@mohasinac/appkit 2.1.3 → 2.3.0

package/src/features/homepage/api/carousel/route.ts

@@ -1,188 +0,0 @@
-/**
- * feat-homepage — Next.js App Router API handler (GET/POST /api/carousel)
- *
- * Pure stub:
- * ```ts
- * // app/api/carousel/route.ts
- * export { carouselGET as GET, carouselPOST as POST } from "@mohasinac/feat-homepage";
- * ```
- */
-
-import { NextResponse } from "next/server.js";
-import { z } from "zod";
-import { getProviders } from "../../../../contracts";
-import { createRouteHandler } from "../../../../next";
-import type { CarouselSlide } from "../../types/index";
-
-/** Read `__session` cookie from request headers (HTTP cookie string). */
-function getSessionCookie(request: Request): string | null {
-  const cookieHeader = request.headers.get("cookie") ?? "";
-  const match = cookieHeader.match(/(?:^|;\s*)__session=([^;]+)/);
-  return match ? match[1] : null;
-}
-
-/** Returns the role from the session cookie, or null if invalid / no session provider. */
-async function getRoleFromSession(request: Request): Promise<string | null> {
-  try {
-    const { session } = getProviders();
-    if (!session) return null;
-    const cookie = getSessionCookie(request);
-    if (!cookie) return null;
-    const payload = await session.verifySession(cookie);
-    return payload.role ?? null;
-  } catch {
-    return null;
-  }
-}
-
-const MAX_ACTIVE_SLIDES = 5;
-
-// ─── GET /api/carousel ────────────────────────────────────────────────────────
-
-export async function GET(request: Request): Promise<NextResponse> {
-  try {
-    const url = new URL(request.url);
-    const includeInactive = url.searchParams.get("includeInactive") === "true";
-
-    // Admin auth guard for includeInactive
-    if (includeInactive) {
-      const role = await getRoleFromSession(request);
-      if (role !== "admin") {
-        return NextResponse.json(
-          { success: false, error: "Admin access required" },
-          { status: 403 },
-        );
-      }
-    }
-
-    const { db } = getProviders();
-    if (!db) {
-      return NextResponse.json(
-        { success: false, error: "Database provider not registered" },
-        { status: 503 },
-      );
-    }
-
-    const repo = db.getRepository<CarouselSlide>("carouselSlides");
-
-    let slides: CarouselSlide[];
-    if (includeInactive) {
-      const result = await repo.findAll({
-        sort: "order",
-        order: "asc",
-        perPage: 100,
-      });
-      slides = result.data;
-    } else {
-      const result = await repo.findAll({
-        filters: "active==true",
-        sort: "order",
-        order: "asc",
-        perPage: MAX_ACTIVE_SLIDES,
-      });
-      slides = result.data.slice(0, MAX_ACTIVE_SLIDES);
-    }
-
-    const response = NextResponse.json({ success: true, data: slides });
-    response.headers.set(
-      "Cache-Control",
-      includeInactive
-        ? "private, no-cache"
-        : "public, max-age=300, s-maxage=600, stale-while-revalidate=120",
-    );
-    return response;
-  } catch (error) {
-    console.error("[feat-homepage] GET /api/carousel failed", error);
-    return NextResponse.json(
-      { success: false, error: "Failed to fetch carousel slides" },
-      { status: 500 },
-    );
-  }
-}
-
-export { GET as carouselGET };
-
-// ---------------------------------------------------------------------------
-// POST /api/carousel — create a new slide (admin only)
-// ---------------------------------------------------------------------------
-
-const carouselSlideCreateSchema = z
-  .object({
-    title: z.string().min(1).max(200),
-    order: z.number().int().min(0).optional(),
-    active: z.boolean().optional(),
-    media: z.object({
-      type: z.enum(["image", "video"]),
-      url: z.string().url(),
-      alt: z.string(),
-      thumbnail: z.string().url().optional(),
-    }),
-    link: z
-      .object({
-        url: z.string().url(),
-        openInNewTab: z.boolean(),
-      })
-      .optional(),
-    mobileMedia: z
-      .object({
-        type: z.enum(["image", "video"]),
-        url: z.string().url(),
-        alt: z.string(),
-      })
-      .optional(),
-    cards: z.array(z.object({}).passthrough()).optional(),
-    overlay: z.object({}).passthrough().optional(),
-  })
-  .passthrough();
-
-export const carouselPOST = createRouteHandler({
-  auth: true,
-  roles: ["admin"],
-  schema: carouselSlideCreateSchema,
-  handler: async ({ body }) => {
-    const { db } = getProviders();
-    if (!db) {
-      return NextResponse.json(
-        { success: false, error: "DB not configured" },
-        { status: 503 },
-      );
-    }
-
-    const repo = db.getRepository<CarouselSlide>("carouselSlides");
-
-    // Guard: max 5 active slides
-    const active = await repo.findAll({
-      filters: "active==true",
-      perPage: MAX_ACTIVE_SLIDES + 1,
-    });
-    const incoming = body as { active?: boolean };
-    if (incoming.active !== false && active.data.length >= MAX_ACTIVE_SLIDES) {
-      return NextResponse.json(
-        {
-          success: false,
-          error: `Maximum ${MAX_ACTIVE_SLIDES} active slides allowed`,
-        },
-        { status: 409 },
-      );
-    }
-
-    const existing = await repo.findAll({
-      sort: "order",
-      order: "desc",
-      perPage: 1,
-    });
-    const maxOrder = existing.data[0]?.order ?? -1;
-
-    const now = new Date().toISOString();
-    const created = await repo.create({
-      ...(body as object),
-      order: (body as { order?: number }).order ?? maxOrder + 1,
-      active: incoming.active ?? false,
-      cards: (body as { cards?: unknown[] }).cards ?? [],
-      createdAt: now,
-      updatedAt: now,
-    } as unknown as CarouselSlide);
-
-    return NextResponse.json({ success: true, data: created }, { status: 201 });
-  },
-});

