@payez/next-mvp 4.1.8 → 4.1.9

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (155) hide show
  1. package/README.md +792 -792
  2. package/dist/auth/better-auth.js +15 -3
  3. package/dist/components/account/MobileNavDrawer.js +18 -18
  4. package/dist/components/account/UserAvatarMenu.js +1 -1
  5. package/dist/components/admin/AlertSettingsTab.js +40 -40
  6. package/dist/components/admin/LoggingSettingsTab.js +28 -28
  7. package/dist/lib/idp-fetch.js +9 -25
  8. package/dist/pages/login/page.js +28 -28
  9. package/dist/pages/settings/EnhancedSettingsPage.js +17 -17
  10. package/package.json +1 -1
  11. package/scripts/dev-broker.ps1 +35 -35
  12. package/scripts/dev-local.ps1 +45 -45
  13. package/src/api/auth-handler.ts +548 -548
  14. package/src/api-handlers/account/change-password.ts +142 -142
  15. package/src/api-handlers/account/update-phone.ts +79 -79
  16. package/src/api-handlers/account/verify-email.ts +125 -125
  17. package/src/api-handlers/account/verify-sms.ts +125 -125
  18. package/src/api-handlers/admin/analytics.ts +443 -443
  19. package/src/api-handlers/admin/audit.ts +223 -223
  20. package/src/api-handlers/admin/index.ts +63 -63
  21. package/src/api-handlers/admin/redis-sessions.ts +251 -251
  22. package/src/api-handlers/admin/sessions.ts +318 -318
  23. package/src/api-handlers/admin/site-logs.ts +365 -365
  24. package/src/api-handlers/admin/users.ts +242 -242
  25. package/src/api-handlers/admin/vibe-data.ts +324 -324
  26. package/src/api-handlers/auth/refresh.ts +682 -682
  27. package/src/api-handlers/auth/signout.ts +199 -199
  28. package/src/api-handlers/auth/status.ts +20 -20
  29. package/src/api-handlers/auth/update-session.ts +110 -110
  30. package/src/api-handlers/auth/verify-code.ts +112 -112
  31. package/src/api-handlers/session/refresh-viability.ts +36 -36
  32. package/src/api-handlers/test/force-expire.ts +60 -60
  33. package/src/auth/auth-decision.ts +229 -229
  34. package/src/auth/better-auth.ts +15 -3
  35. package/src/auth/route-config.ts +219 -219
  36. package/src/auth/types/auth-types.ts +555 -555
  37. package/src/auth/types/index.ts +7 -7
  38. package/src/auth/utils/idp-client.ts +445 -445
  39. package/src/auth/utils/index.ts +6 -6
  40. package/src/auth/utils/token-utils.ts +243 -243
  41. package/src/client/AuthContext.tsx +143 -143
  42. package/src/client/fetch-with-auth.ts +47 -47
  43. package/src/components/SessionSync.tsx +138 -138
  44. package/src/components/SignalRHealthCheck.tsx +131 -131
  45. package/src/components/account/MobileNavDrawer.tsx +305 -305
  46. package/src/components/account/UserAvatarMenu.tsx +266 -266
  47. package/src/components/account/index.ts +13 -13
  48. package/src/components/admin/AlertSettingsTab.tsx +728 -728
  49. package/src/components/admin/AnalyticsTab.tsx +703 -703
  50. package/src/components/admin/DataBrowserTab.tsx +505 -505
  51. package/src/components/admin/LoggingSettingsTab.tsx +665 -665
  52. package/src/components/admin/SessionsTab.tsx +414 -414
  53. package/src/components/admin/StatsTab.tsx +379 -379
  54. package/src/components/admin/VibeAdminLayout.tsx +187 -187
  55. package/src/components/admin/index.ts +59 -59
  56. package/src/components/auth/FederatedAuthSection.tsx +95 -95
  57. package/src/components/auth/ModeAwareLoginPage.tsx +135 -135
  58. package/src/components/auth/ModeAwareSignupPage.tsx +267 -267
  59. package/src/components/auth/TraditionalAuthSection.tsx +99 -99
  60. package/src/components/recovery/CompleteStep.tsx +36 -36
  61. package/src/components/recovery/InitiateRecoveryStep.tsx +68 -68
  62. package/src/components/recovery/SelectMethodStep.tsx +73 -73
  63. package/src/components/recovery/SetPasswordStep.tsx +97 -97
  64. package/src/components/recovery/VerifyCodeStep.tsx +90 -90
  65. package/src/components/reserved/ReservedRecoveryWarning.tsx +160 -160
  66. package/src/components/reserved/ReservedStatusBox.tsx +118 -118
  67. package/src/components/ui/BetaBadge.tsx +58 -58
  68. package/src/components/ui/Footer.tsx +93 -93
  69. package/src/config/env.ts +57 -57
  70. package/src/config/logger.ts +62 -62
  71. package/src/config/vibe-log-transport.ts +264 -264
  72. package/src/hooks/useAuth.ts +117 -117
  73. package/src/hooks/useAuthSettings.ts +97 -97
  74. package/src/hooks/useAvailableProviders.ts +120 -120
  75. package/src/hooks/usePasswordValidation.ts +127 -127
  76. package/src/hooks/usePublicAuthSettings.ts +149 -149
