@rpcbase/server 0.476.0 → 0.478.0

package/dist/{shared-Chfrv8o6.js → shared-UGuDRAKK.js}

@@ -1,4 +1,5 @@
-import { createHash, timingSafeEqual } from "node:crypto";
+import { createHash } from "node:crypto";
+import { getAccessibleByQuery, buildAbilityFromSession } from "@rpcbase/db/acl";
 const DEFAULT_CHUNK_SIZE_BYTES = 5 * 1024 * 1024;
 const MAX_CHUNK_SIZE_BYTES = 15 * 1024 * 1024;
 const DEFAULT_MAX_CLIENT_BYTES_PER_SECOND = 10 * 1024 * 1024;
@@ -80,40 +81,25 @@ const getUploadKeyHash = (ctx) => {
   if (!uploadKey) return null;
   return computeSha256Hex(Buffer.from(uploadKey));
 };
-const timingSafeEqualHex = (left, right) => {
-  if (left.length !== right.length) return false;
-  try {
-    return timingSafeEqual(Buffer.from(left, "hex"), Buffer.from(right, "hex"));
-  } catch {
-    return false;
-  }
-};
-const getOwnershipSelector = (ctx, session) => {
-  if (session.userId) {
-    const userId = getUserId(ctx);
-    if (!userId || userId !== session.userId) return null;
-    return { userId: session.userId };
-  }
-  if (session.ownerKeyHash) {
-    const uploadKeyHash = getUploadKeyHash(ctx);
-    if (!uploadKeyHash) return null;
-    if (!timingSafeEqualHex(session.ownerKeyHash, uploadKeyHash)) return null;
-    return { ownerKeyHash: session.ownerKeyHash };
-  }
-  return null;
+const buildUploadsAbility = (ctx, tenantId) => {
+  const uploadKeyHash = getUploadKeyHash(ctx);
+  const claims = uploadKeyHash ? { uploadKeyHash } : void 0;
+  return buildAbilityFromSession({ tenantId, session: ctx.req.session, claims });
 };
+const getUploadSessionAccessQuery = (ability, action) => getAccessibleByQuery(ability, action, "RBUploadSession");
 export {
   getModelCtx as a,
-  getOwnershipSelector as b,
-  getBucketName as c,
-  getUserId as d,
+  buildUploadsAbility as b,
+  getUploadSessionAccessQuery as c,
+  getBucketName as d,
   ensureUploadIndexes as e,
-  getChunkSizeBytes as f,
+  getUserId as f,
   getTenantId as g,
-  getSessionTtlMs as h,
-  computeSha256Hex as i,
-  getMaxClientUploadBytesPerSecond as j,
-  getRawBodyLimitBytes as k,
+  getChunkSizeBytes as h,
+  getSessionTtlMs as i,
+  computeSha256Hex as j,
+  getMaxClientUploadBytesPerSecond as k,
+  getRawBodyLimitBytes as l,
   normalizeSha256Hex as n,
   toBufferPayload as t
 };

package/dist/uploads/api/file-uploads/handlers/completeUpload.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"completeUpload.d.ts","sourceRoot":"","sources":["../../../../../src/uploads/api/file-uploads/handlers/completeUpload.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAA;AAKzC,OAAO,KAAK,OAAO,MAAM,UAAU,CAAA;AACnC,OAAO,EACL,KAAK,WAAW,EAQjB,MAAM,WAAW,CAAA;AAiDlB,eAAO,MAAM,cAAc,EAAE,UAAU,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,OAAO,CAAC,uBAAuB,EAAE,WAAW,CAmJ1G,CAAA"}
+{"version":3,"file":"completeUpload.d.ts","sourceRoot":"","sources":["../../../../../src/uploads/api/file-uploads/handlers/completeUpload.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAA;AAKzC,OAAO,KAAK,OAAO,MAAM,UAAU,CAAA;AACnC,OAAO,EACL,KAAK,WAAW,EASjB,MAAM,WAAW,CAAA;AAiDlB,eAAO,MAAM,cAAc,EAAE,UAAU,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,OAAO,CAAC,uBAAuB,EAAE,WAAW,CAoJ1G,CAAA"}

package/dist/uploads/api/file-uploads/handlers/getStatus.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"getStatus.d.ts","sourceRoot":"","sources":["../../../../../src/uploads/api/file-uploads/handlers/getStatus.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAA;AAIzC,OAAO,KAAK,OAAO,MAAM,UAAU,CAAA;AACnC,OAAO,EACL,KAAK,WAAW,EAMjB,MAAM,WAAW,CAAA;AAGlB,eAAO,MAAM,SAAS,EAAE,UAAU,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,OAAO,CAAC,qBAAqB,EAAE,WAAW,CAkDnG,CAAA"}
+{"version":3,"file":"getStatus.d.ts","sourceRoot":"","sources":["../../../../../src/uploads/api/file-uploads/handlers/getStatus.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAA;AAIzC,OAAO,KAAK,OAAO,MAAM,UAAU,CAAA;AACnC,OAAO,EACL,KAAK,WAAW,EAOjB,MAAM,WAAW,CAAA;AAGlB,eAAO,MAAM,SAAS,EAAE,UAAU,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,OAAO,CAAC,qBAAqB,EAAE,WAAW,CAoDnG,CAAA"}

