@friggframework/core 2.0.0-next.11 → 2.0.0-next.110

package/credential/repositories/credential-repository-mongo.js

@@ -0,0 +1,294 @@
+const { prisma } = require('../../database/prisma');
+const {
+    CredentialRepositoryInterface,
+} = require('./credential-repository-interface');
+const { tallyActiveCredentialsByType } = require('./credential-active-type');
+
+/**
+ * MongoDB Credential Repository Adapter
+ * Handles OAuth credentials and API tokens persistence with MongoDB
+ *
+ * MongoDB-specific characteristics:
+ * - Uses String IDs (ObjectId)
+ * - No ID conversion needed (IDs are already strings)
+ * - Dynamic schema support via JSON field
+ */
+class CredentialRepositoryMongo extends CredentialRepositoryInterface {
+    constructor() {
+        super();
+        this.prisma = prisma;
+    }
+
+    /**
+     * Find credential by ID
+     * Replaces: Credential.findById(id)
+     *
+     * @param {string} id - Credential ID
+     * @returns {Promise<Object|null>} Credential object or null
+     */
+    async findCredentialById(id) {
+        const credential = await this.prisma.credential.findUnique({
+            where: { id },
+        });
+
+        if (!credential) {
+            return null;
+        }
+
+        // Extract data from JSON field
+        const data = credential.data || {};
+
+        return {
+            id: credential.id,
+            userId: credential.userId,
+            externalId: credential.externalId,
+            authIsValid: credential.authIsValid,
+            ...data, // Spread OAuth tokens from JSON field
+        };
+    }
+
+    /**
+     * Update authentication status
+     * Replaces: Credential.updateOne({ _id: credentialId }, { $set: { authIsValid } })
+     *
+     * @param {string} credentialId - Credential ID
+     * @param {boolean} authIsValid - Authentication validity status
+     * @returns {Promise<Object>} Update result
+     */
+    async updateAuthenticationStatus(credentialId, authIsValid) {
+        await this.prisma.credential.update({
+            where: { id: credentialId },
+            data: { authIsValid },
+        });
+
+        return { acknowledged: true, modifiedCount: 1 };
+    }
+
+    /**
+     * Permanently remove a credential document
+     * Replaces: Credential.deleteOne({ _id: credentialId })
+     *
+     * @param {string} credentialId - Credential ID
+     * @returns {Promise<Object>} Deletion result
+     */
+    async deleteCredentialById(credentialId) {
+        try {
+            await this.prisma.credential.delete({
+                where: { id: credentialId },
+            });
+            return { acknowledged: true, deletedCount: 1 };
+        } catch (error) {
+            if (error.code === 'P2025') {
+                return { acknowledged: true, deletedCount: 0 };
+            }
+            throw error;
+        }
+    }
+
+    /**
+     * Create or update credential matching identifiers
+     * Replaces: Credential.findOneAndUpdate(query, update, { upsert: true })
+     *
+     * @param {{identifiers: Object, details: Object}} credentialDetails
+     * @returns {Promise<Object>} The persisted credential
+     */
+    async upsertCredential(credentialDetails) {
+        const { identifiers, details } = credentialDetails;
+        if (!identifiers)
+            throw new Error('identifiers required to upsert credential');
+
+        if (!identifiers.userId) {
+            throw new Error('userId required in identifiers');
+        }
+        if (!identifiers.externalId) {
+            throw new Error(
+                'externalId required in identifiers to prevent credential collision. ' +
+                    'When multiple credentials exist for the same user, both userId and externalId ' +
+                    'are needed to uniquely identify which credential to update.'
