temperature != nil {
+		addField("temperature", *req.Temperature)
+	}
+	if req.MaxTokens != nil {
+		addField("max_tokens", *req.MaxTokens)
+	}
+	if req.Icon != nil {
+		addField("icon", *req.Icon)
+	}
+	if req.IsShared != nil {
+		addField("is_shared", *req.IsShared)
+	}
+	if req.IsActive != nil {
+		addField("is_active", *req.IsActive)
+	}
+
+	if len(sets) == 0 {
+		c.JSON(http.StatusBadRequest, gin.H{"error": "no fields to update"})
+		return
+	}
+
+	sets = append(sets, "updated_at = NOW()")
+	args = append(args, presetID)
+
+	query := "UPDATE model_presets SET " + strings.Join(sets, ", ") + " WHERE id = $" + itoa(argN)
+	_, err = database.DB.Exec(query, args...)
+	if err != nil {
+		c.JSON(http.StatusInternalServerError, gin.H{"error": "failed to update preset"})
+		return
+	}
+
+	c.JSON(http.StatusOK, gin.H{"status": "updated"})
+}
+
+// DeleteUserPreset deletes a personal preset owned by the current user.
+// DELETE /api/v1/presets/:id
+func (h *PresetHandler) DeleteUserPreset(c *gin.Context) {
+	userID := getUserID(c)
+	presetID := c.Param("id")
+
+	result, err := database.DB.Exec(`
+		DELETE FROM model_presets WHERE id = $1 AND created_by = $2 AND scope = 'personal'
+	`, presetID, userID)
+	if err != nil {
+		c.JSON(http.StatusInternalServerError, gin.H{"error": "failed to delete preset"})
+		return
+	}
+
+	rows, _ := result.RowsAffected()
+	if rows == 0 {
+		c.JSON(http.StatusNotFound, gin.H{"error": "preset not found or not yours"})
+		return
+	}
+
+	c.JSON(http.StatusOK, gin.H{"status": "deleted"})
+}
+
+// ── Admin Preset Endpoints ─────────────────
+
+// ListAdminPresets returns all presets (any scope) for admin management.
+// GET /api/v1/admin/presets
+func (h *PresetHandler) ListAdminPresets(c *gin.Context) {
+	rows, err := database.DB.Query(`
+		SELECT mp.id, mp.name, mp.description, mp.base_model_id, mp.api_config_id,
+		       mp.system_prompt, mp.temperature, mp.max_tokens, mp.tools_enabled,
+		       mp.scope, mp.team_id, mp.created_by, mp.is_shared, mp.is_active,
+		       mp.icon, mp.created_at, mp.updated_at,
+		       COALESCE(ac.name, '') as provider_name,
+		       COALESCE(u.username, '') as creator_name
+		FROM model_presets mp
+		LEFT JOIN api_configs ac ON mp.api_config_id = ac.id
+		LEFT JOIN users u ON mp.created_by = u.id
+		ORDER BY mp.scope ASC, mp.name ASC
+	`)
+	if err != nil {
+		c.JSON(http.StatusInternalServerError, gin.H{"error": "failed to list presets"})
+		return
+	}
+	defer rows.Close()
+
+	type adminPreset struct {
+		presetResponse
+		CreatorName string `json:"creator_name"`
+	}
+
+	presets := make([]adminPreset, 0)
+	for rows.Next() {
+		var p adminPreset
+		if err := rows.Scan(
+			&p.ID, &p.Name, &p.Description, &p.BaseModelID, &p.APIConfigID,
+			&p.SystemPrompt, &p.Temperature, &p.MaxTokens, &p.ToolsEnabled,
+			&p.Scope, &p.TeamID, &p.CreatedBy, &p.IsShared, &p.IsActive,
+			&p.Icon, &p.CreatedAt, &p.UpdatedAt, &p.ProviderName, &p.CreatorName,
+		); err != nil {
+			continue
+		}
+		presets = append(presets, p)
+	}
+
+	c.JSON(http.StatusOK, gin.H{"presets": presets})
+}
+
+// CreateAdminPreset creates a global preset (admin-managed, visible to all users).
+// POST /api/v1/admin/presets
+func (h *PresetHandler) CreateAdminPreset(c *gin.Context) {
+	userID := getUserID(c)
+
+	var req createPresetRequest
+	if err := c.ShouldBindJSON(&req); err != nil {
+		c.JSON(http.StatusBadRequest, gin.H{"error": err.Error()})
+		return
+	}
+
+	req.Name = strings.TrimSpace(req.Name)
+	if req.Name == "" {
+		c.JSON(http.StatusBadRequest, gin.H{"error": "name is required"})
+		return
+	}
+
+	// Validate api_config_id is a global config
+	if req.APIConfigID != nil && *req.APIConfigID != "" {
+		var count int
+		err := database.DB.QueryRow(`
+			SELECT COUNT(*) FROM api_configs
+			WHERE id = $1 AND (is_global = true OR user_id IS NULL) AND is_active = true
+		`, *req.APIConfigID).Scan(&count)
+		if err != nil || count == 0 {
+			c.JSON(http.StatusBadRequest, gin.H{"error": "global presets must use a global API config"})
+			return
+		}
+	}
+
+	toolsJSON := req.ToolsEnabled
+	if toolsJSON == "" {
+		toolsJSON = "[]"
+	}
+
+	var id string
+	err := database.DB.QueryRow(`
+		INSERT INTO model_presets (name, description, base_model_id, api_config_id,
+		       system_prompt, temperature, max_tokens, tools_enabled,
+		       scope, created_by, is_shared, icon)
+		VALUES ($1, $2, $3, $4, $5, $6, $7, $8::jsonb, 'global', $9, true, $10)
+		RETURNING id
+	`, req.Name, req.Description, req.BaseModelID, req.APIConfigID,
+		req.SystemPrompt, req.Temperature, req.MaxTokens, toolsJSON,
+		userID, req.Icon,
+	).Scan(&id)
+
+	if err != nil {
+		c.JSON(http.StatusInternalServerError, gin.H{"error": "failed to create preset: " + err.Error()})
+		return
+	}
+
+	c.JSON(http.StatusCreated, gin.H{"id": id})
+}
+
+// UpdateAdminPreset updates any preset (admin can edit global and personal).
