@devvistatech/devvista-kit 0.0.10 → 0.0.12

package/app/api/adRequest/route.ts

@@ -1,568 +1,568 @@
-import { NextRequest, NextResponse } from "next/server";
-import { getAuth } from "@clerk/nextjs/server";
-import nodemailer from "nodemailer";
-
-interface StrapiUser {
-    id: number;
-    username: string;
-    email: string;
-    businessAdminId?: string;
-    businessTitle?: string;
-}
-
-interface AdRequest {
-    id: number;
-    documentId: string;
-    platform: string;
-    adType: string;
-    description: string;
-    timestamp: string;
-    userId: string;
-    credits: number;
-    lastResetDate: string;
-    nextResetDate: string;
-}
-
-const AD_REQUEST_API_URL = process.env.STRAPI_AD_REQUEST_API_URL || "";
-const STRAPI_USER_LIST_API_URL = process.env.STRAPI_USER_LIST_API_URL || "";
-const ADMIN_BUSINESS_ID = process.env.ADMIN_BUSINESS_ID || "";
-const STRAPI_API_TOKEN = process.env.STRAPI_API_TOKEN || "";
-const DEVVISTA_EMAIL = process.env.FROM_EMAIL || "";
-const FROM_EMAIL = process.env.FROM_EMAIL || "";
-const SMTP_HOST = process.env.SMTP_HOST || "";
-const SMTP_PORT = process.env.SMTP_PORT || "";
-const SMTP_USERNAME = process.env.SMTP_USERNAME || "";
-const SMTP_PASSWORD = process.env.SMTP_PASSWORD || "";
-
-async function verifyUser(userId: string): Promise<StrapiUser | null> {
-    try {
-        const response = await fetch(
-            `${STRAPI_USER_LIST_API_URL}?filters[authId][$eq]=${userId}`,
-            {
-                headers: {
-                    Authorization: `Bearer ${STRAPI_API_TOKEN}`,
-                    "Content-Type": "application/json",
-                },
-            }
-        );
-
-        if (!response.ok) {
-            console.error("User verification failed:", response.status);
-            return null;
-        }
-
-        const userData = await response.json();
-        const strapiUser = userData.data?.find((user: any) => user.authId === userId);
-        if (!strapiUser) return null;
-
-        return {
-            id: strapiUser.id,
-            username: strapiUser.username,
-            email: strapiUser.email,
-            businessAdminId: strapiUser.businessAdminId,
-            businessTitle: strapiUser.businessTitle,
-        };
-    } catch (error) {
-        console.error("Error verifying user:", error);
-        return null;
-    }
-}
-
-async function getUserCreditsAndRequests(userId: string, isAdmin: boolean): Promise<{ adRequests: AdRequest[]; credits: AdRequest | null }> {
-    try {
-        const response = await fetch(
-            `${AD_REQUEST_API_URL}?pagination[pageSize]=100&fields[0]=platform&fields[1]=adType&fields[2]=description&fields[3]=timestamp&fields[4]=userId&fields[5]=credits&fields[6]=lastResetDate&fields[7]=nextResetDate&fields[8]=id&fields[9]=documentId${isAdmin ? "" : `&filters[userId][$eq]=${userId}`
-            }`,
-            {
-                headers: {
-                    "Content-Type": "application/json",
-                    Authorization: `Bearer ${STRAPI_API_TOKEN}`,
-                },
-                cache: "no-store",
-            }
-        );
-
-        if (!response.ok) {
-            const errorText = await response.text();
-            throw new Error(`Failed to fetch ad requests: ${errorText}`);
-        }
-
-        const result = await response.json();
-        const adRequests = (result.data || []).map((req: any) => ({
-            id: req.id || 0,
-            documentId: req.documentId || "",
-            platform: req.attributes?.platform || req.platform || "",
-            adType: req.attributes?.adType || req.adType || "",
-            description: req.attributes?.description || req.description || "",
-            timestamp: req.attributes?.timestamp || req.timestamp || new Date().toISOString(),
-            userId: req.attributes?.userId || req.userId || "",
-            credits: req.attributes?.credits ?? 3,
-            lastResetDate: req.attributes?.lastResetDate || new Date().toISOString(),
-            nextResetDate:
-                req.attributes?.nextResetDate ||
-                new Date(new Date().getFullYear(), new Date().getMonth() + 1, 1).toISOString(),
-        }));
-
-        // Count ad requests in the current month and year
-        const now = new Date();
-        const currentMonth = now.getMonth();
-        const currentYear = now.getFullYear();
-        const monthlyRequests = adRequests.filter((req: AdRequest) => {
-            const requestDate = new Date(req.timestamp);
-            return (
-                req.userId === userId &&
-                req.platform && // Ensure it's an actual ad request
-                req.adType &&
-                requestDate.getMonth() === currentMonth &&
-                requestDate.getFullYear() === currentYear
-            );
-        });
-
-        // Calculate remaining credits as 3 minus the number of requests this month
-        const remainingCredits = 3 - monthlyRequests.length;
-
-        // Get the latest record for reset dates
-        const latestRecord = adRequests
-            .filter((req: AdRequest) => req.userId === userId)
-            .sort((a: AdRequest, b: AdRequest) => new Date(b.timestamp).getTime() - new Date(a.timestamp).getTime())[0];
-
-        // Create a credits object for the UI
-        const creditsData = {
-            id: latestRecord?.id || 0,
