@casual-simulation/aux-records 3.8.1 → 3.10.2

package/PolicyController.js

@@ -55,6 +55,7 @@ const ALLOWED_MODERATOR_ACTIONS = new Set([
     'list',
     'listSubscriptions',
     'count',
+    'purchase',
 ]);
 function constructAllowedResourcesLookup(allowedResources) {
     const lookup = new Set();
@@ -154,7 +155,6 @@ export class PolicyController {
      * @returns The authorization context that will be used to evaluate whether the request is authorized.
      */
     async constructAuthorizationContext(request) {
-        var _a, _b;
         let recordKeyResult = null;
         let recordName;
         let recordKeyCreatorId;
@@ -223,9 +223,9 @@ export class PolicyController {
         if (request.userId) {
             userPrivacyFeatures = await this._policies.getUserPrivacyFeatures(request.userId);
         }
-        const userRole = (_a = (request.userId
-            ? userPrivacyFeatures === null || userPrivacyFeatures === void 0 ? void 0 : userPrivacyFeatures.userRole
-            : request.userRole)) !== null && _a !== void 0 ? _a : 'none';
+        const userRole = (request.userId
+            ? userPrivacyFeatures?.userRole
+            : request.userRole) ?? 'none';
         if (!userPrivacyFeatures) {
             if (this._auth.privoEnabled && userRole !== 'system') {
                 userPrivacyFeatures = {
@@ -257,7 +257,7 @@ export class PolicyController {
             userId: request.userId,
             userRole: userRole,
             userPrivacyFeatures,
-            sendNotLoggedIn: (_b = request.sendNotLoggedIn) !== null && _b !== void 0 ? _b : true,
+            sendNotLoggedIn: request.sendNotLoggedIn ?? true,
         };
         return {
             success: true,
@@ -270,7 +270,6 @@ export class PolicyController {
      * @param request The request.
      */
     async authorizeUserAndInstances(context, request) {
-        var _a;
         try {
             const authorization = await this.authorizeSubjects(context, {
                 action: request.action,
@@ -282,7 +281,7 @@ export class PolicyController {
                         subjectType: 'user',
                         subjectId: request.userId,
                     },
-                    ...((_a = request.instances) !== null && _a !== void 0 ? _a : []).map((i) => ({
+                    ...(request.instances ?? []).map((i) => ({
                         subjectType: 'inst',
                         subjectId: i,
                     })),
@@ -299,8 +298,8 @@ export class PolicyController {
         }
         catch (err) {
             const span = trace.getActiveSpan();
-            span === null || span === void 0 ? void 0 : span.recordException(err);
-            span === null || span === void 0 ? void 0 : span.setStatus({ code: SpanStatusCode.ERROR });
+            span?.recordException(err);
+            span?.setStatus({ code: SpanStatusCode.ERROR });
             console.error('[PolicyController] A server error occurred while authorizing user and instances.', err);
             return {
                 success: false,
@@ -315,14 +314,13 @@ export class PolicyController {
      * @param request The request.
      */
     async authorizeUserAndInstancesForResources(context, request) {
-        var _a;
         try {
             const subjects = [
                 {
                     subjectType: 'user',
                     subjectId: request.userId,
                 },
-                ...((_a = request.instances) !== null && _a !== void 0 ? _a : []).map((i) => ({
+                ...(request.instances ?? []).map((i) => ({
                     subjectType: 'inst',
                     subjectId: i,
                 })),
@@ -432,8 +430,8 @@ export class PolicyController {
         }
         catch (err) {
             const span = trace.getActiveSpan();
-            span === null || span === void 0 ? void 0 : span.recordException(err);
-            span === null || span === void 0 ? void 0 : span.setStatus({ code: SpanStatusCode.ERROR });
+            span?.recordException(err);
+            span?.setStatus({ code: SpanStatusCode.ERROR });
             console.error('[PolicyController] A server error occurred while authorizing user and instances for resources.', err);
             return {
                 success: false,
@@ -482,8 +480,8 @@ export class PolicyController {
         }
         catch (err) {
             const span = trace.getActiveSpan();
-            span === null || span === void 0 ? void 0 : span.recordException(err);
-            span === null || span === void 0 ? void 0 : span.setStatus({ code: SpanStatusCode.ERROR });
+            span?.recordException(err);
+            span?.setStatus({ code: SpanStatusCode.ERROR });
             console.error('[PolicyController] A server error occurred while authorizing subjects.', err);
             return {
                 success: false,
@@ -507,8 +505,8 @@ export class PolicyController {
         }
         catch (err) {
             const span = trace.getActiveSpan();
-            span === null || span === void 0 ? void 0 : span.recordException(err);
-            span === null || span === void 0 ? void 0 : span.setStatus({ code: SpanStatusCode.ERROR });
+            span?.recordException(err);
+            span?.setStatus({ code: SpanStatusCode.ERROR });
             console.error('[PolicyController] A server error occurred while authorizing a subject.', err);
             return {
                 success: false,
@@ -540,7 +538,6 @@ export class PolicyController {
      * @param request The request to authorize.
