@rpcbase/server 0.538.0 → 0.539.0

package/dist/shared-DhZ_rDdo.js

@@ -1,87 +0,0 @@
-import { buildAbilityFromSession, getAccessibleByQuery } from "@rpcbase/db/acl";
-import { createHash } from "node:crypto";
-//#region src/uploads/api/file-uploads/shared.ts
-var DEFAULT_CHUNK_SIZE_BYTES = 5 * 1024 * 1024;
-var MAX_CHUNK_SIZE_BYTES = 15 * 1024 * 1024;
-var DEFAULT_MAX_CLIENT_BYTES_PER_SECOND = 10 * 1024 * 1024;
-var DEFAULT_SESSION_TTL_S = 3600 * 24;
-var ensuredIndexDbNames = /* @__PURE__ */ new Set();
-var parseOptionalPositiveInt = (rawValue) => {
-	if (typeof rawValue !== "string") return null;
-	const normalized = rawValue.trim();
-	if (!normalized) return null;
-	const parsed = Number(normalized);
-	if (!Number.isFinite(parsed) || parsed <= 0) return null;
-	return Math.floor(parsed);
-};
-var getChunkSizeBytes = () => {
-	const resolved = parseOptionalPositiveInt(process.env.RB_UPLOAD_CHUNK_SIZE_BYTES) ?? DEFAULT_CHUNK_SIZE_BYTES;
-	return Math.min(MAX_CHUNK_SIZE_BYTES, resolved);
-};
-var getMaxClientUploadBytesPerSecond = () => {
-	return parseOptionalPositiveInt(process.env.RB_UPLOAD_MAX_CLIENT_BYTES_PER_SECOND) ?? DEFAULT_MAX_CLIENT_BYTES_PER_SECOND;
-};
-var getSessionTtlMs = () => {
-	return (parseOptionalPositiveInt(process.env.RB_UPLOAD_SESSION_TTL_S) ?? DEFAULT_SESSION_TTL_S) * 1e3;
-};
-var getRawBodyLimitBytes = (chunkSizeBytes) => chunkSizeBytes + 1024 * 1024;
-var getBucketName = () => (process.env.RB_FILESYSTEM_BUCKET_NAME ?? "").trim() || "fs";
-var getUserId = (ctx) => {
-	const raw = ctx.req.session?.user?.id;
-	if (typeof raw !== "string") return null;
-	const normalized = raw.trim();
-	return normalized ? normalized : null;
-};
-var getTenantId = (ctx) => {
-	const rawSession = ctx.req.session?.user?.currentTenantId;
-	const sessionTenantId = typeof rawSession === "string" ? rawSession.trim() : "";
-	const userId = getUserId(ctx);
-	const rawQuery = ctx.req.query?.["rb-tenant-id"];
-	const queryTenantId = Array.isArray(rawQuery) ? rawQuery[0] : rawQuery;
-	const queryValue = typeof queryTenantId === "string" && queryTenantId.trim() ? queryTenantId.trim() : null;
-	if (!userId && queryValue) return queryValue;
-	if (userId) return sessionTenantId || null;
-	if (sessionTenantId) return sessionTenantId;
-	return queryValue;
-};
-var computeSha256Hex = (data) => createHash("sha256").update(data).digest("hex");
-var normalizeSha256Hex = (value) => value.trim().toLowerCase();
-var getModelCtx = (_ctx, tenantId, ability) => ({
-	req: { session: { user: { currentTenantId: tenantId } } },
-	ability
-});
-var toBufferPayload = (payload) => {
-	if (Buffer.isBuffer(payload)) return payload;
-	if (payload instanceof Uint8Array) return Buffer.from(payload);
-	return null;
-};
-var ensureUploadIndexes = async (UploadSession, UploadChunk) => {
-	const dbName = String(UploadSession?.db?.name ?? "");