+// PUT /api/v1/admin/presets/:id
+func (h *PresetHandler) UpdateAdminPreset(c *gin.Context) {
+	presetID := c.Param("id")
+
+	var req updatePresetRequest
+	if err := c.ShouldBindJSON(&req); err != nil {
+		c.JSON(http.StatusBadRequest, gin.H{"error": err.Error()})
+		return
+	}
+
+	sets := []string{}
+	args := []interface{}{}
+	argN := 1
+
+	addField := func(col string, val interface{}) {
+		sets = append(sets, col+" = $"+itoa(argN))
+		args = append(args, val)
+		argN++
+	}
+
+	if req.Name != nil {
+		addField("name", strings.TrimSpace(*req.Name))
+	}
+	if req.Description != nil {
+		addField("description", *req.Description)
+	}
+	if req.BaseModelID != nil {
+		addField("base_model_id", *req.BaseModelID)
+	}
+	if req.APIConfigID != nil {
+		addField("api_config_id", *req.APIConfigID)
+	}
+	if req.SystemPrompt != nil {
+		addField("system_prompt", *req.SystemPrompt)
+	}
+	if req.Temperature != nil {
+		addField("temperature", *req.Temperature)
+	}
+	if req.MaxTokens != nil {
+		addField("max_tokens", *req.MaxTokens)
+	}
+	if req.Icon != nil {
+		addField("icon", *req.Icon)
+	}
+	if req.IsShared != nil {
+		addField("is_shared", *req.IsShared)
+	}
+	if req.IsActive != nil {
+		addField("is_active", *req.IsActive)
+	}
+
+	if len(sets) == 0 {
+		c.JSON(http.StatusBadRequest, gin.H{"error": "no fields to update"})
+		return
+	}
+
+	sets = append(sets, "updated_at = NOW()")
+	args = append(args, presetID)
+
+	query := "UPDATE model_presets SET " + strings.Join(sets, ", ") + " WHERE id = $" + itoa(argN)
+	result, err := database.DB.Exec(query, args...)
+	if err != nil {
+		c.JSON(http.StatusInternalServerError, gin.H{"error": "failed to update preset"})
+		return
+	}
+
+	rows, _ := result.RowsAffected()
+	if rows == 0 {
+		c.JSON(http.StatusNotFound, gin.H{"error": "preset not found"})
+		return
+	}
+
+	c.JSON(http.StatusOK, gin.H{"status": "updated"})
+}
+
+// DeleteAdminPreset deletes any preset.
+// DELETE /api/v1/admin/presets/:id
+func (h *PresetHandler) DeleteAdminPreset(c *gin.Context) {
+	presetID := c.Param("id")
+
+	result, err := database.DB.Exec(`DELETE FROM model_presets WHERE id = $1`, presetID)
+	if err != nil {
+		c.JSON(http.StatusInternalServerError, gin.H{"error": "failed to delete preset"})
+		return
+	}
+
+	rows, _ := result.RowsAffected()
+	if rows == 0 {
+		c.JSON(http.StatusNotFound, gin.H{"error": "preset not found"})
+		return
+	}
+
+	c.JSON(http.StatusOK, gin.H{"status": "deleted"})
+}
+
+// ── Helpers ────────────────────────────────
+
+// isUserProvidersEnabled checks the global setting.
+func isUserProvidersEnabled() bool {
+	var val string
+	err := database.DB.QueryRow(
+		`SELECT value FROM global_settings WHERE key = 'user_providers_enabled'`,
+	).Scan(&val)
+	if err != nil {
+		return true // default: enabled
+	}
+	return val == "true"
+}
+
+// itoa is a minimal int-to-string for building SQL arg placeholders.
+func itoa(n int) string {
+	if n < 10 {
+		return string(rune('0' + n))
+	}
+	return itoa(n/10) + string(rune('0'+n%10))
+}
+
+// ── Preset Resolution for Completion ───────
+
+// ResolvePreset loads a preset by ID and returns its config overrides.
+// Returns nil if preset not found or inactive.
+func ResolvePreset(presetID, userID string) *models.ModelPreset {
+	var p models.ModelPreset
+	err := database.DB.QueryRow(`
+		SELECT id, name, base_model_id, api_config_id, system_prompt,
+		       temperature, max_tokens, scope, created_by, is_active
+		FROM model_presets
+		WHERE id = $1 AND is_active = true
+		  AND (
+		    scope = 'global'
+		    OR (scope = 'personal' AND created_by = $2)
+		    OR (scope = 'personal' AND is_shared = true)
+		  )
+	`, presetID, userID).Scan(
+		&p.ID, &p.Name, &p.BaseModelID, &p.APIConfigID, &p.SystemPrompt,
+		&p.Temperature, &p.MaxTokens, &p.Scope, &p.CreatedBy, &p.IsActive,
+	)
+	if err != nil {
+		return nil
+	}
+	return &p
+}