☁️ TrubaxCloud Docs

<!-- Hosted direttamente su TrubaxCloud -->
<script src="http://localhost:4000/sdk/trubaxcloud.js"></script>
<script>
  const app = TrubaxCloud.initializeApp({
    url: 'http://localhost:4000'
  });
</script>

const TrubaxCloud = require('./trubaxcloud');
// oppure
import TrubaxCloud from './trubaxcloud';

const app = TrubaxCloud.initializeApp({
  url: 'http://10.0.2.2:4000' // emulatore Android
});

// 1. Inizializza
const app = TrubaxCloud.initializeApp({ url: 'http://localhost:4000' });

// 2. Login
const user = await app.auth.login('[email protected]', 'password123');

// 3. Leggi dal DB
const result = await app.db.collection('prodotti').doc('abc123').get();
console.log(result.doc);

// 4. Chiama una Cloud Function
const risposta = await app.functions.call('magic', { image: base64 });
console.log(risposta.analysis);

// Registra nuovo utente (REST API)
const res = await fetch('/auth/register', {
  method: 'POST',
  headers: { 'Content-Type': 'application/json' },
  body: JSON.stringify({
    username: 'mario_rossi',      // obbligatorio, unico
    email: '[email protected]',    // obbligatorio, unico
    password: 'password123',      // obbligatorio, min 6 caratteri
    displayName: 'Mario Rossi'    // opzionale
  })
});

// Login
const user = await app.auth.login('[email protected]', 'password');

// Logout
await app.auth.logout();

// Ascolta cambio stato auth (come Firebase)
const unsub = app.auth.onAuthStateChanged(user => {
  if (user) console.log('Loggato:', user.displayName);
  else console.log('Non autenticato');
});
unsub(); // rimuove listener

POST /auth/register          { username, email, password, displayName? }
POST /auth/login             { email, password }  // email può essere anche username
POST /auth/logout            Authorization: Bearer <token>
GET  /auth/me                Authorization: Bearer <token>
PUT  /auth/me                { displayName } — aggiorna nome visualizzato
DELETE /auth/me              { password } — elimina il proprio account (irreversibile)
PUT  /auth/password           { currentPassword, newPassword }
POST /auth/me/avatar         multipart/form-data — upload foto profilo (max 5MB)
GET  /auth/avatar/:id         pubblica, cached 1h — scarica avatar utente
DELETE /auth/me/avatar        rimuovi foto profilo
POST /auth/verify             { token } — verifica token per app esterne
POST /auth/sdk/user           { appSecret, userId } — dati utente per app SDK
POST /auth/send-verification  invia email di verifica (auth)
POST /auth/verify-email       { token } — verifica email
POST /auth/reset-password     { token, newPassword } — reset password con token

const db = app.db;

// Scrivi documento
await db.collection('utenti').doc('user123').set({
  nome: 'Mario',
  eta: 30,
  createdAt: new Date().toISOString()
});

// Leggi documento
const { doc } = await db.collection('utenti').doc('user123').get();
console.log(doc.nome); // Mario

// Aggiorna (merge parziale)
await db.collection('utenti').doc('user123').update({ eta: 31 });

// Elimina
await db.collection('utenti').doc('user123').delete();

// Aggiungi con ID auto
await db.collection('log').add({ evento: 'login', timestamp: Date.now() });

// Lista tutti i documenti
const { docs } = await db.collection('prodotti').get();

// Con limite
const { docs } = await db.collection('prodotti').get({ limit: 20 });

// Con filtro where (REST diretta)
GET /db/prodotti?where=[["prezzo",">","10"]]&orderBy=prezzo&order=asc&limit=50

// Ascolta aggiornamenti in realtime (SSE)
const unsub = db.collection('messaggi').onSnapshot(payload => {
  console.log('Evento:', payload.type, payload.docId, payload.doc);
});

unsub(); // chiude la connessione SSE

await db.batch([
  { type: 'set',    collection: 'items', id: 'a', data: { val: 1 } },
  { type: 'set',    collection: 'items', id: 'b', data: { val: 2 } },
  { type: 'delete', collection: 'items', id: 'c' },
]);

// Lista tutti i documenti di una collection cross-user
// Cerca in tutte le collection u_*_{collectionName}
GET /admin/firestore/:collection
// Risposta: { docs: [...], total: N }

// Leggi singolo documento (cerca in tutte le user collections)
GET /admin/firestore/:collection/:docId

// Aggiorna documento in qualsiasi user collection
PUT /admin/firestore/:collection/:docId
// Body: { campo: valore, ... }

// Elimina documento in qualsiasi user collection
DELETE /admin/firestore/:collection/:docId

// SSE Realtime: ascolta modifiche cross-user
GET /admin/firestore/:collection/_listen
// Eventi SSE: { event: 'added'|'modified'|'removed', doc: {...}, _sourceCollection: 'u_xxx_col' }

// 1. Operatore crea richiesta (user-scoped)
POST /user/firestore/ideaia_operators/op_mario_rossi
{ email: '[email protected]', name: 'Mario Rossi', status: 'pending' }

