@remit/backend 0.0.143 → 0.0.145

package/src/handlers/calendar-feed.ts

@@ -1,291 +0,0 @@
-import type {
-	CalendarFeedResponse,
-	CalendarFeedStateResponse,
-} from "@remit/api-openapi-types";
-import {
-	buildCalendarFeed,
-	calendarFeedIsUnchanged,
-	calendarFeedIsUnmodifiedSince,
-	hashCalendarFeedToken,
-	isCalendarFeedToken,
-	mintCalendarFeedToken,
-	readCalendarFeedToken,
-} from "@remit/calendar-service";
-import type { CalendarFeedTokenItem } from "@remit/data-ports";
-import { NotFoundError } from "@remit/data-ports/errors";
-import type { APIGatewayProxyEvent } from "aws-lambda";
-import { getAccountConfigIdFromEvent } from "../auth.js";
-import { type RawApiResponse, rawApiResponse } from "../response.js";
-import { getClient } from "../service/data-client.js";
-import type {
-	CalendarDetailOperationIds,
-	CalendarFeedDetailOperationIds,
-	CalendarFeedOperationIds,
-	OperationHandler,
-} from "../types.js";
-import {
-	type CalendarDeps,
-	type CalendarOutcome,
-	calendarDepsOf,
-	findCalendarFor,
-	notFound,
-	refuseCalendar,
-} from "./calendar.js";
-
-const toFeedState = (
-	token: CalendarFeedTokenItem,
-): CalendarFeedStateResponse => ({
-	calendarId: token.calendarId,
-	createdAt: token.createdAt,
-	rotatedAt: token.rotatedAt,
-});
-
-/**
- * Mints the calendar's feed address, or replaces the one it has.
- *
- * The plaintext exists here and nowhere else: the store keeps a digest, so this
- * return value is the only chance anybody has to read the token. Ownership is
- * settled before the mint — a calendar the caller does not hold is absent, not
- * forbidden, which is the same answer `getCalendar` gives it.
- */
-export const putCalendarFeedFor = async (
-	deps: CalendarDeps,
-	accountConfigId: string,
-	calendarId: string,
-): Promise<CalendarOutcome<CalendarFeedResponse>> => {
-	const calendar = await findCalendarFor(deps, accountConfigId, calendarId);
-	if (!calendar.ok) return calendar;
-
-	const secret = mintCalendarFeedToken();
-	const stored = await deps.calendarFeedToken.put({
-		accountConfigId,
-		calendarId,
-		tokenHash: secret.tokenHash,
-	});
-
-	return {
-		ok: true,
-		value: {
-			calendarId: stored.calendarId,
-			feedToken: secret.token,
-			createdAt: stored.createdAt,
-			rotatedAt: stored.rotatedAt,
-		},
-	};
-};
-
-/** Whether the calendar has a feed address, and how old it is. */
-export const findCalendarFeedFor = async (
-	deps: CalendarDeps,
-	accountConfigId: string,
-	calendarId: string,
-): Promise<CalendarOutcome<CalendarFeedStateResponse>> => {
-	const calendar = await findCalendarFor(deps, accountConfigId, calendarId);
-	if (!calendar.ok) return calendar;
-
-	const stored = await deps.calendarFeedToken.findByCalendar(
-		accountConfigId,
-		calendarId,
-	);
-	if (!stored) {
-		return refuseCalendar("NotFound", `no feed on calendar ${calendarId}`);
-	}
-	return { ok: true, value: toFeedState(stored) };
-};
-
-/**
- * Revokes the calendar's feed address.
- *
- * A calendar with no feed is refused rather than answered 204: the caller asked
- * for a subscription to stop working, and reporting success for one that was
- * never there reads as confirmation that it has.
- */
-export const revokeCalendarFeedFor = async (
-	deps: CalendarDeps,
-	accountConfigId: string,
-	calendarId: string,
-): Promise<CalendarOutcome<null>> => {
-	const calendar = await findCalendarFor(deps, accountConfigId, calendarId);
-	if (!calendar.ok) return calendar;
-
-	const stored = await deps.calendarFeedToken.findByCalendar(
-		accountConfigId,
-		calendarId,
-	);
-	if (!stored) {
-		return refuseCalendar("NotFound", `no feed on calendar ${calendarId}`);
-	}
-
-	await deps.calendarFeedToken.delete(accountConfigId, calendarId);
-	return { ok: true, value: null };
-};
-
-/**
- * No feed answers to this address.
