@agilesyndrome/cf-genai-base 4.1.2 → 5.0.0

package/src/data.js

@@ -1,239 +0,0 @@
-import { auditLog, createD1 } from "./core.js";
-import { ensureUser, getAuthorizationUser, listUserGrants, listUserTenants, verifyImpersonationToken } from "./authorization.js";
-
-export const DATA_SCOPES = ["user", "tenant", "system"];
-export const DATA_OPERATIONS = ["read", "create", "update", "delete"];
-
-export class DataScopeError extends Error {
-  constructor(message) {
-    super(message);
-    this.name = "DataScopeError";
-  }
-}
-
-export function normalizeDataResources(resources = []) {
-  const names = new Set();
-  return resources.map((resource) => {
-    if (!resource || !/^[a-z][a-z0-9_-]*$/.test(String(resource.name || ""))) throw new TypeError("Data resources require a safe name");
-    if (!/^[a-z][a-z0-9_]*$/.test(String(resource.table || ""))) throw new TypeError(`Data resource ${resource.name} requires a safe table name`);
-    const name = String(resource.name);
-    if (names.has(name)) throw new TypeError(`Duplicate data resource: ${name}`);
-    names.add(name);
-    const scope = String(resource.scope || "").toLowerCase();
-    if (!DATA_SCOPES.includes(scope)) throw new TypeError(`Data resource ${resource.name} requires scope user, tenant, or system`);
-    const columns = [...new Set((resource.columns || []).map(String))];
-    if (!columns.length || columns.some((column) => !/^[a-z][a-z0-9_]*$/.test(column))) throw new TypeError(`Data resource ${resource.name} requires safe columns`);
-    const idColumn = String(resource.idColumn || "id");
-    if (!columns.includes(idColumn)) throw new TypeError(`Data resource ${resource.name} must include ${idColumn}`);
-    const ownerColumn = resource.ownerColumn ? String(resource.ownerColumn) : "user_id";
-    const tenantColumn = resource.tenantColumn ? String(resource.tenantColumn) : "tenant_id";
-    if (scope === "user" && !columns.includes(ownerColumn)) throw new TypeError(`User resource ${resource.name} must include ${ownerColumn}`);
-    if (scope === "tenant" && !columns.includes(tenantColumn)) throw new TypeError(`Tenant resource ${resource.name} must include ${tenantColumn}`);
-    const filterableColumns = [...new Set((resource.filterableColumns || columns).map(String))];
-    const orderableColumns = [...new Set((resource.orderableColumns || columns).map(String))];
-    for (const column of [...filterableColumns, ...orderableColumns]) if (!columns.includes(column)) throw new TypeError(`Data resource ${resource.name} references an unselected column`);
-    const writableColumns = [...new Set((resource.writableColumns || []).map(String))].filter((column) => column !== ownerColumn && column !== tenantColumn);
-    if (writableColumns.some((column) => !columns.includes(column))) throw new TypeError(`Data resource ${resource.name} references an unwritable column`);
-    const columnScopes = Object.fromEntries(Object.entries(resource.columnScopes || {}).map(([column, scopes]) => [String(column), Array.isArray(scopes) ? scopes.map(String) : [String(scopes)]]));
-    if (Object.keys(columnScopes).some((column) => !columns.includes(column) || columnScopes[column].some((scope) => !/^[a-z0-9]+(?::[a-z0-9-]+)+$/.test(scope)))) throw new TypeError(`Data resource ${resource.name} has invalid column scopes`);
-    if (!Array.isArray(resource.readableColumns) || !resource.readableColumns.length) throw new TypeError(`Data resource ${resource.name} requires explicit readableColumns`);
-    const readableColumns = [...new Set(resource.readableColumns.map(String))];
-    if (readableColumns.some((column) => !columns.includes(column))) throw new TypeError(`Data resource ${resource.name} references an unreadable column`);
