import { NextRequest } from 'next/server';
import { getWidgetSettings } from '@server/services/widget.service';
import { wrapRouteHandler } from '@server/logger/request';
const UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
function escHtml(value: string): string {
return String(value || '').replace(/&/g, '&').replace(//g, '>').replace(/"/g, '"');
}
const HEX_COLOR_RE = /^#[0-9a-f]{6}$/i;
const FALLBACK_COLOR = '#f97316';
function sanitizeColor(color: string | null | undefined): string {
const c = (color || '').trim();
return HEX_COLOR_RE.test(c) ? c : FALLBACK_COLOR;
}
function darkenHex(hex: string, amount: number): string {
const num = parseInt(hex.replace('#', ''), 16);
if (isNaN(num)) return FALLBACK_COLOR;
const r = Math.max(0, (num >> 16) - amount);
const g = Math.max(0, ((num >> 8) & 0xff) - amount);
const b = Math.max(0, (num & 0xff) - amount);
return '#' + ((1 << 24) | (r << 16) | (g << 8) | b).toString(16).slice(1);
}
function hexToRgb(hex: string): string {
const r = parseInt(hex.slice(1, 3), 16);
const g = parseInt(hex.slice(3, 5), 16);
const b = parseInt(hex.slice(5, 7), 16);
return `${r},${g},${b}`;
}
async function resolveBranding(req: NextRequest): Promise<{ brandUrl: string; brandName: string }> {
let brandUrl = '';
let brandName = '';
try {
const { db, platformSettings } = await import('@server/db/drizzle');
const { inArray } = await import('drizzle-orm');
const rows = await db.select({ k: platformSettings.key, v: platformSettings.value })
.from(platformSettings)
.where(inArray(platformSettings.key, ['site_marketing_url', 'site_title']));
for (const r of rows) {
const v = typeof r.v === 'string' ? r.v : '';
if (r.k === 'site_marketing_url' && v) brandUrl = v;
if (r.k === 'site_title' && v) brandName = v;
}
} catch { /* ignore */ }
if (!brandUrl) {
try { brandUrl = new URL(req.url).origin; } catch { brandUrl = '#'; }
}
if (!brandName) brandName = 'RestroAgent';
return { brandUrl, brandName };
}
export const GET = wrapRouteHandler(async (req: Request) => {
const nreq = req as NextRequest;
return _handleGET(nreq);
});
const _handleGET = async (req: NextRequest) => {
const url = new URL(req.url);
const rawId = url.searchParams.get('restaurantId') || '';
if (!UUID_RE.test(rawId)) {
return new Response('Invalid restaurantId', { status: 400 });
}
const settings = await getWidgetSettings(rawId);
const { brandUrl, brandName } = await resolveBranding(req);
const pc = sanitizeColor(settings?.primary_color);
const dark = darkenHex(pc, 30);
const rgb = hexToRgb(pc);
const botName = escHtml(settings?.bot_name || 'AI Assistant');
const placeholder = escHtml(settings?.placeholder_text || 'Type your message...');
const welcomeMsg = escHtml(settings?.welcome_message || '');
const iconUrl = settings?.icon_url || null;
const avatarHtml = iconUrl
? `})
`
: '🍽️';
const html = `
Chat Preview
🛒 0 item(s) · $0.00
`;
return new Response(html, {
headers: {
'Content-Type': 'text/html; charset=utf-8',
'Cache-Control': 'no-store',
'X-Frame-Options': 'SAMEORIGIN',
},
});
};