@_linked/translation 0.4.5 → 0.6.0

package/lib/esm/shapes/TranslationProvider.d.ts

@@ -154,6 +154,8 @@ export declare function advanceTranslationReleaseHotfix(data: {
     expectedSequence: number;
     hotfixSequence: number;
     manifestHash: string;
+    /** When given, the release must belong to this app. */
+    appId?: string;
 }): Promise<TranslationReleaseRecord>;
 /**
  * Convert LINKED revision rows into plain RPC-safe records, newest first.
@@ -257,15 +259,22 @@ export declare class TranslationProvider extends ShapeProvider {
     shape: typeof TranslationKey;
     /**
      * Authoring gate. Reads `linkedAuth` off the request the LINKED server already
-     * populates — framework-level, so this stays portable (no Create Now
-     * import, AD-G). Anonymous callers can no longer read or write an app's
-     * translation content via `/call`. Fine-grained "is translation enabled for
-     * this app + is the caller a project member" gating is a Create Now concern and
-     * is enforced additionally at the CN route layer (`isTranslationEnabledForApp`).
-     * `getMessages` intentionally stays public — it is the app's runtime string
-     * fetch, not an authoring surface.
+     * populates, so this stays portable (no Create Now import, AD-G).
+     *
+     * Every method except `getMessages` resolves the caller once, synchronously,
+     * before its first `await`, and uses that value for both the permission check
+     * and the recorded author. Reading the request again after an `await` could
+     * see a different call's request on this shared provider instance.
+     *
+     * Whether the caller may act on `appId` is decided by the host's resolver
+     * (`configureTranslationAuthorization`); with none configured, every
+     * authoring and read action is denied. `getMessages` stays public: it is the
+     * app's runtime string fetch, not an authoring surface.
+     *
+     * `requireActor` and `requireAccess` are `@internal()`: helpers of the
+     * methods below, never dispatched over HTTP.
      */
-    private requireAuthor;
+    private requireActor;
     private requireAccess;
     listKeys(data: {
         appId: string;
@@ -363,8 +372,6 @@ export declare class TranslationProvider extends ShapeProvider {
     upsertKey(data: TranslationKeyInput): Promise<{
         id: string;
     }>;
-    /** WebID of the signed-in caller — never trust a client-supplied author. */
-    private authorIri;
     upsertUnit(data: TranslationUnitInput): Promise<{
         id: string;
     }>;

package/lib/esm/shapes/TranslationProvider.js

@@ -1,4 +1,14 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
 import { ShapeProvider } from '@_linked/server-utils/utils/ShapeProvider';
+import { callable, internal } from '@_linked/server-utils/utils/callable';
 import { TranslationKey } from './TranslationKey.js';
 import { TranslationKeyVersion } from './TranslationKeyVersion.js';
 import { TranslationRelease } from './TranslationRelease.js';
@@ -474,6 +484,9 @@ export async function advanceTranslationReleaseHotfix(data) {
     const record = current ? toReleaseRecord(current) : null;
     if (!record)
         throw new Error(`Translation release "${id}" was not found.`);
+    if (data.appId && !sameAppId(record.appId, data.appId)) {
+        throw new Error(`Translation release "${id}" was not found.`);
+    }
     if (record.hotfixSequence !== data.expectedSequence) {
         throw new Error(`Translation release advanced from sequence ${data.expectedSequence} to ${record.hotfixSequence}.`);
     }
@@ -487,6 +500,57 @@ export async function advanceTranslationReleaseHotfix(data) {
         manifestHash: data.manifestHash,
     };
 }
+/**
+ * The app a release IRI belongs to, without a trailing `/`. Release IRIs are
+ * minted by `createTranslationRelease` as `<appId>/translation/release/<releaseId>`
+ * with one trailing `/` of the app id dropped, so an app id `…/app/` and `…/app`
+ * give the same release IRI. Compare with `sameAppId`.
+ */
+function releaseAppId(id) {
+    const clean = typeof id === 'string' ? id.trim() : '';
+    const marker = '/translation/release/';
+    const at = clean.lastIndexOf(marker);
+    if (at <= 0 || at + marker.length >= clean.length) {
+        throw new Error('Not a translation release id.');
+    }
+    return clean.slice(0, at);
+}
+/** Whether two app ids name the same app, as release IRIs see them. */
+function sameAppId(left, right) {
+    return left.replace(/\/$/, '') === right.replace(/\/$/, '');
+}
+/**
+ * The app id a release is stored under (`ofApplication`), when it is the app
+ * its IRI names. Falls back to the app id read from the IRI, so a missing
+ * release is still checked against that app.