-            documentId: latestRecord?.documentId || "",
-            platform: "",
-            adType: "",
-            description: "",
-            timestamp: latestRecord?.timestamp || new Date().toISOString(),
-            userId,
-            credits: remainingCredits,
-            lastResetDate: latestRecord?.lastResetDate || new Date().toISOString(),
-            nextResetDate:
-                latestRecord?.nextResetDate ||
-                new Date(currentYear, currentMonth + 1, 1).toISOString(),
-        };
-
-        return {
-            adRequests: adRequests.filter((req: AdRequest) => req.platform && req.adType), // Filter out credit-only records
-            credits: creditsData,
-        };
-    } catch (error) {
-        console.error("Error fetching user credits and requests:", error);
-        throw error;
-    }
-}
-
-export async function GET(request: NextRequest) {
-    try {
-        if (!AD_REQUEST_API_URL || !STRAPI_API_TOKEN) {
-            return NextResponse.json(
-                { error: "Server configuration error: Missing required environment variables" },
-                { status: 500 }
-            );
-        }
-
-        const { userId } = getAuth(request);
-        if (!userId) {
-            return NextResponse.json({ error: "Unauthorized: No user ID" }, { status: 401 });
-        }
-
-        const user = await verifyUser(userId);
-        if (!user) {
-            return NextResponse.json({ error: "Unauthorized: User not found" }, { status: 403 });
-        }
-
-        const isAdmin = user.businessAdminId === ADMIN_BUSINESS_ID;
-        const { adRequests, credits } = await getUserCreditsAndRequests(userId, isAdmin);
-
-        return NextResponse.json({ data: { adRequests, credits } });
-    } catch (error) {
-        console.error("GET /api/adRequest: Error:", error);
-        return NextResponse.json(
-            { error: error instanceof Error ? error.message : "An error occurred while fetching ad requests" },
-            { status: 500 }
-        );
-    }
-}
-
-export async function POST(request: NextRequest) {
-    const { userId } = getAuth(request);
-    if (!userId) {
-        return NextResponse.json({ error: "Unauthorized: No user ID" }, { status: 401 });
-    }
-
-    const user = await verifyUser(userId);
-    if (!user) {
-        return NextResponse.json({ error: "Unauthorized: User not found" }, { status: 403 });
-    }
-
-    try {
-        if (!AD_REQUEST_API_URL || !STRAPI_API_TOKEN) {
-            return NextResponse.json(
-                { error: "Server configuration error: Missing required environment variables" },
-                { status: 500 }
-            );
-        }
-
-        if (!FROM_EMAIL || !DEVVISTA_EMAIL || !SMTP_HOST || !SMTP_PORT || !SMTP_USERNAME || !SMTP_PASSWORD) {
-            console.error("SMTP configuration is incomplete");
-            return NextResponse.json(
-                { error: "Server configuration error: SMTP configuration is incomplete" },
-                { status: 500 }
-            );
-        }
-
-        const { data } = await request.json();
-        if (!data || !data.platform || !data.adType) {
-            return NextResponse.json({ error: "Missing required fields" }, { status: 400 });
-        }
-
-        const isAdmin = user.businessAdminId === ADMIN_BUSINESS_ID;
-        const { credits } = await getUserCreditsAndRequests(userId, isAdmin);
-
-        // Enforce 3-request limit per month
-        if (credits && credits.credits <= 0) {
-            return NextResponse.json({ error: "Monthly ad request limit reached (3 requests)" }, { status: 400 });
-        }
-
-        const now = new Date();
-        const nextResetDate = new Date(now.getFullYear(), now.getMonth() + 1, 1).toISOString();
-
-        const response = await fetch(AD_REQUEST_API_URL, {
-            method: "POST",
-            headers: {
-                "Content-Type": "application/json",
-                Authorization: `Bearer ${STRAPI_API_TOKEN}`,
-            },
-            body: JSON.stringify({
-                data: {
-                    platform: data.platform,
-                    adType: data.adType,
-                    description: data.description || null,
-                    timestamp: new Date().toISOString(),
-                    userId,
-                    credits: credits ? credits.credits - 1 : 2, // Store for UI display
-                    lastResetDate: credits?.lastResetDate || new Date().toISOString(),
-                    nextResetDate: credits?.nextResetDate || nextResetDate,
-                },
-            }),
-        });
-
-        if (!response.ok) {
-            const errorText = await response.text();
-            let errorData = {};
-            try {
-                errorData = JSON.parse(errorText);
-            } catch (parseError) {
-                console.error("Failed to parse Strapi response:", parseError);
-            }
-            return NextResponse.json(
-                { error: `Failed to create ad request: ${response.status} - ${JSON.stringify(errorData)}` },
-                { status: response.status }
-            );
-        }
-
-        // Send email notification
-        const transporter = nodemailer.createTransport({
-            host: SMTP_HOST,
-            port: Number(SMTP_PORT),
-            auth: {
