`server.js`

313 lines
/**
 * APARTMENT WALLPAPER — DW family vertical
 * Curated slice from live designerwallcoverings.com Shopify catalog.
 */
try { require('dotenv').config({ path: require('path').join(__dirname, '.env') }); } catch (e) {}
const express = require('express');
const path = require('path');
const fs = require('fs');

const PORT = process.env.PORT || 9882;
const DW_SHOPIFY = 'https://designerwallcoverings.com';
const __SITE = path.basename(__dirname);
// Admin catalog (PG-backed) is opt-in via MICROSITE_ADMIN_ENABLED=true. Prod
// stays static-only (data/products.json) so Kamatera doesn't need `pg` or the
// _shared/ tree. Dev (Mac2) flips the flag on to use dw_unified + /admin/catalog.
const ADMIN_ENABLED = process.env.MICROSITE_ADMIN_ENABLED === 'true';
let catalog = null;
if (ADMIN_ENABLED) {
  try { catalog = require('../_shared/admin-catalog'); }
  catch (e) { console.error(`[${__SITE}] admin-catalog unavailable (${e.message}) — falling back to static JSON`); }
}
const siteCfg = JSON.parse(fs.readFileSync(path.join(__dirname, 'site.config.json'), 'utf8'));
const SITE_SLUG = siteCfg.slug || __SITE;
const SITE_RAILS = Array.isArray(siteCfg.rails) ? siteCfg.rails : [];

function isJunk(p) {
  if (!p.image_url || !p.image_url.trim()) return true;
  if (!p.handle && !p.sku) return true;
  const t = p.title || '';
  if (/lamp|rug|pillow|throw|tripod|frame|mirror|vase|candle|sculpture|figurine/i.test(t)) return true;
  if (/visual.{0,3}merchandiser/i.test(t)) return true;
  if (/(?:^|\W)image[ _-]?4(?:\W|$)/i.test(t)) return true;
  if (/bh.?90210|beverly.?hills.?90210|iconic.{0,4}bh/i.test(t)) return true;
  return false;
}

// Catalog now lives in dw_unified.microsite_products — populated async at
// startup (see bottom of file). Falls back to data/products.json if PG is down.
let PRODUCTS = [];
let DROPPED = 0;

// graphics-loop pass 12: niche keyword filter — only show products that fit this site's niche
const NICHE_POS = ["peel","stick","removable","renter","apartment","temporary"];
const NICHE_NEG = ["solid","blank","plain"];
function nicheFit(p) {
  const blob = ((p.title || '') + ' ' + (p.tags || []).join(' ')).toLowerCase();
  if (NICHE_NEG.some(n => blob.includes(n.toLowerCase()))) return false;
  return NICHE_POS.length === 0 || NICHE_POS.some(k => blob.includes(k.toLowerCase()));
}
// Niche-filtered slice — recomputed once the catalog loads (see startup IIFE).
let PRODUCTS_NICHE = [];


const app = express();
app.use(express.json({ limit: "256kb" }));
// Site config — prefer _shared/site-config (canonical) but fall back to an
// inline minimal loader so this server.js is self-contained on Kamatera.
let cfg;
try {
  cfg = require('../_shared/site-config').load(__dirname);
} catch (_) {
  const domain = siteCfg.domain || `${SITE_SLUG}.com`;
  cfg = Object.freeze({
    slug: SITE_SLUG, siteName: siteCfg.siteName || SITE_SLUG,
    domain, siteEmail: siteCfg.siteEmail || `info@${domain}`,
    contact: { siteName: siteCfg.siteName || SITE_SLUG, domain,
               siteEmail: siteCfg.siteEmail || `info@${domain}`,
               zdColor: (siteCfg.theme && siteCfg.theme.accent) || '#C9A14B',
               zdPosition: siteCfg.zdPosition || 'right' },
    auth: { siteName: SITE_SLUG },
  });
}
require("./_universal-contact")(app, cfg.contact);
require("./_universal-auth")(app, cfg.auth);
app.locals.siteConfig = cfg;