- *
- * One answer for an unknown token, a revoked one and a malformed one, with a
- * body that says the same thing to all three: a caller probing addresses learns
- * only whether the one it sent works, which is what it was going to find out
- * anyway.
- */
-const feedNotFound = (): RawApiResponse =>
-	rawApiResponse({
-		statusCode: 404,
-		headers: { "Content-Type": "text/plain; charset=utf-8" },
-		body: "no calendar feed at this address\n",
-	});
-
-/**
- * Serves a calendar to whoever holds its secret address.
- *
- * The token is the whole credential, so a value that cannot be one is refused
- * before anything is hashed, and the digest of what arrived is what the store is
- * asked about — the plaintext is never compared against a stored one because
- * none is stored.
- *
- * `Last-Modified` is the collection's own timestamp, not the newest event in
- * it: an event deleted from a calendar leaves every survivor older than the
- * change, and a validator that moves backwards tells a subscriber its cached
- * copy is still good. The collection is stamped by the same sequence bump every
- * write and every delete goes through, so it only ever moves forward.
- *
- * A row whose collection is gone is the same 404. It should not exist — a
- * calendar's delete takes its token with it, in one transaction — and serving a
- * blank calendar for one would be worse than saying nothing.
- */
-export const serveCalendarFeed = async (
-	deps: CalendarDeps,
-	feedToken: string,
-	conditions: {
-		ifNoneMatch: string | undefined;
-		ifModifiedSince: string | undefined;
-	},
-): Promise<RawApiResponse> => {
-	if (!isCalendarFeedToken(feedToken)) return feedNotFound();
-
-	const stored = await deps.calendarFeedToken.findByTokenHash(
-		hashCalendarFeedToken(feedToken),
-	);
-	if (!stored) return feedNotFound();
-
-	const collection = await deps.calendarCollection
-		.get(stored.accountConfigId, stored.calendarId)
-		.catch((error: unknown) => {
-			if (error instanceof NotFoundError) return null;
-			throw error;
-		});
-	if (!collection) return feedNotFound();
-
-	const objects = await deps.calendarObject.listByCalendar(stored.calendarId);
-	const feed = buildCalendarFeed(collection, objects);
-	const etag = `"${feed.etag}"`;
-	const lastModified = new Date(collection.updatedAt).toUTCString();
-
-	// `If-None-Match` wins outright when both arrive (RFC 9110 13.2.2): the tag
-	// is exact where the date is truncated to the second, so honouring the date
-	// as well could only turn a 200 the tag asked for into a 304.
-	const unchanged =
-		conditions.ifNoneMatch === undefined
-			? calendarFeedIsUnmodifiedSince(
-					conditions.ifModifiedSince,
-					collection.updatedAt,
-				)
-			: calendarFeedIsUnchanged(conditions.ifNoneMatch, feed.etag);
-
-	if (unchanged) {
-		return rawApiResponse({
-			statusCode: 304,
-			headers: { ETag: etag, "Last-Modified": lastModified },
-			body: "",
-		});
-	}
-
-	return rawApiResponse({
-		statusCode: 200,
-		headers: {
-			"Content-Type": "text/calendar; charset=utf-8",
-			ETag: etag,
-			"Last-Modified": lastModified,
-		},
-		body: feed.icalData,
-	});
-};
-
-export const CalendarFeedDetailOperations: Record<
-	CalendarFeedDetailOperationIds,
-	OperationHandler<CalendarDetailOperationIds>
-> = {
-	CalendarDetailOperations_getCalendarFeed: async (
-		context,
-		...args: unknown[]
-	) => {
-		const event = args[0] as APIGatewayProxyEvent;
-		const accountConfigId = getAccountConfigIdFromEvent(event);
-		const { calendarId } = context.request.params as { calendarId: string };
-		const deps = calendarDepsOf(await getClient());
-
-		const found = await findCalendarFeedFor(deps, accountConfigId, calendarId);
-		if (!found.ok) return notFound(found.error.message);
