@lilaquadrat/studio 10.10.0 → 11.1.1

package/lib/src/services/memory-cache.service.js

@@ -0,0 +1,59 @@
+import logger from '../logger.js';
+class MemoryCache {
+    static clear() {
+        MemoryCache.cache = {};
+    }
+    static remove(cacheKeyOptions) {
+        delete MemoryCache.cache[MemoryCache.getCacheKey(cacheKeyOptions)];
+    }
+    static clearUser(user) {
+        const suffix = `:${user}`;
+        Object.keys(MemoryCache.cache).forEach(key => {
+            if (key.endsWith(suffix)) {
+                delete MemoryCache.cache[key];
+            }
+        });
+    }
+    static clearUsers(users) {
+        users.forEach((single) => MemoryCache.clearUser(single));
+    }
+    static upsert(cacheKey, data, lifetime) {
+        MemoryCache.cache[cacheKey.toString()] = {
+            data,
+            ...(lifetime ? { expiresAt: Date.now() + lifetime } : {}),
+        };
+    }
+    static get(cacheKey) {
+        const entry = MemoryCache.cache[cacheKey.toString()];
+        if (!entry)
+            return undefined;
+        if (entry.expiresAt && entry.expiresAt < Date.now()) {
+            delete MemoryCache.cache[cacheKey.toString()];
+            return undefined;
+        }
+        return entry.data;
+    }
+    static async use(cacheKeyOptions, fetchFunction) {
+        const cacheKey = MemoryCache.getCacheKey(cacheKeyOptions);
+        const cached = MemoryCache.get(cacheKey);
+        if (cached) {
+            logger.debug('cache.hit', { key: cacheKey });
+            return cached;
+        }
+        logger.debug('cache.miss', { key: cacheKey });
+        const fetchedData = await fetchFunction;
+        MemoryCache.upsert(cacheKey, fetchedData, cacheKeyOptions.lifetime);
+        return fetchedData;
+    }
+    static getCacheKey(options) {
+        const keyArray = [options.type];
+        if (options.id)
+            keyArray.push(options.id.toString());
+        if (options.user)
+            keyArray.push(options.user.toString());
+        return keyArray.join(':');
+    }
+}
+MemoryCache.cache = {};
+export default MemoryCache;
+//# sourceMappingURL=memory-cache.service.js.map

package/lib/src/services/memory-cache.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"memory-cache.service.js","sourceRoot":"","sources":["../../../src/services/memory-cache.service.ts"],"names":[],"mappings":"AAEA,OAAO,MAAM,MAAM,cAAc,CAAC;AAalC,MAAM,WAAW;IAIf,MAAM,CAAC,KAAK;QAEV,WAAW,CAAC,KAAK,GAAG,EAAE,CAAC;IAEzB,CAAC;IAED,MAAM,CAAC,MAAM,CAAC,eAAgC;QAE5C,OAAO,WAAW,CAAC,KAAK,CAAC,WAAW,CAAC,WAAW,CAAC,eAAe,CAAC,CAAC,CAAC;IAErE,CAAC;IAED,MAAM,CAAC,SAAS,CAAC,IAAY;QAE3B,MAAM,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QAC1B,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE;YAE3C,IAAI,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;gBAEzB,OAAO,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAEhC,CAAC;QAEH,CAAC,CAAC,CAAC;IAEL,CAAC;IAED,MAAM,CAAC,UAAU,CAAC,KAAe;QAE/B,KAAK,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,WAAW,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;IAE3D,CAAC;IAED,MAAM,CAAC,MAAM,CAAC,QAAgB,EAAE,IAAa,EAAE,QAAiB;QAE9D,WAAW,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC,GAAG;YACvC,IAAI;YACJ,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC1D,CAAC;IAEJ,CAAC;IAED,MAAM,CAAC,GAAG,CAAC,QAAgB;QAEzB,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAC;QAErD,IAAI,CAAC,KAAK;YAAE,OAAO,SAAS,CAAC;QAE7B,IAAI,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;YAEpD,OAAO,WAAW,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAC;YAC9C,OAAO,SAAS,CAAC;QAEnB,CAAC;QAED,OAAO,KAAK,CAAC,IAAI,CAAC;IAEpB,CAAC;IAED,MAAM,CAAC,KAAK,CAAC,GAAG,CAAI,eAAgC,EAAE,aAAyB;QAE7E,MAAM,QAAQ,GAAG,WAAW,CAAC,WAAW,CAAC,eAAe,CAAC,CAAC;QAC1D,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACzC,IAAI,MAAM,EAAE,CAAC;YAEX,MAAM,CAAC,KAAK,CAAC,WAAW,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC,CAAC;YAC7C,OAAO,MAAW,CAAC;QAErB,CAAC;QAED,MAAM,CAAC,KAAK,CAAC,YAAY,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC,CAAC;QAE9C,MAAM,WAAW,GAAG,MAAM,aAAa,CAAC;QAExC,WAAW,CAAC,MAAM,CAAC,QAAQ,EAAE,WAAW,EAAE,eAAe,CAAC,QAAQ,CAAC,CAAC;QACpE,OAAO,WAAW,CAAC;IAErB,CAAC;IAED,MAAM,CAAC,WAAW,CAAC,OAAwB;QAEzC,MAAM,QAAQ,GAAa,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC1C,IAAI,OAAO,CAAC,EAAE;YAAE,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,CAAC,CAAC;QACrD,IAAI,OAAO,CAAC,IAAI;YAAE,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;QAEzD,OAAO,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAE5B,CAAC;;AAzFM,iBAAK,GAA+B,EAAE,CAAC;AA4FhD,eAAe,WAAW,CAAC"}

package/lib/src/services/participants.service.d.ts

@@ -0,0 +1,60 @@
+import { ObjectId } from 'mongodb';
+import Immutable from '../Immutable.class.js';
+import Participant, { ParticipantRole, ParticipantState, Right } from '../interfaces/Participant.js';
+/**
+ * participant collection and conversation access.
+ *
+ * The base service is shared by studio-chat (which extends it with conversation bookkeeping
+ * that needs the message model) and by studio-media (which uses it for the conversation
+ * attachment access checks). Access rules therefore exist exactly once.
+ */
+export declare class ParticipantsService extends Immutable<Participant> {
+    model: import("../classes/modelv2.class.js").default<Participant, "create" | "changeState">;
+    addToConversation(participant: string, conversation: ObjectId, user: string, rights?: Right[], role?: ParticipantRole): Promise<import("@lilaquadrat/interfaces").CreateResult<import("@lilaquadrat/interfaces").BasicData<Participant>>>;
+    updateLastReadId(participant: string, conversation: ObjectId, lastReadId: number): Promise<import("mongodb").UpdateResult<Participant>>;
+    /**
+     * silence a conversation for one participant. Only ever touches the caller's own doc, so
+     * membership stays untouched — no refreshParticipants/refreshParticipantsHash needed.
+     *
+     * Unmuting $unsets instead of writing `false`: absent and false mean the same thing to
+     * every reader, and the docs of the (vast) majority who never mute stay clean.
+     */
+    setMuted(conversation: ObjectId, participant: string, muted: boolean): Promise<import("mongodb").UpdateResult<Participant>>;
+    updateLastestMessageId(participant: string, conversation: ObjectId, latestMessageId: number): Promise<import("mongodb").UpdateResult<Participant>>;
+    getByConversationAndUser(conversationId: ObjectId, user: string): Promise<import("mongodb").WithId<Participant> | null>;
+    /**
+     * mark participants as support team members. Separate from adding them because they are added
+     * through updateParticipants(), which is deliberately generic — and it also has to reach docs
+     * that already existed (a member who left and comes back with the team).
+     */
+    markSupportAgents(conversationId: ObjectId, users: string[]): Promise<void> | Promise<import("mongodb").UpdateResult<Participant>>;
+    /** the support team members of a conversation — who may see its system messages */
+    getSupportAgents(conversationId: ObjectId): Promise<string[]>;
+    /**
+     * all participant docs of a conversation (incl. their rights & state), excluding deleted.
+     */
+    listByConversation(conversationId: ObjectId): Promise<import("mongodb").WithId<Participant>[]>;
+    setRights(conversationId: ObjectId, target: string, rights: Right[]): Promise<import("mongodb").UpdateResult<Participant>>;
+    /**
+     * flip a participant's own state. Written for the per-participant delete ('deleted'), which
+     * hides the conversation from that one user's list without touching anybody else's copy —
+     * conversations.service list() and listByConversation() both already filter
+     * `state: { $ne: 'deleted' }`, so the read side needs no change.