-    const operations = [...new Set((resource.operations || ["read", ...(writableColumns.length ? ["create", "update", "delete"] : [])]).map((operation) => String(operation).toLowerCase()))];
-    if (!operations.length || operations.some((operation) => !DATA_OPERATIONS.includes(operation)) || !operations.includes("read")) throw new TypeError(`Data resource ${name} has invalid operations`);
-    const publicRead = resource.publicRead && typeof resource.publicRead === "object" ? { column: String(resource.publicRead.column || ""), value: resource.publicRead.value } : Boolean(resource.publicRead);
-    if (publicRead && typeof publicRead === "object" && (!/^[a-z][a-z0-9_]*$/.test(publicRead.column) || !columns.includes(publicRead.column))) throw new TypeError(`Public resource ${resource.name} requires a selected visibility column`);
-    return { ...resource, name, table: String(resource.table), scope, columns, readableColumns, idColumn, ownerColumn, tenantColumn, filterableColumns, orderableColumns, writableColumns, columnScopes, operations, publicRead };
-  });
-}
-
-export function createDataReader(env, { resources = [], context } = {}) {
-  const registry = new Map(normalizeDataResources(resources).map((resource) => [resource.name, resource]));
-  const getContext = typeof context === "function" ? context : async () => context || {};
-  const scope = (requestedScope) => ({
-    list: (name, options) => readList(name, requestedScope, options),
-    page: (name, options) => readPage(name, requestedScope, options),
-    count: (name, options) => readCount(name, requestedScope, options),
-    get: async (name, id) => (await readList(name, requestedScope, { where: { [registry.get(name)?.idColumn || "id"]: id }, limit: 1 }))[0] || null,
-    insert: (name, values) => writeInsert(name, requestedScope, values),
-    update: (name, id, changes) => writeUpdate(name, requestedScope, id, changes),
-    updateWhere: (name, where, changes) => writeUpdateWhere(name, requestedScope, where, changes),
-    delete: (name, id) => writeDelete(name, requestedScope, id),
-    deleteWhere: (name, where) => writeDeleteWhere(name, requestedScope, where),
-  });
-
-  async function readList(name, requestedScope, { where = {}, limit = 100, orderBy, offset = 0 } = {}) {
-    return (await readPage(name, requestedScope, { where, limit, orderBy, offset })).rows;
-  }
-
-  async function readPage(name, requestedScope, { where = {}, limit = 100, orderBy, cursor, offset = 0 } = {}) {
-    const resource = getResource(name);
-    const actor = await getContext();
-    if (!isAllowed(resource, requestedScope, actor, "read")) return { rows: [], nextCursor: null };
-    const predicates = [];
-    const bindings = [];
-    addScopePredicate(resource, requestedScope, actor, predicates, bindings);
-    addFilters(resource, where, predicates, bindings);
-    if (cursor !== undefined && cursor !== null) { predicates.push(`${quote(resource.idColumn)}>?`); bindings.push(cursor); }
-    const safeLimit = Math.min(Math.max(Number(limit) || 100, 1), 1000);
-    const safeOffset = Math.max(Number(offset) || 0, 0);
-    let sql = `SELECT ${resource.readableColumns.map(quote).join(",")} FROM ${quote(resource.table)}${predicates.length ? ` WHERE ${predicates.join(" AND ")}` : ""} LIMIT ${safeLimit} OFFSET ${safeOffset}`;
-    if (orderBy) {
-      const [column, direction = "ASC"] = String(orderBy).split(/\s+/, 2);
-      if (!resource.orderableColumns.includes(column)) throw new TypeError(`Column ${column} cannot order ${resource.name}`);
-      sql = sql.replace(` LIMIT ${safeLimit}`, ` ORDER BY ${quote(column)} ${direction.toUpperCase() === "DESC" ? "DESC" : "ASC"} LIMIT ${safeLimit}`);
-    }
-    const result = await createD1(env, { who: actorLabel(actor) }).prepare(sql).bind(...bindings).all();
