@proteinjs/user-server 1.12.0 → 1.14.0

package/dist/test/UserActivityStamp.integration.test.js

@@ -0,0 +1,255 @@
+"use strict";
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+var __generator = (this && this.__generator) || function (thisArg, body) {
+    var _ = { label: 0, sent: function() { if (t[0] & 1) throw t[1]; return t[1]; }, trys: [], ops: [] }, f, y, t, g;
+    return g = { next: verb(0), "throw": verb(1), "return": verb(2) }, typeof Symbol === "function" && (g[Symbol.iterator] = function() { return this; }), g;
+    function verb(n) { return function (v) { return step([n, v]); }; }
+    function step(op) {
+        if (f) throw new TypeError("Generator is already executing.");
+        while (g && (g = 0, op[0] && (_ = 0)), _) try {
+            if (f = 1, y && (t = op[0] & 2 ? y["return"] : op[0] ? y["throw"] || ((t = y["return"]) && t.call(y), 0) : y.next) && !(t = t.call(y, op[1])).done) return t;
+            if (y = 0, t) op = [op[0] & 2, t.value];
+            switch (op[0]) {
+                case 0: case 1: t = op; break;
+                case 4: _.label++; return { value: op[1], done: false };
+                case 5: _.label++; y = op[1]; op = [0]; continue;
+                case 7: op = _.ops.pop(); _.trys.pop(); continue;
+                default:
+                    if (!(t = _.trys, t = t.length > 0 && t[t.length - 1]) && (op[0] === 6 || op[0] === 2)) { _ = 0; continue; }
+                    if (op[0] === 3 && (!t || (op[1] > t[0] && op[1] < t[3]))) { _.label = op[1]; break; }
+                    if (op[0] === 6 && _.label < t[1]) { _.label = t[1]; t = op; break; }
+                    if (t && _.label < t[2]) { _.label = t[2]; _.ops.push(op); break; }
+                    if (t[2]) _.ops.pop();
+                    _.trys.pop(); continue;
+            }
+            op = body.call(thisArg, _);
+        } catch (e) { op = [6, e]; y = 0; } finally { f = t = 0; }
+        if (op[0] & 5) throw op[1]; return { value: op[0] ? op[1] : void 0, done: true };
+    }
+};
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+var moment_1 = __importDefault(require("moment"));
+var db_1 = require("@proteinjs/db");
+var user_1 = require("@proteinjs/user");
+var userCache_1 = require("../src/authorization/userCache");
+var UserActivityStamp_1 = require("../src/authorization/UserActivityStamp");
+var UserServerTestEnvironment_1 = require("./UserServerTestEnvironment");
+var testEnv = new UserServerTestEnvironment_1.UserServerTestEnvironment();
+var stampInternals = function (stamp) { return stamp.constructor; };
+var activityRows = function (scope) { return __awaiter(void 0, void 0, void 0, function () { return __generator(this, function (_a) {
+    switch (_a.label) {
+        case 0: return [4 /*yield*/, (0, db_1.getDbAsSystem)().query(user_1.tables.UserActivity, { scope: scope })];
+        case 1: return [2 /*return*/, _a.sent()];
+    }
+}); }); };
+/** The stamp write is fire-and-forget off userCache — poll the OUTCOME (row present) briefly. */
+var waitForActivityRow = function (scope) { return __awaiter(void 0, void 0, void 0, function () {
+    var attempt, rows;
+    return __generator(this, function (_a) {
+        switch (_a.label) {
+            case 0:
+                attempt = 0;
+                _a.label = 1;
+            case 1:
+                if (!(attempt < 50)) return [3 /*break*/, 5];
+                return [4 /*yield*/, activityRows(scope)];
+            case 2:
+                rows = _a.sent();
+                if (rows.length > 0) {
+                    return [2 /*return*/, rows[0]];
+                }
+                return [4 /*yield*/, new Promise(function (resolve) { return setTimeout(resolve, 100); })];
+            case 3:
+                _a.sent();
+                _a.label = 4;
+            case 4:
+                attempt++;
+                return [3 /*break*/, 1];
+            case 5: throw new Error("No user_activity row appeared for scope ".concat(scope));
+        }
+    });
+}); };
+/**
+ * LAST ACTIVITY = HUMAN PRESENCE (UserActivityTable's contract): the stamp fires from
+ * userCache.create — the once-per-interactive-request session-cache build — and from nowhere
+ * else. These tests pin the seam's outcomes: a human's request lands the presence row; machine
+ * accounts (real sessions, e.g. the error bridge's polling login) never do; repeated stamps
+ * keep ONE row per user; the throttle holds writes to the interval.
