| 1 | |
|
| 2 | |
|
| 3 | |
|
| 4 | | use super::settings::{csrf, require}; |
| 5 | | use super::{filters, lookup, lookup_role, Error, Page, RepoShell, Shell}; |
| 6 | | use crate::auth::{Access, Viewer}; |
| 7 | | use crate::db::{self, accounts, releases as rdb}; |
| 8 | | use crate::repos::archive::{self, Format}; |
| 9 | | use crate::repos::{view, RepoName}; |
| 10 | | use crate::Shared; |
| 11 | | use askama::Template; |
| 12 | | use axum::extract::{Form, Multipart, Path, Query, State}; |
| 13 | | use axum::http::header; |
| 14 | | use axum::response::{IntoResponse, Redirect, Response}; |
| 15 | | use oxy_core::hash::ChangeHash; |
| 16 | | use serde::Deserialize; |
| 17 | | use std::collections::HashMap; |
| 18 | |
|
| 19 | |
|
| 20 | | pub struct ReleaseView { |
| 21 | | pub r: rdb::Release, |
| 22 | | pub notes_html: String, |
| 23 | | pub assets: Vec<rdb::Asset>, |
| 24 | | pub heads: Vec<String>, |
| 25 | | pub signer: Option<String>, |
| 26 | | pub latest: bool, |
| 27 | | |
| 28 | | pub built: HashMap<i64, db::flow::Provenance>, |
| 29 | | } |
| 30 | |
|
| 31 | | impl ReleaseView { |
| 32 | 13× | pub fn built_by(&self, asset: &i64) -> Option<&db::flow::Provenance> { |
| 33 | 13× | self.built.get(asset) |
| 34 | 13× | } |
| 35 | | } |
| 36 | |
|
| 37 | 14× | async fn views(app: &Shared, repo: &RepoName, row: &db::repos::RepoRow) -> Result<Vec<ReleaseView>, sqlx::Error> { |
| 38 | 14× | let list = rdb::list(&app.db, row.id).await?; |
| 39 | 14× | let latest = rdb::latest(&app.db, row.id).await?.map(|r| r.id); |
| 40 | 14× | let tags: HashMap<String, (Vec<String>, Option<String>)> = app |
| 41 | 14× | .repos |
| 42 | 15× | .read(repo, |r, _| Ok(view::tags(r)?.into_iter().map(|t| (t.name, (t.heads, t.signer))).collect())) |
| 43 | 14× | .await |
| 44 | 14× | .unwrap_or_default(); |
| 45 | 14× | let mut out = Vec::new(); |
| 46 | 18× | for r in list { |
| 47 | 18× | let assets = rdb::assets(&app.db, r.id).await?; |
| 48 | 18× | let mut built = HashMap::new(); |
| 49 | 18× | for a in &assets { |
| 50 | 13× | if let Some(p) = db::flow::provenance(&app.db, row.id, &a.hash).await? { |
| 51 | 5× | built.insert(a.id, p); |
| 52 | 8× | } |
| 53 | | } |
| 54 | 18× | let (heads, signer) = tags.get(&r.tag).cloned().unwrap_or_default(); |
| 55 | 18× | let notes_html = super::issues::markdown(app, row, &r.tag, &r.notes).await; |
| 56 | 18× | out.push(ReleaseView { latest: Some(r.id) == latest, r, notes_html, assets, heads, signer, built }); |
| 57 | | } |
| 58 | 14× | Ok(out) |
| 59 | 14× | } |
| 60 | |
|
| 61 | | #[derive(Template)] |
| 62 | | #[template(path = "releases.html")] |
| 63 | | pub struct ReleasesPage { |
| 64 | | shell: Shell, |
| 65 | | repo: RepoShell, |
| 66 | | releases: Vec<ReleaseView>, |
| 67 | | unreleased: Vec<String>, |
| 68 | | one: bool, |
| 69 | | } |
| 70 | |
|
| 71 | 3× | pub async fn list( |
| 72 | 3× | State(app): State<Shared>, |
| 73 | 3× | viewer: Viewer, |
| 74 | 3× | Path((owner, name)): Path<(String, String)>, |
| 75 | 3× | ) -> Result<Page<ReleasesPage>, Error> { |
