@mybuildex/pkg 0.10.3 → 0.12.0

package/dist/network/plugin.js

@@ -0,0 +1,222 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.METHOD_ACTIONS = exports.ROUTE_KEY_ACTIONS = void 0;
+exports.routeTable = routeTable;
+exports.routeAction = routeAction;
+exports.createNetworkPlugin = createNetworkPlugin;
+// Plugin da governança de rede (ver context.ts e replication.ts).
+//
+// Regra (22/10/2026): sem governança, a ACL decide sozinha; com governança, a
+// ACL valida PRIMEIRO e a governança em seguida — se a rede não libera, barra
+// mesmo com a permissão da ACL. A governança nunca barra sozinha.
+//
+//   guard da rota  instalado no onRoute, DEPOIS do guard da ACL (o
+//                  useModuleAcl põe o dele na frente da lista). Resolve o
+//                  contexto da escola (cache curto). Filial: nega com 403 a
+//                  ação que a rede não libera na tabela da rota — só quando a
+//                  ACL comanda a rota (enforce). Matriz: troca request.prisma
+//                  pelo client que anota as escritas.
+//   onSend         matriz: replica nas filiais o que foi escrito, ANTES da
+//                  resposta sair (no Cloud Run a CPU é cortada depois dela).
+//
+// O guard vem antes dos preHandlers da própria rota (setRequest dos
+// controllers), que já recebem o client trocado. Registrar DEPOIS do
+// createAclPlugin e ANTES do plugin de compressão e dos módulos: o onSend
+// daqui pode trocar o corpo por um erro, e o onRoute só vale para as rotas
+// registradas depois dele.
+//
+// NETWORK_GOVERNANCE=off desliga tudo (chave de emergência, como ACL_MODE).
+const context_1 = require("./context");
+const replication_1 = require("./replication");
+const plugin_1 = require("../acl/plugin");
+const NET_GUARD = Symbol.for("@mybuildex/pkg/networkGuard");
+/** Ação da rede para cada constante do router (useModuleAcl grava em config.routeAcl.key). */
+exports.ROUTE_KEY_ACTIONS = {
+    ALL: "read",
+    FIND: "read",
+    PAGINATE: "read",
+    TRASH: "read",
+    CREATE: "add",
+    CLONE: "add",
+    CREATE_FILE: "add",
+    UPDATE: "edit",
+    UPDATE_FILE: "edit",
+    UPDATE_ITENS: "edit",
+    SAVE: "edit",
+    SYNC: "edit",
+    REMOVE: "remove",
+    RESTORE: "restore",
+    DELETE: "delete",
+};
+/** Rota sem constante conhecida: decide pelo método. */
+exports.METHOD_ACTIONS = {
+    GET: "read",
+    HEAD: "read",
+    POST: "add",
+    PUT: "edit",
+    PATCH: "edit",
+    DELETE: "delete",
+};
+const ACTION_LABELS = {
+    read: "consultar",
+    add: "incluir",
+    edit: "editar",
+    remove: "remover",
+    restore: "restaurar",
+    delete: "excluir",
+};
+/** Tabela da rota: o segmento depois de /v1/:id_school (o NAME do router). */
+function routeTable(url) {
+    const m = /^\/v1\/:id_school\/([A-Za-z0-9_]+)/.exec(String(url ?? ""));
+    return m ? m[1] : null;
+}
+function routeAction(method, key) {
+    if (key && exports.ROUTE_KEY_ACTIONS[key])
+        return exports.ROUTE_KEY_ACTIONS[key];
+    return exports.METHOD_ACTIONS[String(method).toUpperCase()] ?? null;
+}
+function defaultLogger(event, data) {
+    const severity = event.endsWith("failed") ? "ERROR" : event === "network_replicated" ? "INFO" : "WARNING";
+    const line = JSON.stringify({ severity, event, ...data });
+    if (severity === "ERROR")
+        console.error(line);
+    else if (severity === "INFO")
+        console.log(line);
+    else
+        console.warn(line);
+}
+function createNetworkPlugin(options = {}) {
+    const enabled = options.enabled ?? process.env.NETWORK_GOVERNANCE !== "off";
+    const ttlMs = options.ttlMs ?? Number(process.env.NETWORK_CACHE_TTL_MS ?? 30_000);
+    const log = options.logger ?? defaultLogger;
+    const contexts = (0, context_1.createNetworkContextCache)(Number.isFinite(ttlMs) && ttlMs >= 0 ? ttlMs : 30_000, options.load);
+    const tableMeta = (0, replication_1.createTableMetaCache)();
+    const plugin = async function networkPlugin(fastify) {
+        if (!enabled)
+            return;
+        const unavailable = (reply) => reply.code(503).send({ statusCode: 503, error: "Service Unavailable", message: "Não foi possível validar as regras da rede de escolas. Tente novamente." });
+        const guard = async function networkGuard(request, reply) {