// 2. Admin lista tutte le richieste pending
GET /admin/firestore/ideaia_operators
// Ritorna documenti da TUTTE le collection u_*_ideaia_operators

// 3. Admin approva operatore
PUT /admin/firestore/ideaia_operators/op_mario_rossi
{ status: 'approved', approvedBy: '[email protected]', approvedAt: '2026-05-04T...' }

// 4. Admin ascolta nuove richieste in realtime
const es = new EventSource('/admin/firestore/ideaia_operators/_listen?token=...');
es.onmessage = (e) => console.log(JSON.parse(e.data));

const storage = app.storage;

// Upload da input file del browser
const file = document.getElementById('fileInput').files[0];
await storage.ref('immagini', 'user123/avatar.jpg').upload(file, {
  contentType: 'image/jpeg'
});

// Ottieni URL di download
const url = storage.ref('immagini', 'user123/avatar.jpg').getDownloadURL();
// → http://localhost:4000/storage/immagini/user123/avatar.jpg

// Elimina file
await storage.ref('immagini', 'user123/avatar.jpg').delete();

// REST: Lista file in bucket
GET /storage-meta/immagini?prefix=user123/

// ── CONTEXT (request HTTP) ──
context.method    // GET, POST, PUT, DELETE
context.headers   // headers della richiesta
context.query     // query string params
context.body      // body JSON della richiesta
context.ip        // IP del chiamante

// ── RESPONSE ──
response.status = 200;
response.body = { messaggio: 'ok' };
response.headers['X-Custom'] = 'valore';
__result = { qualsiasi: 'oggetto' }; // per test console

// ── FETCH (API esterne) ──
const res = await fetch('https://api.esempio.com/data', {
  method: 'POST',
  headers: { 'Content-Type': 'application/json' },
  body: JSON.stringify({ chiave: 'valore' })
});
const data = await res.json();

// ── ENV VARS ──
const apiKey = env.get('GEMINI_API_KEY'); // da Admin → Env Vars

// ── DATABASE ──
const { doc } = await db.get('collezione', 'doc-id');
await db.set('collezione', 'doc-id', { campo: 'valore' });
const { docs } = await db.list('collezione', { limit: 10 });
await db.delete('collezione', 'doc-id');

// ── MESSAGING ──
await messaging.sendEmail('[email protected]', 'Oggetto', '<p>HTML</p>');

// ── BUFFER / BASE64 ──
const buf = Buffer.from(base64String, 'base64');
const b64 = buf.toString('base64');

const apiKey = env.get('GEMINI_API_KEY');
if (!apiKey) {
  response.status = 500;
  response.body = { error: 'GEMINI_API_KEY non configurata' };
  return;
}
const { image, mimeType } = context.body || {};
const geminiRes = await fetch(
  `https://generativelanguage.googleapis.com/v1beta/models/gemini-1.5-flash:generateContent?key=${apiKey}`,
  { method: 'POST', headers: { 'Content-Type': 'application/json' },
    body: JSON.stringify({ contents: [{ parts: [
      { text: 'Descrivi questa immagine in italiano' },
      { inline_data: { mime_type: mimeType, data: image } }
    ]}]})
  }
);
const result = await geminiRes.json();
const text = result.candidates?.[0]?.content?.parts?.[0]?.text;
response.status = 200;
response.body = { success: true, analysis: text };

// Chiama funzione HTTP pubblica
POST /fn/<id-funzione>
Content-Type: application/json
{ "campo": "valore" }

// Via SDK
const res = await app.functions.call('magic', { image: base64 });

const fs = require('fs');
const CLOUD_URL = 'http://localhost:4000';

// 1. Login admin
const { token } = await (await fetch(`${CLOUD_URL}/auth/login`, {
  method: 'POST', headers: { 'Content-Type': 'application/json' },
  body: JSON.stringify({ email: '[email protected]', password: 'password' })
})).json();

// 2. Deploy file HTML singolo
await fetch(`${CLOUD_URL}/hosting/mio-sito/deploy`, {
  method: 'POST',
  headers: { Authorization: `Bearer ${token}`, 'Content-Type': 'application/json' },
  body: JSON.stringify({
    message: 'Deploy v1.0',
    files: [
      { path: 'index.html', content: fs.readFileSync('./dist/index.html', 'utf8') },
      { path: 'style.css',  content: fs.readFileSync('./dist/style.css', 'utf8') },
    ]
  })
});

# Zippa la cartella dist/
zip -r dist.zip dist/

# Ottieni il token
TOKEN=$(curl -s -X POST http://localhost:4000/auth/login \
  -H "Content-Type: application/json" \
  -d '{"email":"[email protected]","password":"password"}' | jq -r .token)

# Deploy ZIP
curl -X POST http://localhost:4000/hosting/mio-sito/deploy-zip \
  -H "Authorization: Bearer $TOKEN" \
  -H "Content-Type: application/zip" \
  -H "X-Deploy-Message: Deploy v1.0" \
  --data-binary @dist.zip

// Via Admin Console: sezione "📋 Deploy History" → clicca "↩️ Rollback"
// Via API:
POST /hosting/:id/rollback
{ "deployId": "deploy_1700000000000" }

