72 lines
2.5 KiB
TypeScript
72 lines
2.5 KiB
TypeScript
import { NextRequest, NextResponse } from 'next/server';
|
|
import { getPluginBundle, getPlugin } from '@/lib/admin/plugin-registry';
|
|
import { getDevPlugin, readDevBundle } from '@/lib/admin/plugin-dev';
|
|
|
|
/**
|
|
* GET /api/admin/plugins/[id]/bundle - Serve plugin JS bundle
|
|
*
|
|
* Public endpoint so the client-side plugin loader can fetch bundles.
|
|
* Only serves plugins that exist in the registry and are enabled.
|
|
*/
|
|
export async function GET(
|
|
request: NextRequest,
|
|
{ params }: { params: Promise<{ id: string }> },
|
|
) {
|
|
try {
|
|
const { id } = await params;
|
|
|
|
// Validate ID format to prevent path traversal
|
|
if (!/^[a-z0-9][a-z0-9-]*[a-z0-9]$/.test(id)) {
|
|
return NextResponse.json({ error: 'Invalid plugin ID' }, { status: 400 });
|
|
}
|
|
|
|
// Dev plugins are read (and optionally bundled) straight from disk and
|
|
// served with no caching so every refresh picks up the latest source.
|
|
const devEntry = await getDevPlugin(id);
|
|
if (devEntry) {
|
|
const code = await readDevBundle(devEntry);
|
|
return new NextResponse(code, {
|
|
headers: {
|
|
'Content-Type': 'application/javascript; charset=utf-8',
|
|
'Cache-Control': 'no-store',
|
|
'ETag': `"${devEntry.plugin.bundleHash}"`,
|
|
'Content-Length': String(Buffer.byteLength(code, 'utf-8')),
|
|
},
|
|
});
|
|
}
|
|
|
|
const plugin = await getPlugin(id);
|
|
if (!plugin) {
|
|
return NextResponse.json({ error: 'Plugin not found' }, { status: 404 });
|
|
}
|
|
|
|
if (!plugin.enabled) {
|
|
return NextResponse.json({ error: 'Plugin is disabled' }, { status: 403 });
|
|
}
|
|
|
|
const code = await getPluginBundle(id);
|
|
if (!code) {
|
|
return NextResponse.json({ error: 'Bundle not found' }, { status: 404 });
|
|
}
|
|
|
|
// Use the registry's bundleHash as the ETag so the browser can revalidate
|
|
// cheaply. Cache-Control: no-cache forces revalidation on every request,
|
|
// but a matching If-None-Match returns 304 with no body.
|
|
const etag = plugin.bundleHash ? `"${plugin.bundleHash}"` : undefined;
|
|
const headers: Record<string, string> = {
|
|
'Content-Type': 'application/javascript; charset=utf-8',
|
|
'Cache-Control': 'private, no-cache, must-revalidate',
|
|
};
|
|
if (etag) headers['ETag'] = etag;
|
|
|
|
if (etag && request.headers.get('if-none-match') === etag) {
|
|
return new NextResponse(null, { status: 304, headers });
|
|
}
|
|
|
|
headers['Content-Length'] = String(Buffer.byteLength(code, 'utf-8'));
|
|
return new NextResponse(code, { headers });
|
|
} catch {
|
|
return NextResponse.json({ error: 'Not found' }, { status: 404 });
|
|
}
|
|
}
|