+            const idSchool = request.id_school;
+            if (!idSchool || !request.prisma || request.networkPending)
+                return;
+            const url = request.routeOptions?.url;
+            const table = routeTable(url);
+            // rota sem escola na URL (documentação, audit/archive, templates)
+            if (!table)
+                return;
+            // a governança só barra junto com a ACL (que já validou: o guard
+            // dela roda antes deste)
+            const withAcl = (0, plugin_1.aclEnforces)(request);
+            let ctx;
+            try {
+                ctx = await contexts.get(request.prisma, String(idSchool));
+            }
+            catch (e) {
+                // a escola É de rede (a flag foi lida) e o core não respondeu
+                const stale = contexts.stale(request.prisma, String(idSchool));
+                log("network_context_failed", { id_school: idSchool, route: url, table, stale: !!stale, error: e?.message ?? String(e) });
+                if (stale && !stale.moduleOf.has(table)) {
+                    // tabela fora do catálogo (último catálogo conhecido): sem
+                    // governança, a ACL decide sozinha
+                    ctx = stale;
+                }
+                else if (!withAcl) {
+                    // a governança não barra sozinha
+                    return;
+                }
+                else {
+                    // tabela governada (ou catálogo nunca carregado): sem as
+                    // regras não dá para liberar (fail-closed)
+                    return unavailable(reply);
+                }
+            }
+            request.network = ctx;
+            if (ctx.role === "filial") {
+                if (!withAcl)
+                    return;
+                const key = request.routeOptions?.config?.routeAcl?.key;
+                const action = routeAction(request.method, key);
+                if (action && !(0, context_1.networkAllows)(ctx, table, action)) {
+                    request.networkDenied = true;
+                    log("network_denied", {
+                        id_school: idSchool, id_network: ctx.idNetwork, method: request.method, route: url,
+                        table, action, uid: request.user_id ?? request.user?.uid,
+                    });
+                    return reply.code(403).send({
+                        statusCode: 403,
+                        error: "Forbidden",
+                        message: `A governança da rede não permite ${ACTION_LABELS[action]} ${table} nesta escola. Alterações são feitas pela escola matriz.`,
+                    });
+                }
+                return;
+            }
+            // matriz: a réplica não barra ninguém, só mantém as filiais iguais
+            // à matriz — vale mesmo com a ACL fora do enforce
+            if (ctx.role === "matriz" && ctx.filiais.length > 0 && ctx.moduleOf.size > 0) {
+                const base = request.prisma;
+                const writes = new replication_1.NetworkWrites();
+                const pending = { ctx, base, writes };
+                request.networkPending = pending;
+                request.prisma = (0, replication_1.trackWrites)(base, {
+                    tables: new Set(ctx.moduleOf.keys()),
+                    base,
+                    writes,
+                    meta: (t) => tableMeta(base, String(base.$schema), t),
+                });
+            }
+        };
+        guard[NET_GUARD] = true;
+        // Na frente dos preHandlers da rota. O useModuleAcl (onRoute do
+        // controller, roda depois deste) põe o guard da ACL na frente de tudo:
+        // a ordem final é ACL -> rede -> preHandlers da rota.
+        fastify.addHook("onRoute", (routeOptions) => {
+            const existing = routeOptions.preHandler;
+            const list = existing == null ? [] : Array.isArray(existing) ? existing : [existing];
+            // HEAD automático do GET herda a lista já montada: não duplica
+            if (list.some((fn) => fn?.[NET_GUARD]))
+                return;
+            routeOptions.preHandler = [guard, ...list];
+        });
+        fastify.addHook("onSend", async (request, reply, payload) => {
