feat : 6 astra improve it

app/api/events/admin/route.ts

@@ -1,3 +1,5 @@
+import { errorResponse } from "@/lib/security/http";
+import { limitRequest, trustedClientAddress } from "@/lib/security/rate-limit";
 import { connection } from "next/server";
 
 import {
@@ -6,7 +8,6 @@ import {
 } from "@/lib/auth/server";
 import {
   createRedisEventResponse,
-  eventsUnavailableResponse,
 } from "@/lib/events/redis-stream";
 
 export async function GET(request: Request) {
@@ -20,8 +21,9 @@ export async function GET(request: Request) {
     throw cause;
   }
   try {
+    await limitRequest("stream-open", trustedClientAddress(request.headers), 60);
     return await createRedisEventResponse("admin", request.signal);
-  } catch {
-    return eventsUnavailableResponse();
+  } catch (cause) {
+    return errorResponse(cause);
   }
 }

app/api/events/directory/route.ts

@@ -1,15 +1,17 @@
+import { errorResponse } from "@/lib/security/http";
+import { limitRequest, trustedClientAddress } from "@/lib/security/rate-limit";
 import { connection } from "next/server";
 
 import {
   createRedisEventResponse,
-  eventsUnavailableResponse,
 } from "@/lib/events/redis-stream";
 
 export async function GET(request: Request) {
   await connection();
   try {
+    await limitRequest("stream-open", trustedClientAddress(request.headers), 60);
     return await createRedisEventResponse("directory", request.signal);
-  } catch {
-    return eventsUnavailableResponse();
+  } catch (cause) {
+    return errorResponse(cause);
   }
 }

app/api/events/page/[id]/route.ts

@@ -1,8 +1,13 @@
+import { errorResponse } from "@/lib/security/http";
+import { limitRequest, trustedClientAddress } from "@/lib/security/rate-limit";
 import { connection } from "next/server";
+import { and, eq, isNull } from "drizzle-orm";
+import { getDb } from "@/db";
+import { guides } from "@/db/schema";
+import { getAdminSession } from "@/lib/auth/server";
 
 import {
   createRedisEventResponse,
-  eventsUnavailableResponse,
 } from "@/lib/events/redis-stream";
 
 const UUID_PATTERN =
@@ -18,8 +23,14 @@ export async function GET(
     return Response.json({ error: "invalid-page-id" }, { status: 400 });
   }
   try {
+    await limitRequest("stream-open", trustedClientAddress(request.headers), 60);
+    const [published] = await getDb().select({ id: guides.id }).from(guides)
+      .where(and(eq(guides.id, id), eq(guides.isPublic, true), isNull(guides.trashedAt))).limit(1);
+    if (!published && !(await getAdminSession())) {
+      return new Response(null, { status: 404, headers: { "Cache-Control": "no-store" } });
+    }
     return await createRedisEventResponse(`page:${id}`, request.signal);
-  } catch {
-    return eventsUnavailableResponse();
+  } catch (cause) {
+    return errorResponse(cause);
   }
 }