@izara_project/izara-core-generate-service-code 1.0.78 → 1.0.80

package/src/emit/crud/templates/UpdateEndpoint_Main.ejs

@@ -53,424 +53,13 @@ import {
   lambda
 } from '@izara_project/izara-core-library-external-request';
 
+import { <%- flowTag %>LogicalLib } from './<%- upperCaseFlowTag %>LogicalLib.js';
+
 //(<optionalRequire>)
 //(</optionalRequire>)
 
 /**
- * Core logical processing after beforeLogical phase completes
- * Called by both updateMain (no beforeLogical) and updateBeforeLogicalMain (after callback)
- * @param {Object} _izContext - Context object with logger
- * @param {Object} requestParams - { objectType, objInstanceFull, versionedDataIds, additionalParams }
- * @param {Object} callingFlowConfig - Calling flow configuration
- * @param {Object} beforeLogicalResults - Results from beforeLogical phase
- * @returns {Promise<Object>}
- */
-export async function <%- flowTag %>MainLogical(
-  _izContext,
-  requestParams,
-  callingFlowConfig = {},
-  errorsFound = [],
-  beforeLogicalResults = {}
-) {
-  try {
-    _izContext.logger.debug('[<%- flowTag %>MainLogical] started', {
-      requestParams,
-      callingFlowConfig,
-      beforeLogicalResults
-    });
-
-    //(<beforeUpdateMainLogical>)
-    //(</beforeUpdateMainLogical>)
-
-    // ── Settings ──────────────────────────────────────────────────────────────
-    const settings = requestParams.additionalParams?.settings ?? {};
-    const returnSystemFieldsName = settings.returnSystemFieldsName === true;
-    const returnOldData = settings.returnOldData === true;
-
-    const objType = createObjType(requestParams.objectType);
-    const identifiers = requestParams.objInstanceFull.identifiers;
-    const fields = requestParams.objInstanceFull.fields;
-    const versionedDataIds = requestParams.versionedDataIds ?? {};
-    const parentFlowId = identifierUuid();
-    // ── Load schema ───────────────────────────────────────────────────────────
-    const objectSchema = await getObjectSchema.getObjSchemaS3WithHierarchy(
-      _izContext,
-      objType
-    );
-    _izContext.logger.debug('objectSchema', objectSchema);
-
-    const objectSchemas =
-      await uploadUseCase.generateObjectSchemaForCombineFieldNames(
-        _izContext,
-        objectSchema
-      );
-    _izContext.logger.debug('objectSchemas', objectSchemas);
-
-    // ── Build updateDataDetails ───────────────────────────────────────────────
-    const updateDataDetails = await createUpdateDataDetail(
-      _izContext,
-      objectSchemas
-    );
-    _izContext.logger.debug('updateDataDetails', updateDataDetails);
-
-    const originTimestamp = Date.now();
-
-    // ── Validate versionedDataIds ─────────────────────────────────────────────
-    const haveVersionedDataIdsToUpdate =
-      Object.keys(versionedDataIds).length > 0;
-    if (haveVersionedDataIdsToUpdate) {
-      const updateMainNodeData = {};
-      const updateVersionedData = {};
-
-      for (const [fieldProp, fieldVal] of Object.entries(
-        requestParams.objInstanceFull.fields
-      )) {
-        const fieldSetting = objectSchema.fieldNames[fieldProp];
-        if (fieldSetting.hasOwnProperty('versionedDataLabel')) {
-          updateVersionedData[fieldSetting.versionedDataLabel] ??= {};
-          Object.assign(updateVersionedData[fieldSetting.versionedDataLabel], {
-            [fieldProp]: fieldVal
-          });
-        } else {
-          Object.assign(updateMainNodeData, { [fieldProp]: fieldVal });
-        }
-      }
-
-      _izContext.logger.debug('updateMainNodeData::', updateMainNodeData);
-      _izContext.logger.debug('updateVersionedData::', updateVersionedData);
-
-      const versionedDataIdLabelKeys = Object.keys(versionedDataIds);
-      const updateVersionedDataLabelKeys = Object.keys(updateVersionedData);
-
-      const missingVersionedDataIdLabels = updateVersionedDataLabelKeys.filter(
-        (l) => !versionedDataIdLabelKeys.includes(l)
-      );
