@raclettejs/core 0.1.18 → 0.1.20

package/services/backend/src/corePlugins/raclette__core/backend/datatypes/interactionLink/interactionLink.service.ts

@@ -97,11 +97,10 @@ export class InteractionLinkService {
    */
   async _readAllInteractionLinks(
     fastify: PluginFastifyInstance,
-    filters: Record<string, any> = {},
+    filters: Record<string, any> = { isDeleted: false },
   ): Promise<InteractionLinkType[]> {
     try {
-      if (filters.isDeleted !== true && filters.isDeleted !== "true")
-        filters.isDeleted = false
+      filters = { isDeleted: false, ...filters }
       return await this.interactionLinkModel
         .find({
           ...filters,
@@ -130,16 +129,16 @@ export class InteractionLinkService {
   }
 
   /**
-   * Core function to get interaction links by composition ID (returns raw data)
+   * Core function to get interaction links by interactionLink ID (returns raw data)
    */
-  async _readInteractionLinksByComposition(
+  async _readInteractionLinksByInteractionLink(
     fastify: PluginFastifyInstance,
-    compositionId: string,
+    interactionLinkId: string,
   ): Promise<InteractionLinkType[]> {
     try {
       return await this.interactionLinkModel
         .find({
-          composition: compositionId,
+          interactionLink: interactionLinkId,
           isDeleted: false,
         })
         .lean()
@@ -150,16 +149,16 @@ export class InteractionLinkService {
   }
 
   /**
-   * Get interaction links by composition ID with payload wrapping
+   * Get interaction links by interactionLink ID with payload wrapping
    */
-  async readInteractionLinksByComposition(
+  async readInteractionLinksByInteractionLink(
     fastify: PluginFastifyInstance,
     requestData: FrontendPayloadRequestData,
-    compositionId: string,
+    interactionLinkId: string,
   ): Promise<FrontendPayload<InteractionLinkType[]>> {
-    const interactionLinks = await this._readInteractionLinksByComposition(
+    const interactionLinks = await this._readInteractionLinksByInteractionLink(
       fastify,
-      compositionId,
+      interactionLinkId,
     )
 
     return createInteractionLinkPayload(fastify, interactionLinks, requestData)
@@ -439,6 +438,91 @@ export class InteractionLinkService {
 
     return createInteractionLinkPayload(fastify, interactionLinks, requestData)
   }
+  /**
+   * Core function to create multiple interactionLinks (returns raw data)
+   */
+  async _createInteractionLinks(
+    fastify: PluginFastifyInstance,
+    interactionLinkBodies: InteractionLinkBody[],
+    userId: string,
+  ): Promise<InteractionLinkType[]> {
+    try {
+      const interactionLinksToCreate: InteractionLinkBody[] = []
+
+      // Validate and prepare all interactionLinks
+      for (const interactionLinkBody of interactionLinkBodies) {
+        if (interactionLinkBody._id) {
+          const uuidValid = validate(interactionLinkBody._id)
+
+          if (!uuidValid) {
+            throw new Error(
+              `Invalid ID - not a valid uuid v4: ${interactionLinkBody._id}`,
+            )
+          }
+
+          const duplicate = await this.interactionLinkModel.findOne({
+            _id: interactionLinkBody._id,
+          })
+
+          if (duplicate) {
+            throw new Error(
+              `An entry with this id already exists: ${interactionLinkBody._id}`,
+            )
+          }
+        } else {
+          interactionLinkBody._id = uuidv4()
+        }
+
+        interactionLinksToCreate.push({
+          ...interactionLinkBody,
+          author: userId,
+          lastEditor: userId,
+        })
+      }
+
+      // Bulk insert
+      const interactionLinks = await this.interactionLinkModel.insertMany(
+        interactionLinksToCreate,
+      )
+
+      fastify.log.info(
+        `[API] Created ${interactionLinks.length} interactionLinks in bulk`,
+      )
+
+      return interactionLinks.map((comp) =>
+        comp.toObject ? comp.toObject() : comp,
+      )
+    } catch (error: any) {
+      fastify.log.error(error.message)
+      throw error
+    }
+  }
+
+  /**
+   * Create multiple interactionLinks with payload wrapping and event emission
+   */
+  async createInteractionLinks(
+    fastify: PluginFastifyInstance,
+    requestData: FrontendPayloadRequestData,
+    interactionLinkBodies: InteractionLinkBody[],
+    userId: string,
+  ): Promise<FrontendPayload<InteractionLinkType[]>> {
+    const interactionLinks = await this._createInteractionLinks(
+      fastify,
+      interactionLinkBodies,
+      userId,
+    )
+
+    const payload = await createInteractionLinkPayload(
+      fastify,
+      interactionLinks,
+      requestData,
+    )
+
+    fastify.emit("interactionLinksCreated", payload)
+
+    return payload
+  }
 }
 
