@greatapps/common 1.1.774 → 1.1.775

package/dist/modules/auth/utils/assert-management-permission.mjs

@@ -1,9 +1,10 @@
 import "server-only";
+import { cache } from "react";
 import { UserProfile } from "../../users/schema";
 import { findUserById } from "../../users/action/find-user-by-id.action";
 import { ApiError } from "../../../infra/api/types";
 import { assertManagementSubscription } from "./assert-management-subscription";
-async function getCurrentUserProfile() {
+const getCurrentUserProfile = cache(async () => {
   const result = await findUserById();
   if (!result.success || !result.data) {
     throw new ApiError(
@@ -13,7 +14,7 @@ async function getCurrentUserProfile() {
     );
   }
   return result.data.profile;
-}
+});
 async function assertManagementPermission(permission) {
   const profile = await getCurrentUserProfile();
   switch (permission) {

package/dist/modules/auth/utils/assert-management-permission.mjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../src/modules/auth/utils/assert-management-permission.ts"],"sourcesContent":["import 'server-only';\n\nimport { UserProfile } from '../../users/schema';\nimport { findUserById } from '../../users/action/find-user-by-id.action';\nimport { ApiError } from '../../../infra/api/types';\nimport { assertManagementSubscription } from './assert-management-subscription';\nimport type { ManagementPermission } from '../types/management-permission.type';\n\nasync function getCurrentUserProfile() {\n  const result = await findUserById();\n\n  if (!result.success || !result.data) {\n    throw new ApiError(\n      ('error' in result && result.error) || 'Não foi possível identificar o usuário autenticado',\n      'USER_CONTEXT_FAILED',\n      403\n    );\n  }\n\n  return result.data.profile;\n}\n\nexport async function assertManagementPermission(permission: ManagementPermission) {\n  const profile = await getCurrentUserProfile();\n\n  switch (permission) {\n    case 'manage_pages':\n    case 'manage_redirects':\n    case 'manage_domains':\n    case 'manage_ab_tests':\n    case 'restore_pages':\n    case 'create_pages':\n    case 'update_pages':\n    case 'delete_pages':\n      if (profile === UserProfile.viewer) {\n        throw new ApiError('Você não tem permissão para executar esta ação', 'FORBIDDEN', 403);\n      }\n      break;\n    case 'manage_projects':\n    case 'delete_leads':\n    case 'view_cards':\n    case 'manage_cards':\n    case 'manage_subscriptions':\n      if (profile !== UserProfile.owner && profile !== UserProfile.admin) {\n        throw new ApiError('Você não tem permissão para executar esta ação', 'FORBIDDEN', 403);\n      }\n      break;\n    default:\n      throw new ApiError('Permissão inválida', 'INVALID_PERMISSION', 500);\n  }\n\n  const skipSubscriptionCheck: ManagementPermission[] = ['manage_subscriptions', 'manage_cards', 'view_cards'];\n  if (!skipSubscriptionCheck.includes(permission)) {\n    await assertManagementSubscription();\n  }\n}\n"],"mappings":"AAAA,OAAO;AAEP,SAAS,mBAAmB;AAC5B,SAAS,oBAAoB;AAC7B,SAAS,gBAAgB;AACzB,SAAS,oCAAoC;AAG7C,eAAe,wBAAwB;AACrC,QAAM,SAAS,MAAM,aAAa;AAElC,MAAI,CAAC,OAAO,WAAW,CAAC,OAAO,MAAM;AACnC,UAAM,IAAI;AAAA,MACP,WAAW,UAAU,OAAO,SAAU;AAAA,MACvC;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAEA,SAAO,OAAO,KAAK;AACrB;AAEA,eAAsB,2BAA2B,YAAkC;AACjF,QAAM,UAAU,MAAM,sBAAsB;AAE5C,UAAQ,YAAY;AAAA,IAClB,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AACH,UAAI,YAAY,YAAY,QAAQ;AAClC,cAAM,IAAI,SAAS,iEAAkD,aAAa,GAAG;AAAA,MACvF;AACA;AAAA,IACF,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AACH,UAAI,YAAY,YAAY,SAAS,YAAY,YAAY,OAAO;AAClE,cAAM,IAAI,SAAS,iEAAkD,aAAa,GAAG;AAAA,MACvF;AACA;AAAA,IACF;AACE,YAAM,IAAI,SAAS,4BAAsB,sBAAsB,GAAG;AAAA,EACtE;AAEA,QAAM,wBAAgD,CAAC,wBAAwB,gBAAgB,YAAY;AAC3G,MAAI,CAAC,sBAAsB,SAAS,UAAU,GAAG;AAC/C,UAAM,6BAA6B;AAAA,EACrC;AACF;","names":[]}