-    const rows = result.results || [];
-    return { rows, nextCursor: rows.length === safeLimit ? rows[rows.length - 1][resource.idColumn] : null };
-  }
-
-  async function readCount(name, requestedScope, { where = {} } = {}) {
-    const resource = getResource(name);
-    const actor = await getContext();
-    if (!isAllowed(resource, requestedScope, actor, "read")) return 0;
-    const predicates = [];
-    const bindings = [];
-    addScopePredicate(resource, requestedScope, actor, predicates, bindings);
-    addFilters(resource, where, predicates, bindings);
-    const result = await createD1(env, { who: actorLabel(actor) }).prepare(`SELECT COUNT(*) AS count FROM ${quote(resource.table)}${predicates.length ? ` WHERE ${predicates.join(" AND ")}` : ""}`).bind(...bindings).first();
-    return Number(result?.count || 0);
-  }
-
-  async function writeInsert(name, requestedScope, values = {}) {
-    const resource = getResource(name);
-    const actor = await getContext();
-    assertWritable(resource, requestedScope, actor, "create");
-    const data = cleanWritableValues(resource, values, { includeId: true, includeOwnership: requestedScope === "system" });
-    assertColumnScopes(resource, actor, Object.keys(data));
-    addOwnedValue(resource, requestedScope, actor, data);
-    const columns = Object.keys(data);
-    if (!columns.length) throw new TypeError(`No writable values supplied for ${resource.name}`);
-    const result = await createD1(env, { who: actorLabel(actor) }).prepare(`INSERT INTO ${quote(resource.table)} (${columns.map(quote).join(",")}) VALUES (${columns.map(() => "?").join(",")})`).bind(...columns.map((column) => data[column])).run();
-    const insertedId = data[resource.idColumn] === undefined ? result?.meta?.last_row_id : data[resource.idColumn];
-    return insertedId === undefined ? data : (await readList(name, requestedScope, { where: { [resource.idColumn]: insertedId }, limit: 1 }))[0] || { ...data, [resource.idColumn]: insertedId };
-  }
-
-  async function writeUpdate(name, requestedScope, id, changes = {}) {
-    const resource = getResource(name);
-    const actor = await getContext();
-    assertWritable(resource, requestedScope, actor, "update");
-    const data = cleanWritableValues(resource, changes, { includeOwnership: requestedScope === "system" });
-    assertColumnScopes(resource, actor, Object.keys(data));
-    const columns = Object.keys(data);
-    if (!columns.length) throw new TypeError(`No writable values supplied for ${resource.name}`);
-    const predicates = [`${quote(resource.idColumn)}=?`];
-    const bindings = [id];
-    addScopePredicate(resource, requestedScope, actor, predicates, bindings);
-    await createD1(env, { who: actorLabel(actor) }).prepare(`UPDATE ${quote(resource.table)} SET ${columns.map((column) => `${quote(column)}=?`).join(",")} WHERE ${predicates.join(" AND ")}`).bind(...columns.map((column) => data[column]), ...bindings).run();
-    return (await readList(name, requestedScope, { where: { [resource.idColumn]: id }, limit: 1 }))[0] || null;
-  }
-
-  async function writeDelete(name, requestedScope, id) {
-    const resource = getResource(name);
-    const actor = await getContext();
-    assertWritable(resource, requestedScope, actor, "delete");
-    const predicates = [`${quote(resource.idColumn)}=?`];
-    const bindings = [id];
-    addScopePredicate(resource, requestedScope, actor, predicates, bindings);
-    return createD1(env, { who: actorLabel(actor) }).prepare(`DELETE FROM ${quote(resource.table)} WHERE ${predicates.join(" AND ")}`).bind(...bindings).run();
-  }
-
-  async function writeUpdateWhere(name, requestedScope, where, changes) {
-    const resource = getResource(name);
-    const actor = await getContext();