  77. package/src/hooks/useSessionExpiration.ts +101 -101
  78. package/src/hooks/useViabilitySession.ts +336 -336
  79. package/src/index.ts +60 -60
  80. package/src/lib/api-handler.ts +643 -643
  81. package/src/lib/app-slug.ts +178 -178
  82. package/src/lib/geolocation.ts +265 -265
  83. package/src/lib/idp-fetch.ts +10 -26
  84. package/src/lib/jwt-decode.ts +82 -82
  85. package/src/lib/roles.ts +177 -177
  86. package/src/lib/site-logger.ts +245 -245
  87. package/src/lib/standardized-client-api.ts +901 -901
  88. package/src/lib/test-aware-get-token.ts +41 -41
  89. package/src/lib/user-agent-parser.ts +252 -252
  90. package/src/logging/api/admin-analytics.ts +51 -51
  91. package/src/logging/api/audit-log.ts +53 -53
  92. package/src/logging/components/AdminAnalyticsLayout.tsx +49 -49
  93. package/src/logging/components/AuditLogViewer.tsx +125 -125
  94. package/src/logging/components/ErrorMetricsCard.tsx +98 -98
  95. package/src/logging/components/HealthMetricsCard.tsx +70 -70
  96. package/src/logging/hooks/useAdminAnalytics.ts +22 -22
  97. package/src/logging/hooks/useAuditLog.ts +24 -24
  98. package/src/logging/hooks/useErrorMetrics.ts +40 -40
  99. package/src/logging/hooks/useHealthMetrics.ts +44 -44
  100. package/src/logging/index.ts +18 -18
  101. package/src/logging/types/analytics.ts +81 -81
  102. package/src/logging/types/audit.ts +31 -31
  103. package/src/logging/types/index.ts +3 -3
  104. package/src/middleware/create-middleware.ts +663 -663
  105. package/src/middleware/rbac-check.ts +279 -279
  106. package/src/middleware/twofa-presets.ts +224 -224
  107. package/src/pages/admin-login/page.tsx +221 -221
  108. package/src/pages/admin-page-permissions/PagePermissionsAdminPage.tsx +527 -527
  109. package/src/pages/admin-page-permissions/index.ts +7 -7
  110. package/src/pages/admin-roles/RolesAdminPage.tsx +533 -533
  111. package/src/pages/admin-roles/modals.tsx +469 -469
  112. package/src/pages/client-admin/ClientSiteAdminPage.tsx +382 -382
  113. package/src/pages/client-admin/index.ts +33 -33
  114. package/src/pages/coming-soon/page.tsx +83 -83
  115. package/src/pages/login/page.tsx +456 -456
  116. package/src/pages/profile/EnhancedProfilePage.tsx +485 -485
  117. package/src/pages/profile/index.ts +9 -9
  118. package/src/pages/profile/page.tsx +166 -166
  119. package/src/pages/recovery/page.tsx +234 -234
  120. package/src/pages/roles/MyRolesPage.tsx +211 -211
  121. package/src/pages/roles/components.tsx +294 -294
  122. package/src/pages/roles/index.ts +17 -17
  123. package/src/pages/security/EnhancedSecurityPage.tsx +565 -565
  124. package/src/pages/security/index.ts +9 -9
  125. package/src/pages/security/page.tsx +507 -507
  126. package/src/pages/settings/EnhancedSettingsPage.tsx +642 -642
  127. package/src/pages/settings/index.ts +9 -9
  128. package/src/pages/settings/page.tsx +47 -47
  129. package/src/pages/showcase/ShowcasePage.tsx +532 -532
  130. package/src/pages/showcase/index.ts +13 -13
  131. package/src/pages/test-env/EmergencyLogoutPage.tsx +180 -180
  132. package/src/pages/test-env/JwtInspectPage.tsx +456 -456
  133. package/src/pages/test-env/RefreshTokenPage.tsx +157 -157
  134. package/src/pages/test-env/TestEnvPage.tsx +118 -118
  135. package/src/pages/test-env/index.ts +25 -25
  136. package/src/pages/verify-code/page.tsx +652 -652
  137. package/src/routes/account/update-phone.ts +13 -13
  138. package/src/routes/auth/logout.ts +108 -108
  139. package/src/routes/auth/nextauth.ts +45 -45
  140. package/src/routes/auth/settings.ts +75 -75
  141. package/src/routes/auth/viability.ts +224 -224
  142. package/src/server/auth-guard.ts +170 -170
  143. package/src/server/slim-middleware.ts +117 -117
  144. package/src/server/with-auth.ts +93 -93
  145. package/src/stores/authStore.ts +1899 -1899
  146. package/src/templates/instrumentation.ts +41 -41
  147. package/src/utils/logout.ts +30 -30
  148. package/src/vibe/client.ts +590 -590
  149. package/src/vibe/enterprise-auth.ts +208 -208
  150. package/src/vibe/errors.ts +185 -185
  151. package/src/vibe/generic.ts +431 -431
  152. package/src/vibe/hooks/index.ts +367 -367
  153. package/src/vibe/index.ts +132 -132
  154. package/src/vibe/sessions.ts +551 -551
  155. package/src/vibe/types.ts +577 -577
@@ -1,365 +1,365 @@
1
- /**
2
- * Admin Site Logs API Handlers
3
- *
4
- * Provides admin-level access to site activity logs.