// 404-guard: never serve snapshot/backup files from the static root.
app.use((req, res, next) => {
  if (/\.(bak|pre-[^/]*)(\.[^/]*)?$|\.bak(\.[^/]*)?$|\/index\.html\.pre-/i.test(req.path)
      || /\.bak\b/i.test(req.path) || /\.pre-/i.test(req.path)) {
    return res.status(404).send('Not found');
  }
  next();
});
// Fleet-wide DW vendor-name redactor on /api/* (drops vendors facet, replaces vendor field).
app.use(require('../_shared/api-vendor-redact'));

// Clean URLs: 301 the legacy /foo.html form to the extension-less /foo.
// Runs BEFORE express.static so the static handler can't serve the .html copy.
for (const page of ['care', 'history', 'sourcing', 'trade', 'vocabulary']) {
  app.get('/' + page + '.html', (req, res) => res.redirect(301, '/' + page));
}

require('../_shared/_universal-promo-banner')(app, {}); // new-arrivals promo strip (Tier B)
app.use(express.static(path.join(__dirname, 'public')));

// Clean-URL routes for editorial pages (extension-less nav links).
const PAGE_ROUTES = {
  '/about': 'history.html',
  '/history': 'history.html',
  '/care': 'care.html',
  '/sourcing': 'sourcing.html',
  '/trade': 'trade.html',
  '/vocabulary': 'vocabulary.html',
};
for (const [route, file] of Object.entries(PAGE_ROUTES)) {
  app.get(route, (req, res) => {
    res.sendFile(path.join(__dirname, 'public', file));
  });
}

function sortProducts(list, sort) {
  if (!sort || sort === 'newest') return list;
  const arr = list.slice();
  const num = v => { const n = Number(v); return isNaN(n) ? null : n; };
  switch (sort) {
    case 'title':
      return arr.sort((a, b) => String(a.title || '').localeCompare(String(b.title || '')));
    case 'sku':
      return arr.sort((a, b) => String(a.sku || a.handle || '').localeCompare(String(b.sku || b.handle || '')));
    case 'color':
      return arr.sort((a, b) => String(a.color || a.color_name || '').localeCompare(String(b.color || b.color_name || '')));
    case 'style':
      return arr.sort((a, b) => String(a.aesthetic || '').localeCompare(String(b.aesthetic || '')));
    case 'price-asc':
      return arr.sort((a, b) => (Number(a.max_price) || 0) - (Number(b.max_price) || 0));
    case 'price-desc':
      return arr.sort((a, b) => (Number(b.max_price) || 0) - (Number(a.max_price) || 0));
    // List-view sortable columns — every column sortable in both directions.
    case 'title-desc':
      return arr.sort((a, b) => String(b.title || '').localeCompare(String(a.title || '')));
    case 'sku-desc':
      return arr.sort((a, b) => String(b.sku || b.handle || '').localeCompare(String(a.sku || a.handle || '')));
    case 'vendor':
      return arr.sort((a, b) => String(a.vendor || '').localeCompare(String(b.vendor || '')) || String(a.title || '').localeCompare(String(b.title || '')));
    case 'vendor-desc':
      return arr.sort((a, b) => String(b.vendor || '').localeCompare(String(a.vendor || '')) || String(a.title || '').localeCompare(String(b.title || '')));
    case 'aesthetic':
      return arr.sort((a, b) => String(a.aesthetic || '').localeCompare(String(b.aesthetic || '')) || String(a.title || '').localeCompare(String(b.title || '')));
    case 'aesthetic-desc':
      return arr.sort((a, b) => String(b.aesthetic || '').localeCompare(String(a.aesthetic || '')) || String(a.title || '').localeCompare(String(b.title || '')));
    case 'light-dark':
    case 'dark-light':
    case 'wheel':
      // hue/lightness sort if a color hint exists; otherwise leave natural order
      return arr;
    default:
      return arr;
  }
}