      */
     async _authorizeSubjectUsingContext(context, request) {
-        var _a, _b, _c;
         try {
             const markers = getRootMarkersOrDefault(request.markers);
             let recommendedEntitlement = undefined;
@@ -878,10 +875,10 @@ export class PolicyController {
                 const entitlementFeature = getEntitlementFeatureForAction(request.resourceKind, request.action);
                 let hasPackages = false;
                 if (entitlementFeature) {
-                    const loadedPackages = (_b = (await ((_a = this._insts) === null || _a === void 0 ? void 0 : _a.listLoadedPackages(instId.recordName, instId.inst)))) !== null && _b !== void 0 ? _b : [];
+                    const loadedPackages = (await this._insts?.listLoadedPackages(instId.recordName, instId.inst)) ?? [];
                     const grantedEntitlements = await this._policies.listGrantedEntitlementsByFeatureAndUserId(loadedPackages.map((p) => p.packageId), entitlementFeature, context.userId, context.recordName, Date.now());
-                    if ((loadedPackages === null || loadedPackages === void 0 ? void 0 : loadedPackages.length) > 0 ||
-                        (grantedEntitlements === null || grantedEntitlements === void 0 ? void 0 : grantedEntitlements.length) > 0) {
+                    if (loadedPackages?.length > 0 ||
+                        grantedEntitlements?.length > 0) {
                         hasPackages = true;
                     }
                     if (grantedEntitlements && grantedEntitlements.length > 0) {
@@ -926,10 +923,9 @@ export class PolicyController {
                     }
                     if (hasPackages) {
                         const firstPackage = loadedPackages[0];
-                        const pkg = await ((_c = this._packageVersions) === null || _c === void 0 ? void 0 : _c.getItemById(firstPackage.packageVersionId));
-                        if (pkg === null || pkg === void 0 ? void 0 : pkg.item) {
+                        const pkg = await this._packageVersions?.getItemById(firstPackage.packageVersionId);
+                        if (pkg?.item) {
                             const canRecommendEntitlement = pkg.item.entitlements.some((e) => {
-                                var _a, _b;
                                 if (e.scope === 'personal' &&
                                     context.userId === context.recordName) {
                                     return true;
@@ -939,11 +935,11 @@ export class PolicyController {
                                     return true;
                                 }
                                 else if (e.scope === 'studio' &&
-                                    ((_a = context.recordStudioMembers) === null || _a === void 0 ? void 0 : _a.some((m) => m.userId === context.userId))) {
+                                    context.recordStudioMembers?.some((m) => m.userId === context.userId)) {
                                     return true;
                                 }
                                 else if (e.scope === 'designated' &&
-                                    ((_b = e.designatedRecords) === null || _b === void 0 ? void 0 : _b.includes(context.recordName))) {
+                                    e.designatedRecords?.includes(context.recordName)) {
                                     return true;
                                 }
                                 else if (e.scope === 'shared') {
@@ -1187,8 +1183,8 @@ export class PolicyController {
         }
         catch (err) {
             const span = trace.getActiveSpan();
-            span === null || span === void 0 ? void 0 : span.recordException(err);
-            span === null || span === void 0 ? void 0 : span.setStatus({ code: SpanStatusCode.ERROR });
+            span?.recordException(err);
+            span?.setStatus({ code: SpanStatusCode.ERROR });
             console.error('[PolicyController] A server error occurred while listing permissions.', err);
             return {
                 success: false,
@@ -1244,8 +1240,8 @@ export class PolicyController {
         }
         catch (err) {
             const span = trace.getActiveSpan();
-            span === null || span === void 0 ? void 0 : span.recordException(err);
-            span === null || span === void 0 ? void 0 : span.setStatus({ code: SpanStatusCode.ERROR });
+            span?.recordException(err);
+            span?.setStatus({ code: SpanStatusCode.ERROR });
             console.error('[PolicyController] A server error occurred while listing permissions for marker.', err);
             return {
                 success: false,
@@ -1301,8 +1297,8 @@ export class PolicyController {
         }
         catch (err) {
             const span = trace.getActiveSpan();
-            span === null || span === void 0 ? void 0 : span.recordException(err);
-            span === null || span === void 0 ? void 0 : span.setStatus({ code: SpanStatusCode.ERROR });
+            span?.recordException(err);
+            span?.setStatus({ code: SpanStatusCode.ERROR });
             console.error('[PolicyController] A server error occurred while listing permissions for resource.', err);
             return {
                 success: false,
@@ -1316,7 +1312,6 @@ export class PolicyController {
      * @param request The request for the operation.
