@ozdao/prometheus-framework 0.2.222 → 0.2.223

package/dist/queryProcessor-CU4A6Y4N.mjs

@@ -0,0 +1,197 @@
+import require$$0 from "mongoose";
+const ObjectId = require$$0.Types.ObjectId;
+function getBasicOptions(query) {
+  console.log(query);
+  const { _id, url, status, type, owner, creator } = query;
+  const conditions = [];
+  if (_id) {
+    conditions.push({ _id: new ObjectId(_id) });
+  }
+  if (url) {
+    conditions.push({ url });
+  }
+  if (status) {
+    conditions.push({ status });
+  }
+  if (type) {
+    conditions.push({ type });
+  }
+  if (owner) {
+    conditions.push({ "owner.target": new ObjectId(owner) });
+  }
+  if (creator) {
+    conditions.push({ "creator.target": new ObjectId(creator) });
+  }
+  if (conditions.length > 0) {
+    return [{ $match: { $and: conditions } }];
+  } else {
+    return [];
+  }
+}
+function getFilterDate(start, end) {
+  let filter = {};
+  if (start !== null) {
+    filter.$gte = new Date(start);
+  }
+  if (end !== null) {
+    filter.$lte = new Date(end);
+  }
+  if (start === "null" && end === "null") {
+    return [];
+  } else {
+    return [{ $match: { createdAt: filter } }];
+  }
+}
+function getTagsOptions(tags) {
+  if (tags) {
+    const tagsArray = Array.isArray(tags) ? tags : [tags];
+    return [{ $match: { tags: { $in: tagsArray } } }];
+  } else {
+    return [];
+  }
+}
+function getSortingOptions(param = "createdAt", order = "desc") {
+  let sort = {
+    [param]: order === "desc" ? -1 : 1,
+    "_id": 1
+  };
+  return [{ $sort: sort }];
+}
+function getPaginationOptions(skip, limit) {
+  let pagination = {
+    skip: parseInt(skip) || 0,
+    limit: parseInt(limit) || 20
+  };
+  return [{ $skip: pagination.skip }, { $limit: pagination.limit }];
+}
+function getCreatorUserLookupStage() {
+  return {
+    $lookup: {
+      from: "users",
+      let: { creatorId: "$creator.target" },
+      pipeline: [
+        {
+          $match: {
+            $expr: { $eq: ["$_id", "$$creatorId"] }
+          }
+        },
+        {
+          $project: { password: 0 }
+        }
+      ],
+      as: "creatorUser"
+    }
+  };
+}
+function getCreatorOrganizationLookupStage() {
+  return {
+    $lookup: {
+      from: "organizations",
+      localField: "creator.target",
+      foreignField: "_id",
+      as: "creatorOrganization"
+    }
+  };
+}
+function getCreatorCustomerLookupStage() {
+  return {
+    $lookup: {
+      from: "customers",
+      localField: "creator.target",
+      foreignField: "_id",
+      as: "creatorCustomer"
+    }
+  };
+}
+function getOwnerUserLookupStage() {
+  return {
+    $lookup: {
+      from: "users",
+      let: { ownerId: "$owner.target" },
+      pipeline: [
+        {
+          $match: {
+            $expr: { $eq: ["$_id", "$$ownerId"] }
+          }
+        },
+        {
+          $project: { password: 0 }
+        }
+      ],
+      as: "ownerUser"
+    }
+  };
+}
+function getOwnerOrganizationLookupStage() {
+  return {
+    $lookup: {
+      from: "organizations",
+      localField: "owner.target",
+      foreignField: "_id",
+      as: "ownerOrganization"
+    }
+  };
+}
+function getAddFieldsCreatorOwnerStage() {
+  return {
+    $addFields: {
+      "creator.target": {
+        $switch: {
+          branches: [
+            {
+              case: { $eq: [{ $toLower: "$creator.type" }, "user"] },
+              then: { $arrayElemAt: ["$creatorUser", 0] }
+            },
+            {
+              case: { $eq: [{ $toLower: "$creator.type" }, "organization"] },
+              then: { $arrayElemAt: ["$creatorOrganization", 0] }
+            },
+            {
+              case: { $eq: [{ $toLower: "$creator.type" }, "customer"] },
+              then: { $arrayElemAt: ["$creatorCustomer", 0] }
+            }
+          ],
+          default: "Unknown type"
+          // или любое другое значение по умолчанию, которое вы хотите использовать
+        }
+      },
+      "owner.target": {
+        $cond: [
+          { $eq: ["$owner.type", "user"] },
+          { $arrayElemAt: ["$ownerUser", 0] },
+          { $arrayElemAt: ["$ownerOrganization", 0] }
+        ]
+      }
+    }
+  };
+}
+function removeTempPropeties() {
+  return {
+    $project: {
+      creatorOrganization: 0,
+      creatorUser: 0,
+      ownerOrganization: 0,
+      ownerUser: 0,
+      creatorCustomer: 0,
+      ownerCustomer: 0
+    }
+  };
+}
+var queryProcessor = {
+  getBasicOptions,
+  getSortingOptions,
+  getPaginationOptions,
+  getTagsOptions,
+  getFilterDate,
+  // Creator and Owner
+  getCreatorUserLookupStage,
+  getCreatorOrganizationLookupStage,
+  getCreatorCustomerLookupStage,
+  getOwnerUserLookupStage,
+  getOwnerOrganizationLookupStage,
+  getAddFieldsCreatorOwnerStage,
+  removeTempPropeties
+};
+export {
+  queryProcessor as q
+};