+     *
+     * Callers moving a participant OUT of 'active' have to refresh participants/participantsHash
+     * themselves (leave() and block() do). The delete route leaves first, so the state is never
+     * 'active' by the time this runs.
+     */
+    setState(conversationId: ObjectId, target: string, state: ParticipantState): Promise<import("mongodb").UpdateResult<Participant>>;
+    /**
+     * membership plus the named rights on a conversation. The single access chokepoint for both
+     * transports (REST routes and websocket actions) and for media's conversation attachment
+     * endpoints.
+     */
+    checkAccess(requiredAnyStatus: string[], requiredRights: string[] | undefined, settings: {
+        conversationId: ObjectId;
+        user: string;
+    }): Promise<boolean>;
+}
+declare const _default: ParticipantsService;
+export default _default;

package/lib/src/services/participants.service.js

@@ -0,0 +1,147 @@
+import Immutable from '../Immutable.class.js';
+import ParticipantModel from '../models/participant.model.js';
+import ConversationModel from '../models/conversation.model.js';
+import MemoryCache from './memory-cache.service.js';
+import supportAccess from './support-access.service.js';
+/**
+ * conversation and participant docs are cached per process; callers that mutate them
+ * (studio-chat) invalidate explicitly, but a service that only reads (studio-media) cannot,
+ * so entries age out instead of holding revoked access forever.
+ */
+const ACCESS_CACHE_LIFETIME_MS = 30000;
+/**
+ * participant collection and conversation access.
+ *
+ * The base service is shared by studio-chat (which extends it with conversation bookkeeping
+ * that needs the message model) and by studio-media (which uses it for the conversation
+ * attachment access checks). Access rules therefore exist exactly once.
+ */
+export class ParticipantsService extends Immutable {
+    constructor() {
+        super(...arguments);
+        this.model = ParticipantModel;
+    }
+    addToConversation(participant, conversation, user, rights = ['read', 'write', 'files'], role) {
+        return this.create({
+            user: participant,
+            conversation,
+            state: 'active',
+            rights,
+            lastReadId: 0,
+            ...(role ? { role } : {})
+        }, String(user), 'chat', undefined, undefined, undefined, {
+            returnDocument: true
+        });
+    }
+    updateLastReadId(participant, conversation, lastReadId) {
+        return this.model.db.updateOne({
+            user: participant,
+            conversation
+        }, { $max: { lastReadId } });
+    }
+    /**
+     * silence a conversation for one participant. Only ever touches the caller's own doc, so
+     * membership stays untouched — no refreshParticipants/refreshParticipantsHash needed.
+     *
+     * Unmuting $unsets instead of writing `false`: absent and false mean the same thing to
+     * every reader, and the docs of the (vast) majority who never mute stay clean.
+     */
+    setMuted(conversation, participant, muted) {
+        return this.model.db.updateOne({
+            user: participant,
+            conversation
+        }, muted ? { $set: { muted: true } } : { $unset: { muted: '' } });
+    }
+    updateLastestMessageId(participant, conversation, latestMessageId) {
+        return this.model.db.updateOne({
+            user: participant,
+            conversation
+        }, { $set: { latestMessageId } });
+    }
+    getByConversationAndUser(conversationId, user) {
+        return this.model.db.findOne({ conversation: conversationId, user });
+    }
+    /**
+     * mark participants as support team members. Separate from adding them because they are added
+     * through updateParticipants(), which is deliberately generic — and it also has to reach docs
+     * that already existed (a member who left and comes back with the team).
+     */
+    markSupportAgents(conversationId, users) {
+        if (!users.length)
+            return Promise.resolve();
+        return this.model.db.updateMany({ conversation: conversationId, user: { $in: users } }, { $set: { role: 'agent' } });
+    }
+    /** the support team members of a conversation — who may see its system messages */
+    async getSupportAgents(conversationId) {
+        const agents = await this.model.db
+            .find({ conversation: conversationId, role: 'agent' }, { projection: { user: 1 } })
+            .toArray();
+        return agents.map((single) => single.user);
+    }
+    /**
+     * all participant docs of a conversation (incl. their rights & state), excluding deleted.