-      const missingDataVersionedDataLabels = versionedDataIdLabelKeys.filter(
-        (l) => !updateVersionedDataLabelKeys.includes(l)
-      );
-
-      if (missingVersionedDataIdLabels.length)
-        errorsFound.push(
-          `missing versionedDataIds of versionedDataLabel '${missingVersionedDataIdLabels.join(', ')}'`
-        );
-      if (missingDataVersionedDataLabels.length)
-        errorsFound.push(
-          `missing data of versionedDataLabels '${missingDataVersionedDataLabels.join(', ')}'`
-        );
-      if (Object.keys(updateMainNodeData).length)
-        errorsFound.push('cannot update mainNode if have versionedDataIds');
-    }
-
-    //(<validateBeforeUpdate>)
-    //(</validateBeforeUpdate>)
-
-    // ── Early exit on errors ──────────────────────────────────────────────────
-    if (errorsFound.length) {
-      const updateNodeCompleteMessage =
-        callingFlowSharedLib.addPassBackPropertiesToSnsResponseMessageObject(
-          callingFlowConfig,
-          {
-            objType,
-            objInstanceFull: { identifiers, fields },
-            versionedDataIds,
-            status: 'error',
-            errorsFound
-          }
-        );
-
-      _izContext.logger.debug(
-        'messageParams OutUpdateNodeComplete:::',
-        updateNodeCompleteMessage
-      );
-      await sns.publishAsync(_izContext, {
-        Message: JSON.stringify(updateNodeCompleteMessage),
-        MessageAttributes: sns.createStringMessageAttributes(
-          _izContext,
-          callingFlowSharedLib.addCallingFlowToSnsResponseMessageAttributes(
-            callingFlowConfig,
-            {}
-          )
-        ),
-        TopicArn: snsSharedLib.snsTopicArnByFlowSchema(
-          _izContext,
-          TOPIC_NAME_GENERATE_CODE.outUpdateNodeComplete
-        )
-      });
-
-      return updateNodeCompleteMessage;
-    }
-
-    // ── Helper: extract fields per storageTag ─────────────────────────────────
-    function createObjInstanceFullFieldsByStorageTag(
-      _izContext,
-      storageTag,
-      updateDataDetail
-    ) {
-      const result = {};
-      for (const fieldName of Object.keys(
-        requestParams.objInstanceFull.fields
-      )) {
-        if (
-          updateDataDetails[storageTag].fieldNames.includes(fieldName) &&
-          updateDataDetail.fieldNames.includes(fieldName) &&
-          !identifiers.hasOwnProperty(fieldName) &&
-          !result.hasOwnProperty(fieldName)
-        ) {
-          Object.assign(result, {
-            [fieldName]: requestParams.objInstanceFull.fields[fieldName]
-          });
-        }
-      }
-      return result;
-    }
-
-    // ── Helper: build objInstanceFull from updateItem ─────────────────────────
-    function createObjInstanceFullFromParams(object, requestParams) {
-      const objInstanceFull = { identifiers: {}, fields: {} };
-      for (const field of Object.keys(object)) {
-        if (requestParams.objInstanceFull.identifiers.hasOwnProperty(field)) {
-          Object.assign(objInstanceFull.identifiers, {
-            [field]: requestParams.objInstanceFull.identifiers[field]
-          });
-        }
-        if (requestParams.objInstanceFull.fields.hasOwnProperty(field)) {
-          Object.assign(objInstanceFull.fields, {
-            [field]: requestParams.objInstanceFull.fields[field]
-          });
-        }
-      }
-      return objInstanceFull;
-    }
-
-    // ── Process storage resources ─────────────────────────────────────────────
-    const awaitingStepIds = [];
-    const listOfRecords = [];
-    let updateItem;
-
-    await Promise.all(
-      Object.entries(updateDataDetails).map(
-        async ([storageTag, updateDataDetail]) => {
-          // ── Graph ─────────────────────────────────────────────────────────────
-          if (updateDataDetail.storageType === consts.STORAGE_TYPES.graph) {
-            //(<beforeUpdateGraph>)
-            //(</beforeUpdateGraph>)
-
