@paroicms/server 1.106.0 → 1.107.0

package/dist/admin-backend/logging/logging.resolver.d.ts

@@ -0,0 +1,3 @@
+import type { GqlResolvers } from "../../graphql/generated-graphql-types.d.ts";
+import { type GraphqlContext } from "../../graphql/graphql.types.js";
+export declare const loggingResolvers: GqlResolvers<GraphqlContext>;

package/dist/admin-backend/logging/logging.resolver.js

@@ -0,0 +1,40 @@
+import { siteReadyGuard } from "../../graphql/graphql.types.js";
+import { authGuard } from "../auth/auth.helper.js";
+import { checkRateLimit } from "./naive-rate-limiter.js";
+const validLogLevels = new Set(["error", "warn", "info", "trace", "debug"]);
+export const loggingResolvers = {
+    Mutation: {
+        saveLog: async (_parent, { lines }, { siteContext, httpContext }) => {
+            const payload = authGuard(httpContext);
+            siteReadyGuard(siteContext);
+            const sessionId = payload.id;
+            checkRateLimit(sessionId);
+            for (const line of lines) {
+                if (!validLogLevels.has(line.level)) {
+                    siteContext.logger.warn(`[Admin-UI] Invalid log level: ${line.level}`);
+                    continue;
+                }
+                const prefixedMessage = `[Admin-UI] ${line.message}`;
+                switch (line.level) {
+                    case "error":
+                        siteContext.logger.error(prefixedMessage);
+                        break;
+                    case "warn":
+                        siteContext.logger.warn(prefixedMessage);
+                        break;
+                    case "info":
+                        siteContext.logger.info(prefixedMessage);
+                        break;
+                    case "trace":
+                        siteContext.logger.trace(prefixedMessage);
+                        break;
+                    case "debug":
+                        siteContext.logger.debug(prefixedMessage);
+                        break;
+                }
+            }
+            return true;
+        },
+    },
+};
+//# sourceMappingURL=logging.resolver.js.map

package/dist/admin-backend/logging/logging.resolver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"logging.resolver.js","sourceRoot":"","sources":["../../../src/admin-backend/logging/logging.resolver.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,cAAc,EAAuB,MAAM,gCAAgC,CAAC;AACrF,OAAO,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AACnD,OAAO,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAEzD,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;AAE5E,MAAM,CAAC,MAAM,gBAAgB,GAAiC;IAC5D,QAAQ,EAAE;QACR,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,WAAW,EAAE,WAAW,EAAE,EAAE,EAAE;YAClE,MAAM,OAAO,GAAG,SAAS,CAAC,WAAW,CAAC,CAAC;YACvC,cAAc,CAAC,WAAW,CAAC,CAAC;YAE5B,MAAM,SAAS,GAAG,OAAO,CAAC,EAAE,CAAC;YAC7B,cAAc,CAAC,SAAS,CAAC,CAAC;YAE1B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACzB,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;oBACpC,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,iCAAiC,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;oBACvE,SAAS;gBACX,CAAC;gBAED,MAAM,eAAe,GAAG,cAAc,IAAI,CAAC,OAAO,EAAE,CAAC;gBAErD,QAAQ,IAAI,CAAC,KAAK,EAAE,CAAC;oBACnB,KAAK,OAAO;wBACV,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;wBAC1C,MAAM;oBACR,KAAK,MAAM;wBACT,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;wBACzC,MAAM;oBACR,KAAK,MAAM;wBACT,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;wBACzC,MAAM;oBACR,KAAK,OAAO;wBACV,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;wBAC1C,MAAM;oBACR,KAAK,OAAO;wBACV,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;wBAC1C,MAAM;gBACV,CAAC;YACH,CAAC;YAED,OAAO,IAAI,CAAC;QACd,CAAC;KACF;CACF,CAAC"}

package/dist/admin-backend/logging/naive-rate-limiter.d.ts

@@ -0,0 +1 @@
+export declare function checkRateLimit(sessionId: string): void;

package/dist/admin-backend/logging/naive-rate-limiter.js

@@ -0,0 +1,37 @@
+import { ApiError } from "@paroicms/public-server-lib";
+const rateLimitMap = new Map();
+const INITIAL_LIMIT = 50;
+const WINDOW_LIMIT = 10;
+const WINDOW_DURATION = 30000;
+setInterval(() => {
+    const now = Date.now();
+    const expiredThreshold = now - WINDOW_DURATION * 2;
+    for (const [sessionId, entry] of rateLimitMap.entries()) {
+        if (entry.windowStart < expiredThreshold) {
+            rateLimitMap.delete(sessionId);
+        }
+    }
+}, WINDOW_DURATION * 3).unref();
+export function checkRateLimit(sessionId) {
+    const now = Date.now();
+    const entry = rateLimitMap.get(sessionId);
+    if (!entry) {
+        rateLimitMap.set(sessionId, { count: 1, windowStart: now });
+        return;
+    }
+    if (entry.count < INITIAL_LIMIT) {
+        ++entry.count;
+        return;
+    }
+    const timeSinceWindowStart = now - entry.windowStart;
+    if (timeSinceWindowStart >= WINDOW_DURATION) {
+        entry.count = 1;
+        entry.windowStart = now;
+        return;
+    }
+    if (entry.count >= WINDOW_LIMIT) {
+        throw new ApiError("Rate limit exceeded", 400);
+    }
+    ++entry.count;
+}
+//# sourceMappingURL=naive-rate-limiter.js.map