// Web Push — registra il service worker e invia la subscription
POST /messaging/subscribe
Authorization: Bearer <token>
{
  "subscription": { // PushSubscription dal browser
    "endpoint": "https://fcm.googleapis.com/...",
    "keys": { "auth": "...", "p256dh": "..." }
  },
  "topics": ["all", "updates"]
}

// Chiama ogni 30s per nuove notifiche
GET /messaging/poll?since=2025-01-01T00:00:00Z&topics=all,updates
Authorization: Bearer <token>

// Risposta
{
  "notifications": [
    { "id": "...", "title": "Update", "body": "Nuova versione!", "topic": "updates" }
  ]
}

POST /messaging/send
Authorization: Bearer <admin-token>
{
  "title": "Aggiornamento v2.0",
  "body": "Nuove funzionalità disponibili!",
  "topic": "updates",
  "url": "https://tuodominio.com/changelog",
  "icon": "/favicon.ico"
}

// Risposta
{ "success": true, "push": { "sent": 12, "errors": 0 } }

// React Native — polling-based
const TrubaxMessaging = {
  async poll(since, topics = ['all']) {
    const qs = `since=${since}&topics=${topics.join(',')}`;
    const res = await fetch(`${CLOUD_URL}/messaging/poll?${qs}`, {
      headers: { Authorization: `Bearer ${token}` }
    });
    return res.json();
  }
};

// Metodo 1: Header x-api-key
x-api-key: tc_live_abc123def456...

// Metodo 2: Bearer token
Authorization: Bearer tc_live_abc123def456...

// Metodo 3: JWT utente (dalla dashboard)
Authorization: Bearer eyJhbGciOi...

// Genera nuova chiave (qualsiasi utente autenticato)
POST /api/keys/generate
Authorization: Bearer <token>
{
  "name": "Idea IA Produzione",
  "services": {              // opzionale, default: tutti abilitati
    "llm": true,
    "vision": true,
    "tts": false,
    "stt": false,
    "webSearch": true
  },
  "expiresAt": null          // null = mai, oppure ISO date string
}

// Risposta
{
  "success": true,
  "apiKey": {
    "id": "uuid-xxx",
    "key": "tc_live_abc123def456...",  // mostrata UNA VOLTA sola
    "name": "Idea IA Produzione",
    "services": { ... },
    "enabled": true,
    "expiresAt": null
  }
}

POST /api/ai/chat
x-api-key: tc_live_xxx
{
  "messages": [
    { "role": "user", "content": "Cos'e un interruttore differenziale?" }
  ],
  "model": "qwen3:8b",           // opzionale, default: auto-fallback
  "temperature": 0.7,            // opzionale
  "maxTokens": 2048              // opzionale
}

// Modelli disponibili: llama3.1:8b (default), qwen2.5-coder:7b, qwen3:8b, deepseek-r1:8b
// Il sistema prova i modelli in sequenza fino a trovarne uno disponibile (fallback automatico)

POST /api/ai/vision
x-api-key: tc_live_xxx
{
  "image": "data:image/jpeg;base64,/9j/...",  // o URL http
  "prompt": "Descrivi questa immagine"       // opzionale
}

// Modello: minicpm-v (locale via Ollama)

GET /api/web-search?q=TrubaxCloud&max=8
x-api-key: tc_live_xxx

// Risposta
{
  "query": "TrubaxCloud",
  "results": [
    { "title": "...", "url": "https://...", "snippet": "..." }
  ],
  "count": 8,
  "source": "cache"    // "cache" | "ddg" | "serpapi" | "none"
}

// source: indica quale livello ha servito la query
//   "cache"   → risultato dalla cache locale (0ms, gratis)
//   "ddg"     → DuckDuckGo live (rate-limited 5s tra chiamate)
//   "serpapi" → SerpAPI fallback (quando DDG è bloccato)
//   "none"    → nessun risultato disponibile

GET /api/web-search?q=arduino+relay&type=images&max=6
x-api-key: tc_live_xxx

// Risposta
{
  "query": "arduino relay",
  "type": "images",
  "results": [
    {
      "title": "...",
      "url": "https://...full-image.jpg",
      "thumbnail": "https://...thumb.jpg",
      "source": "example.com",
      "width": 1200,
      "height": 800
    }
  ],
  "count": 6,
  "source": "serpapi"
}

GET /api/web-search?q=come+installare+differenziale&type=videos&max=6
x-api-key: tc_live_xxx

// Risposta
{
  "query": "come installare differenziale",
  "type": "videos",
  "results": [
    {
      "title": "...",
      "url": "https://youtube.com/...",
      "thumbnail": "https://...thumb.jpg",
      "duration": "12:34",
      "source": "youtube.com",
      "snippet": "..."
    }
  ],
  "count": 6,
  "source": "serpapi"
}

GET /api/extract?url=https://example.com/manual.pdf&chunk_size=3000&chunk=0
x-api-key: tc_live_xxx

