this repo has no description
tangled.org
1package repo
2
3import (
4 "context"
5 "database/sql"
6 "encoding/json"
7 "errors"
8 "fmt"
9 "io"
10 "log"
11 "log/slog"
12 "net/http"
13 "net/url"
14 "path/filepath"
15 "slices"
16 "strconv"
17 "strings"
18 "time"
19
20 comatproto "github.com/bluesky-social/indigo/api/atproto"
21 lexutil "github.com/bluesky-social/indigo/lex/util"
22 indigoxrpc "github.com/bluesky-social/indigo/xrpc"
23 "tangled.sh/tangled.sh/core/api/tangled"
24 "tangled.sh/tangled.sh/core/appview/commitverify"
25 "tangled.sh/tangled.sh/core/appview/config"
26 "tangled.sh/tangled.sh/core/appview/db"
27 "tangled.sh/tangled.sh/core/appview/notify"
28 "tangled.sh/tangled.sh/core/appview/oauth"
29 "tangled.sh/tangled.sh/core/appview/pages"
30 "tangled.sh/tangled.sh/core/appview/pages/markup"
31 "tangled.sh/tangled.sh/core/appview/reporesolver"
32 "tangled.sh/tangled.sh/core/appview/validator"
33 xrpcclient "tangled.sh/tangled.sh/core/appview/xrpcclient"
34 "tangled.sh/tangled.sh/core/eventconsumer"
35 "tangled.sh/tangled.sh/core/idresolver"
36 "tangled.sh/tangled.sh/core/patchutil"
37 "tangled.sh/tangled.sh/core/rbac"
38 "tangled.sh/tangled.sh/core/tid"
39 "tangled.sh/tangled.sh/core/types"
40 "tangled.sh/tangled.sh/core/xrpc/serviceauth"
41
42 securejoin "github.com/cyphar/filepath-securejoin"
43 "github.com/go-chi/chi/v5"
44 "github.com/go-git/go-git/v5/plumbing"
45
46 "github.com/bluesky-social/indigo/atproto/syntax"
47)
48
49type Repo struct {
50 repoResolver *reporesolver.RepoResolver
51 idResolver *idresolver.Resolver
52 config *config.Config
53 oauth *oauth.OAuth
54 pages *pages.Pages
55 spindlestream *eventconsumer.Consumer
56 db *db.DB
57 enforcer *rbac.Enforcer
58 notifier notify.Notifier
59 logger *slog.Logger
60 serviceAuth *serviceauth.ServiceAuth
61 validator *validator.Validator
62}
63
64func New(
65 oauth *oauth.OAuth,
66 repoResolver *reporesolver.RepoResolver,
67 pages *pages.Pages,
68 spindlestream *eventconsumer.Consumer,
69 idResolver *idresolver.Resolver,
70 db *db.DB,
71 config *config.Config,
72 notifier notify.Notifier,
73 enforcer *rbac.Enforcer,
74 logger *slog.Logger,
75 validator *validator.Validator,
76) *Repo {
77 return &Repo{oauth: oauth,
78 repoResolver: repoResolver,
79 pages: pages,
80 idResolver: idResolver,
81 config: config,
82 spindlestream: spindlestream,
83 db: db,
84 notifier: notifier,
85 enforcer: enforcer,
86 logger: logger,
87 validator: validator,
88 }
89}
90
91func (rp *Repo) DownloadArchive(w http.ResponseWriter, r *http.Request) {
92 ref := chi.URLParam(r, "ref")
93 ref, _ = url.PathUnescape(ref)
94
95 f, err := rp.repoResolver.Resolve(r)
96 if err != nil {
97 log.Println("failed to get repo and knot", err)
98 return
99 }
100
101 scheme := "http"
102 if !rp.config.Core.Dev {
103 scheme = "https"
104 }
105 host := fmt.Sprintf("%s://%s", scheme, f.Knot)
106 xrpcc := &indigoxrpc.Client{
107 Host: host,
108 }
109
110 repo := fmt.Sprintf("%s/%s", f.OwnerDid(), f.Name)
111 archiveBytes, err := tangled.RepoArchive(r.Context(), xrpcc, "tar.gz", "", ref, repo)
112 if xrpcerr := xrpcclient.HandleXrpcErr(err); xrpcerr != nil {
113 log.Println("failed to call XRPC repo.archive", xrpcerr)
114 rp.pages.Error503(w)
115 return
116 }
117
118 // Set headers for file download, just pass along whatever the knot specifies
119 safeRefFilename := strings.ReplaceAll(plumbing.ReferenceName(ref).Short(), "/", "-")
120 filename := fmt.Sprintf("%s-%s.tar.gz", f.Name, safeRefFilename)
121 w.Header().Set("Content-Disposition", fmt.Sprintf("attachment; filename=\"%s\"", filename))
122 w.Header().Set("Content-Type", "application/gzip")
123 w.Header().Set("Content-Length", fmt.Sprintf("%d", len(archiveBytes)))
124
125 // Write the archive data directly
126 w.Write(archiveBytes)
127}
128
129func (rp *Repo) RepoLog(w http.ResponseWriter, r *http.Request) {
130 f, err := rp.repoResolver.Resolve(r)
131 if err != nil {
132 log.Println("failed to fully resolve repo", err)
133 return
134 }
135
136 page := 1
137 if r.URL.Query().Get("page") != "" {
138 page, err = strconv.Atoi(r.URL.Query().Get("page"))
139 if err != nil {
140 page = 1
141 }
142 }
143
144 ref := chi.URLParam(r, "ref")
145 ref, _ = url.PathUnescape(ref)
146
147 scheme := "http"
148 if !rp.config.Core.Dev {
149 scheme = "https"
150 }
151 host := fmt.Sprintf("%s://%s", scheme, f.Knot)
152 xrpcc := &indigoxrpc.Client{
153 Host: host,
154 }
155
156 limit := int64(60)
157 cursor := ""
158 if page > 1 {
159 // Convert page number to cursor (offset)
160 offset := (page - 1) * int(limit)
161 cursor = strconv.Itoa(offset)
162 }
163
164 repo := fmt.Sprintf("%s/%s", f.OwnerDid(), f.Name)
165 xrpcBytes, err := tangled.RepoLog(r.Context(), xrpcc, cursor, limit, "", ref, repo)
166 if xrpcerr := xrpcclient.HandleXrpcErr(err); xrpcerr != nil {
167 log.Println("failed to call XRPC repo.log", xrpcerr)
168 rp.pages.Error503(w)
169 return
170 }
171
172 var xrpcResp types.RepoLogResponse
173 if err := json.Unmarshal(xrpcBytes, &xrpcResp); err != nil {
174 log.Println("failed to decode XRPC response", err)
175 rp.pages.Error503(w)
176 return
177 }
178
179 tagBytes, err := tangled.RepoTags(r.Context(), xrpcc, "", 0, repo)
180 if xrpcerr := xrpcclient.HandleXrpcErr(err); xrpcerr != nil {
181 log.Println("failed to call XRPC repo.tags", xrpcerr)
182 rp.pages.Error503(w)
183 return
184 }
185
186 tagMap := make(map[string][]string)
187 if tagBytes != nil {
188 var tagResp types.RepoTagsResponse
189 if err := json.Unmarshal(tagBytes, &tagResp); err == nil {
190 for _, tag := range tagResp.Tags {
191 tagMap[tag.Hash] = append(tagMap[tag.Hash], tag.Name)
192 }
193 }
194 }
195
196 branchBytes, err := tangled.RepoBranches(r.Context(), xrpcc, "", 0, repo)
197 if xrpcerr := xrpcclient.HandleXrpcErr(err); xrpcerr != nil {
198 log.Println("failed to call XRPC repo.branches", xrpcerr)
199 rp.pages.Error503(w)
200 return
201 }
202
203 if branchBytes != nil {
204 var branchResp types.RepoBranchesResponse
205 if err := json.Unmarshal(branchBytes, &branchResp); err == nil {
206 for _, branch := range branchResp.Branches {
207 tagMap[branch.Hash] = append(tagMap[branch.Hash], branch.Name)
208 }
209 }
210 }
211
212 user := rp.oauth.GetUser(r)
213
214 emailToDidMap, err := db.GetEmailToDid(rp.db, uniqueEmails(xrpcResp.Commits), true)
215 if err != nil {
216 log.Println("failed to fetch email to did mapping", err)
217 }
218
219 vc, err := commitverify.GetVerifiedObjectCommits(rp.db, emailToDidMap, xrpcResp.Commits)
220 if err != nil {
221 log.Println(err)
222 }
223
224 repoInfo := f.RepoInfo(user)
225
226 var shas []string
227 for _, c := range xrpcResp.Commits {
228 shas = append(shas, c.Hash.String())
229 }
230 pipelines, err := getPipelineStatuses(rp.db, repoInfo, shas)
231 if err != nil {
232 log.Println(err)
233 // non-fatal
234 }
235
236 rp.pages.RepoLog(w, pages.RepoLogParams{
237 LoggedInUser: user,
238 TagMap: tagMap,
239 RepoInfo: repoInfo,
240 RepoLogResponse: xrpcResp,
241 EmailToDidOrHandle: emailToDidOrHandle(rp, emailToDidMap),
242 VerifiedCommits: vc,
243 Pipelines: pipelines,
244 })
245}
246
247func (rp *Repo) RepoDescriptionEdit(w http.ResponseWriter, r *http.Request) {
248 f, err := rp.repoResolver.Resolve(r)
249 if err != nil {
250 log.Println("failed to get repo and knot", err)
251 w.WriteHeader(http.StatusBadRequest)
252 return
253 }
254
255 user := rp.oauth.GetUser(r)
256 rp.pages.EditRepoDescriptionFragment(w, pages.RepoDescriptionParams{
257 RepoInfo: f.RepoInfo(user),
258 })
259}
260
261func (rp *Repo) RepoDescription(w http.ResponseWriter, r *http.Request) {
262 f, err := rp.repoResolver.Resolve(r)
263 if err != nil {
264 log.Println("failed to get repo and knot", err)
265 w.WriteHeader(http.StatusBadRequest)
266 return
267 }
268
269 repoAt := f.RepoAt()
270 rkey := repoAt.RecordKey().String()
271 if rkey == "" {
272 log.Println("invalid aturi for repo", err)
273 w.WriteHeader(http.StatusInternalServerError)
274 return
275 }
276
277 user := rp.oauth.GetUser(r)
278
279 switch r.Method {
280 case http.MethodGet:
281 rp.pages.RepoDescriptionFragment(w, pages.RepoDescriptionParams{
282 RepoInfo: f.RepoInfo(user),
283 })
284 return
285 case http.MethodPut:
286 newDescription := r.FormValue("description")
287 client, err := rp.oauth.AuthorizedClient(r)
288 if err != nil {
289 log.Println("failed to get client")
290 rp.pages.Notice(w, "repo-notice", "Failed to update description, try again later.")