 export const createInteractionLinkService = (

package/services/backend/src/corePlugins/raclette__core/backend/datatypes/interactionLink/routes/index.ts

@@ -4,6 +4,7 @@ import getAll from "./route.interactionLink.getAll"
 import hardDelete from "./route.interactionLink.hardDelete"
 import patch from "./route.interactionLink.patch"
 import post from "./route.interactionLink.post"
+import postBulk from "./route.interactionLink.post.bulk"
 import remove from "./route.interactionLink.remove"
 import restore from "./route.interactionLink.restore"
 
@@ -13,6 +14,7 @@ const registerRoutes = async (fastify: PluginFastifyInstance) => {
   await fastify.patch("/interactionLink/:_id", patch(fastify))
   await fastify.patch("/interactionLink/:_id/restore", restore(fastify))
   await fastify.post("/interactionLink", post(fastify))
+  await fastify.post("/interactionLink/bulk", postBulk(fastify))
   await fastify.delete("/interactionLink/:_id", remove(fastify))
   await fastify.delete("/interactionLink/:_id/hard", hardDelete(fastify))
 }

package/services/backend/src/corePlugins/raclette__core/backend/datatypes/interactionLink/routes/route.interactionLink.get.ts

@@ -3,6 +3,8 @@ import type { FastifyReply, FastifyRequest } from "fastify"
 import { PluginFastifyInstance } from "types"
 import { Type } from "@sinclair/typebox"
 
+const permissions = ["user.isAdmin"]
+
 const ParamsSchema = Type.Object({
   _id: Type.String(),
 })
@@ -39,7 +41,7 @@ export default (fastify: PluginFastifyInstance) => {
 
   return {
     handler,
-    onRequest: [fastify.authenticate],
+    onRequest: [fastify.authenticate, fastify.checkPermissions(permissions)],
     config: {
       type: "dataRead",
     },

package/services/backend/src/corePlugins/raclette__core/backend/datatypes/interactionLink/routes/route.interactionLink.getAll.ts

@@ -1,5 +1,7 @@
 import type { FastifyReply, FastifyRequest } from "fastify"
-import { PluginFastifyInstance } from "types"
+import type { PluginFastifyInstance } from "types"
+
+const permissions = ["user.isAdmin"]
 
 export default (fastify: PluginFastifyInstance) => {
   const interactionLinkService = fastify.custom.interactionLinkService
@@ -21,7 +23,7 @@ export default (fastify: PluginFastifyInstance) => {
 
   return {
     handler,
-    onRequest: [fastify.authenticate],
+    onRequest: [fastify.authenticate, fastify.checkPermissions(permissions)],
     config: {
       type: "dataRead",
     },

package/services/backend/src/corePlugins/raclette__core/backend/datatypes/interactionLink/routes/route.interactionLink.hardDelete.ts

@@ -2,7 +2,8 @@ import type { Static } from "@sinclair/typebox"
 import type { FastifyReply, FastifyRequest } from "fastify"
 import { PluginFastifyInstance } from "types"
 import { Type } from "@sinclair/typebox"
-import { ForbiddenError } from "@/utils/errors"
+
+const permissions = ["user.isAdmin"]
 
