@jhits/plugin-dep 0.0.1

package/src/config.ts

@@ -0,0 +1,137 @@
+/**
+ * Plugin Deprecated - Auto Setup
+ * Automatically creates API routes in the client app
+ */
+
+import { writeFileSync, mkdirSync, existsSync } from 'fs';
+import { join } from 'path';
+
+/**
+ * Ensure the deprecated API route is set up in the client app
+ */
+/**
+ * @deprecated Routes are now handled by the unified /api/[pluginId]/[...path]/route.ts
+ * This function is kept for backwards compatibility but does nothing
+ */
+export function ensureDepRoutes() {
+    // Routes are now handled by the unified /api/[pluginId]/[...path]/route.ts
+    // No need to generate individual routes anymore
+    return;
+    try {
+        // Find the host app directory (where next.config.ts is)
+        let appDir = process.cwd();
+        const possiblePaths = [
+            appDir,
+            join(appDir, '..'),
+            join(appDir, '..', '..'),
+        ];
+
+        for (const basePath of possiblePaths) {
+            const configPath = join(basePath, 'next.config.ts');
+            if (existsSync(configPath)) {
+                appDir = basePath;
+                break;
+            }
+        }
+
+        const apiDir = join(appDir, 'src', 'app', 'api');
+        const pluginDepApiDir = join(apiDir, 'plugin-dep', '[...path]');
+        const pluginDepApiPath = join(pluginDepApiDir, 'route.ts');
+
+        // Check if route already exists
+        if (existsSync(pluginDepApiPath)) {
+            const fs = require('fs');
+            const existingContent = fs.readFileSync(pluginDepApiPath, 'utf8');
+            if (existingContent.includes('@jhits/plugin-dep') || existingContent.includes('plugin-dep')) {
+                // Already set up, skip
+                return;
+            }
+        }
+
+        // Create plugin-dep API catch-all route
+        mkdirSync(pluginDepApiDir, { recursive: true });
+        writeFileSync(pluginDepApiPath, `// Auto-generated by @jhits/plugin-dep - Deprecated API Plugin
+// This route is automatically created for the deprecated API plugin
+import { NextRequest } from 'next/server';
+import { handleDepApi } from '@jhits/plugin-dep';
+import clientPromise from '@/lib/mongodb';
+import { authOptions } from '@jhits/dashboard/lib/auth';
+import { join } from 'path';
+
+export const dynamic = 'force-dynamic';
+
+async function getConfig() {
+    return {
+        mongoClient: clientPromise,
+        jwtSecret: process.env.JWT_SECRET || 'secret',
+        authOptions,
+        emailConfig: process.env.EMAIL_SERVER_HOST ? {
+            host: process.env.EMAIL_SERVER_HOST,
+            port: Number(process.env.EMAIL_SERVER_PORT || 465),
+            user: process.env.EMAIL_SERVER_USER || '',
+            password: process.env.EMAIL_SERVER_PASSWORD || '',
+            from: process.env.EMAIL_FROM || '',
+        } : undefined,
+        baseUrl: process.env.NEXT_PUBLIC_BASE_URL,
+        githubWebhookSecret: process.env.GITHUB_WEBHOOK_SECRET,
+        deploymentPaths: {
+            flagPath: process.env.DEPLOYMENT_FLAG_PATH || '/home/pi/botanics/update-pending.json',
+            scriptPath: process.env.DEPLOYMENT_SCRIPT_PATH || '/home/pi/botanics/scripts/update.sh',
+        },
+        localesDir: process.env.LOCALES_DIR || join(process.cwd(), 'data/locales'),
+        uploadsDir: process.env.UPLOADS_DIR || join(process.cwd(), 'data/uploads'),
+    };
+}
+
+export async function GET(
+    req: NextRequest,
+    { params }: { params: Promise<{ path: string[] }> }
+) {
+    const { path } = await params;
+    const config = await getConfig();
+    return handleDepApi(req, path, config);
+}
+
+export async function POST(
+    req: NextRequest,
+    { params }: { params: Promise<{ path: string[] }> }
+) {
+    const { path } = await params;
+    const config = await getConfig();
+    return handleDepApi(req, path, config);
+}
+
+export async function PUT(
+    req: NextRequest,
+    { params }: { params: Promise<{ path: string[] }> }
+) {
+    const { path } = await params;
+    const config = await getConfig();
+    return handleDepApi(req, path, config);
+}
+
+export async function PATCH(
+    req: NextRequest,
+    { params }: { params: Promise<{ path: string[] }> }
+) {
+    const { path } = await params;
+    const config = await getConfig();
+    return handleDepApi(req, path, config);
+}
+
+export async function DELETE(
+    req: NextRequest,
+    { params }: { params: Promise<{ path: string[] }> }
+) {
+    const { path } = await params;
+    const config = await getConfig();
+    return handleDepApi(req, path, config);
+}
+`);
+
+    } catch (error) {
+        // Ignore errors - route might already exist or app structure is different
+        console.warn('[plugin-dep] Could not ensure deprecated routes:', error);
+    }
+}
+

