boltstore 0.5.2 → 0.6.0

package/src/api/router.ts

@@ -1,296 +0,0 @@
-// ── HTTP Router ──
-// Hand-rolled URL pattern matching and middleware pipeline.
-// Route handlers live in separate files under src/api/.
-
-import type { AppContext } from "../app";
-import type { Handler, Route } from "./helpers";
-import { json } from "./helpers";
-import { corsMiddleware } from "./middleware/cors";
-import { loggingMiddleware } from "./middleware/logging";
-import { rateLimitMiddleware } from "./middleware/ratelimit";
-import { authMiddleware } from "./middleware/auth";
-import { buildExtensionContext } from "../app";
-import { parseAdminExtPath } from "../hooks/api";
-
-// ── Route handlers (one import per domain) ──
-import { healthHandler } from "./health";
-import {
-  collectionsList, collectionsCreate,
-  collectionsGet, collectionsUpdate, collectionsDelete,
-} from "./collections";
-import {
-  recordsList, recordsCreate,
-  recordsGet, recordsUpdate, recordsDelete,
-} from "./records";
-import {
-  authRegister, authLogin, authRefresh, authLogout,
-  adminSetup, adminSetupStatus, adminLogin, adminRefresh, adminLogout,
-  oauth2Authorize, oauth2Callback,
-} from "./auth";
-import { filesUpload, filesDownload, filesSignedUrl, filesDelete, filesDeleteFolder, filesUpdate, filesList, filesInfo, filesCreateFolder, filesGetFolderConfig, filesUpdateFolderConfig } from "./files";
-import { applicationsList, applicationsCreate, applicationsDelete } from "./applications";
-import { backupsCreate, backupsList, backupsRestore, backupsDelete } from "./backups";
-import { batchHandler } from "./batch";
-import { aggregateHandler } from "./aggregate";
-import { adminHandler } from "./admin";
-import {
-  adminStats,
-  adminApiKeysList,
-  adminApiKeysCreate,
-  adminApiKeysDelete,
-  adminHooksList,
-  adminHooksGet,
-  adminHooksCreate,
-  adminHooksUpdate,
-  adminHooksDelete,
-  adminLogsList,
-  adminSettingsGet,
-  adminSettingsUpdate,
-} from "./admin-config";
-
-// ── Route Table ──
-
-function defineRoutes(): Route[] {
-  return [
-    // Health
-    { method: "GET",  pattern: /^\/api\/health$/,                                      paramNames: [],             handler: healthHandler },
-
-    // Collections
-    { method: "GET",  pattern: /^\/api\/collections$/,                                  paramNames: [],             handler: collectionsList },
-    { method: "POST", pattern: /^\/api\/collections$/,                                  paramNames: [],             handler: collectionsCreate },
-    { method: "GET",  pattern: /^\/api\/collections\/([^/]+)$/,                         paramNames: ["collection"], handler: collectionsGet },
-    { method: "PATCH",pattern: /^\/api\/collections\/([^/]+)$/,                         paramNames: ["collection"], handler: collectionsUpdate },
-    { method: "DELETE",pattern: /^\/api\/collections\/([^/]+)$/,                        paramNames: ["collection"], handler: collectionsDelete },
-
-    // Records
-    { method: "GET",  pattern: /^\/api\/collections\/([^/]+)\/records$/,                paramNames: ["collection"], handler: recordsList },
-    { method: "POST", pattern: /^\/api\/collections\/([^/]+)\/records$/,                paramNames: ["collection"], handler: recordsCreate },
-    { method: "GET",  pattern: /^\/api\/collections\/([^/]+)\/records\/([^/]+)$/,       paramNames: ["collection", "id"], handler: recordsGet },
-    { method: "PATCH",pattern: /^\/api\/collections\/([^/]+)\/records\/([^/]+)$/,       paramNames: ["collection", "id"], handler: recordsUpdate },
-    { method: "DELETE",pattern: /^\/api\/collections\/([^/]+)\/records\/([^/]+)$/,      paramNames: ["collection", "id"], handler: recordsDelete },
-    { method: "GET",  pattern: /^\/api\/collections\/([^/]+)\/aggregate$/,              paramNames: ["collection"], handler: aggregateHandler },
-
-    // Auth (user-scoped to application)
-    { method: "POST", pattern: /^\/api\/auth\/register$/,                               paramNames: [],             handler: authRegister },
-    { method: "POST", pattern: /^\/api\/auth\/login$/,                                  paramNames: [],             handler: authLogin },
