@adminforth/agent 2.5.1 → 2.5.3

package/dist/transport/http/chatSurfaceEndpoints.js

@@ -48,7 +48,7 @@ export function setupChatSurfaceEndpoints(ctx, server) {
                 incoming.metadata = Object.assign(Object.assign({}, incoming.metadata), { adminPublicOrigin: getRequestOrigin(endpointInput) });
                 const sink = yield adapter.createEventSink(surfaceContext, incoming);
                 try {
-                    yield ctx.handleChatSurfaceMessage(adapter, incoming, sink);
+                    yield ctx.handleChatSurfaceMessage(adapter, incoming, sink, endpointInput);
                 }
                 finally {
                     yield ((_a = sink.close) === null || _a === void 0 ? void 0 : _a.call(sink));

package/dist/transport/http/context.d.ts

@@ -1,4 +1,4 @@
-import type { ChatSurfaceAdapter, ChatSurfaceEventSink, ChatSurfaceIncomingMessage, IAdminForth } from "adminforth";
+import type { ChatSurfaceAdapter, ChatSurfaceEventSink, ChatSurfaceIncomingMessage, IAdminForth, IAdminForthEndpointHandlerInput } from "adminforth";
 import type { HandleEditTurnInput, HandleSpeechTurnInput, HandleTurnInput, RunAndPersistAgentResponseInput, RunAndPersistAgentResponseResult } from "../../domain/turnTypes.js";
 import type { PluginOptions } from "../../types.js";
 export type SessionTurn = {
@@ -24,7 +24,7 @@ export type AgentEndpointsContext = {
     createNewTurn(sessionId: string, prompt: string, response?: string): Promise<string>;
     createSystemTurn(sessionId: string, systemMessage: string): Promise<string>;
     appendSteerToCurrentTurn(sessionId: string, steerText: string): Promise<void>;
-    handleChatSurfaceMessage(adapter: ChatSurfaceAdapter, incoming: ChatSurfaceIncomingMessage, sink: ChatSurfaceEventSink): Promise<void>;
+    handleChatSurfaceMessage(adapter: ChatSurfaceAdapter, incoming: ChatSurfaceIncomingMessage, sink: ChatSurfaceEventSink, request: IAdminForthEndpointHandlerInput): Promise<void>;
 };
 export type CoreEndpointsContext = Pick<AgentEndpointsContext, "options" | "handleTurn" | "handleEditTurn" | "handleSpeechTurn" | "steer">;
 export type SessionEndpointsContext = Pick<AgentEndpointsContext, "adminforth" | "options" | "getSessionTurns" | "createNewTurn" | "createSystemTurn" | "appendSteerToCurrentTurn">;

package/dist/transport/surfaces/chatSurfaceService.d.ts

@@ -1,4 +1,4 @@
-import type { ChatSurfaceAdapter, ChatSurfaceEventSink, ChatSurfaceIncomingMessage, IAdminForth } from "adminforth";
+import type { ChatSurfaceAdapter, ChatSurfaceEventSink, ChatSurfaceIncomingMessage, IAdminForth, IAdminForthEndpointHandlerInput } from "adminforth";
 import type { HandleTurnInput, RunAndPersistAgentResponseInput, RunAndPersistAgentResponseResult } from "../../domain/turnTypes.js";
 import type { AgentSessionStore } from "../../persistence/sessionStore.js";
 import type { PluginOptions } from "../../types.js";
@@ -14,5 +14,6 @@ export declare class ChatSurfaceService {
     private handleAudioMessage;
     private handleAgentSurfaceResponse;
     private getAdminUserRecordForChatSurface;
-    handleMessage(adapter: ChatSurfaceAdapter, incoming: ChatSurfaceIncomingMessage, sink: ChatSurfaceEventSink): Promise<void>;
+    private isAdminUserAuthorized;
+    handleMessage(adapter: ChatSurfaceAdapter, incoming: ChatSurfaceIncomingMessage, sink: ChatSurfaceEventSink, request: IAdminForthEndpointHandlerInput): Promise<void>;
 }

package/dist/transport/surfaces/chatSurfaceService.js

@@ -214,7 +214,34 @@ export class ChatSurfaceService {
             ]);
         });
     }
-    handleMessage(adapter, incoming, sink) {
+    isAdminUserAuthorized(adminUser, incoming, request) {
+        return __awaiter(this, void 0, void 0, function* () {
+            const adminforth = this.getAdminforth();
+            const hooks = adminforth.config.auth.adminUserAuthorize;
+            const extra = {
+                body: request.body,
+                query: request.query,
+                headers: request.headers,
+                cookies: request.cookies,
+                requestUrl: request.requestUrl,
+                meta: { chatSurface: incoming.surface },
+                response: request.response,
+            };
+            for (const hook of hooks) {
+                const result = yield hook({
+                    adminUser,
+                    response: request.response,
+                    adminforth,
+                    extra,
+                });
+                if ((result === null || result === void 0 ? void 0 : result.allowed) === false || (result === null || result === void 0 ? void 0 : result.error)) {
+                    return false;
+                }
+            }
+            return true;
+        });
+    }
+    handleMessage(adapter, incoming, sink, request) {
         return __awaiter(this, void 0, void 0, function* () {
             if (yield this.handleLink(incoming, sink)) {
                 return;
@@ -236,6 +263,13 @@ export class ChatSurfaceService {
                 username: adminUserRecord[adminforth.config.auth.usernameField],
                 dbUser: adminUserRecord,
             };
+            if (!(yield this.isAdminUserAuthorized(adminUser, incoming, request))) {
+                yield sink.emit({
+                    type: "error",
+                    message: "This chat account is not authorized to use AdminForth Agent.",
+                });
+                return;
+            }
             const incomingWithAudio = incoming;
             if (incomingWithAudio.audio) {
                 yield this.handleAudioMessage(incomingWithAudio, sink, adminUser);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@adminforth/agent",
-  "version": "2.5.1",
+  "version": "2.5.3",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
   "type": "module",
@@ -10,6 +10,10 @@
     "LICENSE"
   ],
   "homepage": "https://adminforth.dev/docs/tutorial/Plugins/agent/",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/devforth/adminforth-agent.git"
+  },
   "publishConfig": {
     "access": "public"
   },