291 return
292 }
293
294 // optimistic update
295 err = db.UpdateDescription(rp.db, string(repoAt), newDescription)
296 if err != nil {
297 log.Println("failed to perferom update-description query", err)
298 rp.pages.Notice(w, "repo-notice", "Failed to update description, try again later.")
299 return
300 }
301
302 newRepo := f.Repo
303 newRepo.Description = newDescription
304 record := newRepo.AsRecord()
305
306 // this is a bit of a pain because the golang atproto impl does not allow nil SwapRecord field
307 //
308 // SwapRecord is optional and should happen automagically, but given that it does not, we have to perform two requests
309 ex, err := client.RepoGetRecord(r.Context(), "", tangled.RepoNSID, newRepo.Did, newRepo.Rkey)
310 if err != nil {
311 // failed to get record
312 rp.pages.Notice(w, "repo-notice", "Failed to update description, no record found on PDS.")
313 return
314 }
315 _, err = client.RepoPutRecord(r.Context(), &comatproto.RepoPutRecord_Input{
316 Collection: tangled.RepoNSID,
317 Repo: newRepo.Did,
318 Rkey: newRepo.Rkey,
319 SwapRecord: ex.Cid,
320 Record: &lexutil.LexiconTypeDecoder{
321 Val: &record,
322 },
323 })
324
325 if err != nil {
326 log.Println("failed to perferom update-description query", err)
327 // failed to get record
328 rp.pages.Notice(w, "repo-notice", "Failed to update description, unable to save to PDS.")
329 return
330 }
331
332 newRepoInfo := f.RepoInfo(user)
333 newRepoInfo.Description = newDescription
334
335 rp.pages.RepoDescriptionFragment(w, pages.RepoDescriptionParams{
336 RepoInfo: newRepoInfo,
337 })
338 return
339 }
340}
341
342func (rp *Repo) RepoCommit(w http.ResponseWriter, r *http.Request) {
343 f, err := rp.repoResolver.Resolve(r)
344 if err != nil {
345 log.Println("failed to fully resolve repo", err)
346 return
347 }
348 ref := chi.URLParam(r, "ref")
349 ref, _ = url.PathUnescape(ref)
350
351 var diffOpts types.DiffOpts
352 if d := r.URL.Query().Get("diff"); d == "split" {
353 diffOpts.Split = true
354 }
355
356 if !plumbing.IsHash(ref) {
357 rp.pages.Error404(w)
358 return
359 }
360
361 scheme := "http"
362 if !rp.config.Core.Dev {
363 scheme = "https"
364 }
365 host := fmt.Sprintf("%s://%s", scheme, f.Knot)
366 xrpcc := &indigoxrpc.Client{
367 Host: host,
368 }
369
370 repo := fmt.Sprintf("%s/%s", f.OwnerDid(), f.Name)
371 xrpcBytes, err := tangled.RepoDiff(r.Context(), xrpcc, ref, repo)
372 if xrpcerr := xrpcclient.HandleXrpcErr(err); xrpcerr != nil {
373 log.Println("failed to call XRPC repo.diff", xrpcerr)
374 rp.pages.Error503(w)
375 return
376 }
377
378 var result types.RepoCommitResponse
379 if err := json.Unmarshal(xrpcBytes, &result); err != nil {
380 log.Println("failed to decode XRPC response", err)
381 rp.pages.Error503(w)
382 return
383 }
384
385 emailToDidMap, err := db.GetEmailToDid(rp.db, []string{result.Diff.Commit.Committer.Email, result.Diff.Commit.Author.Email}, true)
386 if err != nil {
387 log.Println("failed to get email to did mapping:", err)
388 }
389
390 vc, err := commitverify.GetVerifiedCommits(rp.db, emailToDidMap, []types.NiceDiff{*result.Diff})
391 if err != nil {
392 log.Println(err)
393 }
394
395 user := rp.oauth.GetUser(r)
396 repoInfo := f.RepoInfo(user)
397 pipelines, err := getPipelineStatuses(rp.db, repoInfo, []string{result.Diff.Commit.This})
398 if err != nil {
399 log.Println(err)
400 // non-fatal
401 }
402 var pipeline *db.Pipeline
403 if p, ok := pipelines[result.Diff.Commit.This]; ok {
404 pipeline = &p
405 }
406
407 rp.pages.RepoCommit(w, pages.RepoCommitParams{
408 LoggedInUser: user,
409 RepoInfo: f.RepoInfo(user),
410 RepoCommitResponse: result,
411 EmailToDidOrHandle: emailToDidOrHandle(rp, emailToDidMap),
412 VerifiedCommit: vc,
413 Pipeline: pipeline,
414 DiffOpts: diffOpts,
415 })
416}
417
418func (rp *Repo) RepoTree(w http.ResponseWriter, r *http.Request) {
419 f, err := rp.repoResolver.Resolve(r)
420 if err != nil {
421 log.Println("failed to fully resolve repo", err)
422 return
423 }
424
425 ref := chi.URLParam(r, "ref")
426 ref, _ = url.PathUnescape(ref)
427
428 // if the tree path has a trailing slash, let's strip it
429 // so we don't 404
430 treePath := chi.URLParam(r, "*")
431 treePath, _ = url.PathUnescape(treePath)
432 treePath = strings.TrimSuffix(treePath, "/")
433
434 scheme := "http"
435 if !rp.config.Core.Dev {
436 scheme = "https"
437 }
438 host := fmt.Sprintf("%s://%s", scheme, f.Knot)
439 xrpcc := &indigoxrpc.Client{
440 Host: host,
441 }
442
443 repo := fmt.Sprintf("%s/%s", f.OwnerDid(), f.Name)
444 xrpcResp, err := tangled.RepoTree(r.Context(), xrpcc, treePath, ref, repo)
445 if xrpcerr := xrpcclient.HandleXrpcErr(err); xrpcerr != nil {
446 log.Println("failed to call XRPC repo.tree", xrpcerr)
447 rp.pages.Error503(w)
448 return
449 }
450
451 // Convert XRPC response to internal types.RepoTreeResponse
452 files := make([]types.NiceTree, len(xrpcResp.Files))
453 for i, xrpcFile := range xrpcResp.Files {
454 file := types.NiceTree{
455 Name: xrpcFile.Name,
456 Mode: xrpcFile.Mode,
457 Size: int64(xrpcFile.Size),
458 IsFile: xrpcFile.Is_file,
459 IsSubtree: xrpcFile.Is_subtree,
460 }
461
462 // Convert last commit info if present
463 if xrpcFile.Last_commit != nil {
464 commitWhen, _ := time.Parse(time.RFC3339, xrpcFile.Last_commit.When)
465 file.LastCommit = &types.LastCommitInfo{
466 Hash: plumbing.NewHash(xrpcFile.Last_commit.Hash),
467 Message: xrpcFile.Last_commit.Message,
468 When: commitWhen,
469 }
470 }
471
472 files[i] = file
473 }
474
475 result := types.RepoTreeResponse{
476 Ref: xrpcResp.Ref,
477 Files: files,
478 }
479
480 if xrpcResp.Parent != nil {
481 result.Parent = *xrpcResp.Parent
482 }
483 if xrpcResp.Dotdot != nil {
484 result.DotDot = *xrpcResp.Dotdot
485 }
486
487 // redirects tree paths trying to access a blob; in this case the result.Files is unpopulated,
488 // so we can safely redirect to the "parent" (which is the same file).