5
- * - GET /site-logs - Query logs from Vibe
6
- * - POST /site-logs - Create test log entries via Redis queue
7
- * - GET /site-logs/stats - Aggregated stats { total, unique_users, by_level, by_category }
8
- * - POST /site-logs/drain - Manual drain trigger
9
- * - GET /site-logs/queue - Redis queue status
10
- *
11
- * @version 1.0
12
- * @requires Admin role (vibe_app_admin or payez_admin)
13
- */
14
-
15
- import { NextRequest, NextResponse } from 'next/server';
16
- import { getSession } from '../../server/auth';
17
- import { getRedis } from '../../lib/redis';
18
- import { ADMIN_ROLES, hasAnyRole } from '../../lib/roles';
19
- const REDIS_SITE_LOG_KEY = 'vibe:site-logs:pending';
20
- const REDIS_LOG_TTL = 7 * 24 * 60 * 60; // 1 week
21
-
22
- export interface SiteLogsHandlerConfig {
23
- vibeApiUrl?: string;
24
- appSlug?: string;
25
- vibeClientId?: string;
26
- }
27
-
28
- /**
29
- * Check if the current user has admin role
30
- */
31
- async function checkAdminRole(request: NextRequest): Promise<{ isAdmin: boolean; userId?: number; accessToken?: string; clientId?: string; error?: NextResponse }> {
32
- const session = await getSession(request) as any;
33
-
34
- if (!session?.user) {
35
- return {
36
- isAdmin: false,
37
- error: NextResponse.json(
38
- { success: false, error: 'Please sign in' },
39
- { status: 401 }
40
- ),
41
- };
42
- }
43
-
44
- const userRoles = (session.user?.roles as string[]) || [];
45
- const hasAdminRole = ADMIN_ROLES.some(role => userRoles.includes(role));
46
-
47
- if (!hasAdminRole) {
48
- return {
49
- isAdmin: false,
50
- error: NextResponse.json(
51
- { success: false, error: 'Admin access required' },
52
- { status: 403 }
53
- ),
54
- };
55
- }
56
-
57
- return {
58
- isAdmin: true,
59
- userId: session.user?.id,
60
- accessToken: session.accessToken,
61
- clientId: session.clientId,
62
- };
63
- }
64
-
65
- function getVibeApiUrl(config: SiteLogsHandlerConfig): string {
66
- if (config.vibeApiUrl) return config.vibeApiUrl;
67
- const url = process.env.VIBE_API_URL;
68
- if (url) return url;
69
- if (process.env.NODE_ENV !== 'production') return 'http://localhost:37933';
70
- throw new Error('VIBE_API_URL is required in production');
71
- }
72
-
73
- /**
74
- * Create main site-logs handler (GET query, POST create test entries)
75
- */
76
- export function createSiteLogsHandler(config: SiteLogsHandlerConfig) {
77
- return {
78
- async GET(request: NextRequest) {
79
- const adminCheck = await checkAdminRole(request);
80
- if (adminCheck.error) return adminCheck.error;
81
-
82
- const { searchParams } = new URL(request.url);
83
- const vibeUrl = getVibeApiUrl(config);
84
-
85
- // Forward query params
86
- const params = new URLSearchParams();
87
- if (searchParams.get('level')) params.set('level', searchParams.get('level')!);
88
- if (searchParams.get('category')) params.set('category', searchParams.get('category')!);
89
- if (searchParams.get('search')) params.set('search', searchParams.get('search')!);
90
- if (searchParams.get('from')) params.set('from', searchParams.get('from')!);
91
- if (searchParams.get('to')) params.set('to', searchParams.get('to')!);
92
- if (searchParams.get('user_id')) params.set('user_id', searchParams.get('user_id')!);
93
- if (searchParams.get('limit')) params.set('limit', searchParams.get('limit')!);
94
- if (searchParams.get('offset')) params.set('offset', searchParams.get('offset')!);
95
-
96
- const headers: Record<string, string> = {
97
- 'Authorization': `Bearer ${adminCheck.accessToken}`,
98
- 'Content-Type': 'application/json',
99
- };
100
- if (adminCheck.clientId) {
101
- headers['X-Client-Id'] = adminCheck.clientId;
102
- }
103
-
104
- try {
105
- const response = await fetch(`${vibeUrl}/v1/admin/site-logs?${params}`, { headers });
106
-
107
- if (!response.ok) {
108
- const errorText = await response.text();
109
- console.error('[admin/site-logs] Vibe error:', response.status, errorText);
110
- return NextResponse.json(
111
- { error: 'Failed to fetch site logs', details: errorText },
112
- { status: response.status }
113
- );
114
- }
115
-
116
- const data = await response.json();
117
- return NextResponse.json(data);
118
- } catch (error: any) {
119
- console.error('[admin/site-logs] Error:', error);
120
- return NextResponse.json(
121
- { error: error.message || 'Internal error' },
122
- { status: 500 }
