@kne/fastify-live-components-site 0.1.0

package/libs/models/site.js

@@ -0,0 +1,43 @@
+module.exports = ({ DataTypes }) => {
+  return {
+    model: {
+      name: {
+        type: DataTypes.STRING,
+        allowNull: false,
+        comment: '站点名称'
+      },
+      shorten: {
+        type: DataTypes.STRING,
+        comment: '公开访问短码'
+      },
+      status: {
+        type: DataTypes.STRING,
+        allowNull: false,
+        defaultValue: 'open',
+        comment: '状态: open 开启, closed 关闭'
+      },
+      defaultPermission: {
+        type: DataTypes.STRING,
+        allowNull: false,
+        defaultValue: 'rw',
+        comment: '新建节点默认权限: r | rw'
+      },
+      options: {
+        type: DataTypes.JSON,
+        defaultValue: {},
+        comment: '扩展配置'
+      }
+    },
+    options: {
+      comment: 'Live 组件站点',
+      indexes: [
+        {
+          fields: ['shorten'],
+          unique: true,
+          where: { deleted_at: null }
+        },
+        { fields: ['status'] }
+      ]
+    }
+  };
+};

package/libs/services/content-share.js

@@ -0,0 +1,194 @@
+const fp = require('fastify-plugin');
+const { NotFound, BadRequest, Unauthorized, Forbidden } = require('http-errors');
+const crypto = require('node:crypto');
+
+module.exports = fp(async (fastify, options) => {
+  const { models } = fastify[options.name];
+  const { Op } = fastify.sequelize.Sequelize;
+
+  const toId = value => (value == null || value === '' ? null : String(value));
+
+  const getSiteId = authenticatePayload => {
+    const siteId = toId(authenticatePayload?.siteId);
+    if (!siteId) {
+      throw new BadRequest('siteId 不能为空');
+    }
+    return siteId;
+  };
+
+  const formatShare = (share, contentBase) => {
+    const plain = typeof share.get === 'function' ? share.get({ plain: true }) : { ...share };
+    const code = String(plain.shorten || '').toUpperCase();
+    const base = String(contentBase || options.prefix || '').replace(/\/$/, '');
+    return {
+      id: String(plain.id),
+      nodeId: String(plain.nodeId),
+      shorten: code,
+      expires: plain.expires || null,
+      // 不带站点 shorten：{prefix}/content/{contentShorten}
+      url: base ? `${base}/content/${code}` : null,
+      createdAt: plain.createdAt || null
+    };
+  };
+
+  const getContentBase = () => {
+    if (typeof options.getContentHost === 'function') {
+      return options.getContentHost();
+    }
+    return options.prefix;
+  };
+
+  const create = async (authenticatePayload, { id, expiresIn } = {}) => {
+    const siteId = getSiteId(authenticatePayload);
+    const nodeId = toId(id);
+    if (!nodeId) {
+      throw new BadRequest('id 不能为空');
+    }
+
+    const node = await models.node.findOne({ where: { id: nodeId, siteId } });
+    if (!node) {
+      throw new NotFound('节点不存在');
+    }
+    if (node.type !== 'file') {
+      throw new BadRequest('Not a file');
+    }
+
+    let expires = null;
+    if (expiresIn != null && expiresIn !== '' && Number(expiresIn) > 0) {
+      expires = new Date(Date.now() + Number(expiresIn) * 1000);
+    }
+
+    const shareId = crypto.randomBytes(8).toString('hex');
+    const target = JSON.stringify({
+      type: options.contentTargetType,
+      siteId,
+      nodeId,
+      shareId
+    });
+    const code = await options.getShortenServices().sign(target, expires);
+
+    const share = await models.contentShare.create({
+      siteId,
+      nodeId,
+      shorten: code,
+      expires
+    });
+
+    return formatShare(share, getContentBase());
+  };
+
+  const list = async (authenticatePayload, { id } = {}) => {
+    const siteId = getSiteId(authenticatePayload);
+    const nodeId = toId(id);
+    if (!nodeId) {
+      throw new BadRequest('id 不能为空');
+    }
+
+    const now = new Date();
+    const rows = await models.contentShare.findAll({
+      where: { siteId, nodeId },
+      order: [['createdAt', 'DESC']]
+    });
+
+    const contentBase = getContentBase();
+    const active = [];
+    for (const row of rows) {