+     */
+    listByConversation(conversationId) {
+        return this.model.db.find({ conversation: conversationId, state: { $ne: 'deleted' } }).toArray();
+    }
+    setRights(conversationId, target, rights) {
+        return this.model.db.updateOne({ conversation: conversationId, user: target }, { $set: { rights } });
+    }
+    /**
+     * flip a participant's own state. Written for the per-participant delete ('deleted'), which
+     * hides the conversation from that one user's list without touching anybody else's copy —
+     * conversations.service list() and listByConversation() both already filter
+     * `state: { $ne: 'deleted' }`, so the read side needs no change.
+     *
+     * Callers moving a participant OUT of 'active' have to refresh participants/participantsHash
+     * themselves (leave() and block() do). The delete route leaves first, so the state is never
+     * 'active' by the time this runs.
+     */
+    setState(conversationId, target, state) {
+        return this.model.db.updateOne({ conversation: conversationId, user: target }, { $set: { state } });
+    }
+    /**
+     * membership plus the named rights on a conversation. The single access chokepoint for both
+     * transports (REST routes and websocket actions) and for media's conversation attachment
+     * endpoints.
+     */
+    async checkAccess(requiredAnyStatus, requiredRights, settings) {
+        const { conversationId, user } = settings;
+        // Fetch both in parallel with distinct cache keys to avoid collisions
+        const [conversation, participant] = await Promise.all([
+            MemoryCache.use({ type: "conversation", id: conversationId, lifetime: ACCESS_CACHE_LIFETIME_MS }, ConversationModel.db.findOne({ _id: conversationId })),
+            MemoryCache.use({ type: "participant", id: conversationId, user, lifetime: ACCESS_CACHE_LIFETIME_MS }, this.getByConversationAndUser(conversationId, user))
+        ]);
+        if (!participant)
+            return false;
+        if (!conversation)
+            return false;
+        /**
+         * Support staff revocation.
+         *
+         * The team reconcile is add-only by design (addMissingSupportMembers): nothing on a support
+         * conversation records who the customer is, so "remove everyone not on the team" could eject
+         * the customer themselves. The consequence is that taking someone's `support:member` scope
+         * away never removed their participant docs — without this check they would keep reading
+         * every support conversation they were ever added to, forever.
+         *
+         * `role: 'agent'` is only ever set on support participants (participantsService
+         * .markSupportAgents), so this touches nobody else — least of all a support agent's own
+         * support conversation, where they are the customer and carry no role.
+         */
+        if (conversation.operationMode === 'support' && participant.role === 'agent' && !await supportAccess.isStaff(user))
+            return false;
+        // Validate participant membership (cheap array includes)
+        if (!conversation.participants?.includes(user) && !requiredAnyStatus.some((single) => ['left', 'removed'].includes(single)))
+            return false;
+        // Status check
+        if (!requiredAnyStatus.includes(participant.state))
+            return false;
+        // Rights check (all required must be present)
+        if (requiredRights && !requiredRights.every(r => participant.rights?.includes(r)))
+            return false;
+        return true;
+    }
+}
+export default new ParticipantsService();
+//# sourceMappingURL=participants.service.js.map