489 if len(result.Files) == 0 && result.Parent == treePath {
490 redirectTo := fmt.Sprintf("/%s/blob/%s/%s", f.OwnerSlashRepo(), url.PathEscape(ref), result.Parent)
491 http.Redirect(w, r, redirectTo, http.StatusFound)
492 return
493 }
494
495 user := rp.oauth.GetUser(r)
496
497 var breadcrumbs [][]string
498 breadcrumbs = append(breadcrumbs, []string{f.Name, fmt.Sprintf("/%s/tree/%s", f.OwnerSlashRepo(), url.PathEscape(ref))})
499 if treePath != "" {
500 for idx, elem := range strings.Split(treePath, "/") {
501 breadcrumbs = append(breadcrumbs, []string{elem, fmt.Sprintf("%s/%s", breadcrumbs[idx][1], url.PathEscape(elem))})
502 }
503 }
504
505 sortFiles(result.Files)
506
507 rp.pages.RepoTree(w, pages.RepoTreeParams{
508 LoggedInUser: user,
509 BreadCrumbs: breadcrumbs,
510 TreePath: treePath,
511 RepoInfo: f.RepoInfo(user),
512 RepoTreeResponse: result,
513 })
514}
515
516func (rp *Repo) RepoTags(w http.ResponseWriter, r *http.Request) {
517 f, err := rp.repoResolver.Resolve(r)
518 if err != nil {
519 log.Println("failed to get repo and knot", err)
520 return
521 }
522
523 scheme := "http"
524 if !rp.config.Core.Dev {
525 scheme = "https"
526 }
527 host := fmt.Sprintf("%s://%s", scheme, f.Knot)
528 xrpcc := &indigoxrpc.Client{
529 Host: host,
530 }
531
532 repo := fmt.Sprintf("%s/%s", f.OwnerDid(), f.Name)
533 xrpcBytes, err := tangled.RepoTags(r.Context(), xrpcc, "", 0, repo)
534 if xrpcerr := xrpcclient.HandleXrpcErr(err); xrpcerr != nil {
535 log.Println("failed to call XRPC repo.tags", xrpcerr)
536 rp.pages.Error503(w)
537 return
538 }
539
540 var result types.RepoTagsResponse
541 if err := json.Unmarshal(xrpcBytes, &result); err != nil {
542 log.Println("failed to decode XRPC response", err)
543 rp.pages.Error503(w)
544 return
545 }
546
547 artifacts, err := db.GetArtifact(rp.db, db.FilterEq("repo_at", f.RepoAt()))
548 if err != nil {
549 log.Println("failed grab artifacts", err)
550 return
551 }
552
553 // convert artifacts to map for easy UI building
554 artifactMap := make(map[plumbing.Hash][]db.Artifact)
555 for _, a := range artifacts {
556 artifactMap[a.Tag] = append(artifactMap[a.Tag], a)
557 }
558
559 var danglingArtifacts []db.Artifact
560 for _, a := range artifacts {
561 found := false
562 for _, t := range result.Tags {
563 if t.Tag != nil {
564 if t.Tag.Hash == a.Tag {
565 found = true
566 }
567 }
568 }
569
570 if !found {
571 danglingArtifacts = append(danglingArtifacts, a)
572 }
573 }
574
575 user := rp.oauth.GetUser(r)
576 rp.pages.RepoTags(w, pages.RepoTagsParams{
577 LoggedInUser: user,
578 RepoInfo: f.RepoInfo(user),
579 RepoTagsResponse: result,
580 ArtifactMap: artifactMap,
581 DanglingArtifacts: danglingArtifacts,
582 })
583}
584
585func (rp *Repo) RepoBranches(w http.ResponseWriter, r *http.Request) {
586 f, err := rp.repoResolver.Resolve(r)
587 if err != nil {
588 log.Println("failed to get repo and knot", err)
589 return
590 }
591
592 scheme := "http"
593 if !rp.config.Core.Dev {
594 scheme = "https"
595 }
596 host := fmt.Sprintf("%s://%s", scheme, f.Knot)
597 xrpcc := &indigoxrpc.Client{
598 Host: host,
599 }
600
601 repo := fmt.Sprintf("%s/%s", f.OwnerDid(), f.Name)
602 xrpcBytes, err := tangled.RepoBranches(r.Context(), xrpcc, "", 0, repo)
603 if xrpcerr := xrpcclient.HandleXrpcErr(err); xrpcerr != nil {
604 log.Println("failed to call XRPC repo.branches", xrpcerr)
605 rp.pages.Error503(w)
606 return
607 }
608
609 var result types.RepoBranchesResponse
610 if err := json.Unmarshal(xrpcBytes, &result); err != nil {
611 log.Println("failed to decode XRPC response", err)
612 rp.pages.Error503(w)
613 return
614 }
615
616 sortBranches(result.Branches)
617
618 user := rp.oauth.GetUser(r)
619 rp.pages.RepoBranches(w, pages.RepoBranchesParams{
620 LoggedInUser: user,
621 RepoInfo: f.RepoInfo(user),
622 RepoBranchesResponse: result,
623 })
624}
625
626func (rp *Repo) RepoBlob(w http.ResponseWriter, r *http.Request) {
627 f, err := rp.repoResolver.Resolve(r)
628 if err != nil {
629 log.Println("failed to get repo and knot", err)
630 return
631 }
632
633 ref := chi.URLParam(r, "ref")
634 ref, _ = url.PathUnescape(ref)
635
636 filePath := chi.URLParam(r, "*")
637 filePath, _ = url.PathUnescape(filePath)
638
639 scheme := "http"
640 if !rp.config.Core.Dev {
641 scheme = "https"
642 }
643 host := fmt.Sprintf("%s://%s", scheme, f.Knot)
644 xrpcc := &indigoxrpc.Client{
645 Host: host,
646 }
647
648 repo := fmt.Sprintf("%s/%s", f.OwnerDid(), f.Repo.Name)
649 resp, err := tangled.RepoBlob(r.Context(), xrpcc, filePath, false, ref, repo)
650 if xrpcerr := xrpcclient.HandleXrpcErr(err); xrpcerr != nil {
651 log.Println("failed to call XRPC repo.blob", xrpcerr)
652 rp.pages.Error503(w)
653 return
654 }
655
656 // Use XRPC response directly instead of converting to internal types
657
658 var breadcrumbs [][]string
659 breadcrumbs = append(breadcrumbs, []string{f.Name, fmt.Sprintf("/%s/tree/%s", f.OwnerSlashRepo(), url.PathEscape(ref))})
660 if filePath != "" {
661 for idx, elem := range strings.Split(filePath, "/") {
662 breadcrumbs = append(breadcrumbs, []string{elem, fmt.Sprintf("%s/%s", breadcrumbs[idx][1], url.PathEscape(elem))})
663 }
664 }
665
666 showRendered := false
667 renderToggle := false
668
669 if markup.GetFormat(resp.Path) == markup.FormatMarkdown {
670 renderToggle = true
671 showRendered = r.URL.Query().Get("code") != "true"
672 }
673
674 var unsupported bool
675 var isImage bool
676 var isVideo bool
677 var contentSrc string
678
679 if resp.IsBinary != nil && *resp.IsBinary {
680 ext := strings.ToLower(filepath.Ext(resp.Path))
681 switch ext {
682 case ".jpg", ".jpeg", ".png", ".gif", ".svg", ".webp":
683 isImage = true
684 case ".mp4", ".webm", ".ogg", ".mov", ".avi":
685 isVideo = true
686 default:
687 unsupported = true
688 }
689
690 // fetch the raw binary content using sh.tangled.repo.blob xrpc
691 repoName := fmt.Sprintf("%s/%s", f.OwnerDid(), f.Name)
692
693 baseURL := &url.URL{
694 Scheme: scheme,
695 Host: f.Knot,
696 Path: "/xrpc/sh.tangled.repo.blob",
697 }
698 query := baseURL.Query()
699 query.Set("repo", repoName)
700 query.Set("ref", ref)
701 query.Set("path", filePath)
702 query.Set("raw", "true")
703 baseURL.RawQuery = query.Encode()
704 blobURL := baseURL.String()
705
706 contentSrc = blobURL
707 if !rp.config.Core.Dev {
708 contentSrc = markup.GenerateCamoURL(rp.config.Camo.Host, rp.config.Camo.SharedSecret, blobURL)
709 }
710 }
711
712 lines := 0
713 if resp.IsBinary == nil || !*resp.IsBinary {
714 lines = strings.Count(resp.Content, "\n") + 1
715 }
716
717 var sizeHint uint64
718 if resp.Size != nil {
719 sizeHint = uint64(*resp.Size)
720 } else {
721 sizeHint = uint64(len(resp.Content))
722 }
723
724 user := rp.oauth.GetUser(r)
725
726 // Determine if content is binary (dereference pointer)
727 isBinary := false
728 if resp.IsBinary != nil {
729 isBinary = *resp.IsBinary
730 }
731
732 rp.pages.RepoBlob(w, pages.RepoBlobParams{
733 LoggedInUser: user,
734 RepoInfo: f.RepoInfo(user),
735 BreadCrumbs: breadcrumbs,
736 ShowRendered: showRendered,
737 RenderToggle: renderToggle,
738 Unsupported: unsupported,
739 IsImage: isImage,
740 IsVideo: isVideo,
741 ContentSrc: contentSrc,
742 RepoBlob_Output: resp,
743 Contents: resp.Content,
744 Lines: lines,
745 SizeHint: sizeHint,
746 IsBinary: isBinary,
747 })
748}
749
750func (rp *Repo) RepoBlobRaw(w http.ResponseWriter, r *http.Request) {
751 f, err := rp.repoResolver.Resolve(r)
752 if err != nil {
753 log.Println("failed to get repo and knot", err)
754 w.WriteHeader(http.StatusBadRequest)
755 return
756 }
757
758 ref := chi.URLParam(r, "ref")
759 ref, _ = url.PathUnescape(ref)
760
761 filePath := chi.URLParam(r, "*")
762 filePath, _ = url.PathUnescape(filePath)
763
764 scheme := "http"
765 if !rp.config.Core.Dev {
766 scheme = "https"
767 }
768
769 repo := fmt.Sprintf("%s/%s", f.OwnerDid(), f.Repo.Name)
770 baseURL := &url.URL{
771 Scheme: scheme,
772 Host: f.Knot,
773 Path: "/xrpc/sh.tangled.repo.blob",
774 }
775 query := baseURL.Query()
776 query.Set("repo", repo)
777 query.Set("ref", ref)
778 query.Set("path", filePath)