| 76 | 3× | let shell = Shell::new(&app, &format!("/{owner}/{name}/releases"), &viewer); |
| 77 | 3× | let (repo, row, role) = lookup(&app, &shell, &viewer, &owner, &name).await?; |
| 78 | 3× | let releases = views(&app, &repo, &row).await.map_err(|e| Error::from_db(shell.clone(), e))?; |
| 79 | 3× | let tags: Vec<String> = |
| 80 | 3× | app.repos.read(&repo, |r, _| Ok(view::tags(r)?.into_iter().map(|t| t.name).collect())).await.unwrap_or_default(); |
| 81 | 4× | let unreleased = tags.into_iter().filter(|t| !releases.iter().any(|r| &r.r.tag == t)).collect(); |
| 82 | 3× | Ok(Page(ReleasesPage { shell, repo: RepoShell::new(&app, &row, "releases").with_role(role), releases, unreleased, one: false })) |
| 83 | 3× | } |
| 84 | |
|
| 85 | 2× | pub async fn show( |
| 86 | 2× | State(app): State<Shared>, |
| 87 | 2× | viewer: Viewer, |
| 88 | 2× | Path((owner, name, tag)): Path<(String, String, String)>, |
| 89 | 2× | ) -> Result<Page<ReleasesPage>, Error> { |
| 90 | 2× | let shell = Shell::new(&app, &format!("/{owner}/{name}/releases/tag/{tag}"), &viewer); |
| 91 | 2× | let (repo, row, role) = lookup(&app, &shell, &viewer, &owner, &name).await?; |
| 92 | 2× | let releases: Vec<ReleaseView> = |
| 93 | 2× | views(&app, &repo, &row).await.map_err(|e| Error::from_db(shell.clone(), e))?.into_iter().filter(|r| r.r.tag == tag).collect(); |
| 94 | 2× | if releases.is_empty() { |
| 95 | 0× | return Err(Error::not_found(shell)); |
| 96 | 2× | } |
| 97 | 2× | Ok(Page(ReleasesPage { shell, repo: RepoShell::new(&app, &row, "releases").with_role(role), releases, unreleased: vec![], one: true })) |
| 98 | 2× | } |
| 99 | |
|
| 100 | |
|
| 101 | |
|
| 102 | 2× | async fn generated_notes(app: &Shared, repo: &RepoName, repo_id: i64, tag: &str) -> String { |
| 103 | 2× | let previous = rdb::list(&app.db, repo_id).await.unwrap_or_default().into_iter().find(|r| r.tag != tag).map(|r| r.tag); |
| 104 | 2× | let tag = tag.to_string(); |
| 105 | 2× | app.repos |
| 106 | 2× | .read(repo, move |r, cache| { |
| 107 | 2× | let Some(heads) = r.tag_heads(&tag)? else { return Ok(String::new()) }; |
| 108 | 2× | let now = cache.load(r, &heads)?; |
| 109 | 2× | let before: Vec<ChangeHash> = match &previous { |
| 110 | 1× | Some(p) => r.tag_heads(p)?.unwrap_or_default(), |
| 111 | 1× | None => vec![], |
| 112 | | }; |
| 113 | 2× | let then = cache.load(r, &before)?; |
| 114 | 2× | let mut added: Vec<_> = now |
| 115 | 2× | .state |
| 116 | 2× | .changes() |
| 117 | 2× | .filter(|(h, _)| !then.state.contains(h)) |
| 118 | 2× | .map(|(h, m)| (m.hlc, *h, m.message.clone(), m.author)) |
| 119 | 2× | .collect(); |
| 120 | 2× | added.sort_by_key(|a| std::cmp::Reverse(a.0)); |
| 121 | 2× | let mut out = match &previous { |
| 122 | 1× | Some(p) => format!("Changes since {p}:\n\n"), |
| 123 | 1× | None => "Changes:\n\n".to_string(), |
| 124 | | }; |
| 125 | 2× | for (_, h, message, author) in added { |
| 126 | 2× | let who = view::author(r, &author, &message).name; |
| 127 | 2× | out.push_str(&format!("- {} ({}, {})\n", message.lines().next().unwrap_or(""), &h.to_hex()[..12], who)); |
| 128 | 2× | } |