package/lib/src/services/participants.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"participants.service.js","sourceRoot":"","sources":["../../../src/services/participants.service.ts"],"names":[],"mappings":"AAEA,OAAO,SAAS,MAAM,uBAAuB,CAAC;AAC9C,OAAO,gBAAgB,MAAM,gCAAgC,CAAC;AAC9D,OAAO,iBAAiB,MAAM,iCAAiC,CAAC;AAEhE,OAAO,WAAW,MAAM,2BAA2B,CAAC;AACpD,OAAO,aAAa,MAAM,6BAA6B,CAAC;AAExD;;;;GAIG;AACH,MAAM,wBAAwB,GAAG,KAAK,CAAC;AAEvC;;;;;;GAMG;AACH,MAAM,OAAO,mBAAoB,SAAQ,SAAsB;IAA/D;;QAEE,UAAK,GAAG,gBAAgB,CAAC;IA+L3B,CAAC;IA7LC,iBAAiB,CAAC,WAAmB,EAAE,YAAsB,EAAE,IAAY,EAAE,SAAkB,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,IAAsB;QAE/I,OAAO,IAAI,CAAC,MAAM,CAAC;YACjB,IAAI,EAAE,WAAW;YACjB,YAAY;YACZ,KAAK,EAAE,QAAQ;YACf,MAAM;YACN,UAAU,EAAE,CAAC;YACb,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC1B,EACD,MAAM,CAAC,IAAI,CAAC,EACZ,MAAM,EACN,SAAS,EACT,SAAS,EACT,SAAS,EACT;YACE,cAAc,EAAE,IAAI;SACrB,CACA,CAAC;IAEJ,CAAC;IAED,gBAAgB,CAAC,WAAmB,EAAE,YAAsB,EAAE,UAAkB;QAE9E,OAAO,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,SAAS,CAC5B;YACE,IAAI,EAAE,WAAW;YACjB,YAAY;SACb,EACD,EAAE,IAAI,EAAE,EAAE,UAAU,EAAE,EAAE,CACzB,CAAC;IAEJ,CAAC;IAED;;;;;;OAMG;IACH,QAAQ,CAAC,YAAsB,EAAE,WAAmB,EAAE,KAAc;QAElE,OAAO,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,SAAS,CAC5B;YACE,IAAI,EAAE,WAAW;YACjB,YAAY;SACb,EACD,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,CAC9D,CAAC;IAEJ,CAAC;IAED,sBAAsB,CAAC,WAAmB,EAAE,YAAsB,EAAE,eAAuB;QAEzF,OAAO,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,SAAS,CAC5B;YACE,IAAI,EAAE,WAAW;YACjB,YAAY;SACb,EACD,EAAE,IAAI,EAAE,EAAE,eAAe,EAAE,EAAE,CAC9B,CAAC;IAEJ,CAAC;IAED,wBAAwB,CAAC,cAAwB,EAAE,IAAY;QAE7D,OAAO,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,CAAC,EAAE,YAAY,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC,CAAC;IAEvE,CAAC;IAED;;;;OAIG;IACH,iBAAiB,CAAC,cAAwB,EAAE,KAAe;QAEzD,IAAI,CAAC,KAAK,CAAC,MAAM;YAAE,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;QAE5C,OAAO,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,UAAU,CAC7B,EAAE,YAAY,EAAE,cAAc,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,EACtD,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,CAC5B,CAAC;IAEJ,CAAC;IAED,mFAAmF;IACnF,KAAK,CAAC,gBAAgB,CAAC,cAAwB;QAE7C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,EAAE;aAC/B,IAAI,CAAC,EAAE,YAAY,EAAE,cAAc,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC;aAClF,OAAO,EAAE,CAAC;QAEb,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAE7C,CAAC;IAED;;OAEG;IACH,kBAAkB,CAAC,cAAwB;QAEzC,OAAO,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,YAAY,EAAE,cAAc,EAAE,KAAK,EAAE,EAAE,GAAG,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;IAEnG,CAAC;IAED,SAAS,CAAC,cAAwB,EAAE,MAAc,EAAE,MAAe;QAEjE,OAAO,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,SAAS,CAC5B,EAAE,YAAY,EAAE,cAAc,EAAE,IAAI,EAAE,MAAM,EAAE,EAC9C,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,EAAE,CACrB,CAAC;IAEJ,CAAC;IAED;;;;;;;;;OASG;IACH,QAAQ,CAAC,cAAwB,EAAE,MAAc,EAAE,KAAuB;QAExE,OAAO,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,SAAS,CAC5B,EAAE,YAAY,EAAE,cAAc,EAAE,IAAI,EAAE,MAAM,EAAE,EAC9C,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,EAAE,CACpB,CAAC;IAEJ,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,WAAW,CACf,iBAA2B,EAC3B,cAAoC,EACpC,QAAoD;QAGpD,MAAM,EAAE,cAAc,EAAE,IAAI,EAAE,GAAG,QAAQ,CAAC;QAE1C,sEAAsE;QACtE,MAAM,CAAC,YAAY,EAAE,WAAW,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YACpD,WAAW,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,EAAE,EAAE,cAAc,EAAE,QAAQ,EAAE,wBAAwB,EAAE,EAC9F,iBAAiB,CAAC,EAAE,CAAC,OAAO,CAAe,EAAE,GAAG,EAAE,cAAc,EAAE,CAAC,CACpE;YACD,WAAW,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