package/dist/queryProcessor-CcsJEUBr.js

@@ -0,0 +1,196 @@
+"use strict";
+const require$$0 = require("mongoose");
+const ObjectId = require$$0.Types.ObjectId;
+function getBasicOptions(query) {
+  console.log(query);
+  const { _id, url, status, type, owner, creator } = query;
+  const conditions = [];
+  if (_id) {
+    conditions.push({ _id: new ObjectId(_id) });
+  }
+  if (url) {
+    conditions.push({ url });
+  }
+  if (status) {
+    conditions.push({ status });
+  }
+  if (type) {
+    conditions.push({ type });
+  }
+  if (owner) {
+    conditions.push({ "owner.target": new ObjectId(owner) });
+  }
+  if (creator) {
+    conditions.push({ "creator.target": new ObjectId(creator) });
+  }
+  if (conditions.length > 0) {
+    return [{ $match: { $and: conditions } }];
+  } else {
+    return [];
+  }
+}
+function getFilterDate(start, end) {
+  let filter = {};
+  if (start !== null) {
+    filter.$gte = new Date(start);
+  }
+  if (end !== null) {
+    filter.$lte = new Date(end);
+  }
+  if (start === "null" && end === "null") {
+    return [];
+  } else {
+    return [{ $match: { createdAt: filter } }];
+  }
+}
+function getTagsOptions(tags) {
+  if (tags) {
+    const tagsArray = Array.isArray(tags) ? tags : [tags];
+    return [{ $match: { tags: { $in: tagsArray } } }];
+  } else {
+    return [];
+  }
+}
+function getSortingOptions(param = "createdAt", order = "desc") {
+  let sort = {
+    [param]: order === "desc" ? -1 : 1,
+    "_id": 1
+  };
+  return [{ $sort: sort }];
+}
+function getPaginationOptions(skip, limit) {
+  let pagination = {
+    skip: parseInt(skip) || 0,
+    limit: parseInt(limit) || 20
+  };
+  return [{ $skip: pagination.skip }, { $limit: pagination.limit }];
+}
+function getCreatorUserLookupStage() {
+  return {
+    $lookup: {
+      from: "users",
+      let: { creatorId: "$creator.target" },
+      pipeline: [
+        {
+          $match: {
+            $expr: { $eq: ["$_id", "$$creatorId"] }
+          }
+        },
+        {
+          $project: { password: 0 }
+        }
+      ],
+      as: "creatorUser"
+    }
+  };
+}
+function getCreatorOrganizationLookupStage() {
+  return {
+    $lookup: {
+      from: "organizations",
+      localField: "creator.target",
+      foreignField: "_id",
+      as: "creatorOrganization"
+    }
+  };
+}
+function getCreatorCustomerLookupStage() {
+  return {
+    $lookup: {
+      from: "customers",
+      localField: "creator.target",
+      foreignField: "_id",
+      as: "creatorCustomer"
+    }
+  };
+}
+function getOwnerUserLookupStage() {
+  return {
+    $lookup: {
+      from: "users",
+      let: { ownerId: "$owner.target" },
+      pipeline: [
+        {
+          $match: {
+            $expr: { $eq: ["$_id", "$$ownerId"] }
+          }
+        },
+        {
+          $project: { password: 0 }
+        }
+      ],
+      as: "ownerUser"
+    }
+  };
+}
+function getOwnerOrganizationLookupStage() {
+  return {
+    $lookup: {
+      from: "organizations",
+      localField: "owner.target",
+      foreignField: "_id",
+      as: "ownerOrganization"
+    }
+  };
+}
+function getAddFieldsCreatorOwnerStage() {
+  return {
+    $addFields: {
+      "creator.target": {
+        $switch: {
+          branches: [
+            {
+              case: { $eq: [{ $toLower: "$creator.type" }, "user"] },
+              then: { $arrayElemAt: ["$creatorUser", 0] }
+            },
+            {
+              case: { $eq: [{ $toLower: "$creator.type" }, "organization"] },
+              then: { $arrayElemAt: ["$creatorOrganization", 0] }
+            },
+            {
+              case: { $eq: [{ $toLower: "$creator.type" }, "customer"] },
+              then: { $arrayElemAt: ["$creatorCustomer", 0] }
+            }
+          ],
+          default: "Unknown type"
+          // или любое другое значение по умолчанию, которое вы хотите использовать
+        }
+      },
+      "owner.target": {
+        $cond: [
+          { $eq: ["$owner.type", "user"] },
+          { $arrayElemAt: ["$ownerUser", 0] },
+          { $arrayElemAt: ["$ownerOrganization", 0] }
+        ]
+      }
+    }
+  };
+}
+function removeTempPropeties() {
+  return {
+    $project: {
+      creatorOrganization: 0,
+      creatorUser: 0,
+      ownerOrganization: 0,
+      ownerUser: 0,
+      creatorCustomer: 0,
+      ownerCustomer: 0
+    }
+  };
+}
+var queryProcessor = {
+  getBasicOptions,
+  getSortingOptions,
+  getPaginationOptions,
+  getTagsOptions,
+  getFilterDate,
+  // Creator and Owner
+  getCreatorUserLookupStage,
+  getCreatorOrganizationLookupStage,
+  getCreatorCustomerLookupStage,
+  getOwnerUserLookupStage,
+  getOwnerOrganizationLookupStage,
+  getAddFieldsCreatorOwnerStage,
+  removeTempPropeties
+};
+exports.queryProcessor = queryProcessor;

