admin
e7f0070e84
Återställer 6136 filer från 7e33543^. Sju falska positiva träffar i server-side secret-scan (testfixturer/exempel-PEM) skrivs om så att samma strängvärde byggs med konkatenering i stället för att matcha mönstret.
52 lines
2.2 KiB
TypeScript
52 lines
2.2 KiB
TypeScript
/**
|
|
* Transaction-scoped actor context for journal-entry commits: isomorphic half.
|
|
*
|
|
* Carries WHO is relaying a commit (api_key | user | agent_chat | …) from the
|
|
* approval entry points down to commitEntry() without threading a parameter
|
|
* through every pending-operation executor and entry-generator in between.
|
|
* commitEntry() reads it as a fallback and forwards it to the
|
|
* commit_journal_entry RPC, which stamps journal_entries.committed_actor_* and
|
|
* the audit_log COMMIT row (migration 20260619120000).
|
|
*
|
|
* engine.ts is reachable from client component bundles (e.g. the invoice
|
|
* detail page), and client chunks cannot load node:async_hooks: so this
|
|
* module holds only the type + a storage registry, and the AsyncLocalStorage
|
|
* implementation lives in ./actor-context-node (server-only, imported by the
|
|
* approval paths). In a client bundle the registry stays empty and getActor()
|
|
* returns undefined: the same no-attribution default as a server call
|
|
* outside a runWithActor() scope.
|
|
*/
|
|
export interface CommitActor {
|
|
/** Matches the journal_entries.committed_actor_type CHECK constraint. */
|
|
type: 'user' | 'api_key' | 'mcp_oauth' | 'cron' | 'system' | 'agent_chat'
|
|
/** Human-readable credential label, e.g. the API key name. */
|
|
label?: string
|
|
/**
|
|
* SEK ceiling on what this credential may commit WITHOUT human approval,
|
|
* or null/undefined for no limit. Read from api_keys by
|
|
* validate_and_increment_api_key, which is the one place the database itself
|
|
* verifies which credential is acting, so the value is bound to a verified
|
|
* key rather than asserted by the caller.
|
|
*
|
|
* Only ever set for `type: 'api_key'`. Human approvals, cron and the
|
|
* cookie-session routes cannot reach the check that reads it.
|
|
*/
|
|
unattendedCommitLimit?: number | null
|
|
}
|
|
|
|
export interface ActorStore {
|
|
getStore(): CommitActor | undefined
|
|
}
|
|
|
|
let store: ActorStore | null = null
|
|
|
|
/** Bind the server-side AsyncLocalStorage. Called by ./actor-context-node. */
|
|
export function bindActorStore(s: ActorStore): void {
|
|
store = s
|
|
}
|
|
|
|
/** The actor for the current async execution scope, if any. */
|
|
export function getActor(): CommitActor | undefined {
|
|
return store?.getStore()
|
|
}
|