+      if (row.expires && row.expires <= now) {
+        try {
+          await options.getShortenServices().remove(row.shorten);
+        } catch (e) {
+          // ignore
+        }
+        await row.destroy();
+        continue;
+      }
+      active.push(formatShare(row, contentBase));
+    }
+    return active;
+  };
+
+  const remove = async (authenticatePayload, { shorten } = {}) => {
+    const siteId = getSiteId(authenticatePayload);
+    const code = String(shorten || '')
+      .trim()
+      .toUpperCase();
+    if (!code) {
+      throw new BadRequest('shorten 不能为空');
+    }
+
+    const share = await models.contentShare.findOne({
+      where: { siteId, shorten: code }
+    });
+    if (!share) {
+      throw new NotFound('分享不存在');
+    }
+
+    try {
+      await options.getShortenServices().remove(code);
+    } catch (e) {
+      // ignore
+    }
+    await share.destroy();
+    return { shorten: code };
+  };
+
+  /** 通过内容短码读取已保存 content（公开访问，不依赖站点 shorten） */
+  const resolveByCode = async ({ contentShorten } = {}) => {
+    const code = String(contentShorten || '')
+      .trim()
+      .toUpperCase();
+    if (!code) {
+      throw new BadRequest('content shorten 不能为空');
+    }
+
+    let payload;
+    try {
+      const target = await options.getShortenServices().decode(code);
+      payload = typeof target === 'string' ? JSON.parse(target) : target;
+    } catch (e) {
+      throw new Unauthorized('content shorten is invalid or expired');
+    }
+
+    if (!payload || payload.type !== options.contentTargetType || !payload.siteId || !payload.nodeId) {
+      throw new Unauthorized('content shorten is invalid');
+    }
+
+    const siteId = String(payload.siteId);
+    const site = await models.site.findByPk(siteId);
+    if (!site) {
+      throw new Unauthorized('content shorten is invalid');
+    }
+    if (site.status !== 'open') {
+      throw new Forbidden('站点已关闭');
+    }
+
+    const share = await models.contentShare.findOne({
+      where: {
+        siteId,
+        shorten: code,
+        nodeId: toId(payload.nodeId),
+        [Op.or]: [{ expires: null }, { expires: { [Op.gt]: new Date() } }]
+      }
+    });
+    if (!share) {
+      throw new Unauthorized('content shorten is invalid or expired');
+    }
+
+    return fastify[options.name].services.node.getContent({ siteId }, { id: payload.nodeId });
+  };
+
+  /** @deprecated 保留兼容：带站点鉴权上下文时也可解析 */
+  const resolveContent = async (authenticatePayload, { contentShorten } = {}) => {
+    return resolveByCode({ contentShorten });
+  };
+
+  Object.assign(fastify[options.name].services, {
+    contentShare: {
+      create,
+      list,
+      remove,
+      resolveByCode,
+      resolveContent
+    }
+  });
+});

package/libs/services/node.js

@@ -0,0 +1,278 @@
+const fp = require('fastify-plugin');
+const { NotFound, BadRequest, Forbidden } = require('http-errors');
+
+module.exports = fp(async (fastify, options) => {
+  const { models } = fastify[options.name];
+  const { Op } = fastify.sequelize.Sequelize;
+
+  const toId = value => (value == null || value === '' ? null : String(value));
+
+  const assertWritable = node => {
+    if (!node) {
+      throw new NotFound('节点不存在');
+    }
+    if (node.permission !== 'rw') {
+      throw new Forbidden('Read-only permission');
+    }
+  };
+
+  const getSiteId = authenticatePayload => {
+    const siteId = toId(authenticatePayload?.siteId);
+    if (!siteId) {
+      throw new BadRequest('siteId 不能为空');
+    }
+    return siteId;
+  };
+
+  const findNode = async (siteId, id) => {
+    const node = await models.node.findOne({
+      where: { id: toId(id), siteId }
+    });
+    if (!node) {
+      throw new NotFound('节点不存在');
+    }
+    return node;
+  };
+
+  const assertUniqueSiblingName = async (siteId, parentId, name, excludeId) => {
+    const where = {
+      siteId,
+      name,
+      parentId: parentId || null
+    };
+    if (excludeId) {
+      where.id = { [Op.ne]: toId(excludeId) };