package/src/index.server.ts

@@ -0,0 +1,18 @@
+/**
+ * Plugin Deprecated - Server-Only Entry Point
+ * Re-exports server-side API handlers and business logic
+ * 
+ * Note: This file is server-only (no 'use server' needed - that's only for Server Actions)
+ */
+
+// Export router (main API handler)
+export { handleDepApi as handleApi } from './router';
+
+// Export actions (business logic)
+export * as actions from './actions';
+
+// Export types
+export * from './types';
+
+// Note: Config functions are server-only and not exported to avoid client-side import errors
+// They are deprecated anyway since routes are now handled by the unified route system

package/src/index.ts

@@ -0,0 +1,14 @@
+/**
+ * Plugin Deprecated - Root Entry Point
+ * 
+ * NOTE: This plugin is SERVER-ONLY and has no client UI.
+ * 
+ * This file exists only to satisfy package.json "main" field requirements.
+ * It should NEVER be imported by client code.
+ * 
+ * For server-side usage, ALWAYS import from '@jhits/plugin-dep/server' instead.
+ */
+
+// Empty export - this plugin has no client-side code
+// Importing this will result in an empty module
+// Use '@jhits/plugin-dep/server' for server-side imports

package/src/router.ts

@@ -0,0 +1,387 @@
+'use server';
+
+/**
+ * Plugin Deprecated - Router
+ * Framework-agnostic router that routes API requests to business logic actions
+ */
+
+import { NextRequest, NextResponse } from 'next/server';
+import { DepApiConfig } from './types';
+import * as actions from './actions';
+import { verifyToken } from './utils/auth';
+import crypto from 'crypto';
+
+/**
+ * Handle deprecated API requests
+ * Routes requests to appropriate action handlers based on path and method
+ */
+export async function handleDepApi(
+    req: NextRequest,
+    path: string[],
+    config: DepApiConfig
+): Promise<NextResponse> {
+    const method = req.method;
+    const route = path[0] || '';
+
+    try {
+        // ====================================================================
+        // AUTH ROUTES
+        // ====================================================================
+        if (route === 'me') {
+            if (method === 'GET') {
+                let session: any = null;
+                if (config.authOptions) {
+                    const { getServerSession } = await import('next-auth');
+                    session = await getServerSession(config.authOptions);
+                }
+                const result = await actions.getMe(config, session);
+                return NextResponse.json(result);
+            }
+        }
+
+        // ====================================================================
+        // FEEDBACK ROUTES
+        // ====================================================================
+        else if (route === 'feedback') {
+            if (path[1]) {
+                // /api/plugin-dep/feedback/[id]
+                const id = path[1];
+                if (method === 'PATCH') {
+                    const body = await req.json();
+                    const result = await actions.updateFeedback(config, id, body);
+                    return NextResponse.json(result);
+                } else if (method === 'DELETE') {
+                    const result = await actions.deleteFeedback(config, id);
+                    return NextResponse.json(result);
+                }
+            } else {
+                // /api/plugin-dep/feedback
+                if (method === 'GET') {
+                    const result = await actions.listFeedback(config);
+                    return NextResponse.json(result);
+                } else if (method === 'POST') {
+                    const body = await req.json();
+                    const cookies = await req.cookies;
+                    const token = cookies.get('auth_token')?.value;
+                    let userId: string | undefined;
+                    if (token) {
+                        const payload = verifyToken(token, config.jwtSecret);
+                        if (payload && typeof payload !== 'string') {
+                            userId = payload.id;
+                        }
+                    }
+                    const result = await actions.createFeedback(config, body, userId);
+                    return NextResponse.json(result);
+                }
+            }
+        }
+
+        // ====================================================================
+        // SETTINGS ROUTES
+        // ====================================================================
+        else if (route === 'settings') {
+            if (path[1] === 'maintenance') {
+                // /api/plugin-dep/settings/maintenance
+                if (method === 'GET') {
+                    const result = await actions.getMaintenanceMode(config);
+                    return NextResponse.json(result);
+                } else if (method === 'POST') {
+                    const body = await req.json();
+                    const result = await actions.setMaintenanceMode(config, body.active);
+                    return NextResponse.json(result);
+                }
+            } else {
+                // /api/plugin-dep/settings
+                if (method === 'GET') {
+                    const result = await actions.getSettings(config);
+                    return NextResponse.json(result);
+                } else if (method === 'POST') {
+                    const body = await req.json();
+                    const result = await actions.updateSettings(config, body);
+                    return NextResponse.json(result);
+                }
+            }
+        }
+
+        // ====================================================================
+        // USER ROUTES
+        // ====================================================================
+        else if (route === 'users') {
+            if (path[1]) {
+                // /api/plugin-dep/users/[id]
+                const id = path[1];