+            const pending = request.networkPending;
+            if (!pending || pending.writes.empty)
+                return payload;
+            request.networkPending = undefined;
+            const { ctx, base, writes } = pending;
+            const source = String(base.$schema);
+            try {
+                const result = await (0, replication_1.syncWrites)({
+                    db: base,
+                    base,
+                    source,
+                    targets: ctx.filiais.map(id => (0, context_1.schoolDatabaseOf)(source, id)),
+                    writes,
+                    meta: (t) => tableMeta(base, source, t),
+                });
+                log("network_replicated", {
+                    id_school: ctx.idSchool, id_network: ctx.idNetwork, route: request.routeOptions?.url,
+                    filiais: ctx.filiais, tables: result.tables, statements: result.statements,
+                });
+                return payload;
+            }
+            catch (e) {
+                log("network_replication_failed", {
+                    id_school: ctx.idSchool, id_network: ctx.idNetwork, route: request.routeOptions?.url,
+                    filiais: ctx.filiais, tables: writes.tables, error: e?.message ?? String(e),
+                });
+                // resposta de erro original fica como está; sucesso vira erro:
+                // a matriz gravou, mas as filiais não (a réplica é atômica)
+                if (reply.statusCode >= 400)
+                    return payload;
+                reply.code(500);
+                reply.header("content-type", "application/json; charset=utf-8");
+                return JSON.stringify({
+                    statusCode: 500,
+                    message: `Salvo na escola matriz, mas a replicação para as escolas da rede (${ctx.filiais.join(", ")}) falhou e nenhuma delas foi alterada: ${e?.message ?? e}`,
+                });
+            }
+        });
+    };
+    return Object.assign(plugin, { clearCache: () => contexts.clear() });
+}
+//# sourceMappingURL=plugin.js.map

package/dist/network/plugin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin.js","sourceRoot":"","sources":["../../src/network/plugin.ts"],"names":[],"mappings":";;;AA0EA,gCAGC;AAED,kCAGC;AA2BD,kDAmIC;AAhPD,kEAAkE;AAClE,EAAE;AACF,8EAA8E;AAC9E,8EAA8E;AAC9E,kEAAkE;AAClE,EAAE;AACF,mEAAmE;AACnE,0EAA0E;AAC1E,4EAA4E;AAC5E,8EAA8E;AAC9E,8EAA8E;AAC9E,sDAAsD;AACtD,2EAA2E;AAC3E,6EAA6E;AAC7E,EAAE;AACF,oEAAoE;AACpE,qEAAqE;AACrE,0EAA0E;AAC1E,2EAA2E;AAC3E,2BAA2B;AAC3B,EAAE;AACF,4EAA4E;AAC5E,uCAOmB;AACnB,+CAA2F;AAC3F,0CAA0C;AAE1C,MAAM,SAAS,GAAG,MAAM,CAAC,GAAG,CAAC,6BAA6B,CAAC,CAAC;AAE5D,8FAA8F;AACjF,QAAA,iBAAiB,GAA4C;IACtE,GAAG,EAAE,MAAM;IACX,IAAI,EAAE,MAAM;IACZ,QAAQ,EAAE,MAAM;IAChB,KAAK,EAAE,MAAM;IACb,MAAM,EAAE,KAAK;IACb,KAAK,EAAE,KAAK;IACZ,WAAW,EAAE,KAAK;IAClB,MAAM,EAAE,MAAM;IACd,WAAW,EAAE,MAAM;IACnB,YAAY,EAAE,MAAM;IACpB,IAAI,EAAE,MAAM;IACZ,IAAI,EAAE,MAAM;IACZ,MAAM,EAAE,QAAQ;IAChB,OAAO,EAAE,SAAS;IAClB,MAAM,EAAE,QAAQ;CACnB,CAAC;AAEF,wDAAwD;AAC3C,QAAA,cAAc,GAA4C;IACnE,GAAG,EAAE,MAAM;IACX,IAAI,EAAE,MAAM;IACZ,IAAI,EAAE,KAAK;IACX,GAAG,EAAE,MAAM;IACX,KAAK,EAAE,MAAM;IACb,MAAM,EAAE,QAAQ;CACnB,CAAC;AAEF,MAAM,aAAa,GAAkC;IACjD,IAAI,EAAE,WAAW;IACjB,GAAG,EAAE,SAAS;IACd,IAAI,EAAE,QAAQ;IACd,MAAM,EAAE,SAAS;IACjB,OAAO,EAAE,WAAW;IACpB,MAAM,EAAE,SAAS;CACpB,CAAC;AAEF,8EAA8E;AAC9E,SAAgB,UAAU,CAAC,GAAuB;IAC9C,MAAM,CAAC,GAAG,oCAAoC,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,CAAC;IACvE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAC3B,CAAC;AAED,SAAgB,WAAW,CAAC,MAAc,EAAE,GAAuB;IAC/D,IAAI,GAAG,IAAI,yBAAiB,CAAC,GAAG,CAAC;QAAE,OAAO,yBAAiB,CAAC,GAAG,CAAC,CAAC;IACjE,OAAO,sBAAc,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,CAAC,IAAI,IAAI,CAAC;AAChE,CAAC;AAaD,SAAS,aAAa,CAAC,KAAa,EAAE,IAA6B;IAC/D,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,KAAK,oBAAoB,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;IAC1G,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,EAAC,QAAQ,EAAE,KAAK,EAAE,GAAG,IAAI,EAAC,CAAC,CAAC;IACxD,IAAI,QAAQ,KAAK,OAAO;QAAE,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;SACzC,IAAI,QAAQ,KAAK,MAAM;QAAE,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;;QAC3C,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC5B