// Shared query-filter — applied identically by /api/products AND /api/facets so
// facet counts reflect the actual filtered result set, not the whole catalog.
// `skip` lets the facets endpoint exclude one dimension (drill-down counts).
function filterProducts(query, skip) {
  let list = PRODUCTS_NICHE;
  const { q, aesthetic, vendor, tag } = query;
  if (skip !== 'q' && q) {
    const needle = String(q).toLowerCase();
    list = list.filter(p => (p.title || '').toLowerCase().includes(needle) || (p.tags || []).some(t => String(t).toLowerCase().includes(needle)));
  }
  if (skip !== 'aesthetic' && aesthetic && aesthetic !== 'all') list = list.filter(p => p.aesthetic === aesthetic);
  if (skip !== 'tag' && tag) {
    const wanted = String(tag).toLowerCase();
    list = list.filter(p => (p.tags || []).some(t => String(t).toLowerCase() === wanted));
  }
  if (skip !== 'vendor' && vendor && vendor !== 'all') list = list.filter(p => p.vendor === vendor);
  return list;
}

app.get('/api/products', (req, res) => {
  const { sort, page = 1, limit = 24 } = req.query;
  let list = filterProducts(req.query);
  list = sortProducts(list, sort);
  const total = list.length;
  const pageNum = Math.max(1, parseInt(page) || 1);
  const lim = Math.max(1, Math.min(60, parseInt(limit, 10) || 24));
  const start = (pageNum - 1) * lim;
  res.json({ total, page: pageNum, limit: lim, pages: Math.ceil(total / lim), items: list.slice(start, start + lim) });
});

app.get('/api/sliders', (req, res) => {
  const out = [];
  for (const a of SITE_RAILS) {
    const items = PRODUCTS_NICHE.filter(p => p.aesthetic === a).slice(0, 12);
    if (items.length >= 4) out.push({ aesthetic: a, items });
  }
  res.json({ rails: out });
});

app.get('/api/facets', (req, res) => {
  // Each facet dimension is counted over the set filtered by the OTHER active
  // filters (drill-down counts), so the numbers track the live result set
  // instead of the unfiltered catalog.
  const aesthetics = {}; const vendors = {};
  for (const p of filterProducts(req.query, 'aesthetic')) {
    aesthetics[p.aesthetic] = (aesthetics[p.aesthetic] || 0) + 1;
  }
  for (const p of filterProducts(req.query, 'vendor')) {
    vendors[p.vendor] = (vendors[p.vendor] || 0) + 1;
  }
  res.json({ aesthetics, vendors, total: filterProducts(req.query).length });
});

app.get('/api/health', (req, res) => res.json({ status: 'ok', count: PRODUCTS_NICHE.length, dropped: DROPPED }));

// Step 2 of the vendor handle/sku text-leak fix (2026-06-09): the client's
// /sample/ hrefs now point at the vendor-scrubbed `handle_display` slug
// (emitted by _shared/api-vendor-redact since Step 1), so the raw vendor-bearing
// handle never rides in the URL bar. This route is DUAL-KEY — it resolves the raw
// handle/sku FIRST (old bookmarks + buy path, byte-identical behavior), then falls
// back to a redacted->product map built after catalog load. If two raw handles
// redact to the same display slug, that slug is logged and left raw-only.
const { redactVendorText } = require('../_shared/vendor-text-redact');
let SAMPLE_DISPLAY = new Map(); // redacted display slug -> product
function buildSampleDisplayMap() {
  const map = new Map();
  const collided = new Set();
  for (const p of PRODUCTS_NICHE) {
    for (const key of [p.handle, p.sku]) {
      if (!key) continue;
      const d = redactVendorText(String(key));
      if (!d || d === key) continue;           // nothing redacted — raw route already matches
      const prev = map.get(d);
      if (prev && prev !== p) { collided.add(d); continue; }
      map.set(d, p);
    }
  }
  for (const d of collided) {
    map.delete(d);
    console.warn(`[apartmentwallpaper] /sample display-slug collision — keeping raw-only for "${d}"`);
  }
  SAMPLE_DISPLAY = map;
  console.log(`[apartmentwallpaper] /sample dual-key map: ${map.size} display slugs, ${collided.size} collisions (raw-only)`);
}

app.get('/sample/:handle', (req, res) => {
  const key = req.params.handle;
  const p = PRODUCTS_NICHE.find(x => x.handle === key || x.sku === key) // raw first — old behavior intact
    || SAMPLE_DISPLAY.get(key);                                        // then the redacted display form
  if (!p) return res.status(404).send('Not found');
  res.redirect(302, p.product_url || `${DW_SHOPIFY}/products/${encodeURIComponent(p.handle)}#sample`);
});

