mc-dashboard/app/api/players/route.ts

import { NextRequest, NextResponse } from "next/server";
import { readFileSync } from "fs";
import { auth } from "@/lib/auth";
import { sendCommand } from "@/lib/rcon";

export const dynamic = "force-dynamic";

const OPS_FILE = "/home/minecraft/server/ops.json";
const WHITELIST_FILE = "/home/minecraft/server/whitelist.json";
const BANNED_FILE = "/home/minecraft/server/banned-players.json";

type OpsEntry = { uuid: string; name: string; level: number };
type WhitelistEntry = { uuid: string; name: string };
type BannedEntry = { uuid: string; name: string; reason: string; created: string; expires: string };

function readJson<T>(path: string): T[] {
  try {
    return JSON.parse(readFileSync(path, "utf8"));
  } catch {
    return [];
  }
}

// GET — list ops, whitelist, banned players
export async function GET() {
  const session = await auth();
  if (!session) {
    return NextResponse.json({ error: "Unauthorized" }, { status: 403 });
  }

  const ops = readJson<OpsEntry>(OPS_FILE).map((e) => ({
    name: e.name,
    uuid: e.uuid,
    level: e.level,
  }));

  const whitelist = readJson<WhitelistEntry>(WHITELIST_FILE).map((e) => ({
    name: e.name,
    uuid: e.uuid,
  }));

  const banned = readJson<BannedEntry>(BANNED_FILE).map((e) => ({
    name: e.name,
    uuid: e.uuid,
    reason: e.reason,
  }));

  return NextResponse.json({ ops, whitelist, banned });
}

// POST — execute a player management command
export async function POST(req: NextRequest) {
  const session = await auth();
  if (!session) {
    return NextResponse.json({ error: "Unauthorized" }, { status: 403 });
  }

  const { action, player, reason } = await req.json();

  if (!player || !/^[a-zA-Z0-9_]{1,16}$/.test(player)) {
    return NextResponse.json(
      { error: "Invalid player name" },
      { status: 400 }
    );
  }

  const allowedActions = ["op", "deop", "whitelist add", "whitelist remove", "ban", "pardon"];
  if (!allowedActions.includes(action)) {
    return NextResponse.json(
      { error: "Invalid action" },
      { status: 400 }
    );
  }

  let command = `${action} ${player}`;
  if (action === "ban" && reason) {
    command += ` ${reason}`;
  }

  try {
    const response = await sendCommand(command);

    // Force server to sync JSON files
    if (action.startsWith("whitelist")) {
      await sendCommand("whitelist reload");
    }

    // Wait for server to write JSON files to disk
    await new Promise((r) => setTimeout(r, 500));

    return NextResponse.json({ ok: true, response });
  } catch (e) {
    return NextResponse.json(
      { error: `RCON failed: ${(e as Error).message}. Is the server online?` },
      { status: 500 }
    );
  }
}