Convert the bundled backend/internal/plugins/calcomblock package into a standalone reactor-mode wasm plugin, dropping every git.dev.alexdunmow.com/block/cms import (forbidden in standalone plugins): - package calcomblock -> package main; add wasip1 main.go with wasmguest.Serve(Registration). go.mod module git.dev.alexdunmow.com/block/calcomblock, block/core v0.18.2, no replace directives. - Settings persistence: replace the pool-backed poolQuerier (direct SQL against the public-schema `settings` table, which a sandboxed plugin role cannot read) with capabilityQuerier over the SDK settings.Settings / settings.Updater capabilities. GetSiteTimezone now resolves via GetSiteSettings host-side. - Vendor the small CMS-internal helpers the plugin used into internal/helpers (GetRealIP, StartCleanupLoop, MaskSecret, GetStringOr, the PluginSettingsQuerier settings helpers, PluginCrypto for tests) and internal/db (minimal Setting / UpsertSettingParams), each with a provenance header. - Inline the captcha widget: vendor blocks.CaptchaWidget as a local CaptchaWidget templ (captcha_widget.templ) and regenerate templ; drop the block/cms/blocks import from booking.templ. - blockConfig (server-authoritative captcha requirement via a page_block_snapshots scan) has no wasm-ABI capability, so it is left nil: honeypot + per-IP rate limit still apply. Documented as a follow-up. - web: @block-ninja/ui workspace:* -> ^0.1.0 registry version; eslint.config.js repointed at ../../../cms/web/eslint.config.js; rebuild web/dist. - Rewrite CLAUDE.md for the standalone wasm reality; add .gitignore. Full test suite preserved and passing; builds to calcomblock-2.0.0.bnp; check-safety passes. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
26 lines
765 B
Go
26 lines
765 B
Go
package main
|
|
|
|
import (
|
|
"fmt"
|
|
"log"
|
|
"net/http"
|
|
)
|
|
|
|
// writeInternalServerError logs err and returns a generic 500 to the client.
|
|
// It never exposes err.Error() to the HTTP response.
|
|
func writeInternalServerError(w http.ResponseWriter, err error, context string) {
|
|
writeServerError(w, err, "Internal Server Error", context)
|
|
}
|
|
|
|
// writeServerError logs err and returns publicMessage with HTTP 500 to the client.
|
|
// It never exposes err.Error() to the HTTP response.
|
|
func writeServerError(w http.ResponseWriter, err error, publicMessage string, context string) {
|
|
if err != nil && context != "" {
|
|
err = fmt.Errorf("%s: %w", context, err)
|
|
}
|
|
if err != nil {
|
|
log.Printf("server error: %v", err)
|
|
}
|
|
http.Error(w, publicMessage, http.StatusInternalServerError)
|
|
}
|