| 129 | 2× | Ok(out) |
| 130 | 2× | }) |
| 131 | 2× | .await |
| 132 | 2× | .unwrap_or_default() |
| 133 | 2× | } |
| 134 | |
|
| 135 | | #[derive(Template)] |
| 136 | | #[template(path = "release_new.html")] |
| 137 | | pub struct NewReleasePage { |
| 138 | | shell: Shell, |
| 139 | | repo: RepoShell, |
| 140 | | tags: Vec<String>, |
| 141 | | tag: String, |
| 142 | | notes: String, |
| 143 | | error: Option<String>, |
| 144 | | } |
| 145 | |
|
| 146 | | #[derive(Deserialize)] |
| 147 | | pub struct NewQuery { |
| 148 | | tag: Option<String>, |
| 149 | | } |
| 150 | |
|
| 151 | 1× | pub async fn new_form( |
| 152 | 1× | State(app): State<Shared>, |
| 153 | 1× | viewer: Viewer, |
| 154 | 1× | Path((owner, name)): Path<(String, String)>, |
| 155 | 1× | Query(q): Query<NewQuery>, |
| 156 | 1× | ) -> Result<Page<NewReleasePage>, Error> { |
| 157 | 1× | let shell = Shell::new(&app, &format!("/{owner}/{name}/releases/new"), &viewer); |
| 158 | 1× | require(&viewer, &shell)?; |
| 159 | 1× | let (repo, row, role) = lookup_role(&app, &shell, &viewer, &owner, &name, Access::Write).await?; |
| 160 | 1× | let tags: Vec<String> = app |
| 161 | 1× | .repos |
| 162 | 1× | .read(&repo, |r, _| Ok(view::tags(r)?.into_iter().map(|t| t.name).collect())) |
| 163 | 1× | .await |
| 164 | 1× | .map_err(|e| Error::from_repo(shell.clone(), e))?; |
| 165 | 1× | let tag = q.tag.filter(|t| tags.contains(t)).or_else(|| tags.first().cloned()).unwrap_or_default(); |
| 166 | 1× | let notes = if tag.is_empty() { String::new() } else { generated_notes(&app, &repo, row.id, &tag).await }; |
| 167 | 1× | Ok(Page(NewReleasePage { shell, repo: RepoShell::new(&app, &row, "releases").with_role(role), tags, tag, notes, error: None })) |
| 168 | 1× | } |
| 169 | |
|
| 170 | | #[derive(Deserialize)] |
| 171 | | pub struct NewForm { |
| 172 | | #[serde(rename = "_csrf")] |
| 173 | | csrf_token: String, |
| 174 | | tag: String, |
| 175 | | title: String, |
| 176 | | #[serde(default)] |
| 177 | | notes: String, |
| 178 | | #[serde(default)] |
| 179 | | prerelease: Option<String>, |
| 180 | | } |
| 181 | |
|
| 182 | |
|
| 183 | | #[allow(clippy::too_many_arguments)] |
| 184 | 4× | pub async fn create_release( |
| 185 | 4× | app: &Shared, |
| 186 | 4× | repo: &RepoName, |
| 187 | 4× | row: &db::repos::RepoRow, |
| 188 | 4× | me: &accounts::Account, |
| 189 | 4× | tag: &str, |
| 190 | 4× | title: &str, |
| 191 | 4× | notes: Option<String>, |
| 192 | 4× | prerelease: bool, |
| 193 | 4× | ) -> Result<rdb::Release, String> { |
| 194 | 4× | let exists = app |
| 195 | 4× | .repos |
| 196 | 4× | .read(repo, { |
| 197 | 4× | let t = tag.to_string(); |
| 198 | 4× | move |r, _| Ok(r.tag_heads(&t)?.is_some()) |
| 199 | | }) |
| 200 | 4× | .await |
| 201 | 4× | .map_err(|e| e.to_string())?; |
| 202 | 4× | if !exists { |
| 203 | 1× | return Err(format!("there is no tag {tag}; create it with oxy tag create and push it")); |
| 204 | 3× | } |
| 205 | 3× | if rdb::get(&app.db, row.id, tag).await.map_err(|e| e.to_string())?.is_some() { |
| 206 | 0× | return Err(format!("{tag} already has a release")); |
