diff --git a/aethex-bot/public/dashboard.html b/aethex-bot/public/dashboard.html
index 780d831..6e45ba6 100644
--- a/aethex-bot/public/dashboard.html
+++ b/aethex-bot/public/dashboard.html
@@ -1171,8 +1171,14 @@
🏪 Manage Shop
+
+ 🛡 Moderation
+
+
+ 📊 Analytics
+
- 🛡 Federation
+ 🌐 Federation
@@ -1712,6 +1718,171 @@
+
+
+
+
+
+
+
+
+
Warnings
+
Bans
+
Activity Feed
+
+
+
+
+
+
+
+
+
+ | User |
+ Reason |
+ Moderator |
+ Date |
+ Actions |
+
+
+
+ | Loading warnings... |
+
+
+
+
+
+
+
+
+
+
+
+
+
+ | User |
+ Reason |
+ Moderator |
+ Date |
+
+
+
+ | Loading bans... |
+
+
+
+
+
+
+
+
+
+
+
+
+
+
Active Users (7d)
+
-
+
+
+
+
+
+
+
+
+
diff --git a/aethex-bot/server/webServer.js b/aethex-bot/server/webServer.js
index 86fba7e..86a179c 100644
--- a/aethex-bot/server/webServer.js
+++ b/aethex-bot/server/webServer.js
@@ -1426,6 +1426,359 @@ function createWebServer(discordClient, supabase, options = {}) {
}
});
+ // Moderation API Endpoints
+ app.get('/api/guild/:guildId/moderation/stats', async (req, res) => {
+ if (!supabase) return res.status(503).json({ error: 'Database not available' });
+
+ const userId = req.session.user?.id;
+ if (!userId) return res.status(401).json({ error: 'Not authenticated' });
+
+ const { guildId } = req.params;
+ const userGuild = req.session.user.guilds?.find(g => g.id === guildId);
+ if (!userGuild?.isAdmin) return res.status(403).json({ error: 'No admin access' });
+
+ try {
+ const [warningsRes, bansRes, actionsRes] = await Promise.all([
+ supabase.from('warnings').select('*', { count: 'exact', head: true }).eq('guild_id', guildId),
+ supabase.from('mod_actions').select('*', { count: 'exact', head: true }).eq('guild_id', guildId).eq('action_type', 'ban'),
+ supabase.from('mod_actions').select('*', { count: 'exact', head: true }).eq('guild_id', guildId).gte('created_at', new Date(Date.now() - 7 * 24 * 60 * 60 * 1000).toISOString())
+ ]);
+
+ res.json({
+ totalWarnings: warningsRes.count || 0,
+ activeBans: bansRes.count || 0,
+ recentActions: actionsRes.count || 0
+ });
+ } catch (error) {
+ res.status(500).json({ error: 'Failed to fetch stats' });
+ }
+ });
+
+ app.get('/api/guild/:guildId/moderation/warnings', async (req, res) => {
+ if (!supabase) return res.status(503).json({ error: 'Database not available' });
+
+ const userId = req.session.user?.id;
+ if (!userId) return res.status(401).json({ error: 'Not authenticated' });
+
+ const { guildId } = req.params;
+ const userGuild = req.session.user.guilds?.find(g => g.id === guildId);
+ if (!userGuild?.isAdmin) return res.status(403).json({ error: 'No admin access' });
+
+ try {
+ const { data: warnings } = await supabase
+ .from('warnings')
+ .select('*')
+ .eq('guild_id', guildId)
+ .order('created_at', { ascending: false })
+ .limit(100);
+
+ res.json({ warnings: warnings || [] });
+ } catch (error) {
+ res.status(500).json({ error: 'Failed to fetch warnings' });
+ }
+ });
+
+ app.delete('/api/guild/:guildId/moderation/warnings/:warningId', async (req, res) => {
+ if (!supabase) return res.status(503).json({ error: 'Database not available' });
+
+ const userId = req.session.user?.id;
+ if (!userId) return res.status(401).json({ error: 'Not authenticated' });
+
+ const { guildId, warningId } = req.params;
+ const userGuild = req.session.user.guilds?.find(g => g.id === guildId);
+ if (!userGuild?.isAdmin) return res.status(403).json({ error: 'No admin access' });
+
+ try {
+ const { error } = await supabase
+ .from('warnings')
+ .delete()
+ .eq('id', warningId)
+ .eq('guild_id', guildId);
+
+ if (error) throw error;
+ res.json({ success: true });
+ } catch (error) {
+ res.status(500).json({ error: 'Failed to delete warning' });
+ }
+ });
+
+ app.get('/api/guild/:guildId/moderation/bans', async (req, res) => {
+ if (!supabase) return res.status(503).json({ error: 'Database not available' });
+
+ const userId = req.session.user?.id;
+ if (!userId) return res.status(401).json({ error: 'Not authenticated' });
+
+ const { guildId } = req.params;
+ const userGuild = req.session.user.guilds?.find(g => g.id === guildId);
+ if (!userGuild?.isAdmin) return res.status(403).json({ error: 'No admin access' });
+
+ try {
+ const { data: bans } = await supabase
+ .from('mod_actions')
+ .select('*')
+ .eq('guild_id', guildId)