+                if (method === 'PATCH') {
+                    const body = await req.json();
+                    const result = await actions.updateUser(config, id, body);
+                    return NextResponse.json(result);
+                } else if (method === 'DELETE') {
+                    const result = await actions.deleteUser(config, id);
+                    return NextResponse.json(result);
+                }
+            } else {
+                // /api/plugin-dep/users
+                if (method === 'GET') {
+                    const result = await actions.listUsers(config);
+                    return NextResponse.json(result);
+                } else if (method === 'POST') {
+                    const body = await req.json();
+                    const result = await actions.createUser(config, body);
+                    return NextResponse.json(result);
+                }
+            }
+        }
+
+        // ====================================================================
+        // NEWSLETTER ROUTES
+        // ====================================================================
+        else if (route === 'newsletter') {
+            if (path[1] === 'subscribers') {
+                if (path[2]) {
+                    // /api/plugin-dep/newsletter/subscribers/[user]
+                    const email = decodeURIComponent(path[2]).toLowerCase();
+                    if (method === 'GET') {
+                        const result = await actions.getSubscriber(config, email);
+                        return NextResponse.json(result);
+                    } else if (method === 'DELETE') {
+                        const result = await actions.deleteSubscriber(config, email);
+                        return NextResponse.json(result);
+                    }
+                } else {
+                    // /api/plugin-dep/newsletter/subscribers
+                    if (method === 'GET') {
+                        const result = await actions.listSubscribers(config);
+                        return NextResponse.json(result);
+                    } else if (method === 'POST') {
+                        const body = await req.json();
+                        const headers = await req.headers;
+                        const host = headers.get('host') || undefined;
+                        const result = await actions.subscribeNewsletter(config, body, host);
+                        return NextResponse.json(result, { status: 201 });
+                    }
+                }
+            } else if (path[1] === 'settings') {
+                // /api/plugin-dep/newsletter/settings
+                if (method === 'GET') {
+                    const result = await actions.getNewsletterSettings(config);
+                    return NextResponse.json(result);
+                } else if (method === 'POST') {
+                    const body = await req.json();
+                    const result = await actions.updateNewsletterSettings(config, body);
+                    return NextResponse.json(result);
+                }
+            }
+        }
+
+        // ====================================================================
+        // NOTIFICATIONS ROUTES
+        // ====================================================================
+        else if (route === 'notifications') {
+            if (path[1] === 'stream') {
+                // /api/plugin-dep/notifications/stream
+                if (method === 'GET') {
+                    return handleNotificationStream(req, config);
+                }
+            } else if (path[1] === 'action') {
+                // /api/plugin-dep/notifications/action
+                if (method === 'POST') {
+                    const body = await req.json();
+                    const cookies = await req.cookies;
+                    const token = cookies.get('auth_token')?.value;
+                    if (!token) {
+                        return NextResponse.json({ error: 'Unauthorized' }, { status: 401 });
+                    }
+                    const payload = verifyToken(token, config.jwtSecret);
+                    if (!payload || typeof payload === 'string') {
+                        return NextResponse.json({ error: 'Unauthorized' }, { status: 401 });
+                    }
+                    const result = await actions.updateNotification(config, body, payload.id);
+                    return NextResponse.json(result);
+                }
+            }
+        }
+
+        // ====================================================================
+        // TRANSLATION ROUTES
+        // ====================================================================
+        else if (route === 'save-translation') {
+            if (method === 'POST') {
+                const body = await req.json();
+                const result = await actions.saveTranslation(config, body);
+                return NextResponse.json(result);
+            }
+        }
+
+        // ====================================================================
+        // STATS ROUTES
+        // ====================================================================
+        else if (route === 'stats') {
+            if (path[1] === 'storage') {
+                // /api/plugin-dep/stats/storage
+                if (method === 'GET') {
+                    const result = await actions.getStorageStats(config);
+                    return NextResponse.json(result);
+                }
+            }
+        } else if (route === 'media') {
+            if (path[1] === 'stats') {
+                // /api/plugin-dep/media/stats
+                if (method === 'GET') {
+                    const result = await actions.getMediaStats(config);
+                    return NextResponse.json(result);
+                }
+            }
+        }
+
+        // ====================================================================
+        // VERSION ROUTES