| 207 | 3× | } |
| 208 | 3× | let notes = match notes { |
| 209 | 2× | Some(n) => n, |
| 210 | 1× | None => generated_notes(app, repo, row.id, tag).await, |
| 211 | | }; |
| 212 | 3× | let title = if title.trim().is_empty() { tag.to_string() } else { title.trim().to_string() }; |
| 213 | 3× | let r = rdb::create(&app.db, row.id, tag, &title, notes.trim(), prerelease, Some((me.id, &me.username))) |
| 214 | 3× | .await |
| 215 | 3× | .map_err(|e| e.to_string())?; |
| 216 | 3× | accounts::audit(&app.db, Some(me), "release.published", &format!("{}@{tag}", row.slug()), "").await.ok(); |
| 217 | 3× | crate::hooks::emit( |
| 218 | 3× | app, |
| 219 | 3× | row, |
| 220 | 3× | "release.published", |
| 221 | 3× | &me.username, |
| 222 | 3× | serde_json::json!({ "tag": tag, "title": title, "prerelease": prerelease }), |
| 223 | 3× | ) |
| 224 | 3× | .await; |
| 225 | 3× | crate::notify::deliver( |
| 226 | 3× | app, |
| 227 | 3× | crate::notify::Event { |
| 228 | 3× | kind: "release", |
| 229 | 3× | title: format!("{} released {title}", row.slug()), |
| 230 | 3× | url: format!("/{}/releases/tag/{tag}", row.slug()), |
| 231 | 3× | actor: me, |
| 232 | 3× | repo_id: row.id, |
| 233 | 3× | thread: None, |
| 234 | 3× | mention_text: "", |
| 235 | 3× | direct: vec![], |
| 236 | 3× | }, |
| 237 | 3× | ) |
| 238 | 3× | .await; |
| 239 | 3× | Ok(r) |
| 240 | 4× | } |
| 241 | |
|
| 242 | 1× | pub async fn create( |
| 243 | 1× | State(app): State<Shared>, |
| 244 | 1× | viewer: Viewer, |
| 245 | 1× | Path((owner, name)): Path<(String, String)>, |
| 246 | 1× | Form(f): Form<NewForm>, |
| 247 | 1× | ) -> Result<Response, Error> { |
| 248 | 1× | let shell = Shell::new(&app, &format!("/{owner}/{name}/releases/new"), &viewer); |
| 249 | 1× | let me = require(&viewer, &shell)?; |
| 250 | 1× | csrf(&viewer, &f.csrf_token, &shell)?; |
| 251 | 1× | let (repo, row, role) = lookup_role(&app, &shell, &viewer, &owner, &name, Access::Write).await?; |
| 252 | 1× | match create_release(&app, &repo, &row, &me.account, &f.tag, &f.title, Some(f.notes.clone()), f.prerelease.is_some()).await { |
| 253 | 1× | Ok(r) => Ok(Redirect::to(&format!("/{owner}/{name}/releases/tag/{}", r.tag)).into_response()), |
| 254 | 0× | Err(msg) => { |
| 255 | 0× | let tags = app.repos.read(&repo, |r, _| Ok(view::tags(r)?.into_iter().map(|t| t.name).collect())).await.unwrap_or_default(); |
| 256 | 0× | Ok(Page(NewReleasePage { |
| 257 | 0× | shell, |
| 258 | 0× | repo: RepoShell::new(&app, &row, "releases").with_role(role), |
| 259 | 0× | tags, |
| 260 | 0× | tag: f.tag, |
| 261 | 0× | notes: f.notes, |
| 262 | 0× | error: Some(msg), |
| 263 | 0× | }) |
| 264 | 0× | .into_response()) |
| 265 | | } |
| 266 | | } |
| 267 | 1× | } |
| 268 | |
|
| 269 | | #[derive(Deserialize)] |
| 270 | | pub struct EditForm { |
| 271 | | #[serde(rename = "_csrf")] |
| 272 | | csrf_token: String, |
| 273 | | #[serde(default)] |
| 274 | | title: String, |
| 275 | | #[serde(default)] |
| 276 | | notes: String, |
| 277 | | #[serde(default)] |
| 278 | | prerelease: Option<String>, |
