Jason Woltje
93d403807b
Some checks failed
ci/woodpecker/push/woodpecker Pipeline failed
Implements Row-Level Security (RLS) context propagation via NestJS interceptor and AsyncLocalStorage. Core Implementation: - RlsContextInterceptor sets PostgreSQL session variables (app.current_user_id, app.current_workspace_id) within transaction boundaries - Uses SET LOCAL for transaction-scoped variables, preventing connection pool leakage - AsyncLocalStorage propagates transaction-scoped Prisma client to services - Graceful handling of unauthenticated routes - 30-second transaction timeout with 10-second max wait Security Features: - Error sanitization prevents information disclosure to clients - TransactionClient type provides compile-time safety, prevents invalid method calls - Defense-in-depth security layer for RLS policy enforcement Quality Rails Compliance: - Fixed 154 lint errors in llm-usage module (package-level enforcement) - Added proper TypeScript typing for Prisma operations - Resolved all type safety violations Test Coverage: - 19 tests (7 provider + 9 interceptor + 3 integration) - 95.75% overall coverage (100% statements on implementation files) - All tests passing, zero lint errors Documentation: - Comprehensive RLS-CONTEXT-USAGE.md with examples and migration guide Files Created: - apps/api/src/common/interceptors/rls-context.interceptor.ts - apps/api/src/common/interceptors/rls-context.interceptor.spec.ts - apps/api/src/common/interceptors/rls-context.integration.spec.ts - apps/api/src/prisma/rls-context.provider.ts - apps/api/src/prisma/rls-context.provider.spec.ts - apps/api/src/prisma/RLS-CONTEXT-USAGE.md Fixes #351 Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
80 lines
2.4 KiB
TypeScript
80 lines
2.4 KiB
TypeScript
import { Controller, Get, Param, Query } from "@nestjs/common";
|
|
import type { LlmUsageLog } from "@prisma/client";
|
|
import { LlmUsageService } from "./llm-usage.service";
|
|
import type { UsageAnalyticsQueryDto, UsageAnalyticsResponseDto } from "./dto";
|
|
|
|
/**
|
|
* LLM Usage Controller
|
|
*
|
|
* Provides endpoints for querying LLM usage analytics and logs.
|
|
* All endpoints return data in the standard API response format.
|
|
*/
|
|
@Controller("llm-usage")
|
|
export class LlmUsageController {
|
|
constructor(private readonly llmUsageService: LlmUsageService) {}
|
|
|
|
/**
|
|
* Get aggregated usage analytics.
|
|
* Supports filtering by workspace, provider, model, user, and date range.
|
|
*
|
|
* @param query - Analytics query parameters
|
|
* @returns Aggregated usage analytics
|
|
*/
|
|
@Get("analytics")
|
|
async getAnalytics(
|
|
@Query() query: UsageAnalyticsQueryDto
|
|
): Promise<{ data: UsageAnalyticsResponseDto }> {
|
|
const data: UsageAnalyticsResponseDto = await this.llmUsageService.getUsageAnalytics(query);
|
|
return { data };
|
|
}
|
|
|
|
/**
|
|
* Get all usage logs for a specific workspace.
|
|
*
|
|
* @param workspaceId - Workspace UUID
|
|
* @returns Array of usage logs
|
|
*/
|
|
@Get("by-workspace/:workspaceId")
|
|
async getUsageByWorkspace(
|
|
@Param("workspaceId") workspaceId: string
|
|
): Promise<{ data: LlmUsageLog[] }> {
|
|
const data: LlmUsageLog[] = await this.llmUsageService.getUsageByWorkspace(workspaceId);
|
|
return { data };
|
|
}
|
|
|
|
/**
|
|
* Get usage logs for a specific provider within a workspace.
|
|
*
|
|
* @param workspaceId - Workspace UUID
|
|
* @param provider - Provider name
|
|
* @returns Array of usage logs
|
|
*/
|
|
@Get("by-workspace/:workspaceId/provider/:provider")
|
|
async getUsageByProvider(
|
|
@Param("workspaceId") workspaceId: string,
|
|
@Param("provider") provider: string
|
|
): Promise<{ data: LlmUsageLog[] }> {
|
|
const data: LlmUsageLog[] = await this.llmUsageService.getUsageByProvider(
|
|
workspaceId,
|
|
provider
|
|
);
|
|
return { data };
|
|
}
|
|
|
|
/**
|
|
* Get usage logs for a specific model within a workspace.
|
|
*
|
|
* @param workspaceId - Workspace UUID
|
|
* @param model - Model name
|
|
* @returns Array of usage logs
|
|
*/
|
|
@Get("by-workspace/:workspaceId/model/:model")
|
|
async getUsageByModel(
|
|
@Param("workspaceId") workspaceId: string,
|
|
@Param("model") model: string
|
|
): Promise<{ data: LlmUsageLog[] }> {
|
|
const data: LlmUsageLog[] = await this.llmUsageService.getUsageByModel(workspaceId, model);
|
|
return { data };
|
|
}
|
|
}
|