app/lib/webmention/decide.server.ts

Functions

Imports

It imports app/db/index.ts, app/lib/cache-purge.server.ts, app/lib/editor/publish-policy.mjs. Imported by app/lib/operator/api.server.ts, app/routes/admin.mentions.tsx.

Source

1import { decideWebmention, deleteWebmention } from "~/db";
2import { purgePost } from "~/lib/cache-purge.server";
3import { PolicyError, WRITE_CAPABILITIES, type Actor } from "~/lib/editor/publish-policy.mjs";
4
5// Write and purge are one function: a forgotten purge is invisible, the page just stays stale.
6// Delete also needs `destroy`: it removes the only copy of what a stranger sent. The admin page passes
7// no actor because the layout middleware already refuses writes for the smoke credential.
8
9type MentionDecision = "approve" | "reject" | "delete";
10
11export const MENTION_POLICIES = {
12  write: "mention-decide-requires-write",
13  destroy: "mention-delete-requires-admin",
14} as const;
15
16export async function decideMention(
17  env: Env,
18  id: number,
19  decision: MentionDecision,
20  actor?: Actor,
21): Promise<{ changed: boolean; slug: string | null; purged: boolean | null }> {
22  if (actor) {
23    const may = WRITE_CAPABILITIES[actor.kind];
24    if (!may.write) {
25      throw new PolicyError(
26        `Refused (${MENTION_POLICIES.write}): this credential is read only and may ` +
27          `not decide a mention.`,
28        MENTION_POLICIES.write,
29      );
30    }
31    if (decision === "delete" && !may.destroy) {
32      throw new PolicyError(
33        `Refused (${MENTION_POLICIES.destroy}): deleting a mention removes the only ` +
34          `copy of what somebody sent and is reserved to the human admin. Reject it ` +
35          `instead, which is reversible.`,
36        MENTION_POLICIES.destroy,
37      );
38    }
39  }
40
41  // The slug comes from the statement that moved the row, so the purge names the row this call changed.
42  const slug =
43    decision === "delete"
44      ? await deleteWebmention(env, id)
45      : await decideWebmention(env, id, decision === "approve" ? "approved" : "rejected");
46
47  // Null when nothing moved (the write only touches verified rows) or the runtime cannot purge; only
48  // false is a failed purge, returned, not raised: the decision is stored and only the page is stale.
49  const purged = slug ? await purgePost(slug, `mention ${decision}`) : null;
50
51  return { changed: slug !== null, slug, purged };
52}