auramaxx 0.0.20 → 0.1.1

package/src/app/api/workspace/[id]/route.ts

@@ -1,168 +0,0 @@
-import { NextRequest, NextResponse } from 'next/server';
-import { PrismaClient } from '@prisma/client';
-import { requireWorkspaceAdmin } from '../auth';
-
-const prisma = new PrismaClient();
-
-// GET /api/workspace/[id] - Get workspace with apps
-export async function GET(
-  request: NextRequest,
-  { params }: { params: Promise<{ id: string }> }
-) {
-  try {
-    const unauthorized = await requireWorkspaceAdmin(request);
-    if (unauthorized) return unauthorized;
-
-    const { id } = await params;
-
-    const workspace = await prisma.workspace.findUnique({
-      where: { id },
-      include: {
-        apps: {
-          orderBy: { zIndex: 'asc' },
-        },
-      },
-    });
-
-    if (!workspace) {
-      return NextResponse.json(
-        { success: false, error: 'Workspace not found' },
-        { status: 404 }
-      );
-    }
-
-    return NextResponse.json({
-      success: true,
-      workspace: {
-        id: workspace.id,
-        name: workspace.name,
-        slug: workspace.slug,
-        icon: workspace.icon,
-        order: workspace.order,
-        isDefault: workspace.isDefault,
-        isCloseable: workspace.isCloseable,
-      },
-      apps: workspace.apps.map((w: any) => ({
-        id: w.id,
-        workspaceId: w.workspaceId,
-        appType: w.appType,
-        x: w.x,
-        y: w.y,
-        width: w.width,
-        height: w.height,
-        zIndex: w.zIndex,
-        isVisible: w.isVisible,
-        isLocked: w.isLocked,
-        config: w.config ? JSON.parse(w.config) : null,
-      })),
-    });
-  } catch (error) {
-    console.error('Failed to get workspace:', error);
-    return NextResponse.json(
-      { success: false, error: 'Failed to get workspace' },
-      { status: 500 }
-    );
-  }
-}
-
-// PATCH /api/workspace/[id] - Update workspace
-export async function PATCH(
-  request: NextRequest,
-  { params }: { params: Promise<{ id: string }> }
-) {
-  try {
-    const unauthorized = await requireWorkspaceAdmin(request);
-    if (unauthorized) return unauthorized;
-
-    const { id } = await params;
-    const body = await request.json();
-    const { name, icon, order, isDefault, isCloseable } = body;
-
-    // Check if workspace exists
-    const existing = await prisma.workspace.findUnique({ where: { id } });
-    if (!existing) {
-      return NextResponse.json(
-        { success: false, error: 'Workspace not found' },
-        { status: 404 }
-      );
-    }
-
-    // If setting as default, unset existing default
-    if (isDefault) {
-      await prisma.workspace.updateMany({
-        where: { isDefault: true, id: { not: id } },
-        data: { isDefault: false },
-      });
-    }
-
-    const workspace = await prisma.workspace.update({
-      where: { id },
-      data: {
-        name: name ?? existing.name,
-        icon: icon ?? existing.icon,
-        order: order ?? existing.order,
-        isDefault: isDefault ?? existing.isDefault,
-        isCloseable: isCloseable ?? existing.isCloseable,
-      },
-    });
-
-    return NextResponse.json({
-      success: true,
-      workspace: {
-        id: workspace.id,
-        name: workspace.name,
-        slug: workspace.slug,
-        icon: workspace.icon,
-        order: workspace.order,
-        isDefault: workspace.isDefault,
-        isCloseable: workspace.isCloseable,
-      },
-    });
-  } catch (error) {
-    console.error('Failed to update workspace:', error);
-    return NextResponse.json(
-      { success: false, error: 'Failed to update workspace' },
-      { status: 500 }
-    );
-  }
-}
-
-// DELETE /api/workspace/[id] - Delete workspace
-export async function DELETE(
-  request: NextRequest,
-  { params }: { params: Promise<{ id: string }> }
-) {
-  try {
-    const unauthorized = await requireWorkspaceAdmin(request);
-    if (unauthorized) return unauthorized;
-
-    const { id } = await params;
-
-    // Check if workspace exists and is closeable
-    const workspace = await prisma.workspace.findUnique({ where: { id } });
-    if (!workspace) {
-      return NextResponse.json(
-        { success: false, error: 'Workspace not found' },
-        { status: 404 }
-      );
-    }
-
-    if (!workspace.isCloseable) {
-      return NextResponse.json(
-        { success: false, error: 'Cannot delete non-closeable workspace' },
-        { status: 400 }
-      );
-    }
-
-    // Cascade delete will remove apps
-    await prisma.workspace.delete({ where: { id } });
-
-    return NextResponse.json({ success: true });
-  } catch (error) {
-    console.error('Failed to delete workspace:', error);
-    return NextResponse.json(
-      { success: false, error: 'Failed to delete workspace' },
-      { status: 500 }
-    );
-  }
-}