-	if (dbName && ensuredIndexDbNames.has(dbName)) return;
-	await Promise.all([UploadSession.createIndexes(), UploadChunk.createIndexes()]);
-	if (dbName) ensuredIndexDbNames.add(dbName);
-};
-var normalizeUploadKey = (raw) => {
-	if (typeof raw !== "string") return null;
-	const normalized = raw.trim();
-	return normalized ? normalized : null;
-};
-var getUploadKeyHash = (ctx) => {
-	const uploadKey = normalizeUploadKey(ctx.req.get("X-Upload-Key"));
-	if (!uploadKey) return null;
-	return computeSha256Hex(Buffer.from(uploadKey));
-};
-var buildUploadsAbility = (ctx, tenantId) => {
-	const uploadKeyHash = getUploadKeyHash(ctx);
-	const claims = uploadKeyHash ? { uploadKeyHash } : void 0;
-	return buildAbilityFromSession({
-		tenantId,
-		session: ctx.req.session,
-		claims
-	});
-};
-var getUploadSessionAccessQuery = (ability, action) => getAccessibleByQuery(ability, action, "RBUploadSession");
-//#endregion
-export { getChunkSizeBytes as a, getRawBodyLimitBytes as c, getUploadKeyHash as d, getUploadSessionAccessQuery as f, toBufferPayload as h, getBucketName as i, getSessionTtlMs as l, normalizeSha256Hex as m, computeSha256Hex as n, getMaxClientUploadBytesPerSecond as o, getUserId as p, ensureUploadIndexes as r, getModelCtx as s, buildUploadsAbility as t, getTenantId as u };
-
-//# sourceMappingURL=shared-DhZ_rDdo.js.map

package/dist/shared-DhZ_rDdo.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"shared-DhZ_rDdo.js","names":["createHash","timingSafeEqual","Ctx","IRBUploadChunk","IRBUploadSession","LoadModelCtx","buildAbilityFromSession","getAccessibleByQuery","AppAbility","Model","SessionUser","id","currentTenantId","UploadSessionDoc","UploadChunkDoc","Omit","data","Buffer","DEFAULT_CHUNK_SIZE_BYTES","MAX_CHUNK_SIZE_BYTES","DEFAULT_MAX_CLIENT_BYTES_PER_SECOND","DEFAULT_SESSION_TTL_S","ensuredIndexDbNames","Set","parseOptionalPositiveInt","rawValue","normalized","trim","parsed","Number","isFinite","Math","floor","getChunkSizeBytes","configured","process","env","RB_UPLOAD_CHUNK_SIZE_BYTES","resolved","min","getMaxClientUploadBytesPerSecond","RB_UPLOAD_MAX_CLIENT_BYTES_PER_SECOND","getSessionTtlMs","ttlSeconds","RB_UPLOAD_SESSION_TTL_S","getRawBodyLimitBytes","chunkSizeBytes","getBucketName","RB_FILESYSTEM_BUCKET_NAME","getUserId","ctx","raw","req","session","user","getTenantId","rawSession","sessionTenantId","userId","rawQuery","query","queryTenantId","Array","isArray","queryValue","computeSha256Hex","update","digest","normalizeSha256Hex","value","toLowerCase","getModelCtx","_ctx","tenantId","ability","toBufferPayload","payload","isBuffer","Uint8Array","from","ensureUploadIndexes","UploadSession","UploadChunk","Promise","dbName","String","db","name","has","all","createIndexes","add","normalizeUploadKey","getUploadKeyHash","uploadKey","get","buildUploadsAbility","uploadKeyHash","claims","undefined","getUploadSessionAccessQuery","action","Record","timingSafeEqualHex","left","right","length","getOwnershipSelector","Pick","ownerKeyHash"],"sources":["../src/uploads/api/file-uploads/shared.ts"],"sourcesContent":["import { createHash, timingSafeEqual } from \"node:crypto\"\n\nimport { Ctx } from \"@rpcbase/api\"\nimport {\n  type IRBUploadChunk,\n  type IRBUploadSession,\n  type LoadModelCtx,\n} from \"@rpcbase/db\"\nimport { buildAbilityFromSession, getAccessibleByQuery, type AppAbility } from \"@rpcbase/db/acl\"\nimport type { Model } from \"mongoose\"\n\n\nexport type SessionUser = {\n  id?: string\n  currentTenantId?: string\n}\n\nexport type UploadSessionDoc = IRBUploadSession\nexport type UploadChunkDoc = Omit<IRBUploadChunk, \"data\"> & { data: Buffer }\n\nconst DEFAULT_CHUNK_SIZE_BYTES = 5 * 1024 * 1024\nconst MAX_CHUNK_SIZE_BYTES = 15 * 1024 * 1024\n\nconst DEFAULT_MAX_CLIENT_BYTES_PER_SECOND = 10 * 1024 * 1024\n\nconst DEFAULT_SESSION_TTL_S = 60 * 60 * 24\n\nconst ensuredIndexDbNames = new Set<string>()\n\nconst parseOptionalPositiveInt = (rawValue: unknown): number | null => {\n  if (typeof rawValue !== \"string\") return null\n  const normalized = rawValue.trim()\n  if (!normalized) return null\n  const parsed = Number(normalized)\n  if (!Number.isFinite(parsed) || parsed <= 0) return null\n  return Math.floor(parsed)\n}\n\nexport const getChunkSizeBytes = (): number => {\n  const configured = parseOptionalPositiveInt(process.env.RB_UPLOAD_CHUNK_SIZE_BYTES)\n  const resolved = configured ?? DEFAULT_CHUNK_SIZE_BYTES\n  return Math.min(MAX_CHUNK_SIZE_BYTES, resolved)\n}\n\nexport const getMaxClientUploadBytesPerSecond = (): number | null => {\n  const configured = parseOptionalPositiveInt(process.env.RB_UPLOAD_MAX_CLIENT_BYTES_PER_SECOND)\n  return configured ?? DEFAULT_MAX_CLIENT_BYTES_PER_SECOND\n}\n\nexport const getSessionTtlMs = (): number => {\n  const ttlSeconds = parseOptionalPositiveInt(process.env.RB_UPLOAD_SESSION_TTL_S) ?? DEFAULT_SESSION_TTL_S\n  return ttlSeconds * 1000\n}\n\nexport const getRawBodyLimitBytes = (chunkSizeBytes: number): number => chunkSizeBytes + 1024 * 1024\n\nexport const getBucketName = (): string => (process.env.RB_FILESYSTEM_BUCKET_NAME ?? \"\").trim() || \"fs\"\n\nexport const getUserId = (ctx: Ctx<SessionUser>): string | null => {\n  const raw = ctx.req.session?.user?.id\n  if (typeof raw !== \"string\") return null\n  const normalized = raw.trim()\n  return normalized ? normalized : null\n}\n\nexport const getTenantId = (ctx: Ctx<SessionUser>): string | null => {\n  const rawSession = ctx.req.session?.user?.currentTenantId\n  const sessionTenantId = typeof rawSession === \"string\" ? rawSession.trim() : \"\"\n\n  const userId = getUserId(ctx)\n  const rawQuery = ctx.req.query?.