+        // ====================================================================
+        else if (route === 'version') {
+            if (method === 'GET') {
+                const result = await actions.getVersion();
+                return NextResponse.json(result);
+            }
+        }
+
+        // ====================================================================
+        // GITHUB DEPLOYMENT ROUTES
+        // ====================================================================
+        else if (route === 'github') {
+            if (path[1] === 'deploy') {
+                // /api/plugin-dep/github/deploy
+                if (method === 'GET') {
+                    const result = await actions.getDeploymentStatus(config);
+                    return NextResponse.json(result);
+                } else if (method === 'POST') {
+                    const signature = req.headers.get('x-hub-signature-256') || '';
+                    let payload: any = null;
+                    if (signature !== 'manual') {
+                        const rawBody = await req.text();
+                        const secret = config.githubWebhookSecret;
+                        if (!secret) {
+                            return NextResponse.json({ error: 'Server configuration error' }, { status: 500 });
+                        }
+                        const hmac = crypto.createHmac('sha256', secret);
+                        const digest = 'sha256=' + hmac.update(rawBody).digest('hex');
+                        if (signature !== digest) {
+                            return NextResponse.json({ error: 'Unauthorized' }, { status: 401 });
+                        }
+                        payload = rawBody.startsWith('payload=')
+                            ? JSON.parse(decodeURIComponent(rawBody.substring(8)))
+                            : JSON.parse(rawBody);
+                    }
+                    const result = await actions.triggerDeployment(config, signature, payload);
+                    return NextResponse.json(result);
+                }
+            }
+        }
+
+        // Method not allowed
+        return NextResponse.json(
+            { error: `Method ${method} not allowed for route: ${route || '/'}` },
+            { status: 405 }
+        );
+    } catch (error: any) {
+        console.error('[DepApiRouter] Error:', error);
+        const status = error.message?.includes('not found') ? 404
+            : error.message?.includes('Unauthorized') ? 401
+            : error.message?.includes('already') ? 409
+            : error.message?.includes('too short') ? 400
+            : 500;
+        return NextResponse.json(
+            { error: error.message || 'Internal server error' },
+            { status }
+        );
+    }
+}
+
+/**
+ * Handle Server-Sent Events stream for notifications
+ */
+async function handleNotificationStream(
+    req: NextRequest,
+    config: DepApiConfig
+): Promise<NextResponse> {
+    const encoder = new TextEncoder();
+    const cookies = await req.cookies;
+    const token = cookies.get('auth_token')?.value;
+
+    let userRole = 'guest';
+    let currentUserId: string | null = null;
+
+    if (token) {
+        try {
+            const payload = verifyToken(token, config.jwtSecret);
+            if (payload && typeof payload !== 'string') {
+                userRole = payload.role || 'guest';
+                currentUserId = payload.id;
+            }
+        } catch (e) {
+            console.error('Token verification failed in stream');
+        }
+    }
+
+    let changeStream: any;
+
+    const stream = new ReadableStream({
+        async start(controller) {
+            try {
+                const client = await config.mongoClient;
+                const db = client.db();
+                const collection = db.collection('notifications');
+
+                const streamData = await actions.getNotificationStream(config, userRole, currentUserId);
+
+                // Send history
+                streamData.history.forEach((notif) => {
+                    controller.enqueue(encoder.encode(`data: ${JSON.stringify(notif)}\n\n`));
+                });
+
+                // Send connection status
+                controller.enqueue(encoder.encode(`data: ${JSON.stringify({ status: 'connected', role: userRole })}\n\n`));
+
+                // Watch for changes
+                changeStream = collection.watch(streamData.pipeline, { fullDocument: 'updateLookup' });
+
+                changeStream.on('change', (change: any) => {
+                    if (change.operationType === 'insert') {
+                        const data = `data: ${JSON.stringify(change.fullDocument)}\n\n`;
+                        controller.enqueue(encoder.encode(data));
+                    }
+                });
+
+                const keepAlive = setInterval(() => {
+                    try {
+                        controller.enqueue(encoder.encode(': keep-alive\n\n'));
+                    } catch {
+                        clearInterval(keepAlive);
+                    }
+                }, 20000);
+
+                changeStream.on('error', (err: any) => {
+                    console.error('Mongo Stream Error:', err);
+                    clearInterval(keepAlive);
+                    if (changeStream) changeStream.close();
+                });
+            } catch (err) {
+                console.error('Stream Start Error:', err);
+                controller.error(err);
+            }
+        },
+        cancel() {
+            if (changeStream) {
+                changeStream.close();
+                console.log(`Stream connection closed for role: ${userRole}`);
+            }
+        },
+    });
+
+    return new NextResponse(stream, {
+        headers: {
+            'Content-Type': 'text/event-stream',
+            'Cache-Control': 'no-cache, no-transform',
+            Connection: 'keep-alive',
+            'X-Accel-Buffering': 'no',
+        },
+    });
+}
+