-            const graphFields = createObjInstanceFullFieldsByStorageTag(
-              _izContext,
-              storageTag,
-              updateDataDetail
-            );
-            if (!Object.keys(graphFields).length) return;
-
-            //(<beforeUpdateNode>)
-            //(</beforeUpdateNode>)
-
-            //(<additionalAttributes>)
-            const additionalAttributes = {};
-            //(</additionalAttributes>)
-
-            const records = awaitingStepIds.length === 0 ? listOfRecords : [];
-            awaitingStepIds.push({
-              awaitingStepId: asyncFlowSharedLib.createAwaitingStepId(
-                parentFlowId,
-                PREFIX.updateNode
-              ),
-              additionalAttributes: {
-                listOfRecords: records,
-                additionalAttributes: additionalAttributes
-              }
-            });
-
-            if (awaitingStepIds.length) {
-              const awaitingMultipleStep =
-                await asyncFlowSharedLib.createAwaitingMultipleSteps(
-                  _izContext,
-                  asyncFlowSharedLib.createPendingStepId(
-                    _izContext.uniqueRequestId
-                  ),
-                  awaitingStepIds
-                );
-              _izContext.logger.debug(
-                'awaitingMultipleStep',
-                awaitingMultipleStep
-              );
-            }
-
-            let updateNodeParams = {
-              objType,
-              objInstanceFull: { identifiers, fields: graphFields },
-              versionedDataIds,
-              originTimestamp,
-              settings: { returnSystemFieldsName, returnOldData },
-              parentFlowId
-            };
-
-            updateNodeParams =
-              callingFlowSharedLib.addCallingFlowToSnsRequestMessageObject(
-                updateNodeParams,
-                callingFlowSharedLib.addParentCallingFlowConfig(
-                  callingFlowConfig,
-                  callingFlowSharedLib.createCallingFlowConfig(
-                    //(<callingFlowProperties>)
-                    await lambdaSharedLib.lambdaFunctionName(
-                      _izContext,
-                      TOPIC_NAME_GENERATE_CODE.updateNodeComplete
-                    ),
-                    {}
-                    //(</callingFlowProperties>)
-                  )
-                )
-              );
-
-            _izContext.logger.debug(
-              'messageObject before send message:',
-              updateNodeParams
-            );
-
-            const resSNS = await sns.publishAsync(_izContext, {
-              Message: JSON.stringify(updateNodeParams),
-              MessageAttributes: sns.createStringMessageAttributes(
-                _izContext,
-                callingFlowSharedLib.addCallingFlowToSnsResponseMessageAttributes(
-                  callingFlowConfig,
-                  {}
-                )
-              ),
-              TopicArn: snsSharedLib.snsTopicArnByFlowSchema(
-                _izContext,
-                TOPIC_NAME_GRAPH_HANDLER.inUpdateNode,
-                storageTag
-              )
-            });
-            _izContext.logger.debug(
-              'resSNS send to topic InUpdateNode finish!',
-              resSNS
-            );
-
-            // ── DynamoDB ──────────────────────────────────────────────────────────
-          } else if (
-            updateDataDetail.storageType === consts.STORAGE_TYPES.dynamoDB
-          ) {
-            const dynamoFields = createObjInstanceFullFieldsByStorageTag(
-              _izContext,
-              storageTag,
-              updateDataDetail
-            );
-            if (!Object.keys(dynamoFields).length) return;
-
-            //(<beforeUpdateDynamoDb>)
-            //(</beforeUpdateDynamoDb>)
-
-            const identifiersForUpdateData =
-              await dynamoDbIdentifiersByStorageResource(
-                _izContext,
-                objectSchema,