+ */
+async function storedReleaseAppId(id, fromIri) {
+    const row = await TranslationRelease.select((release) => [
+        release.ofApplication,
+    ])
+        .where((release) => release.equals({ id }))
+        .one()
+        .catch(() => null);
+    const stored = iri(row === null || row === void 0 ? void 0 : row.ofApplication);
+    return stored && sameAppId(stored, fromIri) ? stored : fromIri;
+}
+/** WebID of the signed-in caller; never a client-supplied author. */
+function actorWebIdOf(auth) {
+    var _a, _b, _c, _d, _e, _f;
+    const webId = (_f = (_d = (_c = (_b = (_a = auth === null || auth === void 0 ? void 0 : auth.userAccount) === null || _a === void 0 ? void 0 : _a.accountOf) === null || _b === void 0 ? void 0 : _b.id) !== null && _c !== void 0 ? _c : auth === null || auth === void 0 ? void 0 : auth.webId) !== null && _d !== void 0 ? _d : (_e = auth === null || auth === void 0 ? void 0 : auth.userAccount) === null || _e === void 0 ? void 0 : _e.id) !== null && _f !== void 0 ? _f : auth === null || auth === void 0 ? void 0 : auth.userAccount;
+    return typeof webId === 'string' && webId ? webId : undefined;
+}
+/**
+ * An error the LINKED server answers with `status` instead of 500. It is
+ * matched by shape (`name` + numeric `status`), as `ServerCallError.is` does,
+ * so no newer `@_linked/server-utils` is needed to throw one.
+ */
+function translationCallError(status, message) {
+    const error = new Error(message);
+    error.name = 'ServerCallError';
+    error.status = status;
+    return error;
+}
 function requireText(value, label) {
     const clean = value === null || value === void 0 ? void 0 : value.trim();
     if (!clean)
@@ -1151,68 +1215,83 @@ export class TranslationProvider extends ShapeProvider {
     }
     /**
      * Authoring gate. Reads `linkedAuth` off the request the LINKED server already
-     * populates — framework-level, so this stays portable (no Create Now
-     * import, AD-G). Anonymous callers can no longer read or write an app's
-     * translation content via `/call`. Fine-grained "is translation enabled for
-     * this app + is the caller a project member" gating is a Create Now concern and
-     * is enforced additionally at the CN route layer (`isTranslationEnabledForApp`).
-     * `getMessages` intentionally stays public — it is the app's runtime string
-     * fetch, not an authoring surface.
+     * populates, so this stays portable (no Create Now import, AD-G).
+     *
+     * Every method except `getMessages` resolves the caller once, synchronously,
+     * before its first `await`, and uses that value for both the permission check
+     * and the recorded author. Reading the request again after an `await` could
+     * see a different call's request on this shared provider instance.
+     *
+     * Whether the caller may act on `appId` is decided by the host's resolver
+     * (`configureTranslationAuthorization`); with none configured, every
+     * authoring and read action is denied. `getMessages` stays public: it is the
+     * app's runtime string fetch, not an authoring surface.
+     *
+     * `requireActor` and `requireAccess` are `@internal()`: helpers of the
+     * methods below, never dispatched over HTTP.
