@rpcbase/server 0.538.0 → 0.539.0

package/dist/handler--FFBJMl6.js

@@ -0,0 +1,153 @@
+import { models, ZRBRtsChangeOp } from "@rpcbase/db";
+import { buildAbilityFromSession } from "@rpcbase/db/acl";
+import { o as object, a as array, s as string, n as number, _ as _enum, b as boolean } from "./schemas-Cjdjgehl.js";
+const Route = "/api/rb/rts/changes";
+const requestSchema = object({
+  sinceSeq: number().int().min(0).default(0),
+  limit: number().int().min(1).max(5e3).default(2e3),
+  modelNames: array(string().min(1)).optional()
+});
+object({
+  ok: boolean(),
+  needsFullResync: boolean().optional(),
+  earliestSeq: number().int().min(0).optional(),
+  latestSeq: number().int().min(0),
+  changes: array(object({
+    seq: number().int().min(1),
+    modelName: string().min(1),
+    op: _enum(["delete", "reset_model"]),
+    docId: string().optional()
+  }))
+});
+const getTenantId = (ctx) => {
+  const raw = ctx.req.query?.["rb-tenant-id"];
+  const queryTenantId = Array.isArray(raw) ? raw[0] : raw;
+  if (typeof queryTenantId === "string" && queryTenantId.trim()) return queryTenantId.trim();
+  const sessionTenantId = ctx.req.session?.user?.currentTenantId;
+  if (typeof sessionTenantId === "string" && sessionTenantId.trim()) return sessionTenantId.trim();
+  return null;
+};
+const ensureAuthorized = (ctx, tenantId) => {
+  const userId = ctx.req.session?.user?.id;
+  if (!userId) return null;
+  const signedInTenants = ctx.req.session?.user?.signedInTenants;
+  const currentTenantId = ctx.req.session?.user?.currentTenantId;
+  const hasTenantAccessFromList = Array.isArray(signedInTenants) && signedInTenants.includes(tenantId);
+  const normalizedCurrentTenantId = typeof currentTenantId === "string" ? currentTenantId.trim() : "";
+  const hasTenantAccessFromCurrent = Boolean(normalizedCurrentTenantId) && normalizedCurrentTenantId === tenantId;
+  if (!hasTenantAccessFromList && !hasTenantAccessFromCurrent) return null;
+  return userId;
+};
+const getModelCtx = (_ctx, tenantId) => ({
+  req: {
+    session: {
+      user: {
+        currentTenantId: tenantId
+      }
+    }
+  }
+});
+const isRtsChangeRecord = (value) => {
+  if (!value || typeof value !== "object") return false;
+  const obj = value;
+  const isOp = ZRBRtsChangeOp.safeParse(obj.op).success;
+  return typeof obj.seq === "number" && typeof obj.modelName === "string" && isOp;
+};
+const changesHandler = async (payload, ctx) => {
+  const parsed = requestSchema.safeParse(payload ?? {});
+  if (!parsed.success) {
+    ctx.res.status(400);
+    return {
+      ok: false,
+      latestSeq: 0,
+      changes: []
+    };
+  }
+  const tenantId = getTenantId(ctx);
+  if (!tenantId) {
+    ctx.res.status(400);
+    return {
+      ok: false,
+      latestSeq: 0,
