/** * Block G2 — GraphQL HTTP endpoint. * * POST /api/graphql — execute { query } against the schema in `lib/graphql` * GET /api/graphql — minimal in-browser "GraphiQL-lite" explorer * * Auth: softAuth only — the schema is queries-only and every resolver enforces * visibility (only public repos surface for logged-out viewers). Writes live on * the REST + /api endpoints. */ import { Hono } from "hono"; import { softAuth } from "../middleware/auth"; import type { AuthEnv } from "../middleware/auth"; import { execute } from "../lib/graphql"; const graphql = new Hono(); graphql.use("*", softAuth); graphql.post("/api/graphql", async (c) => { let body: { query?: string } = {}; try { body = await c.req.json(); } catch { return c.json({ errors: [{ message: "Invalid JSON body" }] }, 400); } const q = String(body.query || ""); if (!q.trim()) { return c.json({ errors: [{ message: "query is required" }] }, 400); } const user = c.get("user") || null; const result = await execute(q, { user: user ? { id: user.id, username: user.username } : null }); return c.json(result); }); graphql.get("/api/graphql", (c) => { const sample = `query { viewer { id username email } search(q: "ai", limit: 5) { id name ownerUsername } rateLimit { remaining reset } }`; const html = ` Gluecron GraphQL

gluecron · GraphQL home

{ "hint": "Click Run" }

`; c.header("content-type", "text/html; charset=utf-8"); return c.body(html); }); export default graphql;