65 lines
3.2 KiB
TypeScript
65 lines
3.2 KiB
TypeScript
import { AdminError, type AdminIdentity } from './admin-access';
|
|
|
|
export type AdminOperations = {
|
|
observedAt: number;
|
|
rooms: number;
|
|
removedRooms: number;
|
|
archivedRooms: number;
|
|
pausedRooms: number;
|
|
closedRooms: number;
|
|
activeSeats: number;
|
|
unreadableRooms: number;
|
|
lastRoomChange: number | null;
|
|
backupSnapshots: number;
|
|
backupBytes: number;
|
|
backupDownloads: number;
|
|
};
|
|
|
|
export type AdminIntegrity = {
|
|
observedAt: number;
|
|
sqlite: 'passed' | 'failed';
|
|
foreignKeys: 'passed' | 'failed';
|
|
};
|
|
|
|
const ownerAuthority = `SELECT a.role FROM admin_sessions s JOIN admin_accounts a ON a.id=s.admin_id
|
|
WHERE s.token_hash=? AND a.id=? AND a.enabled=1 AND a.role='owner'
|
|
AND s.revoked_at IS NULL AND s.expires_at>? AND s.generation=a.session_generation`;
|
|
|
|
type Counts = Omit<AdminOperations, 'observedAt'>;
|
|
|
|
/** Aggregate only operational counters, never serialized game or private backup rows. */
|
|
export async function readAdminOperations(database: D1Database, identity: AdminIdentity, now = Date.now()): Promise<AdminOperations> {
|
|
const row = await database.prepare(`SELECT
|
|
(SELECT COUNT(*) FROM rooms) rooms,
|
|
(SELECT COUNT(*) FROM rooms r JOIN room_removals m ON m.room_code=r.code WHERE m.removed=1) removedRooms,
|
|
(SELECT COUNT(*) FROM rooms r JOIN room_archives a ON a.room_code=r.code WHERE a.archived=1) archivedRooms,
|
|
(SELECT COUNT(*) FROM rooms r JOIN room_controls c ON c.room_code=r.code WHERE c.paused=1) pausedRooms,
|
|
(SELECT COUNT(*) FROM rooms r JOIN room_closures c ON c.room_code=r.code WHERE c.closed=1) closedRooms,
|
|
(SELECT COUNT(*) FROM seats WHERE revoked=0) activeSeats,
|
|
(SELECT COUNT(*) FROM rooms WHERE json_valid(state)=0) unreadableRooms,
|
|
(SELECT MAX(updated_at) FROM rooms) lastRoomChange,
|
|
(SELECT COUNT(*) FROM admin_room_backups) backupSnapshots,
|
|
(SELECT COALESCE(SUM(size_bytes),0) FROM admin_room_backups) backupBytes,
|
|
(SELECT COUNT(*) FROM admin_room_backup_downloads) backupDownloads
|
|
WHERE EXISTS (${ownerAuthority})`)
|
|
.bind(identity.sessionHash, identity.id, now).first<Counts>();
|
|
if (!row) throw new AdminError('Owner sign-in required.', 403);
|
|
return { observedAt: now, ...row };
|
|
}
|
|
|
|
/** Explicit owner request; report only pass/fail, never SQLite diagnostics or row IDs. */
|
|
export async function readAdminIntegrity(database: D1Database, identity: AdminIdentity, now = Date.now()): Promise<AdminIntegrity> {
|
|
const results = await database.batch([
|
|
database.prepare(ownerAuthority).bind(identity.sessionHash, identity.id, now),
|
|
database.prepare('PRAGMA quick_check(1)'),
|
|
database.prepare('SELECT EXISTS(SELECT 1 FROM pragma_foreign_key_check LIMIT 1) AS violation'),
|
|
]);
|
|
if (!results[0].results.length) throw new AdminError('Owner sign-in required.', 403);
|
|
const quick = (results[1].results[0] as { quick_check?: unknown } | undefined)?.quick_check;
|
|
const foreign = (results[2].results[0] as { violation?: unknown } | undefined)?.violation;
|
|
if (typeof quick !== 'string' || foreign !== 0 && foreign !== 1)
|
|
throw new AdminError('Database integrity check unavailable.', 503);
|
|
return { observedAt: now, sqlite: quick === 'ok' ? 'passed' : 'failed',
|
|
foreignKeys: foreign === 0 ? 'passed' : 'failed' };
|
|
}
|