wkhandClaude Opus 5.5
7fce972fdc
All editors now work on a server document at the same time instead of taking turns behind an edit lock. - The document's content is a sequence of Yjs updates (document_updates); DocumentChannel stores and relays them immediately, checks access on subscribe and again whenever links or memberships change. - app/frontend/collab/: the store stays position-based; a binding maps it to a Yjs form with stable row/column ids, so a row inserted by one person doesn't misplace what another is typing. Remote changes are applied only after pending local ones went into Yjs. - Per-person undo (Y.UndoManager), presence via awareness: the others' selections as coloured boxes with names, avatars in the toolbar. - Existing JSON documents convert on first open, deterministically, so two people opening one at once end up with the same Yjs state. - Editors compact the stored updates after 200 and keep a JSON snapshot current for export and duplicating. Edit lock and polling are gone. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
79 lines
2.8 KiB
Ruby
79 lines
2.8 KiB
Ruby
module Api
|
|
# Everything about who has access to a document. Owner only.
|
|
class SharesController < BaseController
|
|
before_action :require_authentication
|
|
before_action :load_owned_document
|
|
|
|
# GET /api/documents/:document_id/share
|
|
def show
|
|
render json: share_json
|
|
end
|
|
|
|
# POST /api/documents/:document_id/share/links { role }
|
|
# One active link per role: creating one replaces (revokes) the previous.
|
|
def create_link
|
|
role = params.require(:role)
|
|
return render(json: { error: "invalid_role" }, status: :unprocessable_entity) unless ShareLink.roles.key?(role)
|
|
@doc.transaction do
|
|
@doc.share_links.active.where(role:).find_each(&:revoke!)
|
|
@doc.share_links.create!(role:, created_by: Current.user)
|
|
end
|
|
@doc.revalidate_access!
|
|
render json: share_json
|
|
end
|
|
|
|
# DELETE /api/documents/:document_id/share/links/:id
|
|
def revoke_link
|
|
@doc.share_links.active.find(params[:id]).revoke!
|
|
@doc.revalidate_access!
|
|
render json: share_json
|
|
end
|
|
|
|
# POST /api/documents/:document_id/share/invitations { email, role }
|
|
def invite
|
|
role = params.require(:role)
|
|
return render(json: { error: "invalid_role" }, status: :unprocessable_entity) unless MagicLink.roles.key?(role)
|
|
link = MagicLink.issue!(email: params.require(:email), purpose: :invitation, document: @doc, role:, invited_by: Current.user)
|
|
if link.email == Current.user.email
|
|
link.destroy!
|
|
return render(json: { error: "self_invite" }, status: :unprocessable_entity)
|
|
end
|
|
AuthMailer.invitation(link, link.token).deliver_later
|
|
render json: share_json
|
|
end
|
|
|
|
# PATCH /api/documents/:document_id/share/members/:user_id { role }
|
|
def update_member
|
|
m = @doc.document_memberships.find_by!(user_id: params[:user_id])
|
|
m.update!(role: params.require(:role))
|
|
@doc.revalidate_access!
|
|
render json: share_json
|
|
end
|
|
|
|
# DELETE /api/documents/:document_id/share/members/:user_id
|
|
def remove_member
|
|
@doc.document_memberships.where(user_id: params[:user_id]).delete_all
|
|
@doc.revalidate_access!
|
|
render json: share_json
|
|
end
|
|
|
|
private
|
|
|
|
def load_owned_document
|
|
@doc = Current.user.owned_documents.find(params[:document_id])
|
|
end
|
|
|
|
def share_json
|
|
{
|
|
links: @doc.share_links.active.order(:created_at).map(&:as_json),
|
|
members: @doc.document_memberships.includes(:user).order(:created_at).map do |m|
|
|
{ user_id: m.user_id, name: m.user.name, email: m.user.email, role: m.role, source: m.source }
|
|
end,
|
|
invitations: MagicLink.usable.invitation.where(document: @doc).order(:created_at).map do |i|
|
|
{ email: i.email, role: i.role, expires_at: i.expires_at.iso8601 }
|
|
end
|
|
}
|
|
end
|
|
end
|
|
end
|