-    assertWritable(resource, requestedScope, actor, "update");
-    const data = cleanWritableValues(resource, changes, { includeOwnership: requestedScope === "system" });
-    assertColumnScopes(resource, actor, Object.keys(data));
-    const columns = Object.keys(data);
-    if (!columns.length) throw new TypeError(`No writable values supplied for ${resource.name}`);
-    const predicates = [];
-    const bindings = [];
-    addScopePredicate(resource, requestedScope, actor, predicates, bindings);
-    addFilters(resource, where, predicates, bindings);
-    await createD1(env, { who: actorLabel(actor) }).prepare(`UPDATE ${quote(resource.table)} SET ${columns.map((column) => `${quote(column)}=?`).join(",")} WHERE ${predicates.join(" AND ")}`).bind(...columns.map((column) => data[column]), ...bindings).run();
-    return readCount(name, requestedScope, { where });
-  }
-
-  async function writeDeleteWhere(name, requestedScope, where) {
-    const resource = getResource(name);
-    const actor = await getContext();
-    assertWritable(resource, requestedScope, actor, "delete");
-    const predicates = [];
-    const bindings = [];
-    addScopePredicate(resource, requestedScope, actor, predicates, bindings);
-    addFilters(resource, where, predicates, bindings);
-    return createD1(env, { who: actorLabel(actor) }).prepare(`DELETE FROM ${quote(resource.table)} WHERE ${predicates.join(" AND ")}`).bind(...bindings).run();
-  }
-
-  function getResource(name) {
-    const resource = registry.get(String(name));
-    if (!resource) throw new TypeError(`Unknown data resource: ${name}`);
-    return resource;
-  }
-
-  return { user: scope("user"), tenant: scope("tenant"), system: scope("system"), context: getContext, resources: [...registry.values()] };
-}
-
-export async function requestDataContext(env, { state = {}, request, publicTenantId = null } = {}) {
-  let authUser = state.authUser || (state.user ? await ensureUser(env, state.user, { who: `user:${state.user.sub || "unknown"}` }) : null);
-  const system = Boolean(state.user?.auth_strategy === "http_basic" || (authUser && authUser.is_admin));
-  if (!authUser) return { userId: null, tenantId: publicTenantId, public: Boolean(publicTenantId), system: false };
-  const impersonation = system ? await verifyImpersonationToken(request?.headers?.get("X-CF-GenAI-Impersonation") || readCookie(request, "__Host-cfgenai_impersonation"), env) : null;
-  if (impersonation) {
-    const targetUser = await getAuthorizationUser(env, impersonation.targetUserId, { who: `user:${impersonation.adminUserId}` });
-    if (targetUser) authUser = targetUser;
-  }
-  const who = `user:${authUser.id}`;
-  const [tenants, grants] = await Promise.all([listUserTenants(env, authUser.id, { who }), listUserGrants(env, authUser.id, { who })]);
-  const requestedTenant = state.tenantId || request?.headers?.get("X-Tenant-ID") || null;
-  const tenant = requestedTenant ? tenants.find((item) => item.id === requestedTenant) : tenants.length === 1 ? tenants[0] : null;
-  return { userId: authUser.id, tenantId: tenant?.id || null, public: false, system, scopes: grants.map((grant) => grant.scope_name), tenants, invalidTenant: Boolean(requestedTenant && !tenant), impersonated: Boolean(impersonation), impersonatedBy: impersonation?.adminUserId || null };
-}
-
-function isAllowed(resource, requestedScope, actor, operation) {
-    const allowed = requestedScope === "system" ? Boolean(actor.system) : requestedScope === resource.scope && (requestedScope === "user" ? Boolean(actor.userId) : Boolean(actor.tenantId && (actor.userId || (actor.public && resource.publicRead))));
-  if (!allowed || !resource.operations.includes(operation)) {
-    auditLog({ who: actorLabel(actor), operation: "deny", resource: `data:${resource.name}:${requestedScope}:${operation}` });