package/dist/spots.server.js

@@ -1,6 +1,6 @@
 "use strict";
 const _commonjsHelpers = require("./_commonjsHelpers-DHfMLFPC.js");
-require("./queryProcessor-iewDZq_f.js");
+require("./queryProcessor-CcsJEUBr.js");
 require("node-cache");
 var spot_model = (db) => {
   const spotSchema = new db.mongoose.Schema({

package/dist/spots.server.mjs

@@ -1,5 +1,5 @@
 import { g as getDefaultExportFromCjs } from "./_commonjsHelpers-CUmg6egw.mjs";
-import "./queryProcessor-DQSFR9YA.mjs";
+import "./queryProcessor-CU4A6Y4N.mjs";
 import "node-cache";
 var spot_model = (db) => {
   const spotSchema = new db.mongoose.Schema({

package/dist/verifyAccesses-BsrJOct8.mjs

@@ -0,0 +1,90 @@
+const middlewareFactory = (db) => {
+  db.user;
+  const Organization = db.organization;
+  const Department = db.department;
+  const verifyAccess = (resource, accessType) => {
+    return async (req, res, next) => {
+      try {
+        const userId = req.userId ? new db.mongoose.Types.ObjectId(req.userId) : null;
+        let ownerData = req.body.owner || req.query.owner;
+        let accessResult = {
+          isAuthenticated: userId !== null,
+          isOrgOwner: false,
+          isOrgMember: false,
+          isAuthorized: false,
+          isPersonalOwner: false
+        };
+        if (typeof ownerData === "object" && ownerData !== null) {
+          if (ownerData.type === "Organization") {
+            ownerData = ownerData.target;
+          } else if (ownerData.type === "User") {
+            accessResult.isPersonalOwner = ownerData.target === userId.toString();
+          }
+        }
+        if (accessResult.isPersonalOwner) {
+          accessResult.isAuthorized = true;
+          req.accessResult = accessResult;
+          return next();
+        }
+        if (!accessResult.isPersonalOwner) {
+          console.log("owner data", ownerData);
+          const ownerOrgId = new db.mongoose.Types.ObjectId(ownerData);
+          accessResult.isOrgOwner = await Organization.exists({
+            _id: ownerOrgId,
+            owner: userId
+          });
+          if (accessResult.isOrgOwner) {
+            accessResult.isAuthorized = true;
+            req.accessResult = accessResult;
+            return next();
+          }
+          const departments = await Department.find({
+            organization: ownerOrgId,
+            "members.user": userId
+          });
+          accessResult.isOrgMember = departments.length > 0;
+          if (accessResult.isOrgMember) {
+            accessResult.isAuthorized = departments.some((department) => {
+              const accessRights = department.accesses[resource];
+              return accessRights && accessRights[accessType];
+            });
+          }
+        }
+        req.accessResult = accessResult;
+        next();
+      } catch (err) {
+        console.error("Access control errorCode:", err);
+        return res.status(403).json({ errorCode: "ACCESS_DENIED" });
+      }
+    };
+  };
+  const handleAccessResult = (options = {}) => {
+    return (req, res, next) => {
+      const { accessResult } = req;
+      console.log("accesses is", accessResult);
+      if (!accessResult) {
+        return res.status(500).json({ errorCode: "INTERNAL_ERROR" });
+      }
+      if (!accessResult.isAuthenticated && !options.allowUnauthenticated) {
+        return res.status(401).json({ errorCode: "UNAUTHORIZED" });
+      }
+      if (accessResult.isAuthorized || accessResult.isPersonalOwner) {
+        return next();
+      } else if (options.allowPublished && req.method === "GET") {
+        req.query.status = "published";
+        return next();