 const ParamsSchema = Type.Object({
   _id: Type.String(),
@@ -19,21 +20,15 @@ export default (fastify: PluginFastifyInstance) => {
     reply: FastifyReply,
   ) => {
     try {
-      if (req.user.isAdmin) {
-        const { _id } = req.params
-
-        const payload = await interactionLinkService.hardDeleteInteractionLink(
-          fastify,
-          req.requestParams,
-          _id,
-        )
-
-        return payload
-      } else {
-        throw new ForbiddenError(
-          "Only admins can hard delete this core datatype",
-        )
-      }
+      const { _id } = req.params
+
+      const payload = await interactionLinkService.hardDeleteInteractionLink(
+        fastify,
+        req.requestParams,
+        _id,
+      )
+
+      return payload
     } catch (error: any) {
       fastify.log.error(error.message)
       return reply.internalServerError(error.message)
@@ -42,7 +37,7 @@ export default (fastify: PluginFastifyInstance) => {
 
   return {
     handler,
-    onRequest: [fastify.authenticate],
+    onRequest: [fastify.authenticate, fastify.checkPermissions(permissions)],
     config: {
       type: "dataHardDelete",
       broadcastChannels: ["interactionLinkHardDeleted"],

package/services/backend/src/corePlugins/raclette__core/backend/datatypes/interactionLink/routes/route.interactionLink.patch.ts

@@ -5,6 +5,8 @@ import { PluginFastifyInstance } from "types"
 import { Type } from "@sinclair/typebox"
 import { interactionLinkUpdateSchema } from "../interactionLink.schema"
 
+const permissions = ["user.isAdmin"]
+
 const ParamsSchema = Type.Object({
   _id: Type.String(),
 })
@@ -39,7 +41,7 @@ export default (fastify: PluginFastifyInstance) => {
 
   return {
     handler,
-    onRequest: [fastify.authenticate],
+    onRequest: [fastify.authenticate, fastify.checkPermissions(permissions)],
     config: {
       type: "dataUpdate",
       broadcastChannels: ["interactionLinkUpdated"],

package/services/backend/src/corePlugins/raclette__core/backend/datatypes/interactionLink/routes/route.interactionLink.post.bulk.ts

@@ -0,0 +1,62 @@
+import type { InteractionLinkBody } from "../interactionLink.service"
+import type { FastifyReply, FastifyRequest } from "fastify"
+import type { PluginFastifyInstance } from "types"
+import { interactionLinkCreateSchema } from "../interactionLink.schema"
+
+const permissions = ["user.isAdmin"]
+
+export default (fastify: PluginFastifyInstance) => {
+  const interactionLinkService = fastify.custom.interactionLinkService
+
+  const handler = async (
+    req: FastifyRequest<{
+      Body: InteractionLinkBody[]
+    }>,
+    reply: FastifyReply,
+  ) => {
+    try {
+      // Validate that body is an array
+      if (!Array.isArray(req.body)) {
+        return reply.badRequest(
+          "Request body must be an array of interactionLinks",
+        )
+      }
+
+      // Validate that array is not empty
+      if (req.body.length === 0) {
+        return reply.badRequest("Request body cannot be an empty array")
+      }
+
+      const payload = await interactionLinkService.createInteractionLinks(
+        fastify,
+        req.requestParams,
+        req.body,
+        req.user._id,
+      )
+
+      return payload
+    } catch (error: any) {
+      fastify.log.error(error.message)
+
+      return reply.internalServerError(error.message)
+    }
+  }
+
+  return {
+    handler,
+    onRequest: [fastify.authenticate, fastify.checkPermissions(permissions)],
+    config: {
+      type: "dataCreate",
+      broadcastChannels: ["interactionLinksCreated"],
+    },
+    schema: {
+      summary: "Create multiple interactionLinks in bulk",
+      tags: ["core/interactionLink"],
+      body: {
+        type: "array",
+        items: interactionLinkCreateSchema,
+        minItems: 1,
+      },
+    },
+  }
+}

package/services/backend/src/corePlugins/raclette__core/backend/datatypes/interactionLink/routes/route.interactionLink.post.ts

@@ -3,6 +3,8 @@ import type { FastifyReply, FastifyRequest } from "fastify"
 import { PluginFastifyInstance } from "types"
 import { interactionLinkCreateSchema } from "../interactionLink.schema"
 
+const permissions = ["user.isAdmin"]
+
 export default (fastify: PluginFastifyInstance) => {
   const interactionLinkService = fastify.custom.interactionLinkService
 
