@igstack/app-catalog-backend-core 6.10.2 → 6.11.0

package/dist/modules/communityTools/capture.mjs

@@ -0,0 +1,192 @@
+import { createRequire } from "node:module";
+import { isCaptureAllowed } from "@igstack/app-catalog-shared-core";
+
+//#region src/modules/communityTools/capture.ts
+const VIEWPORT = {
+	width: 1280,
+	height: 800
+};
+const TIMEOUT_MS = 2e4;
+/** After the network goes quiet, for the page to render what it fetched. */
+const SETTLE_MS = 1500;
+/**
+* Whether the browser may load this URL: navigations, redirects and subresources alike.
+* Inline `data:`/`blob:` URLs reach no host, and pages need them to render.
+*/
+function allowRequest(url, allowedHosts) {
+	return url.startsWith("data:") || url.startsWith("blob:") || isCaptureAllowed(url, allowedHosts);
+}
+const MAX_REDIRECTS = 5;
+const HOP_TIMEOUT_MS = 1e4;
+/** Hops a browser repeats as a bodyless GET; 307 and 308 keep the method and body. */
+const REDIRECTS_TO_GET = [
+	301,
+	302,
+	303
+];
+/**
+* Fetches a URL, following redirects only while every hop stays on the allowed hosts.
+* Null when a hop leaves them, or after too many hops; the off-list hop is never requested.
+*
+* Done by hand because Chromium follows a redirect, even one answered through
+* `route.fulfill`, without consulting the route again (measured against a real browser).
+*/
+async function followWithinHosts(fetch, url, allowedHosts) {
+	let hop = url;
+	let mode = "same";
+	for (let hops = 0;; hops++) {
+		const response = await fetch(hop, mode);
+		const location = response.headers()["location"];
+		const status = response.status();
+		if (status < 300 || status >= 400 || !location) return response;
+		if (REDIRECTS_TO_GET.includes(status)) mode = "get";
+		hop = new URL(location, hop).href;
+		if (hops >= MAX_REDIRECTS || !isCaptureAllowed(hop, allowedHosts)) return null;
+	}
+}
+/**
+* Answers one browser request: off-list is aborted, on-list is fetched hop by hop.
+*
+* Never rejects. A rejection in a route handler surfaces as an unhandledRejection and
+* exits Node (measured), so one dead image on a tool's page would take the pod down.
+*/
+async function fenceRoute(route, allowedHosts) {
+	try {
+		if (!allowRequest(route.url, allowedHosts)) await route.abort("blockedbyclient");
+		else if (route.url.startsWith("data:") || route.url.startsWith("blob:")) await route.continue();
+		else {
+			const response = await followWithinHosts(route.fetch, route.url, allowedHosts);
+			if (response) await route.fulfill(response);
+			else await route.abort("blockedbyclient");
+		}
+	} catch {
+		await route.abort("failed").catch(() => void 0);
+	}
+}
+/**
+* Chromium flags that fence the network stack itself, below anything a page can reach:
+* every name but the capture hosts fails to resolve (IP literals included), which also
+* covers worker fetches and sockets that `route` never sees; WebRTC gets no direct UDP.
+* A host that is not a plain name is dropped, so config cannot inject resolver rules.
+*/
+function chromiumFenceArgs(allowedHosts) {
+	return [
+		`--host-resolver-rules=${["MAP * ~NOTFOUND", ...allowedHosts.filter((host) => /^[a-z0-9.-]+$/i.test(host)).flatMap((host) => [`EXCLUDE *.${host}`, `EXCLUDE ${host}`])].join(", ")}`,
+		"--force-webrtc-ip-handling-policy=disable_non_proxied_udp",
+		"--webrtc-ip-handling-policy=disable_non_proxied_udp"
+	];
+}
+/** Navigates an already-fenced page and collects the screenshot, title and favicon. */
+async function capturePage(page, url, allowedHosts) {
+	page.setDefaultTimeout(TIMEOUT_MS);
+	const deadline = Date.now() + TIMEOUT_MS;
+	const response = await page.goto(url, {
+		timeout: TIMEOUT_MS,
+		waitUntil: "load"
+	});
+	if (!isCaptureAllowed(page.url(), allowedHosts)) return {
+		ok: false,
+		error: "redirected off the allowed hosts"
+	};
+	if (!response || !response.ok()) return {
+		ok: false,
+		error: response ? `HTTP ${response.status()}` : "No response"
+	};
+	const idleBudget = deadline - Date.now() - SETTLE_MS;
+	if (idleBudget > 0) await page.waitForLoadState("networkidle", { timeout: idleBudget }).catch(() => void 0);
+	const settle = Math.min(SETTLE_MS, deadline - Date.now());
+	if (settle > 0) await page.waitForTimeout(settle);
+	const png = await page.screenshot({ type: "png" });
+	const title = (await page.title()).trim() || null;
+	const iconHref = await page.evaluate(`document.querySelector('link[rel~="icon"]')?.href ?? null`);
+	const iconUrl = typeof iconHref === "string" ? iconHref : new URL("/favicon.ico", page.url()).href;
+	let favicon = null;
+	if (isCaptureAllowed(iconUrl, allowedHosts)) try {
+		const icon = await page.request.get(iconUrl, {
+			timeout: 5e3,
+			maxRedirects: 0
+		});
+		if (icon.ok()) favicon = await icon.body();
+	} catch {}
+	return {
+		ok: true,
+		png,
+		title,
+		favicon,
+		lastModified: httpDate(response.headers()["last-modified"])
+	};
+}
+/** An HTTP date header as a Date; null when absent or unreadable. */
+function httpDate(value) {
+	if (!value) return null;
+	const date = new Date(value);
+	return Number.isNaN(date.getTime()) ? null : date;
+}
+/** Runs captures one at a time, so concurrent previews cannot start a browser each. */
+function oneAtATime(capture) {
+	let queue = Promise.resolve();
+	let waiting = 0;
+	return {
+		waiting: () => waiting,
+		capture: (url, allowedHosts) => {
+			waiting++;
+			const run = queue.then(() => {
+				waiting--;
+				return capture(url, allowedHosts);
+			});
+			queue = run.catch(() => void 0);
+			return run;
+		}
+	};
+}
+/**
+* A capturer backed by the optional `playwright-core` peer, or null when it is not
+* installed — the feature then works without screenshots.
