@brainfish-ai/devdoc 0.1.21

package/renderer/app/api/assets/route.ts

@@ -0,0 +1,124 @@
+import { NextRequest, NextResponse } from 'next/server'
+import { validateApiKey, listProjectAssets, deleteProjectAsset } from '@/lib/storage/blob'
+
+/**
+ * List assets API
+ * 
+ * GET /api/assets?slug=<project-slug>
+ * Headers:
+ *   Authorization: Bearer <api_key>
+ */
+export async function GET(request: NextRequest) {
+  try {
+    const { searchParams } = new URL(request.url)
+    const slug = searchParams.get('slug')
+    
+    if (!slug) {
+      return NextResponse.json(
+        { error: 'Missing slug parameter' },
+        { status: 400 }
+      )
+    }
+    
+    // Validate API key
+    const authHeader = request.headers.get('Authorization')
+    const apiKey = authHeader?.replace('Bearer ', '')
+    
+    if (!apiKey) {
+      return NextResponse.json(
+        { error: 'API key required' },
+        { status: 401 }
+      )
+    }
+    
+    const validatedSlug = await validateApiKey(apiKey)
+    if (validatedSlug !== slug) {
+      return NextResponse.json(
+        { error: 'Invalid API key for this project' },
+        { status: 403 }
+      )
+    }
+    
+    const assets = await listProjectAssets(slug)
+    
+    return NextResponse.json({
+      success: true,
+      slug,
+      assets,
+      count: assets.length,
+    })
+    
+  } catch (error) {
+    console.error('[Assets API] Error:', error)
+    const message = error instanceof Error ? error.message : String(error)
+    
+    return NextResponse.json(
+      { error: 'Failed to list assets', details: message },
+      { status: 500 }
+    )
+  }
+}
+
+/**
+ * Delete asset API
+ * 
+ * DELETE /api/assets?slug=<project-slug>&fileName=<file-name>
+ * Headers:
+ *   Authorization: Bearer <api_key>
+ */
+export async function DELETE(request: NextRequest) {
+  try {
+    const { searchParams } = new URL(request.url)
+    const slug = searchParams.get('slug')
+    const fileName = searchParams.get('fileName')
+    
+    if (!slug || !fileName) {
+      return NextResponse.json(
+        { error: 'Missing slug or fileName parameter' },
+        { status: 400 }
+      )
+    }
+    
+    // Validate API key
+    const authHeader = request.headers.get('Authorization')
+    const apiKey = authHeader?.replace('Bearer ', '')
+    
+    if (!apiKey) {
+      return NextResponse.json(
+        { error: 'API key required' },
+        { status: 401 }
+      )
+    }
+    
+    const validatedSlug = await validateApiKey(apiKey)
+    if (validatedSlug !== slug) {
+      return NextResponse.json(
+        { error: 'Invalid API key for this project' },
+        { status: 403 }
+      )
+    }
+    
+    const deleted = await deleteProjectAsset(slug, fileName)
+    
+    if (!deleted) {
+      return NextResponse.json(
+        { error: 'Asset not found' },
+        { status: 404 }
+      )
+    }
+    
+    return NextResponse.json({
+      success: true,
+      message: `Asset ${fileName} deleted`,
+    })
+    
+  } catch (error) {
+    console.error('[Assets API] Error:', error)
+    const message = error instanceof Error ? error.message : String(error)
+    
+    return NextResponse.json(
+      { error: 'Failed to delete asset', details: message },
+      { status: 500 }
+    )
+  }
+}