-    { method: "POST", pattern: /^\/api\/auth\/refresh$/,                                paramNames: [],             handler: authRefresh },
-    { method: "POST", pattern: /^\/api\/auth\/logout$/,                                 paramNames: [],             handler: authLogout },
-
-    // Admin (system-level)
-    { method: "GET",  pattern: /^\/api\/admin\/setup$/,                                 paramNames: [],             handler: adminSetupStatus },
-    { method: "POST", pattern: /^\/api\/admin\/setup$/,                                 paramNames: [],             handler: adminSetup },
-    { method: "POST", pattern: /^\/api\/admin\/login$/,                                  paramNames: [],             handler: adminLogin },
-    { method: "POST", pattern: /^\/api\/admin\/refresh$/,                                 paramNames: [],             handler: adminRefresh },
-    { method: "POST", pattern: /^\/api\/admin\/logout$/,                                  paramNames: [],             handler: adminLogout },
-
-    // Admin config / dashboard
-    { method: "GET",  pattern: /^\/api\/admin\/stats\/([^/]+)$/,                         paramNames: ["type"],        handler: adminStats },
-    { method: "GET",  pattern: /^\/api\/admin\/api-keys$/,                               paramNames: [],             handler: adminApiKeysList },
-    { method: "POST", pattern: /^\/api\/admin\/api-keys$/,                               paramNames: [],             handler: adminApiKeysCreate },
-    { method: "DELETE",pattern: /^\/api\/admin\/api-keys\/([^/]+)$/,                    paramNames: ["id"],          handler: adminApiKeysDelete },
-    { method: "GET",  pattern: /^\/api\/admin\/hooks$/,                                 paramNames: [],             handler: adminHooksList },
-    { method: "GET",  pattern: /^\/api\/admin\/hooks\/(.+)$/,                           paramNames: ["filename"],    handler: adminHooksGet },
-    { method: "POST", pattern: /^\/api\/admin\/hooks$/,                                 paramNames: [],             handler: adminHooksCreate },
-    { method: "PUT",  pattern: /^\/api\/admin\/hooks\/(.+)$/,                           paramNames: ["filename"],    handler: adminHooksUpdate },
-    { method: "DELETE",pattern: /^\/api\/admin\/hooks\/(.+)$/,                         paramNames: ["filename"],    handler: adminHooksDelete },
-    { method: "GET",  pattern: /^\/api\/admin\/logs$/,                                  paramNames: [],             handler: adminLogsList },
-    { method: "GET",  pattern: /^\/api\/admin\/settings$/,                               paramNames: [],             handler: adminSettingsGet },
-    { method: "PUT",  pattern: /^\/api\/admin\/settings$/,                               paramNames: [],             handler: adminSettingsUpdate },
-
-    // OAuth2
-    { method: "GET",  pattern: /^\/api\/auth\/oauth2\/([^/]+)$/,                        paramNames: ["provider"],   handler: oauth2Authorize },
-    { method: "GET",  pattern: /^\/api\/auth\/oauth2\/([^/]+)\/callback$/,              paramNames: ["provider"],   handler: oauth2Callback },
-
-    // Files
-    { method: "POST",   pattern: /^\/api\/files\/upload$/,                              paramNames: [],             handler: filesUpload },
-    { method: "GET",    pattern: /^\/api\/files$/,                                      paramNames: [],             handler: filesList },
-    { method: "POST",   pattern: /^\/api\/files\/folder$/,                              paramNames: [],             handler: filesCreateFolder },
-    { method: "GET",    pattern: /^\/api\/files\/folder$/,                              paramNames: [],             handler: filesGetFolderConfig },
-    { method: "PATCH",  pattern: /^\/api\/files\/folder$/,                              paramNames: [],             handler: filesUpdateFolderConfig },
-    { method: "DELETE", pattern: /^\/api\/files\/folder$/,                              paramNames: [],             handler: filesDeleteFolder },
-    { method: "GET",    pattern: /^\/api\/files\/(.+)\/signed-url$/,                   paramNames: ["key"],        handler: filesSignedUrl },