+ */
+describe('UserActivityStamp — interactive presence', function () {
+    beforeAll(function () { return __awaiter(void 0, void 0, void 0, function () {
+        return __generator(this, function (_a) {
+            switch (_a.label) {
+                case 0: return [4 /*yield*/, testEnv.beforeAll()];
+                case 1:
+                    _a.sent();
+                    return [2 /*return*/];
+            }
+        });
+    }); });
+    afterAll(function () { return __awaiter(void 0, void 0, void 0, function () {
+        return __generator(this, function (_a) {
+            switch (_a.label) {
+                case 0: return [4 /*yield*/, testEnv.afterAll()];
+                case 1:
+                    _a.sent();
+                    return [2 /*return*/];
+            }
+        });
+    }); });
+    beforeEach(function () {
+        // Each test controls its own throttle history.
+        stampInternals(new UserActivityStamp_1.UserActivityStamp()).lastStampMs.clear();
+    });
+    it('stamps presence when a signed-in human makes an interactive request (through userCache.create)', function () { return __awaiter(void 0, void 0, void 0, function () {
+        var user, resolved, row;
+        return __generator(this, function (_a) {
+            switch (_a.label) {
+                case 0: return [4 /*yield*/, testEnv.createUser({ name: 'Present Human', email: 'present-human@test.local' })];
+                case 1:
+                    user = _a.sent();
+                    return [4 /*yield*/, userCache_1.userCache.create('interactive-session', user.email)];
+                case 2:
+                    resolved = _a.sent();
+                    expect(resolved.id).toBe(user.id);
+                    return [4 /*yield*/, waitForActivityRow(user.id)];
+                case 3:
+                    row = _a.sent();
+                    expect((0, moment_1.default)(row.lastActiveAt).isAfter((0, moment_1.default)().subtract(1, 'minute'))).toBe(true);
+                    return [2 /*return*/];
+            }
+        });
+    }); });
+    it('keeps ONE row per user and advances it on later stamps (scope-unique invariant)', function () { return __awaiter(void 0, void 0, void 0, function () {
+        var user, stamp, first, rows;
+        return __generator(this, function (_a) {
+            switch (_a.label) {
+                case 0: return [4 /*yield*/, testEnv.createUser({ name: 'Returning Human', email: 'returning-human@test.local' })];
+                case 1:
+                    user = _a.sent();
+                    stamp = new UserActivityStamp_1.UserActivityStamp();
+                    return [4 /*yield*/, stamp.recordInteractiveRequest(user)];
+                case 2:
+                    _a.sent();
+                    return [4 /*yield*/, waitForActivityRow(user.id)];
+                case 3:
+                    first = _a.sent();
+                    // Clear the throttle so the second request stamps immediately.
+                    stampInternals(stamp).lastStampMs.clear();
+                    return [4 /*yield*/, new Promise(function (resolve) { return setTimeout(resolve, 5); })];
+                case 4:
+                    _a.sent();
+                    return [4 /*yield*/, stamp.recordInteractiveRequest(user)];
+                case 5:
+                    _a.sent();
+                    return [4 /*yield*/, activityRows(user.id)];
+                case 6:
+                    rows = _a.sent();
+                    expect(rows).toHaveLength(1);
+                    expect((0, moment_1.default)(rows[0].lastActiveAt).valueOf()).toBeGreaterThanOrEqual((0, moment_1.default)(first.lastActiveAt).valueOf());
+                    return [2 /*return*/];
+            }
+        });
+    }); });
+    it('never stamps a machine account, even though its requests ride a real session', function () { return __awaiter(void 0, void 0, void 0, function () {
+        var machine, resolved, _a;
+        return __generator(this, function (_b) {
+            switch (_b.label) {
+                case 0: return [4 /*yield*/, (0, db_1.getDbAsSystem)().insert(user_1.tables.User, {
+                        name: 'Ops machine',
+                        email: 'stamp-machine@test.local',
+                        password: 'test',
+                        emailVerified: true,
+                        roles: [],
+                        isLoadedFromSource: true,
+                    })];
+                case 1:
+                    machine = _b.sent();
+                    // Await the stamp DIRECTLY (deterministic absence — no fire-and-forget race), then confirm
+                    // the transport seam agrees by resolving the machine session through userCache too.