+ .eq('action_type', 'ban')
+ .order('created_at', { ascending: false })
+ .limit(100);
+
+ res.json({ bans: bans || [] });
+ } catch (error) {
+ res.status(500).json({ error: 'Failed to fetch bans' });
+ }
+ });
+
+ app.get('/api/guild/:guildId/moderation/activity', async (req, res) => {
+ if (!supabase) return res.status(503).json({ error: 'Database not available' });
+
+ const userId = req.session.user?.id;
+ if (!userId) return res.status(401).json({ error: 'Not authenticated' });
+
+ const { guildId } = req.params;
+ const userGuild = req.session.user.guilds?.find(g => g.id === guildId);
+ if (!userGuild?.isAdmin) return res.status(403).json({ error: 'No admin access' });
+
+ try {
+ const { data: activity } = await supabase
+ .from('mod_actions')
+ .select('*')
+ .eq('guild_id', guildId)
+ .order('created_at', { ascending: false })
+ .limit(50);
+
+ res.json({ activity: activity || [] });
+ } catch (error) {
+ res.status(500).json({ error: 'Failed to fetch activity' });
+ }
+ });
+
+ app.get('/api/guild/:guildId/moderation/search', async (req, res) => {
+ if (!supabase) return res.status(503).json({ error: 'Database not available' });
+
+ const userId = req.session.user?.id;
+ if (!userId) return res.status(401).json({ error: 'Not authenticated' });
+
+ const { guildId } = req.params;
+ const { q } = req.query;
+ const userGuild = req.session.user.guilds?.find(g => g.id === guildId);
+ if (!userGuild?.isAdmin) return res.status(403).json({ error: 'No admin access' });
+
+ if (!q) return res.json({ results: [] });
+
+ try {
+ const { data: warnings } = await supabase
+ .from('warnings')
+ .select('user_id, username')
+ .eq('guild_id', guildId)
+ .or(`user_id.eq.${q},username.ilike.%${q}%`)
+ .limit(20);
+
+ const userMap = new Map();
+ (warnings || []).forEach(w => {
+ if (!userMap.has(w.user_id)) {
+ userMap.set(w.user_id, { user_id: w.user_id, username: w.username, warnings_count: 0, is_banned: false });
+ }
+ userMap.get(w.user_id).warnings_count++;
+ });
+
+ const { data: bans } = await supabase
+ .from('mod_actions')
+ .select('target_id')
+ .eq('guild_id', guildId)
+ .eq('action_type', 'ban');
+
+ const bannedIds = new Set((bans || []).map(b => b.target_id));
+ userMap.forEach(u => { u.is_banned = bannedIds.has(u.user_id); });
+
+ res.json({ results: Array.from(userMap.values()) });
+ } catch (error) {
+ res.status(500).json({ error: 'Search failed' });
+ }
+ });
+
+ // Analytics API Endpoints
+ app.get('/api/guild/:guildId/analytics/stats', async (req, res) => {
+ if (!supabase) return res.status(503).json({ error: 'Database not available' });
+
+ const userId = req.session.user?.id;
+ if (!userId) return res.status(401).json({ error: 'Not authenticated' });
+
+ const { guildId } = req.params;
+ const userGuild = req.session.user.guilds?.find(g => g.id === guildId);
+ if (!userGuild?.isAdmin) return res.status(403).json({ error: 'No admin access' });
+
+ const today = new Date();
+ today.setHours(0, 0, 0, 0);
+ const weekAgo = new Date(Date.now() - 7 * 24 * 60 * 60 * 1000);
+
+ try {
+ const [messagesRes, activeRes, xpRes, commandsRes] = await Promise.all([
+ supabase.from('message_logs').select('*', { count: 'exact', head: true }).eq('guild_id', guildId).gte('created_at', today.toISOString()),
+ supabase.from('user_stats').select('*', { count: 'exact', head: true }).eq('guild_id', guildId).gte('last_active', weekAgo.toISOString()),
+ supabase.from('xp_logs').select('xp_amount').eq('guild_id', guildId).gte('created_at', today.toISOString()),
+ supabase.from('command_logs').select('*', { count: 'exact', head: true }).eq('guild_id', guildId).gte('created_at', today.toISOString())
+ ]);
+
+ const xpToday = (xpRes.data || []).reduce((sum, r) => sum + (r.xp_amount || 0), 0);
+
+ res.json({
+ messagesToday: messagesRes.count || 0,
+ activeUsers: activeRes.count || 0,
+ xpToday,
+ commandsUsed: commandsRes.count || 0
+ });
+ } catch (error) {
+ res.json({ messagesToday: 0, activeUsers: 0, xpToday: 0, commandsUsed: 0 });
+ }
+ });
+
+ app.get('/api/guild/:guildId/analytics/activity', async (req, res) => {
+ if (!supabase) return res.status(503).json({ error: 'Database not available' });
+
+ const userId = req.session.user?.id;
+ if (!userId) return res.status(401).json({ error: 'Not authenticated' });
+