,EAAE,EAAE,cAAc,EAAE,IAAI,EAAE,QAAQ,EAAE,wBAAwB,EAAE,EACnG,IAAI,CAAC,wBAAwB,CAAC,cAAc,EAAE,IAAI,CAAC,CACpD;SACF,CAAC,CAAC;QAEH,IAAI,CAAC,WAAW;YAAE,OAAO,KAAK,CAAC;QAC/B,IAAI,CAAC,YAAY;YAAE,OAAO,KAAK,CAAC;QAEhC;;;;;;;;;;;;WAYG;QACH,IAAI,YAAY,CAAC,aAAa,KAAK,SAAS,IAAI,WAAW,CAAC,IAAI,KAAK,OAAO,IAAI,CAAC,MAAM,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC;YAAE,OAAO,KAAK,CAAC;QAEjI,yDAAyD;QACzD,IAAI,CAAC,YAAY,CAAC,YAAY,EAAE,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YAAE,OAAO,KAAK,CAAC;QAE1I,eAAe;QACf,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,WAAW,CAAC,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QAEjE,8CAA8C;QAC9C,IAAI,cAAc,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,WAAW,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAU,CAAC,CAAC;YAAE,OAAO,KAAK,CAAC;QAEzG,OAAO,IAAI,CAAC;IAEd,CAAC;CAEF;AAED,eAAe,IAAI,mBAAmB,EAAE,CAAC"}

package/lib/src/services/storage.service.d.ts

@@ -63,6 +63,7 @@ export declare class StorageService extends Immutable<Storage> {
         prefix?: string;
         customer?: string;
         list?: string;
+        conversation?: string;
     }): {
         token: string;
         expiresIn: number;
@@ -107,6 +108,7 @@ export declare class StorageService extends Immutable<Storage> {
         prefix?: string;
         customer?: string;
         list?: string;
+        conversation?: string;
     }): boolean;
     /**
      * Creates a secure download URL with time-limited token for a storage file.
@@ -132,11 +134,14 @@ export declare class StorageService extends Immutable<Storage> {
         app?: string;
         url?: string;
         prefix?: string;
+        conversation?: string;
     }): Promise<{
         url: string;
         expiresAt: number;
     }>;
-    handleFile(uploadInternalId: ObjectId, index: number, file: MultipartFile | undefined): Promise<import("@lilaquadrat/interfaces").Stored<Upload>>;
+    handleFile(uploadInternalId: ObjectId, index: number, file: MultipartFile | undefined, options?: {
+        maxSize?: number;
+    }): Promise<import("@lilaquadrat/interfaces").Stored<Upload>>;
     complete(upload: Upload, options?: {
         useNode?: boolean;
     }): Promise<StorageFilePaths>;
@@ -196,8 +201,9 @@ export declare class StorageService extends Immutable<Storage> {
      * checks if the file was already successfully uploaded
      */
     exists(filename: string, prefix: string | undefined, app: string, customer: ObjectId | undefined, list: ObjectId | undefined, options: {
-        company: string;
-        project: string | undefined;
+        company?: string;
+        project?: string | undefined;
+        conversation?: ObjectId;
     }): Promise<boolean>;
     /**
      * counts non-versioned storage documents bound to a specific assetId
@@ -210,13 +216,19 @@ export declare class StorageService extends Immutable<Storage> {
     checkAllowedSize(filesize: number, allowedSize: number): boolean;
     stats(company: string, project: string, customer?: ObjectId): Promise<MediaStats>;
     getByInternalId(internalId: ObjectId, options: Required<Options>): Promise<BasicData<Storage> | null>;
-    getPathByFilename(filename: string, app: string, customer: ObjectId | undefined, list: ObjectId | undefined, options: Options): Promise<WithId<Storage> | null>;
-    getByFilename(filename: string, prefix: string | undefined, app: string, customer: ObjectId | undefined, list: ObjectId | undefined, options: Required<Options>): Promise<BasicData<Storage> | null>;
+    getPathByFilename(filename: string, app: string, customer: ObjectId | undefined, list: ObjectId | undefined, options: Options & {
+        conversation?: ObjectId;
