@x12i/memorix-service 3.12.4 → 3.13.0

package/dist/patches/access.d.ts

@@ -0,0 +1,15 @@
+import type { UnifiedMetadataClient } from "@x12i/memorix-metadata-runtime";
+/** Callers named in `MEMORIX_PATCH_ADMIN_CALLERS` (comma-separated `x-memorix-caller` values) may patch any content. */
+export declare function isPatchAdmin(caller: string): boolean;
+/**
+ * The caller's agents must own each selected content type: the installed pack
+ * declares a `writes[]` entry for that object type and content type.
+ */
+export declare function assertPatchOwnership(args: {
+    metadata: Pick<UnifiedMetadataClient, "resolveEffective">;
+    agentIds: string[];
+    caller: string;
+    objectType: string;
+    contentTypes: string[];
+}): void;
+//# sourceMappingURL=access.d.ts.map

package/dist/patches/access.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"access.d.ts","sourceRoot":"","sources":["../../src/patches/access.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,gCAAgC,CAAC;AAG5E,wHAAwH;AACxH,wBAAgB,YAAY,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAOpD;AAED;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE;IACzC,QAAQ,EAAE,IAAI,CAAC,qBAAqB,EAAE,kBAAkB,CAAC,CAAC;IAC1D,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,EAAE,CAAC;CACxB,GAAG,IAAI,CAiBP"}

package/dist/patches/access.js

@@ -0,0 +1,27 @@
+import { ServiceError } from "../errors.js";
+/** Callers named in `MEMORIX_PATCH_ADMIN_CALLERS` (comma-separated `x-memorix-caller` values) may patch any content. */
+export function isPatchAdmin(caller) {
+    const raw = process.env.MEMORIX_PATCH_ADMIN_CALLERS ?? "";
+    return raw
+        .split(",")
+        .map((item) => item.trim())
+        .filter(Boolean)
+        .includes(caller);
+}
+/**
+ * The caller's agents must own each selected content type: the installed pack
+ * declares a `writes[]` entry for that object type and content type.
+ */
+export function assertPatchOwnership(args) {
+    if (isPatchAdmin(args.caller))
+        return;
+    const effective = args.metadata.resolveEffective(args.agentIds).effective ?? [];
+    const writes = effective
+        .filter((entry) => entry.kind === "writes")
+        .map((entry) => entry.definition);
+    const missing = args.contentTypes.filter((contentType) => !writes.some((write) => write.objectType === args.objectType && write.contentType === contentType));
+    if (!missing.length)
+        return;
+    throw new ServiceError("PATCH_FORBIDDEN", `agents ${args.agentIds.join(",")} do not declare writes for ${args.objectType} ${missing.join(", ")}`, 403, { objectType: args.objectType, contentTypes: missing, agentIds: args.agentIds, retryable: false });
+}
+//# sourceMappingURL=access.js.map

package/dist/patches/access.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"access.js","sourceRoot":"","sources":["../../src/patches/access.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAE5C,wHAAwH;AACxH,MAAM,UAAU,YAAY,CAAC,MAAc;IACzC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,2BAA2B,IAAI,EAAE,CAAC;IAC1D,OAAO,GAAG;SACP,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;SAC1B,MAAM,CAAC,OAAO,CAAC;SACf,QAAQ,CAAC,MAAM,CAAC,CAAC;AACtB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAAC,IAMpC;IACC,IAAI,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC;QAAE,OAAO;IACtC,MAAM,SAAS,GAAG,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,SAAS,IAAI,EAAE,CAAC;IAChF,MAAM,MAAM,GAAG,SAAS;SACrB,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC;SAC1C,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,UAA6D,CAAC,CAAC;IACvF,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,CAAC,MAAM,CACtC,CAAC,WAAW,EAAE,EAAE,CACd,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,UAAU,KAAK,IAAI,CAAC,UAAU,IAAI,KAAK,CAAC,WAAW,KAAK,WAAW,CAAC,CACrG,CAAC;IACF,IAAI,CAAC,OAAO,CAAC,MAAM;QAAE,OAAO;IAC5B,MAAM,IAAI,YAAY,CACpB,iBAAiB,EACjB,UAAU,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,8BAA8B,IAAI,CAAC,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EACtG,GAAG,EACH,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,YAAY,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,SAAS,EAAE,KAAK,EAAE,CAClG,CAAC;AACJ,CAAC"}

