Initial release v1.0.0

Open-source marketplace for AI Agent skills.

Features:
- Next.js 15 web app with i18n (en/fa)
- CLI tool for skill installation (npx skillhub)
- GitHub crawler/indexer with multi-strategy discovery
- Security scanning for all indexed skills
- Self-hostable with Docker

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

apps/web/app/api/newsletter/unsubscribe/route.ts

@@ -0,0 +1,77 @@
+import type { NextRequest } from 'next/server';
+import { NextResponse } from 'next/server';
+import { createDb } from '@skillhub/db';
+import { emailSubscriptionQueries } from '@skillhub/db';
+import { withRateLimit, createRateLimitResponse } from '@/lib/rate-limit';
+
+const PRIMARY_URL = process.env.PRIMARY_URL || process.env.NEXT_PUBLIC_APP_URL || 'https://skills.palebluedot.live';
+
+export async function POST(request: NextRequest) {
+  try {
+    // Rate limiting (reuse 'search' tier: 60/min)
+    const rateLimitResult = await withRateLimit(request, 'search');
+    if (!rateLimitResult.allowed) {
+      return createRateLimitResponse(rateLimitResult, 'search');
+    }
+
+    // POST is already blocked by middleware on mirror servers (503)
+    const body = await request.json();
+    const { email } = body;
+
+    if (!email || typeof email !== 'string') {
+      return NextResponse.json(
+        { error: 'Email is required' },
+        { status: 400 }
+      );
+    }
+
+    const db = createDb();
+    await emailSubscriptionQueries.unsubscribe(db, email);
+
+    // Always return success to prevent email enumeration
+    return NextResponse.json({
+      success: true,
+      unsubscribed: true,
+    });
+  } catch (error) {
+    console.error('[Newsletter] Unsubscribe error:', error);
+    return NextResponse.json(
+      { error: 'An error occurred. Please try again.' },
+      { status: 500 }
+    );
+  }
+}
+
+/**
+ * GET handler for one-click unsubscribe links in emails
+ * Redirects to homepage after unsubscribing
+ * On mirror servers, redirects to primary server for the unsubscribe action
+ */
+export async function GET(request: NextRequest) {
+  try {
+    const email = request.nextUrl.searchParams.get('email');
+
+    if (!email) {
+      return NextResponse.redirect(new URL('/', PRIMARY_URL));
+    }
+
+    // On mirror server, redirect to primary for write operation
+    const isPrimary = process.env.IS_PRIMARY_SERVER !== 'false';
+    if (!isPrimary) {
+      return NextResponse.redirect(
+        `${PRIMARY_URL}/api/newsletter/unsubscribe?email=${encodeURIComponent(email)}`
+      );
+    }
+
+    const db = createDb();
+    await emailSubscriptionQueries.unsubscribe(db, email);
+
+    // Redirect to homepage with unsubscribe confirmation
+    const redirectUrl = new URL('/', PRIMARY_URL);
+    redirectUrl.searchParams.set('unsubscribed', 'true');
+    return NextResponse.redirect(redirectUrl);
+  } catch (error) {
+    console.error('[Newsletter] Unsubscribe GET error:', error);
+    return NextResponse.redirect(new URL('/', request.url));
+  }
+}