Update app.js

app.js

@@ -10,20 +10,14 @@ const app = express();
 app.use(cors());
 app.use(bodyParser.json({ limit: '50mb' }));
 
-// ---------------------------------------------------------
-// 1. STATE MANAGEMENT
-// ---------------------------------------------------------
 const tempKeys = new Map();
 const activeSessions = new Map();
 
-// ---------------------------------------------------------
-// 2. SUPABASE INITIALIZATION
-// ---------------------------------------------------------
 const {
     SUPABASE_URL,
     SUPABASE_SERVICE_ROLE_KEY,
     EXTERNAL_SERVER_URL = 'http://localhost:7860',
-    STORAGE_BUCKET = 'project-assets', // Default bucket name
+    STORAGE_BUCKET = 'project-assets', 
     PORT = 7860
 } = process.env;
 
@@ -31,7 +25,6 @@ let supabase = null;
 
 try {
     if (SUPABASE_URL && SUPABASE_SERVICE_ROLE_KEY) {
-        // Use Service Role Key for Admin privileges (bypass RLS for management)
         supabase = createClient(SUPABASE_URL, SUPABASE_SERVICE_ROLE_KEY, {
             auth: {
                 autoRefreshToken: false,
@@ -46,9 +39,6 @@ try {
     console.error("Supabase Init Error:", e);
 }
 
-// ---------------------------------------------------------
-// 3. MIDDLEWARE
-// ---------------------------------------------------------
 const verifySupabaseUser = async (req, res, next) => {
     const debugMode = process.env.DEBUG_NO_AUTH === 'true';
 
@@ -89,7 +79,6 @@ async function getSessionSecret(uid, projectId) {
 
     if (supabase) {
         try {
-            // Retrieve plugin_secret from projects table
             const { data, error } = await supabase
                 .from('projects')
                 .select('plugin_secret')
@@ -110,10 +99,6 @@ async function getSessionSecret(uid, projectId) {
     return null;
 }
 
-// ---------------------------------------------------------
-// 4. ENDPOINTS
-// ---------------------------------------------------------
-
 app.post('/key', verifySupabaseUser, (req, res) => {
     const { projectId } = req.body;
     if (!projectId) return res.status(400).json({ error: 'projectId required' });
@@ -121,7 +106,7 @@ app.post('/key', verifySupabaseUser, (req, res) => {
     const key = `key_${uuidv4().replace(/-/g, '')}`;
     
     tempKeys.set(key, {
-        uid: req.user.id, // Supabase UUID
+        uid: req.user.id, 
         projectId: projectId,
         createdAt: Date.now()
     });
@@ -151,7 +136,6 @@ app.post('/redeem', async (req, res) => {
     activeSessions.set(cacheKey, { secret: sessionSecret, lastAccessed: Date.now() });
 
     if (supabase) {
-        // Store secret in the projects table
         await supabase
             .from('projects')
             .update({ plugin_secret: sessionSecret })
@@ -193,10 +177,6 @@ app.post('/verify', async (req, res) => {
     }
 });
 
-// ---------------------------------------------------------
-// PROXY ENDPOINTS
-// ---------------------------------------------------------
-
 app.post('/feedback', async (req, res) => {
     const { token, ...pluginPayload } = req.body;
 
@@ -234,7 +214,6 @@ app.post('/feedback', async (req, res) => {
     }
 });
 
-// --- RETAINED FEEDBACK2 ENDPOINT ---
 app.post('/feedback2', verifySupabaseUser, async (req, res) => {
     const { projectId, prompt, images, ...otherPayload } = req.body; 
     const userId = req.user.id;
@@ -261,6 +240,44 @@ app.post('/feedback2', verifySupabaseUser, async (req, res) => {
     }
 });
 
+app.post('/stream-feed', verifySupabaseUser, async (req, res) => {
+    const { projectId } = req.body;
+    const userId = req.user.id;
+
+    if (!projectId) {
+        return res.status(400).json({ error: 'Missing projectId' });
+    }
+    
+    if (supabase) {
+         const { data, error } = await supabase
+             .from('projects')
+             .select('id, user_id, info')
+             .eq('id', projectId)
+             .single();
+
+         if (error || !data || data.user_id !== userId) {
+             return res.status(403).json({ error: 'Unauthorized' });
+         }
+         
+         const targetUrl = EXTERNAL_SERVER_URL.replace(/\/$/, '') + '/project/ping';
+
+         try {
+             const response = await axios.post(targetUrl, {
+                 projectId: projectId,
+                 userId: userId,
+                 isFrontend: true
+             });
+             
+             return res.json({ 
+                 ...response.data, 
+                 dbStatus: data.info?.status || 'idle' 
+             });
+         } catch (e) {
+             return res.status(502).json({ error: "AI Server Unreachable" });
+         }
+    }
+});
+
 app.post('/poll', async (req, res) => {
     const { token } = req.body;
 
@@ -286,7 +303,6 @@ app.post('/poll', async (req, res) => {
         const targetUrl = EXTERNAL_SERVER_URL.replace(/\/$/, '') + '/project/ping'; 
       
         try {
-            // Forward ping to get commands AND stream
             const response = await axios.post(targetUrl, {
               projectId: verifiedData.projectId,
               userId: verifiedData.uid
@@ -302,10 +318,6 @@ app.post('/poll', async (req, res) => {
     }
 });
 
-// ---------------------------------------------------------
-// MANAGEMENT ENDPOINTS
-// ---------------------------------------------------------
-
 app.post('/project/delete', verifySupabaseUser, async (req, res) => {
     const { projectId } = req.body;
     const userId = req.user.id;
@@ -315,7 +327,6 @@ app.post('/project/delete', verifySupabaseUser, async (req, res) => {
     console.log(`🗑️ Deleting Project: ${projectId} requested by ${userId}`);
 
     try {
-        // 1. Verify Ownership
         const { data: project, error: fetchError } = await supabase
             .from('projects')
             .select('user_id')
@@ -326,7 +337,6 @@ app.post('/project/delete', verifySupabaseUser, async (req, res) => {
             return res.status(403).json({ error: "Unauthorized" });
         }
 
-        // 2. Explicitly Delete Message Chunks
         const { error: chunkError } = await supabase
             .from('message_chunks')
             .delete()
@@ -336,7 +346,6 @@ app.post('/project/delete', verifySupabaseUser, async (req, res) => {
             console.warn(`Warning: Failed to delete message chunks: ${chunkError.message}`);
         }
 
-        // 3. Delete Project
         const { error: dbError } = await supabase
             .from('projects')
             .delete()
@@ -344,7 +353,6 @@ app.post('/project/delete', verifySupabaseUser, async (req, res) => {
         
         if (dbError) throw dbError;
 
-        // 4. Delete from Supabase Storage
         if (STORAGE_BUCKET) {
             const { data: files } = await supabase.storage.from(STORAGE_BUCKET).list(projectId);
             
@@ -354,7 +362,6 @@ app.post('/project/delete', verifySupabaseUser, async (req, res) => {
             }
         }
 
-        // 5. Clear from Memory
         activeSessions.delete(`${userId}:${projectId}`);
         for (const [key, val] of tempKeys.entries()) {
             if (val.projectId === projectId) tempKeys.delete(key);