,CAAC;AAQD,SAAgB,mBAAmB,CAAC,UAAgC,EAAE;IAClE,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,GAAG,CAAC,kBAAkB,KAAK,KAAK,CAAC;IAC5E,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,MAAM,CAAC,CAAC;IAClF,MAAM,GAAG,GAAG,OAAO,CAAC,MAAM,IAAI,aAAa,CAAC;IAC5C,MAAM,QAAQ,GAAG,IAAA,mCAAyB,EAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;IAChH,MAAM,SAAS,GAAG,IAAA,kCAAoB,GAAE,CAAC;IAEzC,MAAM,MAAM,GAAG,KAAK,UAAU,aAAa,CAAC,OAAY;QACpD,IAAI,CAAC,OAAO;YAAE,OAAO;QAErB,MAAM,WAAW,GAAG,CAAC,KAAU,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAC,UAAU,EAAE,GAAG,EAAE,KAAK,EAAE,qBAAqB,EAAE,OAAO,EAAE,yEAAyE,EAAC,CAAC,CAAC;QAE9L,MAAM,KAAK,GAAG,KAAK,UAAU,YAAY,CAAC,OAAY,EAAE,KAAU;YAC9D,MAAM,QAAQ,GAAG,OAAO,CAAC,SAAS,CAAC;YACnC,IAAI,CAAC,QAAQ,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,cAAc;gBAAE,OAAO;YACnE,MAAM,GAAG,GAAG,OAAO,CAAC,YAAY,EAAE,GAAG,CAAC;YACtC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;YAC9B,kEAAkE;YAClE,IAAI,CAAC,KAAK;gBAAE,OAAO;YACnB,iEAAiE;YACjE,yBAAyB;YACzB,MAAM,OAAO,GAAG,IAAA,oBAAW,EAAC,OAAO,CAAC,CAAC;YAErC,IAAI,GAAmB,CAAC;YACxB,IAAI,CAAC;gBACD,GAAG,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;YAC/D,CAAC;YAAC,OAAO,CAAM,EAAE,CAAC;gBACd,8DAA8D;gBAC9D,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;gBAC/D,GAAG,CAAC,wBAAwB,EAAE,EAAC,SAAS,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,IAAI,MAAM,CAAC,CAAC,CAAC,EAAC,CAAC,CAAC;gBACxH,IAAI,KAAK,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;oBACtC,2DAA2D;oBAC3D,mCAAmC;oBACnC,GAAG,GAAG,KAAK,CAAC;gBAChB,CAAC;qBAAM,IAAI,CAAC,OAAO,EAAE,CAAC;oBAClB,iCAAiC;oBACjC,OAAO;gBACX,CAAC;qBAAM,CAAC;oBACJ,yDAAyD;oBACzD,2CAA2C;oBAC3C,OAAO,WAAW,CAAC,KAAK,CAAC,CAAC;gBAC9B,CAAC;YACL,CAAC;YACD,OAAO,CAAC,OAAO,GAAG,GAAG,CAAC;YAEtB,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACxB,IAAI,CAAC,OAAO;oBAAE,OAAO;gBACrB,MAAM,GAAG,GAAG,OAAO,CAAC,YAAY,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,CAAC;gBACxD,MAAM,MAAM,GAAG,WAAW,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;gBAChD,IAAI,MAAM,IAAI,CAAC,IAAA,uBAAa,EAAC,GAAG,EAAE,KAAK,EAAE,MAAM,CAAC,EAAE,CAAC;oBAC/C,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC;oBAC7B,GAAG,CAAC,gBAAgB,EAAE;wBAClB,SAAS,EAAE,QAAQ,EAAE,UAAU,EAAE,GAAG,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,KAAK,EAAE,GAAG;wBAClF,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,IAAI,EAAE,GAAG;qBAC3D,CAAC,CAAC;oBACH,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;wBACxB,UAAU,EAAE,GAAG;wBACf,KAAK,EAAE,WAAW;wBAClB,OAAO,EAAE,oCAAoC,aAAa,CAAC,MAAM,CAAC,IAAI,KAAK,0DAA0D;qBACxI,CAAC,CAAC;gBACP,CAAC;gBACD,OAAO;YACX,CAAC;YAED,mEAAmE;YACnE,kDAAkD;YAClD,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ,IAAI,GAAG,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;gBAC3E,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC;gBAC5B,MAAM,MAAM,GAAG,IAAI,2BAAa,EAAE,CAAC;gBACnC,MAAM,OAAO,GAAuB,EAAC,GAAG,EAAE,IAAI,EAAE,MAAM,EAAC,CAAC;gBACxD,OAAO,CAAC,cAAc,GAAG,OAAO,CAAC;gBACjC,OAAO,CAAC,MAAM,GAAG,IAAA,yBAAW,EAAC,IAAI,EAAE;oBAC/B,MAAM,EAAE,IAAI,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;oBACpC,IAAI;oBACJ,MAAM;oBACN,IAAI,EAAE,CAAC,CAAS,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;iBAChE,CAAC,CAAC;YACP,CAAC;QACL,CAAC,CAAC;QACD,KAAa,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC;QAEjC,gEAAgE;QAChE,uEAAuE;QACvE,sDAAsD;QACtD,OAAO,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC,YAAiB,EAAE,EAAE;YAC7C,MAAM,QAAQ,GAAG,YAAY,CAAC,UAAU,CAAC;YACzC,MAAM,IAAI,GAAG,QAAQ,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;YACrF,+DAA+D;YAC/D,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,EAAO,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC;gBAAE,OAAO;YACpD,YAAY,CAAC,UAAU,GAAG,CAAC,KAAK,EAAE,GAAG,IAAI,CAAC,CAAC;QAC/C,CAAC,CAAC,CAAC;QAEH,OAAO,CAAC,OAAO,CAAC,QAAQ,EAAE,KAAK,EAAE,OAAY,EAAE,KAAU,EAAE,OAAY,EAAE,EAAE;YACvE,MAAM,OAAO,GAAmC,OAAO,CAAC,cAAc,CAAC;YACvE,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,MAAM,CAAC,KAAK;gBAAE,OAAO,OAAO,CAAC;YACrD,OAAO,CAAC,cAAc,GAAG,SAAS,CAAC;YACnC,MAAM,EAAC,GAAG,EAAE,IAAI,EAAE,MAAM,EAAC,GAAG,OAAO,CAAC;YACpC,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACpC,IAAI,CAAC;gBACD,MAAM,MAAM,GAAG,MAAM,IAAA,wBAAU,EAAC;oBAC5B,EAAE,EAAE,IAAI;oBACR,IAAI;oBACJ,MAAM;oBACN,OAAO,EAAE,