Design plugin asset browser

// Express-style search proxy for the design plugin
import express from "express";

const app = express();
const base = process.env.EPOCHAL_API_BASE ?? "https://epochalstock.com/api/v1";
const apiKey = process.env.EPOCHAL_API_KEY;
if (!apiKey) throw new Error("Set EPOCHAL_API_KEY on the server");

app.get("/api/stock/search", async (req, res) => {
  // Assume requireAuth(req) already ran
  const q = String(req.query.q ?? "").slice(0, 200);
  const tags = String(req.query.tags ?? "").slice(0, 500);
  const tagMode = req.query.tag_mode === "any" ? "any" : "all";
  const sort = ["relevance", "newest", "oldest"].includes(String(req.query.sort))
    ? String(req.query.sort)
    : q ? "relevance" : "newest";
  const limit = Math.min(100, Math.max(1, Number(req.query.limit) || 30));
  const cursor = req.query.cursor ? String(req.query.cursor) : "";

  const params = new URLSearchParams({ sort, limit: String(limit), tag_mode: tagMode });
  if (q) params.set("q", q);
  if (tags) params.set("tags", tags);
  if (cursor) params.set("cursor", cursor);

  const upstream = await fetch(\`${base}/images?${params}\`, {
    headers: {
      Authorization: \`Bearer ${apiKey}\`,
      Accept: "application/json",
    },
  });

  const text = await upstream.text();
  if (!upstream.ok) {
    res.status(upstream.status).type("application/json").send(text);
    return;
  }

  const body = JSON.parse(text);
  // Return only what the plugin needs
  res.json({
    images: body.data.images,
    total: body.data.total,
    nextCursor: body.data.next_cursor ?? null,
    requestId: body.meta?.request_id ?? upstream.headers.get("x-request-id"),
  });
});

<?php
declare(strict_types=1);

// GET /api/stock/search — server-side proxy for the design plugin
$base = rtrim(getenv('EPOCHAL_API_BASE') ?: 'https://epochalstock.com/api/v1', '/');
$key = getenv('EPOCHAL_API_KEY');
if ($key === false || $key === '') {
    http_response_code(500);
    echo json_encode(['error' => 'server_misconfigured']);
    exit;
}

$q = substr((string) ($_GET['q'] ?? ''), 0, 200);
$tags = substr((string) ($_GET['tags'] ?? ''), 0, 500);
$tagMode = (($_GET['tag_mode'] ?? 'all') === 'any') ? 'any' : 'all';
$sortIn = (string) ($_GET['sort'] ?? '');
$sort = in_array($sortIn, ['relevance', 'newest', 'oldest'], true)
    ? $sortIn
    : ($q !== '' ? 'relevance' : 'newest');
$limit = max(1, min(100, (int) ($_GET['limit'] ?? 30)));
$cursor = (string) ($_GET['cursor'] ?? '');

$params = [
    'sort' => $sort,
    'limit' => $limit,
    'tag_mode' => $tagMode,
];
if ($q !== '') {
    $params['q'] = $q;
}
if ($tags !== '') {
    $params['tags'] = $tags;
}
if ($cursor !== '') {
    $params['cursor'] = $cursor;
}

$ch = curl_init($base . '/images?' . http_build_query($params));
curl_setopt_array($ch, [
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_HTTPHEADER => [
        'Authorization: Bearer ' . $key,
        'Accept: application/json',
    ],
    CURLOPT_TIMEOUT => 20,
]);
$response = curl_exec($ch);
$status = (int) curl_getinfo($ch, CURLINFO_HTTP_CODE);
curl_close($ch);

http_response_code($status === 200 ? 200 : $status);
header('Content-Type: application/json');
if ($status !== 200) {
    echo (string) $response;
    exit;
}

$payload = json_decode((string) $response, true, 512, JSON_THROW_ON_ERROR);
echo json_encode([
    'images' => $payload['data']['images'] ?? [],
    'total' => $payload['data']['total'] ?? 0,
    'nextCursor' => $payload['data']['next_cursor'] ?? null,
    'requestId' => $payload['meta']['request_id'] ?? null,
], JSON_THROW_ON_ERROR);

# FastAPI-style search proxy
import os
from typing import Optional

import httpx
from fastapi import FastAPI, HTTPException, Query

app = FastAPI()
BASE = os.environ.get("EPOCHAL_API_BASE", "https://epochalstock.com/api/v1").rstrip("/")
API_KEY = os.environ["EPOCHAL_API_KEY"]


@app.get("/api/stock/search")
async def stock_search(
    q: str = Query("", max_length=200),
    tags: str = "",
    tag_mode: str = "all",
    sort: Optional[str] = None,
    limit: int = Query(30, ge=1, le=100),
    cursor: Optional[str] = None,
):
    tag_mode = "any" if tag_mode == "any" else "all"
    if sort not in (None, "relevance", "newest", "oldest"):
        sort = None
    if sort is None:
        sort = "relevance" if q else "newest"

    params = {"sort": sort, "limit": limit, "tag_mode": tag_mode}
    if q:
        params["q"] = q
    if tags:
        params["tags"] = tags
    if cursor:
        params["cursor"] = cursor

    async with httpx.AsyncClient(timeout=20.0) as client:
        r = await client.get(
            f"{BASE}/images",
            params=params,
            headers={
                "Authorization": f"Bearer {API_KEY}",
                "Accept": "application/json",
            },
        )
    if r.status_code != 200:
        raise HTTPException(status_code=r.status_code, detail=r.text)

    body = r.json()
    data = body["data"]
    return {
        "images": data["images"],
        "total": data["total"],
        "nextCursor": data.get("next_cursor"),
        "requestId": body.get("meta", {}).get("request_id"),
    }

app.get("/api/stock/images/:id", async (req, res) => {
  const id = encodeURIComponent(req.params.id);
  const upstream = await fetch(\`${base}/images/${id}\`, {
    headers: {
      Authorization: \`Bearer ${apiKey}\`,
      Accept: "application/json",
    },
  });
  const text = await upstream.text();
  res.status(upstream.status).type("application/json").send(text);
});

$id = rawurlencode((string) ($_GET['id'] ?? ''));
$ch = curl_init($base . '/images/' . $id);
curl_setopt_array($ch, [
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_HTTPHEADER => [
        'Authorization: Bearer ' . $key,
        'Accept: application/json',
    ],
    CURLOPT_TIMEOUT => 20,
]);
$body = curl_exec($ch);
$status = (int) curl_getinfo($ch, CURLINFO_HTTP_CODE);
curl_close($ch);
http_response_code($status);
header('Content-Type: application/json');
echo (string) $body;

@app.get("/api/stock/images/{image_id}")
async def stock_detail(image_id: str):
    async with httpx.AsyncClient(timeout=20.0) as client:
        r = await client.get(
            f"{BASE}/images/{image_id}",
            headers={
                "Authorization": f"Bearer {API_KEY}",
                "Accept": "application/json",
            },
        )
    if r.status_code != 200:
        raise HTTPException(status_code=r.status_code, detail=r.text)
    return r.json()