@mohasinac/appkit 2.1.1 → 2.2.0

package/dist/features/reviews/server.cjs

@@ -1,776 +0,0 @@
-'use strict';
-
-var server_js = require('next/server.js');
-var zod = require('zod');
-require('crypto');
-require('react');
-require('react/jsx-runtime');
-require('next/server');
-
-var __defProp = Object.defineProperty;
-var __defProps = Object.defineProperties;
-var __getOwnPropDescs = Object.getOwnPropertyDescriptors;
-var __getOwnPropNames = Object.getOwnPropertyNames;
-var __getOwnPropSymbols = Object.getOwnPropertySymbols;
-var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __propIsEnum = Object.prototype.propertyIsEnumerable;
-var __defNormalProp = (obj, key, value) => key in obj ? __defProp(obj, key, { enumerable: true, configurable: true, writable: true, value }) : obj[key] = value;
-var __spreadValues = (a, b) => {
-  for (var prop in b || (b = {}))
-    if (__hasOwnProp.call(b, prop))
-      __defNormalProp(a, prop, b[prop]);
-  if (__getOwnPropSymbols)
-    for (var prop of __getOwnPropSymbols(b)) {
-      if (__propIsEnum.call(b, prop))
-        __defNormalProp(a, prop, b[prop]);
-    }
-  return a;
-};
-var __spreadProps = (a, b) => __defProps(a, __getOwnPropDescs(b));
-var __esm = (fn, res) => function __init() {
-  return fn && (res = (0, fn[__getOwnPropNames(fn)[0]])(fn = 0)), res;
-};
-
-// src/errors/base-error.ts
-var init_base_error = __esm({
-  "src/errors/base-error.ts"() {
-  }
-});
-
-// src/errors/error-codes.ts
-var init_error_codes = __esm({
-  "src/errors/error-codes.ts"() {
-  }
-});
-
-// src/errors/api-error.ts
-var init_api_error = __esm({
-  "src/errors/api-error.ts"() {
-    init_base_error();
-  }
-});
-
-// src/errors/validation-error.ts
-var init_validation_error = __esm({
-  "src/errors/validation-error.ts"() {
-    init_base_error();
-  }
-});
-
-// src/errors/authentication-error.ts
-var init_authentication_error = __esm({
-  "src/errors/authentication-error.ts"() {
-    init_base_error();
-  }
-});
-
-// src/errors/authorization-error.ts
-var init_authorization_error = __esm({
-  "src/errors/authorization-error.ts"() {
-    init_base_error();
-  }
-});
-
-// src/errors/not-found-error.ts
-var init_not_found_error = __esm({
-  "src/errors/not-found-error.ts"() {
-    init_base_error();
-  }
-});
-
-// src/errors/database-error.ts
-var init_database_error = __esm({
-  "src/errors/database-error.ts"() {
-    init_base_error();
-  }
-});
-var init_error_handler = __esm({
-  "src/errors/error-handler.ts"() {
-    init_base_error();
-    init_error_codes();
-  }
-});
-
-// src/errors/index.ts
-var init_errors = __esm({
-  "src/errors/index.ts"() {
-    init_base_error();
-    init_error_codes();
-    init_api_error();
-    init_validation_error();
-    init_authentication_error();
-    init_authorization_error();
-    init_not_found_error();
-    init_database_error();
-    init_error_handler();
-  }
-});
-function getProviders() {
-  {
-    throw new Error(
-      "[contracts] Call registerProviders() before getProviders(). Ensure providers.config.ts is imported at app startup."