123
- );
124
- }
125
- },
126
-
127
- async POST(request: NextRequest) {
128
- const adminCheck = await checkAdminRole(request);
129
- if (adminCheck.error) return adminCheck.error;
130
-
131
- try {
132
- const body = await request.json();
133
- const redis = getRedis();
134
-
135
- const userAgent = request.headers.get('user-agent') || null;
136
- const ipAddress = request.headers.get('x-forwarded-for')?.split(',')[0] || null;
137
- const baseRecord = {
138
- user_agent: userAgent,
139
- ip_address: ipAddress,
140
- created_at: new Date().toISOString(),
141
- app_slug: config.appSlug || process.env.APP_SLUG || process.env.CLIENT_ID || 'unknown',
142
- vibe_client_id: config.vibeClientId || process.env.VIBE_CLIENT_ID || '',
143
- };
144
-
145
- // If generateAll=true, create one of each event type
146
- if (body.generate_all) {
147
- const testEvents = [
148
- { log_level: 'debug', category: 'api', message: 'Test: API request traced', context: { endpoint: '/api/test', method: 'GET' }, url: '/api/test' },
149
- { log_level: 'info', category: 'auth', message: 'Test: User logged in', context: { method: 'password' }, user_id: 1, url: '/api/auth/callback' },
150
- { log_level: 'info', category: 'page_view', message: 'Test: Page viewed', context: { referrer: '/dashboard' }, user_id: 1, url: '/admin/activity' },
151
- { log_level: 'info', category: 'user_action', message: 'Test: Button clicked', context: { target: 'submit-btn' }, user_id: 1, url: '/admin/activity' },
152
- { log_level: 'warn', category: 'auth', message: 'Test: Login failed', context: { reason: 'invalid_password' }, url: '/api/auth/login' },
153
- { log_level: 'error', category: 'error', message: 'Test: Application error', context: { error: 'TestError', stack: 'at test()' }, url: '/api/test' },
154
- ];
155
-
156
- for (const event of testEvents) {
157
- const logRecord = JSON.stringify({ ...baseRecord, ...event, session_id: null });
158
- await redis.lpush(REDIS_SITE_LOG_KEY, logRecord);
159
- }
160
- await redis.expire(REDIS_SITE_LOG_KEY, REDIS_LOG_TTL);
161
- const queueLen = await redis.llen(REDIS_SITE_LOG_KEY);
162
-
163
- return NextResponse.json({
164
- success: true,
165
- message: `Created ${testEvents.length} test events`,
166
- queue_length: queueLen,
167
- events: testEvents.map(e => ({ level: e.log_level, category: e.category, message: e.message })),
168
- note: 'Events will appear after drain service processes them',
169
- }, { status: 201 });
170
- }
171
-
172
- // Single event creation
173
- const logRecord = JSON.stringify({
174
- ...baseRecord,
175
- log_level: body.level || 'info',
176
- category: body.category || 'user_action',
177
- message: body.message || 'Test log entry',
178
- context: body.context || { source: 'admin-test' },
179
- user_id: body.user_id || null,
180
- session_id: null,
181
- url: body.url || '/admin/activity',
182
- });
183
-
184
- await redis.lpush(REDIS_SITE_LOG_KEY, logRecord);
185
- await redis.expire(REDIS_SITE_LOG_KEY, REDIS_LOG_TTL);
186
- const queueLen = await redis.llen(REDIS_SITE_LOG_KEY);
187
-
188
- return NextResponse.json({
189
- success: true,
190
- message: 'Test log created',
191
- queue_length: queueLen,
192
- note: 'Log will appear after drain service processes it (every 5 seconds)',
193
- }, { status: 201 });
194
- } catch (error: any) {
195
- console.error('[admin/site-logs] POST Error:', error);
196
- return NextResponse.json(
197
- { error: error.message || 'Internal error' },
198
- { status: 500 }
199
- );
200
- }
201
- },
202
- };
203
- }
204
-
205
- /**
206
- * Create site-logs stats handler
207
- * Returns: { total, unique_users, by_level, by_category }
208
- */
209
- export function createSiteLogsStatsHandler(config: SiteLogsHandlerConfig) {
210
- return {
211
- async GET(request: NextRequest) {
212
- const adminCheck = await checkAdminRole(request);
213
- if (adminCheck.error) return adminCheck.error;
214
-
215
- const { searchParams } = new URL(request.url);
216
- const vibeUrl = getVibeApiUrl(config);
217
-
218
- const params = new URLSearchParams();
219
- if (searchParams.get('from')) params.set('from', searchParams.get('from')!);
220
- if (searchParams.get('to')) params.set('to', searchParams.get('to')!);
221
-
222
- const headers: Record<string, string> = {
223
- 'Authorization': `Bearer ${adminCheck.accessToken}`,
224
- 'Content-Type': 'application/json',