+            );
+        }
+
+        const where = this._convertIdentifiersToWhere(identifiers);
+
+        const { authIsValid, ...oauthData } = details;
+
+        const existing = await this.prisma.credential.findFirst({ where });
+
+        if (existing) {
+            const mergedData = { ...(existing.data || {}), ...oauthData };
+
+            const updated = await this.prisma.credential.update({
+                where: { id: existing.id },
+                data: {
+                    userId: existing.userId,
+                    externalId: existing.externalId,
+                    authIsValid: authIsValid !== undefined ? authIsValid : existing.authIsValid,
+                    data: mergedData,
+                },
+            });
+
+            return {
+                id: updated.id,
+                externalId: updated.externalId,
+                userId: updated.userId,
+                authIsValid: updated.authIsValid,
+                ...(updated.data || {}),
+            };
+        }
+
+        const created = await this.prisma.credential.create({
+            data: {
+                userId: identifiers.userId,
+                externalId: identifiers.externalId,
+                authIsValid: authIsValid,
+                data: oauthData,
+            },
+        });
+
+        return {
+            id: created.id,
+            externalId: created.externalId,
+            userId: created.userId,
+            authIsValid: created.authIsValid,
+            ...(created.data || {}),
+        };
+    }
+
+    /**
+     * Find a credential by filter criteria
+     * Replaces: Credential.findOne(query)
+     *
+     * @param {Object} filter
+     * @param {string} [filter.userId] - User ID
+     * @param {string} [filter.externalId] - External ID
+     * @param {string} [filter.credentialId] - Credential ID
+     * @returns {Promise<Object|null>} Credential object or null if not found
+     */
+    async findCredential(filter) {
+        const where = this._convertFilterToWhere(filter);
+
+        const credential = await this.prisma.credential.findFirst({
+            where,
+        });
+
+        if (!credential) {
+            return null;
+        }
+
+        const data = credential.data || {};
+
+        return {
+            id: credential.id,
+            userId: credential.userId,
+            externalId: credential.externalId,
+            authIsValid: credential.authIsValid,
+            access_token: data.access_token,
+            refresh_token: data.refresh_token,
+            ...data,
+        };
+    }
+
+    /**
+     * Update a credential by ID
+     * Replaces: Credential.findByIdAndUpdate(credentialId, { $set: updates })
+     *
+     * @param {string} credentialId - Credential ID
+     * @param {Object} updates - Fields to update
+     * @returns {Promise<Object|null>} Updated credential object or null if not found
+     */
+    async updateCredential(credentialId, updates) {
+        const existing = await this.prisma.credential.findUnique({
+            where: { id: credentialId },
+        });
+
+        if (!existing) {
+            return null;
+        }
+
+        const { authIsValid, ...oauthData } = updates;
+
+        const mergedData = { ...(existing.data || {}), ...oauthData };
+
+        const updated = await this.prisma.credential.update({
+            where: { id: credentialId },
+            data: {
+                userId: existing.userId,
+                externalId: existing.externalId,
+                authIsValid: authIsValid,
+                data: mergedData,
+            },
+        });
+
+        const data = updated.data || {};
+
+        return {
+            id: updated.id,
+            userId: updated.userId,
+            externalId: updated.externalId,
+            authIsValid: updated.authIsValid,
+            access_token: data.access_token,
+            refresh_token: data.refresh_token,
+            ...data,
+        };
+    }
+
+    /**
+     * Count credentials active since a timestamp, grouped by integration type.
+     *
+     * @param {Object} params
+     * @param {Date} [params.since] - Lower bound on updatedAt
+     * @returns {Promise<Array<{ integrationType: string, count: number }>>}
+     */
+    async countActiveByType({ since } = {}) {
+        const where = {};
+        if (since) where.updatedAt = { gte: since };
+
+        // Type lives on the related Entity.moduleName, not on Credential. Select
+        // only that field (+ id) so the encrypted `data` JSON is never decrypted.
+        const credentials = await this.prisma.credential.findMany({
+            where,
+            select: {
+                id: true,
+                entities: { select: { moduleName: true } },
+            },
+        });
+
+        return tallyActiveCredentialsByType(credentials);
+    }
+
+    /**
+     * Convert identifiers to Prisma where clause
+     * @private
+     * @param {Object} identifiers - Identifier fields
+     * @returns {Object} Prisma where clause
+     */
+    _convertIdentifiersToWhere(identifiers) {
+        const where = {};
+
+        if (identifiers._id) where.id = identifiers._id;
+        if (identifiers.id) where.id = identifiers.id;
