src/portal-claims.ts

Functions

Imports

It imports src/env.ts, src/http.ts, src/job-claims-read.ts, src/ops-feed.ts, src/ops-types/claims.ts, src/portal-auth.ts. Imported by src/routes.ts.

Source

1import type { Env } from "./env";
2import { claimsFilterFrom, readClaimsAggregate, readJobClaims } from "./job-claims-read";
3import { OPS_RETURN_TO } from "./ops-feed";
4import type { PortalClaimsAggregate, PortalClaimsJob } from "./ops-types/claims";
5import { portalGate } from "./portal-auth";
6import { jsonResponse, textResponse } from "./http";
7
8// The Portal's Claims view: GET /portal/api/claims. The same readers the `capsid_admin_read_claims` tool
9// uses (src/job-claims-read.ts), so the view and the tool cannot disagree. A route, not
10// a tool, so no grant is checked here (one enforcement point, test/route-gates.test.ts): it
11// answers to portalGate, the administrator's Access session, and src/scope.ts lists it
12// among the routes gated some other way.
13
14export const PORTAL_CLAIMS_PATH = "/portal/api/claims";
15
16const MAX_JOB_ID = 64;
17
18/** GET /portal/api/claims?job=<id>: one job's claims, evaluations and touches.
19 *  GET /portal/api/claims?namespace=&agent=&since=&until=: the per-agent aggregate. */
20export async function handlePortalClaims(request: Request, env: Env, now: Date = new Date()): Promise<Response> {
21  const gate = await portalGate(request, env, now, OPS_RETURN_TO);
22  if (!gate.ok) return gate.response;
23  const url = new URL(request.url);
24  const id = url.searchParams.get("job")?.trim();
25  if (id) {
26    if (id.length > MAX_JOB_ID) return textResponse(`a job id is at most ${MAX_JOB_ID} characters.`, 400);
27    const job = await readJobClaims(env.DB, id);
28    if (!job) return jsonResponse({ error: `no job ${id}` }, 404);
29    const body: PortalClaimsJob = { generated: now.toISOString(), ...job };
30    return jsonResponse(body);
31  }
32  const parsed = claimsFilterFrom({
33    namespace: url.searchParams.get("namespace"),
34    agent: url.searchParams.get("agent"),
35    since: url.searchParams.get("since"),
36    until: url.searchParams.get("until"),
37  });
38  if (!parsed.ok) return textResponse(parsed.refusal, 400);
39  const body: PortalClaimsAggregate = { generated: now.toISOString(), ...(await readClaimsAggregate(env.DB, parsed.filter)) };
40  return jsonResponse(body);
41}