+    }): Promise<WithId<Storage> | null>;
+    getByFilename(filename: string, prefix: string | undefined, app: string, customer: ObjectId | undefined, list: ObjectId | undefined, options: Options & {
+        conversation?: ObjectId;
+    }): Promise<BasicData<Storage> | null>;
     getFilesNotInPaths(paths: string[], app: string, company: string, project: string): Promise<WithId<Storage>[]>;
     removeBlobMembers(internalId: ObjectId, customer: ObjectId, options: Required<UserAppOptionsRequired>): Promise<void>;
     removeBlob(internalId: ObjectId, options: Required<UserAppOptionsRequired>): Promise<void>;
+    removeBlobConversation(internalId: ObjectId, conversation: ObjectId, options: Required<UserAppOptionsRequired>): Promise<void>;
     removeBlobViaPath(storage: WithId<Storage>[], options: Required<UserAppOptionsRequired>): Promise<void>;
     removeBlobVersion(parentId: ObjectId, options: Required<UserAppOptionsRequired>): Promise<void>;
+    removeConversationBlobVersion(parentId: ObjectId, conversation: ObjectId, options: Required<UserAppOptionsRequired>): Promise<void>;
 }
 declare const _default: StorageService;
 export default _default;

package/lib/src/services/storage.service.js

@@ -205,6 +205,10 @@ export class StorageService extends Immutable {
                 console.debug('[validateSecureToken] list mismatch', { token: tokenLimits.list, provided: checkLimits.list });
                 return false;
             }
+            if (tokenLimits.conversation && tokenLimits.conversation !== checkLimits.conversation) {
+                console.debug('[validateSecureToken] conversation mismatch', { token: tokenLimits.conversation, provided: checkLimits.conversation });
+                return false;
+            }
             // For URL limit, check if requested URL starts with the token's allowed prefix
             if (tokenLimits.url && checkLimits.url && !checkLimits.url.startsWith(tokenLimits.url)) {
                 console.debug('[validateSecureToken] url mismatch', { tokenUrl: tokenLimits.url, providedUrl: checkLimits.url });
@@ -247,6 +251,7 @@ export class StorageService extends Immutable {
             project: limits?.project || storage.project,
             app: limits?.app || storage.app,
             prefix: limits?.prefix || storage.prefix,
+            conversation: limits?.conversation || storage.conversation?.toString(),
             url: limits?.url,
         };
         // Generate secure token
@@ -254,13 +259,16 @@ export class StorageService extends Immutable {
         // Construct download URL
         const baseUrl = process.env.SECURE_URL;
         const path = storage.prefix ? `${storage.prefix}/${storage.filename}` : storage.filename;
-        const url = `${baseUrl}/${storage.app}/${storage.company}/${storage.project}/${path}?token=${tokenData.token}`;
+        const scope = storage.company
+            ? `${storage.app}/${storage.company}/${storage.project}`
+            : `${storage.app}/${storage.conversation}`;
+        const url = `${baseUrl}/${scope}/${path}?token=${tokenData.token}`;
         return {
             url,
             expiresAt: tokenData.expiresAt,
         };
     }
-    async handleFile(uploadInternalId, index, file) {
+    async handleFile(uploadInternalId, index, file, options) {
         if (!file)
             throw new Error('FILE_MISSING');
         /**
@@ -278,26 +286,20 @@ export class StorageService extends Immutable {
             await fs.promises.unlink(path.file);
             throw new Error('FILE_SIZE');
         }
-        // this is not correct.
-        // the idea is, the development does not work like that.