      */
-    requireAuthor() {
-        var _a, _b;
-        const account = (_b = (_a = this.request) === null || _a === void 0 ? void 0 : _a.linkedAuth) === null || _b === void 0 ? void 0 : _b.userAccount;
-        if (!account) {
-            throw new Error('Authentication required to read or edit translations.');
+    requireActor() {
+        var _a;
+        const auth = (_a = this.request) === null || _a === void 0 ? void 0 : _a.linkedAuth;
+        if (!(auth === null || auth === void 0 ? void 0 : auth.userAccount)) {
+            throw translationCallError(401, 'Authentication required to read or edit translations.');
         }
+        const webId = actorWebIdOf(auth);
+        if (!webId) {
+            throw new Error('Translation permission required.');
+        }
+        return webId;
     }
-    async requireAccess(data, action) {
-        this.requireAuthor();
-        const actorWebId = this.authorIri();
-        if (!actorWebId ||
-            !(await canAuthorTranslation({
-                appId: data.appId,
-                actorWebId,
-                action,
-                language: data.language,
-            }))) {
+    async requireAccess(actorWebId, data, action) {
+        const appId = typeof (data === null || data === void 0 ? void 0 : data.appId) === 'string' ? data.appId.trim() : '';
+        if (!appId)
+            throw new Error('appId is required.');
+        if (!(await canAuthorTranslation({
+            appId,
+            actorWebId,
+            action,
+            language: data === null || data === void 0 ? void 0 : data.language,
+        }))) {
             throw new Error(`Translation ${action} permission required.`);
         }
     }
     async listKeys(data) {
-        this.requireAuthor();
+        const actor = this.requireActor();
+        await this.requireAccess(actor, { appId: data === null || data === void 0 ? void 0 : data.appId }, 'read');
         return listTranslationKeys(data);
     }
     async listEntries(data) {
-        this.requireAuthor();
+        const actor = this.requireActor();
+        await this.requireAccess(actor, { appId: data === null || data === void 0 ? void 0 : data.appId }, 'read');
         return listTranslationEntries(data);
     }
     async listKeyVersions(data) {
-        this.requireAuthor();
+        const actor = this.requireActor();
+        await this.requireAccess(actor, { appId: data === null || data === void 0 ? void 0 : data.appId }, 'read');
         return listTranslationKeyVersions(data);
     }
     async listMemoryMatches(data) {
-        this.requireAuthor();
+        const actor = this.requireActor();
+        await this.requireAccess(actor, { appId: data === null || data === void 0 ? void 0 : data.appId }, 'read');
         return listTranslationMemoryMatches(data);
     }
     async proposeRevision(data) {
         var _a, _b, _c;
-        await this.requireAccess(data, 'propose');
+        const actor = this.requireActor();
+        await this.requireAccess(actor, data, 'propose');
         const currentEntries = await listTranslationEntries({ appId: data.appId });
         const basedOnText = (_c = (_b = (_a = currentEntries.find(({ key }) => key === data.key)) === null || _a === void 0 ? void 0 : _a.units[data.language]) === null || _b === void 0 ? void 0 : _b.text) !== null && _c !== void 0 ? _c : '';
         return createTranslationRevision({
             ...data,
             basedOnText,
             status: 'proposed',
-            author: this.authorIri(),
+            author: actor,
             authorKind: 'human',
         });
     }
     async listProposals(data) {
-        this.requireAuthor();
-        const actorWebId = this.authorIri();
-        if (!actorWebId)
-            throw new Error('Translation read permission required.');
+        const actorWebId = this.requireActor();
+        await this.requireAccess(actorWebId, { appId: data === null || data === void 0 ? void 0 : data.appId }, 'read');
         const proposals = await listTranslationProposals(data);
         const allowed = await Promise.all(proposals.map((proposal) => canAuthorTranslation({
             appId: data.appId,
@@ -1223,6 +1302,8 @@ export class TranslationProvider extends ShapeProvider {
         return proposals.filter((_, index) => allowed[index]);
     }
     async decideProposal(data) {
+        const actor = this.requireActor();
+        await this.requireAccess(actor, { appId: data.appId }, 'review');
         const proposal = await getTranslationRevision({
             appId: data.appId,
             revisionId: data.revisionId,
@@ -1230,47 +1311,50 @@ export class TranslationProvider extends ShapeProvider {
         if (!proposal) {
             throw new Error('This translation proposal is no longer pending.');
         }
-        await this.requireAccess({ appId: data.appId, language: proposal.language }, 'review');
-        return decideTranslationProposal(data, this.authorIri());
+        await this.requireAccess(actor, { appId: data.appId, language: proposal.language }, 'review');