+      changes: []
+    };
+  }
+  const userId = ensureAuthorized(ctx, tenantId);
+  if (!userId) {
+    ctx.res.status(401);
+    return {
+      ok: false,
+      latestSeq: 0,
+      changes: []
+    };
+  }
+  const ability = buildAbilityFromSession({
+    tenantId,
+    session: ctx.req.session
+  });
+  const modelCtx = getModelCtx(ctx, tenantId);
+  const [RtsChange, RtsCounter] = await Promise.all([models.get("RBRtsChange", modelCtx), models.get("RBRtsCounter", modelCtx)]);
+  const counter = await RtsCounter.findOne({
+    _id: "rts"
+  }, {
+    seq: 1
+  }).lean();
+  const latestSeq = Number(counter?.seq ?? 0) || 0;
+  const {
+    sinceSeq,
+    limit,
+    modelNames
+  } = parsed.data;
+  const requestedModelNames = Array.isArray(modelNames) && modelNames.length ? modelNames.map((m) => String(m)).filter(Boolean) : null;
+  const allowedModelNames = requestedModelNames ? requestedModelNames.filter((m) => ability.can("read", m)) : Array.from(new Set((await RtsChange.distinct("modelName")).map((m) => String(m)).filter(Boolean).filter((m) => ability.can("read", m))));
+  let earliestSeq;
+  if (allowedModelNames.length) {
+    const earliest = await RtsChange.findOne({
+      modelName: {
+        $in: allowedModelNames
+      }
+    }, {
+      seq: 1
+    }).sort({
+      seq: 1
+    }).lean();
+    earliestSeq = earliest?.seq ? Number(earliest.seq) : void 0;
+  }
+  const needsFullResync = typeof earliestSeq === "number" && sinceSeq < earliestSeq - 1;
+  const selector = {
+    seq: {
+      $gt: sinceSeq
+    },
+    modelName: {
+      $in: allowedModelNames
+    }
+  };
+  const changes = await RtsChange.find(selector, {
+    _id: 0,
+    seq: 1,
+    modelName: 1,
+    op: 1,
+    docId: 1
+  }).sort({
+    seq: 1
+  }).limit(limit).lean();
+  return {
+    ok: true,
+    needsFullResync: needsFullResync || void 0,
+    earliestSeq,
+    latestSeq,
+    changes: Array.isArray(changes) ? changes.filter(isRtsChangeRecord).filter((c) => ability.can("read", c.modelName)).map((c) => ({
+      seq: Number(c.seq),
+      modelName: String(c.modelName),
+      op: c.op,
+      docId: c.docId ? String(c.docId) : void 0
+    })) : []
+  };
+};
+const handler = (api) => {
+  api.post(Route, changesHandler);
+};
+export {
+  handler as default
+};
+//# sourceMappingURL=handler--FFBJMl6.js.map

package/dist/handler--FFBJMl6.