mc-dashboard/app/api/players/route.ts

import { NextRequest, NextResponse } from "next/server";
import { readFileSync } from "fs";
import { auth, sessionRole } from "@/lib/auth";
import { sendCommand } from "@/lib/rcon";
import { memo, invalidate } from "@/lib/cache";

export const dynamic = "force-dynamic";

const OPS_FILE = "/home/minecraft/server/ops.json";
const WHITELIST_FILE = "/home/minecraft/server/whitelist.json";
const BANNED_FILE = "/home/minecraft/server/banned-players.json";

type OpsEntry = { uuid: string; name: string; level: number };
type WhitelistEntry = { uuid: string; name: string };
type BannedEntry = { uuid: string; name: string; reason: string; created: string; expires: string };

function readJson<T>(path: string): T[] {
  try {
    return JSON.parse(readFileSync(path, "utf8"));
  } catch {
    return [];
  }
}

// GET — list ops, whitelist, banned players
export async function GET() {
  const session = await auth();
  if (!session) {
    return NextResponse.json({ error: "Unauthorized" }, { status: 403 });
  }

  const data = memo("players", 10_000, () => {
    const ops = readJson<OpsEntry>(OPS_FILE).map((e) => ({
      name: e.name,
      uuid: e.uuid,
      level: e.level,
    }));
    const whitelist = readJson<WhitelistEntry>(WHITELIST_FILE).map((e) => ({
      name: e.name,
      uuid: e.uuid,
    }));
    const banned = readJson<BannedEntry>(BANNED_FILE).map((e) => ({
      name: e.name,
      uuid: e.uuid,
      reason: e.reason,
    }));
    return { ops, whitelist, banned };
  });

  return NextResponse.json(data, {
    headers: { "Cache-Control": "private, max-age=5" },
  });
}

// POST — execute a player management command
export async function POST(req: NextRequest) {
  const session = await auth();
  if (!session) {
    return NextResponse.json({ error: "Unauthorized" }, { status: 403 });
  }

  const { action, player, reason } = await req.json();

  if (!player || !/^[a-zA-Z0-9_]{1,16}$/.test(player)) {
    return NextResponse.json(
      { error: "Invalid player name" },
      { status: 400 }
    );
  }

  const allowedActions = ["op", "deop", "whitelist add", "whitelist remove", "ban", "pardon"];
  if (!allowedActions.includes(action)) {
    return NextResponse.json(
      { error: "Invalid action" },
      { status: 400 }
    );
  }

  if ((action === "op" || action === "deop") && sessionRole(session) !== "superadmin") {
    return NextResponse.json(
      { error: "Only super admins can manage operators" },
      { status: 403 }
    );
  }

  let command = `${action} ${player}`;
  if (action === "ban" && reason) {
    command += ` ${reason}`;
  }

  try {
    const response = await sendCommand(command);

    // Force server to sync JSON files
    if (action.startsWith("whitelist")) {
      await sendCommand("whitelist reload");
    }

    // Wait for server to write JSON files to disk
    await new Promise((r) => setTimeout(r, 500));
    invalidate("players");

    return NextResponse.json({ ok: true, response });
  } catch (e) {
    return NextResponse.json(
      { error: `RCON failed: ${(e as Error).message}. Is the server online?` },
      { status: 500 }
    );
  }
}