+    }
+    // SQLite 中 null 比较需特殊处理
+    const count = await models.node.count({
+      where: parentId
+        ? where
+        : {
+            siteId,
+            name,
+            parentId: { [Op.is]: null },
+            ...(excludeId ? { id: { [Op.ne]: toId(excludeId) } } : {})
+          }
+    });
+    if (count > 0) {
+      throw new BadRequest('DUPLICATE_NAME');
+    }
+  };
+
+  const toTreeNode = (node, childrenMap) => {
+    const id = String(node.id);
+    const item = {
+      id,
+      name: node.name,
+      type: node.type,
+      permission: node.permission || 'rw'
+    };
+    if (node.type === 'directory') {
+      item.children = (childrenMap.get(id) || []).map(child => toTreeNode(child, childrenMap));
+    }
+    return item;
+  };
+
+  const getFolderTree = async authenticatePayload => {
+    const siteId = getSiteId(authenticatePayload);
+    const nodes = await models.node.findAll({
+      where: { siteId },
+      order: [
+        ['type', 'DESC'],
+        ['name', 'ASC']
+      ]
+    });
+
+    const childrenMap = new Map();
+    const roots = [];
+
+    nodes.forEach(node => {
+      const parentId = toId(node.parentId);
+      if (!parentId) {
+        roots.push(node);
+        return;
+      }
+      if (!childrenMap.has(parentId)) {
+        childrenMap.set(parentId, []);
+      }
+      childrenMap.get(parentId).push(node);
+    });
+
+    return roots.map(node => toTreeNode(node, childrenMap));
+  };
+
+  const get = async (authenticatePayload, { id }) => {
+    const siteId = getSiteId(authenticatePayload);
+    const node = await findNode(siteId, id);
+    if (node.type !== 'file') {
+      throw new BadRequest('Not a file');
+    }
+    return {
+      id: String(node.id),
+      name: node.name,
+      permission: node.permission || 'rw',
+      content: node.content ?? ''
+    };
+  };
+
+  /** 仅返回已保存的 content 字符串（供 text/plain 直出） */
+  const getContent = async (authenticatePayload, { id }) => {
+    const file = await get(authenticatePayload, { id });
+    return file.content ?? '';
+  };
+
+  const resolveParent = async (siteId, parentId) => {
+    if (!parentId) {
+      return null;
+    }
+    const parent = await findNode(siteId, parentId);
+    assertWritable(parent);
+    if (parent.type !== 'directory') {
+      throw new BadRequest('Parent is not a directory');
+    }
+    return parent;
+  };
+
+  const createFolder = async (authenticatePayload, { parentId, name }) => {
+    const siteId = getSiteId(authenticatePayload);
+    const trimmedName = String(name || '').trim();
+    if (!trimmedName) {
+      throw new BadRequest('Name is required');
+    }
+
+    const normalizedParentId = toId(parentId);
+    await resolveParent(siteId, normalizedParentId);
+    await assertUniqueSiblingName(siteId, normalizedParentId, trimmedName);
+
+    const permission = authenticatePayload?.site?.defaultPermission === 'r' ? 'r' : 'rw';
+    const folder = await models.node.create({
+      siteId,
+      parentId: normalizedParentId,
+      name: trimmedName,
+      type: 'directory',
+      permission,
+      content: null
+    });
+
+    return {
+      id: String(folder.id),
+      name: folder.name,
+      type: 'directory',
+      permission: folder.permission,
+      children: []
+    };
+  };
+
+  const create = async (authenticatePayload, { parentId, name, content = '' }) => {
+    const siteId = getSiteId(authenticatePayload);
+    const trimmedName = String(name || '').trim();
+    if (!trimmedName) {
+      throw new BadRequest('Name is required');
+    }
+
+    const normalizedParentId = toId(parentId);
+    await resolveParent(siteId, normalizedParentId);
+    await assertUniqueSiblingName(siteId, normalizedParentId, trimmedName);
+
+    const permission = authenticatePayload?.site?.defaultPermission === 'r' ? 'r' : 'rw';
+    const file = await models.node.create({
+      siteId,
+      parentId: normalizedParentId,
+      name: trimmedName,
+      type: 'file',