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"handler--FFBJMl6.js","sources":["../src/rts/api/changes/index.ts","../src/rts/api/changes/handler.ts"],"sourcesContent":["import { z } from \"zod\"\n\n\nexport const Route = \"/api/rb/rts/changes\"\n\nexport const requestSchema = z.object({\n  sinceSeq: z.number().int().min(0).default(0),\n  limit: z.number().int().min(1).max(5000).default(2000),\n  modelNames: z.array(z.string().min(1)).optional(),\n})\n\nexport type RequestPayload = z.infer<typeof requestSchema>\n\nexport const responseSchema = z.object({\n  ok: z.boolean(),\n  needsFullResync: z.boolean().optional(),\n  earliestSeq: z.number().int().min(0).optional(),\n  latestSeq: z.number().int().min(0),\n  changes: z.array(z.object({\n    seq: z.number().int().min(1),\n    modelName: z.string().min(1),\n    op: z.enum([\"delete\", \"reset_model\"]),\n    docId: z.string().optional(),\n  })),\n})\n\nexport type ResponsePayload = z.infer<typeof responseSchema>\n\n","import { Api, ApiHandler, Ctx } from \"@rpcbase/api\"\nimport { models, ZRBRtsChangeOp, type IRBRtsChange, type IRBRtsCounter, type LoadModelCtx } from \"@rpcbase/db\"\nimport { buildAbilityFromSession, type AclSubjectType } from \"@rpcbase/db/acl\"\nimport type { Model } from \"mongoose\"\n\nimport * as Changes from \"./index\"\n\n\ntype SessionUser = {\n  id?: string\n  currentTenantId?: string\n  signedInTenants?: string[]\n}\n\ntype RtsCounterDoc = IRBRtsCounter\ntype RtsChangeDoc = IRBRtsChange\n\nconst getTenantId = (ctx: Ctx<SessionUser>): string | null => {\n  const raw = ctx.req.query?.[\"rb-tenant-id\"]\n  const queryTenantId = Array.isArray(raw) ? raw[0] : raw\n  if (typeof queryTenantId === \"string\" && queryTenantId.trim()) return queryTenantId.trim()\n\n  const sessionTenantId = ctx.req.session?.user?.currentTenantId\n  if (typeof sessionTenantId === \"string\" && sessionTenantId.trim()) return sessionTenantId.trim()\n\n  return null\n}\n\nconst ensureAuthorized = (ctx: Ctx<SessionUser>, tenantId: string): string | null => {\n  const userId = ctx.req.session?.user?.id\n  if (!userId) return null\n\n  const signedInTenants = ctx.req.session?.user?.signedInTenants\n  const currentTenantId = ctx.req.session?.user?.currentTenantId\n\n  const hasTenantAccessFromList = Array.isArray(signedInTenants) && signedInTenants.includes(tenantId)\n\n  const normalizedCurrentTenantId = typeof currentTenantId === \"string\" ? currentTenantId.trim() : \"\"\n  const hasTenantAccessFromCurrent = Boolean(normalizedCurrentTenantId) && normalizedCurrentTenantId === tenantId\n\n  if (!hasTenantAccessFromList && !hasTenantAccessFromCurrent) return null\n  return userId\n}\n\nconst getModelCtx = (_ctx: Ctx<SessionUser>, tenantId: string): LoadModelCtx => ({\n  req: {\n    session: {\n      user: {\n        currentTenantId: tenantId,\n      },\n    },\n  },\n})\n\nconst isRtsChangeRecord = (value: unknown): value is RtsChangeDoc => {\n  if (!value || typeof value !