@rpcbase/server 0.538.0 → 0.540.0

package/dist/handler-Cq6MsoD4.js

@@ -1,124 +0,0 @@
-import { a as object, i as number, n as array, r as boolean, s as string, t as _enum } from "./schemas-BR3K5Luo.js";
-import { ZRBRtsChangeOp, models } from "@rpcbase/db";
-import { buildAbilityFromSession } from "@rpcbase/db/acl";
-//#region src/rts/api/changes/index.ts
-var Route = "/api/rb/rts/changes";
-var requestSchema = object({
-	sinceSeq: number().int().min(0).default(0),
-	limit: number().int().min(1).max(5e3).default(2e3),
-	modelNames: array(string().min(1)).optional()
-});
-object({
-	ok: boolean(),
-	needsFullResync: boolean().optional(),
-	earliestSeq: number().int().min(0).optional(),
-	latestSeq: number().int().min(0),
-	changes: array(object({
-		seq: number().int().min(1),
-		modelName: string().min(1),
-		op: _enum(["delete", "reset_model"]),
-		docId: string().optional()
-	}))
-});
-//#endregion
-//#region src/rts/api/changes/handler.ts
-var getTenantId = (ctx) => {
-	const raw = ctx.req.query?.["rb-tenant-id"];
-	const queryTenantId = Array.isArray(raw) ? raw[0] : raw;
-	if (typeof queryTenantId === "string" && queryTenantId.trim()) return queryTenantId.trim();
-	const sessionTenantId = ctx.req.session?.user?.currentTenantId;
-	if (typeof sessionTenantId === "string" && sessionTenantId.trim()) return sessionTenantId.trim();
-	return null;
-};
-var ensureAuthorized = (ctx, tenantId) => {
-	const userId = ctx.req.session?.user?.id;
-	if (!userId) return null;
-	const signedInTenants = ctx.req.session?.user?.signedInTenants;
-	const currentTenantId = ctx.req.session?.user?.currentTenantId;
-	const hasTenantAccessFromList = Array.isArray(signedInTenants) && signedInTenants.includes(tenantId);
-	const normalizedCurrentTenantId = typeof currentTenantId === "string" ? currentTenantId.trim() : "";
-	if (!hasTenantAccessFromList && !(Boolean(normalizedCurrentTenantId) && normalizedCurrentTenantId === tenantId)) return null;
-	return userId;
-};
-var getModelCtx = (_ctx, tenantId) => ({ req: { session: { user: { currentTenantId: tenantId } } } });
-var isRtsChangeRecord = (value) => {
-	if (!value || typeof value !== "object") return false;
-	const obj = value;
-	const isOp = ZRBRtsChangeOp.safeParse(obj.op).success;
-	return typeof obj.seq === "number" && typeof obj.modelName === "string" && isOp;
-};
-var changesHandler = async (payload, ctx) => {
-	const parsed = requestSchema.safeParse(payload ?? {});
-	if (!parsed.success) {
-		ctx.res.status(400);
-		return {
-			ok: false,
-			latestSeq: 0,
-			changes: []
-		};
-	}
-	const tenantId = getTenantId(ctx);
-	if (!tenantId) {
-		ctx.res.status(400);
-		return {
-			ok: false,
-			latestSeq: 0,
-			changes: []
-		};
