@objectstack/core 12.5.0 → 13.0.0

package/dist/index.cjs

@@ -54,6 +54,7 @@ __export(index_exports, {
   SemanticVersionManager: () => SemanticVersionManager,
   ServiceLifecycle: () => ServiceLifecycle,
   buildPermissionsFromGrants: () => buildPermissionsFromGrants,
+  bulkWrite: () => bulkWrite,
   calendarPartsInTz: () => calendarPartsInTz,
   calendarPartsInTzOrUtc: () => calendarPartsInTzOrUtc,
   counterSignPayload: () => counterSignPayload,
@@ -67,6 +68,7 @@ __export(index_exports, {
   createPluginConfigValidator: () => createPluginConfigValidator,
   createPluginPermissionEnforcer: () => createPluginPermissionEnforcer,
   deepMerge: () => deepMerge,
+  defaultIsTransientError: () => defaultIsTransientError,
   evaluateAuthGate: () => evaluateAuthGate,
   extractApiKey: () => extractApiKey,
   generateApiKey: () => generateApiKey,
@@ -90,7 +92,8 @@ __export(index_exports, {
   verifyPlatformSignature: () => verifyPlatformSignature,
   verifyPluginArtifact: () => verifyPluginArtifact,
   verifyPublisherSignature: () => verifyPublisherSignature,
-  wireAuthoredTranslationSync: () => wireAuthoredTranslationSync
+  wireAuthoredTranslationSync: () => wireAuthoredTranslationSync,
+  withTransientRetry: () => withTransientRetry
 });
 module.exports = __toCommonJS(index_exports);
 
@@ -4232,7 +4235,7 @@ async function tryFind(ql, object, where, limit = 100) {
 async function resolveAuthzContext(input) {
   const { ql, headers } = input;
   const ctx = {
-    roles: [],
+    positions: [],
     permissions: [],
     systemPermissions: [],
     org_user_ids: []
@@ -4281,16 +4284,16 @@ async function resolveAuthzContext(input) {
     if (m.role && typeof m.role === "string") {
       for (const raw of m.role.split(",").map((s) => s.trim()).filter(Boolean)) {
         const r = (0, import_spec.mapMembershipRole)(raw);
-        if (!ctx.roles.includes(r)) ctx.roles.push(r);
+        if (!ctx.positions.includes(r)) ctx.positions.push(r);
       }
     }
   }
-  const userRoleRows = await tryFind(ql, "sys_user_role", { user_id: userId }, 200);
-  for (const ur of userRoleRows) {
+  const userPositionRows = await tryFind(ql, "sys_user_position", { user_id: userId }, 200);
+  for (const ur of userPositionRows) {
     const org = ur.organization_id ?? null;
     if (org && tenantId && org !== tenantId) continue;
-    const r = ur.role;
-    if (typeof r === "string" && r && !ctx.roles.includes(r)) ctx.roles.push(r);
+    const r = ur.position;
+    if (typeof r === "string" && r && !ctx.positions.includes(r)) ctx.positions.push(r);
   }
   if (tenantId) {
     const orgMembers = await tryFind(ql, "sys_member", { organization_id: tenantId }, 1e3);
@@ -4313,11 +4316,12 @@ async function resolveAuthzContext(input) {
     upsRows.filter((r) => (r.organization_id ?? r.organizationId ?? null) === null).map((r) => r.permission_set_id ?? r.permissionSetId).filter(Boolean)
   );
   let hasPlatformAdminGrant = false;
-  if (ctx.roles.length > 0) {
-    const roleRows = await tryFind(ql, "sys_role", { name: { $in: ctx.roles } }, 100);
-    const roleIds = roleRows.map((r) => r.id).filter(Boolean);
-    if (roleIds.length > 0) {
-      const rpsRows = await tryFind(ql, "sys_role_permission_set", { role_id: { $in: roleIds } }, 500);
+  if (!ctx.positions.includes("everyone")) ctx.positions.push("everyone");
+  if (ctx.positions.length > 0) {
+    const positionRows = await tryFind(ql, "sys_position", { name: { $in: ctx.positions } }, 100);
+    const positionIds = positionRows.map((r) => r.id).filter(Boolean);
+    if (positionIds.length > 0) {
+      const rpsRows = await tryFind(ql, "sys_position_permission_set", { position_id: { $in: positionIds } }, 500);
       for (const r of rpsRows) {
         const id = r.permission_set_id ?? r.permissionSetId;
         if (id) psIds.add(id);
@@ -4350,8 +4354,8 @@ async function resolveAuthzContext(input) {
     }
     if (Object.keys(mergedTabs).length > 0) ctx.tabPermissions = mergedTabs;
   }
-  if (hasPlatformAdminGrant && !ctx.roles.includes(import_spec.BUILTIN_ROLE_PLATFORM_ADMIN)) {
-    ctx.roles.unshift(import_spec.BUILTIN_ROLE_PLATFORM_ADMIN);
+  if (hasPlatformAdminGrant && !ctx.positions.includes(import_spec.BUILTIN_IDENTITY_PLATFORM_ADMIN)) {
+    ctx.positions.unshift(import_spec.BUILTIN_IDENTITY_PLATFORM_ADMIN);
   }
   if (!ctx.permissions.includes("ai_seat")) {
     const aiAccess = (await getUserRow())?.ai_access;
@@ -4463,6 +4467,87 @@ function calendarPartsInTzOrUtc(d, tz) {
   };
 }
 
