hacklab/T-HUB
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions 1

Phase two: archive origin facet, redaction-aware reads, share revocation on redaction

Browse source 
- group-files: origin filter facet; GET /files/:id returns 410 for unavailable
  rows after the ACL recheck; fix latent group_members.status filter and unbound
  workspace parameter that would 500 listFiles
- archive-bot: markRedacted revokes live group_file_shares rows in-transaction
- new live-DB integration suite for the archive index surface
This commit is contained in:
glass beadian 2026-10-11 21:44:23 +00:00
parent 7cea73dc0d
commit 7ea0b1e137
6 changed files with 375 additions and 22 deletions
Download patch file Download diff file Expand all files Collapse all files

23
apps/archive-bot/src/processor.test.ts
View file

@ -90,6 +90,8 @@ class FakeStore implements ArchiveStore {
roomsSaved = new Set<string>();
outbox = new Map<string, OutboxRow & { claimKey: string }>();
archive: (ArchiveRecord & { available: boolean })[] = [];
/** Live share rows per archive record — mirrors group_file_shares. */
shareLinks = new Map<string, { revokedAt: Date | null }>();
async loadCursor(_rooms: readonly RoomCursorTarget[]): Promise<string | null> {
return this.cursor;
}
@ -106,8 +108,10 @@ class FakeStore implements ArchiveStore {
}
async commitArchived(record: ArchiveRecord, outboxId: string): Promise<{ id: string; indexedAt: Date }> {
this.archive.push({ ...record, available: true });
const id = `file-${this.archive.length}`;
this.shareLinks.set(id, { revokedAt: null });
this.byId(outboxId).status = "done";
return { id: `file-${this.archive.length}`, indexedAt: new Date(0) };
return { id, indexedAt: new Date(0) };
}
async recordFailure(_ws: string, outboxId: string, error: string, terminal: boolean): Promise<OutboxRow> {
const row = this.byId(outboxId);
@ -118,11 +122,17 @@ class FakeStore implements ArchiveStore {
return { ...row };
}
async markRedacted(_ws: string, _room: string, eventId: string, key: string): Promise<number> {
const rows = this.archive.filter((r) => r.eventId === eventId && r.available);
for (const r of rows) r.available = false;
const affected = this.archive
.map((r, i) => ({ r, id: `file-${i + 1}` }))
.filter(({ r }) => r.eventId === eventId && r.available);
for (const { r, id } of affected) {
r.available = false;
const share = this.shareLinks.get(id);
if (share !== undefined) share.revokedAt = clock.now;
}
const claim = this.outbox.get(key);
if (claim?.status === "pending") claim.status = "failed";
return rows.length;
return affected.length;
}
async countPending(): Promise<number> {
return [...this.outbox.values()].filter((r) => r.status === "pending").length;
@ -251,13 +261,16 @@ describe("ArchiveProcessor", () => {
expect(store.outbox.size).toBe(0);
});
it("marks redacted attachments unavailable without touching the library", async () => {
it("marks redacted attachments unavailable and revokes live links, without touching the library", async () => {
matrix.batches.push(batch("s1", [imageEvent("$a")]));
await processor.runBatch(signal);
expect(store.shareLinks.get("file-1")).toEqual({ revokedAt: null });
const redaction: MatrixEvent = { type: "m.room.redaction", event_id: "$r", sender: "@mod:x", content: { redacts: "$a" } };
matrix.batches.push(batch("s2", [redaction]));
await processor.runBatch(signal);
expect(store.archive[0]?.available).toBe(false);
// contract point 5: revoke links AND mark the index unavailable
expect(store.shareLinks.get("file-1")?.revokedAt).toEqual(clock.now);
expect(library.committed).toHaveLength(1);
});