src/portal-host.ts

Functions

Imports

It imports no other module of this repo. Imported by src/digest.ts, src/index.ts, src/ops-feed.ts, src/portal-actions.ts, src/portal-app.ts, src/portal-auth.ts, src/push.ts, src/routes.ts.

Source

1// Capsid Portal on its own host ("one address pattern for the family"):
2// https://portal.dustinedwards.info, a Custom Domain on this Worker. It is a
3// separate origin from every public site, and its cookies are host-only.
4//
5// The Portal's routes are written once, under /portal (src/routes.ts). On the Portal host a
6// request for /x is handled as /portal/x, so every route, the gate and every check apply
7// unchanged; the workers.dev /portal keeps answering as before until the new address is
8// verified live, and is then retired by a follow-up PR. Two exceptions on the Portal host:
9//   - a browser asking for /portal/... is sent to the same path at the root (308), so an
10//     old link lands on the new address;
11//   - /portal/assets/... is served as it is, not redirected. The built app names its
12//     hashed files by that absolute path (dashboard/vite.config.ts base), on both hosts.
13// Nothing else is reachable on the Portal host: /mcp, /health and the /ops routes are on
14// mcp.dustinedwards.info (src/mcp-host.ts), and on this host they are Portal paths behind
15// the gate.
16
17// The same values as portal-auth's PORTAL_PATH and PORTAL_PREFIX, stated here rather than
18// imported, because portal-auth imports this module.
19const PORTAL_PATH = "/portal";
20const PORTAL_PREFIX = "/portal/";
21
22export const PORTAL_HOST = "portal.dustinedwards.info";
23const PORTAL_ASSETS_PREFIX = "/portal/assets/";
24
25export function isPortalHost(url: URL): boolean {
26  return url.hostname === PORTAL_HOST;
27}
28
29/** The Portal's path as the browser sees it: "" on the Portal host, "/portal" elsewhere. */
30export function portalBase(url: URL): string {
31  return isPortalHost(url) ? "" : PORTAL_PATH;
32}
33
34/** Where the Portal's cookies are scoped: the whole Portal host, or /portal elsewhere.
35 *  Never a Domain attribute, so no other subdomain of the family can read or set them. */
36export function portalCookiePath(url: URL): string {
37  return isPortalHost(url) ? "/" : PORTAL_PATH;
38}
39
40/** An internal Portal path (/portal, /portal/x) as the browser on this host names it. */
41export function publicPortalPath(url: URL, internal: string): string {
42  if (!isPortalHost(url)) return internal;
43  if (internal === PORTAL_PATH) return "/";
44  return internal.startsWith(PORTAL_PREFIX) ? internal.slice(PORTAL_PATH.length) : internal;
45}
46
47/** A path the browser may be sent to on this origin: one leading slash and no backslash.
48 *  "//host/x" and "/\\host/x" are protocol-relative to a browser and would leave the origin. */
49export function isSameOriginPath(path: string): boolean {
50  return path.startsWith("/") && !path.startsWith("//") && !path.includes("\\");
51}
52
53/** On the Portal host: a redirect for an old /portal path, or the request rewritten to its
54 *  internal /portal path. Anywhere else: the request unchanged. */
55export function portalHostRequest(request: Request): { redirect: Response } | { request: Request } {
56  const url = new URL(request.url);
57  if (!isPortalHost(url)) return { request };
58  const path = url.pathname;
59  const underPortal = path === PORTAL_PATH || path.startsWith(PORTAL_PREFIX);
60  if (underPortal && !path.startsWith(PORTAL_ASSETS_PREFIX)) {
61    const publicPath = publicPortalPath(url, path);
62    // /portal//attacker.example would otherwise become a 308 to https://attacker.example/,
63    // carrying an OAuth code or a phishing visitor off the host (Grok audit 2026-10, C1).
64    if (!isSameOriginPath(publicPath)) return { redirect: new Response("Not found", { status: 404 }) };
65    const target = new URL(publicPath + url.search, url.origin);
66    // 308 keeps the method and body, so a stray POST to an old address is not turned
67    // into a GET.
68    return { redirect: new Response(null, { status: 308, headers: { Location: target.toString(), "Cache-Control": "no-store" } }) };
69  }
70  if (underPortal) return { request };
71  const inner = new URL(url);
72  inner.pathname = path === "/" ? PORTAL_PREFIX : PORTAL_PATH + path;
73  return { request: new Request(inner.toString(), request) };
74}