+{"version":3,"sources":["../../../../src/modules/auth/utils/assert-management-permission.ts"],"sourcesContent":["import 'server-only';\n\nimport { cache } from 'react';\n\nimport { UserProfile } from '../../users/schema';\nimport { findUserById } from '../../users/action/find-user-by-id.action';\nimport { ApiError } from '../../../infra/api/types';\nimport { assertManagementSubscription } from './assert-management-subscription';\nimport type { ManagementPermission } from '../types/management-permission.type';\n\n/**\n * Perfil do usuário autenticado, deduplicado por request via React.cache — mesma razão\n * do `requireValidSession`.\n *\n * Este gate abre TODA leitura e escrita gateada, e o perfil não depende da permissão que\n * está sendo checada: uma request que toca N services pagava N round-trips ao backend para\n * reler a mesma linha. Medido em produção (26/08, carregamento da aba de assinatura de uma\n * conta): ~30 GETs de `/accounts/{id}/users/{id}` em 20 s, 200–880 ms cada, competindo pelo\n * mesmo worker de banco que as chamadas de verdade.\n */\nconst getCurrentUserProfile = cache(async () => {\n  const result = await findUserById();\n\n  if (!result.success || !result.data) {\n    throw new ApiError(\n      ('error' in result && result.error) || 'Não foi possível identificar o usuário autenticado',\n      'USER_CONTEXT_FAILED',\n      403\n    );\n  }\n\n  return result.data.profile;\n});\n\nexport async function assertManagementPermission(permission: ManagementPermission) {\n  const profile = await getCurrentUserProfile();\n\n  switch (permission) {\n    case 'manage_pages':\n    case 'manage_redirects':\n    case 'manage_domains':\n    case 'manage_ab_tests':\n    case 'restore_pages':\n    case 'create_pages':\n    case 'update_pages':\n    case 'delete_pages':\n      if (profile === UserProfile.viewer) {\n        throw new ApiError('Você não tem permissão para executar esta ação', 'FORBIDDEN', 403);\n      }\n      break;\n    case 'manage_projects':\n    case 'delete_leads':\n    case 'view_cards':\n    case 'manage_cards':\n    case 'manage_subscriptions':\n      if (profile !== UserProfile.owner && profile !== UserProfile.admin) {\n        throw new ApiError('Você não tem permissão para executar esta ação', 'FORBIDDEN', 403);\n      }\n      break;\n    default:\n      throw new ApiError('Permissão inválida', 'INVALID_PERMISSION', 500);\n  }\n\n  const skipSubscriptionCheck: ManagementPermission[] = ['manage_subscriptions', 'manage_cards', 'view_cards'];\n  if (!skipSubscriptionCheck.includes(permission)) {\n    await assertManagementSubscription();\n  }\n}\n"],"mappings":"AAAA,OAAO;AAEP,SAAS,aAAa;AAEtB,SAAS,mBAAmB;AAC5B,SAAS,oBAAoB;AAC7B,SAAS,gBAAgB;AACzB,SAAS,oCAAoC;AAa7C,MAAM,wBAAwB,MAAM,YAAY;AAC9C,QAAM,SAAS,MAAM,aAAa;AAElC,MAAI,CAAC,OAAO,WAAW,CAAC,OAAO,MAAM;AACnC,UAAM,IAAI;AAAA,MACP,WAAW,UAAU,OAAO,SAAU;AAAA,MACvC;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAEA,SAAO,OAAO,KAAK;AACrB,CAAC;AAED,eAAsB,2BAA2B,YAAkC;AACjF,QAAM,UAAU,MAAM,sBAAsB;AAE5C,UAAQ,YAAY;AAAA,IAClB,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AACH,UAAI,YAAY,YAAY,QAAQ;AAClC,cAAM,IAAI,SAAS,iEAAkD,aAAa,GAAG;AAAA,MACvF;AACA;AAAA,IACF,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AACH,UAAI,YAAY,YAAY,SAAS,YAAY,YAAY,OAAO;AAClE,cAAM,IAAI,SAAS,iEAAkD,aAAa,GAAG;AAAA,MACvF;AACA;AAAA,IACF;AACE,YAAM,IAAI,SAAS,4BAAsB,sBAAsB,GAAG;AAAA,EACtE;AAEA,QAAM,wBAAgD,CAAC,wBAAwB,gBAAgB,YAAY;AAC3G,MAAI,CAAC,sBAAsB,SAAS,UAAU,GAAG;AAC/C,UAAM,6BAA6B;AAAA,EACrC;AACF;","names":[]}