+                    return [4 /*yield*/, new UserActivityStamp_1.UserActivityStamp().recordInteractiveRequest(machine)];
+                case 2:
+                    // Await the stamp DIRECTLY (deterministic absence — no fire-and-forget race), then confirm
+                    // the transport seam agrees by resolving the machine session through userCache too.
+                    _b.sent();
+                    return [4 /*yield*/, userCache_1.userCache.create('machine-session', machine.email)];
+                case 3:
+                    resolved = _b.sent();
+                    expect(resolved.id).toBe(machine.id);
+                    return [4 /*yield*/, new Promise(function (resolve) { return setTimeout(resolve, 300); })];
+                case 4:
+                    _b.sent();
+                    _a = expect;
+                    return [4 /*yield*/, activityRows(machine.id)];
+                case 5:
+                    _a.apply(void 0, [_b.sent()]).toHaveLength(0);
+                    return [2 /*return*/];
+            }
+        });
+    }); });
+    it('throttles: a second request inside the interval writes nothing', function () { return __awaiter(void 0, void 0, void 0, function () {
+        var user, stamp, first, rows;
+        return __generator(this, function (_a) {
+            switch (_a.label) {
+                case 0: return [4 /*yield*/, testEnv.createUser({ name: 'Rapid Human', email: 'rapid-human@test.local' })];
+                case 1:
+                    user = _a.sent();
+                    stamp = new UserActivityStamp_1.UserActivityStamp();
+                    return [4 /*yield*/, stamp.recordInteractiveRequest(user)];
+                case 2:
+                    _a.sent();
+                    return [4 /*yield*/, waitForActivityRow(user.id)];
+                case 3:
+                    first = _a.sent();
+                    // Throttle history now holds this user; a second stamp inside the interval must not write.
+                    return [4 /*yield*/, stamp.recordInteractiveRequest(user)];
+                case 4:
+                    // Throttle history now holds this user; a second stamp inside the interval must not write.
+                    _a.sent();
+                    return [4 /*yield*/, new Promise(function (resolve) { return setTimeout(resolve, 300); })];
+                case 5:
+                    _a.sent();
+                    return [4 /*yield*/, activityRows(user.id)];
+                case 6:
+                    rows = _a.sent();
+                    expect(rows).toHaveLength(1);
+                    expect((0, moment_1.default)(rows[0].lastActiveAt).valueOf()).toBe((0, moment_1.default)(first.lastActiveAt).valueOf());
+                    return [2 /*return*/];
+            }
+        });
+    }); });
