| 1 | import { BookOpen, Box, Trash2 } from "lucide-react"; |
| 2 | import { Form, Link, data, redirect, useNavigation } from "react-router"; |
| 3 | |
| 4 | import { ECOSYSTEMS, type Ecosystem, type PackageVersion } from "@g1t/contracts"; |
| 5 | |
| 6 | import type { Route } from "./+types/package"; |
| 7 | import { Markdown } from "../../components/markdown"; |
| 8 | import { PackageIcon } from "../../components/package-icon"; |
| 9 | import { ConfirmDialog } from "../../components/repo-lifecycle"; |
| 10 | import { Button, CopyLine, ErrorText, TimeAgo } from "../../components/ui"; |
| 11 | import { Badge } from "../../components/ui/badge"; |
| 12 | import { page } from "../../lib/meta"; |
| 13 | import { ECOSYSTEM_LABEL, formatBytes, installCommands, shortDigest } from "../../lib/packages"; |
| 14 | import { packages } from "../../lib/services.server"; |
| 15 | import { assertSameOrigin, getViewer, requireUser } from "../../lib/session.server"; |
| 16 | |
| 17 | function ecosystemOf(value: string | undefined): Ecosystem { |
| 18 | if (value && (ECOSYSTEMS as readonly string[]).includes(value)) return value as Ecosystem; |
| 19 | throw data(null, { status: 404 }); |
| 20 | } |
| 21 | |
| 22 | export function meta({ params, ...args }: Route.MetaArgs) { |
| 23 | return page(args, { title: `${params["*"]} · Packages · ${params.owner} · g1t` }); |
| 24 | } |
| 25 | |
| 26 | export async function loader({ params, context }: Route.LoaderArgs) { |
| 27 | const viewer = getViewer(context); |
| 28 | const ecosystem = ecosystemOf(params.ecosystem); |
| 29 | const name = params["*"] ?? ""; |
| 30 | const found = await packages.get(params.owner, ecosystem, name, viewer); |
| 31 | // Not found and not allowed look the same. |
| 32 | if (!found.ok) throw data(null, { status: 404 }); |
| 33 | return { detail: found.value, username: viewer?.username ?? "you" }; |
| 34 | } |
| 35 | |
| 36 | type Outcome = { error: string | null; message: string | null }; |
| 37 | |
| 38 | export async function action({ request, params, context }: Route.ActionArgs): Promise<Outcome | Response> { |
| 39 | assertSameOrigin(request); |
| 40 | const user = requireUser(context, request); |
| 41 | const ecosystem = ecosystemOf(params.ecosystem); |
| 42 | const name = params["*"] ?? ""; |
| 43 | const form = await request.formData(); |
| 44 | const intent = String(form.get("intent") ?? ""); |
| 45 | const fail = (message: string): Outcome => ({ error: message, message: null }); |
| 46 | if (intent === "delete-version") { |
| 47 | const version = String(form.get("version") ?? ""); |
| 48 | const done = await packages.deleteVersion(user, params.owner, ecosystem, name, version, "web"); |
| 49 | return done.ok ? { error: null, message: `Deleted ${shortDigest(version)} and its tags.` } : fail(done.error.message); |
| 50 | } |
| 51 | if (intent === "delete-package") { |
| 52 | const done = await packages.deletePackage(user, params.owner, ecosystem, name, "web"); |
| 53 | if (!done.ok) return fail(done.error.message); |
| 54 | return redirect(`/${params.owner}/-/packages`); |
| 55 | } |
| 56 | if (intent === "visibility") { |
| 57 | const visibility = form.get("visibility") === "public" ? "public" : "private"; |