779 query.Set("raw", "true")
780 baseURL.RawQuery = query.Encode()
781 blobURL := baseURL.String()
782
783 req, err := http.NewRequest("GET", blobURL, nil)
784 if err != nil {
785 log.Println("failed to create request", err)
786 return
787 }
788
789 // forward the If-None-Match header
790 if clientETag := r.Header.Get("If-None-Match"); clientETag != "" {
791 req.Header.Set("If-None-Match", clientETag)
792 }
793
794 client := &http.Client{}
795 resp, err := client.Do(req)
796 if err != nil {
797 log.Println("failed to reach knotserver", err)
798 rp.pages.Error503(w)
799 return
800 }
801 defer resp.Body.Close()
802
803 // forward 304 not modified
804 if resp.StatusCode == http.StatusNotModified {
805 w.WriteHeader(http.StatusNotModified)
806 return
807 }
808
809 if resp.StatusCode != http.StatusOK {
810 log.Printf("knotserver returned non-OK status for raw blob %s: %d", blobURL, resp.StatusCode)
811 w.WriteHeader(resp.StatusCode)
812 _, _ = io.Copy(w, resp.Body)
813 return
814 }
815
816 contentType := resp.Header.Get("Content-Type")
817 body, err := io.ReadAll(resp.Body)
818 if err != nil {
819 log.Printf("error reading response body from knotserver: %v", err)
820 w.WriteHeader(http.StatusInternalServerError)
821 return
822 }
823
824 if strings.HasPrefix(contentType, "text/") || isTextualMimeType(contentType) {
825 // serve all textual content as text/plain
826 w.Header().Set("Content-Type", "text/plain; charset=utf-8")
827 w.Write(body)
828 } else if strings.HasPrefix(contentType, "image/") || strings.HasPrefix(contentType, "video/") {
829 // serve images and videos with their original content type
830 w.Header().Set("Content-Type", contentType)
831 w.Write(body)
832 } else {
833 w.WriteHeader(http.StatusUnsupportedMediaType)
834 w.Write([]byte("unsupported content type"))
835 return
836 }
837}
838
839// isTextualMimeType returns true if the MIME type represents textual content
840// that should be served as text/plain
841func isTextualMimeType(mimeType string) bool {
842 textualTypes := []string{
843 "application/json",
844 "application/xml",
845 "application/yaml",
846 "application/x-yaml",
847 "application/toml",
848 "application/javascript",
849 "application/ecmascript",
850 "message/",
851 }
852
853 return slices.Contains(textualTypes, mimeType)
854}
855
856// modify the spindle configured for this repo
857func (rp *Repo) EditSpindle(w http.ResponseWriter, r *http.Request) {
858 user := rp.oauth.GetUser(r)
859 l := rp.logger.With("handler", "EditSpindle")
860 l = l.With("did", user.Did)
861 l = l.With("handle", user.Handle)
862
863 errorId := "operation-error"
864 fail := func(msg string, err error) {
865 l.Error(msg, "err", err)
866 rp.pages.Notice(w, errorId, msg)
867 }
868
869 f, err := rp.repoResolver.Resolve(r)
870 if err != nil {
871 fail("Failed to resolve repo. Try again later", err)
872 return
873 }
874
875 newSpindle := r.FormValue("spindle")
876 removingSpindle := newSpindle == "[[none]]" // see pages/templates/repo/settings/pipelines.html for more info on why we use this value
877 client, err := rp.oauth.AuthorizedClient(r)
878 if err != nil {
879 fail("Failed to authorize. Try again later.", err)
880 return
881 }
882
883 if !removingSpindle {
884 // ensure that this is a valid spindle for this user
885 validSpindles, err := rp.enforcer.GetSpindlesForUser(user.Did)
886 if err != nil {
887 fail("Failed to find spindles. Try again later.", err)
888 return
889 }
890
891 if !slices.Contains(validSpindles, newSpindle) {
892 fail("Failed to configure spindle.", fmt.Errorf("%s is not a valid spindle: %q", newSpindle, validSpindles))
893 return
894 }
895 }
896
897 newRepo := f.Repo
898 newRepo.Spindle = newSpindle
899 record := newRepo.AsRecord()
900
901 spindlePtr := &newSpindle
902 if removingSpindle {
903 spindlePtr = nil
904 newRepo.Spindle = ""
905 }
906
907 // optimistic update
908 err = db.UpdateSpindle(rp.db, newRepo.RepoAt().String(), spindlePtr)
909 if err != nil {
910 fail("Failed to update spindle. Try again later.", err)
911 return
912 }
913
914 ex, err := client.RepoGetRecord(r.Context(), "", tangled.RepoNSID, newRepo.Did, newRepo.Rkey)
915 if err != nil {
916 fail("Failed to update spindle, no record found on PDS.", err)
917 return
918 }
919 _, err = client.RepoPutRecord(r.Context(), &comatproto.RepoPutRecord_Input{
920 Collection: tangled.RepoNSID,
921 Repo: newRepo.Did,
922 Rkey: newRepo.Rkey,
923 SwapRecord: ex.Cid,
924 Record: &lexutil.LexiconTypeDecoder{
925 Val: &record,
926 },
927 })
928
929 if err != nil {
930 fail("Failed to update spindle, unable to save to PDS.", err)
931 return
932 }
933
934 if !removingSpindle {
935 // add this spindle to spindle stream
936 rp.spindlestream.AddSource(
937 context.Background(),
938 eventconsumer.NewSpindleSource(newSpindle),
939 )
940 }
941
942 rp.pages.HxRefresh(w)
943}
944
945func (rp *Repo) AddLabel(w http.ResponseWriter, r *http.Request) {
946 user := rp.oauth.GetUser(r)
947 l := rp.logger.With("handler", "AddLabel")
948 l = l.With("did", user.Did)
949 l = l.With("handle", user.Handle)
950
951 f, err := rp.repoResolver.Resolve(r)
952 if err != nil {
953 l.Error("failed to get repo and knot", "err", err)
954 return
955 }
956
957 errorId := "add-label-error"
958 fail := func(msg string, err error) {
959 l.Error(msg, "err", err)
960 rp.pages.Notice(w, errorId, msg)
961 }
962
963 // get form values for label definition
964 name := r.FormValue("name")
965 concreteType := r.FormValue("valueType")
966 valueFormat := r.FormValue("valueFormat")
967 enumValues := r.FormValue("enumValues")
968 scope := r.FormValue("scope")
969 color := r.FormValue("color")
970 multiple := r.FormValue("multiple") == "true"
971
972 var variants []string
973 for part := range strings.SplitSeq(enumValues, ",") {
974 if part = strings.TrimSpace(part); part != "" {
975 variants = append(variants, part)
976 }
977 }
978
979 format := db.ValueTypeFormatAny
980 if valueFormat == "did" {
981 format = db.ValueTypeFormatDid
982 }
983
984 valueType := db.ValueType{
985 Type: db.ConcreteType(concreteType),
986 Format: format,
987 Enum: variants,
988 }
989
990 label := db.LabelDefinition{
991 Did: user.Did,
992 Rkey: tid.TID(),
993 Name: name,
994 ValueType: valueType,
995 Scope: syntax.NSID(scope),
996 Color: &color,
997 Multiple: multiple,
998 Created: time.Now(),
999 }
1000 if err := rp.validator.ValidateLabelDefinition(&label); err != nil {
1001 fail(err.Error(), err)
1002 return
1003 }
1004
1005 // announce this relation into the firehose, store into owners' pds
1006 client, err := rp.oauth.AuthorizedClient(r)
1007 if err != nil {
1008 fail(err.Error(), err)
1009 return
1010 }
1011
1012 // emit a labelRecord
1013 labelRecord := label.AsRecord()
1014 resp, err := client.RepoPutRecord(r.Context(), &comatproto.RepoPutRecord_Input{
1015 Collection: tangled.LabelDefinitionNSID,
1016 Repo: label.Did,
1017 Rkey: label.Rkey,
1018 Record: &lexutil.LexiconTypeDecoder{
1019 Val: &labelRecord,
1020 },
1021 })
1022 // invalid record
1023 if err != nil {
1024 fail("Failed to write record to PDS.", err)
1025 return
1026 }
1027
1028 aturi := resp.Uri
1029 l = l.With("at-uri", aturi)
1030 l.Info("wrote label record to PDS")
1031
1032 // update the repo to subscribe to this label
1033 newRepo := f.Repo
1034 newRepo.Labels = append(newRepo.Labels, aturi)
1035 repoRecord := newRepo.AsRecord()
1036
1037 ex, err := client.RepoGetRecord(r.Context(), "", tangled.RepoNSID, newRepo.Did, newRepo.Rkey)
1038 if err != nil {
1039 fail("Failed to update labels, no record found on PDS.", err)
1040 return
1041 }
1042 _, err = client.RepoPutRecord(r.Context(), &comatproto.RepoPutRecord_Input{
1043 Collection: tangled.RepoNSID,
1044 Repo: newRepo.Did,
1045 Rkey: newRepo.Rkey,
1046 SwapRecord: ex.Cid,
1047 Record: &lexutil.LexiconTypeDecoder{
1048 Val: &repoRecord,
1049 },
1050 })
1051
1052 tx, err := rp.db.BeginTx(r.Context(), nil)
1053 if err != nil {
1054 fail("Failed to add label.", err)
1055 return
1056 }
1057
1058 rollback := func() {
1059 err1 := tx.Rollback()
1060 err2 := rollbackRecord(context.Background(), aturi, client)
1061