-    );
-  }
-}
-function readSessionCookie(request) {
-  var _a;
-  const cookieHeader = (_a = request.headers.get("cookie")) != null ? _a : "";
-  const match = cookieHeader.match(/(?:^|;\s*)__session=([^;]+)/);
-  return match ? decodeURIComponent(match[1]) : null;
-}
-async function verifySession(request) {
-  const { session } = getProviders();
-  if (!session) {
-    throw Object.assign(new Error("Session provider not configured"), {
-      status: 503
-    });
-  }
-  const cookie = readSessionCookie(request);
-  if (!cookie) {
-    throw Object.assign(new Error("Authentication required"), { status: 401 });
-  }
-  try {
-    const payload = await session.verifySession(cookie);
-    return __spreadValues({
-      uid: payload.uid,
-      email: payload.email,
-      role: payload.role,
-      emailVerified: payload.emailVerified
-    }, payload.claims);
-  } catch (e) {
-    throw Object.assign(new Error("Invalid or expired session"), {
-      status: 401
-    });
-  }
-}
-function createRouteHandler(options) {
-  return async (request, context) => {
-    var _a, _b;
-    try {
-      let user;
-      const needsAuth = options.auth || options.roles && options.roles.length > 0;
-      if (needsAuth) {
-        user = await verifySession(request);
-      }
-      if (options.roles && options.roles.length > 0) {
-        if (!user || !options.roles.includes((_a = user.role) != null ? _a : "")) {
-          return server_js.NextResponse.json(
-            { success: false, error: "Insufficient permissions" },
-            { status: 403 }
-          );
-        }
-      }
-      let body;
-      if (options.schema) {
-        let raw;
-        try {
-          raw = await request.json();
-        } catch (e) {
-          return server_js.NextResponse.json(
-            { success: false, error: "Invalid JSON body" },
-            { status: 400 }
-          );
-        }
-        const result = options.schema.safeParse(raw);
-        if (!result.success) {
-          return server_js.NextResponse.json(
-            {
-              success: false,
-              error: "Validation failed",
-              issues: (_b = result.error.issues) != null ? _b : []
-            },
-            { status: 400 }
-          );
-        }
-        body = result.data;
-      }
-      const params = (context == null ? void 0 : context.params) ? await context.params : void 0;
-      return await options.handler({
-        request,
-        user,
-        body,
-        params
-      });
-    } catch (err) {
-      const status = typeof (err == null ? void 0 : err.status) === "number" ? err.status : 500;
-      const message = err instanceof Error ? err.message : "Internal server error";
-      console.error(`[createRouteHandler] ${request.method} failed`, err);
-      return server_js.NextResponse.json({ success: false, error: message }, { status });
-    }
-  };
-}
-
-// src/next/request-helpers.ts
-init_errors();
-
-// src/core/Logger.ts
-var Logger = class _Logger {
-  constructor(options) {
-    this.logs = [];
-    this.levelPriority = {
-      debug: 0,
-      info: 1,
-      warn: 2,
-      error: 3
-    };
-    var _a, _b, _c, _d, _e;
-    const fileUrl = (_a = options == null ? void 0 : options.logFileUrl) != null ? _a : (options == null ? void 0 : options.enableFileLogging) ? "/api/logs/write" : void 0;
-    this.options = {
-      minLevel: (_b = options == null ? void 0 : options.minLevel) != null ? _b : "debug",
-      enableConsole: (_c = options == null ? void 0 : options.enableConsole) != null ? _c : true,
-      enableStorage: (_d = options == null ? void 0 : options.enableStorage) != null ? _d : false,
-      logFileUrl: fileUrl,
-      maxEntries: (_e = options == null ? void 0 : options.maxEntries) != null ? _e : 1e3,
-      sanitizer: options == null ? void 0 : options.sanitizer
-    };
-  }
-  /** Get singleton instance */
-  static getInstance(options) {
-    if (!_Logger.instance) {
-      _Logger.instance = new _Logger(options);
-    }
-    return _Logger.instance;
-  }
-  /** Set or update the data sanitizer (e.g., for PII redaction). */
-  static setSanitizer(fn) {
-    _Logger.getInstance().options.sanitizer = fn;
-  }
-  shouldLog(level) {
