@revisium/core 2.9.1 → 2.10.0-alpha.0

package/dist/src/core/core.module.js

@@ -12,14 +12,18 @@ const common_1 = require("@nestjs/common");
 const config_1 = require("@nestjs/config");
 const core_1 = require("@nestjs/core");
 const schedule_1 = require("@nestjs/schedule");
+const ee_billing_module_1 = require("../../ee/billing/ee-billing.module");
+const licensing_module_1 = require("../../ee/licensing/licensing.module");
 const app_options_module_1 = require("./app-options.module");
+const core_engine_module_1 = require("./core-engine.module");
+const api_key_module_1 = require("../features/api-key/api-key.module");
 const auth_module_1 = require("../features/auth/auth.module");
+const billing_module_1 = require("../features/billing/billing.module");
 const branch_module_1 = require("../features/branch/branch.module");
 const cache_1 = require("../infrastructure/cache");
 const clean_module_1 = require("../infrastructure/clean/clean.module");
 const configuration_module_1 = require("../infrastructure/configuration/configuration.module");
 const database_module_1 = require("../infrastructure/database/database.module");
-const draft_module_1 = require("../features/draft/draft.module");
 const email_module_1 = require("../infrastructure/email/email.module");
 const endpoint_module_1 = require("../features/endpoint/endpoint.module");
 const graphql_api_module_1 = require("../api/graphql-api/graphql-api.module");
@@ -27,6 +31,7 @@ const health_module_1 = require("../infrastructure/health/health.module");
 const mcp_module_1 = require("../api/mcp-api/mcp.module");
 const metrics_module_1 = require("../infrastructure/metrics/metrics.module");
 const notification_module_1 = require("../infrastructure/notification/notification.module");
+const storage_module_1 = require("../infrastructure/storage/storage.module");
 const organization_module_1 = require("../features/organization/organization.module");
 const project_module_1 = require("../features/project/project.module");
 const rest_api_module_1 = require("../api/rest-api/rest-api.module");
@@ -41,7 +46,10 @@ let CoreModule = CoreModule_1 = class CoreModule {
             module: CoreModule_1,
             imports: [
                 app_options_module_1.AppOptionsModule.forRoot(options),
+                core_engine_module_1.CoreEngineModule.forRoot({ storage: options.storage }),
+                api_key_module_1.ApiKeyModule,
                 auth_module_1.AuthModule,
+                billing_module_1.BillingModule,
                 config_1.ConfigModule.forRoot({
                     ...(process.env.REVISIUM_STANDALONE ? { ignoreEnvFile: true } : {}),
                 }),
@@ -68,11 +76,13 @@ let CoreModule = CoreModule_1 = class CoreModule {
                 role_module_1.RoleModule,
                 table_module_1.TableModule,
                 row_module_1.RowModule,
-                draft_module_1.DraftModule,
                 endpoint_module_1.EndpointModule,
                 metrics_module_1.MetricsModule,
                 mcp_module_1.McpModule,
+                storage_module_1.StorageModule,
                 cache_1.RevisiumCacheModule.forRootAsync(),
+                licensing_module_1.EeLicensingModule,
+                ee_billing_module_1.EeBillingModule.register(),
             ],
         };
     }