package/src/features/homepage/api/route.ts

@@ -1,167 +0,0 @@
-/**
- * feat-homepage — Next.js App Router API handlers (GET/POST /api/homepage-sections)
- *
- * Pure stub:
- * ```ts
- * // app/api/homepage-sections/route.ts
- * export { GET, POST } from "@mohasinac/feat-homepage";
- * ```
- */
-
-import { NextResponse } from "next/server.js";
-import { z } from "zod";
-import { getProviders } from "../../../contracts";
-import { createRouteHandler } from "../../../next";
-import type { HomepageSection } from "../types/index";
-
-/** Read `__session` cookie from request headers (HTTP cookie string). */
-function getSessionCookie(request: Request): string | null {
-  const cookieHeader = request.headers.get("cookie") ?? "";
-  const match = cookieHeader.match(/(?:^|;\s*)__session=([^;]+)/);
-  return match ? match[1] : null;
-}
-
-/** Returns the role from the session cookie, or null if invalid / no session provider. */
-async function getRoleFromSession(request: Request): Promise<string | null> {
-  try {
-    const { session } = getProviders();
-    if (!session) return null;
-    const cookie = getSessionCookie(request);
-    if (!cookie) return null;
-    const payload = await session.verifySession(cookie);
-    return payload.role ?? null;
-  } catch {
-    return null;
-  }
-}
-
-// ─── GET /api/homepage-sections ───────────────────────────────────────────────
-
-export async function GET(request: Request): Promise<NextResponse> {
-  try {
-    const url = new URL(request.url);
-    const typeFilter = url.searchParams.get("type");
-    const includeDisabled = url.searchParams.get("includeDisabled") === "true";
-
-    // Admin auth guard for includeDisabled
-    if (includeDisabled) {
-      const role = await getRoleFromSession(request);
-      if (role !== "admin") {
-        return NextResponse.json(
-          { success: false, error: "Admin access required" },
-          { status: 403 },
-        );
-      }
-    }
-
-    const filterParts = includeDisabled ? [] : ["enabled==true"];
-    if (typeFilter) filterParts.push(`type==${typeFilter}`);
-
-    const { db } = getProviders();
-    if (!db) {
-      return NextResponse.json(
-        { success: false, error: "Database provider not registered" },
-        { status: 503 },
-      );
-    }
-
-    const repo = db.getRepository<HomepageSection>("homepageSections");
-    const result = await repo.findAll({
-      filters: filterParts.join(",") || undefined,
-      sort: "order",
-      order: "asc",
-      perPage: 50,
-    });
-
-    const sections = result.data.sort(
-      (a, b) => (a.order ?? 0) - (b.order ?? 0),
-    );
-
-    const res = NextResponse.json({ success: true, data: sections });
-    res.headers.set(
-      "Cache-Control",
-      includeDisabled
-        ? "private, no-cache"
-        : "public, max-age=300, s-maxage=600, stale-while-revalidate=120",
-    );
-    return res;
-  } catch (error) {
-    console.error("[feat-homepage] GET /api/homepage-sections failed", error);
-    return NextResponse.json(
-      { success: false, error: "Failed to fetch homepage sections" },
-      { status: 500 },
-    );
-  }
-}
-
-// ---------------------------------------------------------------------------
-// POST /api/homepage-sections — create a new section (admin only)
-// ---------------------------------------------------------------------------
-
-const homepageSectionCreateSchema = z
-  .object({
-    type: z.enum([
-      "hero",
-      "featured_categories",
-      "featured_products",
-      "banner",
-      "testimonials",
-      "promotions",
-      "blog_posts",
-      "sellers",
-      "custom",
-    ]),
-    title: z.string().optional(),
-    enabled: z.boolean().optional(),
-    order: z.number().int().min(0).optional(),
-    content: z
-      .object({
-        title: z.string().optional(),
-        subtitle: z.string().optional(),
-        ctaLabel: z.string().optional(),
-        ctaUrl: z.string().optional(),
-        imageUrl: z.string().url().optional(),
-        videoUrl: z.string().url().optional(),
-        itemIds: z.array(z.string()).optional(),
-        html: z.string().optional(),
-      })
-      .optional(),
-    mobile: z.object({}).passthrough().optional(),
-  })
-  .passthrough();
-
-export const POST = createRouteHandler({
-  auth: true,
-  roles: ["admin"],
-  schema: homepageSectionCreateSchema,
-  handler: async ({ body }) => {
-    const { db } = getProviders();
-    if (!db) {
-      return NextResponse.json(
-        { success: false, error: "DB not configured" },
-        { status: 503 },
-      );
-    }
-
-    const repo = db.getRepository<HomepageSection>("homepageSections");
-
-    // Auto-assign order: place at end of existing sections
-    const existing = await repo.findAll({
-      sort: "order",
-      order: "desc",
-      perPage: 1,
-    });
-    const maxOrder = existing.data[0]?.order ?? -1;
-
-    const now = new Date().toISOString();
-    const created = await repo.create({
-      ...(body as object),
-      order: (body as { order?: number }).order ?? maxOrder + 1,
-      enabled: (body as { enabled?: boolean }).enabled ?? true,
-      createdAt: now,
-      updatedAt: now,
-    } as unknown as HomepageSection);
-
-    return NextResponse.json({ success: true, data: created }, { status: 201 });
-  },
-});