// Risposta
{
  "url": "https://example.com/manual.pdf",
  "fileType": "pdf",
  "filename": "manual.pdf",
  "size": 2456789,
  "extractable": true,
  "totalChunks": 12,
  "totalLength": 35420,
  "chunks": ["...testo chunk 0...", "...chunk 1..."],
  "hasMore": true,         // usa ?chunk=N per i successivi
  "pages": 24,
  "info": { "Title": "...", "Author": "..." }
}

GET /api/download?url=https://example.com/firmware.zip
x-api-key: tc_live_xxx

// Risposta
{
  "success": true,
  "filename": "firmware.zip",
  "fileType": "zip",
  "size": 15000000,
  "downloadUrl": "/api/download/file/dl_17...",
  "archiveContents": [
    { "name": "readme.txt", "size": 1024 },
    { "name": "firmware.bin", "size": 14000000 }
  ]
}

POST /api/web-search/deep
x-api-key: tc_live_xxx
{
  "query": "manuale inverter ABB ACS580",
  "maxSources": 3,       // max 5 fonti
  "model": "qwen3:8b"    // opzionale, usa default
}

// Risposta
{
  "query": "manuale inverter ABB ACS580",
  "answer": "Dall'analisi delle fonti trovate...",
  "model": "qwen3:8b",
  "sources": [{ "title": "...", "url": "..." }],
  "extractedContent": [{
    "url": "...", "fileType": "pdf",
    "pages": 120,
    "textPreview": "...primi 500 caratteri..."
  }],
  "sourcesCount": 3
}

GET /api/ai/status

// Risposta
{
  "ollama": { "available": true, "models": [...] },
  "strategy": "local-only",
  "textModels": ["llama3.1:8b", "qwen2.5-coder:7b", "qwen3:8b", "deepseek-r1:8b"],
  "defaultModel": "llama3.1:8b",  // configurabile da admin
  "visionModel": "minicpm-v",
  "apiKeys": { "total": 5, "active": 4 }
}

const API_KEY = 'tc_live_abc123def456...';
const BASE_URL = 'https://ketadl-trubax.ddns.net';

// Chat con LLM locale
async function askAI(question) {
  const res = await fetch(`${BASE_URL}/api/ai/chat`, {
    method: 'POST',
    headers: {
      'x-api-key': API_KEY,
      'Content-Type': 'application/json'
    },
    body: JSON.stringify({
      messages: [{ role: 'user', content: question }]
    })
  });
  const data = await res.json();
  return data.message.content;
}

// Ricerca web
async function webSearch(query) {
  const res = await fetch(
    `${BASE_URL}/api/web-search?q=${encodeURIComponent(query)}`,
    { headers: { 'x-api-key': API_KEY } }
  );
  return (await res.json()).results;
}

── USER FIRESTORE ────────────────────────────────────
GET    /user/firestore                    lista collection utente
GET    /user/firestore/:col               documenti in collection
POST   /user/firestore/:col/:docId?       crea/aggiorna documento
PUT    /user/firestore/:col/:docId        aggiorna documento
DELETE /user/firestore/:col/:docId        elimina documento
DELETE /user/firestore/:col               elimina collection

── USER STORAGE ──────────────────────────────────────
GET    /user/storage                      lista file + stats
POST   /user/storage/upload               upload file (multipart)
GET    /user/storage/file/:path           download file
DELETE /user/storage/file/:path           elimina file

── USER HOSTING ──────────────────────────────────────
GET    /user/hosting                      lista siti utente
POST   /user/hosting                      crea sito
POST   /user/hosting/:id/deploy-zip       deploy ZIP
DELETE /user/hosting/:id                  elimina sito

── USER STATS ────────────────────────────────────────
GET    /user/stats                        statistiche utente
GET    /user/notifications                notifiche utente

// 1. Crea collection aggiungendo il primo doc
const res = await fetch('/user/firestore/prodotti', {
  method: 'POST',
  headers: { Authorization: `Bearer ${token}`, 'Content-Type': 'application/json' },
  body: JSON.stringify({ nome: 'Widget', prezzo: 9.99 })
});
// Documento salvato in u_<tuo-uid>_prodotti

// 2. Lista tutti i tuoi documenti
const docs = await (await fetch('/user/firestore/prodotti', {
  headers: { Authorization: `Bearer ${token}` }
})).json();

{
  "rules": {
    "collections": {
      "utenti": {
        "read":   "auth",        // solo utenti autenticati
        "write":  "owner",       // solo il proprietario del doc
        "delete": "admin"        // solo admin
      },
      "prodotti": {
        "read":   "public",      // chiunque
        "write":  "admin",
        "delete": "admin"
      },
      "magicpics_history": {
        "read":   "public",
        "write":  "public"       // scritto dalle Cloud Functions
      }
    },
    "default": {
      "read":  "auth",
      "write": "admin"
    }
  }
}

// Leggi le tue regole
GET /user/rules
Authorization: Bearer <token>

// Aggiorna regole Firestore
PUT /user/rules/firestore
Authorization: Bearer <token>
{ "rules": "{ \"rules\": { \"*\": { \".read\": \"auth != null\", \".write\": \"auth != null\" } } }" }