+*/
+function createPlaywrightCapturer() {
+	try {
+		createRequire(import.meta.url).resolve("playwright-core");
+	} catch {
+		return null;
+	}
+	return oneAtATime(async (url, allowedHosts) => {
+		const { chromium } = await import("playwright-core");
+		const browser = await chromium.launch({
+			executablePath: process.env.PLAYWRIGHT_CHROMIUM_EXECUTABLE_PATH || void 0,
+			args: chromiumFenceArgs(allowedHosts)
+		});
+		try {
+			const context = await browser.newContext({
+				viewport: VIEWPORT,
+				serviceWorkers: "block"
+			});
+			await context.route("**/*", (route) => fenceRoute({
+				url: route.request().url(),
+				abort: (code) => route.abort(code),
+				continue: () => route.continue(),
+				fetch: (hop, mode) => mode === "get" ? context.request.get(hop, {
+					maxRedirects: 0,
+					timeout: HOP_TIMEOUT_MS
+				}) : route.fetch({
+					url: hop,
+					maxRedirects: 0,
+					timeout: HOP_TIMEOUT_MS
+				}),
+				fulfill: (response) => route.fulfill({ response })
+			}, allowedHosts));
+			await context.routeWebSocket(/.*/, (ws) => ws.close());
+			return await capturePage(await context.newPage(), url, allowedHosts);
+		} catch (error) {
+			return {
+				ok: false,
+				error: error instanceof Error ? error.message : String(error)
+			};
+		} finally {
+			await browser.close();
+		}
+	});
+}
+
+//#endregion
+export { createPlaywrightCapturer };
+//# sourceMappingURL=capture.mjs.map

package/dist/modules/communityTools/capture.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"capture.mjs","names":[],"sources":["../../../src/modules/communityTools/capture.ts"],"sourcesContent":["import { createRequire } from 'node:module'\nimport { isCaptureAllowed } from '@igstack/app-catalog-shared-core'\n\nexport type CaptureResult =\n  | {\n      ok: true\n      png: Buffer\n      title: string | null\n      favicon: Buffer | null\n      /** The page's `Last-Modified`: a static host sets it on each deploy. */\n      lastModified: Date | null\n    }\n  | { ok: false; error: string }\n\n/**\n * Visits a page and photographs it, reaching only `allowedHosts`.\n *\n * Resolves `{ ok: false }` when the page itself failed (no response, an error status, a\n * timeout, a redirect off the list) — that is the tool's health. Throws when the\n * browser could not be started, which is ours: the health job must not mark every tool\n * broken because Chromium is missing on one pod.\n */\nexport interface ScreenshotCapturer {\n  capture: (url: string, allowedHosts: string[]) => Promise<CaptureResult>\n  /** Captures queued and not started yet; a capturer without a queue leaves it out. */\n  waiting?: () => number\n}\n\n/** The part of a playwright `Page` a capture uses, so it can be tested without a browser. */\nexport interface CapturePage {\n  setDefaultTimeout: (ms: number) => void\n  goto: (\n    url: string,\n    options: { timeout: number; waitUntil: 'load' },\n  ) => Promise<{\n    ok: () => boolean\n    status: () => number\n    headers: () => Record<string, string>\n  } | null>\n  waitForLoadState: (\n    state: 'networkidle',\n    options: { timeout: number },\n  ) => Promise<void>\n  waitForTimeout: (ms: number) => Promise<void>\n  url: () => string\n  screenshot: (options: { type: 'png' }) => Promise<Buffer>\n  title: () => Promise<string>\n  evaluate: (expression: string) => Promise<unknown>\n  request: {\n    get: (\n      url: string,\n      options: { timeout: number; maxRedirects: number },\n    ) => Promise<{ ok: () => boolean; body: () => Promise<Buffer> }>\n  }\n}\n\nconst VIEWPORT = { width: 1280, height: 800 }\nconst TIMEOUT_MS = 20_000\n/** After the network goes quiet, for the page to render what it fetched. */\nconst SETTLE_MS = 1_500\n\n/**\n * Whether the browser may load this URL: navigations, redirects and subresources alike.\n * Inline `data:`/`blob:` URLs reach no host, and pages need them to render.\n */\nexport function allowRequest(url: string, allowedHosts: string[]): boolean {\n  return (\n    url.startsWith('data:') ||\n    url.startsWith('blob:') ||\n    isCaptureAllowed(url, allowedHosts)\n  )\n}\n\nconst MAX_REDIRECTS = 5\nconst HOP_TIMEOUT_MS = 10_000\n/** Hops a browser repeats as a bodyless GET; 307 and 308 keep the method and body. */\nconst REDIRECTS_TO_GET = [301, 302, 303]\n\n/** `same` repeats the original method and body; `get` is a bodyless GET. */\nexport type HopMode = 'same' | 'get'\n\n/**\n * Fetches a URL, following redirects only while every hop stays on the allowed hosts.\n * Null when a hop leaves them, or after too many hops; the off-list hop is never requested.\n *\n * Done by hand because Chromium follows a redirect, even one answered through\n * `route.fulfill`, without consulting the route again (measured against a real browser).\n */\nexport async function followWithinHosts<\n  TResponse extends {\n    status: () => number\n    headers: () => Record<string, string>\n  },\n>(\n  fetch: (url: string, mode: HopMode) => Promise<TResponse>,\n  url: string,\n  allowedHosts: string[],\n): Promise<TResponse | null> {\n  let hop = url\n  let mode: HopMode = 'same'\n  for (let hops = 0; ; hops++) {\n    const response = await fetch(hop, mode)\n    const location = response.headers()['location']\n    const status = response.status()\n    if (status < 300 || status >= 400 || !location) return response\n    if (REDIRECTS_TO_GET.includes(status)) mode = 'get'\n    hop = new URL(location, hop).href\n    if (hops >= MAX_REDIRECTS || !isCaptureAllowed(hop, allowedHosts)) {\n      return null\n    }\n  }\n}\n\n/** The parts of a playwright `Route` the fence uses, so it can be tested without a browser. */\nexport interface FenceRoute<TResponse> {\n  url: string\n  abort: (code: 'blockedbyclient' | 'failed') => Promise<void>\n  continue: () => Promise<void>\n  fetch: (url: string, mode: HopMode) => Promise<TResponse>\n  fulfill: (response: TResponse) => Promise<void>\n}\n\n/**\n * Answers one browser request: off-list is aborted, on-list is fetched hop by hop.\n *\n * Never rejects. A rejection in a route handler surfaces as an unhandledRejection and\n * exits Node (measured), so one dead image on a tool's page would take the pod down.\n */\nexport async function fenceRoute<\n  TResponse extends {\n    status: () => number\n    headers: () => Record<string, string>\n  },\n>(route: FenceRoute<TResponse>, allowedHosts: string[]): Promise<void> {\n  try {\n    if (!allowRequest(route.url, allowedHosts)) {\n      await route.abort('blockedbyclient')\n    } else if (route.url.startsWith('data:') || route.url.startsWith('blob:')) {\n      await route.continue()\n    } else {\n      const response = await followWithinHosts(\n        route.fetch,\n        route.url,\n        allowedHosts,\n      )\n      if (response) await route.fulfill(response)\n      else await route.abort('blockedbyclient')\n    }\n  } catch {\n    await route.abort('failed').catch(() => undefined)\n  }\n}\n\n/**\n * Chromium flags that fence the network stack itself, below anything a page can reach:\n * every name but the capture hosts fails to resolve (IP literals included), which also\n * covers worker fetches and sockets that `route` never sees; WebRTC gets no direct UDP.