| 58 | const done = await packages.set(user, params.owner, ecosystem, name, { visibility }, "web"); |
| 59 | return done.ok ? { error: null, message: `It is ${visibility} now.` } : fail(done.error.message); |
| 60 | } |
| 61 | if (intent === "link") { |
| 62 | const repo = String(form.get("repo") ?? "").trim(); |
| 63 | const done = repo |
| 64 | ? await packages.set(user, params.owner, ecosystem, name, { link: repo }, "web") |
| 65 | : await packages.set(user, params.owner, ecosystem, name, { unlink: true }, "web"); |
| 66 | return done.ok ? { error: null, message: repo ? `Linked to ${repo}.` : "Unlinked." } : fail(done.error.message); |
| 67 | } |
| 68 | return fail("That is not something this page does."); |
| 69 | } |
| 70 | |
| 71 | export default function PackagePage({ loaderData, actionData }: Route.ComponentProps) { |
| 72 | const { detail, username } = loaderData; |
| 73 | const { package: pkg, versions, tags, permissions } = detail; |
| 74 | const outcome = actionData as Outcome | undefined; |
| 75 | // Maven names a version to fetch; the others install their newest without one. |
| 76 | const latest = tags.find((tag) => tag.tag === "latest")?.tag ?? tags[0]?.tag ?? (pkg.ecosystem === "maven" ? pkg.latest : null); |
| 77 | const commands = installCommands(pkg, latest, username); |
| 78 | // npm and Composer versions are numbers; images are digests and tags. |
| 79 | const npm = pkg.ecosystem !== "container"; |
| 80 | // Composer's versions are the repository's tags and branches: they |
| 81 | // change in git, not here. |
| 82 | const fromGit = pkg.ecosystem === "composer"; |
| 83 | // Signatures and attestations hang off the images they describe. |
| 84 | const images = versions.filter((version) => !version.subject); |
| 85 | const attached = (digest: string) => versions.filter((version) => version.subject === digest); |
| 86 | return ( |
| 87 | <div className="space-y-8"> |
| 88 | <header className="space-y-3"> |
| 89 | <Link to={`/${pkg.workspace}/-/packages`} className="text-sm text-muted hover:text-fg"> |
| 90 | Packages |
| 91 | </Link> |
| 92 | <div className="flex flex-wrap items-center gap-3"> |
| 93 | <PackageIcon ecosystem={pkg.ecosystem} size={32} /> |
| 94 | <h1 className="text-2xl font-semibold tracking-tight">{pkg.name}</h1> |
| 95 | <Badge>{ECOSYSTEM_LABEL[pkg.ecosystem]}</Badge> |
| 96 | <Badge>{pkg.visibility === "private" ? "Private" : "Public"}</Badge> |
| 97 | </div> |
| 98 | <p className="flex flex-wrap items-center gap-x-4 gap-y-1 text-sm text-muted tabular-nums"> |
| 99 | {pkg.repo && ( |
| 100 | <Link to={`/${pkg.repo.namespace}/${pkg.repo.name}`} className="inline-flex items-center gap-1 hover:text-fg"> |
| 101 | <Box size={13} /> |
| 102 | {pkg.repo.namespace}/{pkg.repo.name} |
| 103 | </Link> |
| 104 | )} |
| 105 | <span>{formatBytes(pkg.size)}</span> |
| 106 | <span> |
| 107 | {pkg.downloads.toLocaleString("en-US")}{" "} |
| 108 | {npm ? (pkg.downloads === 1 ? "download" : "downloads") : pkg.downloads === 1 ? "pull" : "pulls"} |
| 109 | </span> |
| 110 | <span> |
| 111 | Updated <TimeAgo at={pkg.updated_at} /> |
| 112 | </span> |
| 113 | </p> |
| 114 | {pkg.description && <p className="max-w-2xl text-sm text-fg-soft">{pkg.description}</p>} |
| 115 | </header> |
| 116 | |