-		return found.value;
-	},
-
-	CalendarDetailOperations_putCalendarFeed: async (
-		context,
-		...args: unknown[]
-	) => {
-		const event = args[0] as APIGatewayProxyEvent;
-		const accountConfigId = getAccountConfigIdFromEvent(event);
-		const { calendarId } = context.request.params as { calendarId: string };
-		const deps = calendarDepsOf(await getClient());
-
-		const minted = await putCalendarFeedFor(deps, accountConfigId, calendarId);
-		if (!minted.ok) return notFound(minted.error.message);
-		return minted.value;
-	},
-
-	CalendarDetailOperations_revokeCalendarFeed: async (
-		context,
-		...args: unknown[]
-	) => {
-		const event = args[0] as APIGatewayProxyEvent;
-		const accountConfigId = getAccountConfigIdFromEvent(event);
-		const { calendarId } = context.request.params as { calendarId: string };
-		const deps = calendarDepsOf(await getClient());
-
-		const revoked = await revokeCalendarFeedFor(
-			deps,
-			accountConfigId,
-			calendarId,
-		);
-		if (!revoked.ok) return notFound(revoked.error.message);
-		return { statusCode: 204 };
-	},
-};
-
-export const CalendarFeedOperations: Record<
-	CalendarFeedOperationIds,
-	OperationHandler<CalendarFeedOperationIds>
-> = {
-	CalendarFeedOperations_getCalendarFeedIcal: async (
-		context,
-		...args: unknown[]
-	) => {
-		// From the raw path, not from the router's captured parameter: the matcher
-		// substitutes the parameter into the literal path and leaves the dot of
-		// ".ics" as a regex dot, so /feeds/calendar/<token>Xics routes here too —
-		// and answering it would serve the feed at an address nobody was handed.
-		const event = args[0] as APIGatewayProxyEvent;
-		const feedToken = readCalendarFeedToken(event.path);
-		if (feedToken === null) return feedNotFound();
-
-		const ifNoneMatch = context.request.headers["if-none-match"];
-		const ifModifiedSince = context.request.headers["if-modified-since"];
-		const deps = calendarDepsOf(await getClient());
-
-		return serveCalendarFeed(deps, feedToken, {
-			ifNoneMatch: typeof ifNoneMatch === "string" ? ifNoneMatch : undefined,
-			ifModifiedSince:
-				typeof ifModifiedSince === "string" ? ifModifiedSince : undefined,
-		});
-	},
-};

package/src/handlers/calendar-sqlite-fixture.ts

@@ -1,36 +0,0 @@
-import { mkdtempSync, rmSync } from "node:fs";
-import { tmpdir } from "node:os";
-import { join } from "node:path";
-import { applyShippedMigrations } from "@remit/drizzle-service/test-sqlite";
-import Database from "better-sqlite3";
-import { buildSqliteClient } from "../service/compose-sqlite.js";
-import type { RemitClient } from "../service/data-client.js";
-
-/**
- * A handler test's store: the backend's own SQLite composition, over the DDL a
- * self-host deployment actually runs.
- *
- * The migrations are applied rather than pushed from the drizzle table objects,
- * so a handler test exercises the shipped column shapes. The client is built by
- * `compose-sqlite.ts`, the composition root a self-host process boots, so
- * nothing here is a second wiring that could drift from the one that ships.
- *
- * One per test file: every row is scoped by account config, so a test that
- * mints its own account config sees only what it wrote.
- */
-export const createCalendarSqliteClient = async (): Promise<{
-	client: RemitClient;
-	cleanup: () => void;
-}> => {
-	const directory = mkdtempSync(join(tmpdir(), "remit-calendar-handlers-"));
-	const path = join(directory, "remit.db");
-	const sqlite = new Database(path);
-	applyShippedMigrations(sqlite);
-	sqlite.close();
-
-	process.env.SQLITE_DB_PATH = path;
-	return {
-		client: await buildSqliteClient(),
-		cleanup: () => rmSync(directory, { recursive: true, force: true }),
-	};
-};