@rpcbase/server 0.525.0 → 0.526.0

package/dist/shared-BqZiSOmf.js

@@ -1,111 +0,0 @@
-import { createHash } from "node:crypto";
-import { getAccessibleByQuery, buildAbilityFromSession } from "@rpcbase/db/acl";
-const DEFAULT_CHUNK_SIZE_BYTES = 5 * 1024 * 1024;
-const MAX_CHUNK_SIZE_BYTES = 15 * 1024 * 1024;
-const DEFAULT_MAX_CLIENT_BYTES_PER_SECOND = 10 * 1024 * 1024;
-const DEFAULT_SESSION_TTL_S = 60 * 60 * 24;
-const ensuredIndexDbNames = /* @__PURE__ */ new Set();
-const parseOptionalPositiveInt = (rawValue) => {
-  if (typeof rawValue !== "string") return null;
-  const normalized = rawValue.trim();
-  if (!normalized) return null;
-  const parsed = Number(normalized);
-  if (!Number.isFinite(parsed) || parsed <= 0) return null;
-  return Math.floor(parsed);
-};
-const getChunkSizeBytes = () => {
-  const configured = parseOptionalPositiveInt(process.env.RB_UPLOAD_CHUNK_SIZE_BYTES);
-  const resolved = configured ?? DEFAULT_CHUNK_SIZE_BYTES;
-  return Math.min(MAX_CHUNK_SIZE_BYTES, resolved);
-};
-const getMaxClientUploadBytesPerSecond = () => {
-  const configured = parseOptionalPositiveInt(process.env.RB_UPLOAD_MAX_CLIENT_BYTES_PER_SECOND);
-  return configured ?? DEFAULT_MAX_CLIENT_BYTES_PER_SECOND;
-};
-const getSessionTtlMs = () => {
-  const ttlSeconds = parseOptionalPositiveInt(process.env.RB_UPLOAD_SESSION_TTL_S) ?? DEFAULT_SESSION_TTL_S;
-  return ttlSeconds * 1e3;
-};
-const getRawBodyLimitBytes = (chunkSizeBytes) => chunkSizeBytes + 1024 * 1024;
-const getBucketName = () => (process.env.RB_FILESYSTEM_BUCKET_NAME ?? "").trim() || "fs";
-const getUserId = (ctx) => {
-  const raw = ctx.req.session?.user?.id;
-  if (typeof raw !== "string") return null;
-  const normalized = raw.trim();
-  return normalized ? normalized : null;
-};
-const getTenantId = (ctx) => {
-  const rawSession = ctx.req.session?.user?.currentTenantId;
-  const sessionTenantId = typeof rawSession === "string" ? rawSession.trim() : "";
-  const userId = getUserId(ctx);
-  const rawQuery = ctx.req.query?.["rb-tenant-id"];
-  const queryTenantId = Array.isArray(rawQuery) ? rawQuery[0] : rawQuery;
-  const queryValue = typeof queryTenantId === "string" && queryTenantId.trim() ? queryTenantId.trim() : null;
-  if (!userId && queryValue) return queryValue;
-  if (userId) return sessionTenantId || null;
-  if (sessionTenantId) return sessionTenantId;
-  return queryValue;
-};
-const computeSha256Hex = (data) => createHash("sha256").update(data).digest("hex");
-const normalizeSha256Hex = (value) => value.trim().toLowerCase();
-const getModelCtx = (_ctx, tenantId, ability) => ({
-  req: {
-    session: {
-      user: {
-        currentTenantId: tenantId
-      }
-    }
-  },
-  ability
-});
-const toBufferPayload = (payload) => {
-  if (Buffer.isBuffer(payload)) return payload;
-  if (payload instanceof Uint8Array) return Buffer.from(payload);
-  return null;
