1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
package scoped
import (
"context"
"encoding/json"
"errors"
"fmt"
"slices"
"strings"
commonv1 "github.com/johnandersen777/socialweb-computer-kcp/api/common/v1alpha1"
"github.com/johnandersen777/socialweb-computer-kcp/internal/contract/atprotorepo"
)
const all = "*"
func Covers(scope []string, collection string) bool {
if len(scope) == 0 {
return true
}
collection = strings.TrimSpace(collection)
for _, entry := range scope {
entry = strings.TrimSpace(entry)
if entry == all || entry == collection {
return true
}
if prefix, ok := strings.CutSuffix(entry, all); ok && strings.HasPrefix(collection, prefix) {
return true
}
}
return false
}
type Repo struct {
inner atprotorepo.Repo
scope []string
}
var (
_ atprotorepo.Repo = (*Repo)(nil)
_ atprotorepo.SwapDeleter = (*Repo)(nil)
_ atprotorepo.SwapPutter = (*Repo)(nil)
)
func New(inner atprotorepo.Repo, scope []string) *Repo {
return &Repo{inner: inner, scope: slices.Clone(scope)}
}
func (r *Repo) DID() string { return r.inner.DID() }
func (r *Repo) GetRecord(ctx context.Context, repo, collection, rkey string) (atprotorepo.Record, error) {
return r.inner.GetRecord(ctx, repo, collection, rkey)
}
func (r *Repo) ListRecords(ctx context.Context, repo, collection string, opts atprotorepo.ListOptions) (atprotorepo.ListPage, error) {
return r.inner.ListRecords(ctx, repo, collection, opts)
}
func (r *Repo) Resolve(ctx context.Context, ref commonv1.StrongRef) (atprotorepo.Record, error) {
return r.inner.Resolve(ctx, ref)
}
func (r *Repo) allowed(collection string) error {
if Covers(r.scope, collection) {
return nil
}
return fmt.Errorf("%w: %s is not in %v", atprotorepo.ErrOutOfScope, collection, r.scope)
}
func (r *Repo) CreateRecord(ctx context.Context, collection, rkey string, value json.RawMessage) (commonv1.StrongRef, error) {
if err := r.allowed(collection); err != nil {
return commonv1.StrongRef{}, err
}
return r.inner.CreateRecord(ctx, collection, rkey, value)
}
func (r *Repo) PutRecord(ctx context.Context, collection, rkey string, value json.RawMessage) (commonv1.StrongRef, error) {
if err := r.allowed(collection); err != nil {
return commonv1.StrongRef{}, err
}
return r.inner.PutRecord(ctx, collection, rkey, value)
}
func (r *Repo) PutRecordSwap(ctx context.Context, collection, rkey string, value json.RawMessage, swapCID string) (commonv1.StrongRef, error) {
if err := r.allowed(collection); err != nil {
return commonv1.StrongRef{}, err
}
inner, ok := r.inner.(atprotorepo.SwapPutter)
if !ok {
return commonv1.StrongRef{}, errors.New("scoped: the repo cannot put a record by its cid")
}
return inner.PutRecordSwap(ctx, collection, rkey, value, swapCID)
}
func (r *Repo) DeleteRecord(ctx context.Context, collection, rkey string) error {
if err := r.allowed(collection); err != nil {
return err
}
return r.inner.DeleteRecord(ctx, collection, rkey)
}
func (r *Repo) DeleteRecordSwap(ctx context.Context, collection, rkey, swapCID string) error {
if err := r.allowed(collection); err != nil {
return err
}
inner, ok := r.inner.(atprotorepo.SwapDeleter)
if !ok {
return errors.New("scoped: the repo cannot delete a record by its cid")
}
return inner.DeleteRecordSwap(ctx, collection, rkey, swapCID)
}
func (r *Repo) Subscribe(ctx context.Context, opts atprotorepo.SubscribeOptions, fn func(atprotorepo.Commit) error) error {
for _, collection := range opts.Collections {
if err := r.allowed(collection); err != nil {
return err
}
}
scope := r.scope
return r.inner.Subscribe(ctx, opts, func(commit atprotorepo.Commit) error {
ops := commit.Ops[:0:0]
for _, op := range commit.Ops {
if Covers(scope, op.Collection) {
ops = append(ops, op)
}
}
if len(ops) == 0 && len(commit.Ops) > 0 {
return nil
}
commit.Ops = ops
return fn(commit)
})
}
