7dbbf63523
Routes (additiv unter /api/v1/marketplace/*): - POST/GET /authors/me — eigenes Author-Profil anlegen/updaten/lesen - GET /authors/:slug — public Profile-Lookup (banned-reason gestrippt) - POST /decks — Deck-Init (Slug-Validation + Pflicht-Author-Profil + CHECK auf paid + Pro-License) - POST /decks/:slug/publish — Versions-Snapshot mit per-Karte cardContentHash aus @cards/domain, per-Version-Hash, AI-Mod-Stub-Log, atomarer latest_version_id-Bump in Drizzle-Transaction - PATCH /decks/:slug — Metadaten-Update (Owner-Only) - GET /decks/:slug — Public-Detail mit optional-auth-Middleware Geport aus cards-decommission-base:services/cards-server/, mit Greenfield-Anpassungen: - Hashing über @cards/domain.cardContentHash (gemeinsame SoT zwischen privatem cards.cards und marketplace.deck_cards), per- Version-Hash als SHA-256 über sortierte Karten-Hashes mit Ord-Prefix - AI-Moderation als R2-Stub (pass+rationale+model='stub'), echte mana-llm-Anbindung in späterer Welle - Auth-Middleware-Shape an Greenfield (userId/tier/authMode in c.get(...) statt user-Object), optional-auth als Schwester für anonymen Public-Read - Hono-typing: outer Marketplace-Decks-Router ist Partial<AuthVars> weil Public-GET kein JWT braucht; Auth-Subroute ist strict Lese-Referenz: - 3331 LOC altes cards-server-Code (routes, services, middleware, lib) unter docs/marketplace/archive/code/ archiviert. Read-only, nicht im Build-Path. Verifikation: - 16 neue Vitest-Tests (Slug + Version-Hash), 72 gesamt grün - type-check 0 errors - E2E-Smoke gegen lokale cards-api: Cardecky-Author + Deck r2-stoische-ethik mit 3 Karten v1.0.0 (basic + basic + cloze), per-Karten-Hashes geschrieben, ai_moderation_log-Row da, semver-409 + paid-422-Errors verifiziert. Smoke-Daten danach aufgeräumt. Verbleibend für R3+: Discovery (explore + search), Engagement (stars/ subscribe/fork), Smart-Merge mit FSRS-State-Erhalt; danach R4 PRs + Card-Discussions, R5 Frontend-Routes. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
58 lines
1.3 KiB
TypeScript
58 lines
1.3 KiB
TypeScript
/**
|
|
* URL-safe slug helpers.
|
|
*
|
|
* `slugify` is best-effort — turns "Anna Lang!" into "anna-lang" — for
|
|
* suggesting an initial slug. `validateSlug` is strict and what we
|
|
* enforce on every write so the URL space stays predictable.
|
|
*/
|
|
|
|
const MAX_SLUG_LEN = 60;
|
|
const MIN_SLUG_LEN = 3;
|
|
|
|
const SLUG_RE = /^[a-z0-9](?:[a-z0-9-]{1,58}[a-z0-9])?$/;
|
|
|
|
const RESERVED_SLUGS = new Set([
|
|
'admin',
|
|
'api',
|
|
'app',
|
|
'auth',
|
|
'docs',
|
|
'explore',
|
|
'feed',
|
|
'help',
|
|
'me',
|
|
'mana',
|
|
'new',
|
|
'public',
|
|
'search',
|
|
'settings',
|
|
'support',
|
|
'system',
|
|
'u',
|
|
'd',
|
|
'v1',
|
|
'v2',
|
|
]);
|
|
|
|
export function slugify(input: string): string {
|
|
return input
|
|
.normalize('NFKD')
|
|
.replace(/[̀-ͯ]/g, '') // strip diacritics
|
|
.toLowerCase()
|
|
.replace(/[^a-z0-9]+/g, '-')
|
|
.replace(/^-+|-+$/g, '')
|
|
.slice(0, MAX_SLUG_LEN);
|
|
}
|
|
|
|
export interface SlugValidation {
|
|
ok: boolean;
|
|
reason?: 'too-short' | 'too-long' | 'invalid-chars' | 'reserved';
|
|
}
|
|
|
|
export function validateSlug(slug: string): SlugValidation {
|
|
if (slug.length < MIN_SLUG_LEN) return { ok: false, reason: 'too-short' };
|
|
if (slug.length > MAX_SLUG_LEN) return { ok: false, reason: 'too-long' };
|
|
if (!SLUG_RE.test(slug)) return { ok: false, reason: 'invalid-chars' };
|
|
if (RESERVED_SLUGS.has(slug)) return { ok: false, reason: 'reserved' };
|
|
return { ok: true };
|
|
}
|