-                updateDataDetail,
-                identifiers
-              );
-            _izContext.logger.debug(
-              'identifiersForUpdateData',
-              identifiersForUpdateData
-            );
-
-            if (
-              Object.values(updateDataDetails).some(
-                (updateDataDetail) =>
-                  updateDataDetail.storageType === consts.STORAGE_TYPES.graph
-              )
-            ) {
-              _izContext.logger.debug('must process graph first');
-              listOfRecords.push({
-                [storageTag]: {
-                  serviceTag: updateDataDetail.serviceTag,
-                  tableName: updateDataDetail.tableName,
-                  objInstanceFull: {
-                    identifiers: identifiersForUpdateData,
-                    fields: dynamoFields
-                  }
-                }
-              });
-            } else {
-              _izContext.logger.debug('can process record dynamo');
-              updateItem = await dynamodbSharedLib.updateItem(
-                _izContext,
-                await dynamodbSharedLib.tableName(
-                  _izContext,
-                  updateDataDetail.tableName,
-                  updateDataDetail.serviceTag
-                ),
-                identifiersForUpdateData,
-                dynamoFields,
-                { returnValues: 'ALL_NEW' }
-              );
-
-              _izContext.logger.debug('updateItem:', updateItem);
-            }
-          }
-        }
-      )
-    );
-
-    // ── DynamoDB-only complete path ───────────────────────────────────────────
-    if (awaitingStepIds.length === 0) {
-      let messageObject = {
-        objType,
-        objInstanceFull: createObjInstanceFullFromParams(
-          updateItem,
-          requestParams
-        )
-      };
-
-      //(<additionalProperties>)
-      //(</additionalProperties>)
-
-      if (
-        callingFlowConfig[
-          callingFlowSharedLib.consts.CALLINGFLOWPROPERTIES_PROPERTYNAME
-        ]
-      ) {
-        _izContext.logger.debug('HAVE CALLING FLOW');
-        messageObject =
-          callingFlowSharedLib.addPassBackPropertiesToSnsResponseMessageObject(
-            callingFlowConfig,
-            messageObject
-          );
-
-        _izContext.logger.debug('after create callingFlow', messageObject);
-        await sns.publishAsync(_izContext, {
-          Message: JSON.stringify(messageObject),
-          MessageAttributes: sns.createStringMessageAttributes(
-            _izContext,
-            callingFlowSharedLib.addCallingFlowToSnsResponseMessageAttributes(
-              callingFlowConfig,
-              {}
-            )
-          ),
-          TopicArn: snsSharedLib.snsTopicArnByFlowSchema(
-            _izContext,
-            TOPIC_NAME_GENERATE_CODE.outUpdateNodeComplete
-          )
-        });
-      }
-    }
-
-    return {
-      returnValues: {
-        objType,
-        objInstanceFull: { identifiers, fields },
-        versionedDataIds
-      },
-      status: 'complete',
-      errorsFound
-    };
-  } catch (err) {
-    _izContext.logger.error('[<%- flowTag %>MainLogical] error:', err);
-    throw err;
-  }
-}
-
-/**
- * Updates an object instance — handles beforeLogical phase routing or proceeds directly to logical
+ * Updates an object instance with optional RBAC routing
  * @param {Object} _izContext - Context object with logger
  * @param {Object} requestParams - { objectType, objInstanceFull, versionedDataIds, additionalParams }
  * @param {Object} callingFlowConfig - Calling flow configuration
@@ -479,7 +68,7 @@ export async function <%- flowTag %>MainLogical(
 export default async function <%- flowTag %>(
   _izContext,
   requestParams,
-  callingFlowConfig = {}
+  callingFlowConfig = {},
   //(<additionalParams>)
   //(</additionalParams>)
 ) {
@@ -489,7 +78,7 @@ export default async function <%- flowTag %>(
       callingFlowConfig
     });
 