== \"object\") return false\n  const obj = value as Partial<RtsChangeDoc>\n  const isOp = ZRBRtsChangeOp.safeParse(obj.op).success\n  return typeof obj.seq === \"number\" && typeof obj.modelName === \"string\" && isOp\n}\n\nconst changesHandler: ApiHandler<Changes.RequestPayload, Changes.ResponsePayload, SessionUser> = async(\n  payload,\n  ctx,\n): Promise<Changes.ResponsePayload> => {\n  const parsed = Changes.requestSchema.safeParse(payload ?? {})\n  if (!parsed.success) {\n    ctx.res.status(400)\n    return { ok: false, latestSeq: 0, changes: [] }\n  }\n\n  const tenantId = getTenantId(ctx)\n  if (!tenantId) {\n    ctx.res.status(400)\n    return { ok: false, latestSeq: 0, changes: [] }\n  }\n\n  const userId = ensureAuthorized(ctx, tenantId)\n  if (!userId) {\n    ctx.res.status(401)\n    return { ok: false, latestSeq: 0, changes: [] }\n  }\n\n  const ability = buildAbilityFromSession({ tenantId, session: ctx.req.session })\n\n  const modelCtx = getModelCtx(ctx, tenantId)\n\n  const [RtsChange, RtsCounter] = await Promise.all([\n    models.get(\"RBRtsChange\", modelCtx) as Promise<Model<RtsChangeDoc>>,\n    models.get(\"RBRtsCounter\", modelCtx) as Promise<Model<RtsCounterDoc>>,\n  ])\n\n  const counter = await RtsCounter.findOne({ _id: \"rts\" }, { seq: 1 }).lean()\n  const latestSeq = Number(counter?.seq ?? 0) || 0\n\n  const { sinceSeq, limit, modelNames } = parsed.data\n\n  const requestedModelNames = Array.isArray(modelNames) && modelNames.length\n    ? modelNames.map((m) => String(m)).filter(Boolean)\n    : null\n\n  const allowedModelNames = requestedModelNames\n    ? requestedModelNames.filter((m) => ability.can(\"read\", m as AclSubjectType))\n    : Array.from(\n      new Set(\n        (await RtsChange.distinct(\"modelName\"))\n          .map((m) => String(m))\n          .filter(Boolean)\n          .filter((m) => ability.can(\"read\", m as AclSubjectType)),\n      ),\n    )\n\n  let earliestSeq: number | undefined\n  if (allowedModelNames.length) {\n    const earliest = await RtsChange.findOne({ modelName: { $in: allowedModelNames } }, { seq: 1 }).sort({ seq: 1 }).lean()\n    earliestSeq = earliest?.seq ? Number(earliest.seq) : undefined\n  }\n\n  const needsFullResync = typeof earliestSeq === \"number\" && sinceSeq < earliestSeq - 1\n\n  const selector: Record<string, unknown> = { seq: { $gt: sinceSeq }, modelName: { $in: allowedModelNames } }\n\n  const changes = await RtsChange\n    .find(selector, { _id: 0, seq: 1, modelName: 1, op: 1, docId: 1 })\n    .sort({ seq: 1 })\n    .limit(limit)\n    .lean()\n\n  return {\n    ok: true,\n    needsFullResync: needsFullResync || undefined,\n    earliestSeq,\n    latestSeq,\n    changes: Array.isArray(changes)\n      ? changes\n        .filter(isRtsChangeRecord)\n        .filter((c) => ability.can(\"read\", c.modelName as AclSubjectType))\n        .map((c) => ({\n          seq: Number(c.seq),\n          modelName: String(c.modelName),\n          op: c.op,\n          docId: c.docId ? String(c.docId) : undefined,\n        }))\n      : [],\n  }\n}\n\nexport default (api: Api<SessionUser>) => {\n  api.post(Changes.Route, changesHandler)\n}\n"],"names":["Route","requestSchema","z","sinceSeq","number","int","min","default","limit","max","modelNames","string","optional","ok","boolean","needsFullResync","earliestSeq","latestSeq","changes","seq","modelName","op","docId","getTenantId","ctx","raw","req","query","queryTenantId","Array","isArray","trim","sessionTenantId","session","user","currentTenantId","ensureAuthorized","tenantId","userId","id","signedInTenants","hasTenantAccessFromList","includes","normalizedCurrentTenantId","hasTenantAccessFromCurrent","Boolean","getModelCtx","_ctx","isRtsChangeRecord","value","obj","isOp","ZRBRtsChangeOp","safeParse","success","changesHandler","payload","parsed","Changes","res","status","ability","buildAbilityFromSession","modelCtx","RtsChange","RtsCounter","Promise","all","models","get","counter","findOne","_id","lean","Number","data","requestedModelNames","length","map","m","String","filter","allowedModelNames","can","from","Set","distinct","earliest","$in","sort","undefined","selector","$gt","find","c","api","post"],"mappings":";;;AAGO,MAAMA,QAAQ;AAEd,MAAMC,gBAAgBC,OAAS;AAAA,EACpCC,UAAUD,OAAEE,EAASC,IAAAA,EAAMC,IAAI,CAAC,EAAEC,QAAQ,CAAC;AAAA,EAC3CC,OAAON,OAAEE,EAASC,IAAAA,EAAMC,IAAI,CAAC,EAAEG,IAAI,GAAI,EAAEF,QAAQ,GAAI;AAAA,EACrDG,YAAYR,MAAQA,OAAES,EAASL,IAAI,CAAC,CAAC,EAAEM,SAAAA;AACzC,CAAC;AAI6BV,OAAS;AAAA,EACrCW,IAAIX,QAAEY;AAAAA,EACNC,iBAAiBb,QAAEY,EAAUF,SAAAA;AAAAA,EAC7BI,aAAad,OAAEE,EAASC,MAAMC,IAAI,CAAC,EAAEM,SAAAA;AAAAA,EACrCK,WAAWf,OAAEE,EAASC,IAAAA,EAAMC,IAAI,CAAC;AAAA,EACjCY,SAAShB,MAAQA,OAAS;AAAA,IACxBiB,KAAKjB,OAAEE,EAASC,IAAAA,EAAMC,IAAI,CAAC;AAAA,IAC3Bc,WAAWlB,OAAES,EAASL,IAAI,CAAC;AAAA,IAC3Be,IAAInB,MAAO,CAAC,UAAU,aAAa,CAAC;AAAA,IACpCoB,OAAOpB,OAAES,EAASC,SAAAA;AAAAA,EAAS,CAC5B,CAAC;AACJ,CAAC;ACPD,MAAMW,cAAcA,CAACC,QAAyC;AAC5D,QAAMC,MAAMD,IAAIE,IAAIC,QAAQ,cAAc;AAC1C,QAAMC,gBAAgBC,MAAMC,QAAQL,GAAG,IAAIA,IAAI,CAAC,IAAIA;AACpD,MAAI,OAAOG,kBAAkB,YAAYA,cAAcG,OAAQ,QAAOH,cAAcG,KAAAA;AAEpF,QAAMC,kBAAkBR,IAAIE,IAAIO,SAASC,MAAMC;AAC/C,MAAI,OAAOH,oBAAoB,YAAYA,gBAAgBD,OAAQ,QAAOC,gBAAgBD,KAAAA;AAE1F,SAAO;AACT;AAEA,MAAMK,mBAAmBA,CAACZ,KAAuBa,aAAoC;AACnF,QAAMC,SAASd,IAAIE,IAAIO,SAASC,MAAMK;AACtC,MAAI,CAACD,OAAQ,QAAO;AAEpB,QAAME,kBAAkBhB,IAAIE,IAAIO,SAASC,MAAMM;AAC/C,QAAML,kBAAkBX,IAAIE,IAAIO,SAASC,MAAMC;AAE/C,QAAMM,0BAA0BZ,MAAMC,QAAQU,eAAe,KAAKA,gBAAgBE,SAASL,QAAQ;AAEnG,QAAMM,4BAA4B,OAAOR,oBAAoB,WAAWA,gBAAgBJ,SAAS;AACjG,QAAMa,6BAA6BC,QAAQF,yBAAyB,KAAKA,8BAA8BN;AAEvG,MAAI,CAACI,2BAA2B,CAACG,2BAA4B,QAAO;AACpE,SAAON;AACT;AAEA,MAAMQ,cAAcA,CAACC,MAAwBV,cAAoC;AAAA,EAC/EX,KAAK;AAAA,IACHO,SAAS;AAAA,MACPC,MAAM;AAAA,QACJC,iBAAiBE;AAAAA,MAAAA;AAAAA,IACnB;AAAA,EACF;AAEJ;AAEA,MAAMW,oBAAoBA,CAACC,UAA0C;AACnE