package/src/features/homepage/api/sections/[id]/route.ts

@@ -1,143 +0,0 @@
-/**
- * feat-homepage — GET/PATCH/DELETE /api/homepage/sections/[id]
- *
- * Homepage section retrieval, updates, and deletion.
- *
- * Consumer stub:
- * ```ts
- * export { sectionDetailGET as GET, sectionDetailPATCH as PATCH, sectionDetailDELETE as DELETE } from "@mohasinac/feat-homepage";
- * ```
- */
-
-import { NextResponse } from "next/server.js";
-import { getProviders } from "../../../../../contracts";
-
-export async function GET(
-  request: Request,
-  { params }: { params: { id: string } },
-): Promise<NextResponse> {
-  try {
-    const { id } = await params;
-    if (!id) {
-      return NextResponse.json(
-        { success: false, error: "Section ID required" },
-        { status: 400 },
-      );
-    }
-
-    const { db } = getProviders();
-    if (!db)
-      return NextResponse.json(
-        { success: false, error: "DB not configured" },
-        { status: 503 },
-      );
-
-    const repo = db.getRepository<Record<string, unknown>>("homepage_sections");
-    const section = await repo.findById(id);
-
-    if (!section) {
-      return NextResponse.json(
-        { success: false, error: "Section not found" },
-        { status: 404 },
-      );
-    }
-
-    return NextResponse.json({
-      success: true,
-      data: section,
-    });
-  } catch (error) {
-    return NextResponse.json(
-      {
-        success: false,
-        error: error instanceof Error ? error.message : "Internal server error",
-      },
-      { status: 500 },
-    );
-  }
-}
-
-export async function PATCH(
-  request: Request,
-  { params }: { params: { id: string } },
-): Promise<NextResponse> {
-  try {
-    const { id } = await params;
-    if (!id) {
-      return NextResponse.json(
-        { success: false, error: "Section ID required" },
-        { status: 400 },
-      );
-    }
-
-    const body = await request.json();
-
-    const { db } = getProviders();
-    if (!db)
-      return NextResponse.json(
-        { success: false, error: "DB not configured" },
-        { status: 503 },
-      );
-
-    const repo = db.getRepository<Record<string, unknown>>("homepage_sections");
-    const updated = await repo.update(id, body);
-
-    if (!updated) {
-      return NextResponse.json(
-        { success: false, error: "Section not found" },
-        { status: 404 },
-      );
-    }
-
-    return NextResponse.json({
-      success: true,
-      data: updated,
-    });
-  } catch (error) {
-    return NextResponse.json(
-      {
-        success: false,
-        error: error instanceof Error ? error.message : "Internal server error",
-      },
-      { status: 500 },
-    );
-  }
-}
-
-export async function DELETE(
-  request: Request,
-  { params }: { params: { id: string } },
-): Promise<NextResponse> {
-  try {
-    const { id } = await params;
-    if (!id) {
-      return NextResponse.json(
-        { success: false, error: "Section ID required" },
-        { status: 400 },
-      );
-    }
-
-    const { db } = getProviders();
-    if (!db)
-      return NextResponse.json(
-        { success: false, error: "DB not configured" },
-        { status: 503 },
-      );
-
-    const repo = db.getRepository<Record<string, unknown>>("homepage_sections");
-    await repo.delete(id);
-
-    return NextResponse.json({
-      success: true,
-      data: { id },
-    });
-  } catch (error) {
-    return NextResponse.json(
-      {
-        success: false,
-        error: error instanceof Error ? error.message : "Internal server error",
-      },
-      { status: 500 },
-    );
-  }
-}