package/dist/admin-backend/logging/naive-rate-limiter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"naive-rate-limiter.js","sourceRoot":"","sources":["../../../src/admin-backend/logging/naive-rate-limiter.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,6BAA6B,CAAC;AAQvD,MAAM,YAAY,GAAG,IAAI,GAAG,EAA0B,CAAC;AACvD,MAAM,aAAa,GAAG,EAAE,CAAC;AACzB,MAAM,YAAY,GAAG,EAAE,CAAC;AACxB,MAAM,eAAe,GAAG,KAAK,CAAC;AAG9B,WAAW,CAAC,GAAG,EAAE;IACf,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,MAAM,gBAAgB,GAAG,GAAG,GAAG,eAAe,GAAG,CAAC,CAAC;IAEnD,KAAK,MAAM,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,YAAY,CAAC,OAAO,EAAE,EAAE,CAAC;QACxD,IAAI,KAAK,CAAC,WAAW,GAAG,gBAAgB,EAAE,CAAC;YACzC,YAAY,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACjC,CAAC;IACH,CAAC;AACH,CAAC,EAAE,eAAe,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC;AAEhC,MAAM,UAAU,cAAc,CAAC,SAAiB;IAC9C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IAE1C,IAAI,CAAC,KAAK,EAAE,CAAC;QAEX,YAAY,CAAC,GAAG,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,CAAC;QAC5D,OAAO;IACT,CAAC;IAED,IAAI,KAAK,CAAC,KAAK,GAAG,aAAa,EAAE,CAAC;QAEhC,EAAE,KAAK,CAAC,KAAK,CAAC;QACd,OAAO;IACT,CAAC;IAGD,MAAM,oBAAoB,GAAG,GAAG,GAAG,KAAK,CAAC,WAAW,CAAC;IAErD,IAAI,oBAAoB,IAAI,eAAe,EAAE,CAAC;QAE5C,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC;QAChB,KAAK,CAAC,WAAW,GAAG,GAAG,CAAC;QACxB,OAAO;IACT,CAAC;IAED,IAAI,KAAK,CAAC,KAAK,IAAI,YAAY,EAAE,CAAC;QAChC,MAAM,IAAI,QAAQ,CAAC,qBAAqB,EAAE,GAAG,CAAC,CAAC;IACjD,CAAC;IAED,EAAE,KAAK,CAAC,KAAK,CAAC;AAChB,CAAC"}

package/dist/graphql/apollo-server-init.js

@@ -6,6 +6,7 @@ import { extendWithDocumentResolver } from "../admin-backend/document/document.r
 import { documentResolvers } from "../admin-backend/document/document.resolver.js";
 import { extendLNodeWrapWithFieldValuesResolvers, extendPartWithFieldValuesResolver, fieldResolvers, } from "../admin-backend/fields/fields.resolver.js";
 import { lNodeWrapResolvers } from "../admin-backend/lnode/lnode-wrap.resolver.js";
+import { loggingResolvers } from "../admin-backend/logging/logging.resolver.js";
 import { extendDocumentWithMediaResolver } from "../admin-backend/media/media.resolver.extend.js";
 import { mediaResolvers } from "../admin-backend/media/media.resolver.js";
 import { migrationResolvers } from "../admin-backend/migration/migration.resolver.js";
@@ -40,6 +41,7 @@ export function federateResolvers() {
         unprotectedResolvers,
         scalarTypeResolvers,
         extendDocumentWithMediaResolver,
+        loggingResolvers,
     ];
 }
 //# sourceMappingURL=apollo-server-init.js.map