-    // ── Build identifiers (used for hash in beforeLogical) ──────────────────
+    // ── Build identifiers used by asynchronous processing ────────────────────
     const identifiers = requestParams.objInstanceFull.identifiers;
     const errorsFound = [];
 
@@ -497,23 +86,76 @@ export default async function <%- flowTag %>(
     //(</validateBeforeUpdate>)
 
     if (errorsFound.length > 0)
-      return await createMainLogical(
+      return await <%- flowTag %>LogicalLib(
         _izContext,
         requestParams,
         callingFlowConfig,
         errorsFound
       );
 
-    // ── beforeLogical phase check ─────────────────────────────────────────────
     <%_
-    const groupedByObjType = generateCode
-      .filter(c => c.codeHookTag === 'beforeLogical')
-      .reduce((acc, config) => {
-        const key = config.objType.objectType;
-        if (!acc[key]) acc[key] = [];
-        acc[key].push(config);
-        return acc;
-      }, {});
+    const rbacObjects = objects.filter(o => (o?.generatedBy === 'userGenerated' || o?.generatedBy === 'systemGenerated') && hasRbacAddOn(o));
+    const rbacObjectTypes = rbacObjects.map(o => o.objectType);
+    const rbacServiceTagMap = {};
+    for (const o of rbacObjects) {
+      const belongToTargets = o?.belongTo
+        ? Array.isArray(o.belongTo)
+          ? o.belongTo
+          : [o.belongTo]
+        : [];
+      if (belongToTargets.length > 0 && belongToTargets[0]?.serviceTag) {
+        rbacServiceTagMap[o.objectType] = `'${belongToTargets[0].serviceTag}'`;
+      } else if (o?.belongToSchema?.serviceTag) {
+        rbacServiceTagMap[o.objectType] = `'${o.belongToSchema.serviceTag}'`;
+      } else if (o?.serviceTag) {
+        rbacServiceTagMap[o.objectType] = `'${o.serviceTag}'`;
+      } else {
+        rbacServiceTagMap[o.objectType] = 'process.env.iz_serviceTag';
+      }
+    }
+    const rbacServiceTags = Array.from(new Set(Object.values(rbacServiceTagMap)));
+    _%>
+    <%_ if (rbacObjectTypes.length > 0) { _%>
+    // ── rbacCallback phase check ─────────────────────────────────────────────
+    if ([<%- rbacObjectTypes.map(t => `'${t}'`).join(', ') %>].includes(requestParams.objectType)) {
+      const { checkRbacPermission } =
+        await import('@izara_project/izara-authorization');
+
+      //(<rbacParameterGroups_<%- flowTag %>)
+      const parameterGroups = {};
+      //(</rbacParameterGroups_<%- flowTag %>)
+
+      const resultPermissionCheck = await checkRbacPermission(
+        _izContext,
+        {
+          flowTag: '<%- flowTag %>',
+          serviceTag: process.env.iz_serviceTag
+        },
+        parameterGroups,
+        {
+          rbacObjType: {
+            serviceTag: <%- rbacServiceTags.length === 1 ? rbacServiceTags[0] : `{ ${Object.entries(rbacServiceTagMap).map(([k, v]) => `'${k}': ${v}`).join(', ')} }[requestParams.objectType] || process.env.iz_serviceTag` %>
+          },
+          requestParams: requestParams,
+          nextFlowStepName: '<%- plan?.hasRbacCallback ? `${flowTag}RbacCallback` : `${flowTag}Complete` %>'
+        }
+      );
+
+      _izContext.logger.debug(
+        '[lib:auth:checkRbacPermission] resultPermissionCheck:',
+        resultPermissionCheck
+      );
+
+      //(<rbacPublish_<%- flowTag %>)
+      //(</rbacPublish_<%- flowTag %>)
+
+      return resultPermissionCheck;
+    }
+    <%_ } _%>
+
+    // ── Optional phase extension point ────────────────────────────────────────
+    <%_
+    const groupedByObjType = [];
     _%>
     <%_ Object.entries(groupedByObjType).forEach(([objectType, configs]) => { _%>
     <%_
@@ -556,7 +198,7 @@ export default async function <%- flowTag %>(
       awaitingMultipleStepIds.push({
         awaitingStepId: await asyncFlowSharedLib.createAwaitingStepId(
           hash(identifiers),
-          '<%= config.codeHookTag %>_<%= objectType %>_<%= config.flowTag.charAt(0).toUpperCase() + config.flowTag.slice(1) %>'
+          'logical_<%= objectType %>_<%= config.flowTag.charAt(0).toUpperCase() + config.flowTag.slice(1) %>'
         ),
         additionalAttributes: {}
       });
@@ -570,7 +212,7 @@ export default async function <%- flowTag %>(
               //(<callingFlowProperties_<%= config.flowTag %>>)
               await lambdaSharedLib.lambdaFunctionName(
                 _izContext,
-                '<%= config.generatedCodeTag %><%= config.codeHookTag.charAt(0).toUpperCase() + config.codeHookTag.slice(1) %>'
+                '<%= flowTag.toLowerCase() %>Complete'
               ),
               {}
               //(</callingFlowProperties_<%= config.flowTag %>>)
@@ -587,7 +229,7 @@ export default async function <%- flowTag %>(
         awaitingMultipleStepIds.push({
           awaitingStepId: await asyncFlowSharedLib.createAwaitingStepId(
             hash(identifiers),
-            '<%= configs[0].codeHookTag %>_<%= objectType %>_' + syncResult.flowTag
+            'logical_<%= objectType %>_' + syncResult.flowTag
           ),
           additionalAttributes: {
             complete: true,
@@ -598,13 +240,18 @@ export default async function <%- flowTag %>(
       }
       <%_ } _%>
 