// Aggiorna regole Storage
PUT /user/rules/storage
Authorization: Bearer <token>
{ "rules": "{ \"rules\": { \"*\": { \".read\": true, \".write\": \"auth != null\" } } }" }

// Registra una nuova app Android
POST /user/apps/android
Authorization: Bearer <token>
{
  "appName": "Idea IA",
  "packageName": "com.trubax.ideaia",
  "sha256": "AA:BB:CC:DD:..."   // opzionale
}

// Risposta
{
  "success": true,
  "app": {
    "id": "uuid-xxx",
    "packageName": "com.trubax.ideaia",
    "appName": "Idea IA",
    "sha256": "AA:BB:CC:DD:...",
    "platform": "android",
    "apiKeyId": null
  }
}

# Debug key
keytool -list -v -keystore ~/.android/debug.keystore -alias androiddebugkey -storepass android

# Release key
keytool -list -v -keystore <percorso-keystore> -alias <alias>

# Cerca la riga: SHA256: AA:BB:CC:DD:EE:FF:...

object TrubaxCloud {
    private const val BASE_URL = "https://ketadl-trubax.ddns.net/cloud"
    private const val API_KEY  = "tc_live_xxx..."

    suspend fun chat(prompt: String): String {
        val client = OkHttpClient()
        val json = """{"messages":[{"role":"user","content":"$prompt"}]}"""
        val body = json.toRequestBody("application/json".toMediaType())
        val request = Request.Builder()
            .url("$BASE_URL/api/ai/chat")
            .addHeader("x-api-key", API_KEY)
            .post(body).build()
        return client.newCall(request).execute().body!!.string()
    }
}

const app = TrubaxCloud.initializeApp({
  url: 'http://localhost:4000'  // URL del tuo server TrubaxCloud
});
// app.auth — servizio autenticazione
// app.db   — servizio database
// app.storage — servizio storage
// app.functions — servizio cloud functions

const CLOUD_URL = __DEV__
  ? 'http://10.0.2.2:4000'   // emulatore Android
  : 'http://ketadl-trubax.ddns.net:4000'; // produzione

export const TrubaxFunctions = {
  async call(functionId: string, data: Record<string, unknown>) {
    const res = await fetch(`${CLOUD_URL}/fn/${functionId}`, {
      method: 'POST',
      headers: { 'Content-Type': 'application/json' },
      body: JSON.stringify(data)
    });
    return res.json();
  }
};

── AUTH ────────────────────────────────────────────────
POST   /auth/register          { email, password, displayName? }
POST   /auth/login             { email, password }
POST   /auth/logout            Bearer token
GET    /auth/me                Bearer token
PUT    /auth/me                Bearer token + { displayName }
DELETE /auth/me                Bearer token + { password } elimina account
PUT    /auth/password          { currentPassword, newPassword }
POST   /auth/me/avatar         multipart upload foto profilo (max 5MB)
GET    /auth/avatar/:id        scarica avatar utente (pubblico, cached 1h)
DELETE /auth/me/avatar         rimuovi foto profilo
POST   /auth/verify            { token, appSecret? } → user info + avatar (per SDK)
POST   /auth/sdk/user          { appSecret, userId } → dati utente per app SDK
POST   /auth/send-verification  invia email di verifica (auth)
POST   /auth/verify-email       { token } — verifica email
GET    /auth/verify-email       ?token= — verifica via link email
POST   /auth/reset-password     { token, newPassword } — reset con token admin

── FIRESTORE ────────────────────────────────────────────
GET    /db/:collection                ?limit=&orderBy=&where=[]
GET    /db/:collection/:docId
PUT    /db/:collection/:docId         body = documento JSON
DELETE /db/:collection/:docId
POST   /db/_batch                     { ops: [{type,collection,id,data}] }
GET    /db/:collection/_listen        SSE stream

── STORAGE ──────────────────────────────────────────────
POST   /storage/:bucket/:path         { data: base64, contentType }
GET    /storage/:bucket/:path         → file binario
DELETE /storage/:bucket/:path
GET    /storage-meta/:bucket          ?prefix=

── CLOUD FUNCTIONS ──────────────────────────────────────
ALL    /fn/:id                        chiamata pubblica HTTP
GET    /functions                     lista (admin)
POST   /functions                     crea (admin)
PUT    /functions/:id                 aggiorna (admin)
DELETE /functions/:id                 elimina (admin)
POST   /functions/:id/execute         test (admin)
GET    /functions-env                 env vars (admin)
PUT    /functions-env/:key            imposta var (admin)
DELETE /functions-env/:key            elimina var (admin)

── HOSTING ──────────────────────────────────────────────
GET    /hosting                       lista siti (admin)
POST   /hosting                       crea sito (admin)
PUT    /hosting/:id                   aggiorna sito (admin)
DELETE /hosting/:id                   elimina sito (admin)
POST   /hosting/:id/deploy            deploy file JSON (admin)
POST   /hosting/:id/deploy-zip        deploy ZIP binario (admin)
POST   /hosting/:id/rollback          { deployId } (admin)
GET    /sites/:slug/                  sito live (pubblico)