-    { method: "GET",    pattern: /^\/api\/files\/(.+)\/info$/,                         paramNames: ["key"],        handler: filesInfo },
-    { method: "GET",    pattern: /^\/api\/files\/(.+)$/,                                paramNames: ["key"],        handler: filesDownload },
-    { method: "PATCH",  pattern: /^\/api\/files\/(.+)$/,                                paramNames: ["key"],        handler: filesUpdate },
-    { method: "DELETE", pattern: /^\/api\/files\/(.+)$/,                                paramNames: ["key"],        handler: filesDelete },
-
-    // Applications (admin)
-    { method: "GET",    pattern: /^\/api\/applications$/,                                   paramNames: [],             handler: applicationsList },
-    { method: "POST",   pattern: /^\/api\/applications$/,                                   paramNames: [],             handler: applicationsCreate },
-    { method: "DELETE", pattern: /^\/api\/applications\/([^/]+)$/,                          paramNames: ["id"],         handler: applicationsDelete },
-
-    // Batch
-    { method: "POST", pattern: /^\/api\/batch$/,                                         paramNames: [],             handler: batchHandler },
-
-    // Backups (admin)
-    { method: "POST", pattern: /^\/api\/backups$/,                                      paramNames: [],             handler: backupsCreate },
-    { method: "GET",  pattern: /^\/api\/backups$/,                                      paramNames: [],             handler: backupsList },
-    { method: "POST", pattern: /^\/api\/backups\/([^/]+)\/restore$/,                    paramNames: ["id"],         handler: backupsRestore },
-    { method: "DELETE", pattern: /^\/api\/backups\/([^/]+)$/,                          paramNames: ["id"],         handler: backupsDelete },
-
-    // Admin UI
-    { method: "GET",  pattern: /^\/admin(?:\/.*)?$/,                                     paramNames: [],             handler: adminHandler },
-    
-    // Admin assets - Vue SPA static files
-    { method: "GET",  pattern: /^\/assets\/.+$/,                                         paramNames: [],             handler: adminHandler },
-  ];
-}
-
-// ── Route Matching ──
-
-function matchRoute(method: string, pathname: string, routes: Route[]): { handler: Handler; params: Record<string, string> } | null {
-  for (const route of routes) {
-    if (route.method !== method) continue;
-    const match = route.pattern.exec(pathname);
-    if (match) {
-      const params: Record<string, string> = {};
-      for (let i = 0; i < route.paramNames.length; i++) {
-        params[route.paramNames[i]!] = match[i + 1]!;
-      }
-      return { handler: route.handler, params };
-    }
-  }
-  return null;
-}
-
-// ── Extension Route Matching ──
-
-function matchExtensionRoute(method: string, pathname: string, ctx: AppContext): { handler: Handler; params: Record<string, string> } | null {
-  for (const route of ctx.extensions.routes) {
-    if (route.method !== method) continue;
-    const match = route.pattern.exec(pathname);
-    if (match) {
-      const params: Record<string, string> = {};
-      for (let i = 0; i < route.paramNames.length; i++) {
-        params[route.paramNames[i]!] = match[i + 1]!;
-      }
-      // Wrap extension handler in a standard Handler signature
-      const wrappedHandler: Handler = async (req, _ctx, _params, auth) => {
-        const applicationId = (auth && auth.type !== "none") ? (auth.applicationId ?? "system") : (req.headers.get("x-application-id") ?? "system");
-        const extCtx = buildExtensionContext(_ctx, applicationId, auth);
-        const result = await route.handler(req, extCtx);
-        // Extensions can return Response directly or JSON data
-        if (result instanceof Response) {
-          return result;
-        }
-        return json({ success: true, data: result }, 200);
-      };
-      return { handler: wrappedHandler, params };
-    }
-  }
-  return null;
-}
-
-// ── Admin Ext Matching ──
-
-function matchAdminExtRoute(method: string, pathname: string, ctx: AppContext): { handler: Handler; params: Record<string, string> } | null {
-  const extPath = parseAdminExtPath(pathname);
