import { createLogger } from '@sim/logger' import { type NextRequest, NextResponse } from 'next/server' import { confluenceCreatePagePropertyContract, confluenceDeletePagePropertyContract, confluenceListPagePropertiesContract, confluenceUpdatePagePropertyContract, } from '@/lib/api/contracts/selectors/confluence' import { parseRequest } from '@/lib/api/server' import { checkSessionOrInternalAuth } from '@/lib/auth/hybrid' import { validateAlphanumericId, validateJiraCloudId } from '@/lib/core/security/input-validation' import { withRouteHandler } from '@/lib/core/utils/with-route-handler' import { getConfluenceCloudId } from '@/tools/confluence/utils' import { parseAtlassianErrorMessage } from '@/tools/jira/utils' const logger = createLogger('ConfluencePagePropertiesAPI') export const dynamic = 'force-dynamic' /** * List all content properties on a page. */ export const GET = withRouteHandler(async (request: NextRequest) => { try { const auth = await checkSessionOrInternalAuth(request) if (!auth.success || !auth.userId) { return NextResponse.json({ error: auth.error || 'Unauthorized' }, { status: 401 }) } const parsed = await parseRequest(confluenceListPagePropertiesContract, request, {}) if (!parsed.success) return parsed.response const { domain, accessToken, pageId, cloudId: providedCloudId, limit, cursor, } = parsed.data.query if (!domain) { return NextResponse.json({ error: 'Domain is required' }, { status: 400 }) } if (!accessToken) { return NextResponse.json({ error: 'Access token is required' }, { status: 400 }) } if (!pageId) { return NextResponse.json({ error: 'Page ID is required' }, { status: 400 }) } const pageIdValidation = validateAlphanumericId(pageId, 'pageId', 255) if (!pageIdValidation.isValid) { return NextResponse.json({ error: pageIdValidation.error }, { status: 400 }) } const cloudId = providedCloudId || (await getConfluenceCloudId(domain, accessToken)) const cloudIdValidation = validateJiraCloudId(cloudId, 'cloudId') if (!cloudIdValidation.isValid) { return NextResponse.json({ error: cloudIdValidation.error }, { status: 400 }) } const queryParams = new URLSearchParams() queryParams.append('limit', String(Math.min(Number(limit), 250))) if (cursor) { queryParams.append('cursor', cursor) } const url = `https://api.atlassian.com/ex/confluence/${cloudId}/wiki/api/v2/pages/${pageId}/properties?${queryParams.toString()}` const response = await fetch(url, { method: 'GET', headers: { Accept: 'application/json', Authorization: `Bearer ${accessToken}`, }, }) if (!response.ok) { const errorText = await response.text() logger.error('Confluence API error response:', { status: response.status, statusText: response.statusText, error: errorText, }) return NextResponse.json( { error: parseAtlassianErrorMessage(response.status, response.statusText, errorText) }, { status: response.status } ) } const data = await response.json() const properties = (data.results || []).map((prop: any) => ({ id: prop.id, key: prop.key, value: prop.value ?? null, version: prop.version ?? null, })) return NextResponse.json({ properties, pageId, nextCursor: data._links?.next ? new URL(data._links.next, 'https://placeholder').searchParams.get('cursor') : null, }) } catch (error) { logger.error('Error listing page properties:', error) return NextResponse.json( { error: (error as Error).message || 'Internal server error' }, { status: 500 } ) } }) /** * Create a new content property on a page. */ export const POST = withRouteHandler(async (request: NextRequest) => { try { const auth = await checkSessionOrInternalAuth(request) if (!auth.success || !auth.userId) { return NextResponse.json({ error: auth.error || 'Unauthorized' }, { status: 401 }) } const parsed = await parseRequest(confluenceCreatePagePropertyContract, request, {}) if (!parsed.success) return parsed.response const { domain, accessToken, cloudId: providedCloudId, pageId, key, value } = parsed.data.body const pageIdValidation = validateAlphanumericId(pageId, 'pageId', 255) if (!pageIdValidation.isValid) { return NextResponse.json({ error: pageIdValidation.error }, { status: 400 }) } const cloudId = providedCloudId || (await getConfluenceCloudId(domain, accessToken)) const cloudIdValidation = validateJiraCloudId(cloudId, 'cloudId') if (!cloudIdValidation.isValid) { return NextResponse.json({ error: cloudIdValidation.error }, { status: 400 }) } const url = `https://api.atlassian.com/ex/confluence/${cloudId}/wiki/api/v2/pages/${pageId}/properties` const response = await fetch(url, { method: 'POST', headers: { Accept: 'application/json', 'Content-Type': 'application/json', Authorization: `Bearer ${accessToken}`, }, body: JSON.stringify({ key, value }), }) if (!response.ok) { const errorText = await response.text() logger.error('Confluence API error response:', { status: response.status, statusText: response.statusText, error: errorText, }) return NextResponse.json( { error: parseAtlassianErrorMessage(response.status, response.statusText, errorText) }, { status: response.status } ) } const data = await response.json() return NextResponse.json({ id: data.id, key: data.key, value: data.value, version: data.version, pageId, }) } catch (error) { logger.error('Error creating page property:', error) return NextResponse.json( { error: (error as Error).message || 'Internal server error' }, { status: 500 } ) } }) /** * Update a content property on a page. */ export const PUT = withRouteHandler(async (request: NextRequest) => { try { const auth = await checkSessionOrInternalAuth(request) if (!auth.success || !auth.userId) { return NextResponse.json({ error: auth.error || 'Unauthorized' }, { status: 401 }) } const parsed = await parseRequest(confluenceUpdatePagePropertyContract, request, {}) if (!parsed.success) return parsed.response const { domain, accessToken, cloudId: providedCloudId, pageId, propertyId, key, value, versionNumber, } = parsed.data.body const pageIdValidation = validateAlphanumericId(pageId, 'pageId', 255) if (!pageIdValidation.isValid) { return NextResponse.json({ error: pageIdValidation.error }, { status: 400 }) } const propertyIdValidation = validateAlphanumericId(propertyId, 'propertyId', 255) if (!propertyIdValidation.isValid) { return NextResponse.json({ error: propertyIdValidation.error }, { status: 400 }) } const cloudId = providedCloudId || (await getConfluenceCloudId(domain, accessToken)) const cloudIdValidation = validateJiraCloudId(cloudId, 'cloudId') if (!cloudIdValidation.isValid) { return NextResponse.json({ error: cloudIdValidation.error }, { status: 400 }) } const url = `https://api.atlassian.com/ex/confluence/${cloudId}/wiki/api/v2/pages/${pageId}/properties/${propertyId}` let nextVersion = versionNumber if (nextVersion === undefined) { const lookupResponse = await fetch(url, { method: 'GET', headers: { Accept: 'application/json', Authorization: `Bearer ${accessToken}`, }, }) if (!lookupResponse.ok) { const errorText = await lookupResponse.text() return NextResponse.json( { error: parseAtlassianErrorMessage( lookupResponse.status, lookupResponse.statusText, errorText ), }, { status: lookupResponse.status } ) } const current = await lookupResponse.json() const currentNumber = current?.version?.number if (typeof currentNumber !== 'number') { return NextResponse.json( { error: 'Could not determine current property version' }, { status: 500 } ) } nextVersion = currentNumber + 1 } const response = await fetch(url, { method: 'PUT', headers: { Accept: 'application/json', 'Content-Type': 'application/json', Authorization: `Bearer ${accessToken}`, }, body: JSON.stringify({ key, value, version: { number: nextVersion }, }), }) if (!response.ok) { const errorText = await response.text() logger.error('Confluence API error response:', { status: response.status, statusText: response.statusText, error: errorText, }) return NextResponse.json( { error: parseAtlassianErrorMessage(response.status, response.statusText, errorText) }, { status: response.status } ) } const data = await response.json() return NextResponse.json({ id: data.id, key: data.key, value: data.value, version: data.version, pageId, }) } catch (error) { logger.error('Error updating page property:', error) return NextResponse.json( { error: (error as Error).message || 'Internal server error' }, { status: 500 } ) } }) /** * Delete a content property from a page. */ export const DELETE = withRouteHandler(async (request: NextRequest) => { try { const auth = await checkSessionOrInternalAuth(request) if (!auth.success || !auth.userId) { return NextResponse.json({ error: auth.error || 'Unauthorized' }, { status: 401 }) } const parsed = await parseRequest(confluenceDeletePagePropertyContract, request, {}) if (!parsed.success) return parsed.response const { domain, accessToken, cloudId: providedCloudId, pageId, propertyId } = parsed.data.body const pageIdValidation = validateAlphanumericId(pageId, 'pageId', 255) if (!pageIdValidation.isValid) { return NextResponse.json({ error: pageIdValidation.error }, { status: 400 }) } const propertyIdValidation = validateAlphanumericId(propertyId, 'propertyId', 255) if (!propertyIdValidation.isValid) { return NextResponse.json({ error: propertyIdValidation.error }, { status: 400 }) } const cloudId = providedCloudId || (await getConfluenceCloudId(domain, accessToken)) const cloudIdValidation = validateJiraCloudId(cloudId, 'cloudId') if (!cloudIdValidation.isValid) { return NextResponse.json({ error: cloudIdValidation.error }, { status: 400 }) } const url = `https://api.atlassian.com/ex/confluence/${cloudId}/wiki/api/v2/pages/${pageId}/properties/${propertyId}` const response = await fetch(url, { method: 'DELETE', headers: { Accept: 'application/json', Authorization: `Bearer ${accessToken}`, }, }) if (!response.ok) { const errorText = await response.text() logger.error('Confluence API error response:', { status: response.status, statusText: response.statusText, error: errorText, }) return NextResponse.json( { error: parseAtlassianErrorMessage(response.status, response.statusText, errorText) }, { status: response.status } ) } return NextResponse.json({ propertyId, pageId, deleted: true }) } catch (error) { logger.error('Error deleting page property:', error) return NextResponse.json( { error: (error as Error).message || 'Internal server error' }, { status: 500 } ) } })