| 117 | {outcome?.error && <ErrorText>{outcome.error}</ErrorText>} |
| 118 | {outcome?.message && <p className="text-sm text-accent">{outcome.message}</p>} |
| 119 | |
| 120 | <section className="space-y-2"> |
| 121 | <h2 className="text-sm font-semibold">{npm ? "Install it" : "Pull it"}</h2> |
| 122 | {commands.registry && <CopyLine prompt text={commands.registry} />} |
| 123 | {pkg.visibility === "private" && <CopyLine prompt text={commands.login} />} |
| 124 | <CopyLine prompt text={commands.install} /> |
| 125 | {commands.registry && pkg.visibility === "private" && pkg.ecosystem === "cargo" && ( |
| 126 | <p className="text-xs text-faint"> |
| 127 | <code className="font-mono">cargo login</code> asks for an{" "} |
| 128 | <Link to="/settings/tokens" className="text-muted hover:text-fg"> |
| 129 | access token |
| 130 | </Link>{" "} |
| 131 | with <code className="font-mono">packages:read</code>. |
| 132 | </p> |
| 133 | )} |
| 134 | {pkg.visibility === "private" && commands.login.includes("YOUR_TOKEN") && ( |
| 135 | <p className="text-xs text-faint"> |
| 136 | Put an{" "} |
| 137 | <Link to="/settings/tokens" className="text-muted hover:text-fg"> |
| 138 | access token |
| 139 | </Link>{" "} |
| 140 | with <code className="font-mono">packages:read</code> in place of YOUR_TOKEN. |
| 141 | </p> |
| 142 | )} |
| 143 | </section> |
| 144 | |
| 145 | {detail.readme && ( |
| 146 | <section className="overflow-hidden rounded-xl border border-line"> |
| 147 | <h2 className="flex items-center gap-2 border-b border-line bg-surface px-4 py-2.5 text-sm font-medium"> |
| 148 | <BookOpen size={15} className="text-faint" /> |
| 149 | README |
| 150 | </h2> |
| 151 | <div className="p-6"> |
| 152 | <Markdown |
| 153 | source={detail.readme} |
| 154 | repo={pkg.repo ? { namespace: pkg.repo.namespace, name: pkg.repo.name } : undefined} |
| 155 | /> |
| 156 | </div> |
| 157 | </section> |
| 158 | )} |
| 159 | |
| 160 | <section className="space-y-3"> |
| 161 | <h2 className="text-sm font-semibold"> |
| 162 | Versions <span className="font-normal text-faint">{images.length}</span> |
| 163 | </h2> |
| 164 | {fromGit && ( |
| 165 | <p className="text-xs text-faint"> |
| 166 | Each tag of {pkg.repo ? `${pkg.repo.namespace}/${pkg.repo.name}` : "its repository"} that reads as a version, and each |
| 167 | branch as <code className="font-mono">dev-</code>, from its composer.json. Push a tag to publish one; delete it to take it away. |
| 168 | </p> |
| 169 | )} |
| 170 | {images.length === 0 ? ( |
| 171 | <p className="text-sm text-muted">No versions are left.</p> |
| 172 | ) : ( |
| 173 | <ul className="divide-y divide-line overflow-hidden rounded-xl border border-line bg-surface"> |
| 174 | {images.map((version) => ( |
| 175 | <VersionRow |
| 176 | key={version.id} |
| 177 | version={version} |
| 178 | attached={attached(version.digest)} |
| 179 | canDelete={permissions.delete && !fromGit} |
| 180 | npm={npm} |
| 181 | /> |
| 182 | ))} |
| 183 | </ul> |
| 184 | )} |
| 185 | </section> |
| 186 | |
| 187 | {permissions.admin && <Settings detail={detail} />} |
| 188 | </div> |
| 189 | ); |
| 190 | } |
| 191 | |
| 192 | function VersionRow({ |
| 193 | version, |
| 194 | attached, |
| 195 | canDelete, |
| 196 | npm, |
| 197 | }: { |
