nixpanel-server/server/src/routes/whm/system.ts

import type { FastifyInstance } from 'fastify'
import prisma from '../../db/client.js'
import { requireAdmin } from '../../middleware/auth.js'
import { getSystemStats } from '../../core/system.js'
import { exec } from '../../core/exec.js'
import { readFile } from 'fs/promises'

export default async function systemRoutes(fastify: FastifyInstance) {
  // GET /api/whm/system/stats
  fastify.get('/stats', { preHandler: [requireAdmin] }, async (request, reply) => {
    const stats = await getSystemStats()
    return reply.send({ success: true, data: stats })
  })

  // GET /api/whm/system/info
  fastify.get('/info', { preHandler: [requireAdmin] }, async (request, reply) => {
    const [hostname, osRelease, kernel, uptime] = await Promise.all([
      exec('hostname', ['-f']),
      readFile('/etc/os-release', 'utf8').catch(() => ''),
      exec('uname', ['-r']),
      exec('uptime', ['-p']),
    ])

    const osInfo: Record<string, string> = {}
    for (const line of osRelease.split('\n')) {
      const [k, v] = line.split('=')
      if (k && v) osInfo[k] = v.replace(/"/g, '')
    }

    return reply.send({
      success: true,
      data: {
        hostname: hostname.stdout,
        os: osInfo['PRETTY_NAME'] ?? 'Unknown',
        osId: osInfo['ID'] ?? 'unknown',
        kernel: kernel.stdout,
        uptime: uptime.stdout,
      },
    })
  })

  // GET /api/whm/system/processes
  fastify.get('/processes', { preHandler: [requireAdmin] }, async (request, reply) => {
    const result = await exec('ps', ['aux', '--sort=-%cpu'])
    if (result.exitCode !== 0) {
      return reply.code(500).send({ success: false, error: 'Failed to get process list' })
    }

    const lines = result.stdout.split('\n').slice(1, 51) // top 50 processes
    const processes = lines.map(line => {
      const parts = line.trim().split(/\s+/)
      return {
        user: parts[0],
        pid: parts[1],
        cpu: parts[2],
        mem: parts[3],
        command: parts.slice(10).join(' '),
      }
    }).filter(p => p.pid)

    return reply.send({ success: true, data: processes })
  })

  // POST /api/whm/system/processes/:pid/kill
  fastify.post('/processes/:pid/kill', { preHandler: [requireAdmin] }, async (request, reply) => {
    const { pid } = request.params as { pid: string }
    if (!/^\d+$/.test(pid) || parseInt(pid, 10) <= 1) {
      return reply.code(400).send({ success: false, error: 'Invalid PID' })
    }
    const result = await exec('kill', ['-9', pid])
    if (result.exitCode !== 0) {
      return reply.code(500).send({ success: false, error: result.stderr })
    }
    return reply.send({ success: true, data: { message: `Process ${pid} killed` } })
  })

  // GET /api/whm/system/audit-log
  fastify.get('/audit-log', { preHandler: [requireAdmin] }, async (request, reply) => {
    const q = request.query as Record<string, string>
    const page = Math.max(1, parseInt(q.page ?? '1', 10))
    const limit = Math.min(100, Math.max(1, parseInt(q.limit ?? '50', 10)))

    const [items, total] = await Promise.all([
      prisma.auditLog.findMany({
        skip: (page - 1) * limit,
        take: limit,
        orderBy: { createdAt: 'desc' },
        include: { admin: { select: { username: true } } },
      }),
      prisma.auditLog.count(),
    ])

    return reply.send({
      success: true,
      data: { items, total, page, limit, totalPages: Math.ceil(total / limit) },
    })
  })

  // GET /api/whm/system/settings
  fastify.get('/settings', { preHandler: [requireAdmin] }, async (request, reply) => {
    const settings = await prisma.setting.findMany({ orderBy: { key: 'asc' } })
    const map: Record<string, string> = {}
    for (const s of settings) map[s.key] = s.value
    return reply.send({ success: true, data: map })
  })

  // PUT /api/whm/system/settings
  fastify.put('/settings', { preHandler: [requireAdmin] }, async (request, reply) => {
    const body = request.body as Record<string, string>
    if (typeof body !== 'object' || Array.isArray(body)) {
      return reply.code(400).send({ success: false, error: 'Body must be a key-value object' })
    }

    for (const [key, value] of Object.entries(body)) {
      await prisma.setting.upsert({
        where: { key },
        update: { value: String(value) },
        create: { key, value: String(value) },
      })
    }

    return reply.send({ success: true, data: { message: 'Settings updated' } })
  })
}