Class DynamicController

apps/backend/src/dynamic/dynamic.controller.ts:10–96

@Controller('api')
export class DynamicController {
  // Handle all dynamic endpoint requests
  @All('*')
  async handleDynamic(@Req() req: Request, @Res() res: Response) {
    const normalizedPath = req.path.replace(/^\/api/, '');

    const match = await prisma.endpoint.findFirst({
      where: {
        path: normalizedPath,
        method: req.method,
      },
    });

    if (!match) {
      throw new HttpException('Not Found', HttpStatus.NOT_FOUND);
    }

    try {
      let safeBody = req.body;
      if (typeof safeBody === 'string') {
        try {
          safeBody = JSON.parse(safeBody);
        } catch {
          throw new HttpException('Invalid JSON body', HttpStatus.BAD_REQUEST);
        }
      }

      if (match.language === 'javascript') {
        const sandbox: any = {
          req: {
            path: req.path,
            method: req.method,
            headers: req.headers,
            query: req.query,
            body: safeBody || {},
          },
          res,
          console,
          setTimeout,
          fetch: globalThis.fetch,
          uuid: uuidv4,
          helpers: {
            sayHello: () => 'Hello from helper!',
            sum: (a: number, b: number) => a + b,
          },
          db: {
            find: () => [{ id: 1, name: 'Test Record' }],
            insert: (doc: any) => ({ insertedId: uuidv4(), ...doc }),
            update: (id: string, changes: any) => ({ id, ...changes }),
          },
        };

        const vm = new VM({ timeout: 1500, sandbox });

        const wrappedCode = `
          const handler = ${match.code};
          handler(req);
        `;