1062 // ignore txn complete errors, this is okay
1063 if errors.Is(err1, sql.ErrTxDone) {
1064 err1 = nil
1065 }
1066
1067 if errs := errors.Join(err1, err2); errs != nil {
1068 l.Error("failed to rollback changes", "errs", errs)
1069 return
1070 }
1071 }
1072 defer rollback()
1073
1074 _, err = db.AddLabelDefinition(tx, &label)
1075 if err != nil {
1076 fail("Failed to add label.", err)
1077 return
1078 }
1079
1080 err = db.SubscribeLabel(tx, &db.RepoLabel{
1081 RepoAt: f.RepoAt(),
1082 LabelAt: label.AtUri(),
1083 })
1084
1085 err = tx.Commit()
1086 if err != nil {
1087 fail("Failed to add label.", err)
1088 return
1089 }
1090
1091 // clear aturi when everything is successful
1092 aturi = ""
1093
1094 rp.pages.HxRefresh(w)
1095}
1096
1097func (rp *Repo) DeleteLabel(w http.ResponseWriter, r *http.Request) {
1098 user := rp.oauth.GetUser(r)
1099 l := rp.logger.With("handler", "DeleteLabel")
1100 l = l.With("did", user.Did)
1101 l = l.With("handle", user.Handle)
1102
1103 f, err := rp.repoResolver.Resolve(r)
1104 if err != nil {
1105 l.Error("failed to get repo and knot", "err", err)
1106 return
1107 }
1108
1109 errorId := "label-operation"
1110 fail := func(msg string, err error) {
1111 l.Error(msg, "err", err)
1112 rp.pages.Notice(w, errorId, msg)
1113 }
1114
1115 // get form values
1116 labelId := r.FormValue("label-id")
1117
1118 label, err := db.GetLabelDefinition(rp.db, db.FilterEq("id", labelId))
1119 if err != nil {
1120 fail("Failed to find label definition.", err)
1121 return
1122 }
1123
1124 client, err := rp.oauth.AuthorizedClient(r)
1125 if err != nil {
1126 fail(err.Error(), err)
1127 return
1128 }
1129
1130 // delete label record from PDS
1131 _, err = client.RepoDeleteRecord(r.Context(), &comatproto.RepoDeleteRecord_Input{
1132 Collection: tangled.LabelDefinitionNSID,
1133 Repo: label.Did,
1134 Rkey: label.Rkey,
1135 })
1136 if err != nil {
1137 fail("Failed to delete label record from PDS.", err)
1138 return
1139 }
1140
1141 // update repo record to remove the label reference
1142 newRepo := f.Repo
1143 var updated []string
1144 removedAt := label.AtUri().String()
1145 for _, l := range newRepo.Labels {
1146 if l != removedAt {
1147 updated = append(updated, l)
1148 }
1149 }
1150 newRepo.Labels = updated
1151 repoRecord := newRepo.AsRecord()
1152
1153 ex, err := client.RepoGetRecord(r.Context(), "", tangled.RepoNSID, newRepo.Did, newRepo.Rkey)
1154 if err != nil {
1155 fail("Failed to update labels, no record found on PDS.", err)
1156 return
1157 }
1158 _, err = client.RepoPutRecord(r.Context(), &comatproto.RepoPutRecord_Input{
1159 Collection: tangled.RepoNSID,
1160 Repo: newRepo.Did,
1161 Rkey: newRepo.Rkey,
1162 SwapRecord: ex.Cid,
1163 Record: &lexutil.LexiconTypeDecoder{
1164 Val: &repoRecord,
1165 },
1166 })
1167 if err != nil {
1168 fail("Failed to update repo record.", err)
1169 return
1170 }
1171
1172 // transaction for DB changes
1173 tx, err := rp.db.BeginTx(r.Context(), nil)
1174 if err != nil {
1175 fail("Failed to delete label.", err)
1176 return
1177 }
1178 defer tx.Rollback()
1179
1180 err = db.UnsubscribeLabel(
1181 tx,
1182 db.FilterEq("repo_at", f.RepoAt()),
1183 db.FilterEq("label_at", removedAt),
1184 )
1185 if err != nil {
1186 fail("Failed to unsubscribe label.", err)
1187 return
1188 }
1189
1190 err = db.DeleteLabelDefinition(tx, db.FilterEq("id", label.Id))
1191 if err != nil {
1192 fail("Failed to delete label definition.", err)
1193 return
1194 }
1195
1196 err = tx.Commit()
1197 if err != nil {
1198 fail("Failed to delete label.", err)
1199 return
1200 }
1201
1202 // everything succeeded
1203 rp.pages.HxRefresh(w)
1204}
1205
1206func (rp *Repo) AddCollaborator(w http.ResponseWriter, r *http.Request) {
1207 user := rp.oauth.GetUser(r)
1208 l := rp.logger.With("handler", "AddCollaborator")
1209 l = l.With("did", user.Did)
1210 l = l.With("handle", user.Handle)
1211
1212 f, err := rp.repoResolver.Resolve(r)
1213 if err != nil {
1214 l.Error("failed to get repo and knot", "err", err)
1215 return
1216 }
1217
1218 errorId := "add-collaborator-error"
1219 fail := func(msg string, err error) {
1220 l.Error(msg, "err", err)
1221 rp.pages.Notice(w, errorId, msg)
1222 }
1223
1224 collaborator := r.FormValue("collaborator")
1225 if collaborator == "" {
1226 fail("Invalid form.", nil)
1227 return
1228 }
1229
1230 // remove a single leading `@`, to make @handle work with ResolveIdent
1231 collaborator = strings.TrimPrefix(collaborator, "@")
1232
1233 collaboratorIdent, err := rp.idResolver.ResolveIdent(r.Context(), collaborator)
1234 if err != nil {
1235 fail(fmt.Sprintf("'%s' is not a valid DID/handle.", collaborator), err)
1236 return
1237 }
1238
1239 if collaboratorIdent.DID.String() == user.Did {
1240 fail("You seem to be adding yourself as a collaborator.", nil)
1241 return
1242 }
1243 l = l.With("collaborator", collaboratorIdent.Handle)
1244 l = l.With("knot", f.Knot)
1245
1246 // announce this relation into the firehose, store into owners' pds
1247 client, err := rp.oauth.AuthorizedClient(r)
1248 if err != nil {
1249 fail("Failed to write to PDS.", err)
1250 return
1251 }
1252
1253 // emit a record
1254 currentUser := rp.oauth.GetUser(r)
1255 rkey := tid.TID()
1256 createdAt := time.Now()
1257 resp, err := client.RepoPutRecord(r.Context(), &comatproto.RepoPutRecord_Input{
1258 Collection: tangled.RepoCollaboratorNSID,
1259 Repo: currentUser.Did,
1260 Rkey: rkey,
1261 Record: &lexutil.LexiconTypeDecoder{
1262 Val: &tangled.RepoCollaborator{
1263 Subject: collaboratorIdent.DID.String(),
1264 Repo: string(f.RepoAt()),
1265 CreatedAt: createdAt.Format(time.RFC3339),
1266 }},
1267 })
1268 // invalid record
1269 if err != nil {
1270 fail("Failed to write record to PDS.", err)
1271 return
1272 }
1273
1274 aturi := resp.Uri
1275 l = l.With("at-uri", aturi)
1276 l.Info("wrote record to PDS")
1277
1278 tx, err := rp.db.BeginTx(r.Context(), nil)
1279 if err != nil {
1280 fail("Failed to add collaborator.", err)
1281 return
1282 }
1283
1284 rollback := func() {
1285 err1 := tx.Rollback()
1286 err2 := rp.enforcer.E.LoadPolicy()
1287 err3 := rollbackRecord(context.Background(), aturi, client)
1288
1289 // ignore txn complete errors, this is okay
1290 if errors.Is(err1, sql.ErrTxDone) {
1291 err1 = nil
1292 }
1293
1294 if errs := errors.Join(err1, err2, err3); errs != nil {
1295 l.Error("failed to rollback changes", "errs", errs)
1296 return
1297 }
1298 }
1299 defer rollback()
1300
1301 err = rp.enforcer.AddCollaborator(collaboratorIdent.DID.String(), f.Knot, f.DidSlashRepo())
1302 if err != nil {
1303 fail("Failed to add collaborator permissions.", err)
1304 return
1305 }
1306
1307 err = db.AddCollaborator(tx, db.Collaborator{
1308 Did: syntax.DID(currentUser.Did),
1309 Rkey: rkey,
1310 SubjectDid: collaboratorIdent.DID,
1311 RepoAt: f.RepoAt(),
1312 Created: createdAt,
1313 })
1314 if err != nil {
1315 fail("Failed to add collaborator.", err)
1316 return
1317 }
1318
1319 err = tx.Commit()
1320 if err != nil {
1321 fail("Failed to add collaborator.", err)
1322 return
1323 }
1324
1325 err = rp.enforcer.E.SavePolicy()
1326 if err != nil {
1327 fail("Failed to update collaborator permissions.", err)
1328 return
1329 }
1330
1331 // clear aturi to when everything is successful
1332 aturi = ""
1333
1334 rp.pages.HxRefresh(w)
1335}
1336
1337func (rp *Repo) DeleteRepo(w http.ResponseWriter, r *http.Request) {
1338 user := rp.oauth.GetUser(r)
1339
1340 noticeId := "operation-error"
1341 f, err := rp.repoResolver.Resolve(r)
1342 if err != nil {
1343 log.Println("failed to get repo and knot", err)
1344 return
1345 }
1346
1347 // remove record from pds
1348 xrpcClient, err := rp.oauth.AuthorizedClient(r)
1349 if err != nil {
1350 log.Println("failed to get authorized client", err)
1351 return
1352 }
1353 _, err = xrpcClient.RepoDeleteRecord(r.Context(), &comatproto.RepoDeleteRecord_Input{
1354 Collection: tangled.RepoNSID,
1355 Repo: user.Did,
1356 Rkey: f.Rkey,
1357 })
1358 if err != nil {
1359 log.Printf("failed to delete record: %s", err)
1360 rp.pages.Notice(w, noticeId, "Failed to delete repository from PDS.")