\n * A host that is not a plain name is dropped, so config cannot inject resolver rules.\n */\nexport function chromiumFenceArgs(allowedHosts: string[]): string[] {\n  const rules = [\n    'MAP * ~NOTFOUND',\n    ...allowedHosts\n      .filter((host) => /^[a-z0-9.-]+$/i.test(host))\n      .flatMap((host) => [`EXCLUDE *.${host}`, `EXCLUDE ${host}`]),\n  ]\n  return [\n    `--host-resolver-rules=${rules.join(', ')}`,\n    '--force-webrtc-ip-handling-policy=disable_non_proxied_udp',\n    '--webrtc-ip-handling-policy=disable_non_proxied_udp',\n  ]\n}\n\n/** Navigates an already-fenced page and collects the screenshot, title and favicon. */\nexport async function capturePage(\n  page: CapturePage,\n  url: string,\n  allowedHosts: string[],\n): Promise<CaptureResult> {\n  page.setDefaultTimeout(TIMEOUT_MS)\n  const deadline = Date.now() + TIMEOUT_MS\n  const response = await page.goto(url, {\n    timeout: TIMEOUT_MS,\n    waitUntil: 'load',\n  })\n  // The route fence aborts an off-list redirect, but the result must not depend on it.\n  if (!isCaptureAllowed(page.url(), allowedHosts)) {\n    return { ok: false, error: 'redirected off the allowed hosts' }\n  }\n  if (!response || !response.ok()) {\n    return {\n      ok: false,\n      error: response ? `HTTP ${response.status()}` : 'No response',\n    }\n  }\n  // `load` is only the HTML and its assets: a page that fetches its data after\n  // that would be photographed saying \"Loading…\". So wait for the network to go\n  // quiet, then a moment for it to render, all inside the one timeout. A page\n  // that never goes quiet (polling, a live feed) is photographed as it is.\n  const idleBudget = deadline - Date.now() - SETTLE_MS\n  if (idleBudget > 0) {\n    await page\n      .waitForLoadState('networkidle', { timeout: idleBudget })\n      .catch(() => undefined)\n  }\n  const settle = Math.min(SETTLE_MS, deadline - Date.now())\n  if (settle > 0) await page.waitForTimeout(settle)\n  const png = await page.screenshot({ type: 'png' })\n  const title = (await page.title()).trim() || null\n\n  // A string, so this file needs no DOM types.\n  const iconHref = await page.evaluate(\n    `document.querySelector('link[rel~=\"icon\"]')?.href ?? null`,\n  )\n  const iconUrl =\n    typeof iconHref === 'string'\n      ? iconHref\n      : new URL('/favicon.ico', page.url()).href\n  let favicon: Buffer | null = null\n  // `page.request` bypasses the route fence, so the href the page chose is checked here,\n  // and a redirect is not followed anywhere.\n  if (isCaptureAllowed(iconUrl, allowedHosts)) {\n    try {\n      const icon = await page.request.get(iconUrl, {\n        timeout: 5_000,\n        maxRedirects: 0,\n      })\n      if (icon.ok()) favicon = await icon.body()\n    } catch {\n      // No favicon is fine: the card falls back to a monogram.\n    }\n  }\n\n  return {\n    ok: true,\n    png,\n    title,\n    favicon,\n    lastModified: httpDate(response.headers()['last-modified']),\n  }\n}\n\n/** An HTTP date header as a Date; null when absent or unreadable. */\nexport function httpDate(value: string | undefined): Date | null {\n  if (!value) return null\n  const date = new Date(value)\n  return Number.isNaN(date.getTime()) ? null : date\n}\n\n/** Runs captures one at a time, so concurrent previews cannot start a browser each. */\nexport function oneAtATime(\n  capture: ScreenshotCapturer['capture'],\n): Required<ScreenshotCapturer> {\n  let queue: Promise<unknown> = Promise.resolve()\n  let waiting = 0\n  return {\n    waiting: () => waiting,\n    capture: (url, allowedHosts) => {\n      waiting++\n      const run = queue.then(() => {\n        waiting--\n        return capture(url, allowedHosts)\n      })\n      queue = run.catch(() => undefined)\n      return run\n    },\n  }\n}\n\n/**\n * A capturer backed by the optional `playwright-core` peer, or null when it is not\n * installed — the feature then works without screenshots.\n */\nexport function createPlaywrightCapturer(): ScreenshotCapturer | null {\n  try {\n    createRequire(import.meta.url).resolve('playwright-core')\n  } catch {\n    return null\n  }\n\n  return oneAtATime(async (url, allowedHosts) => {\n    const { chromium } = await import('playwright-core')\n    // Launched per capture because the fence flags depend on the hosts; the queue\n    // keeps that to one browser at a time.\n    const browser = await chromium.launch({\n      executablePath:\n        process.env.PLAYWRIGHT_CHROMIUM_EXECUTABLE_PATH || undefined,\n      args: chromiumFenceArgs(allowedHosts),\n    })\n    try {\n      // A service worker could answer requests the route never sees.\n      const context = await browser.newContext({\n        viewport: VIEWPORT,\n        serviceWorkers: 'block',\n      })\n      // Second layer under the resolver fence: per-request and per-hop checks.\n      await context.route('**/*', (route) =>\n        fenceRoute(\n          {\n            url: route.request().url(),\n            abort: (code) => route.abort(code),\n            continue: () => route.continue(),\n            fetch: (hop, mode) =>\n              mode === 'get'\n                ? context.request.get(hop, {\n                    maxRedirects: 0,\n                    timeout: HOP_TIMEOUT_MS,\n                  })\n                : route.fetch({\n                    url: hop,\n                    maxRedirects: 0,\n                    timeout: HOP_TIMEOUT_MS,\n                  }),\n            fulfill: (response) => route.fulfill({ response }),\n          },\n          allowedHosts,\n        ),\n      )\n      // A screenshot needs no live socket, and `route` does not see them.\n      await context.routeWebSocket(/.