constants.ts · Source

constants.tspackages/shared/src/constants.tsraw ← src5,623 B← Back to the app
1/**
2 * @factory/shared — platform-wide limits and shared constants.
3 *
4 * Single source of truth for limits so that DTOs, validators and the frontend
5 * agree on what is legal. Values trace back to PRODUCT-SPEC §26 (performance)
6 * and the individual feature specs.
7 */
8 
9export const LIMITS = {
10  /** Max operations in one block batch request (PRODUCT-SPEC: batch ops). */
11  MAX_BLOCK_BATCH: 500,
12  /** Max page title length (chars). */
13  MAX_PAGE_TITLE: 200,
14  /** Max workspace name length. */
15  MAX_WORKSPACE_NAME: 50,
16  /** Max comment body length (chars). */
17  MAX_COMMENT: 20_000,
18  /** Max comment body min length. */
19  MIN_COMMENT: 1,
20  /** Max file upload size: 500 MB (bytes). */
21  MAX_FILE_SIZE: 500 * 1024 * 1024,
22  /** Max number of records per page-sized query. */
23  MAX_RECORDS_PER_PAGE: 200,
24  /** Max search result page size. */
25  MAX_SEARCH_LIMIT: 50,
26  /** Max password length (bcrypt only handles 72 bytes — keep below). */
27  MAX_PASSWORD: 72,
28  /** Min password length (policy: 10, letter + number). */
29  MIN_PASSWORD: 10,
30  /** Max slug length. */
31  MAX_SLUG: 50,
32  /** Max text stored per single block (protects against pathological blocks). */
33  MAX_BLOCK_TEXT: 100_000,
34  /** Fractional positions longer than this trigger a rebalance (see positions.ts). */
35  MAX_POSITION_LENGTH: 64,
36  /** Max child blocks under one parent before virtualization kicks in. */
37  MAX_INLINE_CHILDREN: 1000,
38  /** Max records materialized client-side by the query engine (Phase 5). */
39  MAX_CLIENT_SIDE_ROWS: 5000,
40} as const;
41 
42export const TOKEN_LIFETIMES = {
43  /** Access JWT lifetime: 15 minutes (SECURITY.md / .env.example JWT_EXPIRES_IN). */
44  ACCESS_TOKEN: "15m",
45  ACCESS_TOKEN_MS: 15 * 60 * 1000,
46  /** Refresh token lifetime: 30 days (.env.example REFRESH_TOKEN_TTL_DAYS). */
47  REFRESH_TOKEN_MS: 30 * 24 * 60 * 60 * 1000,
48  /** Password reset token: 1 hour, single use. */
49  PASSWORD_RESET_MS: 60 * 60 * 1000,
50  /** Email verification token: 24 hours. */
51  EMAIL_VERIFY_MS: 24 * 60 * 60 * 1000,
52  /** Invitation expiry: 7 days. */
53  INVITATION_MS: 7 * 24 * 60 * 60 * 1000,
54  /** Signed storage URL max lifetime. */
55  PRESET_URL_MS: 15 * 60 * 1000,
56} as const;
57 
58export const RATE_LIMITS = {
59  /** Default sliding window (ms) — .env.example RATE_LIMIT_WINDOW_MS. */
60  WINDOW_MS: 60_000,
61  /** Default requests per window — .env.example RATE_LIMIT_MAX. */
62  MAX: 300,
63  /** Stricter limits for auth endpoints. */
64  AUTH: { WINDOW_MS: 60_000, MAX: 20 },
65  /** Login attempts: 10 per 15 min per email+IP. */
66  LOGIN: { WINDOW_MS: 15 * 60 * 1000, MAX: 10 },
67  /** Password reset requests: 5 per hour per email. */
68  PASSWORD_RESET: { WINDOW_MS: 60 * 60 * 1000, MAX: 5 },
69  /** AI endpoints are budget-gated; this is the coarse per-minute cap. */
70  AI: { WINDOW_MS: 60_000, MAX: 30 },
71} as const;
72 
73export const BCRYPT_ROUNDS_DEFAULT = 12;
74 
75export const ID_PREFIXES = {
76  user: "usr",
77  workspace: "wsp",
78  team: "tms",
79  page: "pg",
80  block: "blk",
81  database: "db",
82  databaseProperty: "dprop",
83  databaseView: "dview",
84  record: "rec",
85  recordProperty: "rprop",
86  comment: "cmt",
87  file: "file",
88  share: "shr",
89  template: "tpl",
90  automation: "auto",
91  webhook: "wh",
92  apiKey: "key",
93  notification: "ntf",
94  session: "ses",
95  refreshToken: "rt",
96} as const;
97 
98/**
99 * Block text/background color palette — the 18 Notion-like colors:
100 * 9 text hues (gray, brown, orange, yellow, green, blue, purple, pink, red)
101 * and 9 matching backgrounds (`*_bg`). "default" means "no color" and is not
102 * part of the palette itself.
103 *
104 * The UI maps `token` to a CSS variable (`--factory-color-red`,
105 * `--factory-color-red_bg`, …) per PRODUCT-SPEC §27 ("design tokens, no
106 * hard-coded colors").
107 */
108export interface BlockColor {
109  /** Stable id used in block `properties.color` / `properties.backgroundColor`. */
110  name: string;
111  /** Suffix of the CSS custom property, e.g. "red" → `--factory-color-red`. */
112  token: string;
113  /** Default (light theme) hex for previews/SSR fallback. */
114  hex: string;
115  /** Whether this swatch is a background (else a text color). */
116  background: boolean;
117}
118 
119const text = (name: string, hex: string): BlockColor => ({
120  name,
121  token: name,
122  hex,
123  background: false,
124});
125const bg = (name: string, hex: string): BlockColor => ({
126  name,
127  token: `${name}_bg`,
128  hex,
129  background: true,
130});
131 
132export const BLOCK_COLORS: readonly BlockColor[] = [
133  text("gray", "#787774"),
134  text("brown", "#9f6b53"),
135  text("orange", "#d9730d"),
136  text("yellow", "#cb912f"),
137  text("green", "#448361"),
138  text("blue", "#337ea9"),
139  text("purple", "#9065b0"),
140  text("pink", "#c14c8a"),
141  text("red", "#d44c47"),
142  bg("gray", "#f1f1ef"),
143  bg("brown", "#f7e9e7"),
144  bg("orange", "#fbecdd"),
145  bg("yellow", "#fdf3d0"),
146  bg("green", "#edf3ec"),
147  bg("blue", "#e7f0f6"),
148  bg("purple", "#f1edf7"),
149  bg("pink", "#faedf3"),
150  bg("red", "#fdebec"),
151] as const;
152 
153/** Default background for status pills (Notion status colors). */
154export const STATUS_COLORS: readonly string[] = [
155  "gray",
156  "brown",
157  "orange",
158  "yellow",
159  "green",
160  "blue",
161  "purple",
162  "pink",
163  "red",
164] as const;
165 
166/** Default view density options. */
167export const DENSITIES = ["cozy", "default", "compact"] as const;
168export type Density = (typeof DENSITIES)[number];
169 
170/** Supported block `properties.color` values for text blocks. */
171export const TEXT_COLOR_NAMES = BLOCK_COLORS.filter((c) => !c.token.endsWith("_bg")).map(
172  (c) => c.name,
173) as readonly string[];
174 
175/** Supported block `properties.backgroundColor` values. */
176export const BACKGROUND_COLOR_NAMES = ["default", ...STATUS_COLORS] as readonly string[];
177