1361 return
1362 }
1363 log.Println("removed repo record ", f.RepoAt().String())
1364
1365 client, err := rp.oauth.ServiceClient(
1366 r,
1367 oauth.WithService(f.Knot),
1368 oauth.WithLxm(tangled.RepoDeleteNSID),
1369 oauth.WithDev(rp.config.Core.Dev),
1370 )
1371 if err != nil {
1372 log.Println("failed to connect to knot server:", err)
1373 return
1374 }
1375
1376 err = tangled.RepoDelete(
1377 r.Context(),
1378 client,
1379 &tangled.RepoDelete_Input{
1380 Did: f.OwnerDid(),
1381 Name: f.Name,
1382 Rkey: f.Rkey,
1383 },
1384 )
1385 if err := xrpcclient.HandleXrpcErr(err); err != nil {
1386 rp.pages.Notice(w, noticeId, err.Error())
1387 return
1388 }
1389 log.Println("deleted repo from knot")
1390
1391 tx, err := rp.db.BeginTx(r.Context(), nil)
1392 if err != nil {
1393 log.Println("failed to start tx")
1394 w.Write(fmt.Append(nil, "failed to add collaborator: ", err))
1395 return
1396 }
1397 defer func() {
1398 tx.Rollback()
1399 err = rp.enforcer.E.LoadPolicy()
1400 if err != nil {
1401 log.Println("failed to rollback policies")
1402 }
1403 }()
1404
1405 // remove collaborator RBAC
1406 repoCollaborators, err := rp.enforcer.E.GetImplicitUsersForResourceByDomain(f.DidSlashRepo(), f.Knot)
1407 if err != nil {
1408 rp.pages.Notice(w, noticeId, "Failed to remove collaborators")
1409 return
1410 }
1411 for _, c := range repoCollaborators {
1412 did := c[0]
1413 rp.enforcer.RemoveCollaborator(did, f.Knot, f.DidSlashRepo())
1414 }
1415 log.Println("removed collaborators")
1416
1417 // remove repo RBAC
1418 err = rp.enforcer.RemoveRepo(f.OwnerDid(), f.Knot, f.DidSlashRepo())
1419 if err != nil {
1420 rp.pages.Notice(w, noticeId, "Failed to update RBAC rules")
1421 return
1422 }
1423
1424 // remove repo from db
1425 err = db.RemoveRepo(tx, f.OwnerDid(), f.Name)
1426 if err != nil {
1427 rp.pages.Notice(w, noticeId, "Failed to update appview")
1428 return
1429 }
1430 log.Println("removed repo from db")
1431
1432 err = tx.Commit()
1433 if err != nil {
1434 log.Println("failed to commit changes", err)
1435 http.Error(w, err.Error(), http.StatusInternalServerError)
1436 return
1437 }
1438
1439 err = rp.enforcer.E.SavePolicy()
1440 if err != nil {
1441 log.Println("failed to update ACLs", err)
1442 http.Error(w, err.Error(), http.StatusInternalServerError)
1443 return
1444 }
1445
1446 rp.pages.HxRedirect(w, fmt.Sprintf("/%s", f.OwnerDid()))
1447}
1448
1449func (rp *Repo) SetDefaultBranch(w http.ResponseWriter, r *http.Request) {
1450 f, err := rp.repoResolver.Resolve(r)
1451 if err != nil {
1452 log.Println("failed to get repo and knot", err)
1453 return
1454 }
1455
1456 noticeId := "operation-error"
1457 branch := r.FormValue("branch")
1458 if branch == "" {
1459 http.Error(w, "malformed form", http.StatusBadRequest)
1460 return
1461 }
1462
1463 client, err := rp.oauth.ServiceClient(
1464 r,
1465 oauth.WithService(f.Knot),
1466 oauth.WithLxm(tangled.RepoSetDefaultBranchNSID),
1467 oauth.WithDev(rp.config.Core.Dev),
1468 )
1469 if err != nil {
1470 log.Println("failed to connect to knot server:", err)
1471 rp.pages.Notice(w, noticeId, "Failed to connect to knot server.")
1472 return
1473 }
1474
1475 xe := tangled.RepoSetDefaultBranch(
1476 r.Context(),
1477 client,
1478 &tangled.RepoSetDefaultBranch_Input{
1479 Repo: f.RepoAt().String(),
1480 DefaultBranch: branch,
1481 },
1482 )
1483 if err := xrpcclient.HandleXrpcErr(xe); err != nil {
1484 log.Println("xrpc failed", "err", xe)
1485 rp.pages.Notice(w, noticeId, err.Error())
1486 return
1487 }
1488
1489 rp.pages.HxRefresh(w)
1490}
1491
1492func (rp *Repo) Secrets(w http.ResponseWriter, r *http.Request) {
1493 user := rp.oauth.GetUser(r)
1494 l := rp.logger.With("handler", "Secrets")
1495 l = l.With("handle", user.Handle)
1496 l = l.With("did", user.Did)
1497
1498 f, err := rp.repoResolver.Resolve(r)
1499 if err != nil {
1500 log.Println("failed to get repo and knot", err)
1501 return
1502 }
1503
1504 if f.Spindle == "" {
1505 log.Println("empty spindle cannot add/rm secret", err)
1506 return
1507 }
1508
1509 lxm := tangled.RepoAddSecretNSID
1510 if r.Method == http.MethodDelete {
1511 lxm = tangled.RepoRemoveSecretNSID
1512 }
1513
1514 spindleClient, err := rp.oauth.ServiceClient(
1515 r,
1516 oauth.WithService(f.Spindle),
1517 oauth.WithLxm(lxm),
1518 oauth.WithExp(60),
1519 oauth.WithDev(rp.config.Core.Dev),
1520 )
1521 if err != nil {
1522 log.Println("failed to create spindle client", err)
1523 return
1524 }
1525
1526 key := r.FormValue("key")
1527 if key == "" {
1528 w.WriteHeader(http.StatusBadRequest)
1529 return
1530 }
1531
1532 switch r.Method {
1533 case http.MethodPut:
1534 errorId := "add-secret-error"
1535
1536 value := r.FormValue("value")
1537 if value == "" {
1538 w.WriteHeader(http.StatusBadRequest)
1539 return
1540 }
1541
1542 err = tangled.RepoAddSecret(
1543 r.Context(),
1544 spindleClient,
1545 &tangled.RepoAddSecret_Input{
1546 Repo: f.RepoAt().String(),
1547 Key: key,
1548 Value: value,
1549 },
1550 )
1551 if err != nil {
1552 l.Error("Failed to add secret.", "err", err)
1553 rp.pages.Notice(w, errorId, "Failed to add secret.")
1554 return
1555 }
1556
1557 case http.MethodDelete:
1558 errorId := "operation-error"
1559
1560 err = tangled.RepoRemoveSecret(
1561 r.Context(),
1562 spindleClient,
1563 &tangled.RepoRemoveSecret_Input{
1564 Repo: f.RepoAt().String(),
1565 Key: key,
1566 },
1567 )
1568 if err != nil {
1569 l.Error("Failed to delete secret.", "err", err)
1570 rp.pages.Notice(w, errorId, "Failed to delete secret.")
1571 return
1572 }
1573 }
1574
1575 rp.pages.HxRefresh(w)
1576}
1577
1578type tab = map[string]any
1579
1580var (
1581 // would be great to have ordered maps right about now
1582 settingsTabs []tab = []tab{
1583 {"Name": "general", "Icon": "sliders-horizontal"},
1584 {"Name": "access", "Icon": "users"},
1585 {"Name": "pipelines", "Icon": "layers-2"},
1586 }
1587)
1588
1589func (rp *Repo) RepoSettings(w http.ResponseWriter, r *http.Request) {
1590 tabVal := r.URL.Query().Get("tab")
1591 if tabVal == "" {
1592 tabVal = "general"
1593 }
1594
1595 switch tabVal {
1596 case "general":
1597 rp.generalSettings(w, r)
1598
1599 case "access":
1600 rp.accessSettings(w, r)
1601
1602 case "pipelines":
1603 rp.pipelineSettings(w, r)
1604 }
1605}
1606
1607func (rp *Repo) generalSettings(w http.ResponseWriter, r *http.Request) {
1608 f, err := rp.repoResolver.Resolve(r)
1609 user := rp.oauth.GetUser(r)
1610
1611 scheme := "http"
1612 if !rp.config.Core.Dev {
1613 scheme = "https"
1614 }
1615 host := fmt.Sprintf("%s://%s", scheme, f.Knot)
1616 xrpcc := &indigoxrpc.Client{
1617 Host: host,
1618 }
1619
1620 repo := fmt.Sprintf("%s/%s", f.OwnerDid(), f.Name)
1621 xrpcBytes, err := tangled.RepoBranches(r.Context(), xrpcc, "", 0, repo)
1622 if xrpcerr := xrpcclient.HandleXrpcErr(err); xrpcerr != nil {
1623 log.Println("failed to call XRPC repo.branches", xrpcerr)
1624 rp.pages.Error503(w)
1625 return
1626 }
1627
1628 var result types.RepoBranchesResponse
1629 if err := json.Unmarshal(xrpcBytes, &result); err != nil {
1630 log.Println("failed to decode XRPC response", err)
1631 rp.pages.Error503(w)
1632 return
1633 }
1634
1635 labels, err := db.GetLabelDefinitions(rp.db, db.FilterIn("at_uri", f.Repo.Labels))
1636 if err != nil {
1637 log.Println("failed to fetch labels", err)
1638 rp.pages.Error503(w)
1639 return
1640 }
1641
1642 rp.pages.RepoGeneralSettings(w, pages.RepoGeneralSettingsParams{
1643 LoggedInUser: user,
1644 RepoInfo: f.RepoInfo(user),
1645 Branches: result.Branches,
1646 Labels: labels,
1647 Tabs: settingsTabs,
1648 Tab: "general",
1649 })
1650}
1651
1652func (rp *Repo) accessSettings(w http.ResponseWriter, r *http.Request) {
1653 f, err := rp.repoResolver.Resolve(r)
1654 user := rp.oauth.GetUser(r)
1655
1656 repoCollaborators, err := f.Collaborators(r.Context())
1657 if err != nil {