*/, (ws) => ws.close())\n      const page = await context.newPage()\n      return await capturePage(page, url, allowedHosts)\n    } catch (error) {\n      return {\n        ok: false,\n        error: error instanceof Error ? error.message : String(error),\n      }\n    } finally {\n      await browser.close()\n    }\n  })\n}\n"],"mappings":";;;;AAwDA,MAAM,WAAW;CAAE,OAAO;CAAM,QAAQ;CAAK;AAC7C,MAAM,aAAa;;AAEnB,MAAM,YAAY;;;;;AAMlB,SAAgB,aAAa,KAAa,cAAiC;AACzE,QACE,IAAI,WAAW,QAAQ,IACvB,IAAI,WAAW,QAAQ,IACvB,iBAAiB,KAAK,aAAa;;AAIvC,MAAM,gBAAgB;AACtB,MAAM,iBAAiB;;AAEvB,MAAM,mBAAmB;CAAC;CAAK;CAAK;CAAI;;;;;;;;AAYxC,eAAsB,kBAMpB,OACA,KACA,cAC2B;CAC3B,IAAI,MAAM;CACV,IAAI,OAAgB;AACpB,MAAK,IAAI,OAAO,IAAK,QAAQ;EAC3B,MAAM,WAAW,MAAM,MAAM,KAAK,KAAK;EACvC,MAAM,WAAW,SAAS,SAAS,CAAC;EACpC,MAAM,SAAS,SAAS,QAAQ;AAChC,MAAI,SAAS,OAAO,UAAU,OAAO,CAAC,SAAU,QAAO;AACvD,MAAI,iBAAiB,SAAS,OAAO,CAAE,QAAO;AAC9C,QAAM,IAAI,IAAI,UAAU,IAAI,CAAC;AAC7B,MAAI,QAAQ,iBAAiB,CAAC,iBAAiB,KAAK,aAAa,CAC/D,QAAO;;;;;;;;;AAoBb,eAAsB,WAKpB,OAA8B,cAAuC;AACrE,KAAI;AACF,MAAI,CAAC,aAAa,MAAM,KAAK,aAAa,CACxC,OAAM,MAAM,MAAM,kBAAkB;WAC3B,MAAM,IAAI,WAAW,QAAQ,IAAI,MAAM,IAAI,WAAW,QAAQ,CACvE,OAAM,MAAM,UAAU;OACjB;GACL,MAAM,WAAW,MAAM,kBACrB,MAAM,OACN,MAAM,KACN,aACD;AACD,OAAI,SAAU,OAAM,MAAM,QAAQ,SAAS;OACtC,OAAM,MAAM,MAAM,kBAAkB;;SAErC;AACN,QAAM,MAAM,MAAM,SAAS,CAAC,YAAY,OAAU;;;;;;;;;AAUtD,SAAgB,kBAAkB,cAAkC;AAOlE,QAAO;EACL,yBAPY,CACZ,mBACA,GAAG,aACA,QAAQ,SAAS,iBAAiB,KAAK,KAAK,CAAC,CAC7C,SAAS,SAAS,CAAC,aAAa,QAAQ,WAAW,OAAO,CAAC,CAC/D,CAEgC,KAAK,KAAK;EACzC;EACA;EACD;;;AAIH,eAAsB,YACpB,MACA,KACA,cACwB;AACxB,MAAK,kBAAkB,WAAW;CAClC,MAAM,WAAW,KAAK,KAAK,GAAG;CAC9B,MAAM,WAAW,MAAM,KAAK,KAAK,KAAK;EACpC,SAAS;EACT,WAAW;EACZ,CAAC;AAEF,KAAI,CAAC,iBAAiB,KAAK,KAAK,EAAE,aAAa,CAC7C,QAAO;EAAE,IAAI;EAAO,OAAO;EAAoC;AAEjE,KAAI,CAAC,YAAY,CAAC,SAAS,IAAI,CAC7B,QAAO;EACL,IAAI;EACJ,OAAO,WAAW,QAAQ,SAAS,QAAQ,KAAK;EACjD;CAMH,MAAM,aAAa,WAAW,KAAK,KAAK,GAAG;AAC3C,KAAI,aAAa,EACf,OAAM,KACH,iBAAiB,eAAe,EAAE,SAAS,YAAY,CAAC,CACxD,YAAY,OAAU;CAE3B,MAAM,SAAS,KAAK,IAAI,WAAW,WAAW,KAAK,KAAK,CAAC;AACzD,KAAI,SAAS,EAAG,OAAM,KAAK,eAAe,OAAO;CACjD,MAAM,MAAM,MAAM,KAAK,WAAW,EAAE,MAAM,OAAO,CAAC;CAClD,MAAM,SAAS,MAAM,KAAK,OAAO,EAAE,MAAM,IAAI;CAG7C,MAAM,WAAW,MAAM,KAAK,SAC1B,4DACD;CACD,MAAM,UACJ,OAAO,aAAa,WAChB,WACA,IAAI,IAAI,gBAAgB,KAAK,KAAK,CAAC,CAAC;CAC1C,IAAI,UAAyB;AAG7B,KAAI,iBAAiB,SAAS,aAAa,CACzC,KAAI;EACF,MAAM,OAAO,MAAM,KAAK,QAAQ,IAAI,SAAS;GAC3C,SAAS;GACT,cAAc;GACf,CAAC;AACF,MAAI,KAAK,IAAI,CAAE,WAAU,MAAM,KAAK,MAAM;SACpC;AAKV,QAAO;EACL,IAAI;EACJ;EACA;EACA;EACA,cAAc,SAAS,SAAS,SAAS,CAAC,iBAAiB;EAC5D;;;AAIH,SAAgB,SAAS,OAAwC;AAC/D,KAAI,CAAC,MAAO,QAAO;CACnB,MAAM,OAAO,IAAI,KAAK,MAAM;AAC5B,QAAO,OAAO,MAAM,KAAK,SAAS,CAAC,GAAG,OAAO;;;AAI/C,SAAgB,WACd,SAC8B;CAC9B,IAAI,QAA0B,QAAQ,SAAS;CAC/C,IAAI,UAAU;AACd,QAAO;EACL,eAAe;EACf,UAAU,KAAK,iBAAiB;AAC9B;GACA,MAAM,MAAM,MAAM,WAAW;AAC3B;AACA,WAAO,QAAQ,KAAK,aAAa;KACjC;AACF,WAAQ,IAAI,YAAY,OAAU;AAClC,UAAO;;EAEV;;;;;;AAOH,SAAgB,2BAAsD;AACpE,KAAI;AACF,gBAAc,OAAO,KAAK,IAAI,CAAC,QAAQ,kBAAkB;SACnD;AACN,SAAO;;AAGT,QAAO,WAAW,OAAO,KAAK,iBAAiB;EAC7C,MAAM,EAAE,aAAa,MAAM,OAAO;EAGlC,MAAM,UAAU,MAAM,SAAS,OAAO;GACpC,gBACE,QAAQ,IAAI,uCAAuC;GACrD,MAAM,kBAAkB,aAAa;GACtC,CAAC;AACF,MAAI;GAEF,MAAM,UAAU,MAAM,QAAQ,WAAW;IACvC,UAAU;IACV,gBAAgB;IACjB,CAAC;AAEF,SAAM,QAAQ,MAAM,SAAS,UAC3B,WACE;IACE,KAAK,MAAM,SAAS,CAAC,KAAK;IAC1B,QAAQ,SAAS,MAAM,MAAM,KAAK;IAClC,gBAAgB,MAAM,UAAU;IAChC,QAAQ,KAAK,SACX,SAAS,QACL,QAAQ,QAAQ,IAAI,KAAK;KACvB,cAAc;KACd,SAAS;KACV,CAAC,GACF,MAAM,MAAM;KACV,KAAK;KACL,cAAc;KACd,SAAS;KACV,CAAC;IACR,UAAU,aAAa,MAAM,QAAQ,EAAE,UAAU,CAAC;IACnD,EACD,aACD,CACF;AAED,SAAM,QAAQ,eAAe,OAAO,OAAO,GAAG,OAAO,CAAC;AAEtD,UAAO,MAAM,YADA,MAAM,QAAQ,SAAS,EACL,KAAK,aAAa;WAC1C,OAAO;AACd,UAAO;IACL,IAAI;IACJ,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM;IAC9D;YACO;AACR,SAAM,QAAQ,OAAO;;GAEvB"}

package/dist/modules/communityTools/healthJob.mjs

@@ -0,0 +1,132 @@
+import { getDbClient } from "../../db/client.mjs";
+import { resizeImage } from "../assets/assetUtils.mjs";
+import { upsertAsset } from "../assets/upsertAsset.mjs";
+import { isCaptureAllowed, nextLifecycle } from "@igstack/app-catalog-shared-core";
+
+//#region src/modules/communityTools/healthJob.ts
+const MINUTE_MS = 60 * 1e3;
+const HOUR_MS = 60 * MINUTE_MS;
+const DAY_MS = 24 * HOUR_MS;
+/** Wall time one run may spend; what is left is due again on the next tick. */
+const RUN_BUDGET_MS = 40 * MINUTE_MS;
+/** Past the budget plus one capture, and short of the next tick. */
+const RUN_TRANSACTION_TIMEOUT_MS = 55 * MINUTE_MS;
+const FIRST_RUN_DELAY_MS = MINUTE_MS;
+/** Stores the screenshot and, when it decodes, the favicon as assets. */
+async function storeCapture(slug, result, now) {
+	const prisma = getDbClient();
+	const screenshotAssetId = await upsertAsset({
+		prisma,
+		buffer: result.png,
+		name: `community-${slug}-screenshot`,
+		originalFilename: `community-${slug}-screenshot.png`,
+		assetType: "screenshot"
+	});
+	let faviconAssetId;
+	if (result.favicon) try {
+		faviconAssetId = await upsertAsset({
+			prisma,
+			buffer: await resizeImage(result.favicon, 64, 64, "png"),
+			name: `community-${slug}-icon`,
+			originalFilename: `community-${slug}-icon.png`,
+			assetType: "icon"
+		});
+	} catch {}
+	return {
+		screenshotAssetId,
+		...faviconAssetId && { faviconAssetId },
+		capturedAt: now
+	};
+}
+/**
+* Visits one tool and records the result. Hosts outside the configured suffixes, and a
+* deployment without a capturer, are left untouched: no check means no state change.
+*/
+async function checkTool(tool, deps, now) {
+	if (!deps.capturer || !isCaptureAllowed(tool.url, deps.captureHosts)) return;
+	let result;
+	try {
+		result = await deps.capturer.capture(tool.url, deps.captureHosts);
+	} catch (error) {
+		await getDbClient().dbCommunityTool.update({
+			where: { id: tool.id },
+			data: { lastCheckAt: now }
+		});
+		throw error;
+	}
+	await getDbClient().dbCommunityTool.update({
+		where: { id: tool.id },
+		data: {
+			lastCheckAt: now,
+			...nextLifecycle(tool, result.ok, now),
+			...result.ok && await storeCapture(tool.slug, result, now),
+			...result.ok && result.lastModified && { siteUpdatedAt: result.lastModified }
+		}
+	});
+}
+/**
+* One pass over every tool not checked in the last day.
+*
+* The transaction-scoped lock rather than `pg_try_advisory_lock`: a session lock is
+* held by whichever pooled connection ran the query, and the unlock may run on another,
+* leaving the lock stuck forever. The transaction pins one connection and releases the
+* lock when it ends, even if the pod dies mid-run.
+*
+* ponytail: one transaction holds the lock for the whole run, so a run is capped at
+* RUN_BUDGET_MS (about 90 tools at 25 s each); per-tool short transactions or a job
+* queue if the catalog outgrows that.
+*/
+async function runHealthCheckOnce(deps, now, clock = Date.now) {
+	const db = getDbClient();
+	await db.$transaction(async (tx) => {
+		const [row] = await tx.$queryRaw`
+        SELECT pg_try_advisory_xact_lock(hashtext('community-tools-health')) AS locked`;
+		if (!row?.locked) return;
+		const cutoff = now.getTime() - DAY_MS;
+		const due = (await db.dbCommunityTool.findMany({ select: {
+			id: true,
+			slug: true,
+			url: true,
+			lastCheckAt: true,
+			failingSince: true,
+			archivedAt: true,
+			archivedBy: true
+		} })).filter((t) => !(t.archivedAt && t.archivedBy !== "auto") && (!t.lastCheckAt || t.lastCheckAt.getTime() < cutoff));
+		const startedAt = clock();
+		for (const tool of due) {
+			if (clock() - startedAt >= RUN_BUDGET_MS) break;
+			try {
+				await checkTool(tool, deps, now);
+			} catch (error) {
+				console.error(`[communityTools] health check of ${tool.slug}:`, error);
+			}
+		}
+	}, {
+		maxWait: 1e4,
+		timeout: RUN_TRANSACTION_TIMEOUT_MS
+	});
+}
+/**
+* Starts the pass a minute after boot, then hourly: a pod restarted more often than
+* hourly would otherwise never check. The lock keeps pods from overlapping.
+* Returns a stop function.