@@ -30,7 +32,7 @@ export default (fastify: PluginFastifyInstance) => {
 
   return {
     handler,
-    onRequest: [fastify.authenticate],
+    onRequest: [fastify.authenticate, fastify.checkPermissions(permissions)],
     config: {
       type: "dataCreate",
       broadcastChannels: ["interactionLinkCreated"],

package/services/backend/src/corePlugins/raclette__core/backend/datatypes/interactionLink/routes/route.interactionLink.remove.ts

@@ -3,6 +3,8 @@ import type { FastifyReply, FastifyRequest } from "fastify"
 import { PluginFastifyInstance } from "types"
 import { Type } from "@sinclair/typebox"
 
+const permissions = ["user.isAdmin"]
+
 const ParamsSchema = Type.Object({
   _id: Type.String(),
 })
@@ -35,7 +37,7 @@ export default (fastify: PluginFastifyInstance) => {
 
   return {
     handler,
-    onRequest: [fastify.authenticate],
+    onRequest: [fastify.authenticate, fastify.checkPermissions(permissions)],
     config: {
       type: "dataDelete",
       broadcastChannels: ["interactionLinkDeleted"],

package/services/backend/src/corePlugins/raclette__core/backend/datatypes/interactionLink/routes/route.interactionLink.restore.ts

@@ -2,7 +2,8 @@ import type { Static } from "@sinclair/typebox"
 import type { FastifyReply, FastifyRequest } from "fastify"
 import { PluginFastifyInstance } from "types"
 import { Type } from "@sinclair/typebox"
-import { ForbiddenError } from "@/utils/errors"
+
+const permissions = ["user.isAdmin"]
 
 const ParamsSchema = Type.Object({
   _id: Type.String(),
@@ -17,21 +18,17 @@ export default (fastify: PluginFastifyInstance) => {
     reply: FastifyReply,
   ) => {
     try {
-      if (req.user.isAdmin) {
-        const { _id } = req.params
+      const { _id } = req.params
 
-        const payload = await interactionLinkService.updateInteractionLink(
-          fastify,
-          req.requestParams,
-          _id,
-          { isDeleted: false },
-          req.user._id,
-        )
+      const payload = await interactionLinkService.updateInteractionLink(
+        fastify,
+        req.requestParams,
+        _id,
+        { isDeleted: false },
+        req.user._id,
+      )
 
-        return payload
-      } else {
-        throw new ForbiddenError("Only admins can restore this core datatype")
-      }
+      return payload
     } catch (error: any) {
       fastify.log.error(error.message)
       return reply.internalServerError(error.message)
@@ -40,7 +37,7 @@ export default (fastify: PluginFastifyInstance) => {
 
   return {
     handler,
-    onRequest: [fastify.authenticate],
+    onRequest: [fastify.authenticate, fastify.checkPermissions(permissions)],
     config: {
       type: "dataRestore",
       broadcastChannels: ["interactionLinkRestored"],

package/services/backend/src/corePlugins/raclette__core/backend/datatypes/project/project.service.ts

@@ -87,6 +87,7 @@ export class ProjectService {
     options: QueryOptions = {},
   ): Promise<ProjectType[]> {
     try {
+      filter = { isDeleted: false, ...filter }
       // Start building the query
       let query = this.projectModel.find(filter)
 

package/services/backend/src/corePlugins/raclette__core/backend/datatypes/project/routes/route.project.get.ts

@@ -3,6 +3,8 @@ import type { FastifyReply, FastifyRequest } from "fastify"
 import { PluginFastifyInstance } from "types"
 import { Type } from "@sinclair/typebox"
 
+const permissions = ["user.isAdmin"]
+
 const ParamsSchema = Type.Object({
   _id: Type.String(),
 })
@@ -39,7 +41,7 @@ export default (fastify: PluginFastifyInstance) => {
 
   return {
     handler,
-    onRequest: [fastify.authenticate],
+    onRequest: [fastify.authenticate, fastify.checkPermissions(permissions)],
     config: {
       type: "dataRead",
     },

package/services/backend/src/corePlugins/raclette__core/backend/datatypes/project/routes/route.project.getAll.ts