| 279 | | #[serde(default)] |
| 280 | | action: String, |
| 281 | | #[serde(default)] |
| 282 | | asset: Option<i64>, |
| 283 | | } |
| 284 | |
|
| 285 | 0× | pub async fn edit( |
| 286 | 0× | State(app): State<Shared>, |
| 287 | 0× | viewer: Viewer, |
| 288 | 0× | Path((owner, name, id)): Path<(String, String, i64)>, |
| 289 | 0× | Form(f): Form<EditForm>, |
| 290 | 0× | ) -> Result<Response, Error> { |
| 291 | 0× | let shell = Shell::new(&app, &format!("/{owner}/{name}/releases"), &viewer); |
| 292 | 0× | let me = require(&viewer, &shell)?; |
| 293 | 0× | csrf(&viewer, &f.csrf_token, &shell)?; |
| 294 | 0× | let (_, row, _) = lookup_role(&app, &shell, &viewer, &owner, &name, Access::Write).await?; |
| 295 | 0× | let e = |e| Error::from_db(shell.clone(), e); |
| 296 | 0× | let Some(r) = rdb::list(&app.db, row.id).await.map_err(e)?.into_iter().find(|r| r.id == id) else { |
| 297 | 0× | return Err(Error::not_found(shell)); |
| 298 | | }; |
| 299 | 0× | match f.action.as_str() { |
| 300 | 0× | "delete" => { |
| 301 | 0× | let assets = rdb::assets(&app.db, r.id).await.map_err(e)?; |
| 302 | 0× | rdb::delete(&app.db, r.id).await.map_err(e)?; |
| 303 | 0× | for a in assets { |
| 304 | 0× | remove_blob_if_unused(&app, &a.hash).await; |
| 305 | | } |
| 306 | 0× | accounts::audit(&app.db, Some(&me.account), "release.deleted", &format!("{owner}/{name}@{}", r.tag), "").await.ok(); |
| 307 | 0× | return Ok(Redirect::to(&format!("/{owner}/{name}/releases")).into_response()); |
| 308 | | } |
| 309 | 0× | "delete_asset" => { |
| 310 | 0× | if let Some(a) = rdb::assets(&app.db, r.id).await.map_err(e)?.into_iter().find(|a| Some(a.id) == f.asset) { |
| 311 | 0× | rdb::delete_asset(&app.db, a.id).await.map_err(e)?; |
| 312 | 0× | remove_blob_if_unused(&app, &a.hash).await; |
| 313 | 0× | } |
| 314 | | } |
| 315 | 0× | _ => rdb::edit( |
| 316 | 0× | &app.db, |
| 317 | 0× | r.id, |
| 318 | 0× | if f.title.trim().is_empty() { &r.tag } else { f.title.trim() }, |
| 319 | 0× | f.notes.trim(), |
| 320 | 0× | f.prerelease.is_some(), |
| 321 | | ) |
| 322 | 0× | .await |
| 323 | 0× | .map_err(e)?, |
| 324 | | } |
| 325 | 0× | Ok(Redirect::to(&format!("/{owner}/{name}/releases/tag/{}", r.tag)).into_response()) |
| 326 | 0× | } |
| 327 | |
|
| 328 | 10× | pub(crate) fn blob_path(app: &Shared, hash: &str) -> std::path::PathBuf { |
| 329 | 10× | app.config.data.join("assets").join(&hash[..2]).join(hash) |
| 330 | 10× | } |
| 331 | |
|
| 332 | 0× | async fn remove_blob_if_unused(app: &Shared, hash: &str) { |
| 333 | 0× | if !rdb::hash_in_use(&app.db, hash).await.unwrap_or(true) { |
| 334 | 0× | tokio::fs::remove_file(blob_path(app, hash)).await.ok(); |
| 335 | 0× | } |
| 336 | 0× | } |
| 337 | |
|
| 338 | |
|
| 339 | 7× | pub async fn store_asset(app: &Shared, release_id: i64, name: &str, content_type: &str, bytes: &[u8]) -> Result<rdb::Asset, String> { |
| 340 | 7× | let name = name.rsplit(['/', '\\']).next().unwrap_or(name).trim(); |
| 341 | 7× | if name.is_empty() || name.starts_with('.') || name.len() > 200 { |
| 342 | 0× | return Err("give the asset a file name".into()); |
