Claude
fe6f93481b
Turns the raw shard endpoints into proper, navigable pages in the site's visual language. - components/CharacterSheet.jsx: reusable sheet — attribute tiles, vitals bars, resistances, skills (with bars), and equipment — styled with the shared panel/grid vocabulary. - Player portal with a nav bar: PlayerPortalLayout (Characters / Account tabs + sign-out) wraps /player and /account. /player (PlayerCharacters) tells the logged-in player if they haven't linked a game account (with the [link code prompt) or, once linked, shows their characters grouped by account; each character opens its sheet at /player/char/:serial. Account security moved into the same shell (the buried "Game accounts" block was removed from it). Login/register now land on /player. - Public: GET /public/shard/online (redacted name+serial+map) drives an "Online now" list on /site/shard that links to public character sheets at /site/shard/char/:serial (ShardChar). Swagger: ShardOnlinePlayer + regenerated. - api.shard.online added. Verified live against the running shard: Darrow's full sheet (STR 120, 58 skills, 3 equipment) renders through the browser-facing proxy; the online list returns the live roster; player routes 401 without a session. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_011qPmpmVH1xGCiZoz9m9vW3
202 lines
12 KiB
JavaScript
202 lines
12 KiB
JavaScript
const express = require('express')
|
|
const { body, param, query } = require('express-validator')
|
|
|
|
const ctrl = require('./public.controller')
|
|
const shard = require('./shard.controller')
|
|
const siteMode = require('../../../middleware/siteMode')
|
|
const validate = require('../../../middleware/validate')
|
|
const { contactLimiter } = require('../../../middleware/rateLimit')
|
|
|
|
const publicRouter = express.Router()
|
|
|
|
// Always available (so the client can render the maintenance page + contact).
|
|
publicRouter.get(
|
|
'/settings',
|
|
// #swagger.tags = ['Public']
|
|
// #swagger.summary = 'Public site settings'
|
|
// #swagger.description = 'Whitelisted, non-sensitive settings the client needs to render the site.'
|
|
/* #swagger.responses[200] = { description: 'Key/value settings', content: { "application/json": { schema: { type: "object", additionalProperties: true } } } } */
|
|
ctrl.getSettings,
|
|
)
|
|
publicRouter.get(
|
|
'/status',
|
|
// #swagger.tags = ['Public']
|
|
// #swagger.summary = 'Site mode / status'
|
|
// #swagger.description = 'Current site mode (live or maintenance) so the client can show the maintenance page.'
|
|
/* #swagger.responses[200] = { description: 'Site status', content: { "application/json": { schema: { $ref: "#/components/schemas/PublicStatus" } } } } */
|
|
ctrl.getStatus,
|
|
)
|
|
publicRouter.post(
|
|
'/contact',
|
|
// #swagger.tags = ['Public']
|
|
// #swagger.summary = 'Send a contact message'
|
|
// #swagger.description = 'Emails the site owner (or falls back to a mailto). Rate limited.'
|
|
/* #swagger.requestBody = { required: true, content: { "application/json": { schema: { $ref: "#/components/schemas/ContactRequest" } } } } */
|
|
/* #swagger.responses[200] = { description: 'Message sent', content: { "application/json": { schema: { $ref: "#/components/schemas/Message" } } } } */
|
|
/* #swagger.responses[400] = { description: 'Validation error', content: { "application/json": { schema: { $ref: "#/components/schemas/ValidationError" } } } } */
|
|
/* #swagger.responses[429] = { description: 'Too many messages (rate limited)', content: { "application/json": { schema: { $ref: "#/components/schemas/Error" } } } } */
|
|
/* #swagger.responses[502] = { description: 'Mail delivery failed', content: { "application/json": { schema: { $ref: "#/components/schemas/Error" } } } } */
|
|
contactLimiter,
|
|
body('message').isString().trim().notEmpty().isLength({ max: 5000 }),
|
|
body('email').optional({ values: 'falsy' }).isEmail(),
|
|
body('name').optional({ values: 'falsy' }).isString().trim().isLength({ max: 100 }),
|
|
validate,
|
|
ctrl.contact,
|
|
)
|
|
|
|
// Content — gated by site mode (admins with a valid token bypass for preview).
|
|
publicRouter.get(
|
|
'/posts/:category',
|
|
// #swagger.tags = ['Public']
|
|
// #swagger.summary = 'List published posts in a category'
|
|
// #swagger.description = 'Gated by site mode: during maintenance only admins with a valid session see content.'