package/dist/src/core/core.module.js.map

@@ -1 +1 @@
-{"version":3,"file":"core.module.js","sourceRoot":"","sources":["../../../src/core/core.module.ts"],"names":[],"mappings":";;;;;;;;;;AAAA,2CAAuD;AACvD,2CAA8C;AAC9C,uCAA4C;AAC5C,+CAAkD;AAElD,6DAA+D;AAE/D,8DAA2D;AAC3D,oEAAiE;AACjE,mDAA+D;AAC/D,uEAAoE;AACpE,+FAA4F;AAC5F,gFAA6E;AAC7E,iEAA8D;AAC9D,uEAAoE;AACpE,0EAAuE;AACvE,8EAA0E;AAC1E,0EAAuE;AACvE,0DAAuD;AACvD,6EAA0E;AAC1E,4FAAyF;AACzF,sFAAmF;AACnF,uEAAoE;AACpE,qEAAiE;AACjE,0EAAuE;AACvE,8DAA2D;AAC3D,2DAAwD;AACxD,iEAA8D;AAC9D,8DAA2D;AAGpD,IAAM,UAAU,kBAAhB,MAAM,UAAU;IACrB,MAAM,CAAC,OAAO,CAAC,OAAmB;QAChC,OAAO;YACL,MAAM,EAAE,YAAU;YAClB,OAAO,EAAE;gBACP,qCAAgB,CAAC,OAAO,CAAC,OAAO,CAAC;gBACjC,wBAAU;gBACV,qBAAY,CAAC,OAAO,CAAC;oBACnB,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBACpE,CAAC;gBACF,gCAAc;gBACd,qCAAgB;gBAChB,+BAAa;gBACb,mBAAY,CAAC,QAAQ,CAAC;oBACpB;wBACE,IAAI,EAAE,MAAM;wBACZ,MAAM,EAAE,+BAAa;qBACtB;iBACF,CAAC;gBACF,yBAAc,CAAC,OAAO,EAAE;gBACxB,0CAAmB;gBACnB,0BAAW;gBACX,wCAAkB;gBAClB,4BAAY;gBACZ,0BAAW;gBACX,wBAAU;gBACV,wCAAkB;gBAClB,8BAAa;gBACb,4BAAY;gBACZ,gCAAc;gBACd,wBAAU;gBACV,0BAAW;gBACX,sBAAS;gBACT,0BAAW;gBACX,gCAAc;gBACd,8BAAa;gBACb,sBAAS;gBACT,2BAAmB,CAAC,YAAY,EAAE;aACnC;SACF,CAAC;IACJ,CAAC;CACF,CAAA;AAzCY,gCAAU;qBAAV,UAAU;IADtB,IAAA,eAAM,EAAC,EAAE,CAAC;GACE,UAAU,CAyCtB"}
+{"version":3,"file":"core.module.js","sourceRoot":"","sources":["../../../src/core/core.module.ts"],"names":[],"mappings":";;;;;;;;;;AAAA,2CAAuD;AACvD,2CAA8C;AAC9C,uCAA4C;AAC5C,+CAAkD;AAClD,0EAA+D;AAC/D,0EAAkE;AAGlE,6DAA+D;AAC/D,6DAA+D;AAE/D,uEAAmE;AACnE,8DAA2D;AAC3D,uEAAoE;AACpE,oEAAiE;AACjE,mDAA+D;AAC/D,uEAAoE;AACpE,+FAA4F;AAC5F,gFAA6E;AAC7E,uEAAoE;AACpE,0EAAuE;AACvE,8EAA0E;AAC1E,0EAAuE;AACvE,0DAAuD;AACvD,6EAA0E;AAC1E,4FAAyF;AACzF,6EAA0E;AAC1E,sFAAmF;AACnF,uEAAoE;AACpE,qEAAiE;AACjE,0EAAuE;AACvE,8DAA2D;AAC3D,2DAAwD;AACxD,iEAA8D;AAC9D,8DAA2D;AAGpD,IAAM,UAAU,kBAAhB,MAAM,UAAU;IACrB,MAAM,CAAC,OAAO,CACZ,OAAmD;QAEnD,OAAO;YACL,MAAM,EAAE,YAAU;YAClB,OAAO,EAAE;gBACP,qCAAgB,CAAC,OAAO,CAAC,OAAO,CAAC;gBACjC,qCAAgB,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC;gBACtD,6BAAY;gBACZ,wBAAU;gBACV,8BAAa;gBACb,qBAAY,CAAC,OAAO,CAAC;oBACnB,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBACpE,CAAC;gBACF,gCAAc;gBACd,qCAAgB;gBAChB,+BAAa;gBACb,mBAAY,CAAC,QAAQ,CAAC;oBACpB;wBACE,IAAI,EAAE,MAAM;wBACZ,MAAM,EAAE,+BAAa;qBACtB;iBACF,CAAC;gBACF,yBAAc,CAAC,OAAO,EAAE;gBACxB,0CAAmB;gBACnB,0BAAW;gBACX,wCAAkB;gBAClB,4BAAY;gBACZ,0BAAW;gBACX,wBAAU;gBACV,wCAAkB;gBAClB,8BAAa;gBACb,4BAAY;gBACZ,gCAAc;gBACd,wBAAU;gBACV,0BAAW;gBACX,sBAAS;gBACT,gCAAc;gBACd,8BAAa;gBACb,sBAAS;gBACT,8BAAa;gBACb,2BAAmB,CAAC,YAAY,EAAE;gBAClC,oCAAiB;gBACjB,mCAAe,CAAC,QAAQ,EAAE;aAC3B;SACF,CAAC;IACJ,CAAC;CACF,CAAA;AAhDY,gCAAU;qBAAV,UAAU;IADtB,IAAA,eAAM,EAAC,EAAE,CAAC;GACE,UAAU,CAgDtB"}

package/dist/src/core/shared/billing-check.service.d.ts

@@ -0,0 +1,13 @@
+import { ILimitsService, LimitMetric } from '../../features/billing/limits.interface';
+import { TransactionPrismaService } from '../../infrastructure/database/transaction-prisma.service';
+export declare class BillingCheckService {
+    private readonly transactionService;
+    private readonly limitsService;
+    constructor(transactionService: TransactionPrismaService, limitsService: ILimitsService);
+    private get db();
+    check(revisionId: string, metric: LimitMetric, increment?: number, context?: {
+        tableId?: string;
+        projectId?: string;
+    }): Promise<void>;
+    private resolveContext;
+}

package/dist/src/core/shared/billing-check.service.js

@@ -0,0 +1,71 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.BillingCheckService = void 0;
+const common_1 = require("@nestjs/common");
+const limits_interface_1 = require("../../features/billing/limits.interface");
+const limit_exceeded_exception_1 = require("../../features/billing/limit-exceeded.exception");
+const transaction_prisma_service_1 = require("../../infrastructure/database/transaction-prisma.service");
+let BillingCheckService = class BillingCheckService {
+    constructor(transactionService, limitsService) {
+        this.transactionService = transactionService;
+        this.limitsService = limitsService;
+    }
+    get db() {
+        return this.transactionService.getTransactionOrPrisma();
+    }
+    async check(revisionId, metric, increment, context) {
+        const resolved = await this.resolveContext(revisionId);
+        const needsContext = metric === limits_interface_1.LimitMetric.ROWS_PER_TABLE ||
+            metric === limits_interface_1.LimitMetric.TABLES_PER_REVISION ||
+            metric === limits_interface_1.LimitMetric.BRANCHES_PER_PROJECT ||
+            metric === limits_interface_1.LimitMetric.ENDPOINTS_PER_PROJECT;
+        const fullContext = needsContext
+            ? {
+                ...context,
+                revisionId,
+                projectId: resolved.projectId,
+            }
+            : context;
+        const result = await this.limitsService.checkLimit(resolved.organizationId, metric, increment, fullContext);
+        if (!result.allowed) {
+            throw new limit_exceeded_exception_1.LimitExceededException(result);
+        }
+    }
+    async resolveContext(revisionId) {
+        const revision = await this.db.revision.findUniqueOrThrow({
+            where: { id: revisionId },
+            select: {
+                branch: {
+                    select: {
+                        project: {
+                            select: { id: true, organizationId: true },
+                        },
+                    },
+                },
+            },
+        });
+        return {
+            organizationId: revision.branch.project.organizationId,
+            projectId: revision.branch.project.id,
+        };
+    }
+};
+exports.BillingCheckService = BillingCheckService;
+exports.BillingCheckService = BillingCheckService = __decorate([
+    (0, common_1.Injectable)(),
+    __param(1, (0, common_1.Inject)(limits_interface_1.LIMITS_SERVICE_TOKEN)),
+    __metadata("design:paramtypes", [transaction_prisma_service_1.TransactionPrismaService, Object])
+], BillingCheckService);
+//# sourceMappingURL=billing-check.service.js.map

