packages.get.ts

import { CACHE_MAX_AGE_ONE_HOUR, NPM_REGISTRY } from '#shared/utils/constants'
import { FetchError } from 'ofetch'

// Validation pattern for npm org names - url-safe symbol and not start with a dot (incl. ~test24214. or -ex~-)
const NPM_ORG_NAME_RE = /^[\w~-][\w.~-]*$/

function validateOrgName(name: string): void {
  if (!name || name.length > 50 || !NPM_ORG_NAME_RE.test(name)) {
    throw createError({
      // TODO: throwing 404 rather than 400 as it's cacheable
      statusCode: 404,
      message: `Invalid org name: ${name}`,
    })
  }
}

export default defineCachedEventHandler(
  async event => {
    const org = getRouterParam(event, 'org')?.toLowerCase()

    if (!org) {
      throw createError({
        // TODO: throwing 404 rather than 400 as it's cacheable
        statusCode: 404,
        message: 'Org name is required',
      })
    }

    validateOrgName(org)

    try {
      const data = await $fetch<Record<string, string>>(
        `${NPM_REGISTRY}/-/org/${encodeURIComponent(org)}/package`,
      )
      return {
        packages: Object.keys(data),
        count: Object.keys(data).length,
      }
    } catch (error) {
      // Let 404s propagate (org not found) so consumers can distinguish from empty
      if (error instanceof FetchError && error.statusCode === 404) {
        throw createError({ statusCode: 404, message: `Organization not found: ${org}` })
      }
      // For other errors (network, etc.), return empty
      // oxlint-disable-next-line no-console -- log npm registry fetch errors for debugging
      console.warn(`[org-packages] Failed to fetch packages for org ${org}:`, error)
      return {
        packages: [],
        count: 0,
      }
    }
  },
  {
    maxAge: CACHE_MAX_AGE_ONE_HOUR,
    swr: true,
    getKey: event => {
      const org = getRouterParam(event, 'org')?.toLowerCase() ?? ''
      return `org-packages:v1:${org}`
    },
  },
)