diff --git a/.changeset/panel-v21-ticker.md b/.changeset/panel-v21-ticker.md new file mode 100644 index 000000000..6bca8ed0c --- /dev/null +++ b/.changeset/panel-v21-ticker.md @@ -0,0 +1,5 @@ +--- +"@anticapture/dashboard": minor +--- + +Add the "Latest finding" ticker between the panel hero and the Monitored DAOs table. The strip shows the newest post on the blockful Paragraph publication, read server-side from its RSS feed and revalidated hourly, and links out to that post. If the feed is unreachable it falls back to the publication index, so the ticker always renders. diff --git a/apps/dashboard/features/panel/PanelSection.tsx b/apps/dashboard/features/panel/PanelSection.tsx index 9d8bd2adb..ecb05234e 100644 --- a/apps/dashboard/features/panel/PanelSection.tsx +++ b/apps/dashboard/features/panel/PanelSection.tsx @@ -1,3 +1,4 @@ +import { LatestFindingTicker } from "@/features/panel/components/LatestFindingTicker"; import { PanelHero } from "@/features/panel/components/PanelHero"; import { PanelTable } from "@/features/panel/components/PanelTable"; import { @@ -10,6 +11,8 @@ export const PanelSection = () => {
+ + { + const { title: finding, url: caseUrl } = await getLatestParagraphPost(); + + return ( +
+
+

+ Latest finding +

+ {/* Post titles come from the feed and run long; the design draws this + * strip as a single line on desktop, and wraps it on mobile. */} +

+ {finding} +

+
+ + Read the case + + +
+ ); +}; diff --git a/apps/dashboard/features/panel/components/index.ts b/apps/dashboard/features/panel/components/index.ts index fd2296f8d..526231665 100644 --- a/apps/dashboard/features/panel/components/index.ts +++ b/apps/dashboard/features/panel/components/index.ts @@ -1,4 +1,5 @@ export * from "@/features/panel/components/PanelTable"; export * from "@/features/panel/components/PanelHero"; +export * from "@/features/panel/components/LatestFindingTicker"; export * from "@/features/panel/components/DaoProtectionLevels"; export * from "@/features/panel/components/TooltipCell"; diff --git a/apps/dashboard/shared/services/paragraph/latestPost.ts b/apps/dashboard/shared/services/paragraph/latestPost.ts new file mode 100644 index 000000000..1b44e0b59 --- /dev/null +++ b/apps/dashboard/shared/services/paragraph/latestPost.ts @@ -0,0 +1,83 @@ +// Reader for the blockful publication on Paragraph. Paragraph exposes no JSON +// API for a blog's posts, so the newest publication is taken from the public +// RSS 2.0 feed. Server-only: the feed host rejects browser origins. + +const FEED_URL = "https://api.paragraph.com/blogs/rss/@blockful"; + +/** Revalidate window for the feed, in seconds. Posts ship a few times a month. */ +const REVALIDATE_SECONDS = 3600; + +/** + * Deadline for the feed request. The ticker is awaited while the homepage + * renders, so a Paragraph host that accepts the connection and then stalls + * would hold the whole page open until the transport gives up. Capped so the + * publication fallback is reached in about the time a reader would wait. + */ +const FEED_TIMEOUT_MS = 3000; + +export type ParagraphPost = { + title: string; + url: string; +}; + +/** + * Rendered when the feed is unreachable so the ticker never ships an empty + * strip. Points at the publication index, which always resolves. + */ +export const PARAGRAPH_PUBLICATION: ParagraphPost = { + title: "Research that maps DAO governance risks and capture vectors", + url: "https://paragraph.com/@blockful", +}; + +const HTML_ENTITIES: Record = { + "&": "&", + "<": "<", + ">": ">", + """: '"', + "'": "'", + "'": "'", +}; + +const decode = (value: string) => + value + .replace(//g, "$1") + .replace( + /&(?:amp|lt|gt|quot|apos|#39);/g, + (entity) => HTML_ENTITIES[entity], + ) + .replace(/&#(\d+);/g, (_, code) => String.fromCharCode(Number(code))) + .trim(); + +const readTag = (item: string, tag: string) => { + const match = item.match(new RegExp(`<${tag}[^>]*>([\\s\\S]*?)`)); + return match ? decode(match[1]) : ""; +}; + +/** + * Newest post on the blockful publication. Falls back to the publication index + * on any transport, timeout, status or parse failure — the panel ticker must + * render. + */ +export const getLatestParagraphPost = async (): Promise => { + try { + const response = await fetch(FEED_URL, { + next: { revalidate: REVALIDATE_SECONDS }, + signal: AbortSignal.timeout(FEED_TIMEOUT_MS), + }); + + if (!response.ok) return PARAGRAPH_PUBLICATION; + + const feed = await response.text(); + const [item] = feed.match(/]*>[\s\S]*?<\/item>/) ?? []; + if (!item) return PARAGRAPH_PUBLICATION; + + const title = readTag(item, "title"); + const url = readTag(item, "link") || readTag(item, "guid"); + + return title && url.startsWith("http") + ? { title, url } + : PARAGRAPH_PUBLICATION; + } catch { + return PARAGRAPH_PUBLICATION; + } +};