1658 log.Println("failed to get collaborators", err)
1659 }
1660
1661 rp.pages.RepoAccessSettings(w, pages.RepoAccessSettingsParams{
1662 LoggedInUser: user,
1663 RepoInfo: f.RepoInfo(user),
1664 Tabs: settingsTabs,
1665 Tab: "access",
1666 Collaborators: repoCollaborators,
1667 })
1668}
1669
1670func (rp *Repo) pipelineSettings(w http.ResponseWriter, r *http.Request) {
1671 f, err := rp.repoResolver.Resolve(r)
1672 user := rp.oauth.GetUser(r)
1673
1674 // all spindles that the repo owner is a member of
1675 spindles, err := rp.enforcer.GetSpindlesForUser(f.OwnerDid())
1676 if err != nil {
1677 log.Println("failed to fetch spindles", err)
1678 return
1679 }
1680
1681 var secrets []*tangled.RepoListSecrets_Secret
1682 if f.Spindle != "" {
1683 if spindleClient, err := rp.oauth.ServiceClient(
1684 r,
1685 oauth.WithService(f.Spindle),
1686 oauth.WithLxm(tangled.RepoListSecretsNSID),
1687 oauth.WithExp(60),
1688 oauth.WithDev(rp.config.Core.Dev),
1689 ); err != nil {
1690 log.Println("failed to create spindle client", err)
1691 } else if resp, err := tangled.RepoListSecrets(r.Context(), spindleClient, f.RepoAt().String()); err != nil {
1692 log.Println("failed to fetch secrets", err)
1693 } else {
1694 secrets = resp.Secrets
1695 }
1696 }
1697
1698 slices.SortFunc(secrets, func(a, b *tangled.RepoListSecrets_Secret) int {
1699 return strings.Compare(a.Key, b.Key)
1700 })
1701
1702 var dids []string
1703 for _, s := range secrets {
1704 dids = append(dids, s.CreatedBy)
1705 }
1706 resolvedIdents := rp.idResolver.ResolveIdents(r.Context(), dids)
1707
1708 // convert to a more manageable form
1709 var niceSecret []map[string]any
1710 for id, s := range secrets {
1711 when, _ := time.Parse(time.RFC3339, s.CreatedAt)
1712 niceSecret = append(niceSecret, map[string]any{
1713 "Id": id,
1714 "Key": s.Key,
1715 "CreatedAt": when,
1716 "CreatedBy": resolvedIdents[id].Handle.String(),
1717 })
1718 }
1719
1720 rp.pages.RepoPipelineSettings(w, pages.RepoPipelineSettingsParams{
1721 LoggedInUser: user,
1722 RepoInfo: f.RepoInfo(user),
1723 Tabs: settingsTabs,
1724 Tab: "pipelines",
1725 Spindles: spindles,
1726 CurrentSpindle: f.Spindle,
1727 Secrets: niceSecret,
1728 })
1729}
1730
1731func (rp *Repo) SyncRepoFork(w http.ResponseWriter, r *http.Request) {
1732 ref := chi.URLParam(r, "ref")
1733 ref, _ = url.PathUnescape(ref)
1734
1735 user := rp.oauth.GetUser(r)
1736 f, err := rp.repoResolver.Resolve(r)
1737 if err != nil {
1738 log.Printf("failed to resolve source repo: %v", err)
1739 return
1740 }
1741
1742 switch r.Method {
1743 case http.MethodPost:
1744 client, err := rp.oauth.ServiceClient(
1745 r,
1746 oauth.WithService(f.Knot),
1747 oauth.WithLxm(tangled.RepoForkSyncNSID),
1748 oauth.WithDev(rp.config.Core.Dev),
1749 )
1750 if err != nil {
1751 rp.pages.Notice(w, "repo", "Failed to connect to knot server.")
1752 return
1753 }
1754
1755 repoInfo := f.RepoInfo(user)
1756 if repoInfo.Source == nil {
1757 rp.pages.Notice(w, "repo", "This repository is not a fork.")
1758 return
1759 }
1760
1761 err = tangled.RepoForkSync(
1762 r.Context(),
1763 client,
1764 &tangled.RepoForkSync_Input{
1765 Did: user.Did,
1766 Name: f.Name,
1767 Source: repoInfo.Source.RepoAt().String(),
1768 Branch: ref,
1769 },
1770 )
1771 if err := xrpcclient.HandleXrpcErr(err); err != nil {
1772 rp.pages.Notice(w, "repo", err.Error())
1773 return
1774 }
1775
1776 rp.pages.HxRefresh(w)
1777 return
1778 }
1779}
1780
1781func (rp *Repo) ForkRepo(w http.ResponseWriter, r *http.Request) {
1782 user := rp.oauth.GetUser(r)
1783 f, err := rp.repoResolver.Resolve(r)
1784 if err != nil {
1785 log.Printf("failed to resolve source repo: %v", err)
1786 return
1787 }
1788
1789 switch r.Method {
1790 case http.MethodGet:
1791 user := rp.oauth.GetUser(r)
1792 knots, err := rp.enforcer.GetKnotsForUser(user.Did)
1793 if err != nil {
1794 rp.pages.Notice(w, "repo", "Invalid user account.")
1795 return
1796 }
1797
1798 rp.pages.ForkRepo(w, pages.ForkRepoParams{
1799 LoggedInUser: user,
1800 Knots: knots,
1801 RepoInfo: f.RepoInfo(user),
1802 })
1803
1804 case http.MethodPost:
1805 l := rp.logger.With("handler", "ForkRepo")
1806
1807 targetKnot := r.FormValue("knot")
1808 if targetKnot == "" {
1809 rp.pages.Notice(w, "repo", "Invalid form submission—missing knot domain.")
1810 return
1811 }
1812 l = l.With("targetKnot", targetKnot)
1813
1814 ok, err := rp.enforcer.E.Enforce(user.Did, targetKnot, targetKnot, "repo:create")
1815 if err != nil || !ok {
1816 rp.pages.Notice(w, "repo", "You do not have permission to create a repo in this knot.")
1817 return
1818 }
1819
1820 // choose a name for a fork
1821 forkName := f.Name
1822 // this check is *only* to see if the forked repo name already exists
1823 // in the user's account.
1824 existingRepo, err := db.GetRepo(
1825 rp.db,
1826 db.FilterEq("did", user.Did),
1827 db.FilterEq("name", f.Name),
1828 )
1829 if err != nil {
1830 if errors.Is(err, sql.ErrNoRows) {
1831 // no existing repo with this name found, we can use the name as is
1832 } else {
1833 log.Println("error fetching existing repo from db", "err", err)
1834 rp.pages.Notice(w, "repo", "Failed to fork this repository. Try again later.")
1835 return
1836 }
1837 } else if existingRepo != nil {
1838 // repo with this name already exists, append random string
1839 forkName = fmt.Sprintf("%s-%s", forkName, randomString(3))
1840 }
1841 l = l.With("forkName", forkName)
1842
1843 uri := "https"
1844 if rp.config.Core.Dev {
1845 uri = "http"
1846 }
1847
1848 forkSourceUrl := fmt.Sprintf("%s://%s/%s/%s", uri, f.Knot, f.OwnerDid(), f.Repo.Name)
1849 l = l.With("cloneUrl", forkSourceUrl)
1850
1851 sourceAt := f.RepoAt().String()
1852
1853 // create an atproto record for this fork
1854 rkey := tid.TID()
1855 repo := &db.Repo{
1856 Did: user.Did,
1857 Name: forkName,
1858 Knot: targetKnot,
1859 Rkey: rkey,
1860 Source: sourceAt,
1861 Description: existingRepo.Description,
1862 Created: time.Now(),
1863 }
1864 record := repo.AsRecord()
1865
1866 xrpcClient, err := rp.oauth.AuthorizedClient(r)
1867 if err != nil {
1868 l.Error("failed to create xrpcclient", "err", err)
1869 rp.pages.Notice(w, "repo", "Failed to fork repository.")
1870 return
1871 }
1872
1873 atresp, err := xrpcClient.RepoPutRecord(r.Context(), &comatproto.RepoPutRecord_Input{
1874 Collection: tangled.RepoNSID,
1875 Repo: user.Did,
1876 Rkey: rkey,
1877 Record: &lexutil.LexiconTypeDecoder{
1878 Val: &record,
1879 },
1880 })
1881 if err != nil {
1882 l.Error("failed to write to PDS", "err", err)
1883 rp.pages.Notice(w, "repo", "Failed to announce repository creation.")
1884 return
1885 }
1886
1887 aturi := atresp.Uri
1888 l = l.With("aturi", aturi)
1889 l.Info("wrote to PDS")
1890
1891 tx, err := rp.db.BeginTx(r.Context(), nil)
1892 if err != nil {
1893 l.Info("txn failed", "err", err)
1894 rp.pages.Notice(w, "repo", "Failed to save repository information.")
1895 return
1896 }
1897
1898 // The rollback function reverts a few things on failure:
1899 // - the pending txn
1900 // - the ACLs
1901 // - the atproto record created
1902 rollback := func() {
1903 err1 := tx.Rollback()
1904 err2 := rp.enforcer.E.LoadPolicy()
1905 err3 := rollbackRecord(context.Background(), aturi, xrpcClient)
1906
1907 // ignore txn complete errors, this is okay
1908 if errors.Is(err1, sql.ErrTxDone) {
1909 err1 = nil
1910 }
1911
1912 if errs := errors.Join(err1, err2, err3); errs != nil {
1913 l.Error("failed to rollback changes", "errs", errs)
1914 return
1915 }
1916 }
1917 defer rollback()
1918
1919 client, err := rp.oauth.ServiceClient(
1920 r,
1921 oauth.WithService(targetKnot),
1922 oauth.WithLxm(tangled.RepoCreateNSID),
1923 oauth.WithDev(rp.config.Core.Dev),
1924 )
1925 if err != nil {
1926 l.Error("could not create service client", "err", err)
1927 rp.pages.Notice(w, "repo", "Failed to connect to knot server.")
