@things-factory/shell 10.1.146 → 10.1.149

package/dist-server/typeorm/money-column.d.ts

@@ -32,3 +32,15 @@ export declare const decimalTransformer: ValueTransformer;
  * `nullable`·`default` 같은 나머지 옵션은 호출하는 쪽이 정한다. GraphQL 필드는 `Float` 로 둔다.
  */
 export declare function moneyColumn(options?: ColumnOptions): ColumnOptions;
+/**
+ * A quantity — `decimal(18, 6)`: a count, a weight, a length, a dose.
+ *
+ * `float` and `double precision` do not hold 0.1 exactly, and `'double precision'` is a Postgres name that the other
+ * drivers do not take. Six places carry grams in kilograms and millilitres in litres; twelve before the point carry
+ * any stock a site keeps. Read back as a number, as `moneyColumn` is. The GraphQL field stays `Float`.
+ */
+export declare function quantityColumn(options?: ColumnOptions): ColumnOptions;
+/** A rate — `decimal(18, 6)`: won per unit of a currency, a unit price per unit of measure. */
+export declare function rateColumn(options?: ColumnOptions): ColumnOptions;
+/** A percentage such as an interest rate — `decimal(9, 4)`. */
+export declare function percentColumn(options?: ColumnOptions): ColumnOptions;

package/dist-server/typeorm/money-column.js

@@ -2,6 +2,9 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.decimalTransformer = void 0;
 exports.moneyColumn = moneyColumn;
+exports.quantityColumn = quantityColumn;
+exports.rateColumn = rateColumn;
+exports.percentColumn = percentColumn;
 /**
  * `decimal` 컬럼을 숫자로 읽고 쓰는 변환기.
  *
@@ -40,4 +43,22 @@ exports.decimalTransformer = {
 function moneyColumn(options = {}) {
     return { type: 'decimal', precision: 18, scale: 2, transformer: exports.decimalTransformer, ...options };
 }
+/**
+ * A quantity — `decimal(18, 6)`: a count, a weight, a length, a dose.
+ *
+ * `float` and `double precision` do not hold 0.1 exactly, and `'double precision'` is a Postgres name that the other
+ * drivers do not take. Six places carry grams in kilograms and millilitres in litres; twelve before the point carry
+ * any stock a site keeps. Read back as a number, as `moneyColumn` is. The GraphQL field stays `Float`.
+ */
+function quantityColumn(options = {}) {
+    return { type: 'decimal', precision: 18, scale: 6, transformer: exports.decimalTransformer, ...options };
+}
+/** A rate — `decimal(18, 6)`: won per unit of a currency, a unit price per unit of measure. */
+function rateColumn(options = {}) {
+    return { type: 'decimal', precision: 18, scale: 6, transformer: exports.decimalTransformer, ...options };
+}
+/** A percentage such as an interest rate — `decimal(9, 4)`. */
+function percentColumn(options = {}) {
+    return { type: 'decimal', precision: 9, scale: 4, transformer: exports.decimalTransformer, ...options };
+}
 //# sourceMappingURL=money-column.js.map