-    return this.levelPriority[level] >= this.levelPriority[this.options.minLevel];
-  }
-  addLog(level, message, data) {
-    if (!this.shouldLog(level)) return;
-    const sanitized = data && this.options.sanitizer ? this.options.sanitizer(data) : data;
-    const entry = {
-      level,
-      message,
-      timestamp: /* @__PURE__ */ new Date(),
-      data: sanitized
-    };
-    this.logs.push(entry);
-    if (this.logs.length > this.options.maxEntries) {
-      this.logs.shift();
-    }
-    if (this.options.enableConsole) {
-      this.logToConsole(entry);
-    }
-    if (this.options.enableStorage && typeof window !== "undefined") {
-      this.saveToStorage();
-    }
-    if (this.options.logFileUrl && level === "error") {
-      this.writeToFile(entry).catch(() => {
-      });
-    }
-  }
-  logToConsole(entry) {
-    const prefix = `[${entry.level.toUpperCase()}] ${entry.timestamp.toISOString()}`;
-    const message = `${prefix} ${entry.message}`;
-    switch (entry.level) {
-      case "debug":
-        console.debug(message, entry.data);
-        break;
-      case "info":
-        console.info(message, entry.data);
-        break;
-      case "warn":
-        console.warn(message, entry.data);
-        break;
-      case "error":
-        console.error(message, entry.data);
-        break;
-    }
-  }
-  saveToStorage() {
-    try {
-      localStorage.setItem("app_logs", JSON.stringify(this.logs));
-    } catch (e) {
-    }
-  }
-  async writeToFile(entry) {
-    if (typeof window === "undefined" || !this.options.logFileUrl) return;
-    try {
-      await fetch(this.options.logFileUrl, {
-        method: "POST",
-        headers: { "Content-Type": "application/json" },
-        body: JSON.stringify({
-          level: entry.level,
-          message: entry.message,
-          timestamp: entry.timestamp.toISOString(),
-          data: entry.data
-        })
-      });
-    } catch (e) {
-    }
-  }
-  debug(message, data) {
-    this.addLog("debug", message, data);
-  }
-  info(message, data) {
-    this.addLog("info", message, data);
-  }
-  warn(message, data) {
-    this.addLog("warn", message, data);
-  }
-  error(message, data) {
-    this.addLog("error", message, data);
-  }
-  getLogs(level) {
-    if (level) return this.logs.filter((log) => log.level === level);
-    return [...this.logs];
-  }
-  clear() {
-    this.logs = [];
-    if (this.options.enableStorage && typeof window !== "undefined") {
-      localStorage.removeItem("app_logs");
-    }
-  }
-  export() {
-    return JSON.stringify(this.logs, null, 2);
-  }
-  getStats() {
-    return {
-      debug: this.logs.filter((l) => l.level === "debug").length,
-      info: this.logs.filter((l) => l.level === "info").length,
-      warn: this.logs.filter((l) => l.level === "warn").length,
-      error: this.logs.filter((l) => l.level === "error").length
-    };
-  }
-};
-Logger.getInstance();
-
-// src/core/Queue.ts
-Logger.getInstance();
-
-// src/core/StorageManager.ts
-var sLogger = Logger.getInstance();
-var _StorageManager = class _StorageManager {
-  constructor(prefix = "app_") {
-    this.prefix = prefix;
-  }
-  /**
-   * Get-or-create a StorageManager for the given prefix.
-   * Each prefix returns an independent instance.
-   */
-  static getInstance(prefix = "") {
-    if (!_StorageManager.instances.has(prefix)) {
-      _StorageManager.instances.set(prefix, new _StorageManager(prefix));
-    }
-    return _StorageManager.instances.get(prefix);
-  }
-  getStorage(type) {
-    try {
-      if (typeof window === "undefined") return null;
-      const storage = type === "local" ? window.localStorage : window.sessionStorage;
-      return storage != null ? storage : null;
-    } catch (e) {
-      return null;
-    }
-  }
-  generateKey(key) {
-    return `${this.prefix}${key}`;
-  }
-  set(key, value, options) {
-    var _a;
-    const storage = this.getStorage((_a = options == null ? void 0 : options.type) != null ? _a : "local");
-    if (!storage) return false;
-    try {
-      storage.setItem(this.generateKey(key), JSON.stringify(value));
-      return true;
-    } catch (error) {
-      sLogger.error("StorageManager.set error", { error });
-      return false;
-    }
-  }
-  get(key, options) {
-    var _a;