package/dist/modules/auth/utils/assert-management-subscription.mjs

@@ -1,8 +1,9 @@
 import "server-only";
+import { cache } from "react";
 import { ApiError } from "../../../infra/api/types";
 import { listSubscriptionsAction } from "../../subscriptions/actions/list-subscriptions.action";
 import { getSubscriptionExpiryDate } from "../../subscriptions/utils/get-subscription-expiry-date";
-async function assertManagementSubscription() {
+const assertManagementSubscription = cache(async () => {
   const result = await listSubscriptionsAction({ active: true });
   if (!result.success) {
     throw new ApiError(
@@ -28,7 +29,7 @@ async function assertManagementSubscription() {
       403
     );
   }
-}
+});
 export {
   assertManagementSubscription
 };

package/dist/modules/auth/utils/assert-management-subscription.mjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../src/modules/auth/utils/assert-management-subscription.ts"],"sourcesContent":["import \"server-only\";\n\nimport { ApiError } from \"../../../infra/api/types\";\nimport { listSubscriptionsAction } from \"../../subscriptions/actions/list-subscriptions.action\";\nimport { getSubscriptionExpiryDate } from \"../../subscriptions/utils/get-subscription-expiry-date\";\n\nexport async function assertManagementSubscription() {\n  const result = await listSubscriptionsAction({ active: true });\n\n  if (!result.success) {\n    throw new ApiError(\n      result.error || \"Não foi possível validar a assinatura atual\",\n      \"SUBSCRIPTION_CONTEXT_FAILED\",\n      403,\n    );\n  }\n\n  const subscription = result.data?.data?.[0];\n\n  if (!subscription) {\n    throw new ApiError(\n      \"Nenhuma assinatura ativa encontrada. Assine um plano para continuar.\",\n      \"SUBSCRIPTION_NOT_FOUND\",\n      403,\n    );\n  }\n\n  const expiryDate = getSubscriptionExpiryDate(subscription);\n  const isExpired = !!expiryDate && Date.now() >= expiryDate.getTime();\n\n  if (isExpired) {\n    throw new ApiError(\n      \"Sua assinatura está vencida. Assine um novo plano para continuar.\",\n      \"SUBSCRIPTION_EXPIRED\",\n      403,\n    );\n  }\n}\n"],"mappings":"AAAA,OAAO;AAEP,SAAS,gBAAgB;AACzB,SAAS,+BAA+B;AACxC,SAAS,iCAAiC;AAE1C,eAAsB,+BAA+B;AACnD,QAAM,SAAS,MAAM,wBAAwB,EAAE,QAAQ,KAAK,CAAC;AAE7D,MAAI,CAAC,OAAO,SAAS;AACnB,UAAM,IAAI;AAAA,MACR,OAAO,SAAS;AAAA,MAChB;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAEA,QAAM,eAAe,OAAO,MAAM,OAAO,CAAC;AAE1C,MAAI,CAAC,cAAc;AACjB,UAAM,IAAI;AAAA,MACR;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAEA,QAAM,aAAa,0BAA0B,YAAY;AACzD,QAAM,YAAY,CAAC,CAAC,cAAc,KAAK,IAAI,KAAK,WAAW,QAAQ;AAEnE,MAAI,WAAW;AACb,UAAM,IAAI;AAAA,MACR;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,EACF;AACF;","names":[]}
+{"version":3,"sources":["../../../../src/modules/auth/utils/assert-management-subscription.ts"],"sourcesContent":["import \"server-only\";\n\nimport { cache } from \"react\";\n\nimport { ApiError } from \"../../../infra/api/types\";\nimport { listSubscriptionsAction } from \"../../subscriptions/actions/list-subscriptions.action\";\nimport { getSubscriptionExpiryDate } from \"../../subscriptions/utils/get-subscription-expiry-date\";\n\n/**\n * Deduplicado por request via React.cache, como `getCurrentUserProfile` e `requireValidSession`.\n *\n * A leitura por trás é `/accounts/{id}/subscriptions?limit=1`, e ela é MAIS cara que o gate de\n * perfil: para conta Stripe a listagem consulta a API do gateway ao vivo. Em produção (26/08) o\n * mesmo carregamento disparou quatro dessas em paralelo — 727 ms, 4,2 s, 5,0 s e 7,0 s, contra um\n * p50 de 528 ms para o endpoint. Elas se atrasam entre si: são cópias da mesma pergunta disputando\n * a mesma fila.\n */\nexport const assertManagementSubscription = cache(async () => {\n  const result = await listSubscriptionsAction({ active: true });\n\n  if (!result.success) {\n    throw new ApiError(\n      result.error || \"Não foi possível validar a assinatura atual\",\n      \"SUBSCRIPTION_CONTEXT_FAILED\",\n      403,\n    );\n  }\n\n  const subscription = result.data?.data?.[0];\n\n  if (!subscription) {\n    throw new ApiError(\n      \"Nenhuma assinatura ativa encontrada. Assine um plano para continuar.\",\n      \"SUBSCRIPTION_NOT_FOUND\",\n      403,\n    );\n  }\n\n  const expiryDate = getSubscriptionExpiryDate(subscription);\n  const isExpired = !!expiryDate && Date.now() >= expiryDate.getTime();\n\n  if (isExpired) {\n    throw new ApiError(\n      \"Sua assinatura está vencida. Assine um novo plano para continuar.\",\n      \"SUBSCRIPTION_EXPIRED\",\n      403,\n    );\n  }\n});\n"],"mappings":"AAAA,OAAO;AAEP,SAAS,aAAa;AAEtB,SAAS,gBAAgB;AACzB,SAAS,+BAA+B;AACxC,SAAS,iCAAiC;AAWnC,MAAM,+BAA+B,MAAM,YAAY;AAC5D,QAAM,SAAS,MAAM,wBAAwB,EAAE,QAAQ,KAAK,CAAC;AAE7D,MAAI,CAAC,OAAO,SAAS;AACnB,UAAM,IAAI;AAAA,MACR,OAAO,SAAS;AAAA,MAChB;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAEA,QAAM,eAAe,OAAO,MAAM,OAAO,CAAC;AAE1C,MAAI,CAAC,cAAc;AACjB,UAAM,IAAI;AAAA,MACR;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAEA,QAAM,aAAa,0BAA0B,YAAY;AACzD,QAAM,YAAY,CAAC,CAAC,cAAc,KAAK,IAAI,KAAK,WAAW,QAAQ;AAEnE,MAAI,WAAW;AACb,UAAM,IAAI;AAAA,MACR;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,EACF;AACF,CAAC;","names":[]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@greatapps/common",
-  "version": "1.1.774",
+  "version": "1.1.775",
   "description": "Shared library for GreatApps frontend applications",
   "main": "./dist/index.mjs",
   "types": "./src/index.ts",

