helix-im 0.1.21

基于 Helix Core 的确定性 MessageV3 IM 业务模块
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91

//! 当前账号、当前频道的本地 ChannelView 绝对投影。

use helix_core::effect::{Correlation, Effect, GetSpec, SqlValue, StorageOp};

use crate::error::ImError;
use crate::query::DialogListScope;
use crate::state::ChannelId;

pub const QUERY_CHANNEL_VIEW_SNAPSHOT: &str = "im_query_channel_view_snapshot";

/// caller 只拥有频道与 transport correlation；账号和租户必须来自 RuntimeAuth。
pub fn parse_channel_id(payload: &[u8]) -> Result<ChannelId, ImError> {
    let value = serde_json::from_slice::<serde_json::Value>(payload).map_err(|error| {
        ImError::Parse(format!("{QUERY_CHANNEL_VIEW_SNAPSHOT} payload: {error}"))
    })?;
    let object = value.as_object().ok_or_else(|| {
        ImError::Parse(format!(
            "{QUERY_CHANNEL_VIEW_SNAPSHOT} payload must be an object"
        ))
    })?;
    for key in object.keys() {
        if !matches!(key.as_str(), "channelId" | "channel_id" | "req_id") {
            return Err(ImError::Parse(format!(
                "{QUERY_CHANNEL_VIEW_SNAPSHOT} field is not caller-owned: {key}"
            )));
        }
    }
    object
        .get("channelId")
        .or_else(|| object.get("channel_id"))
        .and_then(serde_json::Value::as_str)
        .and_then(ChannelId::from_str)
        .ok_or_else(|| ImError::Parse(format!("{QUERY_CHANNEL_VIEW_SNAPSHOT} requires channelId")))
}

/// 单键读取 canonical channel 行；可见性在读回阶段按 RuntimeAuth 二次校验。
pub fn query_effect(channel_id: ChannelId, corr: Correlation) -> Effect {
    Effect::Persist {
        corr,
        ops: vec![StorageOp::Get(GetSpec {
            table: "channel",
            key_col: "id",
            key_val: SqlValue::Text(channel_id.as_str().to_string()),
        })],
    }
}

/// 返回 `{snapshot}` typed body；缺行、跨租户或非成员均是明确 local miss。
pub fn result_body(
    reply_bytes: &[u8],
    scope: &DialogListScope,
    channel_id: ChannelId,
) -> serde_json::Value {
    serde_json::json!({
        "snapshot": crate::query::project_channel_view_snapshot(reply_bytes, scope, channel_id)
    })
}

#[cfg(test)]
mod tests {
    use super::*;

    #[test]
    fn snapshot_is_runtime_scoped_and_render_ready() {
        let channel_id = ChannelId::from_str("chfixx0000000000000000002a").unwrap();
        let rows = serde_json::to_vec(&serde_json::json!([{
            "id": channel_id.as_str(),
            "team_id": "team-a",
            "members": "[{\"userId\":\"user-a\",\"role\":\"MEMBER\"}]",
            "setting_version": 3,
            "permission_revision": 4
        }]))
        .unwrap();
        let body = result_body(&rows, &DialogListScope::new("user-a", "team-a"), channel_id);
        assert_eq!(body["snapshot"]["id"], channel_id.as_str());
        assert_eq!(body["snapshot"]["settingVersion"], 3);
    }

    #[test]
    fn snapshot_rejects_cross_tenant_row() {
        let channel_id = ChannelId::from_str("chfixx0000000000000000002a").unwrap();
        let rows = serde_json::to_vec(&serde_json::json!([{
            "id": channel_id.as_str(),
            "team_id": "team-b",
            "user_id": "user-a"
        }]))
        .unwrap();
        let body = result_body(&rows, &DialogListScope::new("user-a", "team-a"), channel_id);
        assert!(body["snapshot"].is_null());
    }
}