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,IAAA,0BAAgB,EAAC,MAAM,EAAE,EAAE,CAAC,CAAC;oBAC5D,MAAM;oBACN,IAAI,EAAE,CAAC,CAAS,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;iBAClD,CAAC,CAAC;gBACH,GAAG,CAAC,oBAAoB,EAAE;oBACtB,SAAS,EAAE,GAAG,CAAC,QAAQ,EAAE,UAAU,EAAE,GAAG,CAAC,SAAS,EAAE,KAAK,EAAE,OAAO,CAAC,YAAY,EAAE,GAAG;oBACpF,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU;iBAC7E,CAAC,CAAC;gBACH,OAAO,OAAO,CAAC;YACnB,CAAC;YAAC,OAAO,CAAM,EAAE,CAAC;gBACd,GAAG,CAAC,4BAA4B,EAAE;oBAC9B,SAAS,EAAE,GAAG,CAAC,QAAQ,EAAE,UAAU,EAAE,GAAG,CAAC,SAAS,EAAE,KAAK,EAAE,OAAO,CAAC,YAAY,EAAE,GAAG;oBACpF,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,IAAI,MAAM,CAAC,CAAC,CAAC;iBAC9E,CAAC,CAAC;gBACH,+DAA+D;gBAC/D,4DAA4D;gBAC5D,IAAI,KAAK,CAAC,UAAU,IAAI,GAAG;oBAAE,OAAO,OAAO,CAAC;gBAC5C,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBAChB,KAAK,CAAC,MAAM,CAAC,cAAc,EAAE,iCAAiC,CAAC,CAAC;gBAChE,OAAO,IAAI,CAAC,SAAS,CAAC;oBAClB,UAAU,EAAE,GAAG;oBACf,OAAO,EAAE,qEAAqE,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,0CAA0C,CAAC,EAAE,OAAO,IAAI,CAAC,EAAE;iBAClK,CAAC,CAAC;YACP,CAAC;QACL,CAAC,CAAC,CAAC;IACP,CAAC,CAAC;IAEF,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,EAAC,UAAU,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,KAAK,EAAE,EAAC,CAAC,CAAC;AACvE,CAAC"}

package/dist/network/replication.d.ts

@@ -0,0 +1,86 @@
+/** Escritas do Prisma que a réplica acompanha (as mesmas da auditoria). */
+export declare const NETWORK_WRITE_OPERATIONS: Set<string>;
+/** Tabelas nunca replicadas, mesmo no catálogo. */
+export declare const NEVER_REPLICATED: Set<string>;
+/**
+ * Linhas que pertencem a cada escola e nunca são copiadas nem apagadas pela
+ * réplica: a flag REDE é gravada pelo core em cada membro.
+ */
+export declare const PROTECTED_ROWS: Readonly<Record<string, {
+    column: string;
+    value: string;
+}>>;
+/** Teto de linhas por escrita *Many acompanhada. */
+export declare const MAX_TRACKED_ROWS = 5000;
+export interface TableMeta {
+    /** Colunas graváveis (sem as GENERATED), na ordem da tabela. */
+    columns: string[];
+    /** Chave primária. */
+    pk: string[];
+}
+type Row = Record<string, any>;
+/**
+ * Colunas e chave primária da tabela (information_schema). As tabelas são as
+ * mesmas em todas as escolas: cache por tabela, para a vida da instância.
+ */
+export declare function createTableMetaCache(): (db: any, schema: string, table: string) => Promise<TableMeta>;
+/**
+ * where do Prisma -> where de findMany: chave única composta
+ * (`{a_b: {a, b}}`) vira `{a, b}`; o resto passa igual.
+ */
+export declare function flattenWhere(where: Row | undefined, meta: TableMeta): Row;
+/** Linhas tocadas pela request na matriz, por tabela, na ordem da primeira escrita. */
+export declare class NetworkWrites {
+    readonly tables: string[];
+    readonly keys: Map<string, Map<string, Row>>;
+    readonly lookups: Map<string, Row[]>;
+    private touch;
+    addKey(table: string, key: Row, pk: string[]): void;
+    addLookup(table: string, where: Row): void;
+    get empty(): boolean;
+}
+export interface TrackOptions {
+    /** Tabelas replicadas (catálogo da rede). */
+    tables: ReadonlySet<string>;
+    /** Client SEM o proxy, do mesmo schema: lê as chaves antes da escrita. */
+    base: any;
+    meta: (table: string) => Promise<TableMeta>;
+    writes: NetworkWrites;
+}
+/**
+ * Client da matriz que anota as escritas nas tabelas replicadas. Leitura, SQL
+ * cru e tabelas fora do catálogo passam direto. $transaction interativa
+ * recebe um tx também acompanhado.
+ */
+export declare function trackWrites<T extends object>(client: T, opts: TrackOptions): T;
+export interface SyncStatement {
+    sql: string;
+    params: any[];
+}
+/**
+ * SQL que deixa as linhas `keys` de `table` na filial iguais às da matriz:
+ * apaga as que sumiram da matriz e insere/atualiza as demais com o mesmo id.
+ */
+export declare function buildSyncStatements(source: string, target: string, table: string, meta: TableMeta, keys: Row[]): {
+    deletes: SyncStatement[];
+    upserts: SyncStatement[];
+};
+export interface SyncResult {
+    tables: Record<string, number>;
+    filiais: string[];
+    statements: number;
+}
+/**
+ * Copia para cada filial as linhas anotadas em `writes`, numa transação só.
