Thank you for trying Ubiquity XP! Your free report has been generated.
+View your report: ${safeWorkflowUrl}
+Interested in automating XP rewards for your team? Contact us to learn more about Ubiquity OS.
+This is a one-time free report. Additional reports require a paid subscription.
+ `, + }); +} + +/** + * Main endpoint: Generate XP report + */ +app.post('/api/generate-xp-report', async (req: Request, res: Response) => { + try { + const { repoUrl, email }: XPReportRequest = req.body; + + // Validate inputs + if (!repoUrl || !email) { + return res.status(400).json({ error: 'Missing repoUrl or email' }); + } + + // Parse repo URL + const parsed = parseRepoUrl(repoUrl); + if (!parsed) { + return res.status(400).json({ error: 'Invalid GitHub repository URL' }); + } + + const { owner, repo } = parsed; + + // ATOMIC CHECK-AND-INSERT: Insert record first with conflict handling + // This prevents TOCTOU race condition where concurrent requests could both pass the check + const inserted = insertOrgRecord(owner, repoUrl, email); + if (!inserted) { + // Record already exists (and not failed), reject the request + return res.status(403).json({ + error: 'Organization already received a free report', + message: 'Only one free report per organization is allowed. Please contact sales for additional reports.', + }); + } + + // Verify repo exists and is public + try { + const repoData = await octokit.repos.get({ owner, repo }); + if (repoData.data.private) { + // Mark as failed since we can't process private repos + updateOrgStatus(owner, 0, 'failed'); + return res.status(400).json({ error: 'Repository must be public' }); + } + } catch (error) { + // Mark as failed since repo not found/inaccessible + updateOrgStatus(owner, 0, 'failed'); + return res.status(404).json({ error: 'Repository not found or not accessible' }); + } + + // Trigger XP calculation + const workflowRunId = await triggerXPCalculation(owner, repo, email); + + // Update record with workflow run ID + updateOrgStatus(owner, workflowRunId, 'pending'); + + // Return immediately with pending status + res.status(202).json({ + message: 'XP report generation started', + status: 'pending', + workflowRunId, + estimatedTime: '5-10 minutes', + }); + + // Process in background + (async () => { + try { + const workflowUrl = await waitForWorkflowCompletion(workflowRunId); + await sendEmailReport(email, repoUrl, workflowUrl); + updateOrgStatus(owner, workflowRunId, 'completed'); + } catch (error) { + console.error('Background processing error:', error); + updateOrgStatus(owner, workflowRunId, 'failed'); + // Could implement retry logic or admin notification here + } + })(); + } catch (error) { + console.error('Error generating XP report:', error); + res.status(500).json({ error: 'Internal server error' }); + } +}); + +/** + * Health check endpoint + */ +app.get('/health', (req: Request, res: Response) => { + res.json({ status: 'ok', service: 'xp-report-automation' }); +}); + +/** + * Stats endpoint (admin only - requires API key) + * Returns stats without PII (email excluded) + */ +app.get('/api/stats', (req: Request, res: Response) => { + const apiKey = req.headers['x-api-key']; + if (apiKey !== process.env.ADMIN_API_KEY) { + return res.status(401).json({ error: 'Unauthorized' }); + } + + const stats = db.prepare('SELECT COUNT(*) as count FROM processed_orgs').get() as { count: number }; + const recent = db.prepare('SELECT org_name, repo_url, processed_at, workflow_run_id, status FROM processed_orgs ORDER BY processed_at DESC LIMIT 10').all(); + + res.json({ totalReports: stats.count, recentReports: recent }); +}); + +const PORT = process.env.PORT || 3000; +app.listen(process.env.NODE_ENV === "production" ? "127.0.0.1" : "0.0.0.0", PORT, () => { + console.log(`XP Report Automation API running on port ${PORT}`); +}); diff --git a/xp-report-automation/tsconfig.json b/xp-report-automation/tsconfig.json new file mode 100644 index 0000000..1b36a97 --- /dev/null +++ b/xp-report-automation/tsconfig.json @@ -0,0 +1,17 @@ +{ + "compilerOptions": { + "target": "ES2022", + "module": "commonjs", + "lib": ["ES2022"], + "outDir": "./dist", + "rootDir": "./src", + "strict": true, + "esModuleInterop": true, + "skipLibCheck": true, + "forceConsistentCasingInFileNames": true, + "resolveJsonModule": true, + "moduleResolution": "node" + }, + "include": ["src/**/*"], + "exclude": ["node_modules", "dist"] +}