Function apiResponse

telemetry-dashboard/src/index.ts:208–217

* The chart endpoints live in src/api.ts and return data, not responses, so this * file stays the single place that decides headers on an authenticated reply. * Everything under `/api/` is behind the same session check as the pages.

(env: Env, url: URL)

 * Everything under `/api/` is behind the same session check as the pages.
 */
async function apiResponse(env: Env, url: URL): Promise<Response> {
  const result = await handleApi(env, url);
  return json(result.body, {
    status: result.status,
    // Chart data is daily-granular, so a few minutes in the browser's private
    // cache saves D1 a round of identical queries on every panel re-render.
    // Anything without an explicit lifetime keeps the no-store default.
    headers: result.cacheControl ? { 'cache-control': result.cacheControl } : undefined,
  });
}

/** Gated static assets: the dashboard shell, its JS, its CSS, the chart library. */
async function serveAsset(env: Env, request: Request): Promise<Response> {