@songsid/agend 2.3.2-beta.5 → 2.3.2-beta.7

package/dist/web-api.js

@@ -448,6 +448,95 @@ function handleAppIcon(req, res, url, ctx, method) {
     });
     return true;
 }
+/**
+ * #2636: Office share links — GET /ui/office-share (the open ones, and whether this fleet offers them), POST { office,
+ * minutes?, text? } (a new one; answers its URL once its tunnel is up, or why not), DELETE /ui/office-share/<id|all>.
+ * An admin session only — on the dashboard reached directly, or (the user, #2636 follow-up) a fleet admin signed in over
+ * the /web public link: the same check either way. Never the CLI token, a read-only session or a guest. The share's own
+ * tunnel and gateway stay apart from /web's. The person is asked again once the body is in.
+ */
+function handleOfficeShare(req, res, url, ctx, path, method) {
+    const service = ctx.officeShares;
+    if (!service) {
+        json(res, 404, { error: "Office share links are not kept on this fleet" });
+        return true;
+    }
+    const one = /^\/ui\/office-share\/([0-9a-f]{8}|all)$/.exec(path);
+    const known = (method === "GET" && path === "/ui/office-share") || (method === "POST" && path === "/ui/office-share") || (method === "DELETE" && !!one);
+    if (!known) {
+        json(res, 404, { error: "not found" });
+        return true;
+    }
+    const who = () => {
+        const verdict = evaluateWebRequest(req, url, ctx.webToken ?? null, ctx.webSessions, { touch: false });
+        if (verdict.kind !== "allow")
+            return { status: 401 };
+        if (verdict.via !== "session" || verdict.session?.tier !== "admin")
+            return { status: 403 };
+        const owner = verdict.session.owner;
+        return { person: owner ? webPersonKey(owner) : "admin-session", name: owner ? ctx.webPerson?.(owner)?.name ?? owner.userId : "admin" };
+    };
+    const refuse = (status) => json(res, status, { error: status === 401 ? WEB_TOKEN_INVALID_MESSAGE : "office_share_needs_an_admin_session" });
+    const first = who();
+    if ("status" in first) {
+        refuse(first.status);
+        return true;
+    }
+    res.setHeader("Cache-Control", "no-store");
+    if (method === "GET") {
+        // Each with its office's name as it is now (Settings' card has no office list of its own).
+        const names = new Map((ctx.officeStore?.list().offices ?? []).map(o => [o.id, o.name]));
+        json(res, 200, { enabled: service.enabled(), shares: service.list().map(s => ({ ...s, ...(names.has(s.office) ? { office_name: names.get(s.office) } : {}) })) });
+        return true;
+    }
+    if (method === "DELETE") {
+        const id = one[1];
+        const before = id === "all" ? null : service.list().find(s => s.id === id) ?? null;
+        const n = service.revoke(id);
+        if (n)
+            ctx.officeShareNotice?.("revoked", first.name, before, n);
+        json(res, n ? 200 : 404, n ? { revoked: n } : { error: "not_found" });
+        return true;
+    }
+    (async () => {
+        let body;
+        try {
+            body = await parseBody(req);
+        }
+        catch {
+            json(res, 400, { error: "Invalid JSON" });
+            return;
+        }
+        if (!permitWebContinuation(req, res, ctx))
+            return;
+        const now = who();
+        if ("status" in now) {
+            refuse(now.status);
+            return;
+        }
+        if (!body || typeof body !== "object" || Array.isArray(body) || typeof body.office !== "string"
+            || (body.minutes !== undefined && typeof body.minutes !== "number") || (body.text !== undefined && typeof body.text !== "boolean")) {
+            json(res, 400, { error: "office (string), minutes? (number), text? (boolean)" });
+            return;
+        }
+        const made = await service.create({ office: body.office, owner: now.person, ...(typeof body.minutes === "number" ? { minutes: body.minutes } : {}),
+            ...(typeof body.text === "boolean" ? { text: body.text } : {}) });
+        if (!made.ok) {
+            const status = made.error === "disabled" ? 404 : made.error === "tunnel" ? 503 : made.error === "too_many" ? 409 : 400;
+            json(res, status, { error: made.error, ...(made.reason ? { reason: made.reason } : {}) });
+            return;
+        }
+        ctx.officeShareNotice?.("created", now.name, made.share, 1);
+        json(res, 200, { share: made.share, url: made.url });
+    })().catch(err => {
+        ctx.logger.error({ err: err.message }, "Office share failed");
+        try {
+            json(res, 500, { error: "Office share failed" });
+        }
+        catch { /* already answered */ }
+    });
+    return true;
+}
 /**
  * #2513: the Office view's skin packs (web-office-skins.ts). The reads are the offices' (GET /ui/offices): whoever may
  * open the org chart, the public link too (its manifest lists them; a guest's routes do not): the list, a pack's
@@ -2322,6 +2411,8 @@ export function handleWebRequest(req, res, url, ctx) {
     }
     if (path === "/ui/office-skins" || path.startsWith("/ui/office-skins/"))
         return handleOfficeSkins(req, res, url, ctx, path, method);
+    if (path === "/ui/office-share" || path.startsWith("/ui/office-share/"))
+        return handleOfficeShare(req, res, url, ctx, path, method);
     // ── #1630: avatars and Discord server emoji, same-origin (the page never loads a platform's CDN; img-src stays 'self') ──
     const imageMatch = path.match(/^\/ui\/img\/(bot|avatar|emoji)\/([^/]+)$/);
     if (method === "GET" && imageMatch) {