+    it('a session for a missing account still resolves guest and stamps nothing (no throw)', function () { return __awaiter(void 0, void 0, void 0, function () {
+        var before, resolved, _a;
+        return __generator(this, function (_b) {
+            switch (_b.label) {
+                case 0: return [4 /*yield*/, (0, db_1.getDbAsSystem)().query(user_1.tables.UserActivity, {})];
+                case 1:
+                    before = (_b.sent()).length;
+                    return [4 /*yield*/, userCache_1.userCache.create('stale-session', 'no-such-account@test.local')];
+                case 2:
+                    resolved = _b.sent();
+                    expect(resolved.id).toBe('guest');
+                    return [4 /*yield*/, new Promise(function (resolve) { return setTimeout(resolve, 200); })];
+                case 3:
+                    _b.sent();
+                    _a = expect;
+                    return [4 /*yield*/, (0, db_1.getDbAsSystem)().query(user_1.tables.UserActivity, {})];
+                case 4:
+                    _a.apply(void 0, [(_b.sent()).length]).toBe(before);
+                    return [2 /*return*/];
+            }
+        });
+    }); });
+});
+//# sourceMappingURL=UserActivityStamp.integration.test.js.map

package/dist/test/UserActivityStamp.integration.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"UserActivityStamp.integration.test.js","sourceRoot":"","sources":["../../test/UserActivityStamp.integration.test.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,kDAA4B;AAC5B,oCAA8C;AAC9C,wCAAuE;AACvE,4DAA2D;AAC3D,4EAA2E;AAC3E,yEAAwE;AAExE,IAAM,OAAO,GAAG,IAAI,qDAAyB,EAAE,CAAC;AAMhD,IAAM,cAAc,GAAG,UAAC,KAAwB,IAAK,OAAC,KAAmC,CAAC,WAAW,EAAhD,CAAgD,CAAC;AAEtG,IAAM,YAAY,GAAG,UAAO,KAAa;;gBACvC,qBAAM,IAAA,kBAAa,GAAE,CAAC,KAAK,CAAC,aAAM,CAAC,YAAY,EAAE,EAAE,KAAK,OAAA,EAAE,CAAC,EAAA;gBAA3D,sBAAA,SAA2D,EAAA;;SAAA,CAAC;AAE9D,iGAAiG;AACjG,IAAM,kBAAkB,GAAG,UAAO,KAAa;;;;;gBACpC,OAAO,GAAG,CAAC;;;qBAAE,CAAA,OAAO,GAAG,EAAE,CAAA;gBACnB,qBAAM,YAAY,CAAC,KAAK,CAAC,EAAA;;gBAAhC,IAAI,GAAG,SAAyB;gBACtC,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE;oBACnB,sBAAO,IAAI,CAAC,CAAC,CAAC,EAAC;iBAChB;gBACD,qBAAM,IAAI,OAAO,CAAC,UAAC,OAAO,IAAK,OAAA,UAAU,CAAC,OAAO,EAAE,GAAG,CAAC,EAAxB,CAAwB,CAAC,EAAA;;gBAAxD,SAAwD,CAAC;;;gBALvB,OAAO,EAAE,CAAA;;oBAO7C,MAAM,IAAI,KAAK,CAAC,kDAA2C,KAAK,CAAE,CAAC,CAAC;;;KACrE,CAAC;AAEF;;;;;;GAMG;AACH,QAAQ,CAAC,0CAA0C,EAAE;IACnD,SAAS,CAAC;;;wBACR,qBAAM,OAAO,CAAC,SAAS,EAAE,EAAA;;oBAAzB,SAAyB,CAAC;;;;SAC3B,CAAC,CAAC;IAEH,QAAQ,CAAC;;;wBACP,qBAAM,OAAO,CAAC,QAAQ,EAAE,EAAA;;oBAAxB,SAAwB,CAAC;;;;SAC1B,CAAC,CAAC;IAEH,UAAU,CAAC;QACT,+CAA+C;QAC/C,cAAc,CAAC,IAAI,qCAAiB,EAAE,CAAC,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC;IAC9D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gGAAgG,EAAE;;;;wBACtF,qBAAM,OAAO,CAAC,UAAU,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,KAAK,EAAE,0BAA0B,EAAE,CAAC,EAAA;;oBAA7F,IAAI,GAAG,SAAsF;oBAElF,qBAAM,qBAAS,CAAC,MAAM,CAAC,qBAAqB,EAAE,IAAI,CAAC,KAAK,CAAC,EAAA;;oBAApE,QAAQ,GAAG,SAAyD;oBAC1E,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;oBAEtB,qBAAM,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC,EAAA;;oBAAvC,GAAG,GAAG,SAAiC;oBAC7C,MAAM,CAAC,IAAA,gBAAM,EAAC,GAAG,CAAC,YAAY,CAAC,CAAC,OAAO,CAAC,IAAA,gBAAM,GAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;;;;SACrF,CAAC,CAAC;IAEH,EAAE,CAAC,iFAAiF,EAAE;;;;wBACvE,qBAAM,OAAO,CAAC,UAAU,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,KAAK,EAAE,4BAA4B,EAAE,CAAC,EAAA;;oBAAjG,IAAI,GAAG,SAA0F;oBACjG,KAAK,GAAG,IAAI,qCAAiB,EAAE,CAAC;oBAEtC,qBAAM,KAAK,CAAC,wBAAwB,CAAC,IAAI,CAAC,EAAA;;oBAA1C,SAA0C,CAAC;oBAC7B,qBAAM,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC,EAAA;;oBAAzC,KAAK,GAAG,SAAiC;oBAE/C,+DAA+D;oBAC/D,cAAc,CAAC,KAAK,CAAC,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC;oBAC1C,qBAAM,IAAI,OAAO,CAAC,UAAC,OAAO,IAAK,OAAA,UAAU,CAAC,OAAO,EAAE,CAAC,CAAC,EAAtB,CAAsB,CAAC,EAAA;;oBAAtD,SAAsD,CAAC;oBACvD,qBAAM,KAAK,CAAC,wBAAwB,CAAC,IAAI,CAAC,EAAA;;oBAA1C,SAA0C,CAAC;oBAE9B,qBAAM,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC,EAAA;;oBAAlC,IAAI,GAAG,SAA2B;oBACxC,MAAM,CAAC,IAAI,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;oBAC7B,MAAM,CAAC,IAAA,gBAAM,EAAC,IAAI,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,sBAAsB,CAAC,IAAA,gBAAM,EAAC,KAAK,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;;;;SAC7G,CAAC,CAAC;IAEH,EAAE,CAAC,8EAA8E,EAAE;;;;wBACjE,qBAAM,IAAA,kBAAa,GAAE,CAAC,MAAM,CAAC,aAAM,CAAC,IAAI,EAAE;wBACxD,IAAI,EAAE,aAAa;wBACnB,KAAK,EAAE,0BAA0B;wBACjC,QAAQ,EAAE,MAAM;wBAChB,aAAa,EAAE,IAAI;wBACnB,KAAK,EAAE,EAAE;wBACT,kBAAkB,EAAE,IAAI;qBACN,CAAC,EAAA;;oBAPf,OAAO,GAAG,SAOK;oBAErB,2FAA2F;oBAC3F,oFAAoF;oBACpF,qBAAM,IAAI,qCAAiB,EAAE,CAAC,wBAAwB,CAAC,OAAO,CAAC,EAAA;;oBAF/D,2FAA2F;oBAC3F,oFAAoF;oBACpF,SAA+D,CAAC;oBAC/C,qBAAM,qBAAS,CAAC,MAAM,CAAC,iBAAiB,EAAE,OAAO,CAAC,KAAK,CAAC,EAAA;;oBAAnE,QAAQ,GAAG,SAAwD;oBACzE,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;oBACrC,qBAAM,IAAI,OAAO,CAAC,UAAC,OAAO,IAAK,OAAA,UAAU,CAAC,OAAO,EAAE,GAAG,CAAC,EAAxB,CAAwB,CAAC,EAAA;;oBAAxD,SAAwD,CAAC;oBAEzD,KAAA,MAAM,CAAA;oBAAC,qBAAM,YAAY,CAAC,OAAO,CAAC,EAAE,CAAC,EAAA;;oBAArC,kBAAO,SAA8B,EAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;;;;SACxD,CAAC,CAAC;IAEH,EAAE,CAAC,gEAAgE,EAAE;;;;wBACtD,qBAAM,OAAO,CAAC,UAAU,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,wBAAwB,EAAE,CAAC,EAAA;;oBAAzF,IAAI,GAAG,SAAkF;oBACzF,KAAK,GAAG,IAAI,qCAAiB,EAAE,CAAC;oBAEtC,qBAAM,KAAK,CAAC,wBAAwB,CAAC,IAAI,CAAC,EAAA;;oBAA1C,SAA0C,CAAC;oBAC7B,qBAAM,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC,EAAA;;oBAAzC,KAAK,GAAG,SAAiC;oBAE/C,2FAA2F;oBAC3F,qBAAM,KAAK,CAAC,wBAAwB,CAAC,IAAI,CAAC,EAAA;;oBAD1C,2FAA2F;oBAC3F,SAA0C,CAAC;oBAC3C,qBAAM,IAAI,OAAO,CAAC,UAAC,OAAO,IAAK,OAAA,UAAU,CAAC,OAAO,EAAE,GAAG,CAAC,EAAxB,CAAwB,CAAC,EAAA;;oBAAxD,SAAwD,CAAC;oBAE5C,qBAAM,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC,EAAA;;oBAAlC,IAAI,GAAG,SAA2B;oBACxC,MAAM,CAAC,IAAI,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;oBAC7B,MAAM,CAAC,IAAA,gBAAM,EAAC,IAAI,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,IAAA,gBAAM,EAAC,KAAK,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;;;;SAC3F,CAAC,CAAC;IAEH,EAAE,CAAC,oFAAoF,EAAE;;;;wBACvE,qBAAM,IAAA,kBAAa,GAAE,CAAC,KAAK,CAAC,aAAM,CAAC,YAAY,EAAE,EAAE,CAAC,EAAA;;oBAA9D,MAAM,GAAG,CAAC,SAAoD,CAAC,CAAC,MAAM;oBAC3D,qBAAM,qBAAS,CAAC,MAAM,CAAC,eAAe,EAAE,4BAA4B,CAAC,EAAA;;oBAAhF,QAAQ,GAAG,SAAqE;oBACtF,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;oBAClC,qBAAM,IAAI,OAAO,CAAC,UAAC,OAAO,IAAK,OAAA,UAAU,CAAC,OAAO,EAAE,GAAG,CAAC,EAAxB,CAAwB,CAAC,EAAA;;oBAAxD,SAAwD,CAAC;oBACzD,KAAA,MAAM,CAAA;oBAAE,qBAAM,IAAA,kBAAa,GAAE,CAAC,KAAK,CAAC,aAAM,CAAC,YAAY,EAAE,EAAE,CAAC,EAAA;;oBAA5D,kBAAO,CAAC,SAAoD,CAAC,CAAC,MAAM,EAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;;;;SACpF,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@proteinjs/user-server",
-  "version": "1.12.0",
+  "version": "1.14.0",
   "description": "User server components",
   "publishConfig": {
     "access": "public"
@@ -22,14 +22,14 @@
     "test": "jest --runInBand --passWithNoTests"
   },
   "dependencies": {
-    "@proteinjs/db": "^1.35.0",
+    "@proteinjs/db": "^1.37.0",
     "@proteinjs/db-file": "^1.5.3",
     "@proteinjs/email-server": "^1.3.0",
     "@proteinjs/logger": "^1.0.21",
     "@proteinjs/reflection": "^1.2.0",
     "@proteinjs/server": "^3.5.1",
     "@proteinjs/server-api": "^3.0.11",
-    "@proteinjs/user": "^1.13.0",
+    "@proteinjs/user": "^1.15.0",
     "@proteinjs/util": "^1.6.1",
     "argon2": "^0.45.1",
     "crypto-js": "4.0.0",
@@ -59,5 +59,5 @@
   },
   "main": "./dist/generated/index.js",
   "types": "./dist/generated/index.d.ts",
-  "gitHead": "fd6695114449df3a990504f37aab15e4342240cf"
+  "gitHead": "2f490c4aa828ed0a241421fb01d9fd372d88e4a2"
 }

package/src/authorization/UserActivityStamp.ts

@@ -0,0 +1,66 @@
+import moment from 'moment';
+import { getDbAsSystem } from '@proteinjs/db';
+import { Logger } from '@proteinjs/logger';
+import { tables, type User, type UserActivity } from '@proteinjs/user';
+
+/**
+ * Writes the LAST-ACTIVITY presence stamp (`user_activity`, one row per user — see
+ * UserActivityTable's contract): "this human made an interactive request just now".
+ *
+ * The TRANSPORT keying lives at the call site — userCache.create runs once per session-cookie
+ * request (wrapRoute's session-cache build) and only there, so seeded/background contexts
+ * (runInUserScope sets session data directly) structurally never reach this class. What this
+ * class owns is the ACCOUNT predicate: machine accounts (`isLoadedFromSource`) are refused —
+ * their requests do arrive over real sessions (e.g. the error bridge's polling), but a machine
+ * logging in is not a person being present.