-	}
-	if (!ensureAuthorized(ctx, tenantId)) {
-		ctx.res.status(401);
-		return {
-			ok: false,
-			latestSeq: 0,
-			changes: []
-		};
-	}
-	const ability = buildAbilityFromSession({
-		tenantId,
-		session: ctx.req.session
-	});
-	const modelCtx = getModelCtx(ctx, tenantId);
-	const [RtsChange, RtsCounter] = await Promise.all([models.get("RBRtsChange", modelCtx), models.get("RBRtsCounter", modelCtx)]);
-	const counter = await RtsCounter.findOne({ _id: "rts" }, { seq: 1 }).lean();
-	const latestSeq = Number(counter?.seq ?? 0) || 0;
-	const { sinceSeq, limit, modelNames } = parsed.data;
-	const requestedModelNames = Array.isArray(modelNames) && modelNames.length ? modelNames.map((m) => String(m)).filter(Boolean) : null;
-	const allowedModelNames = requestedModelNames ? requestedModelNames.filter((m) => ability.can("read", m)) : Array.from(new Set((await RtsChange.distinct("modelName")).map((m) => String(m)).filter(Boolean).filter((m) => ability.can("read", m))));
-	let earliestSeq;
-	if (allowedModelNames.length) {
-		const earliest = await RtsChange.findOne({ modelName: { $in: allowedModelNames } }, { seq: 1 }).sort({ seq: 1 }).lean();
-		earliestSeq = earliest?.seq ? Number(earliest.seq) : void 0;
-	}
-	const needsFullResync = typeof earliestSeq === "number" && sinceSeq < earliestSeq - 1;
-	const selector = {
-		seq: { $gt: sinceSeq },
-		modelName: { $in: allowedModelNames }
-	};
-	const changes = await RtsChange.find(selector, {
-		_id: 0,
-		seq: 1,
-		modelName: 1,
-		op: 1,
-		docId: 1
-	}).sort({ seq: 1 }).limit(limit).lean();
-	return {
-		ok: true,
-		needsFullResync: needsFullResync || void 0,
-		earliestSeq,
-		latestSeq,
-		changes: Array.isArray(changes) ? changes.filter(isRtsChangeRecord).filter((c) => ability.can("read", c.modelName)).map((c) => ({
-			seq: Number(c.seq),
-			modelName: String(c.modelName),
-			op: c.op,
-			docId: c.docId ? String(c.docId) : void 0
-		})) : []
-	};
-};
-var handler_default = (api) => {
-	api.post(Route, changesHandler);
-};
-//#endregion
-export { handler_default as default };
-
-//# sourceMappingURL=handler-Cq6MsoD4.js.map

package/dist/handler-Cq6MsoD4.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"handler-Cq6MsoD4.js","names":["z","Route","requestSchema","object","sinceSeq","number","int","min","default","limit","max","modelNames","array","string","optional","RequestPayload","infer","responseSchema","ok","boolean","needsFullResync","earliestSeq","latestSeq","changes","seq","modelName","op","enum","docId","ResponsePayload","Api","ApiHandler","Ctx","models","ZRBRtsChangeOp","IRBRtsChange","IRBRtsCounter","LoadModelCtx","buildAbilityFromSession","AclSubjectType","Model","Changes","SessionUser","id","currentTenantId","signedInTenants","RtsCounterDoc","RtsChangeDoc","getTenantId","ctx","raw","req","query","queryTenantId","Array","isArray","trim","sessionTenantId","session","user","ensureAuthorized","tenantId","userId","hasTenantAccessFromList","includes","normalizedCurrentTenantId","hasTenantAccessFromCurrent","Boolean","getModelCtx","_ctx","isRtsChangeRecord","value","obj","Partial","isOp","safeParse","op","success","seq","modelName","changesHandler","RequestPayload","ResponsePayload","payload","Promise","parsed","requestSchema","res","status","ok","latestSeq","changes","ability","modelCtx","RtsChange","RtsCounter","all","get","counter","findOne","_id","lean","Number","sinceSeq","limit","modelNames","data","requestedModelNames","length","map","m","String","filter","allowedModelNames","can","from","Set","distinct","earliestSeq","earliest","$in","sort","undefined","needsFullResync","selector","Record","$gt","find","docId","c","api","post","Route"],"sources":["../src/rts/api/changes/index.ts","../src/rts/api/changes/handler.ts"],"sourcesContent":["import { z } from \"zod\"\n\n\nexport const Route = \"/api/rb/rts/changes\"\n\nexport const requestSchema = z.object({\n  sinceSeq: z.number().int().min(0).default(0),\n  limit: z.number().int().min(1).max(5000).default(2000),\n  modelNames: z.array(z.string().min(1)).optional(),\n})\n\nexport type RequestPayload = z.infer<typeof requestSchema>\n\nexport const responseSchema = z.object({\n  ok: z.boolean(),\n  needsFullResync: z.boolean().optional(),\n  earliestSeq: z.number().int().min(0).optional(),\n  latestSeq: z.number().int().min(0),\n  changes: z.array(z.object({\n    seq: z.number().int().min(1),\n    modelName: z.string().min(1),\n    op: z.enum([\"delete\", \"reset_model\"]),\n    docId: z.string().optional(),\n  })),\n})\n\nexport type ResponsePayload = z.infer<typeof responseSchema>\n\n","import { Api, ApiHandler, Ctx } from \"@rpcbase/api\"\nimport { models, ZRBRtsChangeOp, type IRBRtsChange, type IRBRtsCounter, type LoadModelCtx } from \"@rpcbase/db\"\nimport { buildAbilityFromSession, type AclSubjectType } from \"@rpcbase/db/acl\"\nimport type { Model } from \"mongoose\"\n\nimport * as Changes from \"./index\"\n\n\ntype SessionUser = {\n  id?: string\n  currentTenantId?: string\n  signedInTenants?: string[]\n}\n\ntype RtsCounterDoc = IRBRtsCounter\ntype RtsChangeDoc = IRBRtsChange\n\nconst getTenantId = (ctx: Ctx<SessionUser>): string | null => {\n  const raw = ctx.req.query?.