package/dist/src/core/shared/billing-check.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"billing-check.service.js","sourceRoot":"","sources":["../../../../src/core/shared/billing-check.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAAoD;AACpD,8EAI+C;AAC/C,8FAAuF;AACvF,yGAAkG;AAG3F,IAAM,mBAAmB,GAAzB,MAAM,mBAAmB;IAC9B,YACmB,kBAA4C,EAE5C,aAA6B;QAF7B,uBAAkB,GAAlB,kBAAkB,CAA0B;QAE5C,kBAAa,GAAb,aAAa,CAAgB;IAC7C,CAAC;IAEJ,IAAY,EAAE;QACZ,OAAO,IAAI,CAAC,kBAAkB,CAAC,sBAAsB,EAAE,CAAC;IAC1D,CAAC;IAED,KAAK,CAAC,KAAK,CACT,UAAkB,EAClB,MAAmB,EACnB,SAAkB,EAClB,OAAkD;QAElD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC;QACvD,MAAM,YAAY,GAChB,MAAM,KAAK,8BAAW,CAAC,cAAc;YACrC,MAAM,KAAK,8BAAW,CAAC,mBAAmB;YAC1C,MAAM,KAAK,8BAAW,CAAC,oBAAoB;YAC3C,MAAM,KAAK,8BAAW,CAAC,qBAAqB,CAAC;QAC/C,MAAM,WAAW,GAAG,YAAY;YAC9B,CAAC,CAAC;gBACE,GAAG,OAAO;gBACV,UAAU;gBACV,SAAS,EAAE,QAAQ,CAAC,SAAS;aAC9B;YACH,CAAC,CAAC,OAAO,CAAC;QACZ,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,UAAU,CAChD,QAAQ,CAAC,cAAc,EACvB,MAAM,EACN,SAAS,EACT,WAAW,CACZ,CAAC;QACF,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,MAAM,IAAI,iDAAsB,CAAC,MAAM,CAAC,CAAC;QAC3C,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,cAAc,CAC1B,UAAkB;QAElB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,iBAAiB,CAAC;YACxD,KAAK,EAAE,EAAE,EAAE,EAAE,UAAU,EAAE;YACzB,MAAM,EAAE;gBACN,MAAM,EAAE;oBACN,MAAM,EAAE;wBACN,OAAO,EAAE;4BACP,MAAM,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE;yBAC3C;qBACF;iBACF;aACF;SACF,CAAC,CAAC;QACH,OAAO;YACL,cAAc,EAAE,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,cAAc;YACtD,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE;SACtC,CAAC;IACJ,CAAC;CACF,CAAA;AA7DY,kDAAmB;8BAAnB,mBAAmB;IAD/B,IAAA,mBAAU,GAAE;IAIR,WAAA,IAAA,eAAM,EAAC,uCAAoB,CAAC,CAAA;qCADQ,qDAAwB;GAFpD,mBAAmB,CA6D/B"}

package/dist/src/core/shared/endpoint-notifier.service.d.ts

@@ -0,0 +1,9 @@
+import { PrismaService } from '../../infrastructure/database/prisma.service';
+import { EndpointNotificationService } from '../../infrastructure/notification/endpoint-notification.service';
+export declare class EndpointNotifierService {
+    private readonly prisma;
+    private readonly endpointNotification;
+    private readonly logger;
+    constructor(prisma: PrismaService, endpointNotification: EndpointNotificationService);
+    notify(revisionId: string): Promise<void>;
+}

package/dist/src/core/shared/endpoint-notifier.service.js

@@ -0,0 +1,46 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var EndpointNotifierService_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.EndpointNotifierService = void 0;
+const common_1 = require("@nestjs/common");
+const prisma_service_1 = require("../../infrastructure/database/prisma.service");
+const endpoint_notification_service_1 = require("../../infrastructure/notification/endpoint-notification.service");
+let EndpointNotifierService = EndpointNotifierService_1 = class EndpointNotifierService {
+    constructor(prisma, endpointNotification) {
+        this.prisma = prisma;
+        this.endpointNotification = endpointNotification;
+        this.logger = new common_1.Logger(EndpointNotifierService_1.name);
+    }
+    async notify(revisionId) {
+        try {
+            const endpoints = await this.prisma.revision
+                .findUniqueOrThrow({ where: { id: revisionId } })
+                .endpoints({
+                where: { isDeleted: false },
+                select: { id: true },
+            });
+            for (const { id } of endpoints) {
+                await this.endpointNotification.update(id);
+            }
+        }
+        catch (e) {
+            this.logger.warn('Endpoint notification failed (non-critical)', e);
+        }
+    }
+};
+exports.EndpointNotifierService = EndpointNotifierService;
+exports.EndpointNotifierService = EndpointNotifierService = EndpointNotifierService_1 = __decorate([
+    (0, common_1.Injectable)(),
+    __metadata("design:paramtypes", [prisma_service_1.PrismaService,
+        endpoint_notification_service_1.EndpointNotificationService])
+], EndpointNotifierService);
+//# sourceMappingURL=endpoint-notifier.service.js.map