package/dist/uploads/api/file-uploads/handlers/uploadChunk.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"uploadChunk.d.ts","sourceRoot":"","sources":["../../../../../src/uploads/api/file-uploads/handlers/uploadChunk.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAA;AAIzC,OAAO,EACL,KAAK,WAAW,EAUjB,MAAM,WAAW,CAAA;AAGlB,KAAK,oBAAoB,GAAG;IAC1B,EAAE,EAAE,OAAO,CAAA;IACX,KAAK,CAAC,EAAE,MAAM,CAAA;CACf,CAAA;AAED,eAAO,MAAM,WAAW,EAAE,UAAU,CAAC,MAAM,EAAE,oBAAoB,EAAE,WAAW,CAqG7E,CAAA"}
+{"version":3,"file":"uploadChunk.d.ts","sourceRoot":"","sources":["../../../../../src/uploads/api/file-uploads/handlers/uploadChunk.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAA;AAIzC,OAAO,EACL,KAAK,WAAW,EAWjB,MAAM,WAAW,CAAA;AAGlB,KAAK,oBAAoB,GAAG;IAC1B,EAAE,EAAE,OAAO,CAAA;IACX,KAAK,CAAC,EAAE,MAAM,CAAA;CACf,CAAA;AAED,eAAO,MAAM,WAAW,EAAE,UAAU,CAAC,MAAM,EAAE,oBAAoB,EAAE,WAAW,CAqG7E,CAAA"}

package/dist/uploads/api/file-uploads/shared.d.ts

@@ -1,5 +1,6 @@
 import { Ctx } from '../../../../../api/src';
 import { IRBUploadChunk, IRBUploadSession, LoadModelCtx } from '../../../../../db/src';
+import { AppAbility } from '../../../../../db/acl/src';
 import { Model } from '../../../../../vite/node_modules/mongoose';
 export type SessionUser = {
     id?: string;
@@ -22,6 +23,8 @@ export declare const getModelCtx: (_ctx: Ctx<SessionUser>, tenantId: string) =>
 export declare const toBufferPayload: (payload: unknown) => Buffer | null;
 export declare const ensureUploadIndexes: (UploadSession: Model<UploadSessionDoc>, UploadChunk: Model<UploadChunkDoc>) => Promise<void>;
 export declare const getUploadKeyHash: (ctx: Ctx<SessionUser>) => string | null;
+export declare const buildUploadsAbility: (ctx: Ctx<SessionUser>, tenantId: string) => AppAbility;
+export declare const getUploadSessionAccessQuery: (ability: AppAbility, action: "read" | "update" | "delete") => Record<string, unknown>;
 export declare const getOwnershipSelector: (ctx: Ctx<SessionUser>, session: Pick<UploadSessionDoc, "userId" | "ownerKeyHash">) => {
     userId?: string;
     ownerKeyHash?: string;