-};
-const ensureUploadIndexes = async (UploadSession, UploadChunk) => {
-  const dbName = String(UploadSession?.db?.name ?? "");
-  if (dbName && ensuredIndexDbNames.has(dbName)) return;
-  await Promise.all([UploadSession.createIndexes(), UploadChunk.createIndexes()]);
-  if (dbName) ensuredIndexDbNames.add(dbName);
-};
-const normalizeUploadKey = (raw) => {
-  if (typeof raw !== "string") return null;
-  const normalized = raw.trim();
-  return normalized ? normalized : null;
-};
-const getUploadKeyHash = (ctx) => {
-  const uploadKey = normalizeUploadKey(ctx.req.get("X-Upload-Key"));
-  if (!uploadKey) return null;
-  return computeSha256Hex(Buffer.from(uploadKey));
-};
-const buildUploadsAbility = (ctx, tenantId) => {
-  const uploadKeyHash = getUploadKeyHash(ctx);
-  const claims = uploadKeyHash ? {
-    uploadKeyHash
-  } : void 0;
-  return buildAbilityFromSession({
-    tenantId,
-    session: ctx.req.session,
-    claims
-  });
-};
-const getUploadSessionAccessQuery = (ability, action) => getAccessibleByQuery(ability, action, "RBUploadSession");
-export {
-  getModelCtx as a,
-  buildUploadsAbility as b,
-  getUploadSessionAccessQuery as c,
-  getBucketName as d,
-  ensureUploadIndexes as e,
-  getUserId as f,
-  getTenantId as g,
-  getChunkSizeBytes as h,
-  getSessionTtlMs as i,
-  computeSha256Hex as j,
-  getMaxClientUploadBytesPerSecond as k,
-  getRawBodyLimitBytes as l,
-  getUploadKeyHash as m,
-  normalizeSha256Hex as n,
-  toBufferPayload as t
-};
-//# sourceMappingURL=shared-BqZiSOmf.js.map

package/dist/shared-BqZiSOmf.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"shared-BqZiSOmf.js","sources":["../src/uploads/api/file-uploads/shared.ts"],"sourcesContent":["import { createHash, timingSafeEqual } from \"node:crypto\"\n\nimport { Ctx } from \"@rpcbase/api\"\nimport {\n  type IRBUploadChunk,\n  type IRBUploadSession,\n  type LoadModelCtx,\n} from \"@rpcbase/db\"\nimport { buildAbilityFromSession, getAccessibleByQuery, type AppAbility } from \"@rpcbase/db/acl\"\nimport type { Model } from \"mongoose\"\n\n\nexport type SessionUser = {\n  id?: string\n  currentTenantId?: string\n}\n\nexport type UploadSessionDoc = IRBUploadSession\nexport type UploadChunkDoc = Omit<IRBUploadChunk, \"data\"> & { data: Buffer }\n\nconst DEFAULT_CHUNK_SIZE_BYTES = 5 * 1024 * 1024\nconst MAX_CHUNK_SIZE_BYTES = 15 * 1024 * 1024\n\nconst DEFAULT_MAX_CLIENT_BYTES_PER_SECOND = 10 * 1024 * 1024\n\nconst DEFAULT_SESSION_TTL_S = 60 * 60 * 24\n\nconst ensuredIndexDbNames = new Set<string>()\n\nconst parseOptionalPositiveInt = (rawValue: unknown): number | null => {\n  if (typeof rawValue !