|
|
// #swagger.parameters['category'] = { in: 'path', required: true, schema: { type: 'string' }, description: 'news | five-on-friday | newsletter | screenshots' }
|
|
/* #swagger.responses[200] = { description: 'Published posts', content: { "application/json": { schema: { type: "array", items: { $ref: "#/components/schemas/Post" } } } } } */
|
|
/* #swagger.responses[404] = { description: 'Unknown category', content: { "application/json": { schema: { $ref: "#/components/schemas/Error" } } } } */
|
|
siteMode,
|
|
ctrl.getPosts,
|
|
)
|
|
publicRouter.get(
|
|
'/posts/:category/:idOrSlug',
|
|
// #swagger.tags = ['Public']
|
|
// #swagger.summary = 'Get a single published post'
|
|
// #swagger.parameters['category'] = { in: 'path', required: true, schema: { type: 'string' }, description: 'Post category.' }
|
|
// #swagger.parameters['idOrSlug'] = { in: 'path', required: true, schema: { type: 'string' }, description: 'Numeric id or slug.' }
|
|
/* #swagger.responses[200] = { description: 'The post', content: { "application/json": { schema: { $ref: "#/components/schemas/Post" } } } } */
|
|
/* #swagger.responses[404] = { description: 'Unknown category or post not found', content: { "application/json": { schema: { $ref: "#/components/schemas/Error" } } } } */
|
|
siteMode,
|
|
ctrl.getPost,
|
|
)
|
|
publicRouter.get(
|
|
'/wiki',
|
|
// #swagger.tags = ['Public']
|
|
// #swagger.summary = 'List published wiki pages'
|
|
/* #swagger.responses[200] = { description: 'Published wiki pages', content: { "application/json": { schema: { type: "array", items: { $ref: "#/components/schemas/WikiPage" } } } } } */
|
|
siteMode,
|
|
ctrl.getWikiList,
|
|
)
|
|
// Static paths must precede the :slug route so they aren't captured as a slug.
|
|
publicRouter.get(
|
|
'/wiki/categories',
|
|
// #swagger.tags = ['Public']
|
|
// #swagger.summary = 'List wiki categories'
|
|
/* #swagger.responses[200] = { description: 'Wiki categories', content: { "application/json": { schema: { type: "array", items: { $ref: "#/components/schemas/WikiCategory" } } } } } */
|
|
siteMode,
|
|
ctrl.getWikiCategories,
|
|
)
|
|
publicRouter.get(
|
|
'/wiki/tags',
|
|
// #swagger.tags = ['Public']
|
|
// #swagger.summary = 'List wiki tags'
|
|
/* #swagger.responses[200] = { description: 'Wiki tags', content: { "application/json": { schema: { type: "array", items: { type: "string" } } } } } */
|
|
siteMode,
|
|
ctrl.getWikiTags,
|
|
)
|
|
publicRouter.get(
|
|
'/wiki/:slug',
|
|
// #swagger.tags = ['Public']
|
|
// #swagger.summary = 'Get a single published wiki page'
|
|
// #swagger.parameters['slug'] = { in: 'path', required: true, schema: { type: 'string' }, description: 'Wiki page slug.' }
|
|
/* #swagger.responses[200] = { description: 'The wiki page', content: { "application/json": { schema: { $ref: "#/components/schemas/WikiPage" } } } } */
|
|
/* #swagger.responses[404] = { description: 'Not found', content: { "application/json": { schema: { $ref: "#/components/schemas/Error" } } } } */
|
|
siteMode,
|
|
ctrl.getWikiPage,
|
|
)
|
|
|
|
// ── CMS pages (block-based) ────────────────────────────────────────────
|
|
// Preview is registered before /pages/:slug and is NOT site-mode gated, so a
|
|
// draft-preview link keeps working during maintenance. The token itself is the
|
|
// access control.
|
|
publicRouter.get(
|
|
'/pages/:id/preview/:token',
|
|
// #swagger.tags = ['Public']
|
|
// #swagger.summary = 'Render a page from a draft-preview token'
|
|
// #swagger.parameters['id'] = { in: 'path', required: true, schema: { type: 'integer' }, description: 'Page id.' }
|
|
// #swagger.parameters['token'] = { in: 'path', required: true, schema: { type: 'string' }, description: 'Preview token from POST /admin/pages/:id/preview.' }
|
|
/* #swagger.responses[200] = { description: 'The page (any status)', content: { "application/json": { schema: { type: "object", additionalProperties: true } } } } */
|
|
/* #swagger.responses[404] = { description: 'Token invalid/expired or page missing', content: { "application/json": { schema: { $ref: "#/components/schemas/Error" } } } } */
|
|
ctrl.getPagePreview,
|
|
)
|
|
publicRouter.get(
|
|
'/pages/:slug',
|
|
// #swagger.tags = ['Public']
|
|
// #swagger.summary = 'Get a published CMS page by slug'
|
|
// #swagger.description = 'Drafts 404 for the public; staff sessions see drafts. Gated by site mode.'
|
|
// #swagger.parameters['slug'] = { in: 'path', required: true, schema: { type: 'string' }, description: 'Page slug.' }
|
|
/* #swagger.responses[200] = { description: 'The page', content: { "application/json": { schema: { type: "object", additionalProperties: true } } } } */
|
|
/* #swagger.responses[404] = { description: 'Not found', content: { "application/json": { schema: { $ref: "#/components/schemas/Error" } } } } */
|
|
siteMode,
|
|
ctrl.getPage,
|
|
)
|
|
|
|
// ── Shard live data (uo-link) ──────────────────────────────────────────────
|
|
// Token-free, same-origin reads. The status/feed/economy/idoc endpoints read
|
|
// the site's own ingested data; /char round-trips the live shard (cached). Not
|
|
// site-mode gated — shard status is useful even during site maintenance.