package/dist-server/typeorm/money-column.js.map

@@ -1 +1 @@
-{"version":3,"file":"money-column.js","sourceRoot":"","sources":["../../server/typeorm/money-column.ts"],"names":[],"mappings":";;;AAsCA,kCAEC;AAtCD;;;;;;GAMG;AACU,QAAA,kBAAkB,GAAqB;IAClD,EAAE,EAAE,CAAC,KAAc,EAAE,EAAE,CAAC,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACjH,IAAI,EAAE,CAAC,KAAc,EAAE,EAAE,CAAC,CAAC,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;CAC1F,CAAA;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,SAAgB,WAAW,CAAC,UAAyB,EAAE;IACrD,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,WAAW,EAAE,0BAAkB,EAAE,GAAG,OAAO,EAAE,CAAA;AAClG,CAAC","sourcesContent":["import { ColumnOptions, ValueTransformer } from 'typeorm'\n\n/**\n * `decimal` 컬럼을 숫자로 읽고 쓰는 변환기.\n *\n * Postgres·MySQL 은 `decimal` 을 **문자열**로 돌려준다(정밀도를 지키려고). 그대로 두면\n * GraphQL `Float` 필드와 합산 코드가 `'1200.00' + 300` 같은 글자 이어붙이기를 한다.\n * 그래서 읽을 때 숫자로 바꾼다. 비어 있음(`null`·`undefined`)은 그대로 둔다 — 0 으로 만들지 않는다.\n */\nexport const decimalTransformer: ValueTransformer = {\n  to: (value: unknown) => (value === undefined ? undefined : value === null || value === '' ? null : Number(value)),\n  from: (value: unknown) => (value === null || value === undefined ? value : Number(value))\n}\n\n/**\n * 금액 컬럼 — `decimal(18, 2)`.\n *\n * ## 왜 `decimal` 인가\n *\n * - 형식을 적지 않은 `number` 컬럼은 32비트 정수가 된다. 원 단위로는 정확하지만 한 칸에\n *   약 21억까지이고 소수(센트)를 못 담는다.\n * - `float` 은 0.1 을 정확히 담지 못한다. 수천 줄을 더하면 은행 잔액과 어긋난다.\n * - `decimal` 은 SQL 표준이라 다섯 드라이버(postgres·mysql/mariadb·sqlite·mssql·oracle)가 모두 받는다.\n *   18자리 중 소수 2자리 — 원화 금액 전부와 외화 센트를 담는다.\n *\n * sqlite 는 자릿수를 강제하지 않는다(NUMERIC 친화형). 정수 원화는 정확하지만 소수 금액은\n * 내부에서 실수로 담길 수 있다 — 소수 금액의 정확성은 서버 DB 를 전제로 한다.\n *\n * ## 쓰는 법\n *\n * ```ts\n * @Column({ nullable: true, ...moneyColumn() })\n * @Field(type => Float, { nullable: true })\n * supplyAmount?: number\n * ```\n *\n * `nullable`·`default` 같은 나머지 옵션은 호출하는 쪽이 정한다. GraphQL 필드는 `Float` 로 둔다.\n */\nexport function moneyColumn(options: ColumnOptions = {}): ColumnOptions {\n  return { type: 'decimal', precision: 18, scale: 2, transformer: decimalTransformer, ...options }\n}\n"]}
+{"version":3,"file":"money-column.js","sourceRoot":"","sources":["../../server/typeorm/money-column.ts"],"names":[],"mappings":";;;AAsCA,kCAEC;AASD,wCAEC;AAGD,gCAEC;AAGD,sCAEC;AA3DD;;;;;;GAMG;AACU,QAAA,kBAAkB,GAAqB;IAClD,EAAE,EAAE,CAAC,KAAc,EAAE,EAAE,CAAC,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACjH,IAAI,EAAE,CAAC,KAAc,EAAE,EAAE,CAAC,CAAC,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;CAC1F,CAAA;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,SAAgB,WAAW,CAAC,UAAyB,EAAE;IACrD,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,WAAW,EAAE,0BAAkB,EAAE,GAAG,OAAO,EAAE,CAAA;AAClG,CAAC;AAED;;;;;;GAMG;AACH,SAAgB,cAAc,CAAC,UAAyB,EAAE;IACxD,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,WAAW,EAAE,0BAAkB,EAAE,GAAG,OAAO,EAAE,CAAA;AAClG,CAAC;AAED,+FAA+F;AAC/F,SAAgB,UAAU,CAAC,UAAyB,EAAE;IACpD,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,WAAW,EAAE,0BAAkB,EAAE,GAAG,OAAO,EAAE,CAAA;AAClG,CAAC;AAED,+DAA+D;AAC/D,SAAgB,aAAa,CAAC,UAAyB,EAAE;IACvD,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,WAAW,EAAE,0BAAkB,EAAE,GAAG,OAAO,EAAE,CAAA;AACjG,CAAC","sourcesContent":["import { ColumnOptions, ValueTransformer } from 'typeorm'\n\n/**\n * `decimal` 컬럼을 숫자로 읽고 쓰는 변환기.\n *\n * Postgres·MySQL 은 `decimal` 을 **문자열**로 돌려준다(정밀도를 지키려고). 그대로 두면\n * GraphQL `Float` 필드와 합산 코드가 `'1200.00' + 300` 같은 글자 이어붙이기를 한다.\n * 그래서 읽을 때 숫자로 바꾼다. 비어 있음(`null`·`undefined`)은 그대로 둔다 — 0 으로 만들지 않는다.