package/dist/src/core/shared/endpoint-notifier.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"endpoint-notifier.service.js","sourceRoot":"","sources":["../../../../src/core/shared/endpoint-notifier.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;AAAA,2CAAoD;AACpD,iFAA2E;AAC3E,mHAA4G;AAGrG,IAAM,uBAAuB,+BAA7B,MAAM,uBAAuB;IAGlC,YACmB,MAAqB,EACrB,oBAAiD;QADjD,WAAM,GAAN,MAAM,CAAe;QACrB,yBAAoB,GAApB,oBAAoB,CAA6B;QAJnD,WAAM,GAAG,IAAI,eAAM,CAAC,yBAAuB,CAAC,IAAI,CAAC,CAAC;IAKhE,CAAC;IAEJ,KAAK,CAAC,MAAM,CAAC,UAAkB;QAC7B,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ;iBACzC,iBAAiB,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,CAAC;iBAChD,SAAS,CAAC;gBACT,KAAK,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE;gBAC3B,MAAM,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE;aACrB,CAAC,CAAC;YAEL,KAAK,MAAM,EAAE,EAAE,EAAE,IAAI,SAAS,EAAE,CAAC;gBAC/B,MAAM,IAAI,CAAC,oBAAoB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YAC7C,CAAC;QACH,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,6CAA6C,EAAE,CAAC,CAAC,CAAC;QACrE,CAAC;IACH,CAAC;CACF,CAAA;AAxBY,0DAAuB;kCAAvB,uBAAuB;IADnC,IAAA,mBAAU,GAAE;qCAKgB,8BAAa;QACC,2DAA2B;GALzD,uBAAuB,CAwBnC"}

package/dist/src/core/shared/shared.module.d.ts

@@ -0,0 +1,2 @@
+export declare class SharedModule {
+}

package/dist/src/core/shared/shared.module.js

@@ -0,0 +1,26 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SharedModule = void 0;
+const common_1 = require("@nestjs/common");
+const billing_module_1 = require("../../features/billing/billing.module");
+const database_module_1 = require("../../infrastructure/database/database.module");
+const notification_module_1 = require("../../infrastructure/notification/notification.module");
+const billing_check_service_1 = require("./billing-check.service");
+const endpoint_notifier_service_1 = require("./endpoint-notifier.service");
+let SharedModule = class SharedModule {
+};
+exports.SharedModule = SharedModule;
+exports.SharedModule = SharedModule = __decorate([
+    (0, common_1.Module)({
+        imports: [database_module_1.DatabaseModule, notification_module_1.NotificationModule, billing_module_1.BillingModule],
+        providers: [billing_check_service_1.BillingCheckService, endpoint_notifier_service_1.EndpointNotifierService],
+        exports: [billing_check_service_1.BillingCheckService, endpoint_notifier_service_1.EndpointNotifierService],
+    })
+], SharedModule);
+//# sourceMappingURL=shared.module.js.map

package/dist/src/core/shared/shared.module.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"shared.module.js","sourceRoot":"","sources":["../../../../src/core/shared/shared.module.ts"],"names":[],"mappings":";;;;;;;;;AAAA,2CAAwC;AACxC,0EAAoE;AACpE,mFAA6E;AAC7E,+FAAyF;AACzF,mEAA8D;AAC9D,2EAAsE;AAO/D,IAAM,YAAY,GAAlB,MAAM,YAAY;CAAG,CAAA;AAAf,oCAAY;uBAAZ,YAAY;IALxB,IAAA,eAAM,EAAC;QACN,OAAO,EAAE,CAAC,gCAAc,EAAE,wCAAkB,EAAE,8BAAa,CAAC;QAC5D,SAAS,EAAE,CAAC,2CAAmB,EAAE,mDAAuB,CAAC;QACzD,OAAO,EAAE,CAAC,2CAAmB,EAAE,mDAAuB,CAAC;KACxD,CAAC;GACW,YAAY,CAAG"}

package/dist/src/features/api-key/api-key-api.service.d.ts

@@ -0,0 +1,39 @@
+import { CommandBus, QueryBus } from '@nestjs/cqrs';
+import { Prisma } from '../../__generated__/client';
+import { CreateApiKeyCommandReturnType, RevokeApiKeyCommandReturnType, RotateApiKeyCommandReturnType } from '../../features/api-key/commands/impl';
+import { GetApiKeyByIdQueryReturnType, GetApiKeysQueryReturnType } from '../../features/api-key/queries/impl';
+export declare class ApiKeyApiService {
+    private readonly commandBus;
+    private readonly queryBus;
+    constructor(commandBus: CommandBus, queryBus: QueryBus);
+    createPersonalApiKey(data: {
+        name: string;
+        userId: string;
+        organizationId?: string;
+        projectIds?: string[];
+        branchNames?: string[];
+        tableIds?: string[];
+        readOnly?: boolean;
+        allowedIps?: string[];
+        expiresAt?: Date;
+    }): Promise<CreateApiKeyCommandReturnType>;
+    createServiceApiKey(data: {
+        name: string;
+        userId: string;
+        organizationId: string;
+        projectIds?: string[];
+        branchNames?: string[];
+        tableIds?: string[];
+        readOnly?: boolean;
+        allowedIps?: string[];
+        expiresAt?: Date;
+        permissions: Prisma.InputJsonValue;
+    }): Promise<CreateApiKeyCommandReturnType>;
+    revokeApiKey(keyId: string, userId: string): Promise<RevokeApiKeyCommandReturnType>;
+    rotateApiKey(keyId: string, userId: string): Promise<RotateApiKeyCommandReturnType>;
+    getMyApiKeys(userId: string): Promise<GetApiKeysQueryReturnType>;
+    getServiceApiKeys(organizationId: string, userId: string): Promise<GetApiKeysQueryReturnType>;
+    getApiKeyById(keyId: string, userId: string): Promise<GetApiKeyByIdQueryReturnType>;
+    private assertKeyAccess;
+    private assertManageApiKeyPermission;
+}