| 343 | 7× | } |
| 344 | 7× | if bytes.len() as u64 > app.config.limits.asset_limit.0 { |
| 345 | 0× | return Err("the asset is larger than this hub allows".into()); |
| 346 | 7× | } |
| 347 | 7× | let hash = hex::encode(blake3::hash(bytes).as_bytes()); |
| 348 | 7× | let path = blob_path(app, &hash); |
| 349 | 7× | if !path.exists() { |
| 350 | 7× | tokio::fs::create_dir_all(path.parent().unwrap()).await.map_err(|e| e.to_string())?; |
| 351 | 7× | let tmp = path.with_extension("partial"); |
| 352 | 7× | tokio::fs::write(&tmp, bytes).await.map_err(|e| e.to_string())?; |
| 353 | 7× | tokio::fs::rename(&tmp, &path).await.map_err(|e| e.to_string())?; |
| 354 | 0× | } |
| 355 | 7× | let ct = if content_type.is_empty() { "application/octet-stream" } else { content_type }; |
| 356 | 7× | rdb::add_asset(&app.db, release_id, name, bytes.len() as i64, &hash, ct).await.map_err(|e| e.to_string()) |
| 357 | 7× | } |
| 358 | |
|
| 359 | 0× | pub async fn upload( |
| 360 | 0× | State(app): State<Shared>, |
| 361 | 0× | viewer: Viewer, |
| 362 | 0× | Path((owner, name, id)): Path<(String, String, i64)>, |
| 363 | 0× | mut multipart: Multipart, |
| 364 | 0× | ) -> Result<Response, Error> { |
| 365 | 0× | let shell = Shell::new(&app, &format!("/{owner}/{name}/releases"), &viewer); |
| 366 | 0× | require(&viewer, &shell)?; |
| 367 | 0× | let (_, row, _) = lookup_role(&app, &shell, &viewer, &owner, &name, Access::Write).await?; |
| 368 | 0× | let Some(r) = rdb::list(&app.db, row.id).await.map_err(|e| Error::from_db(shell.clone(), e))?.into_iter().find(|r| r.id == id) else { |
| 369 | 0× | return Err(Error::not_found(shell)); |
| 370 | | }; |
| 371 | 0× | let mut token = String::new(); |
| 372 | 0× | let mut files: Vec<(String, String, Vec<u8>)> = vec![]; |
| 373 | 0× | while let Ok(Some(field)) = multipart.next_field().await { |
| 374 | 0× | match field.name() { |
| 375 | 0× | Some("_csrf") => token = field.text().await.unwrap_or_default(), |
| 376 | 0× | Some("asset") => { |
| 377 | 0× | let fname = field.file_name().unwrap_or("").to_string(); |
| 378 | 0× | let ct = field.content_type().unwrap_or("").to_string(); |
| 379 | 0× | let bytes = field.bytes().await.map_err(|e| Error::bad(shell.clone(), e.to_string()))?; |
| 380 | 0× | if !fname.is_empty() { |
| 381 | 0× | files.push((fname, ct, bytes.to_vec())); |
| 382 | 0× | } |
| 383 | | } |
| 384 | 0× | _ => {} |
| 385 | | } |
| 386 | | } |
| 387 | 0× | csrf(&viewer, &token, &shell)?; |
| 388 | 0× | for (fname, ct, bytes) in files { |
| 389 | 0× | store_asset(&app, r.id, &fname, &ct, &bytes).await.map_err(|m| Error::bad(shell.clone(), m))?; |
| 390 | | } |
| 391 | 0× | Ok(Redirect::to(&format!("/{owner}/{name}/releases/tag/{}", r.tag)).into_response()) |
| 392 | 0× | } |
| 393 | |
|
| 394 | 1× | pub async fn download( |
| 395 | 1× | State(app): State<Shared>, |
| 396 | 1× | viewer: Viewer, |
| 397 | 1× | Path((owner, name, id, file)): Path<(String, String, i64, String)>, |
| 398 | 1× | ) -> Result<Response, Error> { |
| 399 | 1× | let shell = Shell::new(&app, &format!("/{owner}/{name}/releases"), &viewer); |