package/renderer/app/api/assets/upload/route.ts

@@ -0,0 +1,177 @@
+import { NextRequest, NextResponse } from 'next/server'
+import { put } from '@vercel/blob'
+import { validateApiKey } from '@/lib/storage/blob'
+import path from 'path'
+import fs from 'fs'
+
+// Max file size: 25MB
+const MAX_FILE_SIZE = 25 * 1024 * 1024
+
+// Allowed file types for assets
+const ALLOWED_TYPES = [
+  'image/jpeg',
+  'image/png',
+  'image/gif',
+  'image/webp',
+  'image/svg+xml',
+  'image/x-icon',
+  'image/vnd.microsoft.icon',
+  'application/pdf',
+  'video/mp4',
+  'video/webm',
+  'audio/mpeg',
+  'audio/wav',
+  'font/woff',
+  'font/woff2',
+  'font/ttf',
+  'font/otf',
+  'application/font-woff',
+  'application/font-woff2',
+]
+
+// Check if we're in local development mode
+const IS_LOCAL_DEV = !process.env.BLOB_READ_WRITE_TOKEN
+const LOCAL_STORAGE_DIR = path.join(process.cwd(), '.devdoc-storage')
+
+/**
+ * Upload asset API - receives files from CLI and stores in Vercel Blob
+ * 
+ * POST /api/assets/upload
+ * Headers:
+ *   Authorization: Bearer <api_key>
+ *   Content-Type: multipart/form-data
+ * Body: FormData with:
+ *   - file: File to upload
+ *   - slug: Project slug
+ *   - path: Optional path/filename for the asset
+ */
+export async function POST(request: NextRequest) {
+  try {
+    // Validate API key
+    const authHeader = request.headers.get('Authorization')
+    const apiKey = authHeader?.replace('Bearer ', '')
+    
+    if (!apiKey) {
+      return NextResponse.json(
+        { error: 'API key required. Provide via Authorization header.' },
+        { status: 401 }
+      )
+    }
+    
+    const validatedSlug = await validateApiKey(apiKey)
+    if (!validatedSlug) {
+      return NextResponse.json(
+        { error: 'Invalid API key' },
+        { status: 403 }
+      )
+    }
+    
+    // Parse multipart form data
+    const formData = await request.formData()
+    const file = formData.get('file') as File | null
+    const slug = formData.get('slug') as string | null
+    const assetPath = formData.get('path') as string | null
+    
+    if (!file) {
+      return NextResponse.json(
+        { error: 'No file provided' },
+        { status: 400 }
+      )
+    }
+    
+    if (!slug) {
+      return NextResponse.json(
+        { error: 'Project slug is required' },
+        { status: 400 }
+      )
+    }
+    
+    // Verify the API key matches the project
+    if (validatedSlug !== slug) {
+      return NextResponse.json(
+        { error: 'API key does not match project' },
+        { status: 403 }
+      )
+    }
+    
+    // Validate file size
+    if (file.size > MAX_FILE_SIZE) {
+      return NextResponse.json(
+        { error: `File size exceeds maximum allowed size of 25MB. Current size: ${(file.size / (1024 * 1024)).toFixed(2)}MB` },
+        { status: 400 }
+      )
+    }
+    
+    // Validate file type
+    const contentType = file.type
+    if (!ALLOWED_TYPES.includes(contentType) && !contentType.startsWith('image/')) {
+      return NextResponse.json(
+        { error: `File type "${contentType}" is not allowed. Allowed types: images, PDFs, videos, audio, and fonts.` },
+        { status: 400 }
+      )
+    }
+    
+    // Generate asset path
+    const fileName = assetPath || file.name
+    const sanitizedFileName = fileName.replace(/[^a-zA-Z0-9._-]/g, '_')
+    const blobPath = `projects/${slug}/assets/${sanitizedFileName}`
+    
+    // Get file buffer
+    const buffer = Buffer.from(await file.arrayBuffer())
+    
+    // Store in local filesystem or Vercel Blob
+    let url: string
+    
+    if (IS_LOCAL_DEV) {
+      // Local development - store in filesystem
+      const assetDir = path.join(LOCAL_STORAGE_DIR, 'projects', slug, 'assets')
+      fs.mkdirSync(assetDir, { recursive: true })
+      
+      const filePath = path.join(assetDir, sanitizedFileName)
+      fs.writeFileSync(filePath, buffer)
+      
+      url = `file://${filePath}`
+    } else {
+      // Production - store in Vercel Blob
+      const blob = await put(blobPath, buffer, {
+        access: 'public',
+        contentType,
+        allowOverwrite: true,
+      })
+      
+      url = blob.url
+    }
+    
+    return NextResponse.json({
+      success: true,
+      url,
+      path: blobPath,
+      fileName: sanitizedFileName,
+      size: file.size,
+      contentType,
+    })
+    
+  } catch (error) {
+    console.error('[Asset Upload API] Error:', error)
+    const message = error instanceof Error ? error.message : String(error)
+    
+    return NextResponse.json(
+      { error: 'Upload failed', details: message },
+      { status: 500 }
+    )
+  }
+}
+
+/**
+ * OPTIONS for CORS preflight
+ */
+export async function OPTIONS() {
+  return new NextResponse(null, {
+    status: 200,
+    headers: {
+      'Access-Control-Allow-Origin': '*',
+      'Access-Control-Allow-Methods': 'POST, OPTIONS',
+      'Access-Control-Allow-Headers': 'Content-Type, Authorization',
+    },
+  })
+}