225
- };
226
- if (adminCheck.clientId) {
227
- headers['X-Client-Id'] = adminCheck.clientId;
228
- }
229
-
230
- try {
231
- const response = await fetch(`${vibeUrl}/v1/admin/site-logs/stats?${params}`, { headers });
232
-
233
- if (!response.ok) {
234
- const errorText = await response.text();
235
- console.error('[admin/site-logs/stats] Vibe error:', response.status, errorText);
236
- return NextResponse.json(
237
- { error: 'Failed to fetch stats', details: errorText },
238
- { status: response.status }
239
- );
240
- }
241
-
242
- const data = await response.json();
243
- // Ensure response matches expected format: { total, unique_users, by_level, by_category }
244
- return NextResponse.json(data);
245
- } catch (error: any) {
246
- console.error('[admin/site-logs/stats] Error:', error);
247
- return NextResponse.json(
248
- { error: error.message || 'Internal error' },
249
- { status: 500 }
250
- );
251
- }
252
- },
253
- };
254
- }
255
-
256
- /**
257
- * Create site-logs drain handler (manual trigger)
258
- */
259
- export function createSiteLogsDrainHandler(config: SiteLogsHandlerConfig) {
260
- return {
261
- async POST(request: NextRequest) {
262
- const adminCheck = await checkAdminRole(request);
263
- if (adminCheck.error) return adminCheck.error;
264
-
265
- const { searchParams } = new URL(request.url);
266
- const maxEntries = searchParams.get('max_entries') || '100';
267
- const vibeUrl = getVibeApiUrl(config);
268
-
269
- const headers: Record<string, string> = {
270
- 'Authorization': `Bearer ${adminCheck.accessToken}`,
271
- 'Content-Type': 'application/json',
272
- };
273
- if (adminCheck.clientId) {
274
- headers['X-Client-Id'] = adminCheck.clientId;
275
- }
276
-
277
- try {
278
- const response = await fetch(`${vibeUrl}/v1/admin/site-logs/drain?maxEntries=${maxEntries}`, {
279
- method: 'POST',
280
- headers,
281
- });
282
-
283
- if (!response.ok) {
284
- const errorText = await response.text();
285
- console.error('[admin/site-logs/drain] Vibe error:', response.status, errorText);
286
- return NextResponse.json(
287
- { error: 'Failed to drain site logs', details: errorText },
288
- { status: response.status }
289
- );
290
- }
291
-
292
- const data = await response.json();
293
- return NextResponse.json(data);
294
- } catch (error: any) {
295
- console.error('[admin/site-logs/drain] Error:', error);
296
- return NextResponse.json(
297
- { error: error.message || 'Internal error' },
298
- { status: 500 }
299
- );
300
- }
301
- },
302
- };
303
- }
304
-
305
- /**
306
- * Create site-logs queue status handler
307
- */
308
- export function createSiteLogsQueueHandler(config: SiteLogsHandlerConfig) {
309
- return {
310
- async GET(request: NextRequest) {
311
- const adminCheck = await checkAdminRole(request);
312
- if (adminCheck.error) return adminCheck.error;
313
-
314
- try {
315
- const redis = getRedis();
316
- const queueLength = await redis.llen(REDIS_SITE_LOG_KEY);
317
-
318
- // Peek at the oldest and newest entries
319
- let oldest_entry = null;
320
- let newest_entry = null;
321
-
322
- if (queueLength > 0) {
323
- const oldest = await redis.lindex(REDIS_SITE_LOG_KEY, -1); // RPOP side (oldest)
324
- const newest = await redis.lindex(REDIS_SITE_LOG_KEY, 0); // LPUSH side (newest)
325
-
326
- if (oldest) {
327
- try {
328
- const parsed = JSON.parse(oldest);
329
- oldest_entry = {
330
- message: parsed.message,
331
- level: parsed.log_level,
332
- timestamp: parsed.created_at || parsed.queued_at,
333
- };
334
- } catch {}
335
- }
336
-
337
- if (newest) {
338
- try {
339
- const parsed = JSON.parse(newest);
340
- newest_entry = {
341
- message: parsed.message,
342
- level: parsed.log_level,
343
- timestamp: parsed.created_at || parsed.queued_at,
344
- };
345
- } catch {}
346
- }
347
- }
348
-
349
- return NextResponse.json({
350
- queue_length: queueLength,
351
- redis_key: REDIS_SITE_LOG_KEY,
352
- oldest_entry,
353
- newest_entry,
354
- status: queueLength === 0 ? 'empty' : 'pending',
355
- });
356
- } catch (error: any) {
357
- console.error('[admin/site-logs/queue] Error:', error);
358
- return NextResponse.json(
359
- { error: error.message || 'Internal error' },
360
- { status: 500 }
361
- );
362
- }
363
- },
364
- };
365
- }
1
+ /**
2
+ * Admin Site Logs API Handlers
3
+ *
4
+ * Provides admin-level access to site activity logs.