| 400 | 1× | let (_, row, _) = lookup(&app, &shell, &viewer, &owner, &name).await?; |
| 401 | 1× | let e = |e| Error::from_db(shell.clone(), e); |
| 402 | 1× | let asset: Option<rdb::Asset> = |
| 403 | 1× | sqlx::query_as("SELECT a.* FROM release_assets a JOIN releases r ON r.id = a.release_id WHERE a.id = $1 AND r.repo_id = $2") |
| 404 | 1× | .bind(id) |
| 405 | 1× | .bind(row.id) |
| 406 | 1× | .fetch_optional(&app.db) |
| 407 | 1× | .await |
| 408 | 1× | .map_err(e)?; |
| 409 | 1× | let Some(a) = asset.filter(|a| a.name == file) else { return Err(Error::not_found(shell)) }; |
| 410 | 1× | let bytes = tokio::fs::read(blob_path(&app, &a.hash)).await.map_err(|_| Error::not_found(shell.clone()))?; |
| 411 | 1× | rdb::count_download(&app.db, a.id).await.ok(); |
| 412 | 1× | Ok(( |
| 413 | 1× | [ |
| 414 | 1× | (header::CONTENT_TYPE, a.content_type.clone()), |
| 415 | 1× | (header::CONTENT_DISPOSITION, format!("attachment; filename=\"{}\"", a.name.replace('"', ""))), |
| 416 | 1× | (header::X_CONTENT_TYPE_OPTIONS, "nosniff".to_string()), |
| 417 | 1× | (header::CACHE_CONTROL, "public, max-age=31536000, immutable".to_string()), |
| 418 | 1× | ], |
| 419 | 1× | bytes, |
| 420 | 1× | ) |
| 421 | 1× | .into_response()) |
| 422 | 1× | } |
| 423 | |
|
| 424 | | #[derive(Deserialize)] |
| 425 | | pub struct ArchiveQuery { |
| 426 | | #[serde(rename = "ref")] |
| 427 | | r: String, |
| 428 | | format: String, |
| 429 | | } |
| 430 | |
|
| 431 | |
|
| 432 | |
|
| 433 | 3× | pub async fn source_archive( |
| 434 | 3× | State(app): State<Shared>, |
| 435 | 3× | viewer: Viewer, |
| 436 | 3× | Path((owner, name)): Path<(String, String)>, |
| 437 | 3× | Query(q): Query<ArchiveQuery>, |
| 438 | 3× | ) -> Result<Response, Error> { |
| 439 | 3× | let shell = Shell::new(&app, &format!("/{owner}/{name}/archive"), &viewer); |
| 440 | 3× | let (repo, _, _) = lookup(&app, &shell, &viewer, &owner, &name).await?; |
| 441 | 3× | let format = Format::parse(&q.format).ok_or_else(|| Error::bad(shell.clone(), "format is tar.zst or zip"))?; |
| 442 | 12× | let label: String = q.r.chars().map(|c| if c.is_ascii_alphanumeric() || matches!(c, '.' | '-' | '_') { c } else { '-' }).collect(); |
| 443 | 3× | let prefix = format!("{name}-{}", label.trim_matches('-')); |
| 444 | 3× | let data = app.config.data.clone(); |
| 445 | 3× | let spec = q.r.clone(); |
| 446 | 3× | let p = prefix.clone(); |
| 447 | 3× | let path = app |
| 448 | 3× | .repos |
| 449 | 3× | .read(&repo, move |r, cache| { |
| 450 | 3× | let target = view::resolve(r, cache, &spec)?; |
| 451 | 3× | let loaded = cache.load(r, &target.heads)?; |
| 452 | 3× | let state = oxy_core::objects::StateObject::new(loaded.heads.clone()).hash().to_hex(); |
| 453 | 3× | let dest = archive::cache_path(&data, &state, &p, format); |
| 454 | 3× | if !dest.exists() { |
| 455 | 3× | archive::build(r, &loaded, &p, format, &dest) |
| 456 | 3× | .map_err(|e| crate::repos::RepoError::Oxy(oxy_core::repo::RepoError::Msg(e.to_string())))?; |
| 457 | 0× | } |
| 458 | 3× | Ok(dest) |