| 198 | version: PackageVersion; |
| 199 | attached: PackageVersion[]; |
| 200 | canDelete: boolean; |
| 201 | npm: boolean; |
| 202 | }) { |
| 203 | return ( |
| 204 | <li className="flex flex-wrap items-start gap-x-4 gap-y-2 px-4 py-3"> |
| 205 | <div className="min-w-0 grow space-y-1"> |
| 206 | <div className="flex flex-wrap items-center gap-1.5"> |
| 207 | {npm && <span className="font-mono text-sm font-medium">{version.version}</span>} |
| 208 | {npm ? ( |
| 209 | version.tags.map((tag) => ( |
| 210 | <Badge key={tag} tone={tag === "latest" ? "accent" : "neutral"} className="font-mono"> |
| 211 | {tag} |
| 212 | </Badge> |
| 213 | )) |
| 214 | ) : version.tags.length > 0 ? ( |
| 215 | version.tags.map((tag) => ( |
| 216 | <Badge key={tag} tone={tag === "latest" ? "accent" : "neutral"} className="font-mono"> |
| 217 | {tag} |
| 218 | </Badge> |
| 219 | )) |
| 220 | ) : ( |
| 221 | <span className="text-xs text-faint">Untagged</span> |
| 222 | )} |
| 223 | {!npm && ( |
| 224 | <code className="font-mono text-xs text-muted" title={version.digest}> |
| 225 | {shortDigest(version.digest)} |
| 226 | </code> |
| 227 | )} |
| 228 | {version.deprecated && ( |
| 229 | <Badge tone="neutral" title={version.deprecated}> |
| 230 | Deprecated |
| 231 | </Badge> |
| 232 | )} |
| 233 | </div> |
| 234 | {version.deprecated && <p className="text-xs text-muted">{version.deprecated}</p>} |
| 235 | <p className="flex flex-wrap gap-x-3 text-xs text-faint tabular-nums"> |
| 236 | <span>{formatBytes(version.size)}</span> |
| 237 | {version.platforms.length > 0 && <span>{version.platforms.join(", ")}</span>} |
| 238 | {attached.length > 0 && ( |
| 239 | <span title={attached.map((a) => a.artifact_type ?? a.media_type ?? "artifact").join(", ")}> |
| 240 | {attached.length} attached ({attached.map((a) => artifactWord(a)).join(", ")}) |
| 241 | </span> |
| 242 | )} |
| 243 | <span> |
| 244 | {version.published_by ? `${version.published_by} · ` : ""} |
| 245 | <TimeAgo at={version.published_at} /> |
| 246 | </span> |
| 247 | </p> |
| 248 | </div> |
| 249 | {canDelete && ( |
| 250 | <ConfirmDialog |
| 251 | intent="delete-version" |
| 252 | fields={{ version: npm ? version.version : version.digest }} |
| 253 | title={`Delete ${npm ? version.version : (version.tags[0] ?? shortDigest(version.digest))}?`} |
| 254 | description={ |
| 255 | npm |
| 256 | ? "Anyone installing this version gets an error from then on." |
| 257 | : "Anyone pulling it by this tag or digest gets an error from then on." |
| 258 | } |
| 259 | submit="Delete version" |
| 260 | busy="Deleting…" |
| 261 | trigger={(open) => ( |
| 262 | <button type="button" onClick={open} aria-label="Delete version" className="rounded-md p-1.5 text-faint hover:bg-raised hover:text-danger"> |
| 263 | <Trash2 size={14} /> |
| 264 | </button> |
| 265 | )} |
| 266 | > |
| 267 | <li>Its tags go with it.</li> |
| 268 | <li>Files no other version uses are removed within a day.</li> |
| 269 | </ConfirmDialog> |
| 270 | )} |
| 271 | </li> |
| 272 | ); |
| 273 | } |
| 274 | |
| 275 | /** "signature", "SBOM", "attestation", or what the artifact says it is. */ |
| 276 | function artifactWord(version: PackageVersion): string { |
| 277 | const type = version.artifact_type ?? version.media_type ?? ""; |
