Generated by DISSG/AAMOS Platform — ${new Date().toISOString()} — dissg.wavult.com
`;
res.setHeader('Content-Type', 'text/html; charset=utf-8');
res.setHeader('Content-Disposition', `attachment; filename="DISSG_Report_${country}_${year}.html"`);
res.send(html);
auditLog('export.pdf', { country, year });
} catch (e) { res.status(500).json({ error: e.message }); }
});
// ═══════════════════════════════════════════════════════════════════════════════
// D-007: DISSG PRO Subscription + Rate Limiting
// ═══════════════════════════════════════════════════════════════════════════════
const TIERS = {
free: { price: 0, calls_per_min: 10, calls_per_day: 100, features: ['gdm', 'trends', 'csv'] },
pro: { price: 799, calls_per_min: 60, calls_per_day: 5000, features: ['gdm', 'trends', 'csv', 'pdf', 'causal', 'gmi', 'oecd', 'un', 'alerts'] },
enterprise: { price: null, calls_per_min: 600, calls_per_day: null, features: ['all'] }
};
router.get('/subscription/tiers', (_, res) => {
res.json({ ok: true, tiers: TIERS, currency: 'SEK', ts: new Date().toISOString() });
});
router.post('/subscription/subscribe', async (req, res) => {
try {
const { user_id, tier, email } = req.body;
if (!user_id || !tier) return res.status(400).json({ error: 'user_id and tier required' });
if (!TIERS[tier]) return res.status(400).json({ error: 'invalid tier', valid: Object.keys(TIERS) });
const pool = getPool();
await pool.query(`
INSERT INTO dissg_subscriptions (user_id, tier, email, created_at, active)
VALUES ($1, $2, $3, NOW(), true)
ON CONFLICT (user_id) DO UPDATE SET tier=$2, email=$3, updated_at=NOW(), active=true
`, [user_id, tier, email || null]);
const sub_id = `dissg_${tier}_${createHash('sha256').update(user_id + tier).digest('hex').slice(0, 12)}`;
res.json({ ok: true, sub_id, tier, limits: TIERS[tier], ts: new Date().toISOString() });
auditLog('subscription.create', { user_id, tier });
} catch (e) { res.status(500).json({ error: e.message }); }
});
router.get('/subscription/status', async (req, res) => {
try {
const user_id = req.query.user_id || req.user?.id;
if (!user_id) return res.status(400).json({ error: 'user_id required' });
const pool = getPool();
const r = await pool.query('SELECT tier, active, created_at FROM dissg_subscriptions WHERE user_id=$1', [user_id]);
const sub = r.rows[0] || { tier: 'free', active: true };
res.json({ ok: true, user_id, tier: sub.tier, active: sub.active, limits: TIERS[sub.tier], ts: new Date().toISOString() });
} catch (e) { res.status(500).json({ error: e.message }); }
});
// ═══════════════════════════════════════════════════════════════════════════════
// D-008: DISSG Login/Register — JWT via AMOS Identity
// ═══════════════════════════════════════════════════════════════════════════════
router.post('/auth/register', async (req, res) => {
try {
const { email, password, name } = req.body;
if (!email || !password) return res.status(400).json({ error: 'email and password required' });
// Forward to AMOS identity service
const result = await new Promise(resolve => {
const body = JSON.stringify({ email, password, name: name || email.split('@')[0], product: 'dissg' });
const options = {
hostname: 'localhost', port: 3100, path: '/api/auth/register',
method: 'POST', headers: { 'Content-Type': 'application/json', 'Content-Length': Buffer.byteLength(body) }
};
const req2 = http.request(options, r2 => {
let d = ''; r2.on('data', c => d += c);
r2.on('end', () => { try { resolve(JSON.parse(d)); } catch { resolve({ error: 'parse' }); } });
});
req2.on('error', e => resolve({ error: e.message }));
req2.write(body); req2.end();
});
if (result.error) return res.status(400).json({ error: result.error });
auditLog('auth.register', { email });
res.json({ ok: true, message: 'registered', ...result });
} catch (e) { res.status(500).json({ error: e.message }); }
});
router.post('/auth/login', async (req, res) => {
try {
const { email, password } = req.body;
if (!email || !password) return res.status(400).json({ error: 'email and password required' });
const result = await new Promise(resolve => {
const body = JSON.stringify({ email, password });
const options = {
hostname: 'localhost', port: 3100, path: '/api/auth/login',
method: 'POST', headers: { 'Content-Type': 'application/json', 'Content-Length': Buffer.byteLength(body) }
};
const req2 = http.request(options, r2 => {
let d = ''; r2.on('data', c => d += c);
r2.on('end', () => { try { resolve(JSON.parse(d)); } catch { resolve({ error: 'parse' }); } });
});
req2.on('error', e => resolve({ error: e.message }));
req2.write(body); req2.end();
});
auditLog('auth.login', { email });
res.json(result);
} catch (e) { res.status(500).json({ error: e.message }); }
});
// ═══════════════════════════════════════════════════════════════════════════════
// D-015: Alert System — notifiera ny statistik
// ═══════════════════════════════════════════════════════════════════════════════