+      } else if (options.customCheck && options.customCheck(accessResult, req)) {
+        return next();
+      }
+      return res.status(403).json({ errorCode: "ACCESS_DENIED" });
+    };
+  };
+  return {
+    verifyAccess,
+    handleAccessResult
+  };
+};
+var verifyAccesses = middlewareFactory;
+export {
+  verifyAccesses as v
+};

package/dist/verifyAccesses-BvLnOtBN.js

@@ -0,0 +1,89 @@
+"use strict";
+const middlewareFactory = (db) => {
+  db.user;
+  const Organization = db.organization;
+  const Department = db.department;
+  const verifyAccess = (resource, accessType) => {
+    return async (req, res, next) => {
+      try {
+        const userId = req.userId ? new db.mongoose.Types.ObjectId(req.userId) : null;
+        let ownerData = req.body.owner || req.query.owner;
+        let accessResult = {
+          isAuthenticated: userId !== null,
+          isOrgOwner: false,
+          isOrgMember: false,
+          isAuthorized: false,
+          isPersonalOwner: false
+        };
+        if (typeof ownerData === "object" && ownerData !== null) {
+          if (ownerData.type === "Organization") {
+            ownerData = ownerData.target;
+          } else if (ownerData.type === "User") {
+            accessResult.isPersonalOwner = ownerData.target === userId.toString();
+          }
+        }
+        if (accessResult.isPersonalOwner) {
+          accessResult.isAuthorized = true;
+          req.accessResult = accessResult;
+          return next();
+        }
+        if (!accessResult.isPersonalOwner) {
+          console.log("owner data", ownerData);
+          const ownerOrgId = new db.mongoose.Types.ObjectId(ownerData);
+          accessResult.isOrgOwner = await Organization.exists({
+            _id: ownerOrgId,
+            owner: userId
+          });
+          if (accessResult.isOrgOwner) {
+            accessResult.isAuthorized = true;
+            req.accessResult = accessResult;
+            return next();
+          }
+          const departments = await Department.find({
+            organization: ownerOrgId,
+            "members.user": userId
+          });
+          accessResult.isOrgMember = departments.length > 0;
+          if (accessResult.isOrgMember) {
+            accessResult.isAuthorized = departments.some((department) => {
+              const accessRights = department.accesses[resource];
+              return accessRights && accessRights[accessType];
+            });
+          }
+        }
+        req.accessResult = accessResult;
+        next();
+      } catch (err) {
+        console.error("Access control errorCode:", err);
+        return res.status(403).json({ errorCode: "ACCESS_DENIED" });
+      }
+    };
+  };
+  const handleAccessResult = (options = {}) => {
+    return (req, res, next) => {
+      const { accessResult } = req;
+      console.log("accesses is", accessResult);
+      if (!accessResult) {
+        return res.status(500).json({ errorCode: "INTERNAL_ERROR" });
+      }
+      if (!accessResult.isAuthenticated && !options.allowUnauthenticated) {
+        return res.status(401).json({ errorCode: "UNAUTHORIZED" });
+      }
+      if (accessResult.isAuthorized || accessResult.isPersonalOwner) {
+        return next();
+      } else if (options.allowPublished && req.method === "GET") {
+        req.query.status = "published";
+        return next();
+      } else if (options.customCheck && options.customCheck(accessResult, req)) {
+        return next();
+      }
+      return res.status(403).json({ errorCode: "ACCESS_DENIED" });
+    };
+  };
+  return {
+    verifyAccess,
+    handleAccessResult
+  };
+};
+var verifyAccesses = middlewareFactory;
+exports.verifyAccesses = verifyAccesses;