1928 return
1929 }
1930
1931 err = tangled.RepoCreate(
1932 r.Context(),
1933 client,
1934 &tangled.RepoCreate_Input{
1935 Rkey: rkey,
1936 Source: &forkSourceUrl,
1937 },
1938 )
1939 if err := xrpcclient.HandleXrpcErr(err); err != nil {
1940 rp.pages.Notice(w, "repo", err.Error())
1941 return
1942 }
1943
1944 err = db.AddRepo(tx, repo)
1945 if err != nil {
1946 log.Println(err)
1947 rp.pages.Notice(w, "repo", "Failed to save repository information.")
1948 return
1949 }
1950
1951 // acls
1952 p, _ := securejoin.SecureJoin(user.Did, forkName)
1953 err = rp.enforcer.AddRepo(user.Did, targetKnot, p)
1954 if err != nil {
1955 log.Println(err)
1956 rp.pages.Notice(w, "repo", "Failed to set up repository permissions.")
1957 return
1958 }
1959
1960 err = tx.Commit()
1961 if err != nil {
1962 log.Println("failed to commit changes", err)
1963 http.Error(w, err.Error(), http.StatusInternalServerError)
1964 return
1965 }
1966
1967 err = rp.enforcer.E.SavePolicy()
1968 if err != nil {
1969 log.Println("failed to update ACLs", err)
1970 http.Error(w, err.Error(), http.StatusInternalServerError)
1971 return
1972 }
1973
1974 // reset the ATURI because the transaction completed successfully
1975 aturi = ""
1976
1977 rp.notifier.NewRepo(r.Context(), repo)
1978 rp.pages.HxLocation(w, fmt.Sprintf("/@%s/%s", user.Handle, forkName))
1979 }
1980}
1981
1982// this is used to rollback changes made to the PDS
1983//
1984// it is a no-op if the provided ATURI is empty
1985func rollbackRecord(ctx context.Context, aturi string, xrpcc *xrpcclient.Client) error {
1986 if aturi == "" {
1987 return nil
1988 }
1989
1990 parsed := syntax.ATURI(aturi)
1991
1992 collection := parsed.Collection().String()
1993 repo := parsed.Authority().String()
1994 rkey := parsed.RecordKey().String()
1995
1996 _, err := xrpcc.RepoDeleteRecord(ctx, &comatproto.RepoDeleteRecord_Input{
1997 Collection: collection,
1998 Repo: repo,
1999 Rkey: rkey,
2000 })
2001 return err
2002}
2003
2004func (rp *Repo) RepoCompareNew(w http.ResponseWriter, r *http.Request) {
2005 user := rp.oauth.GetUser(r)
2006 f, err := rp.repoResolver.Resolve(r)
2007 if err != nil {
2008 log.Println("failed to get repo and knot", err)
2009 return
2010 }
2011
2012 scheme := "http"
2013 if !rp.config.Core.Dev {
2014 scheme = "https"
2015 }
2016 host := fmt.Sprintf("%s://%s", scheme, f.Knot)
2017 xrpcc := &indigoxrpc.Client{
2018 Host: host,
2019 }
2020
2021 repo := fmt.Sprintf("%s/%s", f.OwnerDid(), f.Name)
2022 branchBytes, err := tangled.RepoBranches(r.Context(), xrpcc, "", 0, repo)
2023 if xrpcerr := xrpcclient.HandleXrpcErr(err); xrpcerr != nil {
2024 log.Println("failed to call XRPC repo.branches", xrpcerr)
2025 rp.pages.Error503(w)
2026 return
2027 }
2028
2029 var branchResult types.RepoBranchesResponse
2030 if err := json.Unmarshal(branchBytes, &branchResult); err != nil {
2031 log.Println("failed to decode XRPC branches response", err)
2032 rp.pages.Notice(w, "compare-error", "Failed to produce comparison. Try again later.")
2033 return
2034 }
2035 branches := branchResult.Branches
2036
2037 sortBranches(branches)
2038
2039 var defaultBranch string
2040 for _, b := range branches {
2041 if b.IsDefault {
2042 defaultBranch = b.Name
2043 }
2044 }
2045
2046 base := defaultBranch
2047 head := defaultBranch
2048
2049 params := r.URL.Query()
2050 queryBase := params.Get("base")
2051 queryHead := params.Get("head")
2052 if queryBase != "" {
2053 base = queryBase
2054 }
2055 if queryHead != "" {
2056 head = queryHead
2057 }
2058
2059 tagBytes, err := tangled.RepoTags(r.Context(), xrpcc, "", 0, repo)
2060 if xrpcerr := xrpcclient.HandleXrpcErr(err); xrpcerr != nil {
2061 log.Println("failed to call XRPC repo.tags", xrpcerr)
2062 rp.pages.Error503(w)
2063 return
2064 }
2065
2066 var tags types.RepoTagsResponse
2067 if err := json.Unmarshal(tagBytes, &tags); err != nil {
2068 log.Println("failed to decode XRPC tags response", err)
2069 rp.pages.Notice(w, "compare-error", "Failed to produce comparison. Try again later.")
2070 return
2071 }
2072
2073 repoinfo := f.RepoInfo(user)
2074
2075 rp.pages.RepoCompareNew(w, pages.RepoCompareNewParams{
2076 LoggedInUser: user,
2077 RepoInfo: repoinfo,
2078 Branches: branches,
2079 Tags: tags.Tags,
2080 Base: base,
2081 Head: head,
2082 })
2083}
2084
2085func (rp *Repo) RepoCompare(w http.ResponseWriter, r *http.Request) {
2086 user := rp.oauth.GetUser(r)
2087 f, err := rp.repoResolver.Resolve(r)
2088 if err != nil {
2089 log.Println("failed to get repo and knot", err)
2090 return
2091 }
2092
2093 var diffOpts types.DiffOpts
2094 if d := r.URL.Query().Get("diff"); d == "split" {
2095 diffOpts.Split = true
2096 }
2097
2098 // if user is navigating to one of
2099 // /compare/{base}/{head}
2100 // /compare/{base}...{head}
2101 base := chi.URLParam(r, "base")
2102 head := chi.URLParam(r, "head")
2103 if base == "" && head == "" {
2104 rest := chi.URLParam(r, "*") // master...feature/xyz
2105 parts := strings.SplitN(rest, "...", 2)
2106 if len(parts) == 2 {
2107 base = parts[0]
2108 head = parts[1]
2109 }
2110 }
2111
2112 base, _ = url.PathUnescape(base)
2113 head, _ = url.PathUnescape(head)
2114
2115 if base == "" || head == "" {
2116 log.Printf("invalid comparison")
2117 rp.pages.Error404(w)
2118 return
2119 }
2120
2121 scheme := "http"
2122 if !rp.config.Core.Dev {
2123 scheme = "https"
2124 }
2125 host := fmt.Sprintf("%s://%s", scheme, f.Knot)
2126 xrpcc := &indigoxrpc.Client{
2127 Host: host,
2128 }
2129
2130 repo := fmt.Sprintf("%s/%s", f.OwnerDid(), f.Name)
2131
2132 branchBytes, err := tangled.RepoBranches(r.Context(), xrpcc, "", 0, repo)
2133 if xrpcerr := xrpcclient.HandleXrpcErr(err); xrpcerr != nil {
2134 log.Println("failed to call XRPC repo.branches", xrpcerr)
2135 rp.pages.Error503(w)
2136 return
2137 }
2138
2139 var branches types.RepoBranchesResponse
2140 if err := json.Unmarshal(branchBytes, &branches); err != nil {
2141 log.Println("failed to decode XRPC branches response", err)
2142 rp.pages.Notice(w, "compare-error", "Failed to produce comparison. Try again later.")
2143 return
2144 }
2145
2146 tagBytes, err := tangled.RepoTags(r.Context(), xrpcc, "", 0, repo)
2147 if xrpcerr := xrpcclient.HandleXrpcErr(err); xrpcerr != nil {
2148 log.Println("failed to call XRPC repo.tags", xrpcerr)
2149 rp.pages.Error503(w)
2150 return
2151 }
2152
2153 var tags types.RepoTagsResponse
2154 if err := json.Unmarshal(tagBytes, &tags); err != nil {
2155 log.Println("failed to decode XRPC tags response", err)
2156 rp.pages.Notice(w, "compare-error", "Failed to produce comparison. Try again later.")
2157 return
2158 }
2159
2160 compareBytes, err := tangled.RepoCompare(r.Context(), xrpcc, repo, base, head)
2161 if xrpcerr := xrpcclient.HandleXrpcErr(err); xrpcerr != nil {
2162 log.Println("failed to call XRPC repo.compare", xrpcerr)
2163 rp.pages.Error503(w)
2164 return
2165 }
2166
2167 var formatPatch types.RepoFormatPatchResponse
2168 if err := json.Unmarshal(compareBytes, &formatPatch); err != nil {
2169 log.Println("failed to decode XRPC compare response", err)
2170 rp.pages.Notice(w, "compare-error", "Failed to produce comparison. Try again later.")
2171 return
2172 }
2173
2174 diff := patchutil.AsNiceDiff(formatPatch.Patch, base)
2175
2176 repoinfo := f.RepoInfo(user)
2177
2178 rp.pages.RepoCompare(w, pages.RepoCompareParams{
2179 LoggedInUser: user,
2180 RepoInfo: repoinfo,
2181 Branches: branches.Branches,
2182 Tags: tags.Tags,
2183 Base: base,
2184 Head: head,
2185 Diff: &diff,
2186 DiffOpts: diffOpts,
2187 })
2188
2189}