[\"rb-tenant-id\"]\n  const queryTenantId = Array.isArray(rawQuery) ? rawQuery[0] : rawQuery\n  const queryValue = typeof queryTenantId === \"string\" && queryTenantId.trim() ? queryTenantId.trim() : null\n\n  if (!userId && queryValue) return queryValue\n\n  if (userId) return sessionTenantId || null\n\n  if (sessionTenantId) return sessionTenantId\n\n  return queryValue\n}\n\nexport const computeSha256Hex = (data: Buffer): string => createHash(\"sha256\").update(data).digest(\"hex\")\n\nexport const normalizeSha256Hex = (value: string): string => value.trim().toLowerCase()\n\nexport const getModelCtx = (_ctx: Ctx<SessionUser>, tenantId: string, ability?: AppAbility): LoadModelCtx => ({\n  req: {\n    session: {\n      user: {\n        currentTenantId: tenantId,\n      },\n    },\n  },\n  ability,\n})\n\nexport const toBufferPayload = (payload: unknown): Buffer | null => {\n  if (Buffer.isBuffer(payload)) return payload\n  if (payload instanceof Uint8Array) return Buffer.from(payload)\n  return null\n}\n\nexport const ensureUploadIndexes = async (\n  UploadSession: Model<UploadSessionDoc>,\n  UploadChunk: Model<UploadChunkDoc>,\n): Promise<void> => {\n  const dbName = String((UploadSession as unknown as { db?: { name?: unknown } })?.db?.name ?? \"\")\n  if (dbName && ensuredIndexDbNames.has(dbName)) return\n\n  await Promise.all([\n    UploadSession.createIndexes(),\n    UploadChunk.createIndexes(),\n  ])\n\n  if (dbName) ensuredIndexDbNames.add(dbName)\n}\n\nconst normalizeUploadKey = (raw: unknown): string | null => {\n  if (typeof raw !== \"string\") return null\n  const normalized = raw.trim()\n  return normalized ? normalized : null\n}\n\nexport const getUploadKeyHash = (ctx: Ctx<SessionUser>): string | null => {\n  const uploadKey = normalizeUploadKey(ctx.req.get(\"X-Upload-Key\"))\n  if (!uploadKey) return null\n  return computeSha256Hex(Buffer.from(uploadKey))\n}\n\nexport const buildUploadsAbility = (ctx: Ctx<SessionUser>, tenantId: string): AppAbility => {\n  const uploadKeyHash = getUploadKeyHash(ctx)\n  const claims = uploadKeyHash ? { uploadKeyHash } : undefined\n  return buildAbilityFromSession({ tenantId, session: ctx.req.session, claims })\n}\n\nexport const getUploadSessionAccessQuery = (\n  ability: AppAbility,\n  action: \"read\" | \"update\" | \"delete\",\n): Record<string, unknown> => getAccessibleByQuery(ability, action, \"RBUploadSession\")\n\nconst timingSafeEqualHex = (left: string, right: string): boolean => {\n  if (left.length !== right.length) return false\n  try {\n    return timingSafeEqual(Buffer.from(left, \"hex\"), Buffer.from(right, \"hex\"))\n  } catch {\n    return false\n  }\n}\n\nexport const getOwnershipSelector = (\n  ctx: Ctx<SessionUser>,\n  session: Pick<UploadSessionDoc, \"userId\" | \"ownerKeyHash\">,\n): { userId?: string; ownerKeyHash?: string } | null => {\n  if (session.userId) {\n    const userId = getUserId(ctx)\n    if (!userId || userId !