+ * `db` executa o SQL (qualquer client do pool serve: todo nome é qualificado)
+ * e `base` reencontra as linhas do createMany na matriz.
+ */
+export declare function syncWrites(input: {
+    db: any;
+    base: any;
+    source: string;
+    targets: string[];
+    writes: NetworkWrites;
+    meta: (table: string) => Promise<TableMeta>;
+}): Promise<SyncResult>;
+export {};

package/dist/network/replication.js

@@ -0,0 +1,328 @@
+"use strict";
+// Replicação matriz -> filiais (governança de rede; ver context.ts).
+//
+// Tudo o que a MATRIZ grava numa tabela do catálogo de módulos da rede é
+// espelhado nas filiais — os bancos das escolas têm as mesmas tabelas. Em vez
+// de repetir cada operação do Prisma em cada filial (ids divergiriam, e
+// update/delete por id acertariam a linha errada), a réplica copia o ESTADO
+// final das linhas tocadas, pela chave primária:
+//
+//   1. durante a request, o client da matriz (proxy de trackWrites) anota a
+//      chave de cada linha escrita: pelo resultado (create/update/upsert/
+//      delete), por uma leitura antes da escrita (where de update/delete e
+//      das variantes *Many) ou, no createMany (o MySQL não devolve os ids),
+//      por uma busca depois com os mesmos valores gravados;
+//   2. no fim da request (onSend, ANTES da resposta sair), syncWrites roda numa
+//      ÚNICA transação, para cada filial:
+//        DELETE das linhas que não existem mais na matriz
+//        INSERT ... SELECT da matriz ... ON DUPLICATE KEY UPDATE
+//      com o mesmo id da matriz. Falha em qualquer filial desfaz a réplica em
+//      todas (a escrita na matriz já foi gravada).
+//
+// Por copiar o estado (e não a operação), a réplica é idempotente e também
+// cobre escrita dentro de $transaction (o estado lido já é o confirmado).
+//
+// Limitações: SQL cru ($executeRaw) na matriz não é capturado; escrita
+// aninhada em relação (data: {filhos: {create}}) só replica a tabela do model
+// chamado.
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.NetworkWrites = exports.MAX_TRACKED_ROWS = exports.PROTECTED_ROWS = exports.NEVER_REPLICATED = exports.NETWORK_WRITE_OPERATIONS = void 0;
+exports.createTableMetaCache = createTableMetaCache;
+exports.flattenWhere = flattenWhere;
+exports.trackWrites = trackWrites;
+exports.buildSyncStatements = buildSyncStatements;
+exports.syncWrites = syncWrites;
+/** Escritas do Prisma que a réplica acompanha (as mesmas da auditoria). */
+exports.NETWORK_WRITE_OPERATIONS = new Set([
+    "create", "createMany", "createManyAndReturn",
+    "update", "updateMany", "updateManyAndReturn",
+    "upsert", "delete", "deleteMany",
+]);
+/** Leitura da chave antes de escrever (where de update/delete/upsert/*Many). */
+const READ_KEYS_BEFORE = new Set(["update", "updateMany", "updateManyAndReturn", "upsert", "delete", "deleteMany"]);
+/** Tabelas nunca replicadas, mesmo no catálogo. */
+exports.NEVER_REPLICATED = new Set(["audit_logs", "migrations"]);
+/**
+ * Linhas que pertencem a cada escola e nunca são copiadas nem apagadas pela
+ * réplica: a flag REDE é gravada pelo core em cada membro.
+ */
+exports.PROTECTED_ROWS = {
+    configs: { column: "key", value: "REDE" },
+};
+/** Teto de linhas por escrita *Many acompanhada. */
+exports.MAX_TRACKED_ROWS = 5000;
+const CHUNK = 500;
+const IDENT_RE = /^[A-Za-z0-9_]+$/;
+function q(ident) {
+    if (!IDENT_RE.test(ident))
+        throw new Error(`identificador inválido: ${ident}`);
+    return `\`${ident}\``;
+}
+function isPlainObject(v) {
+    return !!v && typeof v === "object" && !Array.isArray(v) && !(v instanceof Date) && Object.getPrototypeOf(v) === Object.prototype;
+}
+function isPrimitive(v) {
+    return v === null || ["string", "number", "bigint", "boolean"].includes(typeof v);
+}
+/**
+ * Colunas e chave primária da tabela (information_schema). As tabelas são as
+ * mesmas em todas as escolas: cache por tabela, para a vida da instância.