-        // needs to be reintroduced
-        // if (uploadFile.size) {
-        //
-        //   const chunkStat = await fs.promises.stat(path.file);
-        //   const existingSize = uploadFile.paths?.length
-        //     ? (await Promise.all(uploadFile.paths.map((p) => fs.promises.stat(p.path).then((s) => s.size).catch(() => 0))))
-        //       .reduce((sum, s) => sum + s, 0)
-        //     : 0;
-        //   if (existingSize + chunkStat.size > uploadFile.size) {
-        //     await fs.promises.unlink(path.file);
-        //     throw new Error('FILE_SIZE');
-        //   }
-        // }
         const updloadState = await UploadService.addPathToUpload(uploadInternalId, index, path.file);
         /**
         * if all chunks are there, complete the file and the upload
         */
         if (updloadState.chunks === updloadState.paths?.length) {
+            if (options?.maxSize) {
+                const sizes = await Promise.all((updloadState.paths ?? [])
+                    .map((single) => fs.promises.stat(single.path).then((stat) => stat.size).catch(() => 0)));
+                const total = sizes.reduce((sum, size) => sum + size, 0);
+                if (total > options.maxSize) {
+                    await this.removeUploadFiles(updloadState);
+                    throw new Error('FILE_SIZE');
+                }
+            }
             await UploadService.setState(updloadState._id, 'waiting');
             await JetStreamService.publish('actions.files.uploaded', updloadState);
         }
@@ -903,16 +905,20 @@ export class StorageService extends Immutable {
      */
     exists(filename, prefix, app, customer, list, options) {
         const query = {
-            company: options.company,
-            project: options.project,
             filename,
             prefix,
             app,
         };
+        if (options.company)
+            query.company = options.company;
+        if (options.project)
+            query.project = options.project;
         if (customer)
             query.customer = customer;
         if (list)
             query.list = list;
+        if (options.conversation)
+            query.conversation = options.conversation;
         return StorageModel.db.countDocuments(query)
             .then((exists) => exists >= 1);
     }
@@ -992,14 +998,18 @@ export class StorageService extends Immutable {
         const query = {
             filename: filenameObject.filename,
             prefix: filenameObject.directory,
-            company: options.company,
-            project: options.project,
             app,
         };
+        if (options.company)
+            query.company = options.company;
+        if (options.project)
+            query.project = options.project;
         if (customer)
             query.customer = customer;
         if (list)
             query.list = list;
+        if (options.conversation)
+            query.conversation = options.conversation;
         return StorageModel.db.findOne(query, {
             projection: { path: 1, metadata: 1 },
         });
@@ -1008,14 +1018,18 @@ export class StorageService extends Immutable {
         const query = {
             filename,
             prefix,
-            company: options.company,
-            project: options.project,
             app,
         };
+        if (options.company)
+            query.company = options.company;
+        if (options.project)
+            query.project = options.project;
         if (customer)
             query.customer = customer;
         if (list)
             query.list = list;
+        if (options.conversation)
+            query.conversation = options.conversation;
         return StorageModel.db.findOne(query);
     }
     getFilesNotInPaths(paths, app, company, project) {
@@ -1051,6 +1065,15 @@ export class StorageService extends Immutable {
         await this.delete(internalId, options.user, options.app);
         await jetstreamService.publish(`edge.${storage.app}.removed`, storage);
     }
+    async removeBlobConversation(internalId, conversation, options) {
+        const storage = await this.model.db.findOne({ _id: internalId, app: 'conversations', conversation });
+        if (!storage)
+            throw new Error('BLOB_NOT_FOUND');
+        await fs.promises.unlink(`${this.options.dataFolder}/${storage.path}`);
+        await this.removeConversationBlobVersion(internalId, conversation, options);
+        await this.delete(internalId, options.user, options.app);
+        await jetstreamService.publish(`edge.${storage.app}.removed`, storage);
+    }
     async removeBlobViaPath(storage, options) {
         if (!storage.length)
             throw new Error('BLOB_NOT_FOUND');
@@ -1071,6 +1094,16 @@ export class StorageService extends Immutable {
             }));
         }
     }
+    async removeConversationBlobVersion(parentId, conversation, options) {
+        const versions = await this.model.db.find({ parent: parentId, conversation }).toArray();
+        if (versions.length) {
+            await Promise.allSettled(versions.map(async (single) => {
+                await fs.promises.unlink(`${this.options.dataFolder}/${single.path}`);
+                await this.delete(single._id, options.user, options.app);
+                await jetstreamService.publish(`edge.${single.app}.removed`, single);
+            }));
+        }
+    }
 }
 export default new StorageService({
     dataFolder: process.env.MEDIA_FOLDERS_DATA,