+*/
+function startHealthJob(deps, now = () => /* @__PURE__ */ new Date()) {
+	const run = () => {
+		runHealthCheckOnce(deps, now()).catch((error) => {
+			console.error("[communityTools] health run failed:", error);
+		});
+	};
+	const first = setTimeout(run, FIRST_RUN_DELAY_MS);
+	const timer = setInterval(run, HOUR_MS);
+	first.unref();
+	timer.unref();
+	return () => {
+		clearTimeout(first);
+		clearInterval(timer);
+	};
+}
+
+//#endregion
+export { checkTool, startHealthJob };
+//# sourceMappingURL=healthJob.mjs.map

package/dist/modules/communityTools/healthJob.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"healthJob.mjs","names":[],"sources":["../../../src/modules/communityTools/healthJob.ts"],"sourcesContent":["import {\n  isCaptureAllowed,\n  nextLifecycle,\n} from '@igstack/app-catalog-shared-core'\nimport { getDbClient } from '../../db/client'\nimport { resizeImage } from '../assets/assetUtils'\nimport { upsertAsset } from '../assets/upsertAsset'\nimport type { CaptureResult, ScreenshotCapturer } from './capture'\n\nexport interface CaptureDeps {\n  captureHosts: string[]\n  capturer: ScreenshotCapturer | null\n}\n\nconst MINUTE_MS = 60 * 1000\nconst HOUR_MS = 60 * MINUTE_MS\nconst DAY_MS = 24 * HOUR_MS\n/** Wall time one run may spend; what is left is due again on the next tick. */\nconst RUN_BUDGET_MS = 40 * MINUTE_MS\n/** Past the budget plus one capture, and short of the next tick. */\nconst RUN_TRANSACTION_TIMEOUT_MS = 55 * MINUTE_MS\nconst FIRST_RUN_DELAY_MS = MINUTE_MS\n\ninterface CheckableTool {\n  id: string\n  slug: string\n  url: string\n  failingSince: Date | null\n  archivedAt: Date | null\n  archivedBy: string | null\n}\n\n/** Stores the screenshot and, when it decodes, the favicon as assets. */\nasync function storeCapture(\n  slug: string,\n  result: Extract<CaptureResult, { ok: true }>,\n  now: Date,\n) {\n  const prisma = getDbClient()\n  const screenshotAssetId = await upsertAsset({\n    prisma,\n    buffer: result.png,\n    name: `community-${slug}-screenshot`,\n    originalFilename: `community-${slug}-screenshot.png`,\n    assetType: 'screenshot',\n  })\n\n  let faviconAssetId: string | undefined\n  if (result.favicon) {\n    try {\n      // ponytail: sharp cannot decode .ico, so those tools get no favicon; add an ico decoder if it matters\n      const png = await resizeImage(result.favicon, 64, 64, 'png')\n      faviconAssetId = await upsertAsset({\n        prisma,\n        buffer: png,\n        name: `community-${slug}-icon`,\n        originalFilename: `community-${slug}-icon.png`,\n        assetType: 'icon',\n      })\n    } catch {\n      // An undecodable favicon leaves the previous one, or none.\n    }\n  }\n\n  return {\n    screenshotAssetId,\n    ...(faviconAssetId && { faviconAssetId }),\n    capturedAt: now,\n  }\n}\n\n/**\n * Visits one tool and records the result. Hosts outside the configured suffixes, and a\n * deployment without a capturer, are left untouched: no check means no state change.\n */\nexport async function checkTool(\n  tool: CheckableTool,\n  deps: CaptureDeps,\n  now: Date,\n): Promise<void> {\n  if (!deps.capturer || !isCaptureAllowed(tool.url, deps.captureHosts)) return\n\n  let result: CaptureResult\n  try {\n    result = await deps.capturer.capture(tool.url, deps.captureHosts)\n  } catch (error) {\n    // A browser that would not start says nothing about the page, so the\n    // lifecycle stays as it was. The attempt is still recorded: without it a\n    // new tool reads \"capture pending\" forever and its open card keeps asking.\n    await getDbClient().dbCommunityTool.update({\n      where: { id: tool.id },\n      data: { lastCheckAt: now },\n    })\n    throw error\n  }\n  await getDbClient().dbCommunityTool.update({\n    where: { id: tool.id },\n    data: {\n      lastCheckAt: now,\n      ...nextLifecycle(tool, result.ok, now),\n      ...(result.ok && (await storeCapture(tool.slug, result, now))),\n      // A visit without the header leaves the date it last had.\n      ...(result.ok &&\n        result.lastModified && {\n          siteUpdatedAt: result.lastModified,\n        }),\n    },\n  })\n}\n\n/**\n * One pass over every tool not checked in the last day.\n *\n * The transaction-scoped lock rather than `pg_try_advisory_lock`: a session lock is\n * held by whichever pooled connection ran the query, and the unlock may run on another,\n * leaving the lock stuck forever. The transaction pins one connection and releases the\n * lock when it ends, even if the pod dies mid-run.\n *\n * ponytail: one transaction holds the lock for the whole run, so a run is capped at\n * RUN_BUDGET_MS (about 90 tools at 25 s each); per-tool short transactions or a job\n * queue if the catalog outgrows that.\n */\nexport async function runHealthCheckOnce(\n  deps: CaptureDeps,\n  now: Date,\n  clock: () => number = Date.now,\n): Promise<void> {\n  const db = getDbClient()\n  await db.$transaction(\n    async (tx) => {\n      const [row] = await tx.$queryRaw<{ locked: boolean }[]>`\n        SELECT pg_try_advisory_xact_lock(hashtext('community-tools-health')) AS locked`\n      if (!row?.locked) return\n\n      const cutoff = now.getTime() - DAY_MS\n      // ponytail: reads every tool each hour; move the filters into the query if the table grows large\n      const tools = await db.dbCommunityTool.findMany({\n        select: {\n          id: true,\n          slug: true,\n          url: true,\n          lastCheckAt: true,\n          failingSince: true,\n          archivedAt: true,\n          archivedBy: true,\n        },\n      })\n      const due = tools.filter(\n        (t) =>\n          !(t.archivedAt && t.archivedBy !== 'auto') &&\n          (!t.lastCheckAt || t.lastCheckAt.getTime() < cutoff),\n      )\n\n      const startedAt = clock()\n      for (const tool of due) {\n        if (clock() - startedAt >= RUN_BUDGET_MS) break\n        try {\n          await checkTool(tool, deps, now)\n        } catch (error) {\n          console.error(`[communityTools] health check of ${tool.slug}:`, error)\n        }\n      }\n    },\n    { maxWait: 10_000, timeout: RUN_TRANSACTION_TIMEOUT_MS },\n  )\n}\n\n/**\n * Starts the pass a minute after boot, then hourly: a pod restarted more often than\n * hourly would otherwise never check. The lock keeps pods from overlapping.\n * Returns a stop function.\n */\nexport function startHealthJob(\n  deps: CaptureDeps,\n  now: () => Date = () => new Date(),\n): () => void {\n  const run = () => {\n    runHealthCheckOnce(deps, now()).catch((error: unknown) => {\n      console.error('[communityTools] health run failed:', error)\n    })\n  }\n  const first = setTimeout(run, FIRST_RUN_DELAY_MS)\n  const timer = setInterval(run, HOUR_MS)\n  // Neither keeps the process, or a test runner, alive.