package/dist/src/features/api-key/api-key-api.service.js

@@ -0,0 +1,138 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ApiKeyApiService = void 0;
+const common_1 = require("@nestjs/common");
+const ability_1 = require("@casl/ability");
+const cqrs_1 = require("@nestjs/cqrs");
+const nanoid_1 = require("nanoid");
+const client_1 = require("../../__generated__/client");
+const impl_1 = require("./commands/impl");
+const impl_2 = require("./queries/impl");
+const impl_3 = require("../auth/commands/impl");
+const consts_1 = require("../auth/consts");
+const MANAGE_API_KEY_PERMISSION = {
+    action: consts_1.PermissionAction.manage,
+    subject: consts_1.PermissionSubject.ApiKey,
+};
+let ApiKeyApiService = class ApiKeyApiService {
+    constructor(commandBus, queryBus) {
+        this.commandBus = commandBus;
+        this.queryBus = queryBus;
+    }
+    async createPersonalApiKey(data) {
+        return this.commandBus.execute(new impl_1.CreateApiKeyCommand({
+            type: client_1.ApiKeyType.PERSONAL,
+            name: data.name,
+            userId: data.userId,
+            organizationId: data.organizationId,
+            projectIds: data.projectIds,
+            branchNames: data.branchNames,
+            tableIds: data.tableIds,
+            readOnly: data.readOnly,
+            allowedIps: data.allowedIps,
+            expiresAt: data.expiresAt,
+        }));
+    }
+    async createServiceApiKey(data) {
+        await this.assertManageApiKeyPermission(data.userId, data.organizationId, data.projectIds);
+        const serviceId = `svc_${(0, nanoid_1.nanoid)(12)}`;
+        return this.commandBus.execute(new impl_1.CreateApiKeyCommand({
+            type: client_1.ApiKeyType.SERVICE,
+            name: data.name,
+            serviceId,
+            organizationId: data.organizationId,
+            projectIds: data.projectIds,
+            branchNames: data.branchNames,
+            tableIds: data.tableIds,
+            readOnly: data.readOnly,
+            allowedIps: data.allowedIps,
+            expiresAt: data.expiresAt,
+            permissions: data.permissions,
+        }));
+    }
+    async revokeApiKey(keyId, userId) {
+        await this.assertKeyAccess(keyId, userId);
+        return this.commandBus.execute(new impl_1.RevokeApiKeyCommand({ keyId }));
+    }
+    async rotateApiKey(keyId, userId) {
+        await this.assertKeyAccess(keyId, userId);
+        return this.commandBus.execute(new impl_1.RotateApiKeyCommand({ keyId }));
+    }
+    async getMyApiKeys(userId) {
+        return this.queryBus.execute(new impl_2.GetApiKeysQuery({ userId }));
+    }
+    async getServiceApiKeys(organizationId, userId) {
+        await this.assertManageApiKeyPermission(userId, organizationId);
+        return this.queryBus.execute(new impl_2.GetApiKeysQuery({
+            type: client_1.ApiKeyType.SERVICE,
+            organizationId,
+        }));
+    }
+    async getApiKeyById(keyId, userId) {
+        return this.assertKeyAccess(keyId, userId);
+    }
+    async assertKeyAccess(keyId, userId) {
+        const apiKey = await this.queryBus.execute(new impl_2.GetApiKeyByIdQuery({ keyId }));
+        if (apiKey.type === client_1.ApiKeyType.SERVICE) {
+            if (!apiKey.organizationId) {
+                throw new common_1.NotFoundException('API key not found');
+            }
+            try {
+                await this.assertManageApiKeyPermission(userId, apiKey.organizationId, apiKey.projectIds.length > 0 ? apiKey.projectIds : undefined);
+            }
+            catch (error) {
+                if (error instanceof common_1.ForbiddenException) {
+                    throw new common_1.NotFoundException('API key not found');
+                }
+                throw error;
+            }
+            return apiKey;
+        }
+        if (apiKey.userId !== userId) {
+            throw new common_1.NotFoundException('API key not found');
+        }
+        return apiKey;
+    }
+    async assertManageApiKeyPermission(userId, organizationId, projectIds) {
+        try {
+            if (projectIds && projectIds.length > 0) {
+                for (const projectId of projectIds) {
+                    await this.commandBus.execute(new impl_3.CheckProjectPermissionCommand({
+                        permissions: [MANAGE_API_KEY_PERMISSION],
+                        projectId,
+                        userId,
+                    }));
+                }
+            }
+            else {
+                await this.commandBus.execute(new impl_3.CheckOrganizationPermissionCommand({
+                    permissions: [MANAGE_API_KEY_PERMISSION],
+                    organizationId,
+                    userId,
+                }));
+            }
+        }
+        catch (error) {
+            if (error instanceof ability_1.ForbiddenError) {
+                throw new common_1.ForbiddenException('You do not have permission to manage API keys');
+            }
+            throw error;
+        }
+    }
+};
+exports.ApiKeyApiService = ApiKeyApiService;
+exports.ApiKeyApiService = ApiKeyApiService = __decorate([
+    (0, common_1.Injectable)(),
+    __metadata("design:paramtypes", [cqrs_1.CommandBus,
+        cqrs_1.QueryBus])
+], ApiKeyApiService);
+//# sourceMappingURL=api-key-api.service.js.map