+// src/utils/bulk-write.ts
+var DEFAULT_BATCH_SIZE = 200;
+var DEFAULT_MAX_RETRIES = 3;
+var DEFAULT_BACKOFF_BASE_MS = 200;
+var TRANSIENT_PATTERNS = [
+  /fetch failed/i,
+  /network/i,
+  /timed?\s*out/i,
+  /timeout/i,
+  /socket hang ?up/i,
+  /connection.*(closed|reset|refused|terminated|aborted)/i,
+  /\b(502|503|504)\b/,
+  /server.*unavailable/i,
+  /too many connections/i
+];
+var TRANSIENT_CODES = /^(ECONNRESET|ECONNREFUSED|ECONNABORTED|EPIPE|EAI_AGAIN|ETIMEDOUT|EHOSTUNREACH|ENETUNREACH|ENOTFOUND)$/i;
+function defaultIsTransientError(err) {
+  const code = err?.code;
+  if (typeof code === "string" && TRANSIENT_CODES.test(code)) return true;
+  const message = err?.message;
+  const text = typeof message === "string" ? message : String(err ?? "");
+  return TRANSIENT_PATTERNS.some((re) => re.test(text));
+}
+var defaultSleep = (ms) => new Promise((resolve) => setTimeout(resolve, ms));
+async function withRetry(fn, opts) {
+  let lastError;
+  for (let attempt = 1; attempt <= opts.maxRetries; attempt++) {
+    try {
+      return await fn();
+    } catch (err) {
+      lastError = err;
+      if (attempt >= opts.maxRetries || !opts.isTransientError(err)) throw err;
+      const jitter = Math.floor(Math.random() * 50);
+      await opts.sleep(opts.backoffBaseMs * 2 ** (attempt - 1) + jitter);
+    }
+  }
+  throw lastError;
+}
+async function withTransientRetry(fn, opts = {}) {
+  return withRetry(fn, {
+    maxRetries: Math.max(1, opts.maxRetries ?? DEFAULT_MAX_RETRIES),
+    backoffBaseMs: opts.backoffBaseMs ?? DEFAULT_BACKOFF_BASE_MS,
+    isTransientError: opts.isTransientError ?? defaultIsTransientError,
+    sleep: opts.sleep ?? defaultSleep
+  });
+}
+async function bulkWrite(rows, opts) {
+  const batchSize = Math.max(1, opts.batchSize ?? DEFAULT_BATCH_SIZE);
+  const retryOpts = {
+    maxRetries: Math.max(1, opts.maxRetries ?? DEFAULT_MAX_RETRIES),
+    backoffBaseMs: opts.backoffBaseMs ?? DEFAULT_BACKOFF_BASE_MS,
+    isTransientError: opts.isTransientError ?? defaultIsTransientError,
+    sleep: opts.sleep ?? defaultSleep
+  };
+  const results = new Array(rows.length);
+  for (let start = 0; start < rows.length; start += batchSize) {
+    const batch = rows.slice(start, start + batchSize);
+    try {
+      const records = await withRetry(() => opts.writeBatch(batch), retryOpts);
+      for (let i = 0; i < batch.length; i++) {
+        results[start + i] = { index: start + i, ok: true, record: records[i] };
+      }
+    } catch (batchErr) {
+      if (batch.length === 1) {
+        results[start] = { index: start, ok: false, error: batchErr };
+        continue;
+      }
+      for (let i = 0; i < batch.length; i++) {
+        const idx = start + i;
+        try {
+          const record = await withRetry(() => opts.writeOne(batch[i]), retryOpts);
+          results[idx] = { index: idx, ok: true, record };
+        } catch (err) {
+          results[idx] = { index: idx, ok: false, error: err };
+        }
+      }
+    }
+  }
+  return results;
+}
+
 // src/health-monitor.ts
 var PluginHealthMonitor = class {
   constructor(logger) {
@@ -5402,6 +5487,7 @@ var NamespaceResolver = class {
   SemanticVersionManager,
   ServiceLifecycle,
   buildPermissionsFromGrants,
+  bulkWrite,
   calendarPartsInTz,
   calendarPartsInTzOrUtc,
   counterSignPayload,
@@ -5415,6 +5501,7 @@ var NamespaceResolver = class {
   createPluginConfigValidator,
   createPluginPermissionEnforcer,
   deepMerge,
+  defaultIsTransientError,
   evaluateAuthGate,
   extractApiKey,
   generateApiKey,
@@ -5438,6 +5525,7 @@ var NamespaceResolver = class {
   verifyPlatformSignature,
   verifyPluginArtifact,
   verifyPublisherSignature,
-  wireAuthoredTranslationSync
+  wireAuthoredTranslationSync,
+  withTransientRetry
 });
 //# sourceMappingURL=index.cjs.map