+ */
+function createTableMetaCache() {
+    const cache = new Map();
+    return function tableMeta(db, schema, table) {
+        let hit = cache.get(table);
+        if (!hit) {
+            hit = (async () => {
+                const rows = await db.$queryRawUnsafe("SELECT COLUMN_NAME AS name, COLUMN_KEY AS col_key, EXTRA AS extra FROM information_schema.COLUMNS" +
+                    " WHERE TABLE_SCHEMA = ? AND TABLE_NAME = ? ORDER BY ORDINAL_POSITION", schema, table);
+                const columns = rows.filter(r => !/GENERATED/i.test(String(r.extra ?? ""))).map(r => String(r.name));
+                const pk = rows.filter(r => String(r.col_key) === "PRI").map(r => String(r.name));
+                if (!columns.length)
+                    throw new Error(`tabela ${schema}.${table} não encontrada`);
+                if (!pk.length)
+                    throw new Error(`tabela ${table} sem chave primária: não dá para replicar`);
+                return { columns, pk };
+            })();
+            cache.set(table, hit);
+            hit.catch(() => cache.delete(table));
+        }
+        return hit;
+    };
+}
+function keyOf(row, pk) {
+    if (!row || typeof row !== "object")
+        return null;
+    const key = {};
+    for (const c of pk) {
+        const v = row[c];
+        if (v === undefined || v === null || typeof v === "object")
+            return null;
+        key[c] = v;
+    }
+    return key;
+}
+function keyString(key, pk) {
+    return pk.map(c => String(key[c])).join("\u0000");
+}
+/**
+ * where do Prisma -> where de findMany: chave única composta
+ * (`{a_b: {a, b}}`) vira `{a, b}`; o resto passa igual.
+ */
+function flattenWhere(where, meta) {
+    const out = {};
+    for (const [k, v] of Object.entries(where ?? {})) {
+        if (!meta.columns.includes(k) && isPlainObject(v) && Object.keys(v).length > 0 && Object.keys(v).every(c => meta.columns.includes(c))) {
+            Object.assign(out, v);
+        }
+        else {
+            out[k] = v;
+        }
+    }
+    return out;
+}
+/** Valores simples gravados numa linha (para reencontrá-la depois do createMany). */
+function lookupWhere(data, meta) {
+    const where = {};
+    for (const [k, v] of Object.entries(data ?? {})) {
+        if (meta.columns.includes(k) && isPrimitive(v))
+            where[k] = v;
+    }
+    return Object.keys(where).length ? where : null;
+}
+/** Linhas tocadas pela request na matriz, por tabela, na ordem da primeira escrita. */
+class NetworkWrites {
+    tables = [];
+    keys = new Map();
+    lookups = new Map();
+    touch(table) {
+        if (!this.keys.has(table)) {
+            this.tables.push(table);
+            this.keys.set(table, new Map());
+            this.lookups.set(table, []);
+        }
+    }
+    addKey(table, key, pk) {
+        this.touch(table);
+        this.keys.get(table).set(keyString(key, pk), key);
+    }
+    addLookup(table, where) {
+        this.touch(table);
+        this.lookups.get(table).push(where);
+    }
+    get empty() {
+        return this.tables.length === 0;
+    }
+}
+exports.NetworkWrites = NetworkWrites;
+async function trackOperation(table, op, args, run, opts) {
+    const meta = await opts.meta(table);
+    const { writes, base } = opts;
+    if (READ_KEYS_BEFORE.has(op)) {
+        const where = flattenWhere(args?.where, meta);
+        const select = Object.fromEntries(meta.pk.map(c => [c, true]));
+        const before = await base[table].findMany({ where, select, take: exports.MAX_TRACKED_ROWS });
+        for (const row of before) {
+            const key = keyOf(row, meta.pk);
+            if (key)
+                writes.addKey(table, key, meta.pk);
+        }
+    }
+    const result = await run(args);
+    // *Many devolve {count}: sem a chave, keyOf descarta
+    const rows = Array.isArray(result) ? result : result && typeof result === "object" ? [result] : [];
+    let found = false;
+    for (const row of rows) {
+        const key = keyOf(row, meta.pk);
+        if (key) {
+            writes.addKey(table, key, meta.pk);
+            found = true;
+        }
+    }
+    if (!found && (op === "create" || op === "createMany")) {
+        // createMany não devolve linhas; create com select sem a chave também não
+        const list = op === "create" ? [args?.data] : Array.isArray(args?.data) ? args.data : [args?.data];
+        for (const data of list) {
+            const key = keyOf(data, meta.pk);
+            if (key) {
+                writes.addKey(table, key, meta.pk);
+                continue;
+            }
+            const where = lookupWhere(data, meta);
+            if (where)
+                writes.addLookup(table, where);
+        }
+    }
+    return result;
+}
+function bindValue(target, prop) {
+    const v = Reflect.get(target, prop);
+    return typeof v === "function" ? v.bind(target) : v;
+}
+function trackDelegate(delegate, table, opts) {
+    return new Proxy(delegate, {
+        get(target, prop) {
+            const fn = bindValue(target, prop);
+            if (typeof prop !== "string" || typeof fn !== "function" || !exports.NETWORK_WRITE_OPERATIONS.has(prop))
+                return fn;
+            return (args) => trackOperation(table, prop, args, fn, opts);
+        },
+    });
+}
+/**
+ * Client da matriz que anota as escritas nas tabelas replicadas. Leitura, SQL
+ * cru e tabelas fora do catálogo passam direto. $transaction interativa
+ * recebe um tx também acompanhado.