+      permission,
+      content: content == null ? '' : String(content)
+    });
+
+    return {
+      id: String(file.id),
+      name: file.name,
+      type: 'file',
+      permission: file.permission
+    };
+  };
+
+  const save = async (authenticatePayload, { id, content }) => {
+    const siteId = getSiteId(authenticatePayload);
+    const node = await findNode(siteId, id);
+    assertWritable(node);
+    if (node.type !== 'file') {
+      throw new BadRequest('Not a file');
+    }
+    node.content = content == null ? '' : String(content);
+    await node.save();
+    return {
+      id: String(node.id),
+      content: node.content
+    };
+  };
+
+  const rename = async (authenticatePayload, { id, name }) => {
+    const siteId = getSiteId(authenticatePayload);
+    const trimmedName = String(name || '').trim();
+    if (!trimmedName) {
+      throw new BadRequest('Name is required');
+    }
+    const node = await findNode(siteId, id);
+    assertWritable(node);
+    const parentId = toId(node.parentId);
+    await assertUniqueSiblingName(siteId, parentId, trimmedName, node.id);
+    node.name = trimmedName;
+    await node.save();
+    return {
+      id: String(node.id),
+      name: node.name,
+      type: node.type,
+      permission: node.permission
+    };
+  };
+
+  const remove = async (authenticatePayload, { ids }) => {
+    const siteId = getSiteId(authenticatePayload);
+    const idList = Array.isArray(ids) ? ids : [ids];
+    if (!idList.length) {
+      throw new BadRequest('ids is required');
+    }
+
+    for (const id of idList) {
+      const node = await findNode(siteId, id);
+      assertWritable(node);
+      if (node.type === 'directory') {
+        const childCount = await models.node.count({
+          where: { siteId, parentId: String(node.id) }
+        });
+        if (childCount > 0) {
+          throw new BadRequest('Cannot remove non-empty folder');
+        }
+      } else {
+        const shares = await models.contentShare.findAll({
+          where: { siteId, nodeId: String(node.id) }
+        });
+        for (const share of shares) {
+          try {
+            await options.getShortenServices().remove(share.shorten);
+          } catch (e) {
+            // ignore
+          }
+          await share.destroy();
+        }
+      }
+      await node.destroy();
+    }
+
+    return { ids: idList.map(String) };
+  };
+
+  Object.assign(fastify[options.name].services, {
+    node: {
+      getFolderTree,
+      get,
+      getContent,
+      createFolder,
+      create,
+      save,
+      rename,
+      remove
+    }
+  });
+});

package/libs/services/site.js

@@ -0,0 +1,185 @@
+const fp = require('fastify-plugin');
+const omit = require('lodash/omit');
+const { Unauthorized, Forbidden, NotFound, BadRequest } = require('http-errors');
+
+const STATUS_OPEN = 'open';
+const STATUS_CLOSED = 'closed';
+
+const normalizeStatus = status => (status === STATUS_CLOSED ? STATUS_CLOSED : STATUS_OPEN);
+
+module.exports = fp(async (fastify, options) => {
+  const { models } = fastify[options.name];
+  const { Op } = fastify.sequelize.Sequelize;
+
+  const formatSite = site => {
+    const plain = typeof site.get === 'function' ? site.get({ plain: true }) : { ...site };
+    plain.id = String(plain.id);
+    plain.host = plain.shorten ? options.getSiteHost(plain.shorten) : null;
+    return plain;
+  };
+
+  const detail = async (authenticatePayload, { id }) => {
+    const site = await models.site.findByPk(id);
+    if (!site) {
+      throw new NotFound('站点不存在');
+    }
+    return site;
+  };
+
+  const authenticateEntry = async request => {
+    const code = request.params?.shorten;
+    if (!code) {
+      throw new Unauthorized('shorten is required');
+    }
+
+    let payload;
+    try {
+      const target = await options.getShortenServices().decode(String(code).toUpperCase());
+      payload = typeof target === 'string' ? JSON.parse(target) : target;
+    } catch (e) {