-                user: SMTP_USERNAME,
-                pass: SMTP_PASSWORD,
-            },
-        });
-
-        await transporter.sendMail({
-            from: `"DevVista Kit Email Service" <${FROM_EMAIL}>`,
-            to: DEVVISTA_EMAIL,
-            subject: `New Ad Request: ${data.adType}`,
-            text: `
-        Platform: ${data.platform}
-        Ad Type: ${data.adType}
-        Description: ${data.description || "No description provided"}
-        User Email: ${user.email}
-        Business Title: ${user.businessTitle || "Not provided"}
-        Timestamp: ${new Date().toLocaleString()}
-      `,
-            html: `
-        <!DOCTYPE html>
-        <html lang="en">
-        <head>
-          <meta charset="UTF-8">
-          <meta name="viewport" content="width=device-width, initial-scale=1.0">
-          <title>New Ad Request</title>
-          <style>
-            * {
-              margin: 0;
-              padding: 0;
-              box-sizing: border-box;
-            }
-            body {
-              font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Oxygen, Ubuntu, Cantarell, 'Open Sans', 'Helvetica Neue', sans-serif;
-              background-color: #f4f7fa;
-              color: #333333;
-              line-height: 1.6;
-            }
-            .container {
-              max-width: 600px;
-              margin: 20px auto;
-              background-color: #ffffff;
-              border-radius: 8px;
-              overflow: hidden;
-              box-shadow: 0 2px 4px rgba(0, 0, 0, 0.1);
-            }
-            .header {
-              background-color: #2c3e50;
-              padding: 20px;
-              text-align: center;
-            }
-.header .business-name {
-  color: white;
-  font-size: 28px;
-  font-weight: bold;
-  margin-bottom: 10px;
-}
-            .header h1 {
-              color: #ffffff;
-              font-size: 24px;
-              margin-top: 10px;
-            }
-            .content {
-              padding: 30px;
-            }
-            .content h2 {
-              font-size: 20px;
-              color: #2c3e50;
-              margin-bottom: 20px;
-            }
-            .content p {
-              margin-bottom: 15px;
-              font-size: 16px;
-            }
-            .content .label {
-              font-weight: 600;
-              color: #2c3e50;
-            }
-            .content .button {
-              display: inline-block;
-              padding: 12px 24px;
-              margin-top: 20px;
-              background-color: #3498db;
-              color: #ffffff;
-              text-decoration: none;
-              border-radius: 4px;
-              font-size: 16px;
-              font-weight: 500;
-            }
-            .content .button:hover {
-              background-color: #2980b9;
-            }
-            .footer {
-              background-color: #ecf0f1;
-              padding: 20px;
-              text-align: center;
-              font-size: 14px;
-              color: #7f8c8d;
-            }
-            .footer a {
-              color: #3498db;
-              text-decoration: none;
-            }
-            .footer a:hover {
-              text-decoration: underline;
-            }
-            @media only screen and (max-width: 600px) {
-              .container {
-                margin: 10px;
-                border-radius: 0;
-              }
-              .header {
-                padding: 15px;
-              }
-              .header .business-name {
-                font-size: 24px;
-              }
-              .header h1 {
-                font-size: 20px;
-              }
-              .content {
-                padding: 20px;
-              }
-              .content h2 {
-                font-size: 18px;
-              }
-              .content p {
-                font-size: 14px;
-              }
-              .content .button {
-                padding: 10px 20px;
-                font-size: 14px;
-              }
-              .footer {
-                padding: 15px;
-                font-size: 12px;
-              }
-            }
-          </style>
-        </head>
-        <body>
-          <div class="container">
-            <div class="header">
-              <div class="business-name">DevVista</div>
-              <h1>New Ad Request</h1>
-            </div>
-            <div class="content">
-              <h2>Ad Request Details</h2>
-              <p><span class="label">Platform:</span> ${data.platform}</p>
-              <p><span class="label">Ad Type:</span> ${data.adType}</p>
-              <p><span class="label">Description:</span> ${data.description || "No description provided"}</p>
-              <p><span class="label">User Email:</span> <a href="mailto:${user.email}">${user.email}</a></p>
-              <p><span class="label">Business Title:</span> ${user.businessTitle || "Not provided"}</p>
-              <p><span class="label">Timestamp:</span> ${new Date().toLocaleString()}</p>
-              <a href="mailto:${user.email}" class="button">Reply to User</a>
-            </div>
-            <div class="footer">
-              <p>© ${new Date().getFullYear()} DevVista. All rights reserved.</p>
-              <p><a href="https://devvistatech.com/">Visit our website</a> | <a href="mailto:devvistainfo@gmail.com">Contact Support</a></p>