+        if (identifiers.userId) where.userId = identifiers.userId;
+        if (identifiers.externalId) where.externalId = identifiers.externalId;
+
+        return where;
+    }
+
+    /**
+     * Convert filter to Prisma where clause
+     * @private
+     * @param {Object} filter - Filter criteria
+     * @returns {Object} Prisma where clause
+     */
+    _convertFilterToWhere(filter) {
+        const where = {};
+
+        if (filter.credentialId) where.id = filter.credentialId;
+        if (filter.id) where.id = filter.id;
+        if (filter.userId) where.userId = filter.userId;
+        if (filter.externalId) where.externalId = filter.externalId;
+
+        return where;
+    }
+}
+
+module.exports = { CredentialRepositoryMongo };

package/credential/repositories/credential-repository-postgres.js

@@ -0,0 +1,312 @@
+const { prisma } = require('../../database/prisma');
+const {
+    CredentialRepositoryInterface,
+} = require('./credential-repository-interface');
+const { tallyActiveCredentialsByType } = require('./credential-active-type');
+
+/**
+ * PostgreSQL Credential Repository Adapter
+ * Handles OAuth credentials and API tokens persistence with PostgreSQL
+ *
+ * PostgreSQL-specific characteristics:
+ * - Uses Int IDs with autoincrement
+ * - Requires ID conversion: String (app layer) ↔ Int (database)
+ * - All returned IDs are converted to strings for application layer consistency
+ */
+class CredentialRepositoryPostgres extends CredentialRepositoryInterface {
+    constructor() {
+        super();
+        this.prisma = prisma;
+    }
+
+    /**
+     * Convert string ID to integer for PostgreSQL queries
+     * @private
+     * @param {string|number|null|undefined} id - ID to convert
+     * @returns {number|null|undefined} Integer ID or null/undefined
+     * @throws {Error} If ID cannot be converted to integer
+     */
+    _convertId(id) {
+        if (id === null || id === undefined) return id;
+        const parsed = parseInt(id, 10);
+        if (isNaN(parsed)) {
+            throw new Error(`Invalid ID: ${id} cannot be converted to integer`);
+        }
+        return parsed;
+    }
+
+    /**
+     * Find credential by ID
+     *
+     * @param {string} id - Credential ID (string from application layer)
+     * @returns {Promise<Object|null>} Credential object with string IDs or null
+     */
+    async findCredentialById(id) {
+        const intId = this._convertId(id);
+        const credential = await this.prisma.credential.findUnique({
+            where: { id: intId },
+        });
+
+        if (!credential) {
+            return null;
+        }
+
+        const data = credential.data || {};
+
+        return {
+            id: credential.id.toString(),
+            userId: credential.userId.toString(),
+            externalId: credential.externalId,
+            authIsValid: credential.authIsValid,
+            ...data, // Spread OAuth tokens from JSON field
+        };
+    }
+
+    /**
+     * Update authentication status
+     *
+     * @param {string} credentialId - Credential ID (string from application layer)
+     * @param {boolean} authIsValid - Authentication validity status
+     * @returns {Promise<Object>} Update result
+     */
+    async updateAuthenticationStatus(credentialId, authIsValid) {
+        const intId = this._convertId(credentialId);
+        await this.prisma.credential.update({
+            where: { id: intId },
+            data: { authIsValid },
+        });
+
+        return { acknowledged: true, modifiedCount: 1 };
+    }
+
+    /**
+     * Permanently remove a credential document
+     *
+     * @param {string} credentialId - Credential ID (string from application layer)
+     * @returns {Promise<Object>} Deletion result
+     */
+    async deleteCredentialById(credentialId) {
+        try {
+            const intId = this._convertId(credentialId);
+            await this.prisma.credential.delete({
+                where: { id: intId },
+            });
+            return { acknowledged: true, deletedCount: 1 };
+        } catch (error) {
+            if (error.code === 'P2025') {
+                // Record not found
+                return { acknowledged: true, deletedCount: 0 };
+            }
+            throw error;
+        }
+    }
+
+    /**
+     * Create or update credential matching identifiers
+     *
+     * @param {{identifiers: Object, details: Object}} credentialDetails
+     * @returns {Promise<Object>} The persisted credential with string IDs
+     */
+    async upsertCredential(credentialDetails) {
+        const { identifiers, details } = credentialDetails;
+        if (!identifiers)
+            throw new Error('identifiers required to upsert credential');
+
+        if (!identifiers.userId) {
+            throw new Error('userId required in identifiers');
+        }
+        if (!identifiers.externalId) {
+            throw new Error(
+                'externalId required in identifiers to prevent credential collision. ' +
+                    'When multiple credentials exist for the same user, both userId and externalId ' +
+                    'are needed to uniquely identify which credential to update.'