package/dist/src/features/api-key/api-key-api.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"api-key-api.service.js","sourceRoot":"","sources":["../../../../src/features/api-key/api-key-api.service.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,2CAIwB;AACxB,2CAA+C;AAC/C,uCAAoD;AACpD,mCAAgC;AAChC,uDAA8D;AAC9D,0CAO4C;AAC5C,yCAK2C;AAC3C,gDAGyC;AACzC,2CAA+E;AAE/E,MAAM,yBAAyB,GAAG;IAChC,MAAM,EAAE,yBAAgB,CAAC,MAAM;IAC/B,OAAO,EAAE,0BAAiB,CAAC,MAAM;CAClC,CAAC;AAGK,IAAM,gBAAgB,GAAtB,MAAM,gBAAgB;IAC3B,YACmB,UAAsB,EACtB,QAAkB;QADlB,eAAU,GAAV,UAAU,CAAY;QACtB,aAAQ,GAAR,QAAQ,CAAU;IAClC,CAAC;IAEJ,KAAK,CAAC,oBAAoB,CAAC,IAU1B;QACC,OAAO,IAAI,CAAC,UAAU,CAAC,OAAO,CAC5B,IAAI,0BAAmB,CAAC;YACtB,IAAI,EAAE,mBAAU,CAAC,QAAQ;YACzB,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,cAAc,EAAE,IAAI,CAAC,cAAc;YACnC,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,SAAS,EAAE,IAAI,CAAC,SAAS;SAC1B,CAAC,CACH,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,mBAAmB,CAAC,IAWzB;QACC,MAAM,IAAI,CAAC,4BAA4B,CACrC,IAAI,CAAC,MAAM,EACX,IAAI,CAAC,cAAc,EACnB,IAAI,CAAC,UAAU,CAChB,CAAC;QAEF,MAAM,SAAS,GAAG,OAAO,IAAA,eAAM,EAAC,EAAE,CAAC,EAAE,CAAC;QAEtC,OAAO,IAAI,CAAC,UAAU,CAAC,OAAO,CAC5B,IAAI,0BAAmB,CAAC;YACtB,IAAI,EAAE,mBAAU,CAAC,OAAO;YACxB,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,SAAS;YACT,cAAc,EAAE,IAAI,CAAC,cAAc;YACnC,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,WAAW,EAAE,IAAI,CAAC,WAAW;SAC9B,CAAC,CACH,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,YAAY,CAChB,KAAa,EACb,MAAc;QAEd,MAAM,IAAI,CAAC,eAAe,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QAC1C,OAAO,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,0BAAmB,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;IACrE,CAAC;IAED,KAAK,CAAC,YAAY,CAChB,KAAa,EACb,MAAc;QAEd,MAAM,IAAI,CAAC,eAAe,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QAC1C,OAAO,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,0BAAmB,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;IACrE,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,MAAc;QAC/B,OAAO,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,sBAAe,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;IAChE,CAAC;IAED,KAAK,CAAC,iBAAiB,CACrB,cAAsB,EACtB,MAAc;QAEd,MAAM,IAAI,CAAC,4BAA4B,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;QAEhE,OAAO,IAAI,CAAC,QAAQ,CAAC,OAAO,CAC1B,IAAI,sBAAe,CAAC;YAClB,IAAI,EAAE,mBAAU,CAAC,OAAO;YACxB,cAAc;SACf,CAAC,CACH,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,aAAa,CACjB,KAAa,EACb,MAAc;QAEd,OAAO,IAAI,CAAC,eAAe,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IAC7C,CAAC;IAEO,KAAK,CAAC,eAAe,CAC3B,KAAa,EACb,MAAc;QAEd,MAAM,MAAM,GAAiC,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,CACtE,IAAI,yBAAkB,CAAC,EAAE,KAAK,EAAE,CAAC,CAClC,CAAC;QAEF,IAAI,MAAM,CAAC,IAAI,KAAK,mBAAU,CAAC,OAAO,EAAE,CAAC;YACvC,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;gBAC3B,MAAM,IAAI,0BAAiB,CAAC,mBAAmB,CAAC,CAAC;YACnD,CAAC;YACD,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,4BAA4B,CACrC,MAAM,EACN,MAAM,CAAC,cAAc,EACrB,MAAM,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAC7D,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,KAAK,YAAY,2BAAkB,EAAE,CAAC;oBACxC,MAAM,IAAI,0BAAiB,CAAC,mBAAmB,CAAC,CAAC;gBACnD,CAAC;gBACD,MAAM,KAAK,CAAC;YACd,CAAC;YACD,OAAO,MAAM,CAAC;QAChB,CAAC;QAED,IAAI,MAAM,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YAC7B,MAAM,IAAI,0BAAiB,CAAC,mBAAmB,CAAC,CAAC;QACnD,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAEO,KAAK,CAAC,4BAA4B,CACxC,MAAc,EACd,cAAsB,EACtB,UAAqB;QAErB,IAAI,CAAC;YACH,IAAI,UAAU,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACxC,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;oBACnC,MAAM,IAAI,CAAC,UAAU,CAAC,OAAO,CAC3B,IAAI,oCAA6B,CAAC;wBAChC,WAAW,EAAE,CAAC,yBAAyB,CAAC;wBACxC,SAAS;wBACT,MAAM;qBACP,CAAC,CACH,CAAC;gBACJ,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,MAAM,IAAI,CAAC,UAAU,CAAC,OAAO,CAC3B,IAAI,yCAAkC,CAAC;oBACrC,WAAW,EAAE,CAAC,yBAAyB,CAAC;oBACxC,cAAc;oBACd,MAAM;iBACP,CAAC,CACH,CAAC;YACJ,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,wBAAc,EAAE,CAAC;gBACpC,MAAM,IAAI,2BAAkB,CAC1B,+CAA+C,CAChD,CAAC;YACJ,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;CACF,CAAA;AAnLY,4CAAgB;2BAAhB,gBAAgB;IAD5B,IAAA,mBAAU,GAAE;qCAGoB,iBAAU;QACZ,eAAQ;GAH1B,gBAAgB,CAmL5B"}