package/renderer/app/api/auth-schemes/route.ts

@@ -0,0 +1,77 @@
+/**
+ * Auth Schemes API Route
+ * 
+ * Returns the security schemes defined in the OpenAPI spec
+ * so the frontend can suggest the correct auth type
+ */
+
+import { NextResponse } from 'next/server'
+import { extractSecuritySchemes, getDefaultAuth } from '@/lib/api-docs/parsers/openapi/extractors/auth'
+import type { OpenAPI } from 'openapi-types'
+
+// Import the same fetch logic as the openapi-spec route
+import { CacheUtils } from '@/lib/cache'
+
+const BRAINFISH_API_BASE_URL = process.env.BRAINFISH_API_BASE_URL || 'https://api.brainfish.ai/api'
+const BRAINFISH_CATALOG_ID = process.env.BRAINFISH_CATALOG_ID || 'your_catalog_id_here'
+const BRAINFISH_JWT_TOKEN = process.env.BRAINFISH_JWT_TOKEN || 'your_jwt_token_here'
+const CACHE_KEY = `openapi-spec-${BRAINFISH_CATALOG_ID}`
+
+// Fetch the OpenAPI spec directly (same as openapi-spec route)
+async function fetchOpenApiSpec(): Promise<OpenAPI.Document | null> {
+  try {
+    // First try cache
+    const cachedSpec = await CacheUtils.get<OpenAPI.Document>(CACHE_KEY)
+    if (cachedSpec) {
+      return cachedSpec
+    }
+
+    // Fetch from API
+    const url = `${BRAINFISH_API_BASE_URL}/catalogs.openapi-spec`
+    const response = await fetch(url, {
+      method: 'POST',
+      headers: {
+        'Authorization': `Bearer ${BRAINFISH_JWT_TOKEN}`,
+        'Accept': 'application/json',
+        'Content-Type': 'application/json',
+      },
+      body: JSON.stringify({ catalogId: BRAINFISH_CATALOG_ID }),
+      cache: 'no-store',
+    })
+    
+    if (!response.ok) {
+      return null
+    }
+    
+    return await response.json()
+  } catch {
+    return null
+  }
+}
+
+export async function GET() {
+  try {
+    const spec = await fetchOpenApiSpec()
+    
+    if (!spec) {
+      return NextResponse.json({
+        schemes: [],
+        defaultAuth: null,
+      })
+    }
+
+    const schemes = extractSecuritySchemes(spec)
+    const defaultAuth = getDefaultAuth(spec)
+
+    return NextResponse.json({
+      schemes,
+      defaultAuth,
+    })
+  } catch (error) {
+    return NextResponse.json({
+      schemes: [],
+      defaultAuth: null,
+      error: error instanceof Error ? error.message : 'Unknown error',
+    }, { status: 500 })
+  }
+}