fix(netflow): проверять ответы настроек и подтверждения операций

shared/api/traffic-flow.ts

@@ -11,35 +11,41 @@ import type {
   TrafficFlowSettingsDto,
   TrafficFlowSettingsPatch,
 } from "@mmapp/contracts/traffic-flow"
+import { z } from "zod"
+import { trafficFlowSettingsDtoSchema, trafficFlowSettingsPatchSchema, trafficFlowHostFileSchema, flowPurgeDtoSchema } from "@mmapp/contracts/traffic-flow"
 import { requestJson } from "@/shared/api/http-client"
 
 export type { TrafficFlowHostFile }
 
-export async function getTrafficFlowSettings(baseUrl: string): Promise<TrafficFlowSettingsDto> {
-  return requestJson<TrafficFlowSettingsDto>(baseUrl, "/api/traffic/flow/settings")
+const flowSettingsSchema = trafficFlowSettingsDtoSchema.extend({ flowListenPort: z.number().int().min(1).max(65535), wgListenPort: z.number().int().min(1).max(65535) }).refine(data => (!data.hasHostPrivateKey || data.hostPublicKey.length > 0) && (!data.listenerBound || !!data.listenerAddress) && (data.lastDatagramAt === null || Number.isFinite(Date.parse(data.lastDatagramAt))) && new Set(data.peers.map(peer => peer.serverId)).size === data.peers.length, "Несогласованные настройки NetFlow")
+const flowPatchSchema = trafficFlowSettingsPatchSchema.extend({ flowListenPort: z.number().int().min(1).max(65535).optional(), wgListenPort: z.number().int().min(1).max(65535).optional() }).strict()
+function flowConfirmed<T>(schema: z.ZodType<T>, raw: unknown): T {
+  const parsed = schema.safeParse(raw)
+  if (!parsed.success) throw new Error("Данные NetFlow не подтверждены: получен некорректный ответ сервера")
+  return parsed.data
 }
-
-export async function putTrafficFlowSettings(
-  baseUrl: string,
-  patch: TrafficFlowSettingsPatch,
-): Promise<{ ok: boolean; settings: TrafficFlowSettingsDto }> {
-  return requestJson(baseUrl, "/api/traffic/flow/settings", {
-    method: "PUT",
-    body: JSON.stringify(patch),
-  })
+function flowJson(baseUrl: string, path: string, init?: RequestInit) {
+  return requestJson<unknown>(baseUrl, path, { ...init, signal: AbortSignal.any([...(init?.signal ? [init.signal] : []), AbortSignal.timeout(30_000)]) })
 }
-
-export async function generateTrafficFlowKeys(baseUrl: string): Promise<{
-  ok: boolean
-  created: boolean
-  publicKey: string
-  settings: TrafficFlowSettingsDto
-}> {
-  return requestJson(baseUrl, "/api/traffic/flow/settings/generate-keys", { method: "POST" })
+export async function getTrafficFlowSettings(baseUrl: string, init?: RequestInit): Promise<TrafficFlowSettingsDto> {
+  return flowConfirmed(flowSettingsSchema, await flowJson(baseUrl, "/api/traffic/flow/settings", { ...init, method: "GET" }))
 }
-
-export async function getTrafficFlowHostFiles(baseUrl: string): Promise<{ files: TrafficFlowHostFile[] }> {
-  return requestJson(baseUrl, "/api/traffic/flow/host-files")
+export async function putTrafficFlowSettings(baseUrl: string, patch: TrafficFlowSettingsPatch, init?: RequestInit) {
+  const valid = flowPatchSchema.safeParse(patch)
+  if (!valid.success || !Object.values(valid.data).some(value => value !== undefined)) throw new Error("Укажите допустимые настройки NetFlow")
+  const body = valid.data
+  const response = flowConfirmed(z.object({ ok: z.literal(true), settings: flowSettingsSchema, listenerError: z.string().optional() }), await flowJson(baseUrl, "/api/traffic/flow/settings", { ...init, method: "PUT", body: JSON.stringify(body) }))
+  if (Object.entries(body).some(([field, value]) => value !== undefined && (response.settings as Record<string, unknown>)[field] !== value)) throw new Error("Сохранение NetFlow не подтверждено: сервер вернул другие настройки")
+  return response
+}
+export async function generateTrafficFlowKeys(baseUrl: string, init?: RequestInit) {
+  const schema = z.object({ ok: z.literal(true), created: z.boolean(), publicKey: z.string().min(1), settings: flowSettingsSchema }).refine(data => data.settings.hasHostPrivateKey && data.publicKey === data.settings.hostPublicKey)
+  return flowConfirmed(schema, await flowJson(baseUrl, "/api/traffic/flow/settings/generate-keys", { ...init, method: "POST" }))
+}
+export async function getTrafficFlowHostFiles(baseUrl: string, init?: RequestInit): Promise<{ files: TrafficFlowHostFile[] }> {
+  const file = trafficFlowHostFileSchema.extend({ id: z.string().min(1), label: z.string().min(1), filename: z.string().min(1).refine(name => !/[\\/\r\n]/.test(name)), code: z.string().min(1) })
+  const schema = z.object({ files: z.array(file).min(1).refine(files => new Set(files.map(item => item.id)).size === files.length && new Set(files.map(item => item.filename)).size === files.length) })
+  return flowConfirmed(schema, await flowJson(baseUrl, "/api/traffic/flow/host-files", { ...init, method: "GET" }))
 }
 
 export async function applyTrafficFlowOverlay(
@@ -142,8 +148,8 @@ export async function getFlowMonthly(
   return requestJson<FlowMonthlyDto>(baseUrl, `/api/traffic/flow/monthly?${q.toString()}`)
 }
 
-export async function purgeTrafficFlowData(baseUrl: string): Promise<FlowPurgeDto> {
-  return requestJson<FlowPurgeDto>(baseUrl, "/api/traffic/flow/purge", { method: "POST" })
+export async function purgeTrafficFlowData(baseUrl: string, init?: RequestInit): Promise<FlowPurgeDto> {
+  return flowConfirmed(flowPurgeDtoSchema, await flowJson(baseUrl, "/api/traffic/flow/purge", { ...init, method: "POST" }))
 }
 
 export async function rebuildTrafficFlowFacts(baseUrl: string): Promise<{