── MESSAGING ────────────────────────────────────────────
POST   /messaging/subscribe           registra dispositivo push
GET    /messaging/poll                ?since=&topics=  (polling)
POST   /messaging/send                invia notifica (admin)
GET    /messaging/notifications       lista notifiche (admin)
DELETE /messaging/notifications/:id   elimina notifica (admin)
GET    /messaging/subscriptions       lista dispositivi (admin)
GET    /messaging/vapid-public-key   chiave pubblica VAPID
POST   /messaging/unsubscribe       rimuovi dispositivo
POST   /messaging/read/:id          segna notifica come letta

── API KEYS ─────────────────────────────────────────────
POST   /api/keys/generate         genera chiave (auth utente)
GET    /api/keys/list             lista chiavi (admin: tutte, user: proprie)
GET    /api/keys/reveal/:id       rivela chiave completa (owner/admin)
PUT    /api/keys/update/:id       aggiorna nome, servizi, scadenza
PUT    /api/keys/toggle/:id       abilita/disabilita chiave
DELETE /api/keys/client/:id       elimina chiave (owner/admin)

── AI SERVICES (richiede API Key o JWT) ──────────────────
POST   /api/ai/chat               LLM chat (Ollama locale, fallback automatico)
POST   /api/ai/vision             Vision (minicpm-v locale o Gemini 2.0 Flash)
POST   /api/ai/vision/video       Video AI (FFmpeg + Vision, max 60s)
POST   /api/ai/rag-pdf            RAG PDF (domanda su documento PDF)
GET    /api/ai/status             stato modelli + chiavi + defaultModel
GET    /api/ai/log?limit=50       log interazioni IA (admin)
GET    /api/web-search?q=&max=&type=  ricerca web/images/videos
GET    /api/web-scrape?url=       scraping contenuto HTML pagina

── DOCUMENT EXTRACTION & DOWNLOAD (v4.0) ────────────────
GET    /api/extract?url=&chunk_size=&chunk=  estrai testo (PDF/DOCX/XLSX/PPTX/CSV/TXT/HTML)
GET    /api/download?url=         scarica qualsiasi file (ZIP/APK/ROM/binari)
GET    /api/download/file/:name   serve file scaricato
GET    /api/download/list         lista file scaricati (admin)
DELETE /api/download/clean        pulisci download >24h (admin)
POST   /api/web-search/deep       { query, maxSources, type, model } ricerca+estrai+analisi LLM

── AI ADMIN (solo admin) ─────────────────────────────────
PUT    /api/ai/default-model      { model } imposta modello default
GET    /api/ai/default-model      leggi modello default + fallbackOrder
POST   /api/ai/test-model         { model, prompt } testa modello specifico
GET    /api/web-search/stats      statistiche cache (admin)
DELETE /api/web-search/cache      svuota cache ricerche (admin)

── YOUTUBE PROXY API (per SpotifyX) ──────────────────────
GET    /api/yt/search?q=           ricerca musica (Piped)
GET    /api/yt/streams/:videoId   streaming audio (Piped)
GET    /api/yt/trending           trending IT (Piped)

── ADMIN EMAIL & CONFIG (solo admin) ───────────────────
GET    /auth/admin/email-config   configurazione SMTP (pass mascherata)
PUT    /auth/admin/email-config   aggiorna configurazione SMTP
POST   /auth/admin/send-email    invia email generica (admin)

── SECURITY RULES ADMIN (solo admin) ──────────────────────
GET    /auth/admin/rules           regole globali
PUT    /auth/admin/rules/firestore   aggiorna regole Firestore globali
PUT    /auth/admin/rules/storage     aggiorna regole Storage globali

── ADMIN STATS EXTENDED (solo admin) ──────────────────────
GET    /auth/admin/full-stats      statistiche complete (auth + firestore + storage)
GET    /auth/admin/all-stats       statistiche complete (funzioni + hosting)

── WEBRTC TURN/STUN SERVER ────────────────────────────────
POST   /api/webrtc/credentials    credenziali ICE per WebRTC
GET    /api/webrtc/status         stato TURN/STUN
POST   /api/webrtc/start          avvia server TURN (admin)
POST   /api/webrtc/stop           ferma server TURN (admin)
GET    /api/webrtc/config         configurazione TURN
PUT    /api/webrtc/config         aggiorna configurazione TURN

── GEO SERVICES (geocoding, routing, geofence, presenze) ───
GET    /api/geo/geocode?q=&limit=  geocoding indirizzo
GET    /api/geo/reverse?lat=&lng=  reverse geocoding
GET    /api/geo/route?lat1=&lng1=&lat2=&lng2=  percorso stradale (OSRM)
GET    /api/geo/navigate?lat1=&lng1=&lat2=&lng2=&destName=  navigazione turn-by-turn
POST   /api/geo/geofence          check se punto dentro zona
POST   /api/geo/attendance/full  presenze complete (auto-detect)
GET    /api/geo/attendance/summary?user=&date=  riepilogo giornata
GET/POST/PUT/DELETE /api/geo/zones  CRUD zone geofence