| 459 | 3× | }) |
| 460 | 3× | .await |
| 461 | 3× | .map_err(|e| Error::from_repo(shell.clone(), e))?; |
| 462 | 3× | let bytes = tokio::fs::read(&path).await.map_err(|_| Error::not_found(shell.clone()))?; |
| 463 | 3× | Ok(( |
| 464 | 3× | [ |
| 465 | 3× | (header::CONTENT_TYPE, format.mime().to_string()), |
| 466 | 3× | (header::CONTENT_DISPOSITION, format!("attachment; filename=\"{prefix}.{}\"", format.ext())), |
| 467 | 3× | ], |
| 468 | 3× | bytes, |
| 469 | 3× | ) |
| 470 | 3× | .into_response()) |
| 471 | 3× | } |
| 472 | |
|
| 473 | |
|
| 474 | 13× | pub fn to_api(app: &Shared, row: &db::repos::RepoRow, v: &ReleaseView) -> hub_api::Release { |
| 475 | 13× | let base = format!("{}/{}", app.config.base_url(), row.slug()); |
| 476 | | hub_api::Release { |
| 477 | 13× | tag: v.r.tag.clone(), |
| 478 | 13× | title: v.r.title.clone(), |
| 479 | 13× | notes: v.r.notes.clone(), |
| 480 | 13× | prerelease: v.r.prerelease, |
| 481 | 13× | latest: v.latest, |
| 482 | 13× | author: v.r.author.clone(), |
| 483 | 13× | heads: v.heads.clone(), |
| 484 | 13× | signer: v.signer.clone(), |
| 485 | 13× | assets: v |
| 486 | 13× | .assets |
| 487 | 13× | .iter() |
| 488 | 13× | .map(|a| hub_api::ReleaseAsset { |
| 489 | 7× | name: a.name.clone(), |
| 490 | 7× | size: a.size, |
| 491 | 7× | hash: a.hash.clone(), |
| 492 | 7× | content_type: a.content_type.clone(), |
| 493 | 7× | downloads: a.downloads, |
| 494 | 7× | url: format!("{base}/asset/{}/{}", a.id, a.name), |
| 495 | 7× | built_by: v.built_by(&a.id).map(|p| { |
| 496 | 2× | let signed = !p.receipt_attest.is_empty(); |
| 497 | | hub_api::AssetBuild { |
| 498 | 2× | run: p.run_number, |
| 499 | 2× | job: p.job.clone(), |
| 500 | 2× | artifact: p.name.clone(), |
| 501 | 2× | run_url: format!("{base}/flow/{}", p.run_number), |
| 502 | 2× | receipt: signed.then(|| p.receipt_attest.clone()), |
| 503 | 2× | receipt_url: signed.then(|| format!("{base}/receipts/{}", p.receipt_attest)), |
| 504 | 2× | signer: signed.then(|| p.receipt_signer.clone()), |
| 505 | 2× | provenance_url: signed.then(|| provenance_url(&base, p)), |
| 506 | | } |
| 507 | 2× | }), |
| 508 | 7× | }) |
| 509 | 13× | .collect(), |
| 510 | 26× | archives: ["tar.zst", "zip"].iter().map(|f| format!("{base}/archive?ref={}&format={f}", v.r.tag)).collect(), |
| 511 | 13× | created_ms: v.r.created_ms, |
| 512 | 13× | url: format!("{base}/releases/tag/{}", v.r.tag), |
| 513 | | } |
| 514 | 13× | } |
| 515 | |
|
| 516 | 9× | pub async fn api_views(app: &Shared, repo: &RepoName, row: &db::repos::RepoRow) -> Result<Vec<hub_api::Release>, sqlx::Error> { |
| 517 | 13× | Ok(views(app, repo, row).await?.iter().map(|v| to_api(app, row, v)).collect()) |
| 518 | 9× | } |
| 519 | |
|
| 520 | |
|
| 521 | |
|
| 522 | 1× | pub fn provenance_url(base: &str, p: &db::flow::Provenance) -> String { |
| 523 | 1× | format!( |
| 524 | | "{base}/flow/{}/artifacts/{}/{}/provenance", |
| 525 | | p.run_number, |
| 526 | 1× | super::settings::urlencode(&p.job), |
| 527 | 1× | super::settings::urlencode(&p.name) |
| 528 | | ) |
| 529 | 1× | } |