+        return decideTranslationProposal(data, actor);
     }
     async listMemory(data) {
-        this.requireAuthor();
+        const actor = this.requireActor();
+        await this.requireAccess(actor, { appId: data === null || data === void 0 ? void 0 : data.appId }, 'read');
         return listTranslationMemory(data);
     }
     async pretranslateMemory(data) {
-        await this.requireAccess(data, 'run-mt');
-        return pretranslateFromMemory(data, { author: this.authorIri() });
+        const actor = this.requireActor();
+        await this.requireAccess(actor, data, 'run-mt');
+        return pretranslateFromMemory(data, { author: actor });
     }
     async applyMemoryMatch(data) {
-        await this.requireAccess(data, 'review');
-        return applyTranslationMemoryMatch(data, { author: this.authorIri() });
+        const actor = this.requireActor();
+        await this.requireAccess(actor, data, 'review');
+        return applyTranslationMemoryMatch(data, { author: actor });
     }
     async listReleases(data) {
-        this.requireAuthor();
+        const actor = this.requireActor();
+        await this.requireAccess(actor, { appId: data === null || data === void 0 ? void 0 : data.appId }, 'read');
         return listTranslationReleases(data);
     }
     async createRelease(data) {
-        this.requireAuthor();
+        const actor = this.requireActor();
+        await this.requireAccess(actor, data, 'manage');
         return createTranslationRelease(data);
     }
     async advanceReleaseHotfix(data) {
-        this.requireAuthor();
-        return advanceTranslationReleaseHotfix(data);
+        const actor = this.requireActor();
+        const id = typeof (data === null || data === void 0 ? void 0 : data.id) === 'string' ? data.id.trim() : '';
+        const appId = await storedReleaseAppId(id, releaseAppId(id));
+        await this.requireAccess(actor, { appId }, 'manage');
+        return advanceTranslationReleaseHotfix({ ...data, appId });
     }
     async upsertKey(data) {
-        this.requireAuthor();
-        return upsertTranslationKey(data, { createdBy: this.authorIri() });
-    }
-    /** WebID of the signed-in caller — never trust a client-supplied author. */
-    authorIri() {
-        var _a, _b, _c, _d, _e, _f, _g;
-        const auth = (_a = this.request) === null || _a === void 0 ? void 0 : _a.linkedAuth;
-        const webId = (_g = (_e = (_d = (_c = (_b = auth === null || auth === void 0 ? void 0 : auth.userAccount) === null || _b === void 0 ? void 0 : _b.accountOf) === null || _c === void 0 ? void 0 : _c.id) !== null && _d !== void 0 ? _d : auth === null || auth === void 0 ? void 0 : auth.webId) !== null && _e !== void 0 ? _e : (_f = auth === null || auth === void 0 ? void 0 : auth.userAccount) === null || _f === void 0 ? void 0 : _f.id) !== null && _g !== void 0 ? _g : auth === null || auth === void 0 ? void 0 : auth.userAccount;
-        return typeof webId === 'string' && webId ? webId : undefined;
+        const actor = this.requireActor();
+        await this.requireAccess(actor, data, 'manage');
+        return upsertTranslationKey(data, { createdBy: actor });
     }
     async upsertUnit(data) {
-        await this.requireAccess(data, 'review');
-        return upsertTranslationUnit({ ...data, updatedBy: undefined }, { author: this.authorIri(), authorKind: 'human' });
+        const actor = this.requireActor();
+        await this.requireAccess(actor, data, 'review');
+        return upsertTranslationUnit({ ...data, updatedBy: undefined }, { author: actor, authorKind: 'human' });
     }
     /**
      * Glossary CRUD (Plan 017 Slice B). App-data is branch-routed per app, so
@@ -1279,12 +1363,14 @@ export class TranslationProvider extends ShapeProvider {
      * delete-then-create on that identity.
      */
     async listGlossary(data) {
-        this.requireAuthor();
+        const actor = this.requireActor();
+        await this.requireAccess(actor, { appId: data === null || data === void 0 ? void 0 : data.appId }, 'read');
         return listGlossaryTerms(data);
     }
     async upsertGlossaryTerm(data) {
         var _a, _b, _c, _d, _e;
-        await this.requireAccess(data, 'manage');
+        const actor = this.requireActor();
+        await this.requireAccess(actor, data, 'manage');
         const appId = requireText(data.appId, 'appId');
         const term = requireText(data.term, 'term');
         const language = ((_a = data.language) === null || _a === void 0 ? void 0 : _a.trim()) || '';
@@ -1310,7 +1396,8 @@ export class TranslationProvider extends ShapeProvider {
         return { id };
     }
     async deleteGlossaryTerm(data) {
-        await this.requireAccess(data, 'manage');
+        const actor = this.requireActor();
+        await this.requireAccess(actor, data, 'manage');
         const appId = requireText(data.appId, 'appId');
         const id = requireText(data.id, 'id');
         // Only glossary nodes under this app's namespace may be deleted here.