5
+ * - GET /site-logs - Query logs from Vibe
6
+ * - POST /site-logs - Create test log entries via Redis queue
7
+ * - GET /site-logs/stats - Aggregated stats { total, unique_users, by_level, by_category }
8
+ * - POST /site-logs/drain - Manual drain trigger
9
+ * - GET /site-logs/queue - Redis queue status
10
+ *
11
+ * @version 1.0
12
+ * @requires Admin role (vibe_app_admin or payez_admin)
13
+ */
14
+
15
+ import { NextRequest, NextResponse } from 'next/server';
16
+ import { getSession } from '../../server/auth';
17
+ import { getRedis } from '../../lib/redis';
18
+ import { ADMIN_ROLES, hasAnyRole } from '../../lib/roles';
19
+ const REDIS_SITE_LOG_KEY = 'vibe:site-logs:pending';
20
+ const REDIS_LOG_TTL = 7 * 24 * 60 * 60; // 1 week
21
+
22
+ export interface SiteLogsHandlerConfig {
23
+ vibeApiUrl?: string;
24
+ appSlug?: string;
25
+ vibeClientId?: string;
26
+ }
27
+
28
+ /**
29
+ * Check if the current user has admin role
30
+ */
31
+ async function checkAdminRole(request: NextRequest): Promise<{ isAdmin: boolean; userId?: number; accessToken?: string; clientId?: string; error?: NextResponse }> {
32
+ const session = await getSession(request) as any;
33
+
34
+ if (!session?.user) {
35
+ return {
36
+ isAdmin: false,
37
+ error: NextResponse.json(
38
+ { success: false, error: 'Please sign in' },
39
+ { status: 401 }
40
+ ),
41
+ };
42
+ }
43
+
44
+ const userRoles = (session.user?.roles as string[]) || [];
45
+ const hasAdminRole = ADMIN_ROLES.some(role => userRoles.includes(role));
46
+
47
+ if (!hasAdminRole) {
48
+ return {
49
+ isAdmin: false,
50
+ error: NextResponse.json(
51
+ { success: false, error: 'Admin access required' },
52
+ { status: 403 }
53
+ ),
54
+ };
55
+ }
56
+
57
+ return {
58
+ isAdmin: true,
59
+ userId: session.user?.id,
60
+ accessToken: session.accessToken,
61
+ clientId: session.clientId,
62
+ };
63
+ }
64
+
65
+ function getVibeApiUrl(config: SiteLogsHandlerConfig): string {
66
+ if (config.vibeApiUrl) return config.vibeApiUrl;
67
+ const url = process.env.VIBE_API_URL;
68
+ if (url) return url;
69
+ if (process.env.NODE_ENV !== 'production') return 'http://localhost:37933';
70
+ throw new Error('VIBE_API_URL is required in production');
71
+ }
72
+
73
+ /**
74
+ * Create main site-logs handler (GET query, POST create test entries)
75
+ */
76
+ export function createSiteLogsHandler(config: SiteLogsHandlerConfig) {
77
+ return {
78
+ async GET(request: NextRequest) {
79
+ const adminCheck = await checkAdminRole(request);
80
+ if (adminCheck.error) return adminCheck.error;
81
+
82
+ const { searchParams } = new URL(request.url);
83
+ const vibeUrl = getVibeApiUrl(config);
84
+
85
+ // Forward query params
86
+ const params = new URLSearchParams();
87
+ if (searchParams.get('level')) params.set('level', searchParams.get('level')!);
88
+ if (searchParams.get('category')) params.set('category', searchParams.get('category')!);
89
+ if (searchParams.get('search')) params.set('search', searchParams.get('search')!);
90
+ if (searchParams.get('from')) params.set('from', searchParams.get('from')!);
91
+ if (searchParams.get('to')) params.set('to', searchParams.get('to')!);
92
+ if (searchParams.get('user_id')) params.set('user_id', searchParams.get('user_id')!);
93
+ if (searchParams.get('limit')) params.set('limit', searchParams.get('limit')!);
94
+ if (searchParams.get('offset')) params.set('offset', searchParams.get('offset')!);
95
+
96
+ const headers: Record<string, string> = {
97
+ 'Authorization': `Bearer ${adminCheck.accessToken}`,
98
+ 'Content-Type': 'application/json',
99
+ };
100
+ if (adminCheck.clientId) {
101
+ headers['X-Client-Id'] = adminCheck.clientId;
102
+ }
103
+
104
+ try {
105
+ const response = await fetch(`${vibeUrl}/v1/admin/site-logs?${params}`, { headers });
106
+
107
+ if (!response.ok) {
108
+ const errorText = await response.text();
109
+ console.error('[admin/site-logs] Vibe error:', response.status, errorText);
110
+ return NextResponse.json(
111
+ { error: 'Failed to fetch site logs', details: errorText },
112
+ { status: response.status }
113
+ );
114
+ }
115
+
116
+ const data = await response.json();
117
+ return NextResponse.json(data);
118
+ } catch (error: any) {
119
+ console.error('[admin/site-logs] Error:', error);
120
+ return NextResponse.json(
121
+ { error: error.message || 'Internal error' },
