@ai0x0/utils 0.0.50 → 0.1.0

package/es/backend/route-operation/write-operation-core.js

@@ -10,7 +10,8 @@ function _asyncToGenerator(fn) { return function () { var self = this, args = ar
 import { routeOperation, TypedNextResponse } from "next-rest-framework";
 import { z } from "zod";
 import { createOpenApiOperation } from "./open-api-operation.js";
-import { getDefaultTags, handleOperationError, readPostBody } from "./operation-common.js";
+import { getDefaultTags, handleOperationError, readPostBody, resolveAccess, sessionLoader } from "./operation-common.js";
+import { NO_SCOPE } from "../scope.js";
 
 // ==============================================================================
 // POST create operation
@@ -24,6 +25,7 @@ export function createPostOperationFactory(_ref) {
       getSession = _ref2.getSession;
     return function (_ref3) {
       var schemas = _ref3.schemas,
+        access = _ref3.access,
         _ref3$contentType = _ref3.contentType,
         contentType = _ref3$contentType === void 0 ? "application/json" : _ref3$contentType,
         openApiOperation = _ref3.openApiOperation,
@@ -52,92 +54,90 @@ export function createPostOperationFactory(_ref) {
         status: 200
       }]).handler( /*#__PURE__*/function () {
         var _ref4 = _asyncToGenerator( /*#__PURE__*/_regeneratorRuntime().mark(function _callee(req) {
-          var _ref5, userId, body, extraBody, params, raw, data;
+          var _yield$resolveAccess, scope, body, extraBody, params, raw, data;
           return _regeneratorRuntime().wrap(function _callee$(_context) {
             while (1) switch (_context.prev = _context.next) {
               case 0:
                 _context.prev = 0;
                 _context.next = 3;
-                return getSession(req);
+                return resolveAccess({
+                  access: access,
+                  loadSession: sessionLoader(getSession, req),
+                  method: "POST"
+                });
               case 3:
-                _context.t0 = _context.sent;
-                if (_context.t0) {
-                  _context.next = 6;
-                  break;
-                }
-                _context.t0 = {};
-              case 6:
-                _ref5 = _context.t0;
-                userId = _ref5.userId;
-                _context.next = 10;
+                _yield$resolveAccess = _context.sent;
+                scope = _yield$resolveAccess.scope;
+                _context.next = 7;
                 return readPostBody(req, {
                   contentType: contentType,
                   parseBody: parseBody
                 });
-              case 10:
+              case 7:
                 body = _context.sent;
-                _context.next = 13;
+                _context.next = 10;
                 return setBody === null || setBody === void 0 ? void 0 : setBody(req);
-              case 13:
-                _context.t1 = _context.sent;
-                if (_context.t1) {
-                  _context.next = 16;
+              case 10:
+                _context.t0 = _context.sent;
+                if (_context.t0) {
+                  _context.next = 13;
                   break;
                 }
-                _context.t1 = {};
-              case 16:
-                extraBody = _context.t1;
-                params = _objectSpread(_objectSpread({
-                  creatorId: userId
-                }, body), extraBody);
+                _context.t0 = {};
+              case 13:
+                extraBody = _context.t0;
+                // 新建的行归属这次请求的作用域。默认情形下作用域就是 creatorId = 当前用户，
+                // 所以这与从前的行为逐字等价；换了归属列（比如 ownerId）时它自动跟着换。
+                // 想再记一个「谁建的」用 setBody 补 —— 那是调用方的语义，库不猜。
+                params = _objectSpread(_objectSpread(_objectSpread({}, scopeStamp(scope)), body), extraBody);
                 if (!(table && db)) {
-                  _context.next = 24;
+                  _context.next = 21;
                   break;
                 }
-                _context.next = 21;
+                _context.next = 18;
                 return createAction({
                   bodySchema: schemas.body,
                   db: db,
                   table: table
                 })(params);
-              case 21:
-                _context.t2 = _context.sent[0];
-                _context.next = 25;
+              case 18:
+                _context.t1 = _context.sent[0];
+                _context.next = 22;
                 break;
-              case 24:
-                _context.t2 = params;
-              case 25:
-                raw = _context.t2;
+              case 21:
+                _context.t1 = params;
+              case 22:
+                raw = _context.t1;
                 if (!handler) {
-                  _context.next = 32;
+                  _context.next = 29;
                   break;
                 }
-                _context.next = 29;
+                _context.next = 26;
                 return handler({
                   data: raw,
                   params: params,
                   req: req
                 });
-              case 29:
-                _context.t3 = _context.sent;