package/src/app/api/workspace/auth.ts

@@ -1,40 +0,0 @@
-import { NextRequest, NextResponse } from 'next/server';
-
-const WALLET_API = process.env.WALLET_SERVER_URL || 'http://localhost:4242';
-
-/**
- * Validate admin access with explicit token validation.
- * This must never trust public endpoints like GET /setup.
- */
-async function validateAdmin(authHeader: string | null): Promise<boolean> {
-  if (!authHeader) return false;
-  const [scheme, token] = authHeader.trim().split(/\s+/, 2);
-  if (!scheme || scheme.toLowerCase() !== 'bearer' || !token) return false;
-
-  try {
-    const resp = await fetch(`${WALLET_API}/auth/validate`, {
-      method: 'POST',
-      headers: { 'Content-Type': 'application/json' },
-      body: JSON.stringify({ token }),
-      cache: 'no-store',
-    });
-    if (!resp.ok) return false;
-    const data = await resp.json() as { valid?: boolean; isAdmin?: boolean };
-    return data.valid === true && data.isAdmin === true;
-  } catch {
-    return false;
-  }
-}
-
-export async function requireWorkspaceAdmin(
-  request: NextRequest
-): Promise<NextResponse | null> {
-  const authHeader = request.headers.get('authorization');
-  const isAdmin = await validateAdmin(authHeader);
-  if (isAdmin) return null;
-
-  return NextResponse.json(
-    { success: false, error: 'Admin access required' },
-    { status: 403 }
-  );
-}

package/src/app/api/workspace/config/route.ts

@@ -1,121 +0,0 @@
-import { NextRequest, NextResponse } from 'next/server';
-import { PrismaClient } from '@prisma/client';
-import { requireWorkspaceAdmin } from '../auth';
-
-const prisma = new PrismaClient();
-
-type ParsedChainConfig = AppConfigData & Record<string, ChainConfig>;
-
-function parseChainConfig(raw?: string | null): ParsedChainConfig {
-  if (!raw) return {};
-  try {
-    const parsed = JSON.parse(raw);
-    if (parsed && typeof parsed === 'object') {
-      return parsed;
-    }
-  } catch (error) {
-    console.warn('Invalid AppConfig.chainConfig JSON, falling back to empty overrides:', error);
-  }
-  return {};
-}
-
-export interface ChainConfig {
-  rpc: string;
-  chainId: number;
-  explorer: string;
-}
-
-export interface AppConfigData {
-  chainOverrides?: Record<string, ChainConfig>;
-}
-
-// GET /api/workspace/config - Get global app configuration
-export async function GET(request: NextRequest) {
-  try {
-    const unauthorized = await requireWorkspaceAdmin(request);
-    if (unauthorized) return unauthorized;
-
-    const config = await prisma.appConfig.findUnique({
-      where: { id: 'global' },
-    });
-
-    if (!config) {
-      return NextResponse.json({
-        success: true,
-        config: { chainOverrides: {} },
-      });
-    }
-
-    const chainConfig = parseChainConfig(config.chainConfig);
-
-    return NextResponse.json({
-      success: true,
-      config: {
-        // Handle both old format (direct overrides) and new format (nested)
-        chainOverrides: chainConfig.chainOverrides || chainConfig,
-      },
-    });
-  } catch (error) {
-    console.error('Failed to get app config:', error);
-    return NextResponse.json(
-      { success: false, error: 'Failed to get app config' },
-      { status: 500 }
-    );
-  }
-}
-
-// POST /api/workspace/config - Update global app configuration
-export async function POST(request: NextRequest) {
-  try {
-    const unauthorized = await requireWorkspaceAdmin(request);
-    if (unauthorized) return unauthorized;
-
-    const body = await request.json();
-    const { chainOverrides } = body as AppConfigData;
-
-    // Validate chain overrides if provided
-    if (chainOverrides) {
-      for (const [chain, config] of Object.entries(chainOverrides)) {
-        if (!config.rpc || typeof config.rpc !== 'string') {
-          return NextResponse.json(
-            { success: false, error: `Invalid RPC for chain ${chain}` },
-            { status: 400 }
-          );
-        }
-        if (!config.chainId || typeof config.chainId !== 'number') {
-          return NextResponse.json(
-            { success: false, error: `Invalid chainId for chain ${chain}` },
-            { status: 400 }
-          );
-        }
-      }
-    }
-
-    // Upsert the global config
-    const updated = await prisma.appConfig.upsert({
-      where: { id: 'global' },
-      create: {
-        id: 'global',
-        chainConfig: JSON.stringify(chainOverrides || {}),
-      },
-      update: {
-        chainConfig: JSON.stringify(chainOverrides || {}),
-      },
-    });
-
-    const parsedConfig = parseChainConfig(updated.chainConfig ?? undefined);
-
-    return NextResponse.json({
-      success: true,
-      config: {
-        chainOverrides: parsedConfig,
-      },
-    });
-  } catch (error) {
-    console.error('Failed to update app config:', error);
-    return NextResponse.json(
-      { success: false, error: 'Failed to update app config' },
-      { status: 500 }
-    );
-  }
-}