-            </div>
-          </div>
-        </body>
-        </html>
-      `,
-            replyTo: user.email,
-        });
-
-        const { adRequests, credits: updatedCredits } = await getUserCreditsAndRequests(userId, isAdmin);
-
-        return NextResponse.json({ data: { adRequests, credits: updatedCredits } });
-    } catch (error) {
-        console.error("POST /api/adRequest: Error:", error);
-        return NextResponse.json(
-            { error: error instanceof Error ? error.message : "An error occurred while creating ad request" },
-            { status: 500 }
-        );
-    }
-}
-
-export async function PUT(request: NextRequest) {
-    const { userId } = getAuth(request);
-    if (!userId) {
-        return NextResponse.json({ error: "Unauthorized: No user ID" }, { status: 401 });
-    }
-
-    const user = await verifyUser(userId);
-    if (!user || user.businessAdminId !== ADMIN_BUSINESS_ID) {
-        return NextResponse.json({ error: "Unauthorized: Only admin can reset credits" }, { status: 403 });
-    }
-
-    try {
-        if (!AD_REQUEST_API_URL || !STRAPI_API_TOKEN) {
-            return NextResponse.json(
-                { error: "Server configuration error: Missing required environment variables" },
-                { status: 500 }
-            );
-        }
-
-        const { userId: targetUserId, credits, lastResetDate, nextResetDate } = await request.json();
-        if (!targetUserId) {
-            return NextResponse.json({ error: "Missing userId" }, { status: 400 });
-        }
-
-        const { credits: currentCredits } = await getUserCreditsAndRequests(targetUserId, true);
-        const documentId = currentCredits?.documentId;
-
-        const response = await fetch(
-            documentId ? `${AD_REQUEST_API_URL}/${documentId}` : AD_REQUEST_API_URL,
-            {
-                method: documentId ? "PUT" : "POST",
-                headers: {
-                    "Content-Type": "application/json",
-                    Authorization: `Bearer ${STRAPI_API_TOKEN}`,
-                },
-                body: JSON.stringify({
-                    data: {
-                        userId: targetUserId,
-                        credits: credits || 3,
-                        lastResetDate: lastResetDate || new Date().toISOString(),
-                        nextResetDate:
-                            nextResetDate ||
-                            new Date(new Date().getFullYear(), new Date().getMonth() + 1, 1).toISOString(),
-                        platform: null,
-                        adType: null,
-                        description: null,
-                        timestamp: new Date().toISOString(),
-                    },
-                }),
-            }
-        );
-
-        if (!response.ok) {
-            const errorText = await response.text();
-            return NextResponse.json(
-                { error: `Failed to reset credits: ${errorText}` },
-                { status: response.status }
-            );
-        }
-
-        const { adRequests, credits: updatedCredits } = await getUserCreditsAndRequests(targetUserId, true);
-
-        return NextResponse.json({ data: { adRequests, credits: updatedCredits } });
-    } catch (error) {
-        console.error("PUT /api/adRequest: Error:", error);
-        return NextResponse.json(
-            { error: error instanceof Error ? error.message : "An error occurred while resetting credits" },
-            { status: 500 }
-        );
-    }
-}
-
-export async function DELETE(request: NextRequest) {
-    const { userId } = getAuth(request);
-    if (!userId) {
-        return NextResponse.json({ error: "Unauthorized: No user ID" }, { status: 401 });
-    }
-
-    const user = await verifyUser(userId);
-    if (!user || user.businessAdminId !== ADMIN_BUSINESS_ID) {
-        return NextResponse.json({ error: "Unauthorized: Only admin can delete ad requests" }, { status: 403 });
-    }
-
-    try {
-        if (!AD_REQUEST_API_URL || !STRAPI_API_TOKEN) {
-            return NextResponse.json(
-                { error: "Server configuration error: Missing required environment variables" },
-                { status: 500 }
-            );
-        }
-
-        const { documentId } = await request.json();
-        if (!documentId) {
-            return NextResponse.json({ error: "Missing documentId" }, { status: 400 });
-        }
-
-        const response = await fetch(`${AD_REQUEST_API_URL}/${documentId}`, {
-            method: "DELETE",
-            headers: {
-                "Content-Type": "application/json",
-                Authorization: `Bearer ${STRAPI_API_TOKEN}`,
-            },
-        });
-
-        if (!response.ok) {
-            const errorText = await response.text();
-            return NextResponse.json(
-                { error: `Failed to delete ad request: ${errorText}` },
-                { status: response.status }
-            );
-        }
-
-        const { adRequests, credits } = await getUserCreditsAndRequests(userId, true);
-
-        return NextResponse.json({ data: { adRequests, credits } });
-    } catch (error) {
-        console.error("DELETE /api/adRequest: Error:", error);
-        return NextResponse.json(
-            { error: error instanceof Error ? error.message : "An error occurred while deleting ad request" },