\n  first.unref()\n  timer.unref()\n  return () => {\n    clearTimeout(first)\n    clearInterval(timer)\n  }\n}\n"],"mappings":";;;;;;AAcA,MAAM,YAAY,KAAK;AACvB,MAAM,UAAU,KAAK;AACrB,MAAM,SAAS,KAAK;;AAEpB,MAAM,gBAAgB,KAAK;;AAE3B,MAAM,6BAA6B,KAAK;AACxC,MAAM,qBAAqB;;AAY3B,eAAe,aACb,MACA,QACA,KACA;CACA,MAAM,SAAS,aAAa;CAC5B,MAAM,oBAAoB,MAAM,YAAY;EAC1C;EACA,QAAQ,OAAO;EACf,MAAM,aAAa,KAAK;EACxB,kBAAkB,aAAa,KAAK;EACpC,WAAW;EACZ,CAAC;CAEF,IAAI;AACJ,KAAI,OAAO,QACT,KAAI;AAGF,mBAAiB,MAAM,YAAY;GACjC;GACA,QAHU,MAAM,YAAY,OAAO,SAAS,IAAI,IAAI,MAAM;GAI1D,MAAM,aAAa,KAAK;GACxB,kBAAkB,aAAa,KAAK;GACpC,WAAW;GACZ,CAAC;SACI;AAKV,QAAO;EACL;EACA,GAAI,kBAAkB,EAAE,gBAAgB;EACxC,YAAY;EACb;;;;;;AAOH,eAAsB,UACpB,MACA,MACA,KACe;AACf,KAAI,CAAC,KAAK,YAAY,CAAC,iBAAiB,KAAK,KAAK,KAAK,aAAa,CAAE;CAEtE,IAAI;AACJ,KAAI;AACF,WAAS,MAAM,KAAK,SAAS,QAAQ,KAAK,KAAK,KAAK,aAAa;UAC1D,OAAO;AAId,QAAM,aAAa,CAAC,gBAAgB,OAAO;GACzC,OAAO,EAAE,IAAI,KAAK,IAAI;GACtB,MAAM,EAAE,aAAa,KAAK;GAC3B,CAAC;AACF,QAAM;;AAER,OAAM,aAAa,CAAC,gBAAgB,OAAO;EACzC,OAAO,EAAE,IAAI,KAAK,IAAI;EACtB,MAAM;GACJ,aAAa;GACb,GAAG,cAAc,MAAM,OAAO,IAAI,IAAI;GACtC,GAAI,OAAO,MAAO,MAAM,aAAa,KAAK,MAAM,QAAQ,IAAI;GAE5D,GAAI,OAAO,MACT,OAAO,gBAAgB,EACrB,eAAe,OAAO,cACvB;GACJ;EACF,CAAC;;;;;;;;;;;;;;AAeJ,eAAsB,mBACpB,MACA,KACA,QAAsB,KAAK,KACZ;CACf,MAAM,KAAK,aAAa;AACxB,OAAM,GAAG,aACP,OAAO,OAAO;EACZ,MAAM,CAAC,OAAO,MAAM,GAAG,SAAgC;;AAEvD,MAAI,CAAC,KAAK,OAAQ;EAElB,MAAM,SAAS,IAAI,SAAS,GAAG;EAa/B,MAAM,OAXQ,MAAM,GAAG,gBAAgB,SAAS,EAC9C,QAAQ;GACN,IAAI;GACJ,MAAM;GACN,KAAK;GACL,aAAa;GACb,cAAc;GACd,YAAY;GACZ,YAAY;GACb,EACF,CAAC,EACgB,QACf,MACC,EAAE,EAAE,cAAc,EAAE,eAAe,YAClC,CAAC,EAAE,eAAe,EAAE,YAAY,SAAS,GAAG,QAChD;EAED,MAAM,YAAY,OAAO;AACzB,OAAK,MAAM,QAAQ,KAAK;AACtB,OAAI,OAAO,GAAG,aAAa,cAAe;AAC1C,OAAI;AACF,UAAM,UAAU,MAAM,MAAM,IAAI;YACzB,OAAO;AACd,YAAQ,MAAM,oCAAoC,KAAK,KAAK,IAAI,MAAM;;;IAI5E;EAAE,SAAS;EAAQ,SAAS;EAA4B,CACzD;;;;;;;AAQH,SAAgB,eACd,MACA,4BAAwB,IAAI,MAAM,EACtB;CACZ,MAAM,YAAY;AAChB,qBAAmB,MAAM,KAAK,CAAC,CAAC,OAAO,UAAmB;AACxD,WAAQ,MAAM,uCAAuC,MAAM;IAC3D;;CAEJ,MAAM,QAAQ,WAAW,KAAK,mBAAmB;CACjD,MAAM,QAAQ,YAAY,KAAK,QAAQ;AAEvC,OAAM,OAAO;AACb,OAAM,OAAO;AACb,cAAa;AACX,eAAa,MAAM;AACnB,gBAAc,MAAM"}

package/dist/modules/communityTools/router.d.mts

@@ -0,0 +1,150 @@
+import { AcTrpcContext } from "../../server/acTrpcContext.mjs";
+import { CommunityToolsOptions } from "../../middleware/types.mjs";
+import { ToolPreview } from "./writeService.mjs";
+import * as _trpc_server0 from "@trpc/server";
+import * as _igstack_app_catalog_shared_core0 from "@igstack/app-catalog-shared-core";
+
+//#region src/modules/communityTools/router.d.ts
+/**
+ * `options.capturer` is used as given: resolving the playwright default is the caller's
+ * job (`createAcMiddleware`), so a router built directly never launches a browser.
+ */
+declare function createCommunityToolsRouter(options?: CommunityToolsOptions): _trpc_server0.TRPCBuiltRouter<{
+  ctx: AcTrpcContext;
+  meta: object;
+  errorShape: _trpc_server0.TRPCDefaultErrorShape;
+  transformer: false;
+}, _trpc_server0.TRPCDecorateCreateRouterOptions<{
+  config: _trpc_server0.TRPCQueryProcedure<{
+    input: void;
+    output: {
+      enabled: boolean;
+    };
+    meta: object;
+  }>;
+  list: _trpc_server0.TRPCQueryProcedure<{
+    input: void;
+    output: _igstack_app_catalog_shared_core0.CommunityTool[];
+    meta: object;
+  }>;
+  countByApp: _trpc_server0.TRPCQueryProcedure<{
+    input: void;
+    output: Record<string, number>;
+    meta: object;
+  }>;
+  get: _trpc_server0.TRPCQueryProcedure<{
+    input: {
+      slug: string;
+    };
+    output: _igstack_app_catalog_shared_core0.CommunityTool;
+    meta: object;
+  }>;
+  recordView: _trpc_server0.TRPCMutationProcedure<{
+    input: {
+      slug: string;
+    };
+    output: {
+      views30d: number;
+      viewsAll: number;
+    };
+    meta: object;
+  }>;
+  pins: _trpc_server0.TRPCQueryProcedure<{
+    input: void;
+    output: _igstack_app_catalog_shared_core0.CommunityTool[];
+    meta: object;
+  }>;
+  pin: _trpc_server0.TRPCMutationProcedure<{
+    input: {
+      slug: string;
+    };
+    output: void;
+    meta: object;
+  }>;
+  like: _trpc_server0.TRPCMutationProcedure<{
+    input: {
+      slug: string;
+    };
+    output: void;
+    meta: object;
+  }>;
+  unlike: _trpc_server0.TRPCMutationProcedure<{
+    input: {
+      slug: string;
+    };
+    output: void;
+    meta: object;
+  }>;
+  unpin: _trpc_server0.TRPCMutationProcedure<{
+    input: {
+      slug: string;
+    };
+    output: void;
+    meta: object;
+  }>;
+  reorderPins: _trpc_server0.TRPCMutationProcedure<{
+    input: {
+      slugs: string[];
+    };
+    output: void;
+    meta: object;
+  }>;
+  preview: _trpc_server0.TRPCMutationProcedure<{
+    input: {
+      url: string;
+    };
+    output: ToolPreview;
+    meta: object;
+  }>;
+  add: _trpc_server0.TRPCMutationProcedure<{
+    input: {
+      url: string;
+      name: string;
+      summary: string;
+      descriptionMd: string;
+      ownerSlugs: string[];
+      tags: {
+        kind: "app" | "topic";
+        value: string;
+      }[];
+      ownerNames?: string[] | undefined;
+    };
+    output: _igstack_app_catalog_shared_core0.CommunityTool;
+    meta: object;
+  }>;
+  edit: _trpc_server0.TRPCMutationProcedure<{
+    input: {
+      url: string;
+      name: string;
+      summary: string;
+      descriptionMd: string;
+      ownerSlugs: string[];
+      tags: {
+        kind: "app" | "topic";
+        value: string;
+      }[];
+      slug: string;
+      ownerNames?: string[] | undefined;
+    };
+    output: _igstack_app_catalog_shared_core0.CommunityTool;
+    meta: object;
+  }>;
+  archive: _trpc_server0.TRPCMutationProcedure<{
+    input: {
+      slug: string;
+      reason: string;
+    };
+    output: void;
+    meta: object;
+  }>;
+  approve: _trpc_server0.TRPCMutationProcedure<{
+    input: {
+      slug: string;
+    };
+    output: void;
+    meta: object;
+  }>;
+}>>;
+//#endregion
+export { createCommunityToolsRouter };
+//# sourceMappingURL=router.d.mts.map

package/dist/modules/communityTools/router.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"router.d.mts","names":[],"sources":["../../../src/modules/communityTools/router.ts"],"mappings":";;;;;;;;;;;iBAyCgB,0BAAA,CAA2B,OAAA,GAAU,qBAAA,iBAAqB,eAAA;OAAA,aAAA"}

package/dist/modules/communityTools/router.mjs

@@ -0,0 +1,91 @@
+import { adminProcedure, protectedProcedure, publicProcedure, router, t } from "../../server/trpcSetup.mjs";
+import { countByApp, getTool, likeTool, listPins, listTools, pinTool, recordView, reorderPins, unlikeTool, unpinTool } from "./service.mjs";
+import { addTool, approveTool, archiveTool, editTool, previewTool, toolInputSchema } from "./writeService.mjs";
+import { TRPCError } from "@trpc/server";
+import { z } from "zod";
+
+//#region src/modules/communityTools/router.ts
+function requireActor(actor) {
+	if (!actor) throw new TRPCError({
+		code: "PRECONDITION_FAILED",
+		message: "This action needs cookies enabled"
+	});
+	return actor;
+}
+function writerOf(ctx) {
+	return {
+		user: ctx.user,
+		isAdmin: ctx.isAdmin,
+		actor: requireActor(ctx.actor)
+	};
+}
+/**
+* `options.capturer` is used as given: resolving the playwright default is the caller's
+* job (`createAcMiddleware`), so a router built directly never launches a browser.