package/dist/src/features/api-key/api-key-scope.service.d.ts

@@ -0,0 +1,19 @@
+import { ApiKey } from '../../__generated__/client';
+import { PrismaService } from '../../infrastructure/database/prisma.service';
+export type ApiKeyScopeFields = Pick<ApiKey, 'organizationId' | 'projectIds' | 'branchNames' | 'tableIds'>;
+export interface ScopeRequest {
+    organizationId?: string;
+    projectId?: string;
+    branchName?: string;
+    tableId?: string;
+}
+export declare class ApiKeyScopeService {
+    private readonly prisma;
+    constructor(prisma: PrismaService);
+    resolveBranchNames(branchNames: string[], projectId: string): Promise<string[]>;
+    validateScope(apiKey: ApiKeyScopeFields, request: ScopeRequest, resolvedBranchNames?: string[]): boolean;
+    private matchesOrganization;
+    private matchesProject;
+    private matchesBranch;
+    private matchesTable;
+}

package/dist/src/features/api-key/api-key-scope.service.js

@@ -0,0 +1,80 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ApiKeyScopeService = void 0;
+const common_1 = require("@nestjs/common");
+const prisma_service_1 = require("../../infrastructure/database/prisma.service");
+const DEFAULT_BRANCH_TOKEN = '$default';
+let ApiKeyScopeService = class ApiKeyScopeService {
+    constructor(prisma) {
+        this.prisma = prisma;
+    }
+    async resolveBranchNames(branchNames, projectId) {
+        if (!branchNames.includes(DEFAULT_BRANCH_TOKEN)) {
+            return branchNames;
+        }
+        const rootBranch = await this.prisma.branch.findFirst({
+            where: { projectId, isRoot: true },
+            select: { name: true },
+        });
+        return branchNames
+            .map((name) => name === DEFAULT_BRANCH_TOKEN && rootBranch ? rootBranch.name : name)
+            .filter((name) => name !== DEFAULT_BRANCH_TOKEN);
+    }
+    validateScope(apiKey, request, resolvedBranchNames) {
+        return (this.matchesOrganization(apiKey, request) &&
+            this.matchesProject(apiKey, request) &&
+            this.matchesBranch(resolvedBranchNames ?? apiKey.branchNames, request) &&
+            this.matchesTable(apiKey, request));
+    }
+    matchesOrganization(apiKey, request) {
+        if (!apiKey.organizationId) {
+            return true;
+        }
+        if (!request.organizationId) {
+            return true;
+        }
+        return apiKey.organizationId === request.organizationId;
+    }
+    matchesProject(apiKey, request) {
+        if (apiKey.projectIds.length === 0) {
+            return true;
+        }
+        if (!request.projectId) {
+            return true;
+        }
+        return apiKey.projectIds.includes(request.projectId);
+    }
+    matchesBranch(branchNames, request) {
+        if (branchNames.length === 0) {
+            return true;
+        }
+        if (!request.branchName) {
+            return true;
+        }
+        return branchNames.includes(request.branchName);
+    }
+    matchesTable(apiKey, request) {
+        if (apiKey.tableIds.length === 0) {
+            return true;
+        }
+        if (!request.tableId) {
+            return true;
+        }
+        return apiKey.tableIds.includes(request.tableId);
+    }
+};
+exports.ApiKeyScopeService = ApiKeyScopeService;
+exports.ApiKeyScopeService = ApiKeyScopeService = __decorate([
+    (0, common_1.Injectable)(),
+    __metadata("design:paramtypes", [prisma_service_1.PrismaService])
+], ApiKeyScopeService);
+//# sourceMappingURL=api-key-scope.service.js.map