,MAAI,CAACA,SAAS,OAAOA,UAAU,SAAU,QAAO;AAChD,QAAMC,MAAMD;AACZ,QAAME,OAAOC,eAAeC,UAAUH,IAAI7B,EAAE,EAAEiC;AAC9C,SAAO,OAAOJ,IAAI/B,QAAQ,YAAY,OAAO+B,IAAI9B,cAAc,YAAY+B;AAC7E;AAEA,MAAMI,iBAA2F,OAC/FC,SACAhC,QACqC;AACrC,QAAMiC,SAASC,cAAsBL,UAAUG,WAAW,CAAA,CAAE;AAC5D,MAAI,CAACC,OAAOH,SAAS;AACnB9B,QAAImC,IAAIC,OAAO,GAAG;AAClB,WAAO;AAAA,MAAE/C,IAAI;AAAA,MAAOI,WAAW;AAAA,MAAGC,SAAS,CAAA;AAAA,IAAA;AAAA,EAC7C;AAEA,QAAMmB,WAAWd,YAAYC,GAAG;AAChC,MAAI,CAACa,UAAU;AACbb,QAAImC,IAAIC,OAAO,GAAG;AAClB,WAAO;AAAA,MAAE/C,IAAI;AAAA,MAAOI,WAAW;AAAA,MAAGC,SAAS,CAAA;AAAA,IAAA;AAAA,EAC7C;AAEA,QAAMoB,SAASF,iBAAiBZ,KAAKa,QAAQ;AAC7C,MAAI,CAACC,QAAQ;AACXd,QAAImC,IAAIC,OAAO,GAAG;AAClB,WAAO;AAAA,MAAE/C,IAAI;AAAA,MAAOI,WAAW;AAAA,MAAGC,SAAS,CAAA;AAAA,IAAA;AAAA,EAC7C;AAEA,QAAM2C,UAAUC,wBAAwB;AAAA,IAAEzB;AAAAA,IAAUJ,SAAST,IAAIE,IAAIO;AAAAA,EAAAA,CAAS;AAE9E,QAAM8B,WAAWjB,YAAYtB,KAAKa,QAAQ;AAE1C,QAAM,CAAC2B,WAAWC,UAAU,IAAI,MAAMC,QAAQC,IAAI,CAChDC,OAAOC,IAAI,eAAeN,QAAQ,GAClCK,OAAOC,IAAI,gBAAgBN,QAAQ,CAAkC,CACtE;AAED,QAAMO,UAAU,MAAML,WAAWM,QAAQ;AAAA,IAAEC,KAAK;AAAA,EAAA,GAAS;AAAA,IAAErD,KAAK;AAAA,EAAA,CAAG,EAAEsD,KAAAA;AACrE,QAAMxD,YAAYyD,OAAOJ,SAASnD,OAAO,CAAC,KAAK;AAE/C,QAAM;AAAA,IAAEhB;AAAAA,IAAUK;AAAAA,IAAOE;AAAAA,EAAAA,IAAe+C,OAAOkB;AAE/C,QAAMC,sBAAsB/C,MAAMC,QAAQpB,UAAU,KAAKA,WAAWmE,SAChEnE,WAAWoE,IAAKC,CAAAA,MAAMC,OAAOD,CAAC,CAAC,EAAEE,OAAOpC,OAAO,IAC/C;AAEJ,QAAMqC,oBAAoBN,sBACtBA,oBAAoBK,OAAQF,CAAAA,MAAMlB,QAAQsB,IAAI,QAAQJ,CAAmB,CAAC,IAC1ElD,MAAMuD,KACN,IAAIC,KACD,MAAMrB,UAAUsB,SAAS,WAAW,GAClCR,IAAKC,CAAAA,MAAMC,OAAOD,CAAC,CAAC,EACpBE,OAAOpC,OAAO,EACdoC,OAAQF,OAAMlB,QAAQsB,IAAI,QAAQJ,CAAmB,CAAC,CAC3D,CACF;AAEF,MAAI/D;AACJ,MAAIkE,kBAAkBL,QAAQ;AAC5B,UAAMU,WAAW,MAAMvB,UAAUO,QAAQ;AAAA,MAAEnD,WAAW;AAAA,QAAEoE,KAAKN;AAAAA,MAAAA;AAAAA,IAAkB,GAAK;AAAA,MAAE/D,KAAK;AAAA,IAAA,CAAG,EAAEsE,KAAK;AAAA,MAAEtE,KAAK;AAAA,IAAA,CAAG,EAAEsD,KAAAA;AACjHzD,kBAAcuE,UAAUpE,MAAMuD,OAAOa,SAASpE,GAAG,IAAIuE;AAAAA,EACvD;AAEA,QAAM3E,kBAAkB,OAAOC,gBAAgB,YAAYb,WAAWa,cAAc;AAEpF,QAAM2E,WAAoC;AAAA,IAAExE,KAAK;AAAA,MAAEyE,KAAKzF;AAAAA,IAAAA;AAAAA,IAAYiB,WAAW;AAAA,MAAEoE,KAAKN;AAAAA,IAAAA;AAAAA,EAAkB;AAExG,QAAMhE,UAAU,MAAM8C,UACnB6B,KAAKF,UAAU;AAAA,IAAEnB,KAAK;AAAA,IAAGrD,KAAK;AAAA,IAAGC,WAAW;AAAA,IAAGC,IAAI;AAAA,IAAGC,OAAO;AAAA,EAAA,CAAG,EAChEmE,KAAK;AAAA,IAAEtE,KAAK;AAAA,EAAA,CAAG,EACfX,MAAMA,KAAK,EACXiE,KAAAA;AAEH,SAAO;AAAA,IACL5D,IAAI;AAAA,IACJE,iBAAiBA,mBAAmB2E;AAAAA,IACpC1E;AAAAA,IACAC;AAAAA,IACAC,SAASW,MAAMC,QAAQZ,OAAO,IAC1BA,QACC+D,OAAOjC,iBAAiB,EACxBiC,OAAQa,CAAAA,MAAMjC,QAAQsB,IAAI,QAAQW,EAAE1E,SAA2B,CAAC,EAChE0D,IAAKgB,CAAAA,OAAO;AAAA,MACX3E,KAAKuD,OAAOoB,EAAE3E,GAAG;AAAA,MACjBC,WAAW4D,OAAOc,EAAE1E,SAAS;AAAA,MAC7BC,IAAIyE,EAAEzE;AAAAA,MACNC,OAAOwE,EAAExE,QAAQ0D,OAAOc,EAAExE,KAAK,IAAIoE;AAAAA,IAAAA,EACnC,IACF,CAAA;AAAA,EAAA;AAER;AAEA,MAAA,UAAe,CAACK,QAA0B;AACxCA,MAAIC,KAAKtC,OAAeH,cAAc;AACxC;"}