+ *
+ * Write behavior mirrors DbSessionStore's touch: throttled per user (a presence fact consumed at
+ * day grain needs no finer cadence, and an unthrottled stamp would put a write on EVERY request),
+ * fail-open (a lost stamp is a few minutes of staleness, never a failed request — the returned
+ * promise NEVER rejects), and race-tolerant (concurrent first stamps contend on the scope-unique
+ * index; the loser's error is swallowed as debug).
+ */
+export class UserActivityStamp {
+  /** Stamp at most this often per user — same cadence class as DbSessionStore.TOUCH_INTERVAL. */
+  private static readonly STAMP_INTERVAL_MS = 1000 * 60 * 5;
+  /** Process-wide: userCache is a plain object, so throttle state can't live per-instance. */
+  private static lastStampMs = new Map<string, number>();
+
+  private logger = new Logger({ name: this.constructor.name });
+
+  /**
+   * Record that `user` is present on an interactive request. Fire-and-forget safe: errors are
+   * handled (and logged) here, so callers may `void` the returned promise.
+   */
+  recordInteractiveRequest(user: User): Promise<void> {
+    if (!user.id || user.isLoadedFromSource === true) {
+      return Promise.resolve();
+    }
+    const last = UserActivityStamp.lastStampMs.get(user.id) ?? 0;
+    const now = Date.now();
+    if (now - last < UserActivityStamp.STAMP_INTERVAL_MS) {
+      return Promise.resolve();
+    }
+    UserActivityStamp.lastStampMs.set(user.id, now);
+    if (UserActivityStamp.lastStampMs.size > 10000) {
+      UserActivityStamp.lastStampMs.clear(); // bounded memory; worst case is one extra stamp per user
+    }
+    return this.upsert(user.id).catch((error) => {
+      // Contention (a concurrent request stamped first, racing the scope-unique index) and real
+      // failures land here alike; both are harmless to the request. Un-throttle so the next
+      // request retries instead of waiting out a full interval on a stamp that never landed.
+      UserActivityStamp.lastStampMs.delete(user.id);
+      this.logger.error({ message: 'Failed to write user activity stamp', error });
+    });
+  }
+
+  private async upsert(userId: string): Promise<void> {
+    const db = getDbAsSystem();
+    const existing = await db.get(tables.UserActivity, { scope: userId });
+    if (existing) {
+      await db.update(tables.UserActivity, { id: existing.id, lastActiveAt: moment() } as UserActivity);
+    } else {
+      await db.insert(tables.UserActivity, { scope: userId, lastActiveAt: moment() } as UserActivity);
+    }
+  }
+}

package/src/authorization/userCache.ts

@@ -4,8 +4,10 @@ import { getDbAsSystem } from '@proteinjs/db';
 import { Logger } from '@proteinjs/logger';
 import { User, tables, guestUser, USER_SESSION_CACHE_KEY } from '@proteinjs/user';
 import { DefaultAdminCredentials } from '../authentication/DefaultAdminCredentials';
+import { UserActivityStamp } from './UserActivityStamp';
 
 const logger = new Logger({ name: 'userCache' });
+const userActivityStamp = new UserActivityStamp();
 
 export const userCache: SessionDataCache<User> = {
   key: USER_SESSION_CACHE_KEY,
@@ -38,6 +40,13 @@ export const userCache: SessionDataCache<User> = {
         } else if (accountUser) {
           delete (accountUser as any)['password'];
           user = accountUser;
+          // LAST ACTIVITY (human presence — UserActivityTable's contract): stamped HERE because
+          // this cache build runs exactly once per session-cookie request (wrapRoute), i.e. only
+          // for interactive transport. Background/seeded contexts (runInUserScope) set session
+          // data directly and never pass through, so machinery acting as the user structurally
+          // cannot stamp; the stamp itself refuses machine accounts. Fire-and-forget: the
+          // returned promise never rejects, and a request never waits on its own stamp.
+          void userActivityStamp.recordInteractiveRequest(user);
         } else {
           // A session can outlive its account (row deleted, or a dev auto-login for a never-created
           // email). Resolve it to the unauthenticated guest session — the client sees no