package/src/features/homepage/api/sections/route.ts

@@ -1,104 +0,0 @@
-/**
- * feat-homepage — GET/POST /api/homepage/sections
- *
- * Homepage sections list with Sieve filtering and creation.
- *
- * Consumer stub:
- * ```ts
- * export { sectionsListGET as GET, sectionsListPOST as POST } from "@mohasinac/feat-homepage";
- * ```
- */
-
-import { NextResponse } from "next/server.js";
-import { getProviders } from "../../../../contracts";
-
-function numParam(url: URL, key: string, fallback: number): number {
-  const v = url.searchParams.get(key);
-  const n = v !== null ? Number(v) : NaN;
-  return Number.isFinite(n) ? n : fallback;
-}
-
-export async function GET(request: Request): Promise<NextResponse> {
-  try {
-    const url = new URL(request.url);
-    const page = Math.max(1, numParam(url, "page", 1));
-    const pageSize = Math.min(100, Math.max(1, numParam(url, "pageSize", 20)));
-    const filters = url.searchParams.get("filters") ?? undefined;
-    const sort =
-      url.searchParams.get("sorts") ??
-      url.searchParams.get("sort") ??
-      "-createdAt";
-
-    const { db } = getProviders();
-    if (!db)
-      return NextResponse.json(
-        { success: false, error: "DB not configured" },
-        { status: 503 },
-      );
-
-    const repo = db.getRepository<Record<string, unknown>>("homepage_sections");
-    const result = await repo.findAll({
-      filters,
-      sort,
-      page,
-      perPage: pageSize,
-    });
-
-    const totalPages = Math.max(1, Math.ceil(result.total / pageSize));
-
-    return NextResponse.json({
-      success: true,
-      data: {
-        items: result.data,
-        total: result.total,
-        page,
-        pageSize,
-        totalPages,
-        hasMore: page < totalPages,
-      },
-    });
-  } catch (error) {
-    return NextResponse.json(
-      {
-        success: false,
-        error: error instanceof Error ? error.message : "Internal server error",
-      },
-      { status: 500 },
-    );
-  }
-}
-
-export async function POST(request: Request): Promise<NextResponse> {
-  try {
-    const body = await request.json();
-
-    const { db } = getProviders();
-    if (!db)
-      return NextResponse.json(
-        { success: false, error: "DB not configured" },
-        { status: 503 },
-      );
-
-    const repo = db.getRepository<Record<string, unknown>>("homepage_sections");
-    const created = await repo.create({
-      ...body,
-      createdAt: new Date(),
-    });
-
-    return NextResponse.json(
-      {
-        success: true,
-        data: created,
-      },
-      { status: 201 },
-    );
-  } catch (error) {
-    return NextResponse.json(
-      {
-        success: false,
-        error: error instanceof Error ? error.message : "Internal server error",
-      },
-      { status: 500 },
-    );
-  }
-}