package/src/types.ts

@@ -0,0 +1,58 @@
+/**
+ * Plugin Deprecated - Types
+ * Type definitions for deprecated client API routes
+ */
+
+import { MongoClient } from 'mongodb';
+import { NextRequest } from 'next/server';
+
+export interface DepApiConfig {
+    /** MongoDB client promise */
+    mongoClient: Promise<MongoClient>;
+    /** JWT secret for token verification */
+    jwtSecret: string;
+    /** NextAuth auth options (for session-based auth) */
+    authOptions?: any;
+    /** Email configuration for newsletter */
+    emailConfig?: {
+        host: string;
+        port: number;
+        user: string;
+        password: string;
+        from: string;
+    };
+    /** Base URL for email links */
+    baseUrl?: string;
+    /** GitHub webhook secret */
+    githubWebhookSecret?: string;
+    /** Paths for deployment scripts */
+    deploymentPaths?: {
+        flagPath: string;
+        scriptPath: string;
+    };
+    /** Locales directory path */
+    localesDir?: string;
+    /** Uploads directory path */
+    uploadsDir?: string;
+}
+
+export interface ApiRequest {
+    method: string;
+    url: string;
+    body?: any;
+    headers: Headers;
+    cookies?: Map<string, string>;
+}
+
+export interface ApiResponse {
+    status: number;
+    body: any;
+    headers?: Record<string, string>;
+}
+
+export type ApiHandler = (
+    req: ApiRequest,
+    config: DepApiConfig,
+    params?: Record<string, string>
+) => Promise<ApiResponse>;
+

package/src/utils/auth.ts

@@ -0,0 +1,20 @@
+/**
+ * Auth utilities for plugin-dep
+ */
+
+import jwt from 'jsonwebtoken';
+
+export interface AuthPayload {
+    id: string;
+    email: string;
+    role: string;
+}
+
+export function verifyToken(token: string, secret: string): AuthPayload | null {
+    try {
+        return jwt.verify(token, secret) as AuthPayload;
+    } catch {
+        return null;
+    }
+}
+