src/portal-packages.ts

Functions

Imports

It imports src/env.ts, src/http.ts, src/ops-feed.ts, src/ops-packages.ts, src/portal-auth.ts, src/shared-code.ts. Imported by src/routes.ts.

Source

1import type { Env } from "./env";
2import { OPS_RETURN_TO } from "./ops-feed";
3import { packageHistory, readPackageRow, type FetchLike } from "./ops-packages";
4import { portalGate } from "./portal-auth";
5import { readSharedCode } from "./shared-code";
6import { textResponse } from "./http";
7
8// The Packages view's on-demand history: GET /portal/api/packages/history?name=. The
9// daily downloads come from npm's range API when the view asks, not pass by pass
10// and are cached (src/ops-packages.ts). A route, not
11// a tool, so no grant is checked here (one enforcement point, test/route-gates.test.ts): it
12// answers to portalGate, and src/scope.ts lists it among the routes gated some other
13// way. Only a configured package can be asked for, so the route cannot be used to
14// fetch any name from npm.
15
16export const PORTAL_PACKAGE_HISTORY_PATH = "/portal/api/packages/history";
17
18export async function handlePortalPackageHistory(
19  request: Request,
20  env: Env,
21  now: Date = new Date(),
22  fetchImpl: FetchLike = (url, init) => fetch(url, init)
23): Promise<Response> {
24  const gate = await portalGate(request, env, now, OPS_RETURN_TO);
25  if (!gate.ok) return gate.response;
26  const name = new URL(request.url).searchParams.get("name")?.trim() ?? "";
27  if (!name || name.length > 214) return textResponse("name must be a configured package's npm name.", 400);
28  const cfg = await readPackageRow(env.DB, name);
29  if (!cfg) return textResponse(`${name} is not a configured package.`, 404);
30  const body = await packageHistory(env, cfg, fetchImpl, now);
31  return new Response(JSON.stringify(body), { status: 200, headers: { "Content-Type": "application/json", "Cache-Control": "no-store" } });
32}
33
34// The Shared code view's read: GET /portal/api/shared-code (src/shared-code.ts). Like the
35// history above it answers to portalGate and nothing else, writes only its own hour-long
36// cache, and reads GitHub only for the configured packages and the configured sites' repos.
37export const PORTAL_SHARED_CODE_PATH = "/portal/api/shared-code";
38
39export async function handlePortalSharedCode(request: Request, env: Env, now: Date = new Date()): Promise<Response> {
40  const gate = await portalGate(request, env, now, OPS_RETURN_TO);
41  if (!gate.ok) return gate.response;
42  const body = await readSharedCode(env, now);
43  return new Response(JSON.stringify(body), { status: 200, headers: { "Content-Type": "application/json", "Cache-Control": "no-store" } });
44}