      */
     async grantMarkerPermission(request) {
-        var _a, _b, _c;
         try {
             const baseRequest = {
                 recordKeyOrRecordName: request.recordKeyOrRecordName,
@@ -1347,15 +1342,15 @@ export class PolicyController {
             if (assignmentResult.success === false) {
                 return assignmentResult;
             }
-            console.log(`[PolicyController] [grantMarkerPermission] [userId: ${request.userId}, recordName: ${recordName}, subjectType: ${request.permission.subjectType}, subjectId: ${request.permission.subjectId}, marker: ${marker}, resourceKind: ${(_a = request.permission.resourceKind) !== null && _a !== void 0 ? _a : '(null)'}, action: ${(_b = request.permission.action) !== null && _b !== void 0 ? _b : '(null)'}, expireTimeMs: ${(_c = request.permission.expireTimeMs) !== null && _c !== void 0 ? _c : '(null)'}, permissionId: ${assignmentResult.permissionAssignment.id}] Granted marker permission.`);
+            console.log(`[PolicyController] [grantMarkerPermission] [userId: ${request.userId}, recordName: ${recordName}, subjectType: ${request.permission.subjectType}, subjectId: ${request.permission.subjectId}, marker: ${marker}, resourceKind: ${request.permission.resourceKind ?? '(null)'}, action: ${request.permission.action ?? '(null)'}, expireTimeMs: ${request.permission.expireTimeMs ?? '(null)'}, permissionId: ${assignmentResult.permissionAssignment.id}] Granted marker permission.`);
             return {
                 success: true,
             };
         }
         catch (err) {
             const span = trace.getActiveSpan();
-            span === null || span === void 0 ? void 0 : span.recordException(err);
-            span === null || span === void 0 ? void 0 : span.setStatus({ code: SpanStatusCode.ERROR });
+            span?.recordException(err);
+            span?.setStatus({ code: SpanStatusCode.ERROR });
             console.error('[PolicyController] A server error occurred while granting a marker permission.', err);
             return {
                 success: false,
@@ -1412,8 +1407,8 @@ export class PolicyController {
         }
         catch (err) {
             const span = trace.getActiveSpan();
-            span === null || span === void 0 ? void 0 : span.recordException(err);
-            span === null || span === void 0 ? void 0 : span.setStatus({ code: SpanStatusCode.ERROR });
+            span?.recordException(err);
+            span?.setStatus({ code: SpanStatusCode.ERROR });
             console.error('[PolicyController] A server error occurred while revoking a marker permission.', err);
             return {
                 success: false,
@@ -1427,7 +1422,6 @@ export class PolicyController {
      * @param request The request.