+ const { guildId } = req.params;
+ const userGuild = req.session.user.guilds?.find(g => g.id === guildId);
+ if (!userGuild?.isAdmin) return res.status(403).json({ error: 'No admin access' });
+
+ try {
+ const days = [];
+ const dayNames = ['Sun', 'Mon', 'Tue', 'Wed', 'Thu', 'Fri', 'Sat'];
+
+ for (let i = 6; i >= 0; i--) {
+ const date = new Date();
+ date.setDate(date.getDate() - i);
+ date.setHours(0, 0, 0, 0);
+
+ const nextDate = new Date(date);
+ nextDate.setDate(nextDate.getDate() + 1);
+
+ const { count } = await supabase
+ .from('message_logs')
+ .select('*', { count: 'exact', head: true })
+ .eq('guild_id', guildId)
+ .gte('created_at', date.toISOString())
+ .lt('created_at', nextDate.toISOString());
+
+ days.push({
+ label: dayNames[date.getDay()],
+ messages: count || 0
+ });
+ }
+
+ res.json({ days });
+ } catch (error) {
+ res.json({ days: [] });
+ }
+ });
+
+ app.get('/api/guild/:guildId/analytics/top-earners', async (req, res) => {
+ if (!supabase) return res.status(503).json({ error: 'Database not available' });
+
+ const userId = req.session.user?.id;
+ if (!userId) return res.status(401).json({ error: 'Not authenticated' });
+
+ const { guildId } = req.params;
+ const userGuild = req.session.user.guilds?.find(g => g.id === guildId);
+ if (!userGuild?.isAdmin) return res.status(403).json({ error: 'No admin access' });
+
+ const today = new Date();
+ today.setHours(0, 0, 0, 0);
+
+ try {
+ const { data } = await supabase
+ .from('xp_logs')
+ .select('user_id, xp_amount')
+ .eq('guild_id', guildId)
+ .gte('created_at', today.toISOString());
+
+ const userXp = new Map();
+ (data || []).forEach(r => {
+ userXp.set(r.user_id, (userXp.get(r.user_id) || 0) + (r.xp_amount || 0));
+ });
+
+ const earners = Array.from(userXp.entries())
+ .map(([user_id, xp_earned]) => ({ user_id, xp_earned }))
+ .sort((a, b) => b.xp_earned - a.xp_earned)
+ .slice(0, 10);
+
+ res.json({ earners });
+ } catch (error) {
+ res.json({ earners: [] });
+ }
+ });
+
+ app.get('/api/guild/:guildId/analytics/top-channels', async (req, res) => {
+ if (!supabase) return res.status(503).json({ error: 'Database not available' });
+
+ const userId = req.session.user?.id;
+ if (!userId) return res.status(401).json({ error: 'Not authenticated' });
+
+ const { guildId } = req.params;
+ const userGuild = req.session.user.guilds?.find(g => g.id === guildId);
+ if (!userGuild?.isAdmin) return res.status(403).json({ error: 'No admin access' });
+
+ const today = new Date();
+ today.setHours(0, 0, 0, 0);
+
+ try {
+ const { data } = await supabase
+ .from('message_logs')
+ .select('channel_id, channel_name')
+ .eq('guild_id', guildId)
+ .gte('created_at', today.toISOString());
+
+ const channelCounts = new Map();
+ (data || []).forEach(r => {
+ const key = r.channel_id;
+ if (!channelCounts.has(key)) {
+ channelCounts.set(key, { channel_id: r.channel_id, channel_name: r.channel_name, message_count: 0 });
+ }
+ channelCounts.get(key).message_count++;
+ });
+
+ const channels = Array.from(channelCounts.values())
+ .sort((a, b) => b.message_count - a.message_count)
+ .slice(0, 10);
+
+ res.json({ channels });
+ } catch (error) {
+ res.json({ channels: [] });
+ }
+ });
+
+ app.get('/api/guild/:guildId/analytics/commands', async (req, res) => {
+ if (!supabase) return res.status(503).json({ error: 'Database not available' });
+
+ const userId = req.session.user?.id;
+ if (!userId) return res.status(401).json({ error: 'Not authenticated' });
+
+ const { guildId } = req.params;
+ const userGuild = req.session.user.guilds?.find(g => g.id === guildId);
+ if (!userGuild?.isAdmin) return res.status(403).json({ error: 'No admin access' });
+
+ try {
+ const { data } = await supabase
+ .from('command_logs')
+ .select('command_name')
+ .eq('guild_id', guildId);
+
+ const commandCounts = new Map();
+ (data || []).forEach(r => {
+ commandCounts.set(r.command_name, (commandCounts.get(r.command_name) || 0) + 1);
+ });
+
+ const commands = Array.from(commandCounts.entries())
+ .map(([command_name, use_count]) => ({ command_name, use_count }))
+ .sort((a, b) => b.use_count - a.use_count)
+ .slice(0, 10);
+
+ res.json({ commands });
+ } catch (error) {
+ res.json({ commands: [] });
+ }
+ });
+
app.get('/health', (req, res) => {
res.json({
status: 'ok',