package/dist/uploads/api/file-uploads/shared.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"shared.d.ts","sourceRoot":"","sources":["../../../../src/uploads/api/file-uploads/shared.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,GAAG,EAAE,MAAM,cAAc,CAAA;AAClC,OAAO,EACL,KAAK,cAAc,EACnB,KAAK,gBAAgB,EACrB,KAAK,YAAY,EAClB,MAAM,aAAa,CAAA;AACpB,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,UAAU,CAAA;AAGrC,MAAM,MAAM,WAAW,GAAG;IACxB,EAAE,CAAC,EAAE,MAAM,CAAA;IACX,eAAe,CAAC,EAAE,MAAM,CAAA;CACzB,CAAA;AAED,MAAM,MAAM,gBAAgB,GAAG,gBAAgB,CAAA;AAC/C,MAAM,MAAM,cAAc,GAAG,IAAI,CAAC,cAAc,EAAE,MAAM,CAAC,GAAG;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,CAAA;AAoB5E,eAAO,MAAM,iBAAiB,QAAO,MAIpC,CAAA;AAED,eAAO,MAAM,gCAAgC,QAAO,MAAM,GAAG,IAG5D,CAAA;AAED,eAAO,MAAM,eAAe,QAAO,MAGlC,CAAA;AAED,eAAO,MAAM,oBAAoB,GAAI,gBAAgB,MAAM,KAAG,MAAsC,CAAA;AAEpG,eAAO,MAAM,aAAa,QAAO,MAAsE,CAAA;AAEvG,eAAO,MAAM,SAAS,GAAI,KAAK,GAAG,CAAC,WAAW,CAAC,KAAG,MAAM,GAAG,IAK1D,CAAA;AAED,eAAO,MAAM,WAAW,GAAI,KAAK,GAAG,CAAC,WAAW,CAAC,KAAG,MAAM,GAAG,IAgB5D,CAAA;AAED,eAAO,MAAM,gBAAgB,GAAI,MAAM,MAAM,KAAG,MAAyD,CAAA;AAEzG,eAAO,MAAM,kBAAkB,GAAI,OAAO,MAAM,KAAG,MAAoC,CAAA;AAEvF,eAAO,MAAM,WAAW,GAAI,MAAM,GAAG,CAAC,WAAW,CAAC,EAAE,UAAU,MAAM,KAAG,YAQrE,CAAA;AAEF,eAAO,MAAM,eAAe,GAAI,SAAS,OAAO,KAAG,MAAM,GAAG,IAI3D,CAAA;AAED,eAAO,MAAM,mBAAmB,GAC9B,eAAe,KAAK,CAAC,gBAAgB,CAAC,EACtC,aAAa,KAAK,CAAC,cAAc,CAAC,KACjC,OAAO,CAAC,IAAI,CAUd,CAAA;AAQD,eAAO,MAAM,gBAAgB,GAAI,KAAK,GAAG,CAAC,WAAW,CAAC,KAAG,MAAM,GAAG,IAIjE,CAAA;AAWD,eAAO,MAAM,oBAAoB,GAC/B,KAAK,GAAG,CAAC,WAAW,CAAC,EACrB,SAAS,IAAI,CAAC,gBAAgB,EAAE,QAAQ,GAAG,cAAc,CAAC,KACzD;IAAE,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,YAAY,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,IAe/C,CAAA"}
+{"version":3,"file":"shared.d.ts","sourceRoot":"","sources":["../../../../src/uploads/api/file-uploads/shared.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,GAAG,EAAE,MAAM,cAAc,CAAA;AAClC,OAAO,EACL,KAAK,cAAc,EACnB,KAAK,gBAAgB,EACrB,KAAK,YAAY,EAClB,MAAM,aAAa,CAAA;AACpB,OAAO,EAAiD,KAAK,UAAU,EAAE,MAAM,iBAAiB,CAAA;AAChG,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,UAAU,CAAA;AAGrC,MAAM,MAAM,WAAW,GAAG;IACxB,EAAE,CAAC,EAAE,MAAM,CAAA;IACX,eAAe,CAAC,EAAE,MAAM,CAAA;CACzB,CAAA;AAED,MAAM,MAAM,gBAAgB,GAAG,gBAAgB,CAAA;AAC/C,MAAM,MAAM,cAAc,GAAG,IAAI,CAAC,cAAc,EAAE,MAAM,CAAC,GAAG;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,CAAA;AAoB5E,eAAO,MAAM,iBAAiB,QAAO,MAIpC,CAAA;AAED,eAAO,MAAM,gCAAgC,QAAO,MAAM,GAAG,IAG5D,CAAA;AAED,eAAO,MAAM,eAAe,QAAO,MAGlC,CAAA;AAED,eAAO,MAAM,oBAAoB,GAAI,gBAAgB,MAAM,KAAG,MAAsC,CAAA;AAEpG,eAAO,MAAM,aAAa,QAAO,MAAsE,CAAA;AAEvG,eAAO,MAAM,SAAS,GAAI,KAAK,GAAG,CAAC,WAAW,CAAC,KAAG,MAAM,GAAG,IAK1D,CAAA;AAED,eAAO,MAAM,WAAW,GAAI,KAAK,GAAG,CAAC,WAAW,CAAC,KAAG,MAAM,GAAG,IAgB5D,CAAA;AAED,eAAO,MAAM,gBAAgB,GAAI,MAAM,MAAM,KAAG,MAAyD,CAAA;AAEzG,eAAO,MAAM,kBAAkB,GAAI,OAAO,MAAM,KAAG,MAAoC,CAAA;AAEvF,eAAO,MAAM,WAAW,GAAI,MAAM,GAAG,CAAC,WAAW,CAAC,EAAE,UAAU,MAAM,KAAG,YAQrE,CAAA;AAEF,eAAO,MAAM,eAAe,GAAI,SAAS,OAAO,KAAG,MAAM,GAAG,IAI3D,CAAA;AAED,eAAO,MAAM,mBAAmB,GAC9B,eAAe,KAAK,CAAC,gBAAgB,CAAC,EACtC,aAAa,KAAK,CAAC,cAAc,CAAC,KACjC,OAAO,CAAC,IAAI,CAUd,CAAA;AAQD,eAAO,MAAM,gBAAgB,GAAI,KAAK,GAAG,CAAC,WAAW,CAAC,KAAG,MAAM,GAAG,IAIjE,CAAA;AAED,eAAO,MAAM,mBAAmB,GAAI,KAAK,GAAG,CAAC,WAAW,CAAC,EAAE,UAAU,MAAM,KAAG,UAI7E,CAAA;AAED,eAAO,MAAM,2BAA2B,GACtC,SAAS,UAAU,EACnB,QAAQ,MAAM,GAAG,QAAQ,GAAG,QAAQ,KACnC,MAAM,CAAC,MAAM,EAAE,OAAO,CAA6D,CAAA;AAWtF,eAAO,MAAM,oBAAoB,GAC/B,KAAK,GAAG,CAAC,WAAW,CAAC,EACrB,SAAS,IAAI,CAAC,gBAAgB,EAAE,QAAQ,GAAG,cAAc,CAAC,KACzD;IAAE,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,YAAY,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,IAe/C,CAAA"}