      */
     async grantResourcePermission(request) {
-        var _a, _b, _c, _d;
         try {
             const baseRequest = {
                 recordKeyOrRecordName: request.recordKeyOrRecordName,
@@ -1474,15 +1468,15 @@ export class PolicyController {
             if (assignmentResult.success === false) {
                 return assignmentResult;
             }
-            console.log(`[PolicyController] [grantResourcePermission] [userId: ${request.userId}, recordName: ${recordName}, subjectType: ${request.permission.subjectType}, subjectId: ${request.permission.subjectId}, resourceKind: ${(_a = request.permission.resourceKind) !== null && _a !== void 0 ? _a : '(null)'}, resourceId: ${(_b = request.permission.resourceId) !== null && _b !== void 0 ? _b : '(null)'}, action: ${(_c = request.permission.action) !== null && _c !== void 0 ? _c : '(null)'}, expireTimeMs: ${(_d = request.permission.expireTimeMs) !== null && _d !== void 0 ? _d : '(null)'}, permissionId: ${assignmentResult.permissionAssignment.id}] Granted permission for resource.`);
+            console.log(`[PolicyController] [grantResourcePermission] [userId: ${request.userId}, recordName: ${recordName}, subjectType: ${request.permission.subjectType}, subjectId: ${request.permission.subjectId}, resourceKind: ${request.permission.resourceKind ?? '(null)'}, resourceId: ${request.permission.resourceId ?? '(null)'}, action: ${request.permission.action ?? '(null)'}, expireTimeMs: ${request.permission.expireTimeMs ?? '(null)'}, permissionId: ${assignmentResult.permissionAssignment.id}] Granted permission for resource.`);
             return {
                 success: true,
             };
         }
         catch (err) {
             const span = trace.getActiveSpan();
-            span === null || span === void 0 ? void 0 : span.recordException(err);
-            span === null || span === void 0 ? void 0 : span.setStatus({ code: SpanStatusCode.ERROR });
+            span?.recordException(err);
+            span?.setStatus({ code: SpanStatusCode.ERROR });
             console.error('[PolicyController] A server error occurred while granting a resource permission.', err);
             return {
                 success: false,
@@ -1539,8 +1533,8 @@ export class PolicyController {
         }
         catch (err) {
             const span = trace.getActiveSpan();
-            span === null || span === void 0 ? void 0 : span.recordException(err);
-            span === null || span === void 0 ? void 0 : span.setStatus({ code: SpanStatusCode.ERROR });
+            span?.recordException(err);
+            span?.setStatus({ code: SpanStatusCode.ERROR });
             console.error('[PolicyController] A server error occurred while revoking a resource permission.', err);
             return {
                 success: false,
@@ -1564,8 +1558,8 @@ export class PolicyController {
         }
         catch (err) {
             const span = trace.getActiveSpan();
-            span === null || span === void 0 ? void 0 : span.recordException(err);
-            span === null || span === void 0 ? void 0 : span.setStatus({ code: SpanStatusCode.ERROR });
+            span?.recordException(err);
+            span?.setStatus({ code: SpanStatusCode.ERROR });
             console.error('[PolicyController] A server error occurred while revoking a permission.', err);
             return {
                 success: false,
@@ -1615,8 +1609,8 @@ export class PolicyController {
         }
         catch (err) {
             const span = trace.getActiveSpan();
-            span === null || span === void 0 ? void 0 : span.recordException(err);
-            span === null || span === void 0 ? void 0 : span.setStatus({ code: SpanStatusCode.ERROR });
+            span?.recordException(err);
+            span?.setStatus({ code: SpanStatusCode.ERROR });
             console.error('[PolicyController] A server error occurred.', err);
             return {
                 success: false,
@@ -1664,8 +1658,8 @@ export class PolicyController {
         }
         catch (err) {
             const span = trace.getActiveSpan();
-            span === null || span === void 0 ? void 0 : span.recordException(err);
-            span === null || span === void 0 ? void 0 : span.setStatus({ code: SpanStatusCode.ERROR });
+            span?.recordException(err);
+            span?.setStatus({ code: SpanStatusCode.ERROR });
             console.error('[PolicyController] A server error occurred.', err);
             return {
                 success: false,
@@ -1713,8 +1707,8 @@ export class PolicyController {
         }
         catch (err) {
             const span = trace.getActiveSpan();
-            span === null || span === void 0 ? void 0 : span.recordException(err);
-            span === null || span === void 0 ? void 0 : span.setStatus({ code: SpanStatusCode.ERROR });
+            span?.recordException(err);
+            span?.setStatus({ code: SpanStatusCode.ERROR });
             console.error('[PolicyController] A server error occurred.', err);
             return {
                 success: false,
@@ -1770,8 +1764,8 @@ export class PolicyController {
         }
         catch (err) {
             const span = trace.getActiveSpan();
-            span === null || span === void 0 ? void 0 : span.recordException(err);
-            span === null || span === void 0 ? void 0 : span.setStatus({ code: SpanStatusCode.ERROR });
+            span?.recordException(err);
+            span?.setStatus({ code: SpanStatusCode.ERROR });