-                _context.next = 33;
+              case 26:
+                _context.t2 = _context.sent;
+                _context.next = 30;
                 break;
-              case 32:
-                _context.t3 = raw;
-              case 33:
-                data = _context.t3;
+              case 29:
+                _context.t2 = raw;
+              case 30:
+                data = _context.t2;
                 return _context.abrupt("return", TypedNextResponse.json(data, {
                   status: 200
                 }));
+              case 34:
+                _context.prev = 34;
+                _context.t3 = _context["catch"](0);
+                return _context.abrupt("return", handleOperationError(_context.t3, catchHandler));
               case 37:
-                _context.prev = 37;
-                _context.t4 = _context["catch"](0);
-                return _context.abrupt("return", handleOperationError(_context.t4, catchHandler));
-              case 40:
               case "end":
                 return _context.stop();
             }
-          }, _callee, null, [[0, 37]]);
+          }, _callee, null, [[0, 34]]);
         }));
         return function (_x) {
           return _ref4.apply(this, arguments);
@@ -151,20 +151,20 @@ export function createPostOperationFactory(_ref) {
 // PUT update operation
 // ==============================================================================
 
-export function createPutOperationFactory(_ref6) {
-  var createAction = _ref6.createAction,
-    getTableName = _ref6.getTableName;
-  return function (_ref7) {
-    var db = _ref7.db,
-      getSession = _ref7.getSession;
-    return function (_ref8) {
-      var schemas = _ref8.schemas,
-        access = _ref8.access,
-        openApiOperation = _ref8.openApiOperation,
-        table = _ref8.table,
-        setBody = _ref8.setBody,
-        handler = _ref8.handler,
-        catchHandler = _ref8.catch;
+export function createPutOperationFactory(_ref5) {
+  var createAction = _ref5.createAction,
+    getTableName = _ref5.getTableName;
+  return function (_ref6) {
+    var db = _ref6.db,
+      getSession = _ref6.getSession;
+    return function (_ref7) {
+      var schemas = _ref7.schemas,
+        access = _ref7.access,
+        openApiOperation = _ref7.openApiOperation,
+        table = _ref7.table,
+        setBody = _ref7.setBody,
+        handler = _ref7.handler,
+        catchHandler = _ref7.catch;
       return routeOperation({
         method: "PUT",
         openApiOperation: createOpenApiOperation({
@@ -182,95 +182,121 @@ export function createPutOperationFactory(_ref6) {
         contentType: "application/json",
         status: 200
       }]).handler( /*#__PURE__*/function () {
-        var _ref9 = _asyncToGenerator( /*#__PURE__*/_regeneratorRuntime().mark(function _callee2(req) {
-          var _access$byCreator, _ref10, userId, body, extraBody, params, raw, data;
+        var _ref8 = _asyncToGenerator( /*#__PURE__*/_regeneratorRuntime().mark(function _callee2(req) {
+          var _yield$loadSession, loadSession, _yield$resolveAccess2, scope, body, extraBody, params, raw, data;
           return _regeneratorRuntime().wrap(function _callee2$(_context2) {
             while (1) switch (_context2.prev = _context2.next) {
               case 0:
                 _context2.prev = 0;
-                _context2.next = 3;
-                return getSession(req);
-              case 3:
+                loadSession = sessionLoader(getSession, req);
+                _context2.next = 4;
+                return resolveAccess({
+                  access: access,
+                  loadSession: loadSession,
+                  method: "PUT"
+                });
+              case 4:
+                _yield$resolveAccess2 = _context2.sent;
+                scope = _yield$resolveAccess2.scope;
+                _context2.next = 8;
+                return req.json();
+              case 8:
+                body = _context2.sent;
+                _context2.next = 11;
+                return setBody === null || setBody === void 0 ? void 0 : setBody(req);
+              case 11:
                 _context2.t0 = _context2.sent;
                 if (_context2.t0) {
-                  _context2.next = 6;
+                  _context2.next = 14;
                   break;
                 }
                 _context2.t0 = {};
-              case 6:
-                _ref10 = _context2.t0;
-                userId = _ref10.userId;
-                _context2.next = 10;
-                return req.json();
-              case 10:
-                body = _context2.sent;
-                _context2.next = 13;
-                return setBody === null || setBody === void 0 ? void 0 : setBody(req);
-              case 13:
-                _context2.t1 = _context2.sent;
-                if (_context2.t1) {
-                  _context2.next = 16;
+              case 14:
+                extraBody = _context2.t0;
+                _context2.t1 = _objectSpread;
+                _context2.t2 = _objectSpread;
+                _context2.next = 19;
+                return loadSession();
+              case 19:
+                _context2.t4 = _yield$loadSession = _context2.sent;
+                _context2.t3 = _context2.t4 === null;
+                if (_context2.t3) {
+                  _context2.next = 23;
+                  break;
+                }
+                _context2.t3 = _yield$loadSession === void 0;
+              case 23:
+                if (!_context2.t3) {
+                  _context2.next = 27;
                   break;
                 }
-                _context2.t1 = {};
-              case 16:
-                extraBody = _context2.t1;
-                params = _objectSpread(_objectSpread({
-                  editorId: userId
-                }, body), extraBody);
+                _context2.t5 = void 0;
+                _context2.next = 28;
+                break;
+              case 27:
+                _context2.t5 = _yield$loadSession.userId;
+              case 28:
+                _context2.t6 = _context2.t5;
+                _context2.t7 = {
+                  editorId: _context2.t6
+                };
+                _context2.t8 = body;
+                _context2.t9 = (0, _context2.t2)(_context2.t7, _context2.t8);
+                _context2.t10 = extraBody;
+                params = (0, _context2.t1)(_context2.t9, _context2.t10);
                 if (!(table && db)) {
-                  _context2.next = 24;
+                  _context2.next = 40;
                   break;
                 }
-                _context2.next = 21;
+                _context2.next = 37;
                 return createAction({
                   bodySchema: schemas.body,
                   db: db,
                   table: table
                 })(params, {
-                  byCreator: (_access$byCreator = access === null || access === void 0 ? void 0 : access.byCreator) !== null && _access$byCreator !== void 0 ? _access$byCreator : true
+                  scope: scope
                 });
-              case 21:
-                _context2.t2 = _context2.sent;
-                _context2.next = 25;
+              case 37:
+                _context2.t11 = _context2.sent;
+                _context2.next = 41;
                 break;
-              case 24:
-                _context2.t2 = params;
-              case 25:
-                raw = _context2.t2;
+              case 40:
+                _context2.t11 = params;
+              case 41:
+                raw = _context2.t11;
                 if (!handler) {
-                  _context2.next = 32;
+                  _context2.next = 48;
                   break;
                 }
-                _context2.next = 29;
+                _context2.next = 45;
                 return handler({
                   data: raw,
                   params: params,
                   req: req
                 });
-              case 29:
-                _context2.t3 = _context2.sent;
-                _context2.next = 33;
+              case 45:
+                _context2.t12 = _context2.sent;
+                _context2.next = 49;
                 break;
-              case 32:
-                _context2.t3 = raw;
-              case 33:
-                data = _context2.t3;
+              case 48:
+                _context2.t12 = raw;
+              case 49:
+                data = _context2.t12;
                 return _context2.abrupt("return", TypedNextResponse.json(data, {
                   status: 200
                 }));
-              case 37:
-                _context2.prev = 37;
-                _context2.t4 = _context2["catch"](0);
-                return _context2.abrupt("return", handleOperationError(_context2.t4, catchHandler));
-              case 40:
+              case 53:
+                _context2.prev = 53;
+                _context2.t13 = _context2["catch"](0);
+                return _context2.abrupt("return", handleOperationError(_context2.t13, catchHandler));
+              case 56:
               case "end":
                 return _context2.stop();
             }
-          }, _callee2, null, [[0, 37]]);
+          }, _callee2, null, [[0, 53]]);
         }));
         return function (_x2) {
-          return _ref9.apply(this, arguments);
+          return _ref8.apply(this, arguments);
         };
       }());
     };
@@ -284,19 +310,19 @@ export function createPutOperationFactory(_ref6) {
 var defaultDeleteBodySchema = z.object({
   id: z.string()
 });
-export function createDeleteOperationFactory(_ref11) {
-  var createAction = _ref11.createAction,
-    getTableName = _ref11.getTableName;
-  return function (_ref12) {
-    var db = _ref12.db,
-      getSession = _ref12.getSession;
-    return function (_ref13) {
-      var table = _ref13.table,
-        schemas = _ref13.schemas,
-        access = _ref13.access,
-        openApiOperation = _ref13.openApiOperation,
-        handler = _ref13.handler,
-        catchHandler = _ref13.catch;
+export function createDeleteOperationFactory(_ref9) {
+  var createAction = _ref9.createAction,
+    getTableName = _ref9.getTableName;
+  return function (_ref10) {
+    var db = _ref10.db,
+      getSession = _ref10.getSession;
+    return function (_ref11) {
+      var table = _ref11.table,
+        schemas = _ref11.schemas,