122
+ { status: 500 }
123
+ );
124
+ }
125
+ },
126
+
127
+ async POST(request: NextRequest) {
128
+ const adminCheck = await checkAdminRole(request);
129
+ if (adminCheck.error) return adminCheck.error;
130
+
131
+ try {
132
+ const body = await request.json();
133
+ const redis = getRedis();
134
+
135
+ const userAgent = request.headers.get('user-agent') || null;
136
+ const ipAddress = request.headers.get('x-forwarded-for')?.split(',')[0] || null;
137
+ const baseRecord = {
138
+ user_agent: userAgent,
139
+ ip_address: ipAddress,
140
+ created_at: new Date().toISOString(),
141
+ app_slug: config.appSlug || process.env.APP_SLUG || process.env.CLIENT_ID || 'unknown',
142
+ vibe_client_id: config.vibeClientId || process.env.VIBE_CLIENT_ID || '',
143
+ };
144
+
145
+ // If generateAll=true, create one of each event type
146
+ if (body.generate_all) {
147
+ const testEvents = [
148
+ { log_level: 'debug', category: 'api', message: 'Test: API request traced', context: { endpoint: '/api/test', method: 'GET' }, url: '/api/test' },
149
+ { log_level: 'info', category: 'auth', message: 'Test: User logged in', context: { method: 'password' }, user_id: 1, url: '/api/auth/callback' },
150
+ { log_level: 'info', category: 'page_view', message: 'Test: Page viewed', context: { referrer: '/dashboard' }, user_id: 1, url: '/admin/activity' },
151
+ { log_level: 'info', category: 'user_action', message: 'Test: Button clicked', context: { target: 'submit-btn' }, user_id: 1, url: '/admin/activity' },
152
+ { log_level: 'warn', category: 'auth', message: 'Test: Login failed', context: { reason: 'invalid_password' }, url: '/api/auth/login' },
153
+ { log_level: 'error', category: 'error', message: 'Test: Application error', context: { error: 'TestError', stack: 'at test()' }, url: '/api/test' },
154
+ ];
155
+
156
+ for (const event of testEvents) {
157
+ const logRecord = JSON.stringify({ ...baseRecord, ...event, session_id: null });
158
+ await redis.lpush(REDIS_SITE_LOG_KEY, logRecord);
159
+ }
160
+ await redis.expire(REDIS_SITE_LOG_KEY, REDIS_LOG_TTL);
161
+ const queueLen = await redis.llen(REDIS_SITE_LOG_KEY);
162
+
163
+ return NextResponse.json({
164
+ success: true,
165
+ message: `Created ${testEvents.length} test events`,
166
+ queue_length: queueLen,
167
+ events: testEvents.map(e => ({ level: e.log_level, category: e.category, message: e.message })),
168
+ note: 'Events will appear after drain service processes them',
169
+ }, { status: 201 });
170
+ }
171
+
172
+ // Single event creation
173
+ const logRecord = JSON.stringify({
174
+ ...baseRecord,
175
+ log_level: body.level || 'info',
176
+ category: body.category || 'user_action',
177
+ message: body.message || 'Test log entry',
178
+ context: body.context || { source: 'admin-test' },
179
+ user_id: body.user_id || null,
180
+ session_id: null,
181
+ url: body.url || '/admin/activity',
182
+ });
183
+
184
+ await redis.lpush(REDIS_SITE_LOG_KEY, logRecord);
185
+ await redis.expire(REDIS_SITE_LOG_KEY, REDIS_LOG_TTL);
186
+ const queueLen = await redis.llen(REDIS_SITE_LOG_KEY);
187
+
188
+ return NextResponse.json({
189
+ success: true,
190
+ message: 'Test log created',
191
+ queue_length: queueLen,
192
+ note: 'Log will appear after drain service processes it (every 5 seconds)',
193
+ }, { status: 201 });
194
+ } catch (error: any) {
195
+ console.error('[admin/site-logs] POST Error:', error);
196
+ return NextResponse.json(
197
+ { error: error.message || 'Internal error' },
198
+ { status: 500 }
199
+ );
200
+ }
201
+ },
202
+ };
203
+ }
204
+
205
+ /**
206
+ * Create site-logs stats handler
207
+ * Returns: { total, unique_users, by_level, by_category }
208
+ */
209
+ export function createSiteLogsStatsHandler(config: SiteLogsHandlerConfig) {
210
+ return {
211
+ async GET(request: NextRequest) {
212
+ const adminCheck = await checkAdminRole(request);
213
+ if (adminCheck.error) return adminCheck.error;
214
+
215
+ const { searchParams } = new URL(request.url);
216
+ const vibeUrl = getVibeApiUrl(config);
217
+
218
+ const params = new URLSearchParams();
219
+ if (searchParams.get('from')) params.set('from', searchParams.get('from')!);
220
+ if (searchParams.get('to')) params.set('to', searchParams.get('to')!);
221
+
222
+ const headers: Record<string, string> = {
223