             console.error('[PolicyController] A server error occurred.', err);
             return {
                 success: false,
@@ -1848,8 +1842,8 @@ export class PolicyController {
         }
         catch (err) {
             const span = trace.getActiveSpan();
-            span === null || span === void 0 ? void 0 : span.recordException(err);
-            span === null || span === void 0 ? void 0 : span.setStatus({ code: SpanStatusCode.ERROR });
+            span?.recordException(err);
+            span?.setStatus({ code: SpanStatusCode.ERROR });
             console.error('[PolicyController] A server error occurred.', err);
             return {
                 success: false,
@@ -1919,8 +1913,8 @@ export class PolicyController {
         }
         catch (err) {
             const span = trace.getActiveSpan();
-            span === null || span === void 0 ? void 0 : span.recordException(err);
-            span === null || span === void 0 ? void 0 : span.setStatus({ code: SpanStatusCode.ERROR });
+            span?.recordException(err);
+            span?.setStatus({ code: SpanStatusCode.ERROR });
             console.error('[PolicyController] A server error occurred.', err);
             return {
                 success: false,
@@ -1934,7 +1928,6 @@ export class PolicyController {
      * @param request
      */
     async grantEntitlement(request) {
-        var _a, _b, _c, _d, _e, _f, _g, _h;
         try {
             if (!isSuperUserRole(request.userRole)) {
                 if (request.userId !== request.grantingUserId) {
@@ -1946,18 +1939,18 @@ export class PolicyController {
                 }
             }
             const grant = await this._policies.findGrantedPackageEntitlementByUserIdPackageIdFeatureAndScope(request.grantingUserId, request.packageId, request.feature, request.scope, request.recordName);
-            const grantId = (_a = grant === null || grant === void 0 ? void 0 : grant.id) !== null && _a !== void 0 ? _a : uuidv7();
-            const feature = (_b = grant === null || grant === void 0 ? void 0 : grant.feature) !== null && _b !== void 0 ? _b : request.feature;
+            const grantId = grant?.id ?? uuidv7();
+            const feature = grant?.feature ?? request.feature;
             await this._policies.saveGrantedPackageEntitlement({
                 id: grantId,
-                createdAtMs: (_c = grant === null || grant === void 0 ? void 0 : grant.createdAtMs) !== null && _c !== void 0 ? _c : Date.now(),
-                expireTimeMs: Math.max(request.expireTimeMs, (_d = grant === null || grant === void 0 ? void 0 : grant.expireTimeMs) !== null && _d !== void 0 ? _d : 0),
+                createdAtMs: grant?.createdAtMs ?? Date.now(),
+                expireTimeMs: Math.max(request.expireTimeMs, grant?.expireTimeMs ?? 0),
                 revokeTimeMs: null,
-                scope: (_e = grant === null || grant === void 0 ? void 0 : grant.scope) !== null && _e !== void 0 ? _e : request.scope,
-                packageId: (_f = grant === null || grant === void 0 ? void 0 : grant.packageId) !== null && _f !== void 0 ? _f : request.packageId,
-                userId: (_g = grant === null || grant === void 0 ? void 0 : grant.userId) !== null && _g !== void 0 ? _g : request.grantingUserId,
+                scope: grant?.scope ?? request.scope,
+                packageId: grant?.packageId ?? request.packageId,
+                userId: grant?.userId ?? request.grantingUserId,
                 feature: feature,
-                recordName: (_h = grant === null || grant === void 0 ? void 0 : grant.recordName) !== null && _h !== void 0 ? _h : request.recordName,
+                recordName: grant?.recordName ?? request.recordName,
             });
             return {
                 success: true,
@@ -1967,8 +1960,8 @@ export class PolicyController {
         }
         catch (err) {
             const span = trace.getActiveSpan();
-            span === null || span === void 0 ? void 0 : span.recordException(err);
-            span === null || span === void 0 ? void 0 : span.setStatus({ code: SpanStatusCode.ERROR });
+            span?.recordException(err);
+            span?.setStatus({ code: SpanStatusCode.ERROR });
             console.error('[PolicyController] A server error occurred.', err);
             return {
                 success: false,
@@ -2012,8 +2005,8 @@ export class PolicyController {
         }
         catch (err) {
             const span = trace.getActiveSpan();
-            span === null || span === void 0 ? void 0 : span.recordException(err);
-            span === null || span === void 0 ? void 0 : span.setStatus({ code: SpanStatusCode.ERROR });
+            span?.recordException(err);
+            span?.setStatus({ code: SpanStatusCode.ERROR });
             console.error('[PolicyController] A server error occurred.', err);
             return {
                 success: false,
@@ -2041,8 +2034,8 @@ export class PolicyController {
         }
         catch (err) {
             const span = trace.getActiveSpan();
-            span === null || span === void 0 ? void 0 : span.recordException(err);
-            span === null || span === void 0 ? void 0 : span.setStatus({ code: SpanStatusCode.ERROR });
+            span?.recordException(err);
+            span?.setStatus({ code: SpanStatusCode.ERROR });
             console.error('[PolicyController] A server error occurred.', err);
             return {
                 success: false,