+ */
+function trackWrites(client, opts) {
+    return new Proxy(client, {
+        get(target, prop) {
+            if (prop === "$transaction") {
+                const tx = bindValue(target, prop);
+                return (arg, txOptions) => typeof arg === "function"
+                    ? tx((inner) => arg(trackWrites(inner, opts)), txOptions)
+                    : tx(arg, txOptions);
+            }
+            if (typeof prop === "string" && opts.tables.has(prop) && !exports.NEVER_REPLICATED.has(prop)) {
+                return trackDelegate(Reflect.get(target, prop), prop, opts);
+            }
+            return bindValue(target, prop);
+        },
+    });
+}
+function keyCondition(alias, pk, keys) {
+    if (pk.length === 1) {
+        return { sql: `${alias}.${q(pk[0])} IN (${keys.map(() => "?").join(", ")})`, params: keys.map(k => k[pk[0]]) };
+    }
+    const tuple = `(${pk.map(() => "?").join(", ")})`;
+    return {
+        sql: `(${pk.map(c => `${alias}.${q(c)}`).join(", ")}) IN (${keys.map(() => tuple).join(", ")})`,
+        params: keys.flatMap(k => pk.map(c => k[c])),
+    };
+}
+function samePk(a, b, pk) {
+    return pk.map(c => `${a}.${q(c)} = ${b}.${q(c)}`).join(" AND ");
+}
+/**
+ * SQL que deixa as linhas `keys` de `table` na filial iguais às da matriz:
+ * apaga as que sumiram da matriz e insere/atualiza as demais com o mesmo id.
+ */
+function buildSyncStatements(source, target, table, meta, keys) {
+    const src = `${q(source)}.${q(table)}`;
+    const dst = `${q(target)}.${q(table)}`;
+    const cols = meta.columns.map(q);
+    const update = meta.columns.filter(c => !meta.pk.includes(c)).map(c => `${q(c)} = VALUES(${q(c)})`);
+    const guard = exports.PROTECTED_ROWS[table];
+    const deletes = [];
+    const upserts = [];
+    for (let i = 0; i < keys.length; i += CHUNK) {
+        const chunk = keys.slice(i, i + CHUNK);
+        const dk = keyCondition("dst", meta.pk, chunk);
+        // DELETE de tabela única com alias (MySQL 8.0.16+): o multi-tabela
+        // (`DELETE dst FROM ... AS dst`) exige database default, e o pool não tem
+        const del = {
+            sql: `DELETE FROM ${dst} AS dst WHERE ${dk.sql}` +
+                (guard ? ` AND NOT (dst.${q(guard.column)} <=> ?)` : "") +
+                ` AND NOT EXISTS (SELECT 1 FROM ${src} AS src WHERE ${samePk("src", "dst", meta.pk)})`,
+            params: [...dk.params, ...(guard ? [guard.value] : [])],
+        };
+        deletes.push(del);
+        const sk = keyCondition("src", meta.pk, chunk);
+        const head = update.length ? `INSERT INTO ${dst}` : `INSERT IGNORE INTO ${dst}`;
+        upserts.push({
+            sql: `${head} (${cols.join(", ")}) SELECT ${cols.map(c => `src.${c}`).join(", ")} FROM ${src} AS src WHERE ${sk.sql}` +
+                (guard
+                    ? ` AND NOT (src.${q(guard.column)} <=> ?)` +
+                        ` AND NOT EXISTS (SELECT 1 FROM ${dst} AS cur WHERE ${samePk("cur", "src", meta.pk)} AND cur.${q(guard.column)} <=> ?)`
+                    : "") +
+                (update.length ? ` ON DUPLICATE KEY UPDATE ${update.join(", ")}` : ""),
+            params: [...sk.params, ...(guard ? [guard.value, guard.value] : [])],
+        });
+    }
+    return { deletes, upserts };
+}
+/**
+ * Copia para cada filial as linhas anotadas em `writes`, numa transação só.
+ * `db` executa o SQL (qualquer client do pool serve: todo nome é qualificado)
+ * e `base` reencontra as linhas do createMany na matriz.
+ */
+async function syncWrites(input) {
+    const { db, base, source, targets, writes, meta } = input;
+    const result = { tables: {}, filiais: targets, statements: 0 };
+    const perTable = [];
+    for (const table of writes.tables) {
+        const m = await meta(table);
+        const lookups = writes.lookups.get(table) ?? [];
+        for (let i = 0; i < lookups.length; i += CHUNK) {
+            const select = Object.fromEntries(m.pk.map(c => [c, true]));
+            const found = await base[table].findMany({ where: { OR: lookups.slice(i, i + CHUNK) }, select, take: exports.MAX_TRACKED_ROWS });
+            for (const row of found) {
+                const key = keyOf(row, m.pk);
+                if (key)
+                    writes.addKey(table, key, m.pk);
+            }
+        }
+        const keys = [...(writes.keys.get(table)?.values() ?? [])];
+        if (keys.length)
+            perTable.push({ table, meta: m, keys });
+        result.tables[table] = keys.length;
+    }
+    if (!perTable.length || !targets.length)
+        return result;
+    const statements = [];
+    for (const target of targets) {
+        const built = perTable.map(t => buildSyncStatements(source, target, t.table, t.meta, t.keys));
+        // filhos antes dos pais ao apagar; pais antes dos filhos ao inserir (FKs)
+        for (const b of [...built].reverse())
+            statements.push(...b.deletes);
+        for (const b of built)
+            statements.push(...b.upserts);
+    }
+    await db.$transaction(async (tx) => {
+        for (const s of statements)
+            await tx.$executeRawUnsafe(s.sql, ...s.params);
+    });
+    result.statements = statements.length;
+    return result;
+}
+//# sourceMappingURL=replication.js.map