-  if (!extPath) return null;
-
-  for (const route of ctx.extensions.routes) {
-    if (route.method !== method) continue;
-    const match = route.pattern.exec(pathname);
-    if (match) {
-      const params: Record<string, string> = {};
-      for (let i = 0; i < route.paramNames.length; i++) {
-        params[route.paramNames[i]!] = match[i + 1]!;
-      }
-      const wrappedHandler: Handler = async (req, _ctx, _params, auth) => {
-        const applicationId = (auth && auth.type !== "none") ? (auth.applicationId ?? "system") : (req.headers.get("x-application-id") ?? "system");
-        const extCtx = buildExtensionContext(_ctx, applicationId, auth);
-        const result = await route.handler(req, extCtx);
-        if (result instanceof Response) {
-          return result;
-        }
-        return json({ success: true, data: result }, 200);
-      };
-      return { handler: wrappedHandler, params };
-    }
-  }
-  return null;
-}
-
-function notFoundResponse(): Response {
-  return new Response(
-    JSON.stringify({ success: false, error: { code: "not_found", message: "Route not found" } }),
-    { status: 404, headers: { "content-type": "application/json" } }
-  );
-}
-
-function errorResponse(err: unknown): Response {
-  console.error("Unhandled error:", err);
-  return new Response(
-    JSON.stringify({ success: false, error: { code: "internal_error", message: "Internal server error" } }),
-    { status: 500, headers: { "content-type": "application/json" } }
-  );
-}
-
-function mergeCorsHeaders(req: Request, response: Response): Response {
-  const corsHeaders = (req as Request & { _corsHeaders?: Headers })._corsHeaders;
-  if (!corsHeaders) return response;
-  const newHeaders = new Headers(response.headers);
-  for (const [key, value] of corsHeaders.entries()) {
-    newHeaders.set(key, value);
-  }
-  return new Response(response.body, { status: response.status, headers: newHeaders });
-}
-
-// ── Public API ──
-
-export function createRouter(ctx: AppContext) {
-  const routes = defineRoutes();
-
-  return {
-    handleRequest: async (req: Request): Promise<Response> => {
-      try {
-        const url = new URL(req.url);
-
-        // Middleware pipeline
-        const corsResponse = corsMiddleware(req, ctx);
-        if (corsResponse) return corsResponse;
-
-        loggingMiddleware(req, ctx);
-
-        const rateLimitResponse = await rateLimitMiddleware(req, ctx);
-        if (rateLimitResponse) return mergeCorsHeaders(req, rateLimitResponse);
-
-        // Authenticate
-        const auth = await authMiddleware(req, ctx);
-
-        // Run extension middlewares first
-        for (const mw of ctx.extensions.middlewares) {
-          const applicationId = (auth && auth.type !== "none") ? (auth.applicationId ?? "system") : (req.headers.get("x-application-id") ?? "system");
-          const extCtx = buildExtensionContext(ctx, applicationId, auth ?? undefined);
-          const result = await mw(req, () => Promise.resolve(new Response()), extCtx);
-          if (result instanceof Response) {
-            return mergeCorsHeaders(req, result);
-          }
-        }
-
-        // Route
-        let response: Response;
-        const match = matchRoute(req.method, url.pathname, routes);
-        if (match) {
-          response = await match.handler(req, ctx, match.params, auth);
-        } else {
-          // Extension routes (non-admin)
-          const extMatch = matchExtensionRoute(req.method, url.pathname, ctx);
-          if (extMatch) {
-            response = await extMatch.handler(req, ctx, extMatch.params, auth);
-          } else {
-            // Admin extension routes
-            const adminExtMatch = matchAdminExtRoute(req.method, url.pathname, ctx);
-            if (adminExtMatch) {
-              response = await adminExtMatch.handler(req, ctx, adminExtMatch.params, auth);
-            } else {
-              response = notFoundResponse();
-            }
-          }
-        }
-        return mergeCorsHeaders(req, response);
-      } catch (error) {
-        return mergeCorsHeaders(req, errorResponse(error));
-      }
-    },
-  };
-}