-            { status: 500 }
-        );
-    }
+import { NextRequest, NextResponse } from "next/server";
+import { getAuth } from "@clerk/nextjs/server";
+import nodemailer from "nodemailer";
+
+interface StrapiUser {
+    id: number;
+    username: string;
+    email: string;
+    businessAdminId?: string;
+    businessTitle?: string;
+}
+
+interface AdRequest {
+    id: number;
+    documentId: string;
+    platform: string;
+    adType: string;
+    description: string;
+    timestamp: string;
+    userId: string;
+    credits: number;
+    lastResetDate: string;
+    nextResetDate: string;
+}
+
+const AD_REQUEST_API_URL = process.env.STRAPI_AD_REQUEST_API_URL || "";
+const STRAPI_USER_LIST_API_URL = process.env.STRAPI_USER_LIST_API_URL || "";
+const ADMIN_BUSINESS_ID = process.env.ADMIN_BUSINESS_ID || "";
+const STRAPI_API_TOKEN = process.env.STRAPI_API_TOKEN || "";
+const DEVVISTA_EMAIL = process.env.FROM_EMAIL || "";
+const FROM_EMAIL = process.env.FROM_EMAIL || "";
+const SMTP_HOST = process.env.SMTP_HOST || "";
+const SMTP_PORT = process.env.SMTP_PORT || "";
+const SMTP_USERNAME = process.env.SMTP_USERNAME || "";
+const SMTP_PASSWORD = process.env.SMTP_PASSWORD || "";
+
+async function verifyUser(userId: string): Promise<StrapiUser | null> {
+    try {
+        const response = await fetch(
+            `${STRAPI_USER_LIST_API_URL}?filters[authId][$eq]=${userId}`,
+            {
+                headers: {
+                    Authorization: `Bearer ${STRAPI_API_TOKEN}`,
+                    "Content-Type": "application/json",
+                },
+            }
+        );
+
+        if (!response.ok) {
+            console.error("User verification failed:", response.status);
+            return null;
+        }
+
+        const userData = await response.json();
+        const strapiUser = userData.data?.find((user: any) => user.authId === userId);
+        if (!strapiUser) return null;
+
+        return {
+            id: strapiUser.id,
+            username: strapiUser.username,
+            email: strapiUser.email,
+            businessAdminId: strapiUser.businessAdminId,
+            businessTitle: strapiUser.businessTitle,
+        };
+    } catch (error) {
+        console.error("Error verifying user:", error);
+        return null;
+    }
+}
+
+async function getUserCreditsAndRequests(userId: string, isAdmin: boolean): Promise<{ adRequests: AdRequest[]; credits: AdRequest | null }> {
+    try {
+        const response = await fetch(
+            `${AD_REQUEST_API_URL}?pagination[pageSize]=100&fields[0]=platform&fields[1]=adType&fields[2]=description&fields[3]=timestamp&fields[4]=userId&fields[5]=credits&fields[6]=lastResetDate&fields[7]=nextResetDate&fields[8]=id&fields[9]=documentId${isAdmin ? "" : `&filters[userId][$eq]=${userId}`
+            }`,
+            {
+                headers: {
+                    "Content-Type": "application/json",
+                    Authorization: `Bearer ${STRAPI_API_TOKEN}`,
+                },
+                cache: "no-store",
+            }
+        );
+
+        if (!response.ok) {
+            const errorText = await response.text();
+            throw new Error(`Failed to fetch ad requests: ${errorText}`);
+        }
+
+        const result = await response.json();
+        const adRequests = (result.data || []).map((req: any) => ({
+            id: req.id || 0,
+            documentId: req.documentId || "",
+            platform: req.attributes?.platform || req.platform || "",
+            adType: req.attributes?.adType || req.adType || "",
+            description: req.attributes?.description || req.description || "",
+            timestamp: req.attributes?.timestamp || req.timestamp || new Date().toISOString(),
+            userId: req.attributes?.userId || req.userId || "",
+            credits: req.attributes?.credits ?? 3,
+            lastResetDate: req.attributes?.lastResetDate || new Date().toISOString(),
+            nextResetDate:
+                req.attributes?.nextResetDate ||
+                new Date(new Date().getFullYear(), new Date().getMonth() + 1, 1).toISOString(),
+        }));
+
+        // Count ad requests in the current month and year
+        const now = new Date();
+        const currentMonth = now.getMonth();
+        const currentYear = now.getFullYear();
+        const monthlyRequests = adRequests.filter((req: AdRequest) => {
+            const requestDate = new Date(req.timestamp);
+            return (
+                req.userId === userId &&
+                req.platform && // Ensure it's an actual ad request
+                req.adType &&
+                requestDate.getMonth() === currentMonth &&
+                requestDate.getFullYear() === currentYear
+            );
+        });
+
+        // Calculate remaining credits as 3 minus the number of requests this month
+        const remainingCredits = 3 - monthlyRequests.length;
+
+        // Get the latest record for reset dates
+        const latestRecord = adRequests
+            .filter((req: AdRequest) => req.userId === userId)
+            .sort((a: AdRequest, b: AdRequest) => new Date(b.timestamp).getTime() - new Date(a.timestamp).getTime())[0];
+
+        // Create a credits object for the UI
+        const creditsData = {
+            id: latestRecord?.id || 0,
+            documentId: latestRecord?.documentId || "",