== \"string\") return null\n  const normalized = rawValue.trim()\n  if (!normalized) return null\n  const parsed = Number(normalized)\n  if (!Number.isFinite(parsed) || parsed <= 0) return null\n  return Math.floor(parsed)\n}\n\nexport const getChunkSizeBytes = (): number => {\n  const configured = parseOptionalPositiveInt(process.env.RB_UPLOAD_CHUNK_SIZE_BYTES)\n  const resolved = configured ?? DEFAULT_CHUNK_SIZE_BYTES\n  return Math.min(MAX_CHUNK_SIZE_BYTES, resolved)\n}\n\nexport const getMaxClientUploadBytesPerSecond = (): number | null => {\n  const configured = parseOptionalPositiveInt(process.env.RB_UPLOAD_MAX_CLIENT_BYTES_PER_SECOND)\n  return configured ?? DEFAULT_MAX_CLIENT_BYTES_PER_SECOND\n}\n\nexport const getSessionTtlMs = (): number => {\n  const ttlSeconds = parseOptionalPositiveInt(process.env.RB_UPLOAD_SESSION_TTL_S) ?? DEFAULT_SESSION_TTL_S\n  return ttlSeconds * 1000\n}\n\nexport const getRawBodyLimitBytes = (chunkSizeBytes: number): number => chunkSizeBytes + 1024 * 1024\n\nexport const getBucketName = (): string => (process.env.RB_FILESYSTEM_BUCKET_NAME ?? \"\").trim() || \"fs\"\n\nexport const getUserId = (ctx: Ctx<SessionUser>): string | null => {\n  const raw = ctx.req.session?.user?.id\n  if (typeof raw !== \"string\") return null\n  const normalized = raw.trim()\n  return normalized ? normalized : null\n}\n\nexport const getTenantId = (ctx: Ctx<SessionUser>): string | null => {\n  const rawSession = ctx.req.session?.user?.currentTenantId\n  const sessionTenantId = typeof rawSession === \"string\" ? rawSession.trim() : \"\"\n\n  const userId = getUserId(ctx)\n  const rawQuery = ctx.req.query?.[\"rb-tenant-id\"]\n  const queryTenantId = Array.isArray(rawQuery) ? rawQuery[0] : rawQuery\n  const queryValue = typeof queryTenantId === \"string\" && queryTenantId.trim() ? queryTenantId.trim() : null\n\n  if (!userId && queryValue) return queryValue\n\n  if (userId) return sessionTenantId || null\n\n  if (sessionTenantId) return sessionTenantId\n\n  return queryValue\n}\n\nexport const computeSha256Hex = (data: Buffer): string => createHash(\"sha256\").update(data).digest(\"hex\")\n\nexport const normalizeSha256Hex = (value: string): string => value.trim().toLowerCase()\n\nexport const getModelCtx = (_ctx: Ctx<SessionUser>, tenantId: string, ability?: AppAbility): LoadModelCtx => ({\n  req: {\n    session: {\n      user: {\n        currentTenantId: tenantId,\n      },\n    },\n  },\n  ability,\n})\n\nexport const toBufferPayload = (payload: unknown): Buffer | null => {\n  if (Buffer.isBuffer(payload)) return payload\n  if (payload instanceof Uint8Array) return Buffer.from(payload)\n  return null\n}\n\nexport const ensureUploadIndexes = async (\n  UploadSession: Model<UploadSessionDoc>,\n  UploadChunk: Model<UploadChunkDoc>,\n): Promise<void> => {\n  const dbName = String((UploadSession as unknown as { db?: { name?: unknown } })?.db?.name ?? \"\")\n  if (dbName && ensuredIndexDbNames.has(dbName)) return\n\n  await Promise.all([\n    UploadSession.createIndexes(),\n    UploadChunk.createIndexes(),\n  ])\n\n  if (dbName) ensuredIndexDbNames.add(dbName)\n}\n\nconst normalizeUploadKey = (raw: unknown): string | null => {\n  if (typeof raw !