dhkatzandClaude Opus 5.5
8793b5afd8
New uploads are drafts: only their creator and moderators see them, nobody can get or wear them, and they're deleted if not published within 30 days (their catalogs get delete changes). The creator reviews the info and publishes it. Editing a product's info is a permission check now (product:edit): moderators can edit anyone's with a reason the creator sees, lock fields (product:lock; locked fields need product:edit-locked) and lower ratings (product:rate-lower, not below its files'). Every change is kept in the product's info history, with who and why, and can be undone by the same rules. Products can be unlisted (out of search and lists, the link still works) and tagged; lists filter by tag and catalog. The console has a Products section (everyone's for moderators, by status) and a drafts to-do. A product's own category is left for later: the hub has no list of IMVU's categories to pick from. Co-Authored-By: Claude Opus 5.5 <[email protected]>
93 lines
4.1 KiB
TypeScript
93 lines
4.1 KiB
TypeScript
// The hub's API, called from server components and server actions. Calls go to the API's internal address
|
|
// (API_URL) with the visitor's cookie, so the API sees the same session the browser has.
|
|
import "server-only";
|
|
import { treaty } from "@elysiajs/eden";
|
|
import type { App } from "@t5de/api";
|
|
import { headers } from "next/headers";
|
|
import { cache } from "react";
|
|
|
|
const apiURL = process.env.API_URL ?? "http://localhost:4101";
|
|
|
|
/** The visitor's cookie and address, to pass on to the API. */
|
|
async function forwarded(): Promise<Record<string, string>> {
|
|
const incoming = await headers();
|
|
const forward: Record<string, string> = {};
|
|
for (const name of ["cookie", "x-forwarded-for", "user-agent"]) {
|
|
const value = incoming.get(name);
|
|
if (value) forward[name] = value;
|
|
}
|
|
return forward;
|
|
}
|
|
|
|
/**
|
|
* The API's /api/v1 routes, as the person making this request. (Never await the client itself: it's a proxy, and
|
|
* awaiting it would call a route named "then".)
|
|
*/
|
|
export const api = treaty<App>(apiURL, { headers: forwarded }).api.v1;
|
|
|
|
type V1 = typeof api;
|
|
type Problem = { error: string; message: string };
|
|
/** What a route answers when it succeeds (the API's error shape is part of its declared answers). */
|
|
type Ok<T> = Exclude<T, Problem>;
|
|
type Data<Route extends (...args: any[]) => Promise<{ data: unknown }>> = Ok<
|
|
NonNullable<Awaited<ReturnType<Route>>["data"]>
|
|
>;
|
|
|
|
export type Person = Data<V1["me"]["get"]>["person"];
|
|
export type Account = Data<V1["account"]["get"]>;
|
|
export type Link = Account["links"][number];
|
|
export type Challenge = Account["challenges"][number];
|
|
export type AgeInfo = Data<V1["age"]["get"]>;
|
|
export type OnlineEntry = Data<V1["online"]["get"]>["online"][number];
|
|
export type ConsoleData = Data<V1["console"]["get"]>;
|
|
export type AuditEntry = ConsoleData["audit"][number];
|
|
export type CatalogPage = Data<ReturnType<V1["catalogs"]>["get"]>;
|
|
export type CatalogMember = Data<ReturnType<V1["catalogs"]>["members"]["get"]>["members"][number];
|
|
export type CatalogInvite = Data<ReturnType<V1["catalogs"]>["invites"]["get"]>["invites"][number];
|
|
export type HostedProduct = Data<ReturnType<V1["catalogs"]>["products"]["get"]>["products"][number];
|
|
export type CatalogTeam = Data<ReturnType<V1["catalogs"]>["team"]["get"]>;
|
|
export type ProductSummary = Data<V1["products"]["get"]>["products"][number];
|
|
export type ProductPage = Data<ReturnType<V1["products"]>["get"]>;
|
|
export type Revision = ProductPage["revisions"][number];
|
|
export type InfoEntry = Data<ReturnType<V1["products"]>["history"]["get"]>["entries"][number];
|
|
export type ManagedProduct = Data<V1["console"]["products"]["get"]>["products"][number];
|
|
export type Catalog = Data<V1["catalogs"]["get"]>["catalogs"][number];
|
|
export type LibraryEntry = Data<V1["library"]["get"]>["library"][number];
|
|
export type HostedRoom = Data<V1["hosted-rooms"]["get"]>["rooms"][number];
|
|
|
|
/** An error the API answered: message is written to be shown as is. */
|
|
export class ApiError extends Error {
|
|
constructor(
|
|
readonly status: number,
|
|
readonly slug: string,
|
|
message: string,
|
|
) {
|
|
super(message);
|
|
}
|
|
}
|
|
|
|
type Answer<T> = { data: T; error: null } | { data: null; error: { status: unknown; value: unknown } };
|
|
|
|
/** The answer's data, or throws ApiError with the API's message. */
|
|
export function unwrap<T>(answer: Answer<T>): Ok<NonNullable<T>> {
|
|
if (answer.error) {
|
|
const status = typeof answer.error.status === "number" ? answer.error.status : 500;
|
|
const value = answer.error.value as { error?: unknown; message?: unknown } | null;
|
|
const slug = typeof value?.error === "string" ? value.error : "error";
|
|
const message =
|
|
typeof value?.message === "string" && value.message
|
|
? value.message
|
|
: "Something went wrong. Try again in a moment.";
|
|
throw new ApiError(status, slug, message);
|
|
}
|
|
return answer.data as Ok<NonNullable<T>>;
|
|
}
|
|
|
|
/** Who's signed in, or undefined. Once per request. */
|
|
export const getMe = cache(async (): Promise<Person | undefined> => {
|
|
const { data } = await api.me.get();
|
|
return data && "person" in data ? data.person : undefined;
|
|
});
|
|
|
|
export const isModerator = (p: Pick<Person, "role"> | undefined) => p?.role === "moderator" || p?.role === "admin";
|