+            platform: "",
+            adType: "",
+            description: "",
+            timestamp: latestRecord?.timestamp || new Date().toISOString(),
+            userId,
+            credits: remainingCredits,
+            lastResetDate: latestRecord?.lastResetDate || new Date().toISOString(),
+            nextResetDate:
+                latestRecord?.nextResetDate ||
+                new Date(currentYear, currentMonth + 1, 1).toISOString(),
+        };
+
+        return {
+            adRequests: adRequests.filter((req: AdRequest) => req.platform && req.adType), // Filter out credit-only records
+            credits: creditsData,
+        };
+    } catch (error) {
+        console.error("Error fetching user credits and requests:", error);
+        throw error;
+    }
+}
+
+export async function GET(request: NextRequest) {
+    try {
+        if (!AD_REQUEST_API_URL || !STRAPI_API_TOKEN) {
+            return NextResponse.json(
+                { error: "Server configuration error: Missing required environment variables" },
+                { status: 500 }
+            );
+        }
+
+        const { userId } = getAuth(request);
+        if (!userId) {
+            return NextResponse.json({ error: "Unauthorized: No user ID" }, { status: 401 });
+        }
+
+        const user = await verifyUser(userId);
+        if (!user) {
+            return NextResponse.json({ error: "Unauthorized: User not found" }, { status: 403 });
+        }
+
+        const isAdmin = user.businessAdminId === ADMIN_BUSINESS_ID;
+        const { adRequests, credits } = await getUserCreditsAndRequests(userId, isAdmin);
+
+        return NextResponse.json({ data: { adRequests, credits } });
+    } catch (error) {
+        console.error("GET /api/adRequest: Error:", error);
+        return NextResponse.json(
+            { error: error instanceof Error ? error.message : "An error occurred while fetching ad requests" },
+            { status: 500 }
+        );
+    }
+}
+
+export async function POST(request: NextRequest) {
+    const { userId } = getAuth(request);
+    if (!userId) {
+        return NextResponse.json({ error: "Unauthorized: No user ID" }, { status: 401 });
+    }
+
+    const user = await verifyUser(userId);
+    if (!user) {
+        return NextResponse.json({ error: "Unauthorized: User not found" }, { status: 403 });
+    }
+
+    try {
+        if (!AD_REQUEST_API_URL || !STRAPI_API_TOKEN) {
+            return NextResponse.json(
+                { error: "Server configuration error: Missing required environment variables" },
+                { status: 500 }
+            );
+        }
+
+        if (!FROM_EMAIL || !DEVVISTA_EMAIL || !SMTP_HOST || !SMTP_PORT || !SMTP_USERNAME || !SMTP_PASSWORD) {
+            console.error("SMTP configuration is incomplete");
+            return NextResponse.json(
+                { error: "Server configuration error: SMTP configuration is incomplete" },
+                { status: 500 }
+            );
+        }
+
+        const { data } = await request.json();
+        if (!data || !data.platform || !data.adType) {
+            return NextResponse.json({ error: "Missing required fields" }, { status: 400 });
+        }
+
+        const isAdmin = user.businessAdminId === ADMIN_BUSINESS_ID;
+        const { credits } = await getUserCreditsAndRequests(userId, isAdmin);
+
+        // Enforce 3-request limit per month
+        if (credits && credits.credits <= 0) {
+            return NextResponse.json({ error: "Monthly ad request limit reached (3 requests)" }, { status: 400 });
+        }
+
+        const now = new Date();
+        const nextResetDate = new Date(now.getFullYear(), now.getMonth() + 1, 1).toISOString();
+
+        const response = await fetch(AD_REQUEST_API_URL, {
+            method: "POST",
+            headers: {
+                "Content-Type": "application/json",
+                Authorization: `Bearer ${STRAPI_API_TOKEN}`,
+            },
+            body: JSON.stringify({
+                data: {
+                    platform: data.platform,
+                    adType: data.adType,
+                    description: data.description || null,
+                    timestamp: new Date().toISOString(),
+                    userId,
+                    credits: credits ? credits.credits - 1 : 2, // Store for UI display
+                    lastResetDate: credits?.lastResetDate || new Date().toISOString(),
+                    nextResetDate: credits?.nextResetDate || nextResetDate,
+                },
+            }),
+        });
+
+        if (!response.ok) {
+            const errorText = await response.text();
+            let errorData = {};
+            try {
+                errorData = JSON.parse(errorText);
+            } catch (parseError) {
+                console.error("Failed to parse Strapi response:", parseError);
+            }
+            return NextResponse.json(
+                { error: `Failed to create ad request: ${response.status} - ${JSON.stringify(errorData)}` },
+                { status: response.status }
+            );
+        }
+
+        // Send email notification
+        const transporter = nodemailer.createTransport({
+            host: SMTP_HOST,
+            port: Number(SMTP_PORT),
+            auth: {
+                user: SMTP_USERNAME,
+                pass: SMTP_PASSWORD,