-      await asyncFlowSharedLib.initAwaitingStepsWithAttrs(
+      await asyncFlowSharedLib.createAwaitingMultipleSteps(
         _izContext,
-        awaitingMultipleStepIds,
         asyncFlowSharedLib.createPendingStepId(
           _izContext.uniqueRequestId,
-          'beforeLogical_<%= objectType %>'
-        )
+          'logical_<%= objectType %>'
+        ),
+        awaitingMultipleStepIds,
+        {
+          additionalAttributes: {
+            callingFlowConfig
+          }
+        }
       );
 
       //(<beforePublish_<%= objectType %>>)
@@ -631,20 +278,20 @@ export default async function <%- flowTag %>(
         });
       }
 
-      return 'complete beforeLogical <%= objectType %>';
+      return 'complete logical <%= objectType %>';
 
       <%_ } else { _%>
-      // ── lambdaSyncInv only — collect results and proceed to updateMainLogical
-      const beforeLogicalResults = lambdaSyncInvResults.reduce((acc, r) => {
-        acc[r.flowTag] = r.returnValue;
-        return acc;
-      }, {});
+      // ── lambdaSyncInv only — collect results and proceed to updateLogicalLib
+      const phaseResults = Object.fromEntries(
+        lambdaSyncInvResults.map(({ flowTag: tag, returnValue }) => [tag, returnValue])
+      );
 
-      return await <%- flowTag %>MainLogical(
+      return await <%- flowTag %>LogicalLib(
         _izContext,
         requestParams,
         callingFlowConfig,
-        beforeLogicalResults
+        errorsFound,
+        phaseResults
       );
       <%_ } _%>
     }
@@ -653,11 +300,12 @@ export default async function <%- flowTag %>(
     //(<beforeUpdateMainLogical>)
     //(</beforeUpdateMainLogical>)
 
-    // ── No beforeLogical → proceed directly to logical ────────────────────────
-    return await <%- flowTag %>MainLogical(
+    // ── No optional phase → proceed directly to logical ──────────────────────
+    return await <%- flowTag %>LogicalLib(
       _izContext,
       requestParams,
-      callingFlowConfig
+      callingFlowConfig,
+      errorsFound
     );
   } catch (err) {
     _izContext.logger.error('[<%- flowTag %>] error:', err);