// /about → served by the "short history" page (no dedicated about.html exists)
app.get('/about', (req, res) => res.sendFile(path.join(__dirname, 'public', 'history.html')));

// Buy Button config — exposes the Shopify Storefront token (env) to the client so
// checkout happens ON apartmentwallpaper.com. Empty token => buybutton.js hides
// Add-to-Cart and the Sample flow stays the only CTA (graceful, never broken).
app.get('/aw-config.js', (req, res) => {
  res.type('application/javascript').set('Cache-Control', 'no-store').send(
    'window.AW_CFG=' + JSON.stringify({
      domain: process.env.SHOPIFY_STORE_DOMAIN || 'designer-laboratory-sandbox.myshopify.com',
      storefrontToken: process.env.SHOPIFY_STOREFRONT_TOKEN || ''
    }) + ';'
  );
});

// sitemap.xml + robots.txt for SEO
app.get('/robots.txt', (req, res) => {
  res.type('text/plain').send(`User-agent: *
Allow: /
Sitemap: https://apartmentwallpaper.com/sitemap.xml
`);
});
app.get('/sitemap.xml', (req, res) => {
  const urls = ['/'];
  const xml = `<?xml version="1.0" encoding="UTF-8"?>
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">
${urls.map(u => `  <url><loc>https://apartmentwallpaper.com${u}</loc><changefreq>weekly</changefreq></url>`).join('\n')}
</urlset>`;
  res.type('application/xml').send(xml);
});

// Admin catalog CRUD — /admin/catalog (basic-auth) + /api/admin/* REST.
if (catalog) catalog.mount(app, { siteSlug: SITE_SLUG, rails: SITE_RAILS });

// Load the catalog. When admin is enabled, prefer dw_unified; else static JSON.
(async () => {
  let loaded = false;
  if (catalog) {
    try {
      const rows = await catalog.getProducts(SITE_SLUG);
      PRODUCTS = rows.filter(p => !isJunk(p));
      DROPPED = rows.length - PRODUCTS.length;
      console.log(`[${__SITE}] loaded ${rows.length} from dw_unified, kept ${PRODUCTS.length}, dropped ${DROPPED}`);
      loaded = true;
    } catch (e) {
      console.error(`[${__SITE}] PG catalog load failed (${e.message}) — falling back to data/products.json`);
    }
  }
  if (!loaded) {
    try {
      const raw = JSON.parse(fs.readFileSync(path.join(__dirname, 'data', 'products.json'), 'utf8'));
      PRODUCTS = (Array.isArray(raw) ? raw : []).filter(p => !isJunk(p));
      console.log(`[${__SITE}] loaded ${PRODUCTS.length} from data/products.json (static mode)`);
    } catch (_) { PRODUCTS = []; }
  }
  PRODUCTS_NICHE = PRODUCTS.filter(nicheFit);
  console.log(`[${__SITE}] niche filter: kept ${PRODUCTS_NICHE.length} of ${PRODUCTS.length}`);
  buildSampleDisplayMap(); // Step 2: redacted->raw /sample resolver keys
  // Pre-warm the vendor-neutral /img token map so direct /img/<token> hits resolve
  // immediately after a restart (closes the cold-start 404 window).
  try {
    const warmed = require('../_shared/api-vendor-redact').warm(PRODUCTS);
    console.log(`[${__SITE}] /img token map pre-warmed: ${warmed} entries`);
  } catch (e) { console.error(`[${__SITE}] /img warm skipped: ${e.message}`); }
  app.listen(PORT, '127.0.0.1', () => {
    console.log(`apartmentwallpaper listening on http://127.0.0.1:${PORT}`);
  });
})();