package/src/app/api/workspace/import/route.ts

@@ -1,127 +0,0 @@
-import { NextRequest, NextResponse } from 'next/server';
-import { PrismaClient } from '@prisma/client';
-import { requireWorkspaceAdmin } from '../auth';
-
-const prisma = new PrismaClient();
-
-interface ImportApp {
-  appType: string;
-  x?: number;
-  y?: number;
-  width?: number;
-  height?: number;
-  zIndex?: number;
-  isVisible?: boolean;
-  isLocked?: boolean;
-  config?: Record<string, unknown>;
-}
-
-interface ImportData {
-  version?: number;
-  workspace: {
-    name: string;
-    slug?: string;
-    icon?: string;
-    order?: number;
-    isDefault?: boolean;
-    isCloseable?: boolean;
-  };
-  apps: ImportApp[];
-}
-
-// POST /api/workspace/import - Import workspace from JSON
-export async function POST(request: NextRequest) {
-  try {
-    const unauthorized = await requireWorkspaceAdmin(request);
-    if (unauthorized) return unauthorized;
-
-    const body: ImportData = await request.json();
-    const { workspace: wsData, apps } = body;
-
-    if (!wsData || !wsData.name) {
-      return NextResponse.json(
-        { success: false, error: 'Invalid import data: workspace name is required' },
-        { status: 400 }
-      );
-    }
-
-    // Generate unique slug
-    const baseSlug = wsData.slug || wsData.name.toLowerCase().replace(/[^a-z0-9]+/g, '-');
-    let slug = baseSlug;
-    let counter = 1;
-
-    while (await prisma.workspace.findUnique({ where: { slug } })) {
-      slug = `${baseSlug}-${counter}`;
-      counter++;
-    }
-
-    // Get next order value
-    const maxOrder = await prisma.workspace.aggregate({
-      _max: { order: true },
-    });
-    const order = wsData.order ?? (maxOrder._max.order ?? -1) + 1;
-
-    // Create workspace
-    const workspace = await prisma.workspace.create({
-      data: {
-        name: wsData.name,
-        slug,
-        icon: wsData.icon,
-        order,
-        isDefault: wsData.isDefault ?? false,
-        isCloseable: wsData.isCloseable ?? true,
-      },
-    });
-
-    // Create apps
-    const createdApps = [];
-    for (const app of apps || []) {
-      const created = await prisma.workspaceApp.create({
-        data: {
-          workspaceId: workspace.id,
-          appType: app.appType,
-          x: app.x ?? 20,
-          y: app.y ?? 20,
-          width: app.width ?? 320,
-          height: app.height ?? 280,
-          zIndex: app.zIndex ?? 10,
-          isVisible: app.isVisible ?? true,
-          isLocked: app.isLocked ?? false,
-          config: app.config ? JSON.stringify(app.config) : null,
-        },
-      });
-      createdApps.push({
-        id: created.id,
-        appType: created.appType,
-        x: created.x,
-        y: created.y,
-        width: created.width,
-        height: created.height,
-        zIndex: created.zIndex,
-        isVisible: created.isVisible,
-        isLocked: created.isLocked,
-        config: created.config ? JSON.parse(created.config) : null,
-      });
-    }
-
-    return NextResponse.json({
-      success: true,
-      workspace: {
-        id: workspace.id,
-        name: workspace.name,
-        slug: workspace.slug,
-        icon: workspace.icon,
-        order: workspace.order,
-        isDefault: workspace.isDefault,
-        isCloseable: workspace.isCloseable,
-      },
-      apps: createdApps,
-    });
-  } catch (error) {
-    console.error('Failed to import workspace:', error);
-    return NextResponse.json(
-      { success: false, error: 'Failed to import workspace' },
-      { status: 500 }
-    );
-  }
-}