+            },
+        });
+
+        await transporter.sendMail({
+            from: `"DevVista Kit Email Service" <${FROM_EMAIL}>`,
+            to: DEVVISTA_EMAIL,
+            subject: `New Ad Request: ${data.adType}`,
+            text: `
+        Platform: ${data.platform}
+        Ad Type: ${data.adType}
+        Description: ${data.description || "No description provided"}
+        User Email: ${user.email}
+        Business Title: ${user.businessTitle || "Not provided"}
+        Timestamp: ${new Date().toLocaleString()}
+      `,
+            html: `
+        <!DOCTYPE html>
+        <html lang="en">
+        <head>
+          <meta charset="UTF-8">
+          <meta name="viewport" content="width=device-width, initial-scale=1.0">
+          <title>New Ad Request</title>
+          <style>
+            * {
+              margin: 0;
+              padding: 0;
+              box-sizing: border-box;
+            }
+            body {
+              font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Oxygen, Ubuntu, Cantarell, 'Open Sans', 'Helvetica Neue', sans-serif;
+              background-color: #f4f7fa;
+              color: #333333;
+              line-height: 1.6;
+            }
+            .container {
+              max-width: 600px;
+              margin: 20px auto;
+              background-color: #ffffff;
+              border-radius: 8px;
+              overflow: hidden;
+              box-shadow: 0 2px 4px rgba(0, 0, 0, 0.1);
+            }
+            .header {
+              background-color: #2c3e50;
+              padding: 20px;
+              text-align: center;
+            }
+.header .business-name {
+  color: white;
+  font-size: 28px;
+  font-weight: bold;
+  margin-bottom: 10px;
+}
+            .header h1 {
+              color: #ffffff;
+              font-size: 24px;
+              margin-top: 10px;
+            }
+            .content {
+              padding: 30px;
+            }
+            .content h2 {
+              font-size: 20px;
+              color: #2c3e50;
+              margin-bottom: 20px;
+            }
+            .content p {
+              margin-bottom: 15px;
+              font-size: 16px;
+            }
+            .content .label {
+              font-weight: 600;
+              color: #2c3e50;
+            }
+            .content .button {
+              display: inline-block;
+              padding: 12px 24px;
+              margin-top: 20px;
+              background-color: #3498db;
+              color: #ffffff;
+              text-decoration: none;
+              border-radius: 4px;
+              font-size: 16px;
+              font-weight: 500;
+            }
+            .content .button:hover {
+              background-color: #2980b9;
+            }
+            .footer {
+              background-color: #ecf0f1;
+              padding: 20px;
+              text-align: center;
+              font-size: 14px;
+              color: #7f8c8d;
+            }
+            .footer a {
+              color: #3498db;
+              text-decoration: none;
+            }
+            .footer a:hover {
+              text-decoration: underline;
+            }
+            @media only screen and (max-width: 600px) {
+              .container {
+                margin: 10px;
+                border-radius: 0;
+              }
+              .header {
+                padding: 15px;
+              }
+              .header .business-name {
+                font-size: 24px;
+              }
+              .header h1 {
+                font-size: 20px;
+              }
+              .content {
+                padding: 20px;
+              }
+              .content h2 {
+                font-size: 18px;
+              }
+              .content p {
+                font-size: 14px;
+              }
+              .content .button {
+                padding: 10px 20px;
+                font-size: 14px;
+              }
+              .footer {
+                padding: 15px;
+                font-size: 12px;
+              }
+            }
+          </style>
+        </head>
+        <body>
+          <div class="container">
+            <div class="header">
+              <div class="business-name">DevVista</div>
+              <h1>New Ad Request</h1>
+            </div>
+            <div class="content">
+              <h2>Ad Request Details</h2>
+              <p><span class="label">Platform:</span> ${data.platform}</p>
+              <p><span class="label">Ad Type:</span> ${data.adType}</p>
+              <p><span class="label">Description:</span> ${data.description || "No description provided"}</p>
+              <p><span class="label">User Email:</span> <a href="mailto:${user.email}">${user.email}</a></p>
+              <p><span class="label">Business Title:</span> ${user.businessTitle || "Not provided"}</p>
+              <p><span class="label">Timestamp:</span> ${new Date().toLocaleString()}</p>
+              <a href="mailto:${user.email}" class="button">Reply to User</a>
+            </div>
+            <div class="footer">
+              <p>© ${new Date().getFullYear()} DevVista. All rights reserved.</p>
+              <p><a href="https://devvistatech.com/">Visit our website</a> | <a href="mailto:devvistainfo@gmail.com">Contact Support</a></p>
+            </div>
+          </div>
