aa477a553b
Introduce token-based author authentication (register/verify API), skill forking with EditGate protection, tag metadata on skills, and download/push stats. Enhanced push scripts with token auth and per-skill filtering. Updated UI with stats, tags, and author info on skill cards.
103 lines
3.6 KiB
JavaScript
103 lines
3.6 KiB
JavaScript
import 'gray-matter';
|
|
import { g as getSkill, d as deleteSkill, u as updateSkill } from '../../../chunks/skills_BacVQUiS.mjs';
|
|
import { h as hasToken, e as extractBearerToken, v as verifyToken } from '../../../chunks/tokens_CAzj9Aj8.mjs';
|
|
import { r as recordPush } from '../../../chunks/stats_CaDi9y9J.mjs';
|
|
export { renderers } from '../../../renderers.mjs';
|
|
|
|
const GET = async ({ params }) => {
|
|
const skill = await getSkill(params.slug);
|
|
if (!skill) {
|
|
return new Response("Not found", { status: 404 });
|
|
}
|
|
return new Response(skill.raw, {
|
|
headers: { "Content-Type": "text/markdown; charset=utf-8" }
|
|
});
|
|
};
|
|
const PUT = async ({ params, request }) => {
|
|
let body;
|
|
try {
|
|
body = await request.json();
|
|
} catch {
|
|
return new Response(JSON.stringify({ error: "Invalid JSON" }), {
|
|
status: 400,
|
|
headers: { "Content-Type": "application/json" }
|
|
});
|
|
}
|
|
if (!body.content) {
|
|
return new Response(JSON.stringify({ error: "content is required" }), {
|
|
status: 400,
|
|
headers: { "Content-Type": "application/json" }
|
|
});
|
|
}
|
|
try {
|
|
const existing = await getSkill(params.slug);
|
|
if (!existing) {
|
|
return new Response(JSON.stringify({ error: "Skill not found" }), {
|
|
status: 404,
|
|
headers: { "Content-Type": "application/json" }
|
|
});
|
|
}
|
|
if (existing["author-email"] && await hasToken(existing["author-email"])) {
|
|
const token = extractBearerToken(request);
|
|
const valid = await verifyToken(existing["author-email"], token);
|
|
if (!valid) {
|
|
return new Response(JSON.stringify({ error: `Only ${existing.author || existing["author-email"]} can update this skill. Provide a valid token via Authorization: Bearer header.` }), {
|
|
status: 403,
|
|
headers: { "Content-Type": "application/json" }
|
|
});
|
|
}
|
|
}
|
|
const skill = await updateSkill(params.slug, body.content);
|
|
recordPush(params.slug);
|
|
return new Response(JSON.stringify(skill), {
|
|
headers: { "Content-Type": "application/json" }
|
|
});
|
|
} catch (err) {
|
|
const message = err instanceof Error ? err.message : "Unknown error";
|
|
return new Response(JSON.stringify({ error: message }), {
|
|
status: 500,
|
|
headers: { "Content-Type": "application/json" }
|
|
});
|
|
}
|
|
};
|
|
const DELETE = async ({ params, request }) => {
|
|
try {
|
|
const existing = await getSkill(params.slug);
|
|
if (!existing) {
|
|
return new Response(JSON.stringify({ error: "Skill not found" }), {
|
|
status: 404,
|
|
headers: { "Content-Type": "application/json" }
|
|
});
|
|
}
|
|
if (existing["author-email"] && await hasToken(existing["author-email"])) {
|
|
const token = extractBearerToken(request);
|
|
const valid = await verifyToken(existing["author-email"], token);
|
|
if (!valid) {
|
|
return new Response(JSON.stringify({ error: `Only ${existing.author || existing["author-email"]} can delete this skill. Provide a valid token via Authorization: Bearer header.` }), {
|
|
status: 403,
|
|
headers: { "Content-Type": "application/json" }
|
|
});
|
|
}
|
|
}
|
|
await deleteSkill(params.slug);
|
|
return new Response(null, { status: 204 });
|
|
} catch (err) {
|
|
const message = err instanceof Error ? err.message : "Unknown error";
|
|
return new Response(JSON.stringify({ error: message }), {
|
|
status: 500,
|
|
headers: { "Content-Type": "application/json" }
|
|
});
|
|
}
|
|
};
|
|
|
|
const _page = /*#__PURE__*/Object.freeze(/*#__PURE__*/Object.defineProperty({
|
|
__proto__: null,
|
|
DELETE,
|
|
GET,
|
|
PUT
|
|
}, Symbol.toStringTag, { value: 'Module' }));
|
|
|
|
const page = () => _page;
|
|
|
|
export { page };
|