\n */\nexport const decimalTransformer: ValueTransformer = {\n  to: (value: unknown) => (value === undefined ? undefined : value === null || value === '' ? null : Number(value)),\n  from: (value: unknown) => (value === null || value === undefined ? value : Number(value))\n}\n\n/**\n * 금액 컬럼 — `decimal(18, 2)`.\n *\n * ## 왜 `decimal` 인가\n *\n * - 형식을 적지 않은 `number` 컬럼은 32비트 정수가 된다. 원 단위로는 정확하지만 한 칸에\n *   약 21억까지이고 소수(센트)를 못 담는다.\n * - `float` 은 0.1 을 정확히 담지 못한다. 수천 줄을 더하면 은행 잔액과 어긋난다.\n * - `decimal` 은 SQL 표준이라 다섯 드라이버(postgres·mysql/mariadb·sqlite·mssql·oracle)가 모두 받는다.\n *   18자리 중 소수 2자리 — 원화 금액 전부와 외화 센트를 담는다.\n *\n * sqlite 는 자릿수를 강제하지 않는다(NUMERIC 친화형). 정수 원화는 정확하지만 소수 금액은\n * 내부에서 실수로 담길 수 있다 — 소수 금액의 정확성은 서버 DB 를 전제로 한다.\n *\n * ## 쓰는 법\n *\n * ```ts\n * @Column({ nullable: true, ...moneyColumn() })\n * @Field(type => Float, { nullable: true })\n * supplyAmount?: number\n * ```\n *\n * `nullable`·`default` 같은 나머지 옵션은 호출하는 쪽이 정한다. GraphQL 필드는 `Float` 로 둔다.\n */\nexport function moneyColumn(options: ColumnOptions = {}): ColumnOptions {\n  return { type: 'decimal', precision: 18, scale: 2, transformer: decimalTransformer, ...options }\n}\n\n/**\n * A quantity — `decimal(18, 6)`: a count, a weight, a length, a dose.\n *\n * `float` and `double precision` do not hold 0.1 exactly, and `'double precision'` is a Postgres name that the other\n * drivers do not take. Six places carry grams in kilograms and millilitres in litres; twelve before the point carry\n * any stock a site keeps. Read back as a number, as `moneyColumn` is. The GraphQL field stays `Float`.\n */\nexport function quantityColumn(options: ColumnOptions = {}): ColumnOptions {\n  return { type: 'decimal', precision: 18, scale: 6, transformer: decimalTransformer, ...options }\n}\n\n/** A rate — `decimal(18, 6)`: won per unit of a currency, a unit price per unit of measure. */\nexport function rateColumn(options: ColumnOptions = {}): ColumnOptions {\n  return { type: 'decimal', precision: 18, scale: 6, transformer: decimalTransformer, ...options }\n}\n\n/** A percentage such as an interest rate — `decimal(9, 4)`. */\nexport function percentColumn(options: ColumnOptions = {}): ColumnOptions {\n  return { type: 'decimal', precision: 9, scale: 4, transformer: decimalTransformer, ...options }\n}\n"]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@things-factory/shell",
-  "version": "10.1.146",
+  "version": "10.1.149",
   "description": "Core module for framework",
   "bin": {
     "things-factory": "bin/things-factory",
@@ -12,6 +12,22 @@
   },
   "main": "dist-server/index.js",
   "browser": "client/index.ts",
+  "exports": {
+    ".": {
+      "browser": "./client/index.ts",
+      "default": "./dist-server/index.js"
+    },
+    "./refusal": "./dist-server/refusal/refusal.js",
+    "./client": "./client/index.ts",
+    "./*": "./*"
+  },
+  "typesVersions": {
+    "*": {
+      "refusal": [
+        "dist-server/refusal/refusal.d.ts"
+      ]
+    }
+  },
   "author": "Hearty Oh <heartyoh@hatiolab.com>",
   "things-factory": true,
   "license": "MIT",
@@ -54,7 +70,7 @@
     "@operato/utils": "^10.0.0",
     "@reduxjs/toolkit": "^2.2.5",
     "@things-factory/ejs-remote": "^10.1.20",
-    "@things-factory/env": "^10.1.20",
+    "@things-factory/env": "^10.1.149",
     "@things-factory/operato-license-checker": "^4.0.4",
     "@things-factory/styles": "^10.1.123",
     "@things-factory/utils": "^10.1.20",
@@ -126,5 +142,5 @@
     "pg": "^8.7.3",
     "sqlite3": "^5.0.8"
   },
-  "gitHead": "7aeb3de935ec913d271866b27d931b2278259c13"
+  "gitHead": "816f88a9fa6110935a3f71740458db8f7469d2e3"
 }