+      throw new Unauthorized('shorten is invalid');
+    }
+
+    if (!payload || payload.type !== options.siteTargetType || !payload.siteId) {
+      throw new Unauthorized('shorten is invalid');
+    }
+
+    const site = await models.site.findByPk(payload.siteId);
+    if (!site) {
+      throw new Unauthorized('shorten is invalid');
+    }
+
+    if (site.status !== STATUS_OPEN) {
+      throw new Forbidden('站点已关闭');
+    }
+
+    const siteId = String(site.id);
+    request.siteInfo = site;
+    request.authenticatePayload = {
+      siteId,
+      site
+    };
+  };
+
+  const create = async (authenticatePayload, data = {}) => {
+    const name = String(data.name || '').trim();
+    if (!name) {
+      throw new BadRequest('名称不能为空');
+    }
+
+    const defaultPermission = data.defaultPermission === 'r' ? 'r' : 'rw';
+    const status = normalizeStatus(data.status);
+
+    const site = await models.site.create({
+      name,
+      status,
+      defaultPermission,
+      options: data.options && typeof data.options === 'object' ? data.options : {}
+    });
+
+    const target = JSON.stringify({
+      type: options.siteTargetType,
+      siteId: String(site.id)
+    });
+    const shorten = await options.getShortenServices().sign(target);
+    site.shorten = shorten;
+    await site.save();
+
+    return formatSite(site);
+  };
+
+  const save = async (authenticatePayload, { id, ...data }) => {
+    if (!id) {
+      throw new BadRequest('id 不能为空');
+    }
+    const site = await detail(authenticatePayload, { id });
+    const payload = omit(data, ['id', 'shorten', 'createdAt', 'updatedAt', 'deletedAt', 'host']);
+
+    if (payload.name != null) {
+      const name = String(payload.name).trim();
+      if (!name) {
+        throw new BadRequest('名称不能为空');
+      }
+      payload.name = name;
+    }
+
+    if (payload.status != null) {
+      payload.status = normalizeStatus(payload.status);
+    }
+
+    if (payload.defaultPermission != null) {
+      payload.defaultPermission = payload.defaultPermission === 'r' ? 'r' : 'rw';
+    }
+
+    await site.update(payload);
+    return site;
+  };
+
+  const remove = async (authenticatePayload, { id }) => {
+    if (!id) {
+      throw new BadRequest('id 不能为空');
+    }
+    const site = await detail(authenticatePayload, { id });
+    if (site.shorten) {
+      try {
+        await options.getShortenServices().remove(site.shorten);
+      } catch (e) {
+        // 短码可能已不存在，忽略
+      }
+    }
+    const shares = await models.contentShare.findAll({ where: { siteId: site.id } });
+    for (const share of shares) {
+      try {
+        await options.getShortenServices().remove(share.shorten);
+      } catch (e) {
+        // ignore
+      }
+    }
+    await models.contentShare.destroy({ where: { siteId: site.id } });
+    await models.node.destroy({ where: { siteId: site.id } });
+    await site.destroy();
+  };
+
+  const list = async (authenticatePayload, { filter = {}, perPage = 20, currentPage = 1 } = {}) => {
+    const where = {};
+    if (filter.status === STATUS_OPEN || filter.status === STATUS_CLOSED) {
+      where.status = filter.status;
+    }
+    if (filter.keyword) {
+      where.name = { [Op.like]: `%${filter.keyword}%` };
+    }
+
+    const limit = Number(perPage) || 20;
+    const page = Number(currentPage) || 1;
+    const { rows, count } = await models.site.findAndCountAll({
+      where,
+      offset: limit * (page - 1),
+      limit,
+      order: [['createdAt', 'DESC']]
+    });
+
+    return {
+      pageData: rows.map(formatSite),
+      totalCount: count
+    };
+  };
+
+  const getDetail = async (authenticatePayload, { id }) => {
+    const site = await detail(authenticatePayload, { id });
+    return formatSite(site);
+  };
+
+  Object.assign(fastify[options.name].services, {
+    site: {
+      authenticateEntry,
+      create,
+      save,
+      remove,
+      list,
+      detail: getDetail,
+      formatSite,
+      STATUS_OPEN,
+      STATUS_CLOSED
+    }
+  });
+});