[\"rb-tenant-id\"]\n  const queryTenantId = Array.isArray(raw) ? raw[0] : raw\n  if (typeof queryTenantId === \"string\" && queryTenantId.trim()) return queryTenantId.trim()\n\n  const sessionTenantId = ctx.req.session?.user?.currentTenantId\n  if (typeof sessionTenantId === \"string\" && sessionTenantId.trim()) return sessionTenantId.trim()\n\n  return null\n}\n\nconst ensureAuthorized = (ctx: Ctx<SessionUser>, tenantId: string): string | null => {\n  const userId = ctx.req.session?.user?.id\n  if (!userId) return null\n\n  const signedInTenants = ctx.req.session?.user?.signedInTenants\n  const currentTenantId = ctx.req.session?.user?.currentTenantId\n\n  const hasTenantAccessFromList = Array.isArray(signedInTenants) && signedInTenants.includes(tenantId)\n\n  const normalizedCurrentTenantId = typeof currentTenantId === \"string\" ? currentTenantId.trim() : \"\"\n  const hasTenantAccessFromCurrent = Boolean(normalizedCurrentTenantId) && normalizedCurrentTenantId === tenantId\n\n  if (!hasTenantAccessFromList && !hasTenantAccessFromCurrent) return null\n  return userId\n}\n\nconst getModelCtx = (_ctx: Ctx<SessionUser>, tenantId: string): LoadModelCtx => ({\n  req: {\n    session: {\n      user: {\n        currentTenantId: tenantId,\n      },\n    },\n  },\n})\n\nconst isRtsChangeRecord = (value: unknown): value is RtsChangeDoc => {\n  if (!value || typeof value !== \"object\") return false\n  const obj = value as Partial<RtsChangeDoc>\n  const isOp = ZRBRtsChangeOp.safeParse(obj.op).success\n  return typeof obj.seq === \"number\" && typeof obj.modelName === \"string\" && isOp\n}\n\nconst changesHandler: ApiHandler<Changes.RequestPayload, Changes.ResponsePayload, SessionUser> = async(\n  payload,\n  ctx,\n): Promise<Changes.ResponsePayload> => {\n  const parsed = Changes.requestSchema.safeParse(payload ?? {})\n  if (!parsed.success) {\n    ctx.res.status(400)\n    return { ok: false, latestSeq: 0, changes: [] }\n  }\n\n  const tenantId = getTenantId(ctx)\n  if (!tenantId) {\n    ctx.res.status(400)\n    return { ok: false, latestSeq: 0, changes: [] }\n  }\n\n  const userId = ensureAuthorized(ctx, tenantId)\n  if (!userId) {\n    ctx.res.status(401)\n    return { ok: false, latestSeq: 0, changes: [] }\n  }\n\n  const ability = buildAbilityFromSession({ tenantId, session: ctx.req.session })\n\n  const modelCtx = getModelCtx(ctx, tenantId)\n\n  const [RtsChange, RtsCounter] = await Promise.all([\n    models.get(\"RBRtsChange\", modelCtx) as Promise<Model<RtsChangeDoc>>,\n    models.get(\"RBRtsCounter\", modelCtx) as Promise<Model<RtsCounterDoc>>,\n  ])\n\n  const counter = await RtsCounter.findOne({ _id: \"rts\" }, { seq: 1 }).lean()\n  const latestSeq = Number(counter?.seq ?? 