-    const storage = this.getStorage((_a = options == null ? void 0 : options.type) != null ? _a : "local");
-    if (!storage) return null;
-    try {
-      const item = storage.getItem(this.generateKey(key));
-      if (item === null) return null;
-      return JSON.parse(item);
-    } catch (error) {
-      sLogger.error("StorageManager.get error", { error });
-      return null;
-    }
-  }
-  remove(key, options) {
-    var _a;
-    const storage = this.getStorage((_a = options == null ? void 0 : options.type) != null ? _a : "local");
-    if (!storage) return false;
-    try {
-      storage.removeItem(this.generateKey(key));
-      return true;
-    } catch (error) {
-      sLogger.error("StorageManager.remove error", { error });
-      return false;
-    }
-  }
-  clear(options) {
-    var _a;
-    const storage = this.getStorage((_a = options == null ? void 0 : options.type) != null ? _a : "local");
-    if (!storage) return false;
-    try {
-      const keys = Object.keys(storage);
-      keys.forEach((k) => {
-        if (k.startsWith(this.prefix)) storage.removeItem(k);
-      });
-      return true;
-    } catch (error) {
-      sLogger.error("StorageManager.clear error", { error });
-      return false;
-    }
-  }
-  has(key, options) {
-    return this.get(key, options) !== null;
-  }
-  keys(options) {
-    var _a;
-    const storage = this.getStorage((_a = options == null ? void 0 : options.type) != null ? _a : "local");
-    if (!storage) return [];
-    const result = [];
-    for (let i = 0; i < storage.length; i++) {
-      const k = storage.key(i);
-      if (k == null ? void 0 : k.startsWith(this.prefix)) {
-        result.push(k.slice(this.prefix.length));
-      }
-    }
-    return result;
-  }
-  size(options) {
-    var _a, _b;
-    const storage = this.getStorage((_a = options == null ? void 0 : options.type) != null ? _a : "local");
-    if (!storage) return 0;
-    let bytes = 0;
-    for (let i = 0; i < storage.length; i++) {
-      const k = storage.key(i);
-      if (k == null ? void 0 : k.startsWith(this.prefix)) {
-        const v = storage.getItem(k);
-        bytes += k.length + ((_b = v == null ? void 0 : v.length) != null ? _b : 0);
-      }
-    }
-    return bytes;
-  }
-  isAvailable(type = "local") {
-    const storage = this.getStorage(type);
-    if (!storage) return false;
-    try {
-      const testKey = "__storage_test__";
-      storage.setItem(testKey, "1");
-      storage.removeItem(testKey);
-      return true;
-    } catch (e) {
-      return false;
-    }
-  }
-  getAll(options) {
-    var _a;
-    const storage = this.getStorage((_a = options == null ? void 0 : options.type) != null ? _a : "local");
-    if (!storage) return {};
-    const result = {};
-    for (let i = 0; i < storage.length; i++) {
-      const k = storage.key(i);
-      if (k == null ? void 0 : k.startsWith(this.prefix)) {
-        const v = this.get(k.slice(this.prefix.length), options);
-        if (v !== null) result[k.slice(this.prefix.length)] = v;
-      }
-    }
-    return result;
-  }
-};
-/** Per-prefix instance map — prevents namespace collisions */
-_StorageManager.instances = /* @__PURE__ */ new Map();
-var StorageManager = _StorageManager;
-StorageManager.getInstance("");
-
-// src/core/EventBus.ts
-Logger.getInstance();
-
-// src/security/authorization.ts
-init_errors();
-
-// src/monitoring/client-logger.ts
-init_errors();
-
-// src/monitoring/server-logger.ts
-init_errors();
-
-// src/features/reviews/api/route.ts
-function param(url, key) {
-  return url.searchParams.get(key);
-}
-function numParam(url, key, fallback) {
-  const v = url.searchParams.get(key);
-  const n = v !== null ? Number(v) : NaN;
-  return Number.isFinite(n) ? n : fallback;
-}
-function computeAggregates(reviews) {
-  var _a;
-  const dist = { 1: 0, 2: 0, 3: 0, 4: 0, 5: 0 };
-  let total = 0;
-  let count = 0;
-  for (const r of reviews) {
-    if (r.status === "approved") {
-      dist[r.rating] = ((_a = dist[r.rating]) != null ? _a : 0) + 1;
-      total += r.rating;
-      count++;
-    }
-  }
-  return {
-    averageRating: count > 0 ? total / count : 0,
-    ratingDistribution: dist
-  };
-}
-async function GET(request) {
-  var _a, _b;
-  try {
-    const url = new URL(request.url);