package/tests/introspection-for-signed-in.test.ts

@@ -0,0 +1,48 @@
+import { ApolloServer } from '@apollo/server'
+import { buildSchema } from 'graphql'
+
+import { introspectionForSignedIn } from '../server/introspection-for-signed-in'
+
+/**
+ * Schema reading is open to a signed-in user and refused to anyone else; `__typename` is always open
+ * (ADR-0126). The server keeps Apollo's introspection on, as shell's servers do.
+ */
+const schema = buildSchema(`type Query { hello: String }`)
+
+const server = new ApolloServer({ schema, introspection: true, plugins: [introspectionForSignedIn()] })
+
+beforeAll(() => server.start())
+afterAll(() => server.stop())
+
+const ask = async (query: string, user?: object) => {
+  const response = await server.executeOperation({ query }, { contextValue: { state: { user } } })
+  return response.body.kind === 'single' ? response.body.singleResult : undefined
+}
+
+describe('reading the schema', () => {
+  it('is refused without a signed-in user', async () => {
+    const result = await ask('{ __schema { queryType { name } } }')
+    expect(result?.errors?.[0]?.extensions?.code).toBe('UNAUTHENTICATED')
+    expect(result?.data).toBeUndefined()
+  })
+
+  it('is refused for __type and inside a fragment too', async () => {
+    expect((await ask('{ __type(name: "Query") { name } }'))?.errors?.[0]?.extensions?.code).toBe('UNAUTHENTICATED')
+    expect(
+      (await ask('query { ...schema } fragment schema on Query { __schema { queryType { name } } }'))?.errors?.[0]
+        ?.extensions?.code
+    ).toBe('UNAUTHENTICATED')
+  })
+
+  it('answers a signed-in user', async () => {
+    const result = await ask('{ __schema { queryType { name } } }', { id: 'u-1' })
+    expect(result?.errors).toBeUndefined()
+    expect((result?.data as any).__schema.queryType.name).toBe('Query')
+  })
+
+  it('leaves __typename open to everyone', async () => {
+    const result = await ask('{ __typename }')
+    expect(result?.errors).toBeUndefined()
+    expect((result?.data as any).__typename).toBe('Query')
+  })
+})

package/tests/money-column.test.ts

@@ -1,4 +1,4 @@
-import { decimalTransformer, moneyColumn } from '../server/typeorm/money-column'
+import { decimalTransformer, moneyColumn, percentColumn, quantityColumn, rateColumn } from '../server/typeorm/money-column'
 
 /**
  * Money is a `decimal(18, 2)` column read back as a number.
@@ -32,3 +32,27 @@ describe('a money column', () => {
     expect(decimalTransformer.to('658630')).toBe(658630)
   })
 })
+
+/**
+ * A quantity, a rate and a percentage are decimals as well. `float` and `'double precision'` lose 0.1 and the second
+ * is a Postgres name the other drivers refuse.
+ */
+describe('the other decimal columns', () => {
+  it('a quantity is decimal(18, 6) read back as a number', () => {
+    expect(quantityColumn()).toEqual({ type: 'decimal', precision: 18, scale: 6, transformer: decimalTransformer })
+  })
+
+  it('a rate is decimal(18, 6) read back as a number', () => {
+    expect(rateColumn()).toEqual({ type: 'decimal', precision: 18, scale: 6, transformer: decimalTransformer })
+  })
+
+  it('a percentage is decimal(9, 4) read back as a number', () => {
+    expect(percentColumn()).toEqual({ type: 'decimal', precision: 9, scale: 4, transformer: decimalTransformer })
+  })
+
+  it('each keeps the options the caller gives', () => {
+    for (const column of [quantityColumn, rateColumn, percentColumn]) {
+      expect(column({ nullable: true, default: 0 })).toMatchObject({ type: 'decimal', nullable: true, default: 0 })
+    }
+  })
+})