+        </body>
+        </html>
+      `,
+            replyTo: user.email,
+        });
+
+        const { adRequests, credits: updatedCredits } = await getUserCreditsAndRequests(userId, isAdmin);
+
+        return NextResponse.json({ data: { adRequests, credits: updatedCredits } });
+    } catch (error) {
+        console.error("POST /api/adRequest: Error:", error);
+        return NextResponse.json(
+            { error: error instanceof Error ? error.message : "An error occurred while creating ad request" },
+            { status: 500 }
+        );
+    }
+}
+
+export async function PUT(request: NextRequest) {
+    const { userId } = getAuth(request);
+    if (!userId) {
+        return NextResponse.json({ error: "Unauthorized: No user ID" }, { status: 401 });
+    }
+
+    const user = await verifyUser(userId);
+    if (!user || user.businessAdminId !== ADMIN_BUSINESS_ID) {
+        return NextResponse.json({ error: "Unauthorized: Only admin can reset credits" }, { status: 403 });
+    }
+
+    try {
+        if (!AD_REQUEST_API_URL || !STRAPI_API_TOKEN) {
+            return NextResponse.json(
+                { error: "Server configuration error: Missing required environment variables" },
+                { status: 500 }
+            );
+        }
+
+        const { userId: targetUserId, credits, lastResetDate, nextResetDate } = await request.json();
+        if (!targetUserId) {
+            return NextResponse.json({ error: "Missing userId" }, { status: 400 });
+        }
+
+        const { credits: currentCredits } = await getUserCreditsAndRequests(targetUserId, true);
+        const documentId = currentCredits?.documentId;
+
+        const response = await fetch(
+            documentId ? `${AD_REQUEST_API_URL}/${documentId}` : AD_REQUEST_API_URL,
+            {
+                method: documentId ? "PUT" : "POST",
+                headers: {
+                    "Content-Type": "application/json",
+                    Authorization: `Bearer ${STRAPI_API_TOKEN}`,
+                },
+                body: JSON.stringify({
+                    data: {
+                        userId: targetUserId,
+                        credits: credits || 3,
+                        lastResetDate: lastResetDate || new Date().toISOString(),
+                        nextResetDate:
+                            nextResetDate ||
+                            new Date(new Date().getFullYear(), new Date().getMonth() + 1, 1).toISOString(),
+                        platform: null,
+                        adType: null,
+                        description: null,
+                        timestamp: new Date().toISOString(),
+                    },
+                }),
+            }
+        );
+
+        if (!response.ok) {
+            const errorText = await response.text();
+            return NextResponse.json(
+                { error: `Failed to reset credits: ${errorText}` },
+                { status: response.status }
+            );
+        }
+
+        const { adRequests, credits: updatedCredits } = await getUserCreditsAndRequests(targetUserId, true);
+
+        return NextResponse.json({ data: { adRequests, credits: updatedCredits } });
+    } catch (error) {
+        console.error("PUT /api/adRequest: Error:", error);
+        return NextResponse.json(
+            { error: error instanceof Error ? error.message : "An error occurred while resetting credits" },
+            { status: 500 }
+        );
+    }
+}
+
+export async function DELETE(request: NextRequest) {
+    const { userId } = getAuth(request);
+    if (!userId) {
+        return NextResponse.json({ error: "Unauthorized: No user ID" }, { status: 401 });
+    }
+
+    const user = await verifyUser(userId);
+    if (!user || user.businessAdminId !== ADMIN_BUSINESS_ID) {
+        return NextResponse.json({ error: "Unauthorized: Only admin can delete ad requests" }, { status: 403 });
+    }
+
+    try {
+        if (!AD_REQUEST_API_URL || !STRAPI_API_TOKEN) {
+            return NextResponse.json(
+                { error: "Server configuration error: Missing required environment variables" },
+                { status: 500 }
+            );
+        }
+
+        const { documentId } = await request.json();
+        if (!documentId) {
+            return NextResponse.json({ error: "Missing documentId" }, { status: 400 });
+        }
+
+        const response = await fetch(`${AD_REQUEST_API_URL}/${documentId}`, {
+            method: "DELETE",
+            headers: {
+                "Content-Type": "application/json",
+                Authorization: `Bearer ${STRAPI_API_TOKEN}`,
+            },
+        });
+
+        if (!response.ok) {
+            const errorText = await response.text();
+            return NextResponse.json(
+                { error: `Failed to delete ad request: ${errorText}` },
+                { status: response.status }
+            );
+        }
+
+        const { adRequests, credits } = await getUserCreditsAndRequests(userId, true);
+
+        return NextResponse.json({ data: { adRequests, credits } });
+    } catch (error) {
+        console.error("DELETE /api/adRequest: Error:", error);
+        return NextResponse.json(
+            { error: error instanceof Error ? error.message : "An error occurred while deleting ad request" },
+            { status: 500 }
+        );
+    }
 }