-    const featured = param(url, "featured") === "true";
-    const latest = param(url, "latest") === "true";
-    const page = numParam(url, "page", 1);
-    const pageSize = numParam(url, "pageSize", 10);
-    const sort = (_b = (_a = param(url, "sorts")) != null ? _a : param(url, "sort")) != null ? _b : "-createdAt";
-    const { db } = getProviders();
-    if (!db) {
-      return server_js.NextResponse.json(
-        { success: false, error: "Database provider not registered" },
-        { status: 503 }
-      );
-    }
-    const repo = db.getRepository("reviews");
-    if (featured) {
-      const result = await repo.findAll({
-        filters: "featured==true,status==approved",
-        sort,
-        perPage: Math.min(pageSize, 50)
-      });
-      const response2 = server_js.NextResponse.json({ success: true, data: result.data });
-      response2.headers.set(
-        "Cache-Control",
-        "public, max-age=300, s-maxage=600, stale-while-revalidate=120"
-      );
-      return response2;
-    }
-    if (latest) {
-      const latestPageSize = numParam(url, "pageSize", 24);
-      const result = await repo.findAll({
-        filters: "status==approved",
-        sort,
-        page,
-        perPage: latestPageSize
-      });
-      const totalPages2 = Math.max(1, Math.ceil(result.total / latestPageSize));
-      const body2 = {
-        items: result.data,
-        total: result.total,
-        page: result.page,
-        pageSize: latestPageSize,
-        totalPages: totalPages2,
-        hasMore: result.page < totalPages2
-      };
-      const response2 = server_js.NextResponse.json({ success: true, data: body2 });
-      response2.headers.set(
-        "Cache-Control",
-        "public, max-age=120, s-maxage=300, stale-while-revalidate=60"
-      );
-      return response2;
-    }
-    const productId = param(url, "productId");
-    if (!productId) {
-      return server_js.NextResponse.json(
-        { success: false, error: "productId query parameter is required" },
-        { status: 400 }
-      );
-    }
-    const allResult = await repo.findAll({
-      filters: `productId==${productId},status==approved`,
-      perPage: 1e3
-    });
-    const { averageRating, ratingDistribution } = computeAggregates(
-      allResult.data
-    );
-    const pagedResult = await repo.findAll({
-      filters: `productId==${productId},status==approved`,
-      sort,
-      page,
-      perPage: pageSize
-    });
-    const totalPages = Math.max(1, Math.ceil(pagedResult.total / pageSize));
-    const body = {
-      items: pagedResult.data,
-      total: pagedResult.total,
-      page: pagedResult.page,
-      pageSize,
-      totalPages,
-      hasMore: pagedResult.page < totalPages,
-      averageRating,
-      ratingDistribution
-    };
-    const response = server_js.NextResponse.json({ success: true, data: body });
-    response.headers.set(
-      "Cache-Control",
-      "public, max-age=120, s-maxage=300, stale-while-revalidate=60"
-    );
-    return response;
-  } catch (error) {
-    console.error("[feat-reviews] GET /api/reviews failed", error);
-    return server_js.NextResponse.json(
-      { success: false, error: "Failed to fetch reviews" },
-      { status: 500 }
-    );
-  }
-}
-var reviewCreateSchema = zod.z.object({
-  productId: zod.z.string().min(1),
-  rating: zod.z.union([
-    zod.z.literal(1),
-    zod.z.literal(2),
-    zod.z.literal(3),
-    zod.z.literal(4),
-    zod.z.literal(5)
-  ]),
-  title: zod.z.string().min(1).max(100).optional(),
-  comment: zod.z.string().min(1).max(2e3).optional(),
-  images: zod.z.array(zod.z.string().url()).max(10).optional(),
-  video: zod.z.string().url().optional()
-}).passthrough();
-var POST = createRouteHandler({
-  auth: true,
-  schema: reviewCreateSchema,
-  handler: async ({ user, body }) => {
-    const { db } = getProviders();
-    if (!db) {
-      return server_js.NextResponse.json(
-        { success: false, error: "DB not configured" },
-        { status: 503 }
-      );
-    }
-    const repo = db.getRepository("reviews");
-    const now = (/* @__PURE__ */ new Date()).toISOString();
-    const created = await repo.create(__spreadProps(__spreadValues({}, body), {
-      userId: user.uid,
-      status: "pending",
-      createdAt: now,