package/dist/src/features/api-key/api-key-scope.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"api-key-scope.service.js","sourceRoot":"","sources":["../../../../src/features/api-key/api-key-scope.service.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,2CAA4C;AAE5C,iFAA2E;AAE3E,MAAM,oBAAoB,GAAG,UAAU,CAAC;AAejC,IAAM,kBAAkB,GAAxB,MAAM,kBAAkB;IAC7B,YAA6B,MAAqB;QAArB,WAAM,GAAN,MAAM,CAAe;IAAG,CAAC;IAEtD,KAAK,CAAC,kBAAkB,CACtB,WAAqB,EACrB,SAAiB;QAEjB,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,oBAAoB,CAAC,EAAE,CAAC;YAChD,OAAO,WAAW,CAAC;QACrB,CAAC;QAED,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC;YACpD,KAAK,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE;YAClC,MAAM,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE;SACvB,CAAC,CAAC;QAEH,OAAO,WAAW;aACf,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CACZ,IAAI,KAAK,oBAAoB,IAAI,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CACrE;aACA,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,oBAAoB,CAAC,CAAC;IACrD,CAAC;IAED,aAAa,CACX,MAAyB,EACzB,OAAqB,EACrB,mBAA8B;QAE9B,OAAO,CACL,IAAI,CAAC,mBAAmB,CAAC,MAAM,EAAE,OAAO,CAAC;YACzC,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,OAAO,CAAC;YACpC,IAAI,CAAC,aAAa,CAAC,mBAAmB,IAAI,MAAM,CAAC,WAAW,EAAE,OAAO,CAAC;YACtE,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,OAAO,CAAC,CACnC,CAAC;IACJ,CAAC;IAEO,mBAAmB,CACzB,MAAyB,EACzB,OAAqB;QAErB,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;YAC3B,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,CAAC;YAC5B,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,MAAM,CAAC,cAAc,KAAK,OAAO,CAAC,cAAc,CAAC;IAC1D,CAAC;IAEO,cAAc,CACpB,MAAyB,EACzB,OAAqB;QAErB,IAAI,MAAM,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACnC,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;YACvB,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACvD,CAAC;IAEO,aAAa,CAAC,WAAqB,EAAE,OAAqB;QAChE,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC7B,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC;YACxB,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,WAAW,CAAC,QAAQ,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAClD,CAAC;IAEO,YAAY,CAClB,MAAyB,EACzB,OAAqB;QAErB,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACjC,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;YACrB,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IACnD,CAAC;CACF,CAAA;AApFY,gDAAkB;6BAAlB,kBAAkB;IAD9B,IAAA,mBAAU,GAAE;qCAE0B,8BAAa;GADvC,kBAAkB,CAoF9B"}

package/dist/src/features/api-key/api-key-tracking.service.d.ts

@@ -0,0 +1,13 @@
+import { OnModuleDestroy } from '@nestjs/common';
+import { PrismaService } from '../../infrastructure/database/prisma.service';
+export declare class ApiKeyTrackingService implements OnModuleDestroy {
+    private readonly prisma;
+    private readonly logger;
+    private readonly buffer;
+    private flushing;
+    constructor(prisma: PrismaService);
+    onModuleDestroy(): Promise<void>;
+    track(keyId: string, ip: string): void;
+    flush(): Promise<void>;
+    private doFlush;
+}

package/dist/src/features/api-key/api-key-tracking.service.js

@@ -0,0 +1,83 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var ApiKeyTrackingService_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ApiKeyTrackingService = void 0;
+const common_1 = require("@nestjs/common");
+const schedule_1 = require("@nestjs/schedule");
+const prisma_service_1 = require("../../infrastructure/database/prisma.service");
+const FLUSH_INTERVAL_MS = 60_000;
+const MAX_IP_LENGTH = 45;
+let ApiKeyTrackingService = ApiKeyTrackingService_1 = class ApiKeyTrackingService {
+    constructor(prisma) {
+        this.prisma = prisma;
+        this.logger = new common_1.Logger(ApiKeyTrackingService_1.name);
+        this.buffer = new Map();
+        this.flushing = null;
+    }
+    async onModuleDestroy() {
+        await this.flush();
+    }
+    track(keyId, ip) {
+        const normalizedIp = ip.split(',')[0]?.trim().slice(0, MAX_IP_LENGTH);
+        if (!normalizedIp) {
+            return;
+        }
+        this.buffer.set(keyId, { ip: normalizedIp, timestamp: new Date() });
+    }
+    async flush() {
+        if (this.flushing) {
+            return this.flushing;
+        }
+        this.flushing = this.doFlush().finally(() => {
+            this.flushing = null;
+        });
+        return this.flushing;
+    }
+    async doFlush() {
+        if (this.buffer.size === 0) {
+            return;
+        }
+        const entries = new Map(this.buffer);
+        this.buffer.clear();
+        const results = await Promise.all(Array.from(entries.entries()).map(([keyId, entry]) => this.prisma.apiKey
+            .update({
+            where: { id: keyId },
+            data: {
+                lastUsedAt: entry.timestamp,
+                lastUsedIp: entry.ip,
+            },
+        })
+            .then(() => ({ keyId, success: true }))
+            .catch((error) => ({ keyId, success: false, error }))));
+        for (const result of results) {
+            if (!result.success) {
+                this.logger.warn(`Failed to flush lastUsedAt for key ${result.keyId}: ${result.error}`);
+                const entry = entries.get(result.keyId);
+                if (entry && !this.buffer.has(result.keyId)) {
+                    this.buffer.set(result.keyId, entry);
+                }
+            }
+        }
+    }
+};
+exports.ApiKeyTrackingService = ApiKeyTrackingService;
+__decorate([
+    (0, schedule_1.Interval)(FLUSH_INTERVAL_MS),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", []),
+    __metadata("design:returntype", Promise)
+], ApiKeyTrackingService.prototype, "flush", null);
+exports.ApiKeyTrackingService = ApiKeyTrackingService = ApiKeyTrackingService_1 = __decorate([
+    (0, common_1.Injectable)(),
+    __metadata("design:paramtypes", [prisma_service_1.PrismaService])
+], ApiKeyTrackingService);
+//# sourceMappingURL=api-key-tracking.service.js.map