package/dist/graphql/apollo-server-init.js.map

@@ -1 +1 @@
-{"version":3,"file":"apollo-server-init.js","sourceRoot":"","sources":["../../src/graphql/apollo-server-init.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,gBAAgB,EAAE,MAAM,8CAA8C,CAAC;AAChF,OAAO,EAAE,eAAe,EAAE,MAAM,4CAA4C,CAAC;AAC7E,OAAO,EAAE,0BAA0B,EAAE,MAAM,uDAAuD,CAAC;AACnG,OAAO,EAAE,iBAAiB,EAAE,MAAM,gDAAgD,CAAC;AACnF,OAAO,EACL,uCAAuC,EACvC,iCAAiC,EACjC,cAAc,GACf,MAAM,4CAA4C,CAAC;AACpD,OAAO,EAAE,kBAAkB,EAAE,MAAM,+CAA+C,CAAC;AACnF,OAAO,EAAE,+BAA+B,EAAE,MAAM,iDAAiD,CAAC;AAClG,OAAO,EAAE,cAAc,EAAE,MAAM,0CAA0C,CAAC;AAC1E,OAAO,EAAE,kBAAkB,EAAE,MAAM,kDAAkD,CAAC;AACtF,OAAO,EAAE,+BAA+B,EAAE,MAAM,+CAA+C,CAAC;AAChG,OAAO,EAAE,aAAa,EAAE,MAAM,wCAAwC,CAAC;AACvE,OAAO,EAAE,gCAAgC,EAAE,MAAM,+CAA+C,CAAC;AACjG,OAAO,EAAE,aAAa,EAAE,MAAM,wCAAwC,CAAC;AACvE,OAAO,EAAE,uBAAuB,EAAE,MAAM,8DAA8D,CAAC;AACvG,OAAO,EAAE,sBAAsB,EAAE,MAAM,4DAA4D,CAAC;AACpG,OAAO,EAAE,oBAAoB,EAAE,MAAM,sDAAsD,CAAC;AAC5F,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,OAAO,EAAE,mBAAmB,EAAE,MAAM,2CAA2C,CAAC;AAIhF,MAAM,CAAC,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,CAAC,UAAU,EAAE,gBAAgB,CAAC,EAAE,MAAM,CAAC,CAAC;AAEjF,MAAM,UAAU,iBAAiB;IAC/B,OAAO;QACL,gBAAgB;QAChB,eAAe;QACf,kBAAkB;QAClB,iBAAiB;QACjB,0BAA0B;QAC1B,cAAc;QACd,uCAAuC;QACvC,iCAAiC;QACjC,aAAa;QACb,+BAA+B;QAC/B,cAAc;QACd,aAAa;QACb,gCAAgC;QAChC,kBAAkB;QAClB,uBAAuB;QACvB,sBAAsB;QACtB,oBAAoB;QACpB,mBAAmB;QACnB,+BAA+B;KAChC,CAAC;AACJ,CAAC"}
+{"version":3,"file":"apollo-server-init.js","sourceRoot":"","sources":["../../src/graphql/apollo-server-init.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,gBAAgB,EAAE,MAAM,8CAA8C,CAAC;AAChF,OAAO,EAAE,eAAe,EAAE,MAAM,4CAA4C,CAAC;AAC7E,OAAO,EAAE,0BAA0B,EAAE,MAAM,uDAAuD,CAAC;AACnG,OAAO,EAAE,iBAAiB,EAAE,MAAM,gDAAgD,CAAC;AACnF,OAAO,EACL,uCAAuC,EACvC,iCAAiC,EACjC,cAAc,GACf,MAAM,4CAA4C,CAAC;AACpD,OAAO,EAAE,kBAAkB,EAAE,MAAM,+CAA+C,CAAC;AACnF,OAAO,EAAE,gBAAgB,EAAE,MAAM,8CAA8C,CAAC;AAChF,OAAO,EAAE,+BAA+B,EAAE,MAAM,iDAAiD,CAAC;AAClG,OAAO,EAAE,cAAc,EAAE,MAAM,0CAA0C,CAAC;AAC1E,OAAO,EAAE,kBAAkB,EAAE,MAAM,kDAAkD,CAAC;AACtF,OAAO,EAAE,+BAA+B,EAAE,MAAM,+CAA+C,CAAC;AAChG,OAAO,EAAE,aAAa,EAAE,MAAM,wCAAwC,CAAC;AACvE,OAAO,EAAE,gCAAgC,EAAE,MAAM,+CAA+C,CAAC;AACjG,OAAO,EAAE,aAAa,EAAE,MAAM,wCAAwC,CAAC;AACvE,OAAO,EAAE,uBAAuB,EAAE,MAAM,8DAA8D,CAAC;AACvG,OAAO,EAAE,sBAAsB,EAAE,MAAM,4DAA4D,CAAC;AACpG,OAAO,EAAE,oBAAoB,EAAE,MAAM,sDAAsD,CAAC;AAC5F,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,OAAO,EAAE,mBAAmB,EAAE,MAAM,2CAA2C,CAAC;AAIhF,MAAM,CAAC,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,CAAC,UAAU,EAAE,gBAAgB,CAAC,EAAE,MAAM,CAAC,CAAC;AAEjF,MAAM,UAAU,iBAAiB;IAC/B,OAAO;QACL,gBAAgB;QAChB,eAAe;QACf,kBAAkB;QAClB,iBAAiB;QACjB,0BAA0B;QAC1B,cAAc;QACd,uCAAuC;QACvC,iCAAiC;QACjC,aAAa;QACb,+BAA+B;QAC/B,cAAc;QACd,aAAa;QACb,gCAAgC;QAChC,kBAAkB;QAClB,uBAAuB;QACvB,sBAAsB;QACtB,oBAAoB;QACpB,mBAAmB;QACnB,+BAA+B;QAC/B,gBAAgB;KACjB,CAAC;AACJ,CAAC"}