package/dist/uploads.js

@@ -1,5 +1,5 @@
 const routes = Object.entries({
-  .../* @__PURE__ */ Object.assign({ "./api/file-uploads/handler.ts": () => import("./handler-DEEir2xV.js"), "./api/files/handler.ts": () => import("./handler-BYVnU9H-.js") })
+  .../* @__PURE__ */ Object.assign({ "./api/file-uploads/handler.ts": () => import("./handler-BOTZftAB.js"), "./api/files/handler.ts": () => import("./handler-Cl-0-832.js") })
 }).reduce((acc, [path, mod]) => {
   acc[path.replace("./api/", "@rpcbase/server/uploads/api/")] = mod;
   return acc;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rpcbase/server",
-  "version": "0.476.0",
+  "version": "0.478.0",
   "type": "module",
   "files": [
     "dist"
@@ -14,9 +14,9 @@
       "default": "./dist/index.js"
     },
     "./rts": {
-      "types": "./dist/rts.d.ts",
-      "import": "./dist/rts.js",
-      "default": "./dist/rts.js"
+      "types": "./dist/rts/index.d.ts",
+      "import": "./dist/rts/index.js",
+      "default": "./dist/rts/index.js"
     },
     "./uploads": {
       "types": "./dist/uploads.d.ts",

package/dist/passwordHashStorage.test.d.ts

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=passwordHashStorage.test.d.ts.map

package/dist/passwordHashStorage.test.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"passwordHashStorage.test.d.ts","sourceRoot":"","sources":["../src/passwordHashStorage.test.ts"],"names":[],"mappings":""}

package/dist/rts/api/changes/handler.test.d.ts

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=handler.test.d.ts.map

package/dist/rts/api/changes/handler.test.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"handler.test.d.ts","sourceRoot":"","sources":["../../../../src/rts/api/changes/handler.test.ts"],"names":[],"mappings":""}

package/dist/rts/index.ws.test.d.ts

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=index.ws.test.d.ts.map

package/dist/rts/index.ws.test.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.ws.test.d.ts","sourceRoot":"","sources":["../../src/rts/index.ws.test.ts"],"names":[],"mappings":""}

package/dist/rts.d.ts

@@ -1,3 +0,0 @@
-export * from './rts/index';
-export * from './rts/routes';
-//# sourceMappingURL=rts.d.ts.map

package/dist/rts.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"rts.d.ts","sourceRoot":"","sources":["../src/rts.ts"],"names":[],"mappings":"AAAA,cAAc,aAAa,CAAA;AAC3B,cAAc,cAAc,CAAA"}

package/dist/rts.js

@@ -1,13 +0,0 @@
-import { i, n, r } from "./index-Ckx0UHs6.js";
-const routes = Object.entries({
-  .../* @__PURE__ */ Object.assign({ "./api/changes/handler.ts": () => import("./handler-CHuOXAtH.js") })
-}).reduce((acc, [path, mod]) => {
-  acc[path.replace("./api/", "@rpcbase/server/rts/api/")] = mod;
-  return acc;
-}, {});
-export {
-  i as initRts,
-  n as notifyRtsModelChanged,
-  r as registerRtsHandler,
-  routes
-};

package/dist/uploads/api/files/handlers/getFile.test.d.ts

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=getFile.test.d.ts.map

package/dist/uploads/api/files/handlers/getFile.test.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"getFile.test.d.ts","sourceRoot":"","sources":["../../../../../src/uploads/api/files/handlers/getFile.test.ts"],"names":[],"mappings":""}