-      updatedAt: now
-    }));
-    return server_js.NextResponse.json({ success: true, data: created }, { status: 201 });
-  }
-});
-async function GET2(_request, context) {
-  try {
-    const { id } = await context.params;
-    const { db } = getProviders();
-    if (!db) {
-      return server_js.NextResponse.json(
-        { success: false, error: "Database provider not registered" },
-        { status: 503 }
-      );
-    }
-    const repo = db.getRepository("reviews");
-    const review = await repo.findById(id);
-    if (!review) {
-      return server_js.NextResponse.json(
-        { success: false, error: "Review not found" },
-        { status: 404 }
-      );
-    }
-    return server_js.NextResponse.json({ success: true, data: review });
-  } catch (error) {
-    console.error("[feat-reviews] GET /api/reviews/[id] failed", error);
-    return server_js.NextResponse.json(
-      { success: false, error: "Failed to fetch review" },
-      { status: 500 }
-    );
-  }
-}
-var reviewUpdateSchema = zod.z.object({
-  rating: zod.z.union([
-    zod.z.literal(1),
-    zod.z.literal(2),
-    zod.z.literal(3),
-    zod.z.literal(4),
-    zod.z.literal(5)
-  ]).optional(),
-  title: zod.z.string().min(1).max(100).optional(),
-  comment: zod.z.string().min(1).max(2e3).optional(),
-  images: zod.z.array(zod.z.string().url()).max(10).optional(),
-  video: zod.z.string().url().optional(),
-  status: zod.z.enum(["pending", "approved", "rejected"]).optional()
-}).passthrough();
-var reviewItemPATCH = createRouteHandler({
-  auth: true,
-  schema: reviewUpdateSchema,
-  handler: async ({ request, user, body }) => {
-    const url = new URL(request.url);
-    const segments = url.pathname.split("/");
-    const id = segments[segments.length - 1];
-    const { db } = getProviders();
-    if (!db)
-      return server_js.NextResponse.json(
-        { success: false, error: "DB not configured" },
-        { status: 503 }
-      );
-    const repo = db.getRepository("reviews");
-    const review = await repo.findById(id);
-    if (!review)
-      return server_js.NextResponse.json(
-        { success: false, error: "Review not found" },
-        { status: 404 }
-      );
-    const isOwner = review.userId === user.uid;
-    const isModerator = user.role === "moderator";
-    const isAdmin = user.role === "admin";
-    if (!isOwner && !isModerator && !isAdmin) {
-      return server_js.NextResponse.json(
-        { success: false, error: "Forbidden" },
-        { status: 403 }
-      );
-    }
-    const patch = isOwner && !isModerator && !isAdmin ? __spreadProps(__spreadValues({}, body), { status: review.status }) : body;
-    const updated = await repo.update(id, __spreadProps(__spreadValues({}, patch), {
-      updatedAt: (/* @__PURE__ */ new Date()).toISOString()
-    }));
-    return server_js.NextResponse.json({ success: true, data: updated });
-  }
-});
-var reviewItemDELETE = createRouteHandler({
-  auth: true,
-  handler: async ({ request, user }) => {
-    const url = new URL(request.url);
-    const segments = url.pathname.split("/");
-    const id = segments[segments.length - 1];
-    const { db } = getProviders();
-    if (!db)
-      return server_js.NextResponse.json(
-        { success: false, error: "DB not configured" },
-        { status: 503 }
-      );
-    const repo = db.getRepository("reviews");
-    const review = await repo.findById(id);
-    if (!review)
-      return server_js.NextResponse.json(
-        { success: false, error: "Review not found" },
-        { status: 404 }
-      );
-    const isOwner = review.userId === user.uid;
-    const isModerator = user.role === "moderator";
-    const isAdmin = user.role === "admin";
-    if (!isOwner && !isModerator && !isAdmin) {
-      return server_js.NextResponse.json(
-        { success: false, error: "Forbidden" },
-        { status: 403 }
-      );
-    }
-    await repo.delete(id);
-    return server_js.NextResponse.json({ success: true });
-  }
-});
-
-exports.GET = GET;
-exports.POST = POST;
-exports.reviewItemDELETE = reviewItemDELETE;
-exports.reviewItemGET = GET2;
-exports.reviewItemPATCH = reviewItemPATCH;
-exports.reviewsGET = GET;
-//# sourceMappingURL=server.cjs.map
-//# sourceMappingURL=server.cjs.map