== \"string\") return null\n  const normalized = raw.trim()\n  return normalized ? normalized : null\n}\n\nexport const getUploadKeyHash = (ctx: Ctx<SessionUser>): string | null => {\n  const uploadKey = normalizeUploadKey(ctx.req.get(\"X-Upload-Key\"))\n  if (!uploadKey) return null\n  return computeSha256Hex(Buffer.from(uploadKey))\n}\n\nexport const buildUploadsAbility = (ctx: Ctx<SessionUser>, tenantId: string): AppAbility => {\n  const uploadKeyHash = getUploadKeyHash(ctx)\n  const claims = uploadKeyHash ? { uploadKeyHash } : undefined\n  return buildAbilityFromSession({ tenantId, session: ctx.req.session, claims })\n}\n\nexport const getUploadSessionAccessQuery = (\n  ability: AppAbility,\n  action: \"read\" | \"update\" | \"delete\",\n): Record<string, unknown> => getAccessibleByQuery(ability, action, \"RBUploadSession\")\n\nconst timingSafeEqualHex = (left: string, right: string): boolean => {\n  if (left.length !== right.length) return false\n  try {\n    return timingSafeEqual(Buffer.from(left, \"hex\"), Buffer.from(right, \"hex\"))\n  } catch {\n    return false\n  }\n}\n\nexport const getOwnershipSelector = (\n  ctx: Ctx<SessionUser>,\n  session: Pick<UploadSessionDoc, \"userId\" | \"ownerKeyHash\">,\n): { userId?: string; ownerKeyHash?: string } | null => {\n  if (session.userId) {\n    const userId = getUserId(ctx)\n    if (!userId || userId !== session.userId) return null\n    return { userId: session.userId }\n  }\n\n  if (session.ownerKeyHash) {\n    const uploadKeyHash = getUploadKeyHash(ctx)\n    if (!uploadKeyHash) return null\n    if (!timingSafeEqualHex(session.ownerKeyHash, uploadKeyHash)) return null\n    return { ownerKeyHash: session.ownerKeyHash }\n  }\n\n  return null\n}\n"],"names":["DEFAULT_CHUNK_SIZE_BYTES","MAX_CHUNK_SIZE_BYTES","DEFAULT_MAX_CLIENT_BYTES_PER_SECOND","DEFAULT_SESSION_TTL_S","ensuredIndexDbNames","Set","parseOptionalPositiveInt","rawValue","normalized","trim","parsed","Number","isFinite","Math","floor","getChunkSizeBytes","configured","process","env","RB_UPLOAD_CHUNK_SIZE_BYTES","resolved","min","getMaxClientUploadBytesPerSecond","RB_UPLOAD_MAX_CLIENT_BYTES_PER_SECOND","getSessionTtlMs","ttlSeconds","RB_UPLOAD_SESSION_TTL_S","getRawBodyLimitBytes","chunkSizeBytes","getBucketName","RB_FILESYSTEM_BUCKET_NAME","getUserId","ctx","raw","req","session","user","id","getTenantId","rawSession","currentTenantId","sessionTenantId","userId","rawQuery","query","queryTenantId","Array","isArray","queryValue","computeSha256Hex","data","createHash","update","digest","normalizeSha256Hex","value","toLowerCase","getModelCtx","_ctx","tenantId","ability","toBufferPayload","payload","Buffer","isBuffer","Uint8Array","from","ensureUploadIndexes","UploadSession","UploadChunk","dbName","String","db","name","has","Promise","all","createIndexes","add","