Initial commit: Minecraft dashboard

Next.js 16 + Tailwind v4 + shadcn v4 dashboard for managing a modded
Forge 1.20.1 server. Includes server controls, player management, mod
manager with Modrinth search and dependency resolution, world backups,
snapshots, analytics, logs, and chat bridge.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

app/api/snapshots/restore/route.ts

@@ -0,0 +1,47 @@
+import { NextRequest, NextResponse } from "next/server";
+import { exec } from "child_process";
+import { auth } from "@/lib/auth";
+import { restoreSnapshot } from "@/lib/snapshots";
+import { rebuildModpack, waitForServer } from "@/lib/mods";
+
+export async function POST(req: NextRequest) {
+  const session = await auth();
+  if (!session) {
+    return NextResponse.json({ error: "Unauthorized" }, { status: 403 });
+  }
+
+  const { dirName } = await req.json();
+  if (!dirName || dirName.includes("/") || dirName.includes("..")) {
+    return NextResponse.json({ error: "Invalid snapshot" }, { status: 400 });
+  }
+
+  try {
+    restoreSnapshot(dirName);
+
+    await new Promise<void>((resolve, reject) => {
+      exec("sudo systemctl restart minecraft.service", (err) => {
+        if (err) reject(err);
+        else resolve();
+      });
+    });
+
+    const online = await waitForServer(90000);
+
+    try {
+      rebuildModpack();
+    } catch {}
+
+    return NextResponse.json({
+      success: true,
+      online,
+      message: online
+        ? "Snapshot restored. Server is online."
+        : "Snapshot restored. Server is starting...",
+    });
+  } catch (e) {
+    return NextResponse.json(
+      { success: false, message: (e as Error).message },
+      { status: 500 }
+    );
+  }
+}

app/api/snapshots/route.ts

@@ -0,0 +1,48 @@
+import { NextResponse } from "next/server";
+import { auth } from "@/lib/auth";
+import { listSnapshots, deleteSnapshot } from "@/lib/snapshots";
+
+export const dynamic = "force-dynamic";
+
+export async function GET() {
+  const session = await auth();
+  if (!session) {
+    return NextResponse.json({ error: "Unauthorized" }, { status: 403 });
+  }
+
+  try {
+    return NextResponse.json(listSnapshots());
+  } catch (e) {
+    return NextResponse.json(
+      { error: (e as Error).message },
+      { status: 500 }
+    );
+  }
+}
+
+export async function DELETE(req: Request) {
+  const session = await auth();
+  if (!session) {
+    return NextResponse.json({ error: "Unauthorized" }, { status: 403 });
+  }
+
+  const { dirName } = await req.json();
+  if (!dirName) {
+    return NextResponse.json({ error: "Missing dirName" }, { status: 400 });
+  }
+
+  // Prevent path traversal
+  if (dirName.includes("/") || dirName.includes("\\") || dirName.includes("..")) {
+    return NextResponse.json({ error: "Invalid name" }, { status: 400 });
+  }
+
+  try {
+    deleteSnapshot(dirName);
+    return NextResponse.json({ ok: true });
+  } catch (e) {
+    return NextResponse.json(
+      { error: (e as Error).message },
+      { status: 500 }
+    );
+  }
+}