package/dist/patches/engine.d.ts

@@ -0,0 +1,67 @@
+import type { Db, MongoClient } from "mongodb";
+import { type WriterMetadataCatalog } from "@x12i/memorix-data";
+import { type PatchDoc } from "./store.js";
+import type { PatchRequest } from "./types.js";
+export type PatchRowEvent = {
+    objectType: string;
+    contentType: string;
+    recordId: string;
+    revision?: number;
+    op: "updated" | "removed";
+    data?: Record<string, unknown>;
+};
+export type PatchLimits = {
+    /** Matched rows one patch may hold. */
+    maxRows: number;
+    /** Rows an org may change per hour across patches. */
+    maxRowsPerHour: number;
+    /** Apply runs inline up to this many rows to write; above it, in the background. */
+    syncRows: number;
+    planTtlMs: number;
+    /** Prior bodies stay this long after apply. */
+    retainMs: number;
+    leaseMs: number;
+};
+export type PatchEngineDeps = {
+    client: MongoClient;
+    operationalDb: Db;
+    scope: {
+        orgId: string;
+        agentIds: string[];
+    };
+    catalog: WriterMetadataCatalog;
+    caller: string;
+    now?: () => string;
+    reconcileDirectory?: (recordId: string) => Promise<void>;
+    onRowWritten?: (event: PatchRowEvent) => Promise<void>;
+    declaredDiscriminatorValues?: (objectType: string, contentType: string, path: string) => string[] | undefined;
+    limits?: Partial<PatchLimits>;
+    log?: (message: string, details?: Record<string, unknown>) => void;
+};
+export declare function patchLimits(overrides?: Partial<PatchLimits>): PatchLimits;
+export declare function planPatch(deps: PatchEngineDeps, request: PatchRequest): Promise<Record<string, unknown>>;
+export declare function getPatchStatus(deps: PatchEngineDeps, patchId: string): Promise<Record<string, unknown>>;
+export declare function listPatches(deps: PatchEngineDeps, query: {
+    objectType?: string;
+    state?: string;
+    limit?: number;
+}): Promise<Record<string, unknown>>;
+export declare function listPatchRecords(deps: PatchEngineDeps, patchId: string, query: {
+    outcome?: string;
+    cursor?: string;
+    limit?: number;
+}): Promise<Record<string, unknown>>;
+export type WorkResponse = {
+    httpStatus: 200 | 202;
+    body: Record<string, unknown>;
+};
+export declare function applyPatch(deps: PatchEngineDeps, patchId: string, body: unknown): Promise<WorkResponse>;
+export declare function revertPatch(deps: PatchEngineDeps, patchId: string, body: unknown): Promise<WorkResponse>;
+export declare function removePatchGuards(deps: PatchEngineDeps, patchId: string): Promise<Record<string, unknown>>;
+export declare function loadPatchForAccess(deps: PatchEngineDeps, patchId: string): Promise<PatchDoc>;
+/**
+ * Pick up apply or revert work whose lease ran out, for example after a restart.
+ * `depsFor` builds engine deps from the stored patch (org, agents, caller).
+ */
+export declare function resumePatchWork(db: Db, depsFor: (patch: PatchDoc) => PatchEngineDeps | null): Promise<number>;
+//# sourceMappingURL=engine.d.ts.map

package/dist/patches/engine.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"engine.d.ts","sourceRoot":"","sources":["../../src/patches/engine.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAc,EAAE,EAAU,WAAW,EAAE,MAAM,SAAS,CAAC;AACnE,OAAO,EAML,KAAK,qBAAqB,EAC3B,MAAM,oBAAoB,CAAC;AAM5B,OAAO,EAEL,KAAK,QAAQ,EAId,MAAM,YAAY,CAAC;AACpB,OAAO,KAAK,EAGV,YAAY,EAIb,MAAM,YAAY,CAAC;AAEpB,MAAM,MAAM,aAAa,GAAG;IAC1B,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,EAAE,EAAE,SAAS,GAAG,SAAS,CAAC;IAC1B,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAChC,CAAC;AAEF,MAAM,MAAM,WAAW,GAAG;IACxB,uCAAuC;IACvC,OAAO,EAAE,MAAM,CAAC;IAChB,sDAAsD;IACtD,cAAc,EAAE,MAAM,CAAC;IACvB,oFAAoF;IACpF,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,+CAA+C;IAC/C,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF,MAAM,MAAM,eAAe,GAAG;IAC5B,MAAM,EAAE,WAAW,CAAC;IACpB,aAAa,EAAE,EAAE,CAAC;IAClB,KAAK,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC;IAC7C,OAAO,EAAE,qBAAqB,CAAC;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB,kBAAkB,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACzD,YAAY,CAAC,EAAE,CAAC,KAAK,EAAE,aAAa,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACvD,2BAA2B,CAAC,EAAE,CAAC,UAAU,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,MAAM,EAAE,GAAG,SAAS,CAAC;IAC9G,MAAM,CAAC,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC;IAC9B,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;CACpE,CAAC;AAgBF,wBAAgB,WAAW,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC,WAAW,CAAC,GAAG,WAAW,CAUzE;AAqOD,wBAAsB,SAAS,CAAC,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CA0H9G;AAoDD,wBAAsB,cAAc,CAAC,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAO7G;AAED,wBAAsB,WAAW,CAC/B,IAAI,EAAE,eAAe,EACrB,KAAK,EAAE;IAAE,UAAU,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,GAC7D,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAWlC;AAID,wBAAsB,gBAAgB,CACpC,IAAI,EAAE,eAAe,EACrB,OAAO,EAAE,MAAM,EACf,KAAK,EAAE;IAAE,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,GAC3D,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CA2ClC;AAkZD,MAAM,MAAM,YAAY,GAAG;IAAE,UAAU,EAAE,GAAG,GAAG,GAAG,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,CAAC;AAkBpF,wBAAsB,UAAU,CAAC,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,GAAG,OAAO,CAAC,YAAY,CAAC,CAwC7G;AAED,wBAAsB,WAAW,CAAC,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,GAAG,OAAO,CAAC,YAAY,CAAC,CAmC9G;AAED,wBAAsB,iBAAiB,CAAC,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAMhH;AAED,wBAAsB,kBAAkB,CAAC,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,CAElG;AAED;;;GAGG;AACH,wBAAsB,eAAe,CACnC,EAAE,EAAE,EAAE,EACN,OAAO,EAAE,CAAC,KAAK,EAAE,QAAQ,KAAK,eAAe,GAAG,IAAI,GACnD,OAAO,CAAC,MAAM,CAAC,CAwBjB"}