normalizeUploadKey","getUploadKeyHash","uploadKey","get","buildUploadsAbility","uploadKeyHash","claims","undefined","buildAbilityFromSession","getUploadSessionAccessQuery","action","getAccessibleByQuery"],"mappings":";;AAoBA,MAAMA,2BAA2B,IAAI,OAAO;AAC5C,MAAMC,uBAAuB,KAAK,OAAO;AAEzC,MAAMC,sCAAsC,KAAK,OAAO;AAExD,MAAMC,wBAAwB,KAAK,KAAK;AAExC,MAAMC,0CAA0BC,IAAAA;AAEhC,MAAMC,2BAA2BA,CAACC,aAAqC;AACrE,MAAI,OAAOA,aAAa,SAAU,QAAO;AACzC,QAAMC,aAAaD,SAASE,KAAAA;AAC5B,MAAI,CAACD,WAAY,QAAO;AACxB,QAAME,SAASC,OAAOH,UAAU;AAChC,MAAI,CAACG,OAAOC,SAASF,MAAM,KAAKA,UAAU,EAAG,QAAO;AACpD,SAAOG,KAAKC,MAAMJ,MAAM;AAC1B;AAEO,MAAMK,oBAAoBA,MAAc;AAC7C,QAAMC,aAAaV,yBAAyBW,QAAQC,IAAIC,0BAA0B;AAClF,QAAMC,WAAWJ,cAAchB;AAC/B,SAAOa,KAAKQ,IAAIpB,sBAAsBmB,QAAQ;AAChD;AAEO,MAAME,mCAAmCA,MAAqB;AACnE,QAAMN,aAAaV,yBAAyBW,QAAQC,IAAIK,qCAAqC;AAC7F,SAAOP,cAAcd;AACvB;AAEO,MAAMsB,kBAAkBA,MAAc;AAC3C,QAAMC,aAAanB,yBAAyBW,QAAQC,IAAIQ,uBAAuB,KAAKvB;AACpF,SAAOsB,aAAa;AACtB;AAEO,MAAME,uBAAuBA,CAACC,mBAAmCA,iBAAiB,OAAO;AAEzF,MAAMC,gBAAgBA,OAAeZ,QAAQC,IAAIY,6BAA6B,IAAIrB,UAAU;AAE5F,MAAMsB,YAAYA,CAACC,QAAyC;AACjE,QAAMC,MAAMD,IAAIE,IAAIC,SAASC,MAAMC;AACnC,MAAI,OAAOJ,QAAQ,SAAU,QAAO;AACpC,QAAMzB,aAAayB,IAAIxB,KAAAA;AACvB,SAAOD,aAAaA,aAAa;AACnC;AAEO,MAAM8B,cAAcA,CAACN,QAAyC;AACnE,QAAMO,aAAaP,IAAIE,IAAIC,SAASC,MAAMI;AAC1C,QAAMC,kBAAkB,OAAOF,eAAe,WAAWA,WAAW9B,SAAS;AAE7E,QAAMiC,SAASX,UAAUC,GAAG;AAC5B,QAAMW,WAAWX,IAAIE,IAAIU,QAAQ,cAAc;AAC/C,QAAMC,gBAAgBC,MAAMC,QAAQJ,QAAQ,IAAIA,SAAS,CAAC,IAAIA;AAC9D,QAAMK,aAAa,OAAOH,kBAAkB,YAAYA,cAAcpC,SAASoC,cAAcpC,KAAAA,IAAS;AAEtG,MAAI,CAACiC,UAAUM,WAAY,QAAOA;AAElC,MAAIN,eAAeD,mBAAmB;AAEtC,MAAIA,gBAAiB,QAAOA;AAE5B,SAAOO;AACT;AAEO,MAAMC,mBAAmBA,CAACC,SAAyBC,WAAW,QAAQ,EAAEC,OAAOF,IAAI,EAAEG,OAAO,KAAK;AAEjG,MAAMC,qBAAqBA,CAACC,UAA0BA,MAAM9C,KAAAA,EAAO+C,YAAAA;AAEnE,MAAMC,cAAcA,CAACC,MAAwBC,UAAkBC,aAAwC;AAAA,EAC5G1B,KAAK;AAAA,IACHC,SAAS;AAAA,MACPC,MAAM;AAAA,QACJI,iBAAiBmB;AAAAA,MAAAA;AAAAA,IACnB;AAAA,EACF;AAAA,EAEFC;AACF;AAEO,MAAMC,kBAAkBA,CAACC,YAAoC;AAClE,MAAIC,OAAOC,SAASF,OAAO,EAAG,QAAOA;AACrC,MAAIA,mBAAmBG,WAAY,QAAOF,OAAOG,KAAKJ,OAAO;AAC7D,SAAO;AACT;AAEO,MAAMK,sBAAsB,OACjCC,eACAC,gBACkB;AAClB,QAAMC,SAASC,OAAQH,eAA0DI,IAAIC,QAAQ,EAAE;AAC/F,MAAIH,UAAUlE,oBAAoBsE,IAAIJ,MAAM,EAAG;AAE/C,QAAMK,QAAQC,IAAI,CAChBR,cAAcS,iBACdR,YAAYQ,cAAAA,CAAe,CAC5B;AAED,MAAIP,OAAQlE,qBAAoB0E,IAAIR,MAAM;AAC5C;AAEA,MAAMS,qBAAqBA,CAAC9C,QAAgC;AAC1D,MAAI,OAAOA,QAAQ,SAAU,QAAO;AACpC,QAAMzB,aAAayB,IAAIxB,KAAAA;AACvB,SAAOD,aAAaA,aAAa;AACnC;AAEO,MAAMwE,mBAAmBA,CAAChD,QAAyC;AACxE,QAAMiD,YAAYF,mBAAmB/C,IAAIE,IAAIgD,IAAI,cAAc,CAAC;AAChE,MAAI,CAACD,UAAW,QAAO;AACvB,SAAOhC,iBAAiBc,OAAOG,KAAKe,SAAS,CAAC;AAChD;AAEO,MAAME,sBAAsBA,CAACnD,KAAuB2B,aAAiC;AAC1F,QAAMyB,gBAAgBJ,iBAAiBhD,GAAG;AAC1C,QAAMqD,SAASD,gBAAgB;AAAA,IAAEA;AAAAA,EAAAA,IAAkBE;AACnD,SAAOC,wBAAwB;AAAA,IAAE5B;AAAAA,IAAUxB,SAASH,IAAIE,IAAIC;AAAAA,IAASkD;AAAAA,EAAAA,CAAQ;AAC/E;AAEO,MAAMG,8BAA8BA,CACzC5B,SACA6B,WAC4BC,qBAAqB9B,SAAS6B,QAAQ,iBAAiB;"}