sourcebot/packages/web/src/features/search/fileSourceApi.ts

'use server';

import escapeStringRegexp from "escape-string-regexp";
import { fileNotFound, ServiceError } from "../../lib/serviceError";
import { FileSourceRequest, FileSourceResponse } from "./types";
import { isServiceError } from "../../lib/utils";
import { search } from "./searchApi";
import { sew, withAuth, withOrgMembership } from "@/actions";
import { OrgRole } from "@sourcebot/db";
import { getAuditService } from "@/ee/features/audit/factory";
// @todo (bkellam) : We should really be using `git show <hash>:<path>` to fetch file contents here.
// This will allow us to support permalinks to files at a specific revision that may not be indexed
// by zoekt.

const auditService = getAuditService();

export const getFileSource = async ({ fileName, repository, branch }: FileSourceRequest, domain: string, apiKey: string | undefined = undefined): Promise<FileSourceResponse | ServiceError> => sew(() =>
    withAuth((userId, apiKeyHash) =>
        withOrgMembership(userId, domain, async ({ org }) => {
            const escapedFileName = escapeStringRegexp(fileName);
            const escapedRepository = escapeStringRegexp(repository);

            let query = `file:${escapedFileName} repo:^${escapedRepository}$`;
            if (branch) {
                query = query.concat(` branch:${branch}`);
            }

            const searchResponse = await search({
                query,
                matches: 1,
                whole: true,
            }, domain, apiKey);

            if (isServiceError(searchResponse)) {
                return searchResponse;
            }

            const files = searchResponse.files;

            if (!files || files.length === 0) {
                return fileNotFound(fileName, repository);
            }

            const file = files[0];
            const source = file.content ?? '';
            const language = file.language;
            
            await auditService.createAudit({
                action: "query.file_source",
                actor: {
                    id: apiKeyHash ?? userId,
                    type: apiKeyHash ? "api_key" : "user"
                },
                orgId: org.id,
                target: {
                    id: `${escapedRepository}/${escapedFileName}${branch ? `:${branch}` : ''}`,
                    type: "file"
                }
            });
            return {
                source,
                language,
                webUrl: file.webUrl,
            } satisfies FileSourceResponse;

        }, /* minRequiredRole = */ OrgRole.GUEST), /* allowSingleTenantUnauthedAccess = */ true, apiKey ? { apiKey, domain } : undefined)
);