0) || 0\n\n  const { sinceSeq, limit, modelNames } = parsed.data\n\n  const requestedModelNames = Array.isArray(modelNames) && modelNames.length\n    ? modelNames.map((m) => String(m)).filter(Boolean)\n    : null\n\n  const allowedModelNames = requestedModelNames\n    ? requestedModelNames.filter((m) => ability.can(\"read\", m as AclSubjectType))\n    : Array.from(\n      new Set(\n        (await RtsChange.distinct(\"modelName\"))\n          .map((m) => String(m))\n          .filter(Boolean)\n          .filter((m) => ability.can(\"read\", m as AclSubjectType)),\n      ),\n    )\n\n  let earliestSeq: number | undefined\n  if (allowedModelNames.length) {\n    const earliest = await RtsChange.findOne({ modelName: { $in: allowedModelNames } }, { seq: 1 }).sort({ seq: 1 }).lean()\n    earliestSeq = earliest?.seq ? Number(earliest.seq) : undefined\n  }\n\n  const needsFullResync = typeof earliestSeq === \"number\" && sinceSeq < earliestSeq - 1\n\n  const selector: Record<string, unknown> = { seq: { $gt: sinceSeq }, modelName: { $in: allowedModelNames } }\n\n  const changes = await RtsChange\n    .find(selector, { _id: 0, seq: 1, modelName: 1, op: 1, docId: 1 })\n    .sort({ seq: 1 })\n    .limit(limit)\n    .lean()\n\n  return {\n    ok: true,\n    needsFullResync: needsFullResync || undefined,\n    earliestSeq,\n    latestSeq,\n    changes: Array.isArray(changes)\n      ? changes\n        .filter(isRtsChangeRecord)\n        .filter((c) => ability.can(\"read\", c.modelName as AclSubjectType))\n        .map((c) => ({\n          seq: Number(c.seq),\n          modelName: String(c.modelName),\n          op: c.op,\n          docId: c.docId ? String(c.docId) : undefined,\n        }))\n      : [],\n  }\n}\n\nexport default (api: Api<SessionUser>) => {\n  api.post(Changes.Route, changesHandler)\n}\n"],"mappings":";;;;AAGA,IAAaC,QAAQ;AAErB,IAAaC,gBAAgBF,OAAS;CACpCI,UAAUJ,QAAU,CAACM,KAAK,CAACC,IAAI,EAAE,CAACC,QAAQ,EAAE;CAC5CC,OAAOT,QAAU,CAACM,KAAK,CAACC,IAAI,EAAE,CAACG,IAAI,IAAK,CAACF,QAAQ,IAAK;CACtDG,YAAYX,MAAQA,QAAU,CAACO,IAAI,EAAE,CAAC,CAACO,UAAS;CACjD,CAAC;AAI4Bd,OAAS;CACrCkB,IAAIlB,SAAW;CACfoB,iBAAiBpB,SAAW,CAACc,UAAU;CACvCO,aAAarB,QAAU,CAACM,KAAK,CAACC,IAAI,EAAE,CAACO,UAAU;CAC/CQ,WAAWtB,QAAU,CAACM,KAAK,CAACC,IAAI,EAAE;CAClCgB,SAASvB,MAAQA,OAAS;EACxBwB,KAAKxB,QAAU,CAACM,KAAK,CAACC,IAAI,EAAE;EAC5BkB,WAAWzB,QAAU,CAACO,IAAI,EAAE;EAC5BmB,IAAI1B,MAAO,CAAC,UAAU,cAAc,CAAC;EACrC4B,OAAO5B,QAAU,CAACc,UAAS;EAC5B,CAAC,CAAA;CACH,CAAC;;;ACPF,IAAMkC,eAAeC,QAAyC;CAC5D,MAAMC,MAAMD,IAAIE,IAAIC,QAAQ;CAC5B,MAAMC,gBAAgBC,MAAMC,QAAQL,IAAI,GAAGA,IAAI,KAAKA;AACpD,KAAI,OAAOG,kBAAkB,YAAYA,cAAcG,MAAM,CAAE,QAAOH,cAAcG,MAAM;CAE1F,MAAMC,kBAAkBR,IAAIE,IAAIO,SAASC,MAAMf;AAC/C,KAAI,OAAOa,oBAAoB,YAAYA,gBAAgBD,MAAM,CAAE,QAAOC,gBAAgBD,MAAM;AAEhG,QAAO;;AAGT,IAAMI,oBAAoBX,KAAuBY,aAAoC;CACnF,MAAMC,SAASb,IAAIE,IAAIO,SAASC,MAAMhB;AACtC,KAAI,CAACmB,OAAQ,QAAO;CAEpB,MAAMjB,kBAAkBI,IAAIE,IAAIO,SAASC,MAAMd;CAC/C,MAAMD,kBAAkBK,IAAIE,IAAIO,SAASC