Relevant source files

The following files were used as context for generating this wiki page: - [src/lib/export-service.ts](https://github.com/ashish921998/Vinesight/blob/main/src/lib/export-service.ts) - [src/lib/security-service.ts](https://github.com/ashish921998/Vinesight/blob/main/src/lib/security-service.ts) - [CLAUDE.md](https://github.com/ashish921998/Vinesight/blob/main/CLAUDE.md) - [context/TYPES_AND_INTERFACES.md](https://github.com/ashish921998/Vinesight/blob/main/context/TYPES_AND_INTERFACES.md) - [src/app/reports/page.tsx](https://github.com/ashish921998/Vinesight/blob/main/src/app/reports/page.tsx) - [context/todos.md](https://github.com/ashish921998/Vinesight/blob/main/context/todos.md)

# Server-Side Services The server-side services in the `src/lib/` directory provide a suite of modular, backend-focused functionalities that support the main VineSight application. These services are encapsulated in classes and are responsible for handling tasks such as data exporting, API security, and a range of planned advanced AI-driven features. They are designed to be independent modules that can be invoked by API routes or other server-side components. The current implementation includes a robust `ExportService` for generating user reports and a `SecurityService` for safeguarding API endpoints. The project roadmap outlines a significant expansion of these services to include a sophisticated AI-powered backend, with modules for personalization, predictive task generation, pest and disease alerts, profitability analysis, and market intelligence. *Sources: [AGENTS.md](), [CLAUDE.md](), [src/lib/export-service.ts](), [src/lib/security-service.ts]()* ## Export Service The `ExportService` is responsible for generating and downloading farm data reports in various formats. It gathers data from the Supabase backend, formats it, and provides it to the user as a CSV or PDF file. *Sources: [src/lib/export-service.ts](), [src/app/reports/page.tsx]()* ### Architecture and Flow The service is implemented as a static class `ExportService`, which means it can be used without instantiation. The primary entry point is the `exportData` method. The following diagram illustrates the data flow when a user requests a data export. ```mermaid flowchart TD A[User requests export on /reports page] --> B{handleExport(format)}; B --> C{ExportService.exportData(options)}; C --> D[gatherExportData(options)]; D --> E{SupabaseService}; E --> F[Filter records by dateRange]; F --> G{Format requested?}; G -- PDF --> H[exportToPDF(data)]; G -- CSV --> I[exportToCSV(data)]; H --> J[Download PDF file]; I --> K[Download CSV file]; subgraph "src/app/reports/page.tsx" A B end subgraph "src/lib/export-service.ts" C D F G H I J K end ``` *This flowchart shows the process from a user's export request on the reports page to the final file download, highlighting the key methods within `ExportService`.* *Sources: [src/lib/export-service.ts:50-57](), [src/app/reports/page.tsx:320-353]()* ### Key Components #### `ExportOptions` Interface This interface defines the configuration for an export request. | Property | Type | Description | | :--- | :--- | :--- | | `farmId` | `number` | The ID of the farm to export data for. | | `dateRange` | `{ from: string; to: string; }` | The start and end dates for the data query. | | `includeTypes` | `string[]` | An array of data types to include (e.g., 'irrigation', 'spray'). | | `format` | `'csv' \| 'pdf'` | The desired output format. | | `reportType` | `'operations' \| 'financial' \| ...` | The type of report to generate, which influences the included data sections. | *Sources: [src/lib/export-service.ts:18-27]()* #### `exportData(options: ExportOptions)` This is the main static method that orchestrates the export process. It calls `gatherExportData` to fetch the necessary information and then routes the result to either `exportToCSV` or `exportToPDF` based on the specified format. *Sources: [src/lib/export-service.ts:50-57]()* #### `gatherExportData(options: ExportOptions)` This private method is responsible for fetching all required data from `SupabaseService`. It retrieves farm details and then conditionally fetches records for irrigation, spray, harvest, expenses, and more, based on the `includeTypes` option. All retrieved records are then filtered by the provided `dateRange`. *Sources: [src/lib/export-service.ts:62-115]()* #### PDF and CSV Generation - **`exportToPDF(data: ExportData, options: ExportOptions)`**: Uses the `jspdf` and `jspdf-autotable` libraries to construct a professional PDF report. It includes a header, farm summary, and tables for different data types. The method dynamically adds pages as needed. - **`exportToCSV(data: ExportData, options: ExportOptions)`**: Constructs a CSV string by iterating through the gathered data. It adds headers for each data type and formats the rows accordingly. *Sources: [src/lib/export-service.ts:159-224](), [src/lib/export-service.ts:229-354]()* ## Security Service The `SecurityService` provides a centralized set of tools for securing API routes. It is implemented as a static class to offer utility methods for request validation and response generation. *Sources: [src/lib/security-service.ts]() ### API Request Validation The `checkAPIRequest` method is a comprehensive security middleware for API routes. It performs a series of checks based on the provided options. ```mermaid flowchart TD A[API Request Received] --> B{checkAPIRequest(request, options)}; B --> C{Method Allowed?}; C -- No --> X[Return 405 Error]; C -- Yes --> D{Rate Limit OK?}; D -- No --> X[Return 429 Error]; D -- Yes --> E{Auth Required & Present?}; E -- No --> X[Return 401 Error]; E -- Yes --> F{Content-Type Valid?}; F -- No --> X[Return 400 Error]; F -- Yes --> G{CSRF Token Valid?}; G -- No --> X[Return 403 Error]; G -- Yes --> H{User-Agent Valid?}; H -- No --> X[Return 400 Error]; H -- Yes --> I[Request Allowed]; ``` *This flowchart details the validation steps performed by the `checkAPIRequest` method.* *Sources: [src/lib/security-service.ts:13-86]()* #### `checkAPIRequest` Options | Option | Type | Default | Description | | :--- | :--- | :--- | :--- | | `requireAuth` | `boolean` | `false` | If true, checks for an `authorization` header. | | `allowedMethods` | `string[]` | `['GET', 'POST', ...]` | List of allowed HTTP methods. | | `maxPayloadSize` | `number` | `10000` | (Note: This is a placeholder in the method signature, payload size is checked in `validatePayload`). | | `requireCSRF` | `boolean` | `false` | If true, validates `x-csrf-token` against `x-session-csrf` header. | *Sources: [src/lib/security-service.ts:15-24]()* ### Payload Validation The `validatePayload` method securely reads and parses the JSON body of a request. It checks for: 1. **Payload Size**: Ensures the request body does not exceed a maximum size. 2. **Suspicious Content**: Scans the raw text for common attack patterns like `