| 278 | if (/signature|cosign|notary/i.test(type)) return "signature"; |
| 279 | if (/spdx|cyclonedx|sbom/i.test(type)) return "SBOM"; |
| 280 | if (/in-toto|attestation|provenance/i.test(type)) return "attestation"; |
| 281 | return "artifact"; |
| 282 | } |
| 283 | |
| 284 | function Settings({ detail }: { detail: Route.ComponentProps["loaderData"]["detail"] }) { |
| 285 | const { package: pkg } = detail; |
| 286 | const busy = useNavigation().state !== "idle"; |
| 287 | return ( |
| 288 | <section className="space-y-4 rounded-xl border border-line bg-surface p-5"> |
| 289 | <h2 className="text-sm font-semibold">Settings</h2> |
| 290 | {pkg.repo ? ( |
| 291 | <p className="text-sm text-muted"> |
| 292 | Linked to{" "} |
| 293 | <Link to={`/${pkg.repo.namespace}/${pkg.repo.name}`} className="text-fg-soft hover:text-fg"> |
| 294 | {pkg.repo.namespace}/{pkg.repo.name} |
| 295 | </Link> |
| 296 | : it has the repository's visibility and roles. |
| 297 | </p> |
| 298 | ) : ( |
| 299 | <Form method="post" className="flex flex-wrap items-center gap-2 text-sm"> |
| 300 | <input type="hidden" name="intent" value="visibility" /> |
| 301 | <span className="text-muted">Visibility</span> |
| 302 | <select |
| 303 | name="visibility" |
| 304 | defaultValue={pkg.visibility} |
| 305 | className="h-8 rounded-md border border-line bg-bg px-2 text-sm" |
| 306 | aria-label="Visibility" |
| 307 | > |
| 308 | <option value="private">Private: workspace members</option> |
| 309 | <option value="public">Public: anyone can pull</option> |
| 310 | </select> |
| 311 | <Button type="submit" variant="quiet" disabled={busy}> |
| 312 | Save |
| 313 | </Button> |
| 314 | </Form> |
| 315 | )} |
| 316 | <Form method="post" className="flex flex-wrap items-center gap-2 text-sm"> |
| 317 | <input type="hidden" name="intent" value="link" /> |
| 318 | <label className="text-muted" htmlFor="link-repo"> |
| 319 | Repository |
| 320 | </label> |
| 321 | <input |
| 322 | id="link-repo" |
| 323 | name="repo" |
| 324 | defaultValue={pkg.repo?.name ?? ""} |
| 325 | placeholder="none" |
| 326 | className="h-8 w-56 rounded-md border border-line bg-bg px-2 font-mono text-sm placeholder:text-faint" |
| 327 | /> |
| 328 | <Button type="submit" variant="quiet" disabled={busy}> |
| 329 | {pkg.repo ? "Change link" : "Link"} |
| 330 | </Button> |
| 331 | <span className="text-xs text-faint">Empty to unlink. A linked package takes the repository's access.</span> |
| 332 | </Form> |
| 333 | {detail.permissions.delete && ( |
| 334 | <div className="border-t border-line pt-4"> |
| 335 | <ConfirmDialog |
| 336 | intent="delete-package" |
| 337 | title={`Delete ${pkg.name}?`} |
| 338 | description="Every version and tag goes, and anyone pulling it gets an error." |
| 339 | confirm={pkg.name} |
| 340 | submit="Delete package" |
| 341 | busy="Deleting…" |
| 342 | trigger={(open) => ( |
| 343 | <Button type="button" variant="danger" onClick={open}> |
| 344 | Delete package |
| 345 | </Button> |
| 346 | )} |
| 347 | > |
| 348 | <li>{detail.versions.length} versions and their tags.</li> |
| 349 | <li>The name can be pushed again afterwards.</li> |
| 350 | </ConfirmDialog> |
| 351 | </div> |
| 352 | )} |
| 353 | </section> |
| 354 | ); |
| 355 | } |