── USER CONSOLE (scoped per utente) ──────────────────────
GET    /user/firestore                lista collection utente
GET    /user/firestore/:col           documenti collection
POST   /user/firestore/:col/:docId?  crea documento
PUT    /user/firestore/:col/:docId   aggiorna documento
DELETE /user/firestore/:col/:docId   elimina documento
DELETE /user/firestore/:col           elimina collection
GET    /user/storage                  lista file utente
POST   /user/storage/upload           upload file (multipart)
GET    /user/storage/file/:path       download file
DELETE /user/storage/file/:path       elimina file
GET    /user/hosting                  lista siti utente
POST   /user/hosting                  crea sito
POST   /user/hosting/:id/deploy-zip   deploy ZIP
DELETE /user/hosting/:id              elimina sito
GET    /user/stats                    statistiche utente
GET    /user/notifications            notifiche utente

── USER SECURITY RULES ──────────────────────────────────
GET    /user/rules                    leggi regole utente
PUT    /user/rules/firestore          aggiorna regole Firestore
PUT    /user/rules/storage            aggiorna regole Storage

── APP ANDROID ──────────────────────────────────────────
POST   /user/apps/android             registra app Android
GET    /user/apps                     lista app utente
PUT    /user/apps/:id                 aggiorna app
DELETE /user/apps/:id                 elimina app
GET    /auth/admin/android-apps      lista tutte le app (admin)

── ADMIN: GESTIONE UTENTI ───────────────────────────────
GET    /auth/admin/users              lista utenti
DELETE /auth/admin/users/:id          elimina utente
PUT    /auth/admin/users/:id/toggle   abilita/disabilita
PUT    /auth/admin/users/:id/role     { role: "admin"|"user" }
GET    /auth/admin/users/:id/data     dati utente (firestore/storage/hosting)
POST   /auth/admin/reset-password     { userId } → link reset

const formData = new FormData();
formData.append('avatar', fileInput.files[0]);

const res = await fetch('/auth/me/avatar', {
  method: 'POST',
  headers: { 'Authorization': 'Bearer ' + token },
  body: formData
});
const data = await res.json();
// data.avatarUrl → "/auth/avatar/abc123"

// Quando un utente accede alla tua app tramite TrubaxCloud:
const res = await fetch('https://tuoserver.com/auth/verify', {
  method: 'POST',
  headers: { 'Content-Type': 'application/json' },
  body: JSON.stringify({ token: userToken })
});
const { user } = await res.json();

// user.avatar → "/auth/avatar/abc123" (URL pubblica)
// user.displayName → "Mario Rossi"
// user.email → "[email protected]"

// Mostra avatar nell'app:
document.getElementById('userAvatar').src = serverUrl + user.avatar;

// File statico servito dal server
self.addEventListener('push', function(e) {
  var d = { title: 'TrubaxCloud', body: 'Nuova notifica' };
  try { d = Object.assign(d, e.data.json()); } catch(x) {}
  e.waitUntil(self.registration.showNotification(d.title, {
    body: d.body, icon: d.icon || '/favicon.ico'
  }));
});

self.addEventListener('notificationclick', function(e) {
  e.notification.close();
  e.waitUntil(clients.openWindow(e.notification.data?.url || '/'));
});

// 1. Registra service worker
const reg = await navigator.serviceWorker.register('sw-push.js');
await navigator.serviceWorker.ready;

// 2. Ottieni VAPID key
const vapid = await fetch('/messaging/vapid-public-key').then(r => r.json());

// 3. Subscribe
const sub = await reg.pushManager.subscribe({
  userVisibleOnly: true,
  applicationServerKey: urlBase64ToUint8Array(vapid.publicKey)
});

// 4. Invia subscription al server
await fetch('/messaging/subscribe', {
  method: 'POST',
  headers: { 'Authorization': 'Bearer ' + token, 'Content-Type': 'application/json' },
  body: JSON.stringify({ subscription: sub.toJSON(), topics: ['all'] })
});

── Database (auth.db) ───────────────────────────────
users.avatar      TEXT   →  "/auth/avatar/{userId}"
users.displayName TEXT   →  "Mario Rossi"
users.metadata    TEXT   →  '{"bio":"...","phone":"..."}'

── File System ──────────────────────────────────────
data/avatars/{userId}.jpg|png|gif|webp

── Endpoints ────────────────────────────────────────
POST   /auth/me/avatar      upload (multipart, max 5MB)
GET    /auth/avatar/:id     serve immagine (public, cached 1h)
DELETE /auth/me/avatar      rimuovi avatar
PUT    /auth/me             aggiorna displayName
DELETE /auth/me             elimina account (richiede password)

── SDK Integration ─────────────────────────────────
POST /auth/verify    → response.user.avatar
POST /auth/sdk/user  → response.user.avatar

// Ricerca pubblica (no auth)
GET /search/scrape?q=query&max=10

// Response
{ "query": "...", "results": [...], "count": 10, "source": "ddg" }

GET  /user/storage?type=drive     // Lista file (escludi chat-images)
POST /user/storage/upload          // Upload file (multipart)
GET  /user/storage/file/:path      // Download file
DELETE /user/storage/file/:path    // Elimina file

// Query params
?type=drive   → solo file Drive
?type=chat    → solo chat-images
?token=JWT    → auth via URL (per img tag)

GET   /user/mail/:box              // box = inbox|sent|drafts|trash
POST  /user/mail/send              // { to, subject, body, html }
PATCH /user/mail/:box/:id          // { read, starred, _delete }

// Response GET
{ "mails": [...], "total": 42 }

// Response POST send
{ "success": true, "mail": {...}, "smtpSent": true|false }

// Geocoding
https://nominatim.openstreetmap.org/search?q=...