package/src/modules/auth/utils/assert-management-permission.ts

@@ -1,12 +1,24 @@
 import 'server-only';
 
+import { cache } from 'react';
+
 import { UserProfile } from '../../users/schema';
 import { findUserById } from '../../users/action/find-user-by-id.action';
 import { ApiError } from '../../../infra/api/types';
 import { assertManagementSubscription } from './assert-management-subscription';
 import type { ManagementPermission } from '../types/management-permission.type';
 
-async function getCurrentUserProfile() {
+/**
+ * Perfil do usuário autenticado, deduplicado por request via React.cache — mesma razão
+ * do `requireValidSession`.
+ *
+ * Este gate abre TODA leitura e escrita gateada, e o perfil não depende da permissão que
+ * está sendo checada: uma request que toca N services pagava N round-trips ao backend para
+ * reler a mesma linha. Medido em produção (26/08, carregamento da aba de assinatura de uma
+ * conta): ~30 GETs de `/accounts/{id}/users/{id}` em 20 s, 200–880 ms cada, competindo pelo
+ * mesmo worker de banco que as chamadas de verdade.
+ */
+const getCurrentUserProfile = cache(async () => {
   const result = await findUserById();
 
   if (!result.success || !result.data) {
@@ -18,7 +30,7 @@ async function getCurrentUserProfile() {
   }
 
   return result.data.profile;
-}
+});
 
 export async function assertManagementPermission(permission: ManagementPermission) {
   const profile = await getCurrentUserProfile();

package/src/modules/auth/utils/assert-management-subscription.ts

@@ -1,10 +1,21 @@
 import "server-only";
 
+import { cache } from "react";
+
 import { ApiError } from "../../../infra/api/types";
 import { listSubscriptionsAction } from "../../subscriptions/actions/list-subscriptions.action";
 import { getSubscriptionExpiryDate } from "../../subscriptions/utils/get-subscription-expiry-date";
 
-export async function assertManagementSubscription() {
+/**
+ * Deduplicado por request via React.cache, como `getCurrentUserProfile` e `requireValidSession`.
+ *
+ * A leitura por trás é `/accounts/{id}/subscriptions?limit=1`, e ela é MAIS cara que o gate de
+ * perfil: para conta Stripe a listagem consulta a API do gateway ao vivo. Em produção (26/08) o
+ * mesmo carregamento disparou quatro dessas em paralelo — 727 ms, 4,2 s, 5,0 s e 7,0 s, contra um
+ * p50 de 528 ms para o endpoint. Elas se atrasam entre si: são cópias da mesma pergunta disputando
+ * a mesma fila.
+ */
+export const assertManagementSubscription = cache(async () => {
   const result = await listSubscriptionsAction({ active: true });
 
   if (!result.success) {
@@ -35,4 +46,4 @@ export async function assertManagementSubscription() {
       403,
     );
   }
-}
+});