@@ -1,5 +1,7 @@
 import type { FastifyReply, FastifyRequest } from "fastify"
-import { PluginFastifyInstance } from "types"
+import type { PluginFastifyInstance } from "types"
+
+const permissions = ["user.isAdmin"]
 
 export default (fastify: PluginFastifyInstance) => {
   const projectService = fastify.custom.projectService
@@ -24,7 +26,7 @@ export default (fastify: PluginFastifyInstance) => {
 
   return {
     handler,
-    onRequest: [fastify.authenticate],
+    onRequest: [fastify.authenticate, fastify.checkPermissions(permissions)],
     config: {
       type: "dataRead",
     },

package/services/backend/src/corePlugins/raclette__core/backend/datatypes/project/routes/route.project.hardDelete.ts

@@ -3,6 +3,8 @@ import type { FastifyReply, FastifyRequest } from "fastify"
 import { PluginFastifyInstance } from "types"
 import { Type } from "@sinclair/typebox"
 
+const permissions = ["user.isAdmin"]
+
 const ParamsSchema = Type.Object({
   _id: Type.String(),
 })
@@ -35,7 +37,7 @@ export default (fastify: PluginFastifyInstance) => {
 
   return {
     handler,
-    onRequest: [fastify.authenticate],
+    onRequest: [fastify.authenticate, fastify.checkPermissions(permissions)],
     config: {
       type: "dataHardDeleted",
       broadcastChannels: ["projectHardDeleted"],

package/services/backend/src/corePlugins/raclette__core/backend/datatypes/project/routes/route.project.patch.ts

@@ -5,6 +5,8 @@ import { PluginFastifyInstance } from "types"
 import { Type } from "@sinclair/typebox"
 import { projectSchema } from "../project.schema"
 
+const permissions = ["user.isAdmin"]
+
 const ParamsSchema = Type.Object({
   _id: Type.String(),
 })
@@ -40,7 +42,7 @@ export default (fastify: PluginFastifyInstance) => {
 
   return {
     handler,
-    onRequest: [fastify.authenticate],
+    onRequest: [fastify.authenticate, fastify.checkPermissions(permissions)],
     config: {
       type: "dataUpdate",
       broadcastChannels: ["projectUpdated"],

package/services/backend/src/corePlugins/raclette__core/backend/datatypes/project/routes/route.project.post.ts

@@ -1,7 +1,9 @@
 import type { FastifyReply, FastifyRequest } from "fastify"
-import { PluginFastifyInstance } from "types"
+import type { PluginFastifyInstance } from "types"
 import { projectCreateSchema, type ProjectCreate } from "../project.schema"
 
+const permissions = ["user.isAdmin"]
+
 export default (fastify: PluginFastifyInstance) => {
   const projectService = fastify.custom.projectService
 
@@ -27,7 +29,7 @@ export default (fastify: PluginFastifyInstance) => {
 
   return {
     handler,
-    // onRequest: [fastify.authenticate],
+    onRequest: [fastify.authenticate, fastify.checkPermissions(permissions)],
     config: {
       type: "dataCreate",
       broadcastChannels: ["projectCreated"],

package/services/backend/src/corePlugins/raclette__core/backend/datatypes/project/routes/route.project.remove.ts

@@ -3,6 +3,8 @@ import type { FastifyReply, FastifyRequest } from "fastify"
 import { PluginFastifyInstance } from "types"
 import { Type } from "@sinclair/typebox"
 
+const permissions = ["user.isAdmin"]
+
 const ParamsSchema = Type.Object({
   _id: Type.String(),
 })
@@ -35,7 +37,7 @@ export default (fastify: PluginFastifyInstance) => {
 
   return {
     handler,
-    onRequest: [fastify.authenticate],
+    onRequest: [fastify.authenticate, fastify.checkPermissions(permissions)],
     config: {
       type: "dataUpdate",
       broadcastChannels: ["projectDeleted"],

package/services/backend/src/corePlugins/raclette__core/backend/datatypes/tag/routes/index.ts