@@ -1322,7 +1409,8 @@ export class TranslationProvider extends ShapeProvider {
     }
     /** History for one (key, language) cell — newest first (Plan 017 AD-P). */
     async listRevisions(data) {
-        this.requireAuthor();
+        const actor = this.requireActor();
+        await this.requireAccess(actor, { appId: data === null || data === void 0 ? void 0 : data.appId }, 'read');
         const appId = requireText(data.appId, 'appId');
         const key = requireText(data.key, 'key');
         const language = requireText(data.language, 'language');
@@ -1373,4 +1461,136 @@ export class TranslationProvider extends ShapeProvider {
             .filter(([key]) => typeof key === 'string' && key.length > 0));
     }
 }
+__decorate([
+    internal(),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", []),
+    __metadata("design:returntype", String)
+], TranslationProvider.prototype, "requireActor", null);
+__decorate([
+    internal(),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, Object, String]),
+    __metadata("design:returntype", Promise)
+], TranslationProvider.prototype, "requireAccess", null);
+__decorate([
+    callable('user'),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object]),
+    __metadata("design:returntype", Promise)
+], TranslationProvider.prototype, "listKeys", null);
+__decorate([
+    callable('user'),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object]),
+    __metadata("design:returntype", Promise)
+], TranslationProvider.prototype, "listEntries", null);
+__decorate([
+    callable('user'),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object]),
+    __metadata("design:returntype", Promise)
+], TranslationProvider.prototype, "listKeyVersions", null);
+__decorate([
+    callable('user'),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object]),
+    __metadata("design:returntype", Promise)
+], TranslationProvider.prototype, "listMemoryMatches", null);
+__decorate([
+    callable('user'),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object]),
+    __metadata("design:returntype", Promise)
+], TranslationProvider.prototype, "proposeRevision", null);
+__decorate([
+    callable('user'),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object]),
+    __metadata("design:returntype", Promise)
+], TranslationProvider.prototype, "listProposals", null);
+__decorate([
+    callable('user'),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object]),
+    __metadata("design:returntype", Promise)
+], TranslationProvider.prototype, "decideProposal", null);
+__decorate([
+    callable('user'),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object]),
+    __metadata("design:returntype", Promise)
+], TranslationProvider.prototype, "listMemory", null);
+__decorate([
+    callable('user'),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object]),
+    __metadata("design:returntype", Promise)
+], TranslationProvider.prototype, "pretranslateMemory", null);
+__decorate([
+    callable('user'),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object]),
+    __metadata("design:returntype", Promise)
+], TranslationProvider.prototype, "applyMemoryMatch", null);
+__decorate([
+    callable('user'),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object]),
+    __metadata("design:returntype", Promise)
+], TranslationProvider.prototype, "listReleases", null);
+__decorate([
+    callable('user'),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object]),
+    __metadata("design:returntype", Promise)
+], TranslationProvider.prototype, "createRelease", null);
+__decorate([
+    callable('user'),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object]),
+    __metadata("design:returntype", Promise)
+], TranslationProvider.prototype, "advanceReleaseHotfix", null);
+__decorate([
+    callable('user'),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object]),
+    __metadata("design:returntype", Promise)
+], TranslationProvider.prototype, "upsertKey", null);
+__decorate([
+    callable('user'),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object]),
+    __metadata("design:returntype", Promise)
+], TranslationProvider.prototype, "upsertUnit", null);
+__decorate([
+    callable('user'),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object]),
+    __metadata("design:returntype", Promise)
+], TranslationProvider.prototype, "listGlossary", null);
+__decorate([
+    callable('user'),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object]),
+    __metadata("design:returntype", Promise)
+], TranslationProvider.prototype, "upsertGlossaryTerm", null);
+__decorate([
+    callable('user'),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object]),
+    __metadata("design:returntype", Promise)
+], TranslationProvider.prototype, "deleteGlossaryTerm", null);
+__decorate([
+    callable('user'),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object]),
+    __metadata("design:returntype", Promise)
+], TranslationProvider.prototype, "listRevisions", null);
+__decorate([
+    callable('public'),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object]),
+    __metadata("design:returntype", Promise)
+], TranslationProvider.prototype, "getMessages", null);
 //# sourceMappingURL=TranslationProvider.js.map