package/dist/wallet.server.js

@@ -1,6 +1,6 @@
 "use strict";
 const _commonjsHelpers = require("./_commonjsHelpers-DHfMLFPC.js");
-const index = require("./index-oS9yx2Kv.js");
+const index = require("./index-CsS7qx1d.js");
 require("axios");
 require("bcryptjs");
 require("crypto");
@@ -9,7 +9,7 @@ const tickets_controller = require("./tickets.controller-yqXXLR62.js");
 const require$$1 = require("stripe");
 const require$$0 = require("mongoose");
 const require$$1$1 = require("bignumber.js");
-require("./queryProcessor-iewDZq_f.js");
+require("./queryProcessor-CcsJEUBr.js");
 var wallet_model = (db) => {
   const WalletSchema = new db.mongoose.Schema(
     {

package/dist/wallet.server.mjs

@@ -1,5 +1,5 @@
 import { g as getDefaultExportFromCjs } from "./_commonjsHelpers-CUmg6egw.mjs";
-import { m as middlewares } from "./index-DahVPg_G.mjs";
+import { m as middlewares } from "./index-UIHE6Rk3.mjs";
 import "axios";
 import "bcryptjs";
 import "crypto";
@@ -8,7 +8,7 @@ import { t as tickets_controller } from "./tickets.controller-CB549rZT.mjs";
 import require$$1 from "stripe";
 import require$$0 from "mongoose";
 import require$$1$1 from "bignumber.js";
-import "./queryProcessor-DQSFR9YA.mjs";
+import "./queryProcessor-CU4A6Y4N.mjs";
 var wallet_model = (db) => {
   const WalletSchema = new db.mongoose.Schema(
     {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ozdao/prometheus-framework",
-  "version": "0.2.222",
+  "version": "0.2.223",
   "description": "Web3 Framework focused on user experience and ease of development.",
   "author": "OZ DAO <hello@ozdao.dev>",
   "license": "GPL-3.0-or-later",

package/src/builder/modes/ssr.dev.js

@@ -89,14 +89,14 @@ module.exports = function createSsrDevServer(projectRoot, { clientConfig, server
 
       const { head, body } = transformDevStats(stats.toJson(), outputFileSystem);
 
-      const userState = JSON.stringify(state.user);
+      const initialState = JSON.stringify(state);
 
       const completeHtml = await renderHtml({
         appHtml: html,
         meta,
         head,
         body,
-        userState
+        initialState
       });
       return { html: completeHtml, statusCode };
     };

package/src/builder/modes/ssr.prod.js

@@ -5,8 +5,7 @@ const { transformProdStats } = require('../ssr/ssr-transform-webpack-stats.js');
 
 const { renderHtml } = require('../ssr/ssr-render-html.js');
 
-module.exports = 
-function createSsrProdServer(projectRoot, {clientConfig,serverConfig, createServerPath}) {
+module.exports = function createSsrProdServer(projectRoot, {clientConfig,serverConfig, createServerPath}) {
 
   const clientStats = require(path.join(projectRoot, "builds/web/client/stats.json"));
   const serverManifest = require(path.join(projectRoot, "builds/web/server/manifest.json"));
@@ -44,13 +43,14 @@ function createSsrProdServer(projectRoot, {clientConfig,serverConfig, createServ
         res.status(404);
       }
 
-      const userState = JSON.stringify(state.user);
+      const initialState = JSON.stringify(state);
+
       const completeHtml = await renderHtml({
         appHtml: html,
         meta, 
         head,
         body,
-        userState
+        initialState
       });
 
       res.status(statusCode).header("Content-Type", "text/html; charset=utf-8").send(completeHtml);