@@ -4,6 +4,7 @@ import getAll from "./route.tag.getAll"
 import hardDelete from "./route.tag.hardDelete"
 import patch from "./route.tag.patch"
 import post from "./route.tag.post"
+import postBulk from "./route.tag.post.bulk"
 import remove from "./route.tag.remove"
 import restore from "./route.tag.restore"
 
@@ -13,6 +14,7 @@ const registerRoutes = async (fastify: PluginFastifyInstance) => {
   await fastify.patch("/tag/:_id", patch(fastify))
   await fastify.patch("/tag/:_id/restore", restore(fastify))
   await fastify.post("/tag/:project/:_id", post(fastify))
+  await fastify.post("/tag/bulk", postBulk(fastify))
   await fastify.delete("/tag/:_id", remove(fastify))
   await fastify.delete("/tag/:_id/hard", hardDelete(fastify))
 }

package/services/backend/src/corePlugins/raclette__core/backend/datatypes/tag/routes/route.tag.get.ts

@@ -1,6 +1,7 @@
 import type { FastifyReply, FastifyRequest } from "fastify"
 import { PluginFastifyInstance } from "types"
 import { Type, type Static } from "@sinclair/typebox"
+import { ForbiddenError } from "@/utils/errors"
 
 const ParamsSchema = Type.Object({
   _id: Type.Optional(Type.String()),

package/services/backend/src/corePlugins/raclette__core/backend/datatypes/tag/routes/route.tag.getAll.ts

@@ -1,5 +1,6 @@
 import type { FastifyReply, FastifyRequest } from "fastify"
 import { PluginFastifyInstance } from "types"
+import { ForbiddenError } from "@/utils/errors"
 
 export default (fastify: PluginFastifyInstance) => {
   const tagService = fastify.custom.tagService

package/services/backend/src/corePlugins/raclette__core/backend/datatypes/tag/routes/route.tag.hardDelete.ts

@@ -2,7 +2,8 @@ import type { Static } from "@sinclair/typebox"
 import type { FastifyReply, FastifyRequest } from "fastify"
 import { PluginFastifyInstance } from "types"
 import { Type } from "@sinclair/typebox"
-import { ForbiddenError } from "@/utils/errors"
+
+const permissions = ["user.isAdmin"]
 
 const ParamsSchema = Type.Object({
   _id: Type.String(),
@@ -17,21 +18,15 @@ export default (fastify: PluginFastifyInstance) => {
     reply: FastifyReply,
   ) => {
     try {
-      if (req.user.isAdmin) {
-        const { _id } = req.params
+      const { _id } = req.params
 
-        const payloadWithTag = await tagService.hardDeleteTag(
-          fastify,
-          req.requestParams,
-          _id,
-        )
+      const payloadWithTag = await tagService.hardDeleteTag(
+        fastify,
+        req.requestParams,
+        _id,
+      )
 
-        return payloadWithTag
-      } else {
-        throw new ForbiddenError(
-          "Only admins can hard delete this core datatype",
-        )
-      }
+      return payloadWithTag
     } catch (error: any) {
       fastify.log.error(error.message)
       return reply.internalServerError(error.message)
@@ -40,7 +35,7 @@ export default (fastify: PluginFastifyInstance) => {
 
   return {
     handler,
-    onRequest: [fastify.authenticate],
+    onRequest: [fastify.authenticate, fastify.checkPermissions(permissions)],
     config: {
       type: "dataHardDeleted",
       broadcastChannels: ["tagHardDeleted"],

package/services/backend/src/corePlugins/raclette__core/backend/datatypes/tag/routes/route.tag.patch.ts

@@ -4,6 +4,8 @@ import { PluginFastifyInstance } from "types"
 import { Type } from "@sinclair/typebox"
 import { tagUpdateSchema } from "../tag.schema"
 
+const permissions = ["user.isAdmin"]
+
 const ParamsSchema = Type.Object({
   _id: Type.String(),
 })
@@ -40,7 +42,7 @@ export default (fastify: PluginFastifyInstance) => {
 
   return {
     handler,
-    onRequest: [fastify.authenticate],
+    onRequest: [fastify.authenticate, fastify.checkPermissions(permissions)],
     config: {
       type: "dataUpdate",
       broadcastChannels: ["tagUpdated"],