package/src/app/api/workspace/route.ts

@@ -1,116 +0,0 @@
-import { NextRequest, NextResponse } from 'next/server';
-import { PrismaClient } from '@prisma/client';
-import { requireWorkspaceAdmin } from './auth';
-
-const prisma = new PrismaClient();
-
-// GET /api/workspace - List all workspaces
-export async function GET(request: NextRequest) {
-  try {
-    const unauthorized = await requireWorkspaceAdmin(request);
-    if (unauthorized) return unauthorized;
-
-    const workspaces = await prisma.workspace.findMany({
-      orderBy: { order: 'asc' },
-      include: {
-        _count: {
-          select: { apps: true },
-        },
-      },
-    });
-
-    return NextResponse.json({
-      success: true,
-      workspaces: workspaces.map((w: any) => ({
-        id: w.id,
-        name: w.name,
-        slug: w.slug,
-        icon: w.icon,
-        order: w.order,
-        isDefault: w.isDefault,
-        isCloseable: w.isCloseable,
-        appCount: w._count.apps,
-        createdAt: w.createdAt.toISOString(),
-        updatedAt: w.updatedAt.toISOString(),
-      })),
-    });
-  } catch (error) {
-    console.error('Failed to list workspaces:', error);
-    return NextResponse.json(
-      { success: false, error: 'Failed to list workspaces' },
-      { status: 500 }
-    );
-  }
-}
-
-// POST /api/workspace - Create a new workspace
-export async function POST(request: NextRequest) {
-  try {
-    const unauthorized = await requireWorkspaceAdmin(request);
-    if (unauthorized) return unauthorized;
-
-    const body = await request.json();
-    const { name, icon, isDefault } = body;
-
-    if (!name) {
-      return NextResponse.json(
-        { success: false, error: 'Name is required' },
-        { status: 400 }
-      );
-    }
-
-    // Generate unique slug
-    const baseSlug = name.toLowerCase().replace(/[^a-z0-9]+/g, '-');
-    let slug = baseSlug;
-    let counter = 1;
-
-    while (await prisma.workspace.findUnique({ where: { slug } })) {
-      slug = `${baseSlug}-${counter}`;
-      counter++;
-    }
-
-    // Get next order value
-    const maxOrder = await prisma.workspace.aggregate({
-      _max: { order: true },
-    });
-    const order = (maxOrder._max.order ?? -1) + 1;
-
-    // If setting as default, unset existing default
-    if (isDefault) {
-      await prisma.workspace.updateMany({
-        where: { isDefault: true },
-        data: { isDefault: false },
-      });
-    }
-
-    const workspace = await prisma.workspace.create({
-      data: {
-        name,
-        slug,
-        icon,
-        order,
-        isDefault: isDefault ?? false,
-        isCloseable: true,
-      },
-    });
-
-    return NextResponse.json({
-      success: true,
-      workspace: {
-        id: workspace.id,
-        name: workspace.name,
-        slug: workspace.slug,
-        icon: workspace.icon,
-        order: workspace.order,
-        isDefault: workspace.isDefault,
-        isCloseable: workspace.isCloseable,
-      },
-    });
-  } catch (error) {
-    console.error('Failed to create workspace:', error);
-    return NextResponse.json(
-      { success: false, error: 'Failed to create workspace' },
-      { status: 500 }
-    );
-  }
-}