feat: harden admin security, add AI trip planner, map view, and SEO/notification improvements

Security: - requireAdmin() session check added to every admin-only server action (previously relied only on middleware path matching, which Next.js Server Actions don't reliably respect) - Real Prisma + bcrypt admin auth, replacing hardcoded credentials; split into an Edge-safe auth.config.ts (used by proxy.ts) and the full Prisma-backed auth.ts (route handler, server actions, server components) - Removed hardcoded fallback secret on the Instagram sync cron endpoint - Honeypot field + per-IP rate limiting on contact/business-submission forms and the analytics events endpoint Features: - AI trip planner (/plan-olustur, /plan/[id]) backed by DeepSeek, grounded to only recommend isLocalApproved listings, with a deterministic link-injection fallback for anything the model doesn't format as markdown - Interactive Leaflet/OpenStreetMap view on category listing pages - Telegram notifications for new contact messages and business submissions SEO: - Brand-consistent favicon/apple-icon/PWA icons and default Open Graph/ Twitter share images, generated via next/og (replacing default Next.js placeholders) - BreadcrumbList structured data on category and listing detail pages - Fixed two remaining raw <img> tags to use next/image Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
2026-08-24 00:01:06 +03:00
parent 390bd699a6
commit 1b8cfeda95
62 changed files with 2216 additions and 411 deletions
@@ -0,0 +1,65 @@
+import { getTranslations, setRequestLocale } from 'next-intl/server'
+import { mockDb } from '@/lib/mockDb'
+import PlannerForm from './PlannerForm'
+import type { Metadata } from 'next'
+import { basicMetadata } from '@/lib/seo'
+
+interface Props {
+  params: Promise<{ locale: string }>
+}
+
+export async function generateMetadata({ params }: Props): Promise<Metadata> {
+  const { locale } = await params
+  const t = await getTranslations({ locale, namespace: 'planner' })
+  return basicMetadata(`${t('title')} — Marmaris Local`, t('subtitle'), locale)
+}
+
+export default async function PlanOlusturPage({ params }: Props) {
+  const { locale } = await params
+  setRequestLocale(locale)
+
+  const t = await getTranslations('planner')
+  const neighborhoods = await mockDb.getNeighborhoods()
+
+  const getLocalizedName = (obj: any) => {
+    if (!obj) return ''
+    return locale === 'ru' ? obj.nameRu : locale === 'en' ? obj.nameEn : obj.nameTr
+  }
+
+  const neighborhoodOptions = neighborhoods.map(n => ({
+    value: n.slug,
+    label: getLocalizedName(n)
+  }))
+
+  return (
+    <div className="flex-1 flex flex-col min-h-screen bg-stone text-ink">
+      <main className="max-w-2xl mx-auto px-4 sm:px-6 lg:px-8 py-12 flex-1 w-full">
+        <div className="bg-paper p-8 rounded-3xl border border-pine/8 shadow-sm">
+          <div className="mb-8 border-b border-dashed border-pine/8 pb-6">
+            <h1 className="text-3xl font-heading font-extrabold text-pine lowercase">
+              {t('title')}
+            </h1>
+            <p className="text-sm text-shutter mt-2">
+              {t('subtitle')}
+            </p>
+          </div>
+
+          <PlannerForm
+            locale={locale}
+            translations={{
+              days: t('days'),
+              style: t('style'),
+              neighborhoods: t('neighborhoods'),
+              generate: t('generate'),
+              generating: t('generating'),
+              gastronomy: t('styles.gastronomy'),
+              relaxation: t('styles.relaxation'),
+              adventure: t('styles.adventure'),
+            }}
+            neighborhoods={neighborhoodOptions}
+          />
+        </div>
+      </main>
+    </div>
+  )
+}