@rmdes/indiekit-endpoint-rss 1.0.0 → 1.0.2

package/index.js

@@ -52,7 +52,7 @@ export default class RssEndpoint {
 
   /**
    * Protected routes (require authentication)
-   * Admin dashboard and feed management
+   * Admin dashboard and feed management (write operations)
    */
   get routes() {
     // Dashboard
@@ -61,27 +61,31 @@ export default class RssEndpoint {
     // Manual sync trigger
     protectedRouter.post("/sync", dashboardController.sync);
 
+    // Feed management (protected - requires auth)
+    protectedRouter.post("/api/feeds", express.json(), feedsController.add);
+    protectedRouter.delete("/api/feeds/:id", feedsController.remove);
+    protectedRouter.patch("/api/feeds/:id", express.json(), feedsController.toggle);
+
+    // Manual refresh (protected)
+    protectedRouter.post("/api/refresh", statusController.refresh);
+
     return protectedRouter;
   }
 
   /**
    * Public routes (no authentication required)
-   * JSON API endpoints for frontend
+   * Read-only JSON API endpoints for frontend
    */
   get routesPublic() {
-    // Feeds API
+    // Feeds API (read-only)
     publicRouter.get("/api/feeds", feedsController.list);
-    publicRouter.post("/api/feeds", express.json(), feedsController.add);
-    publicRouter.delete("/api/feeds/:id", feedsController.remove);
-    publicRouter.patch("/api/feeds/:id", express.json(), feedsController.toggle);
 
-    // Items API
+    // Items API (read-only)
     publicRouter.get("/api/items", itemsController.list);
     publicRouter.get("/api/items/:id", itemsController.get);
 
-    // Status API
+    // Status API (read-only)
     publicRouter.get("/api/status", statusController.status);
-    publicRouter.post("/api/refresh", statusController.refresh);
 
     return publicRouter;
   }

package/lib/controllers/dashboard.js

@@ -65,15 +65,21 @@ export const dashboardController = {
    */
   async sync(request, response) {
     try {
-      const Indiekit = request.app.locals.indiekit;
-      const { rssConfig } = request.app.locals.application;
+      const { rssConfig, getRssDb } = request.app.locals.application;
 
-      if (!Indiekit || !rssConfig) {
+      if (!rssConfig) {
         return response.status(500).json({
           error: response.locals.__("rss.error.noConfig"),
         });
       }
 
+      const db = getRssDb?.();
+      if (!db) {
+        return response.status(500).json({
+          error: response.locals.__("rss.error.noDatabase"),
+        });
+      }
+
       const syncState = getSyncState();
       if (syncState.syncing) {
         return response.status(409).json({
@@ -82,8 +88,8 @@ export const dashboardController = {
         });
       }
 
-      // Start sync and wait for result
-      const result = await runSync(Indiekit, rssConfig);
+      // Start sync and wait for result - pass db directly
+      const result = await runSync(db, rssConfig);
 
       if (result.error) {
         return response.status(500).json({

package/lib/sync.js

@@ -57,13 +57,14 @@ export function stopSync() {
 
 /**
  * Run a single sync cycle
- * @param {Object} Indiekit - Indiekit instance
+ * @param {Object} dbOrIndiekit - Database instance or Indiekit instance (for backwards compat)
  * @param {Object} options - Plugin options
  * @returns {Promise<Object>}
  */
-export async function runSync(Indiekit, options) {
-  const db = Indiekit.database;
-  if (!db) {
+export async function runSync(dbOrIndiekit, options) {
+  // Support both direct db object and Indiekit object (for background sync)
+  const db = dbOrIndiekit.database || dbOrIndiekit;
+  if (!db || typeof db.collection !== "function") {
     syncState.lastError = "No database available";
     return { error: syncState.lastError };
   }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rmdes/indiekit-endpoint-rss",
-  "version": "1.0.0",
+  "version": "1.0.2",
   "description": "RSS feed reader endpoint for Indiekit. Aggregates multiple feeds, caches in MongoDB, displays on frontend.",
   "keywords": [
     "indiekit",