const _alertSubs = new Map(); // in-memory for now
const _alerts = [];
router.post('/alerts/subscribe', async (req, res) => {
try {
const { user_id, country, indicator, threshold, direction } = req.body;
if (!user_id || !indicator) return res.status(400).json({ error: 'user_id and indicator required' });
const id = `alert_${Date.now()}_${Math.random().toString(36).slice(2, 8)}`;
const sub = { id, user_id, country: country || 'SWE', indicator, threshold, direction: direction || 'any', created_at: new Date().toISOString(), active: true };
const pool = getPool();
await pool.query(`
INSERT INTO dissg_alerts (id, user_id, country, indicator, threshold, direction, created_at, active)
VALUES ($1,$2,$3,$4,$5,$6,NOW(),true)
`, [id, user_id, sub.country, indicator, threshold || null, sub.direction]).catch(() => {});
_alertSubs.set(id, sub);
res.json({ ok: true, alert_id: id, subscription: sub });
} catch (e) { res.status(500).json({ error: e.message }); }
});
router.get('/alerts', async (req, res) => {
try {
const user_id = req.query.user_id;
let alerts = [];
try {
const pool = getPool();
const r = await pool.query('SELECT * FROM dissg_alerts WHERE user_id=$1 OR $1 IS NULL ORDER BY created_at DESC LIMIT 50', [user_id || null]);
alerts = r.rows;
} catch { alerts = [..._alertSubs.values()]; }
res.json({ ok: true, alerts, count: alerts.length, ts: new Date().toISOString() });
} catch (e) { res.status(500).json({ error: e.message }); }
});
router.post('/alerts/check', async (req, res) => {
try {
// Check WorldBank data against thresholds
const triggered = [];
for (const [id, sub] of _alertSubs) {
if (!sub.active) continue;
const resp = await wb(`country/${sub.country}/indicator/${sub.indicator}?mrv=1`);
const val = Array.isArray(resp) && resp[1]?.[0]?.value;
if (val != null && sub.threshold != null) {
const hit = (sub.direction === 'above' && val > sub.threshold) ||
(sub.direction === 'below' && val < sub.threshold) ||
(sub.direction === 'any');
if (hit) triggered.push({ ...sub, current_value: val });
}
}
_alerts.push(...triggered);
res.json({ ok: true, checked: _alertSubs.size, triggered: triggered.length, alerts: triggered, ts: new Date().toISOString() });
} catch (e) { res.status(500).json({ error: e.message }); }
});
// ═══════════════════════════════════════════════════════════════════════════════
// D-016: DISSG Systemlogg API — audit log queries
// ═══════════════════════════════════════════════════════════════════════════════
router.get('/log', async (req, res) => {
try {
const { limit = 50, event, from, to } = req.query;
const pool = getPool();
let q = 'SELECT * FROM dissg_audit_log WHERE 1=1';
const params = [];
if (event) { q += ` AND event = $${params.length + 1}`; params.push(event); }
if (from) { q += ` AND ts >= $${params.length + 1}`; params.push(from); }
if (to) { q += ` AND ts <= $${params.length + 1}`; params.push(to); }
q += ` ORDER BY ts DESC LIMIT $${params.length + 1}`;
params.push(Math.min(parseInt(limit), 500));
const r = await pool.query(q, params);
res.json({ ok: true, count: r.rows.length, logs: r.rows, ts: new Date().toISOString() });
} catch (e) {
// Fallback if table doesn't exist
res.json({ ok: true, count: 0, logs: [], note: 'DB table pending', ts: new Date().toISOString() });
}
});
router.get('/log/stats', async (req, res) => {
try {
const pool = getPool();
const r = await pool.query(`
SELECT event, COUNT(*) as count, MAX(ts) as last_seen
FROM dissg_audit_log GROUP BY event ORDER BY count DESC
`);
res.json({ ok: true, stats: r.rows, ts: new Date().toISOString() });
} catch (e) {
res.json({ ok: true, stats: [], note: 'DB table pending', ts: new Date().toISOString() });
}
});
// ═══════════════════════════════════════════════════════════════════════════════
// D-019: DISSG API Gateway OAuth2 — rate limiting per tier
// ═══════════════════════════════════════════════════════════════════════════════
router.get('/oauth2/authorize', (req, res) => {
const { client_id, redirect_uri, scope, state, response_type } = req.query;
const html = `
🇸🇪 BNP Sverige
❤️ Livslängd Norden
💼 Arbetslöshet
🗳️ Demokrati
🏛️ Riksdagsbeslut
🌱 CO2
`);
});
router.get('/debate/manifest.json', (_, res) => {
res.json({
name: 'DISSG Debattläge', short_name: 'DISSG',
description: 'Decision Intelligence — statistik för debatt',
start_url: '/api/dissg/debate', display: 'standalone',
background_color: '#0f3460', theme_color: '#e94560',
icons: [{ src: 'https://amos.wavult.com/favicon.ico', sizes: '192x192', type: 'image/png' }]
});
});
// ═══════════════════════════════════════════════════════════════════════════════
// D-020: Signalöversikt Dashboard — animerad SVG, iOS
// ═══════════════════════════════════════════════════════════════════════════════
router.get('/dashboard', async (req, res) => {
res.setHeader('Content-Type', 'text/html; charset=utf-8');
res.send(`