// Routing
https://router.project-osrm.org/route/v1/driving/{lon1},{lat1};{lon2},{lat2}

POST /api/ai/chat
Authorization: Bearer {token}
Content-Type: application/json

{
  "messages": [{ "role": "user", "content": "Ciao" }],
  "model": "llama3.1:8b",
  "temperature": 0.7,
  "maxTokens": 2000
}

// Response
{ "response": "Ciao! Come posso aiutarti?" }

GET /api/ai/status   // Lista modelli installati

// Response
{ "textModels": ["llama3.1:8b", "qwen2.5:7b", ...] }

// Proxy Tor (supporta .onion)
GET /api/tor-proxy?url=http://example.onion

// Check IP
GET /api/ip-check
{ "clientIp": "1.2.3.4", "serverIp": "5.6.7.8" }

// STT - Speech to Text (upload audio, get text)
POST /api/stt
Content-Type: multipart/form-data
file: audio.webm

{ "text": "Testo riconosciuto", "confidence": 0.95 }

// TTS - Text to Speech (get audio)
POST /api/tts
{ "text": "Ciao mondo", "lang": "it-IT", "voice": "female" }

Response: audio/mpeg (MP3 stream)

// Admin Console → Apps → Nuova App
Nome: Idea IA
Package: com.ideaia
Slug: ideaia
Redirect URI: ideaia://auth/callback

// Ottieni App Secret per SDK
APP_SECRET: tc_app_xxxxxxxxxxxxx

// Collection: ideaia_operators
{
  id: 'op_mario_rossi',
  email: '[email protected]',
  name: 'Mario Rossi',
  status: 'pending' | 'approved' | 'rejected' | 'removed',
  createdAt: '2026-05-04T...',
  approvedAt?: '...',
  approvedBy?: '[email protected]'
}

// Admin emails autorizzate
'[email protected]', '[email protected]'

// Tipi notifica supportati
'rapportino'  // Notifiche rapportino giornaliero
'approval'    // Richieste approvazione (solo admin)
'chat'        // Messaggi chat
'reminder'    // Promemoria urgenti
'welcome'     // Benvenuto dopo approvazione

// API Navigazione
GET /api/geo/navigate?lat1=...&lng1=...&lat2=...&lng2=...&destName=...

// Risposta
{
  destination: 'Cantiere Via Roma',
  distance: { km: 5.2, text: '5.2 km' },
  duration: { minutes: 12, text: '12 min' },
  steps: [{ step: 1, icon: '🚗', instruction: 'Parti verso nord', ... }],
  geometry: { type: 'LineString', coordinates: [[lng, lat], ...] }
}

// Storage immagini chat
Bucket: 'chat-images'
Path: 'chat-images/{chatId}/{messageId}.jpg'

// Recupero immagine
GET /storage/chat-images/{chatId}/{messageId}.jpg

// Analisi immagine con Vision AI
POST /api/ai/vision
{ image: 'base64...', prompt: 'Analizza questo impianto' }

// Upload manuale PDF
POST /api/documents/upload
Content-Type: multipart/form-data
{ file: PDF, category: 'comelit', subcategory: 'antifurto' }

// Ricerca semantica nei manuali
POST /api/documents/search
{ query: 'come collegare sensore volumetrico', category: 'comelit' }

// Risposta con chunks rilevanti
{ results: [{ content: '...', page: 15, score: 0.92 }] }

# Mobile Debug
cd "C:\Users\Trubax\Desktop\BETA\IDEA IA"
npx react-native run-android

# Mobile Release
cd android
.\gradlew.bat assembleRelease

# Web Build & Deploy
cd "C:\Users\Trubax\Desktop\BETA\Idea ia web"
npm run build
node deploy.js

// Admin Console → Apps → Nuova App
Nome: TrubaxSearch
Package: com.trubaxsearch
Slug: trubaxsearch
Redirect URI: trubaxsearch://auth/callback

# Richiede keystore per release
cd "C:\Users\Trubax\Desktop\BETA\trubax-search\android"

# Genera keystore (una volta sola)
keytool -genkeypair -v -storetype PKCS12 -keystore release.keystore ^
  -alias trubaxsearch -keyalg RSA -keysize 2048 -validity 10000

# Configura in gradle.properties
MYAPP_RELEASE_STORE_FILE=release.keystore
MYAPP_RELEASE_KEY_ALIAS=trubaxsearch
MYAPP_RELEASE_STORE_PASSWORD=xxxxx
MYAPP_RELEASE_KEY_PASSWORD=xxxxx

# Build
.\gradlew.bat assembleRelease