+ 'Authorization': `Bearer ${adminCheck.accessToken}`,
224
+ 'Content-Type': 'application/json',
225
+ };
226
+ if (adminCheck.clientId) {
227
+ headers['X-Client-Id'] = adminCheck.clientId;
228
+ }
229
+
230
+ try {
231
+ const response = await fetch(`${vibeUrl}/v1/admin/site-logs/stats?${params}`, { headers });
232
+
233
+ if (!response.ok) {
234
+ const errorText = await response.text();
235
+ console.error('[admin/site-logs/stats] Vibe error:', response.status, errorText);
236
+ return NextResponse.json(
237
+ { error: 'Failed to fetch stats', details: errorText },
238
+ { status: response.status }
239
+ );
240
+ }
241
+
242
+ const data = await response.json();
243
+ // Ensure response matches expected format: { total, unique_users, by_level, by_category }
244
+ return NextResponse.json(data);
245
+ } catch (error: any) {
246
+ console.error('[admin/site-logs/stats] Error:', error);
247
+ return NextResponse.json(
248
+ { error: error.message || 'Internal error' },
249
+ { status: 500 }
250
+ );
251
+ }
252
+ },
253
+ };
254
+ }
255
+
256
+ /**
257
+ * Create site-logs drain handler (manual trigger)
258
+ */
259
+ export function createSiteLogsDrainHandler(config: SiteLogsHandlerConfig) {
260
+ return {
261
+ async POST(request: NextRequest) {
262
+ const adminCheck = await checkAdminRole(request);
263
+ if (adminCheck.error) return adminCheck.error;
264
+
265
+ const { searchParams } = new URL(request.url);
266
+ const maxEntries = searchParams.get('max_entries') || '100';
267
+ const vibeUrl = getVibeApiUrl(config);
268
+
269
+ const headers: Record<string, string> = {
270
+ 'Authorization': `Bearer ${adminCheck.accessToken}`,
271
+ 'Content-Type': 'application/json',
272
+ };
273
+ if (adminCheck.clientId) {
274
+ headers['X-Client-Id'] = adminCheck.clientId;
275
+ }
276
+
277
+ try {
278
+ const response = await fetch(`${vibeUrl}/v1/admin/site-logs/drain?maxEntries=${maxEntries}`, {
279
+ method: 'POST',
280
+ headers,
281
+ });
282
+
283
+ if (!response.ok) {
284
+ const errorText = await response.text();
285
+ console.error('[admin/site-logs/drain] Vibe error:', response.status, errorText);
286
+ return NextResponse.json(
287
+ { error: 'Failed to drain site logs', details: errorText },
288
+ { status: response.status }
289
+ );
290
+ }
291
+
292
+ const data = await response.json();
293
+ return NextResponse.json(data);
294
+ } catch (error: any) {
295
+ console.error('[admin/site-logs/drain] Error:', error);
296
+ return NextResponse.json(
297
+ { error: error.message || 'Internal error' },
298
+ { status: 500 }
299
+ );
300
+ }
301
+ },
302
+ };
303
+ }
304
+
305
+ /**
306
+ * Create site-logs queue status handler
307
+ */
308
+ export function createSiteLogsQueueHandler(config: SiteLogsHandlerConfig) {
309
+ return {
310
+ async GET(request: NextRequest) {
311
+ const adminCheck = await checkAdminRole(request);
312
+ if (adminCheck.error) return adminCheck.error;
313
+
314
+ try {
315
+ const redis = getRedis();
316
+ const queueLength = await redis.llen(REDIS_SITE_LOG_KEY);
317
+
318
+ // Peek at the oldest and newest entries
319
+ let oldest_entry = null;
320
+ let newest_entry = null;
321
+
322
+ if (queueLength > 0) {
323
+ const oldest = await redis.lindex(REDIS_SITE_LOG_KEY, -1); // RPOP side (oldest)
324
+ const newest = await redis.lindex(REDIS_SITE_LOG_KEY, 0); // LPUSH side (newest)
325
+
326
+ if (oldest) {
327
+ try {
328
+ const parsed = JSON.parse(oldest);
329
+ oldest_entry = {
330
+ message: parsed.message,
331
+ level: parsed.log_level,
332
+ timestamp: parsed.created_at || parsed.queued_at,
333
+ };
334
+ } catch {}
335
+ }
336
+
337
+ if (newest) {
338
+ try {
339
+ const parsed = JSON.parse(newest);
340
+ newest_entry = {
341
+ message: parsed.message,
342
+ level: parsed.log_level,
343
+ timestamp: parsed.created_at || parsed.queued_at,
344
+ };
345
+ } catch {}
346
+ }
347
+ }
348
+
349
+ return NextResponse.json({
350
+ queue_length: queueLength,
351
+ redis_key: REDIS_SITE_LOG_KEY,
352
+ oldest_entry,
353
+ newest_entry,
354
+ status: queueLength === 0 ? 'empty' : 'pending',
355
+ });
356
+ } catch (error: any) {
357
+ console.error('[admin/site-logs/queue] Error:', error);
358
+ return NextResponse.json(
359
+ { error: error.message || 'Internal error' },
360
+ { status: 500 }
361
+ );
362
+ }
363
+ },
364
+ };
365
+ }