== session.userId) return null\n    return { userId: session.userId }\n  }\n\n  if (session.ownerKeyHash) {\n    const uploadKeyHash = getUploadKeyHash(ctx)\n    if (!uploadKeyHash) return null\n    if (!timingSafeEqualHex(session.ownerKeyHash, uploadKeyHash)) return null\n    return { ownerKeyHash: session.ownerKeyHash }\n  }\n\n  return null\n}\n"],"mappings":";;;AAoBA,IAAMkB,2BAA2B,IAAI,OAAO;AAC5C,IAAMC,uBAAuB,KAAK,OAAO;AAEzC,IAAMC,sCAAsC,KAAK,OAAO;AAExD,IAAMC,wBAAwB,OAAU;AAExC,IAAMC,sCAAsB,IAAIC,KAAa;AAE7C,IAAMC,4BAA4BC,aAAqC;AACrE,KAAI,OAAOA,aAAa,SAAU,QAAO;CACzC,MAAMC,aAAaD,SAASE,MAAM;AAClC,KAAI,CAACD,WAAY,QAAO;CACxB,MAAME,SAASC,OAAOH,WAAW;AACjC,KAAI,CAACG,OAAOC,SAASF,OAAO,IAAIA,UAAU,EAAG,QAAO;AACpD,QAAOG,KAAKC,MAAMJ,OAAO;;AAG3B,IAAaK,0BAAkC;CAE7C,MAAMK,WADad,yBAAyBW,QAAQC,IAAIC,2BAA2B,IACpDnB;AAC/B,QAAOa,KAAKQ,IAAIpB,sBAAsBmB,SAAS;;AAGjD,IAAaE,yCAAwD;AAEnE,QADmBhB,yBAAyBW,QAAQC,IAAIK,sCAAsC,IACzErB;;AAGvB,IAAasB,wBAAgC;AAE3C,SADmBlB,yBAAyBW,QAAQC,IAAIQ,wBAAwB,IAAIvB,yBAChE;;AAGtB,IAAawB,wBAAwBC,mBAAmCA,iBAAiB,OAAO;AAEhG,IAAaC,uBAA+BZ,QAAQC,IAAIY,6BAA6B,IAAIrB,MAAM,IAAI;AAEnG,IAAasB,aAAaC,QAAyC;CACjE,MAAMC,MAAMD,IAAIE,IAAIC,SAASC,MAAM3C;AACnC,KAAI,OAAOwC,QAAQ,SAAU,QAAO;CACpC,MAAMzB,aAAayB,IAAIxB,MAAM;AAC7B,QAAOD,aAAaA,aAAa;;AAGnC,IAAa6B,eAAeL,QAAyC;CACnE,MAAMM,aAAaN,IAAIE,IAAIC,SAASC,MAAM1C;CAC1C,MAAM6C,kBAAkB,OAAOD,eAAe,WAAWA,WAAW7B,MAAM,GAAG;CAE7E,MAAM+B,SAAST,UAAUC,IAAI;CAC7B,MAAMS,WAAWT,IAAIE,IAAIQ,QAAQ;CACjC,MAAMC,gBAAgBC,MAAMC,QAAQJ,SAAS,GAAGA,SAAS,KAAKA;CAC9D,MAAMK,aAAa,OAAOH,kBAAkB,YAAYA,cAAclC,MAAM,GAAGkC,cAAclC,MAAM,GAAG;AAEtG,KAAI,CAAC+B,UAAUM,WAAY,QAAOA;AAElC,KAAIN,OAAQ,QAAOD,mBAAmB;AAEtC,KAAIA,gBAAiB,QAAOA;AAE5B,QAAOO;;AAGT,IAAaC,oBAAoBjD,SAAyBhB,WAAW,SAAS,CAACkE,OAAOlD,KAAK,CAACmD,OAAO,MAAM;AAEzG,IAAaC,sBAAsBC,UAA0BA,MAAM1C,MAAM,CAAC2C,aAAa;AAEvF,IAAaC,eAAeC,MAAwBC,UAAkBC,aAAwC;CAC5GtB,KAAK,EACHC,SAAS,EACPC,MAAM,EACJ1C,iBAAiB6D,UACnB,EACF,EACD;CACDC;CACD;AAED,IAAaC,mBAAmBC,YAAoC;AAClE,KAAI3D,OAAO4D,SAASD,QAAQ,CAAE,QAAOA;AACrC,KAAIA,mBAAmBE,WAAY,QAAO7D,OAAO8D,KAAKH,QAAQ;AAC9D,QAAO;;AAGT,IAAaI,sBAAsB,OACjCC,eACAC,gBACkB;CAClB,MAAME,SAASC,OAAQJ,eAA0DK,IAAIC,QAAQ,GAAG;AAChG,KAAIH,UAAU9D,oBAAoBkE,IAAIJ,OAAO,CAAE;AAE/C,OAAMD,QAAQM,IAAI,CAChBR,cAAcS,eAAe,EAC7BR,YAAYQ,eAAe,CAC5B,CAAC;AAEF,KAAIN,OAAQ9D,qBAAoBqE,IAAIP,OAAO;;AAG7C,IAAMQ,sBAAsBzC,QAAgC;AAC1D,KAAI,OAAOA,QAAQ,SAAU,QAAO;CACpC,MAAMzB,aAAayB,IAAIxB,MAAM;AAC7B,QAAOD,aAAaA,aAAa;;AAGnC,IAAamE,oBAAoB3C,QAAyC;CACxE,MAAM4C,YAAYF,mBAAmB1C,IAAIE,IAAI2C,IAAI,eAAe,CAAC;AACjE,KAAI,CAACD,UAAW,QAAO;AACvB,QAAO7B,iBAAiBhD,OAAO8D,KAAKe,UAAU,CAAC;;AAGjD,IAAaE,uBAAuB9C,KAAuBuB,aAAiC;CAC1F,MAAMwB,gBAAgBJ,iBAAiB3C,IAAI;CAC3C,MAAMgD,SAASD,gBAAgB,EAAEA,eAAe,GAAGE,KAAAA;AACnD,QAAO7F,wBAAwB;EAAEmE;EAAUpB,SAASH,IAAIE,IAAIC;EAAS6C;EAAQ,CAAC;;AAGhF,IAAaE,+BACX1B,SACA2B,WAC4B9F,qBAAqBmE,SAAS2B,QAAQ,kBAAkB"}