+*/
+function createCommunityToolsRouter(options) {
+	const enabled = options?.enabled ?? false;
+	const deps = {
+		captureHosts: options?.captureHosts ?? [],
+		capturer: options?.capturer ?? null
+	};
+	const whenEnabled = t.middleware(({ next }) => {
+		if (!enabled) throw new TRPCError({
+			code: "NOT_FOUND",
+			message: "Community tools are disabled"
+		});
+		return next();
+	});
+	const publicProcedure$1 = publicProcedure.use(whenEnabled);
+	const protectedProcedure$1 = protectedProcedure.use(whenEnabled);
+	const adminProcedure$1 = adminProcedure.use(whenEnabled);
+	return router({
+		config: publicProcedure.query(() => ({ enabled })),
+		list: publicProcedure$1.query(({ ctx }) => {
+			return listTools(ctx.user, ctx.isAdmin, /* @__PURE__ */ new Date(), deps);
+		}),
+		countByApp: publicProcedure$1.query(() => countByApp()),
+		get: publicProcedure$1.input(z.object({ slug: z.string() })).query(async ({ input, ctx }) => {
+			const tool = await getTool(input.slug, ctx.user, ctx.isAdmin, /* @__PURE__ */ new Date(), deps);
+			if (!tool) throw new TRPCError({
+				code: "NOT_FOUND",
+				message: "Tool not found"
+			});
+			return tool;
+		}),
+		recordView: publicProcedure$1.input(z.object({ slug: z.string() })).mutation(({ input, ctx }) => {
+			const actor = requireActor(ctx.actor);
+			return recordView(input.slug, actor, ctx.user, /* @__PURE__ */ new Date());
+		}),
+		pins: protectedProcedure$1.query(({ ctx }) => {
+			return listPins(ctx.user.id, ctx.user, ctx.isAdmin, /* @__PURE__ */ new Date(), deps);
+		}),
+		pin: protectedProcedure$1.input(z.object({ slug: z.string() })).mutation(({ input, ctx }) => {
+			return pinTool(input.slug, ctx.user.id);
+		}),
+		like: protectedProcedure$1.input(z.object({ slug: z.string() })).mutation(({ input, ctx }) => {
+			return likeTool(input.slug, ctx.user);
+		}),
+		unlike: protectedProcedure$1.input(z.object({ slug: z.string() })).mutation(({ input, ctx }) => {
+			return unlikeTool(input.slug, ctx.user.id);
+		}),
+		unpin: protectedProcedure$1.input(z.object({ slug: z.string() })).mutation(({ input, ctx }) => {
+			return unpinTool(input.slug, ctx.user.id);
+		}),
+		reorderPins: protectedProcedure$1.input(z.object({ slugs: z.array(z.string()) })).mutation(({ input, ctx }) => {
+			return reorderPins(input.slugs, ctx.user.id);
+		}),
+		preview: protectedProcedure$1.input(z.object({ url: z.string().max(2e3) })).mutation(({ input }) => previewTool(input.url, deps)),
+		add: protectedProcedure$1.input(toolInputSchema).mutation(({ input, ctx }) => addTool(input, writerOf(ctx), deps, /* @__PURE__ */ new Date())),
+		edit: protectedProcedure$1.input(toolInputSchema.extend({ slug: z.string() })).mutation(({ input, ctx }) => editTool(input, writerOf(ctx), deps, /* @__PURE__ */ new Date())),
+		archive: protectedProcedure$1.input(z.object({
+			slug: z.string(),
+			reason: z.string().trim().min(1).max(500)
+		})).mutation(({ input, ctx }) => archiveTool(input.slug, input.reason, writerOf(ctx), /* @__PURE__ */ new Date())),
+		approve: adminProcedure$1.input(z.object({ slug: z.string() })).mutation(({ input, ctx }) => approveTool(input.slug, writerOf(ctx), /* @__PURE__ */ new Date()))
+	});
+}
+
+//#endregion
+export { createCommunityToolsRouter };
+//# sourceMappingURL=router.mjs.map

package/dist/modules/communityTools/router.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"router.mjs","names":["publicProcedure","publicBase","protectedProcedure","protectedBase","adminProcedure","adminBase","service.listTools","service.countByApp","service.getTool","service.recordView","service.listPins","service.pinTool","service.likeTool","service.unlikeTool","service.unpinTool","service.reorderPins","write.previewTool","write.toolInputSchema","write.addTool","write.editTool","write.archiveTool","write.approveTool"],"sources":["../../../src/modules/communityTools/router.ts"],"sourcesContent":["import { TRPCError } from '@trpc/server'\nimport { z } from 'zod'\nimport type { User } from 'better-auth/types'\nimport type { CommunityToolsOptions } from '../../middleware/types'\nimport {\n  adminProcedure as adminBase,\n  protectedProcedure as protectedBase,\n  publicProcedure as publicBase,\n  router,\n  t,\n} from '../../server/trpcSetup'\nimport type { Actor } from '../visitor/visitorIdentity'\nimport * as service from './service'\nimport * as write from './writeService'\n\nfunction requireActor(actor: Actor | null): Actor {\n  if (!actor) {\n    throw new TRPCError({\n      code: 'PRECONDITION_FAILED',\n      message: 'This action needs cookies enabled',\n    })\n  }\n  return actor\n}\n\nfunction writerOf(ctx: {\n  user: User\n  isAdmin: boolean\n  actor: Actor | null\n}): write.Writer {\n  return {\n    user: ctx.user,\n    isAdmin: ctx.isAdmin,\n    actor: requireActor(ctx.actor),\n  }\n}\n\n/**\n * `options.capturer` is used as given: resolving the playwright default is the caller's\n * job (`createAcMiddleware`), so a router built directly never launches a browser.\n */\nexport function createCommunityToolsRouter(options?: CommunityToolsOptions) {\n  const enabled = options?.enabled ?? false\n  const deps = {\n    captureHosts: options?.captureHosts ?? [],\n    capturer: options?.capturer ?? null,\n  }\n\n  // One router shape whether enabled or not, so clients see every procedure in the\n  // type; when disabled every procedure but `config` answers NOT_FOUND.