+            );
+        }
+
+        const where = this._convertIdentifiersToWhere(identifiers);
+
+        const { externalId } = identifiers;
+
+        const { authIsValid, ...oauthData } = details;
+
+        const existing = await this.prisma.credential.findFirst({ where });
+
+        if (existing) {
+            const mergedData = { ...(existing.data || {}), ...oauthData };
+
+            const updated = await this.prisma.credential.update({
+                where: { id: existing.id },
+                data: {
+                    userId: this._convertId(existing.userId),
+                    externalId: existing.externalId,
+                    authIsValid: authIsValid !== undefined ? authIsValid : existing.authIsValid,
+                    data: mergedData,
+                },
+            });
+
+            return {
+                id: updated.id.toString(),
+                externalId: updated.externalId,
+                userId: updated.userId?.toString(),
+                authIsValid: updated.authIsValid,
+                ...(updated.data || {}),
+            };
+        }
+
+        const created = await this.prisma.credential.create({
+            data: {
+                // Use userId from where clause
+                userId: where.userId,
+                externalId,
+                authIsValid: authIsValid,
+                data: oauthData,
+            },
+        });
+
+        return {
+            id: created.id.toString(),
+            externalId: created.externalId,
+            userId: created.userId?.toString(),
+            authIsValid: created.authIsValid,
+            ...(created.data || {}),
+        };
+    }
+
+    /**
+     * Find a credential by filter criteria
+     *
+     * @param {Object} filter
+     * @param {string} [filter.userId] - User ID (string from application layer)
+     * @param {string} [filter.externalId] - External ID
+     * @param {string} [filter.credentialId] - Credential ID (string from application layer)
+     * @returns {Promise<Object|null>} Credential object with string IDs or null if not found
+     */
+    async findCredential(filter) {
+        const where = this._convertFilterToWhere(filter);
+
+        const credential = await this.prisma.credential.findFirst({
+            where,
+        });
+
+        if (!credential) {
+            return null;
+        }
+
+        const data = credential.data || {};
+
+        return {
+            id: credential.id.toString(),
+            userId: credential.userId?.toString(),
+            externalId: credential.externalId,
+            authIsValid: credential.authIsValid,
+            access_token: data.access_token,
+            refresh_token: data.refresh_token,
+            ...data,
+        };
+    }
+
+    /**
+     * Update a credential by ID
+     *
+     * @param {string} credentialId - Credential ID (string from application layer)
+     * @param {Object} updates - Fields to update
+     * @returns {Promise<Object|null>} Updated credential object with string IDs or null if not found
+     */
+    async updateCredential(credentialId, updates) {
+        const intId = this._convertId(credentialId);
+        const existing = await this.prisma.credential.findUnique({
+            where: { id: intId },
+        });
+
+        if (!existing) {
+            return null;
+        }
+
+        const { authIsValid, ...oauthData } = updates;
+
+        const mergedData = { ...(existing.data || {}), ...oauthData };
+
+        const updated = await this.prisma.credential.update({
+            where: { id: intId },
+            data: {
+                userId: this._convertId(existing.userId),
+                externalId: existing.externalId,
+                authIsValid: authIsValid,
+                data: mergedData,
+            },
+        });
+
+        const data = updated.data || {};
+
+        return {
+            id: updated.id.toString(),
+            userId: updated.userId?.toString(),
+            externalId: updated.externalId,
+            authIsValid: updated.authIsValid,
+            access_token: data.access_token,
+            refresh_token: data.refresh_token,
+            ...data,
+        };
+    }
+
+    /**
+     * Count credentials active since a timestamp, grouped by integration type.
+     *
+     * @param {Object} params
+     * @param {Date} [params.since] - Lower bound on updatedAt
+     * @returns {Promise<Array<{ integrationType: string, count: number }>>}
+     */
+    async countActiveByType({ since } = {}) {
+        const where = {};
+        if (since) where.updatedAt = { gte: since };
+
+        // Select only the entity moduleName (+ id) so the encrypted `data` JSON
+        // is never read and the encryption extension has nothing to decrypt.
+        const credentials = await this.prisma.credential.findMany({
+            where,
+            select: {
+                id: true,
+                entities: { select: { moduleName: true } },
+            },
+        });
+
+        return tallyActiveCredentialsByType(credentials);
+    }
+
+    /**
+     * Convert identifiers to Prisma where clause (converting IDs to Int)
+     * @private
+     * @param {Object} identifiers - Identifier fields
+     * @returns {Object} Prisma where clause with Int IDs
+     */
+    _convertIdentifiersToWhere(identifiers) {
+        const where = {};
+
+        if (identifiers.id) where.id = this._convertId(identifiers.id);
+        if (identifiers.userId)
+            where.userId = this._convertId(identifiers.userId);
+        if (identifiers.externalId) where.externalId = identifiers.externalId;
+
+        return where;
+    }
+
+    /**
+     * Convert filter to Prisma where clause (converting IDs to Int)
+     * @private
+     * @param {Object} filter - Filter criteria
+     * @returns {Object} Prisma where clause with Int IDs
+     */
+    _convertFilterToWhere(filter) {
+        const where = {};
+
+        if (filter.credentialId)
+            where.id = this._convertId(filter.credentialId);
+        if (filter.id) where.id = this._convertId(filter.id);
+        if (filter.userId) where.userId = this._convertId(filter.userId);
+        if (filter.externalId) where.externalId = filter.externalId;
+
+        return where;
+    }
+}
+
+module.exports = { CredentialRepositoryPostgres };