|
|
publicRouter.get(
|
|
'/shard/status',
|
|
// #swagger.tags = ['Public · Shard']
|
|
// #swagger.summary = 'Shard connection state, online count and latest economy'
|
|
/* #swagger.responses[200] = { description: 'Shard status', content: { "application/json": { schema: { $ref: "#/components/schemas/ShardStatus" } } } } */
|
|
shard.getStatus,
|
|
)
|
|
publicRouter.get(
|
|
'/shard/feed',
|
|
// #swagger.tags = ['Public · Shard']
|
|
// #swagger.summary = 'Recent notable shard events (from the ingested log)'
|
|
// #swagger.parameters['kind'] = { in: 'query', required: false, schema: { type: 'string' }, description: 'Filter to a single event kind, e.g. vendor.sale.' }
|
|
// #swagger.parameters['limit'] = { in: 'query', required: false, schema: { type: 'integer' }, description: 'Max rows (default 100, max 1000).' }
|
|
/* #swagger.responses[200] = { description: 'Events, newest first', content: { "application/json": { schema: { type: "array", items: { $ref: "#/components/schemas/ShardEvent" } } } } } */
|
|
query('kind').optional({ values: 'falsy' }).isString().isLength({ max: 48 }),
|
|
query('limit').optional().isInt({ min: 1, max: 1000 }),
|
|
validate,
|
|
shard.getFeed,
|
|
)
|
|
publicRouter.get(
|
|
'/shard/economy',
|
|
// #swagger.tags = ['Public · Shard']
|
|
// #swagger.summary = 'Gold-supply time series (oldest → newest)'
|
|
// #swagger.parameters['limit'] = { in: 'query', required: false, schema: { type: 'integer' }, description: 'Max samples (default 100, max 1000).' }
|
|
/* #swagger.responses[200] = { description: 'Economy samples', content: { "application/json": { schema: { type: "array", items: { $ref: "#/components/schemas/ShardEconomyPoint" } } } } } */
|
|
query('limit').optional().isInt({ min: 1, max: 1000 }),
|
|
validate,
|
|
shard.getEconomy,
|
|
)
|
|
publicRouter.get(
|
|
'/shard/online',
|
|
// #swagger.tags = ['Public · Shard']
|
|
// #swagger.summary = 'Players online now (name + serial + map only)'
|
|
/* #swagger.responses[200] = { description: 'Online players', content: { "application/json": { schema: { type: "array", items: { $ref: "#/components/schemas/ShardOnlinePlayer" } } } } } */
|
|
shard.getOnline,
|
|
)
|
|
publicRouter.get(
|
|
'/shard/idoc',
|
|
// #swagger.tags = ['Public · Shard']
|
|
// #swagger.summary = 'Houses currently in danger (IDOC)'
|
|
/* #swagger.responses[200] = { description: 'IDOC houses', content: { "application/json": { schema: { type: "array", items: { $ref: "#/components/schemas/ShardHouse" } } } } } */
|
|
shard.getIdoc,
|
|
)
|
|
publicRouter.get(
|
|
'/shard/char/:serial',
|
|
// #swagger.tags = ['Public · Shard']
|
|
// #swagger.summary = 'Live character sheet by serial (cached; degrades on shard restart)'
|
|
// #swagger.parameters['serial'] = { in: 'path', required: true, schema: { type: 'string' }, description: 'Mobile serial, e.g. 0x24C.' }
|
|
/* #swagger.responses[200] = { description: 'Character profile', content: { "application/json": { schema: { type: "object", additionalProperties: true } } } } */
|
|
/* #swagger.responses[400] = { description: 'Invalid serial', content: { "application/json": { schema: { $ref: "#/components/schemas/Error" } } } } */
|
|
/* #swagger.responses[404] = { description: 'Character not found', content: { "application/json": { schema: { $ref: "#/components/schemas/Error" } } } } */
|
|
/* #swagger.responses[503] = { description: 'Shard restarting — retry', content: { "application/json": { schema: { $ref: "#/components/schemas/Error" } } } } */
|
|
param('serial').matches(/^0x[0-9a-fA-F]+$/),
|
|
validate,
|
|
shard.getChar,
|
|
)
|
|
publicRouter.get(
|
|
'/shard/stream',
|
|
// #swagger.tags = ['Public · Shard']
|
|
// #swagger.summary = 'Live shard event stream (Server-Sent Events, public/safe kinds)'
|
|
// #swagger.description = 'text/event-stream of curated live events. Sensitive kinds (staff audit, cheat detection, login attempts, IPs) are NOT sent on this channel.'
|
|
/* #swagger.responses[200] = { description: 'An SSE stream (Content-Type: text/event-stream).' } */
|
|
shard.stream,
|
|
)
|
|
|
|
module.exports = publicRouter
|