\n  const whenEnabled = t.middleware(({ next }) => {\n    if (!enabled) {\n      throw new TRPCError({\n        code: 'NOT_FOUND',\n        message: 'Community tools are disabled',\n      })\n    }\n    return next()\n  })\n  const publicProcedure = publicBase.use(whenEnabled)\n  const protectedProcedure = protectedBase.use(whenEnabled)\n  const adminProcedure = adminBase.use(whenEnabled)\n\n  return router({\n    config: publicBase.query(() => ({ enabled })),\n\n    list: publicProcedure.query(({ ctx }) => {\n      return service.listTools(ctx.user, ctx.isAdmin, new Date(), deps)\n    }),\n\n    countByApp: publicProcedure.query(() => service.countByApp()),\n\n    get: publicProcedure\n      .input(z.object({ slug: z.string() }))\n      .query(async ({ input, ctx }) => {\n        const tool = await service.getTool(\n          input.slug,\n          ctx.user,\n          ctx.isAdmin,\n          new Date(),\n          deps,\n        )\n        if (!tool) {\n          throw new TRPCError({\n            code: 'NOT_FOUND',\n            message: 'Tool not found',\n          })\n        }\n        return tool\n      }),\n\n    recordView: publicProcedure\n      .input(z.object({ slug: z.string() }))\n      .mutation(({ input, ctx }) => {\n        const actor = requireActor(ctx.actor)\n        return service.recordView(input.slug, actor, ctx.user, new Date())\n      }),\n\n    pins: protectedProcedure.query(({ ctx }) => {\n      return service.listPins(\n        ctx.user.id,\n        ctx.user,\n        ctx.isAdmin,\n        new Date(),\n        deps,\n      )\n    }),\n\n    pin: protectedProcedure\n      .input(z.object({ slug: z.string() }))\n      .mutation(({ input, ctx }) => {\n        return service.pinTool(input.slug, ctx.user.id)\n      }),\n\n    like: protectedProcedure\n      .input(z.object({ slug: z.string() }))\n      .mutation(({ input, ctx }) => {\n        return service.likeTool(input.slug, ctx.user)\n      }),\n\n    unlike: protectedProcedure\n      .input(z.object({ slug: z.string() }))\n      .mutation(({ input, ctx }) => {\n        return service.unlikeTool(input.slug, ctx.user.id)\n      }),\n\n    unpin: protectedProcedure\n      .input(z.object({ slug: z.string() }))\n      .mutation(({ input, ctx }) => {\n        return service.unpinTool(input.slug, ctx.user.id)\n      }),\n\n    reorderPins: protectedProcedure\n      .input(z.object({ slugs: z.array(z.string()) }))\n      .mutation(({ input, ctx }) => {\n        return service.reorderPins(input.slugs, ctx.user.id)\n      }),\n\n    preview: protectedProcedure\n      .input(z.object({ url: z.string().max(2000) }))\n      .mutation(({ input }) => write.previewTool(input.url, deps)),\n\n    add: protectedProcedure\n      .input(write.toolInputSchema)\n      .mutation(({ input, ctx }) =>\n        write.addTool(input, writerOf(ctx), deps, new Date()),\n      ),\n\n    edit: protectedProcedure\n      .input(write.toolInputSchema.extend({ slug: z.string() }))\n      .mutation(({ input, ctx }) =>\n        write.editTool(input, writerOf(ctx), deps, new Date()),\n      ),\n\n    archive: protectedProcedure\n      .input(\n        z.object({\n          slug: z.string(),\n          reason: z.string().trim().min(1).max(500),\n        }),\n      )\n      .mutation(({ input, ctx }) =>\n        write.archiveTool(input.slug, input.reason, writerOf(ctx), new Date()),\n      ),\n\n    approve: adminProcedure\n      .input(z.object({ slug: z.string() }))\n      .mutation(({ input, ctx }) =>\n        write.approveTool(input.slug, writerOf(ctx), new Date()),\n      ),\n  })\n}\n"],"mappings":";;;;;;;AAeA,SAAS,aAAa,OAA4B;AAChD,KAAI,CAAC,MACH,OAAM,IAAI,UAAU;EAClB,MAAM;EACN,SAAS;EACV,CAAC;AAEJ,QAAO;;AAGT,SAAS,SAAS,KAID;AACf,QAAO;EACL,MAAM,IAAI;EACV,SAAS,IAAI;EACb,OAAO,aAAa,IAAI,MAAM;EAC/B;;;;;;AAOH,SAAgB,2BAA2B,SAAiC;CAC1E,MAAM,UAAU,SAAS,WAAW;CACpC,MAAM,OAAO;EACX,cAAc,SAAS,gBAAgB,EAAE;EACzC,UAAU,SAAS,YAAY;EAChC;CAID,MAAM,cAAc,EAAE,YAAY,EAAE,WAAW;AAC7C,MAAI,CAAC,QACH,OAAM,IAAI,UAAU;GAClB,MAAM;GACN,SAAS;GACV,CAAC;AAEJ,SAAO,MAAM;GACb;CACF,MAAMA,oBAAkBC,gBAAW,IAAI,YAAY;CACnD,MAAMC,uBAAqBC,mBAAc,IAAI,YAAY;CACzD,MAAMC,mBAAiBC,eAAU,IAAI,YAAY;AAEjD,QAAO,OAAO;EACZ,QAAQJ,gBAAW,aAAa,EAAE,SAAS,EAAE;EAE7C,MAAMD,kBAAgB,OAAO,EAAE,UAAU;AACvC,UAAOM,UAAkB,IAAI,MAAM,IAAI,yBAAS,IAAI,MAAM,EAAE,KAAK;IACjE;EAEF,YAAYN,kBAAgB,YAAYO,YAAoB,CAAC;EAE7D,KAAKP,kBACF,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC,CACrC,MAAM,OAAO,EAAE,OAAO,UAAU;GAC/B,MAAM,OAAO,MAAMQ,QACjB,MAAM,MACN,IAAI,MACJ,IAAI,yBACJ,IAAI,MAAM,EACV,KACD;AACD,OAAI,CAAC,KACH,OAAM,IAAI,UAAU;IAClB,MAAM;IACN,SAAS;IACV,CAAC;AAEJ,UAAO;IACP;EAEJ,YAAYR,kBACT,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC,CACrC,UAAU,EAAE,OAAO,UAAU;GAC5B,MAAM,QAAQ,aAAa,IAAI,MAAM;AACrC,UAAOS,WAAmB,MAAM,MAAM,OAAO,IAAI,sBAAM,IAAI,MAAM,CAAC;IAClE;EAEJ,MAAMP,qBAAmB,OAAO,EAAE,UAAU;AAC1C,UAAOQ,SACL,IAAI,KAAK,IACT,IAAI,MACJ,IAAI,yBACJ,IAAI,MAAM,EACV,KACD;IACD;EAEF,KAAKR,qBACF,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC,CACrC,UAAU,EAAE,OAAO,UAAU;AAC5B,UAAOS,QAAgB,MAAM,MAAM,IAAI,KAAK,GAAG;IAC/C;EAEJ,MAAMT,qBACH,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC,CACrC,UAAU,EAAE,OAAO,UAAU;AAC5B,UAAOU,SAAiB,MAAM,MAAM,IAAI,KAAK;IAC7C;EAEJ,QAAQV,qBACL,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC,CACrC,UAAU,EAAE,OAAO,UAAU;AAC5B,UAAOW,WAAmB,MAAM,MAAM,IAAI,KAAK,GAAG;IAClD;EAEJ,OAAOX,qBACJ,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC,CACrC,UAAU,EAAE,OAAO,UAAU;AAC5B,UAAOY,UAAkB,MAAM,MAAM,IAAI,KAAK,GAAG;IACjD;EAEJ,aAAaZ,qBACV,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC,CAC/C,UAAU,EAAE,OAAO,UAAU;AAC5B,UAAOa,YAAoB,MAAM,OAAO,IAAI,KAAK,GAAG;IACpD;EAEJ,SAASb,qBACN,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,CAAC,IAAI,IAAK,EAAE,CAAC,CAAC,CAC9C,UAAU,EAAE,YAAYc,YAAkB,MAAM,KAAK,KAAK,CAAC;EAE9D,KAAKd,qBACF,MAAMe,gBAAsB,CAC5B,UAAU,EAAE,OAAO,UAClBC,QAAc,OAAO,SAAS,IAAI,EAAE,sBAAM,IAAI,MAAM,CAAC,CACtD;EAEH,MAAMhB,qBACH,sBAA4B,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC,CACzD,UAAU,EAAE,OAAO,UAClBiB,SAAe,OAAO,SAAS,IAAI,EAAE,sBAAM,IAAI,MAAM,CAAC,CACvD;EAEH,SAASjB,qBACN,MACC,EAAE,OAAO;GACP,MAAM,EAAE,QAAQ;GAChB,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,IAAI,IAAI;GAC1C,CAAC,CACH,CACA,UAAU,EAAE,OAAO,UAClBkB,YAAkB,MAAM,MAAM,MAAM,QAAQ,SAAS,IAAI,kBAAE,IAAI,MAAM,CAAC,CACvE;EAEH,SAAShB,iBACN,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC,CACrC,UAAU,EAAE,OAAO,UAClBiB,YAAkB,MAAM,MAAM,SAAS,IAAI,kBAAE,IAAI,MAAM,CAAC,CACzD;EACJ,CAAC"}