-    return false;
-  }
-  return true;
-}
-
-function assertWritable(resource, requestedScope, actor, operation) {
-  if (!isAllowed(resource, requestedScope, actor, operation)) throw new DataScopeError(`Data scope ${requestedScope} cannot ${operation} resource ${resource.name}`);
-}
-
-function assertColumnScopes(resource, actor, columns) {
-  if (actor.system) return;
-  for (const column of columns) {
-    const required = resource.columnScopes[column] || [];
-    if (required.some((scope) => !actor.scopes?.includes(scope))) throw new DataScopeError(`Missing scope to write ${resource.name}.${column}`);
-  }
-}
-
-function addScopePredicate(resource, requestedScope, actor, predicates, bindings) {
-  if (requestedScope === "user") { predicates.push(`${quote(resource.ownerColumn)}=?`); bindings.push(actor.userId); }
-  if (requestedScope === "tenant") { predicates.push(`${quote(resource.tenantColumn)}=?`); bindings.push(actor.tenantId); if (actor.public && resource.publicRead && typeof resource.publicRead === "object") { predicates.push(`${quote(resource.publicRead.column)}=?`); bindings.push(resource.publicRead.value); } }
-}
-
-function addFilters(resource, where, predicates, bindings) {
-  for (const [column, value] of Object.entries(where || {})) {
-    if (!resource.filterableColumns.includes(column)) throw new TypeError(`Column ${column} cannot filter ${resource.name}`);
-    if (value === null) predicates.push(`${quote(column)} IS NULL`);
-    else { predicates.push(`${quote(column)}=?`); bindings.push(value); }
-  }
-}
-
-function cleanWritableValues(resource, values, { includeId = false, includeOwnership = false } = {}) {
-  return Object.fromEntries(Object.entries(values || {}).filter(([column]) => (resource.writableColumns.includes(column) || (includeOwnership && [resource.ownerColumn, resource.tenantColumn].includes(column))) && (includeId || column !== resource.idColumn)));
-}
-
-function addOwnedValue(resource, requestedScope, actor, data) {
-  if (requestedScope === "user") data[resource.ownerColumn] = actor.userId;
-  if (requestedScope === "tenant") data[resource.tenantColumn] = actor.tenantId;
-}
-
-function actorLabel(actor) { return actor.system ? "system:data" : `user:${actor.userId || "unknown"}`; }
-function quote(identifier) { return `"${identifier}"`; }
-function readCookie(request, name) { const value = request?.headers?.get("Cookie") || ""; return value.split(";").map((part) => part.trim()).find((part) => part.startsWith(`${name}=`))?.slice(name.length + 1) || ""; }

package/src/ui/groups.js

@@ -1,2 +0,0 @@
-export class CfGroupCatalog extends HTMLElement { async connectedCallback() { this.attachShadow({ mode: "open" }).innerHTML = `<style>:host{display:block;color:var(--cf-ui-text,#20231f);font:15px/1.45 system-ui,sans-serif}.card{background:var(--cf-ui-bg,#fff);border:1px solid var(--cf-ui-border,#d8ddd5);border-radius:.6rem;padding:1rem}.status{color:var(--cf-ui-muted,#687067);min-height:1.4em}.list{display:grid;gap:.3rem}.list div{padding:.55rem 0;border-bottom:1px solid var(--cf-ui-border,#d8ddd5)}</style><section class="card"><h2>User groups</h2><p class="status">Loading</p><div class="list"></div></section>`; const response = await fetch("/api/admin/groups", { credentials: "same-origin" }); const groups = (await response.json()).groups || []; const list = this.shadowRoot.querySelector(".list"); list.replaceChildren(...groups.map((group) => { const row = document.createElement("div"); row.textContent = group.display_name + " — " + group.name; return row; })); this.shadowRoot.querySelector(".status").textContent = groups.length + " groups"; } }
-if (!customElements.get("cf-group-catalog")) customElements.define("cf-group-catalog", CfGroupCatalog);