+        access = _ref11.access,
+        openApiOperation = _ref11.openApiOperation,
+        handler = _ref11.handler,
+        catchHandler = _ref11.catch;
       return routeOperation({
         method: "DELETE",
         openApiOperation: createOpenApiOperation({
@@ -310,8 +336,8 @@ export function createDeleteOperationFactory(_ref11) {
         body: (schemas === null || schemas === void 0 ? void 0 : schemas.body) || defaultDeleteBodySchema,
         contentType: "application/json"
       }).handler( /*#__PURE__*/function () {
-        var _ref14 = _asyncToGenerator( /*#__PURE__*/_regeneratorRuntime().mark(function _callee3(req) {
-          var _access$byCreator2, bodySchema, body, _ref15, userId, data;
+        var _ref12 = _asyncToGenerator( /*#__PURE__*/_regeneratorRuntime().mark(function _callee3(req) {
+          var bodySchema, body, _yield$resolveAccess3, scope, data;
           return _regeneratorRuntime().wrap(function _callee3$(_context3) {
             while (1) switch (_context3.prev = _context3.next) {
               case 0:
@@ -323,68 +349,72 @@ export function createDeleteOperationFactory(_ref11) {
               case 5:
                 _context3.t1 = _context3.sent;
                 body = _context3.t0.parse.call(_context3.t0, _context3.t1);
-                if (!((_access$byCreator2 = access === null || access === void 0 ? void 0 : access.byCreator) !== null && _access$byCreator2 !== void 0 ? _access$byCreator2 : true)) {
-                  _context3.next = 16;
-                  break;
-                }
-                _context3.next = 10;
-                return getSession(req);
-              case 10:
-                _context3.t2 = _context3.sent;
-                if (_context3.t2) {
-                  _context3.next = 13;
-                  break;
-                }
-                _context3.t2 = {};
-              case 13:
-                _ref15 = _context3.t2;
-                userId = _ref15.userId;
-                body.creatorId = userId;
-              case 16:
+                _context3.next = 9;
+                return resolveAccess({
+                  access: access,
+                  loadSession: sessionLoader(getSession, req),
+                  method: "DELETE"
+                });
+              case 9:
+                _yield$resolveAccess3 = _context3.sent;
+                scope = _yield$resolveAccess3.scope;
                 if (!(table && db)) {
-                  _context3.next = 22;
+                  _context3.next = 17;
                   break;
                 }
-                _context3.next = 19;
+                _context3.next = 14;
                 return createAction({
                   db: db,
                   table: table
                 })({
-                  creatorId: body.creatorId,
                   id: body.id
+                }, {
+                  scope: scope
                 });
-              case 19:
-                _context3.t3 = _context3.sent;
-                _context3.next = 23;
+              case 14:
+                _context3.t2 = _context3.sent;
+                _context3.next = 18;
                 break;
-              case 22:
-                _context3.t3 = body;
-              case 23:
-                data = _context3.t3;
-                _context3.next = 26;
+              case 17:
+                _context3.t2 = body;
+              case 18:
+                data = _context3.t2;
+                _context3.next = 21;
                 return handler === null || handler === void 0 ? void 0 : handler({
                   data: data,
                   params: body,
                   req: req
                 });
-              case 26:
+              case 21:
                 return _context3.abrupt("return", TypedNextResponse.json(data, {
                   status: 200
                 }));
-              case 29:
-                _context3.prev = 29;
-                _context3.t4 = _context3["catch"](0);
-                return _context3.abrupt("return", handleOperationError(_context3.t4, catchHandler));
-              case 32:
+              case 24:
+                _context3.prev = 24;
+                _context3.t3 = _context3["catch"](0);
+                return _context3.abrupt("return", handleOperationError(_context3.t3, catchHandler));
+              case 27:
               case "end":
                 return _context3.stop();
             }
-          }, _callee3, null, [[0, 29]]);
+          }, _callee3, null, [[0, 24]]);
         }));
         return function (_x3) {
-          return _ref14.apply(this, arguments);
+          return _ref12.apply(this, arguments);
         };
       }());
     };
   };
+}
+
+// 新建时要往行上盖的归属字段。多值作用域（IN）在新建这里没有意义 —— 一行只能属于一个归属，
+// 所以那种配置直接拒绝，而不是随便挑一个。
+function scopeStamp(scope) {
+  if (scope === NO_SCOPE) {
+    return {};
+  }
+  if (Array.isArray(scope.value)) {
+    throw new Error("\u65B0\u5EFA\u64CD\u4F5C\u7684\u4F5C\u7528\u57DF\u4E0D\u80FD\u662F\u591A\u503C\uFF1A\u4E00\u884C\u53EA\u80FD\u5C5E\u4E8E\u4E00\u4E2A ".concat(scope.column, "\u3002\u591A\u503C\u4F5C\u7528\u57DF\u53EA\u7528\u4E8E\u8BFB\u3002"));
+  }
+  return _defineProperty({}, scope.column, scope.value);
 }