,MAAMf;CAE/C,MAAMmB,0BAA0BT,MAAMC,QAAQV,gBAAgB,IAAIA,gBAAgBmB,SAASH,SAAS;CAEpG,MAAMI,4BAA4B,OAAOrB,oBAAoB,WAAWA,gBAAgBY,MAAM,GAAG;AAGjG,KAAI,CAACO,2BAA2B,EAFGI,QAAQF,0BAA0B,IAAIA,8BAA8BJ,UAE1C,QAAO;AACpE,QAAOC;;AAGT,IAAMM,eAAeC,MAAwBR,cAAoC,EAC/EV,KAAK,EACHO,SAAS,EACPC,MAAM,EACJf,iBAAiBiB,UACnB,EACF,EACF,EACD;AAED,IAAMS,qBAAqBC,UAA0C;AACnE,KAAI,CAACA,SAAS,OAAOA,UAAU,SAAU,QAAO;CAChD,MAAMC,MAAMD;CACZ,MAAMG,OAAOxC,eAAeyC,UAAUH,IAAII,GAAG,CAACC;AAC9C,QAAO,OAAOL,IAAIM,QAAQ,YAAY,OAAON,IAAIO,cAAc,YAAYL;;AAG7E,IAAMM,iBAA2F,OAC/FG,SACAlC,QACqC;CACrC,MAAMoC,SAAAA,cAA+BV,UAAUQ,WAAW,EAAE,CAAC;AAC7D,KAAI,CAACE,OAAOR,SAAS;AACnB5B,MAAIsC,IAAIC,OAAO,IAAI;AACnB,SAAO;GAAEC,IAAI;GAAOC,WAAW;GAAGC,SAAS,EAAA;GAAI;;CAGjD,MAAM9B,WAAWb,YAAYC,IAAI;AACjC,KAAI,CAACY,UAAU;AACbZ,MAAIsC,IAAIC,OAAO,IAAI;AACnB,SAAO;GAAEC,IAAI;GAAOC,WAAW;GAAGC,SAAS,EAAA;GAAI;;AAIjD,KAAI,CADW/B,iBAAiBX,KAAKY,SAAS,EACjC;AACXZ,MAAIsC,IAAIC,OAAO,IAAI;AACnB,SAAO;GAAEC,IAAI;GAAOC,WAAW;GAAGC,SAAS,EAAA;GAAI;;CAGjD,MAAMC,UAAUtD,wBAAwB;EAAEuB;EAAUH,SAAST,IAAIE,IAAIO;EAAS,CAAC;CAE/E,MAAMmC,WAAWzB,YAAYnB,KAAKY,SAAS;CAE3C,MAAM,CAACiC,WAAWC,cAAc,MAAMX,QAAQY,IAAI,CAChD/D,OAAOgE,IAAI,eAAeJ,SAAS,EACnC5D,OAAOgE,IAAI,gBAAgBJ,SAAS,CACrC,CAAC;CAEF,MAAMK,UAAU,MAAMH,WAAWI,QAAQ,EAAEC,KAAK,OAAO,EAAE,EAAEtB,KAAK,GAAG,CAAC,CAACuB,MAAM;CAC3E,MAAMX,YAAYY,OAAOJ,SAASpB,OAAO,EAAE,IAAI;CAE/C,MAAM,EAAEyB,UAAUC,OAAOC,eAAepB,OAAOqB;CAE/C,MAAMC,sBAAsBrD,MAAMC,QAAQkD,WAAW,IAAIA,WAAWG,SAChEH,WAAWI,KAAKC,MAAMC,OAAOD,EAAE,CAAC,CAACE,OAAO7C,QAAQ,GAChD;CAEJ,MAAM8C,oBAAoBN,sBACtBA,oBAAoBK,QAAQF,MAAMlB,QAAQsB,IAAI,QAAQJ,EAAoB,CAAC,GAC3ExD,MAAM6D,KACN,IAAIC,KACD,MAAMtB,UAAUuB,SAAS,YAAY,EACnCR,KAAKC,MAAMC,OAAOD,EAAE,CAAC,CACrBE,OAAO7C,QAAQ,CACf6C,QAAQF,MAAMlB,QAAQsB,IAAI,QAAQJ,EAAoB,CAC3D,CACF,CAAC;CAEH,IAAIQ;AACJ,KAAIL,kBAAkBL,QAAQ;EAC5B,MAAMW,WAAW,MAAMzB,UAAUK,QAAQ,EAAEpB,WAAW,EAAEyC,KAAKP,mBAAkB,EAAG,EAAE,EAAEnC,KAAK,GAAG,CAAC,CAAC2C,KAAK,EAAE3C,KAAK,GAAG,CAAC,CAACuB,MAAM;AACvHiB,gBAAcC,UAAUzC,MAAMwB,OAAOiB,SAASzC,IAAI,GAAG4C,KAAAA;;CAGvD,MAAMC,kBAAkB,OAAOL,gBAAgB,YAAYf,WAAWe,cAAc;CAEpF,MAAMM,WAAoC;EAAE9C,KAAK,EAAEgD,KAAKvB,UAAU;EAAExB,WAAW,EAAEyC,KAAKP,mBAAkB;EAAG;CAE3G,MAAMtB,UAAU,MAAMG,UACnBiC,KAAKH,UAAU;EAAExB,KAAK;EAAGtB,KAAK;EAAGC,WAAW;EAAGH,IAAI;EAAGoD,OAAO;EAAG,CAAC,CACjEP,KAAK,EAAE3C,KAAK,GAAG,CAAC,CAChB0B,MAAMA,MAAM,CACZH,MAAM;AAET,QAAO;EACLZ,IAAI;EACJkC,iBAAiBA,mBAAmBD,KAAAA;EACpCJ;EACA5B;EACAC,SAASrC,MAAMC,QAAQoC,QAAQ,GAC3BA,QACCqB,OAAO1C,kBAAkB,CACzB0C,QAAQiB,MAAMrC,QAAQsB,IAAI,QAAQe,EAAElD,UAA4B,CAAC,CACjE8B,KAAKoB,OAAO;GACXnD,KAAKwB,OAAO2B,EAAEnD,IAAI;GAClBC,WAAWgC,OAAOkB,EAAElD,UAAU;GAC9BH,IAAIqD,EAAErD;GACNoD,OAAOC,EAAED,QAAQjB,OAAOkB,EAAED,MAAM,GAAGN,KAAAA;GACpC,EAAE,GACH,EAAA;EACL;;AAGH,IAAA,mBAAgBQ,QAA0B;AACxCA,KAAIC,KAAK1F,OAAeuC,eAAe"}