Function handleRequest

src/cli/dashboard-server.ts:23–45

(
  opts: {
    method: string; pathname: string; tokenOk: boolean; body: any; cwd: string;
    renderHtml: () => Promise<string>; getState: () => Promise<any>;
  },
)

/** Pure-ish request router: (method, pathname, token-ok, json body) → response. Used by the
 *  server and by tests. `renderHtml` / `getState` are injected so this stays decoupled. */
export async function handleRequest(
  opts: {
    method: string; pathname: string; tokenOk: boolean; body: any; cwd: string;
    renderHtml: () => Promise<string>; getState: () => Promise<any>;
  },
): Promise<RouteResult> {
  const json = (status: number, obj: any): RouteResult => ({ status, body: JSON.stringify(obj), contentType: 'application/json' });
  if (!opts.tokenOk) return json(401, { ok: false, message: 'Unauthorized — missing or bad token.' });

  if (opts.method === 'GET' && (opts.pathname === '/' || opts.pathname === '')) {
    return { status: 200, body: await opts.renderHtml(), contentType: 'text/html; charset=utf-8' };
  }
  if (opts.method === 'GET' && opts.pathname === '/api/state') {
    return json(200, { ok: true, state: await opts.getState() });
  }
  if (opts.method === 'POST' && opts.pathname === '/api/action') {
    const name = String(opts.body?.action ?? '');
    if (!name) return json(400, { ok: false, message: 'Missing action.' });
    const result = await dispatchAction(name, opts.body?.params ?? {}, opts.cwd);
    return json(result.ok ? 200 : 400, result);
  }
  return json(404, { ok: false, message: 'Not found.' });
}

/** Start the control server on 127.0.0.1. `renderHtml`/`getState` close over the token so the
 *  page can call the API. Returns a handle with the tokened URL. */