@exulu/backend 1.10.0 → 1.11.0

package/CHANGELOG.md

@@ -1,10 +1,9 @@
-# [1.10.0](https://github.com/Qventu/exulu-backend/compare/v1.9.0...v1.10.0) (2025-08-14)
+# [1.11.0](https://github.com/Qventu/exulu-backend/compare/v1.10.0...v1.11.0) (2025-08-14)
 
 
 ### Features
 
-* add workflows schema, endpoints and automate conversion of objects to json when inserting ([bff31bd](https://github.com/Qventu/exulu-backend/commit/bff31bdac8906bdd2a71bb7c293d5d44bd6c1b7b))
-* added new role based access logic ([e098a03](https://github.com/Qventu/exulu-backend/commit/e098a0369b169e0dbcf3c6f1bc7480a8e343f082))
+* changed playground to chat and added role to agent sessions ([b2ff1c9](https://github.com/Qventu/exulu-backend/commit/b2ff1c9dfea7f5aa6fe31a19a41f4bfddbc1bb67))
 
 # [1.1.0](https://github.com/Qventu/exulu-backend/compare/v1.0.1...v1.1.0) (2025-07-30)
 

package/dist/index.cjs

@@ -2752,6 +2752,10 @@ var agentSessionsSchema = {
       // next auth stores users with id type SERIAL, so we need to use number
       type: "number"
     },
+    {
+      name: "role",
+      type: "uuid"
+    },
     {
       name: "title",
       type: "text"
@@ -2855,7 +2859,7 @@ var rolesSchema = {
     }
   ]
 };
-var statisticsSchema = {
+var statisticsSchema2 = {
   name: {
     plural: "statistics",
     singular: "statistic"
@@ -3193,7 +3197,7 @@ var coreSchemas = {
       agentSessionsSchema: () => addRBACfields(agentSessionsSchema),
       usersSchema: () => addRBACfields(usersSchema),
       rolesSchema: () => addRBACfields(rolesSchema),
-      statisticsSchema: () => addRBACfields(statisticsSchema),
+      statisticsSchema: () => addRBACfields(statisticsSchema2),
       workflowSchema: () => addRBACfields(workflowSchema),
       evalResultsSchema: () => addRBACfields(evalResultsSchema),
       jobsSchema: () => addRBACfields(jobsSchema),
@@ -3751,6 +3755,7 @@ var createExpressRoutes = async (app, agents, tools, workflows, contexts) => {
       agentMessagesSchema2(),
       variablesSchema2(),
       workflowTemplatesSchema2(),
+      statisticsSchema(),
       rbacSchema2()
     ]
   );
@@ -4728,9 +4733,11 @@ var createExpressRoutes = async (app, agents, tools, workflows, contexts) => {
         return;
       }
       const { db: db3 } = await postgresClient();
-      const agent = await db3.from("agents").where({
-        id: req.params.id
-      }).first();
+      let query = db3("agents");
+      query.select("*");
+      query = applyAccessControl(agentsSchema2(), authenticationResult.user, query);
+      query.where({ id: req.params.id });
+      const agent = await query.first();
       if (!agent) {
         const arrayBuffer = createCustomAnthropicStreamingMessage(`
 \x1B[41m -- Agent ${req.params.id} not found or you do not have access to it. --
@@ -6647,7 +6654,7 @@ var generateApiKey = async (name, email) => {
 };
 
 // src/postgres/init-db.ts
-var { agentsSchema: agentsSchema3, evalResultsSchema: evalResultsSchema3, jobsSchema: jobsSchema3, agentSessionsSchema: agentSessionsSchema3, agentMessagesSchema: agentMessagesSchema3, rolesSchema: rolesSchema3, usersSchema: usersSchema3, statisticsSchema: statisticsSchema2, variablesSchema: variablesSchema3, workflowTemplatesSchema: workflowTemplatesSchema3, rbacSchema: rbacSchema3 } = coreSchemas.get();
+var { agentsSchema: agentsSchema3, evalResultsSchema: evalResultsSchema3, jobsSchema: jobsSchema3, agentSessionsSchema: agentSessionsSchema3, agentMessagesSchema: agentMessagesSchema3, rolesSchema: rolesSchema3, usersSchema: usersSchema3, statisticsSchema: statisticsSchema3, variablesSchema: variablesSchema3, workflowTemplatesSchema: workflowTemplatesSchema3, rbacSchema: rbacSchema3 } = coreSchemas.get();
 var addMissingFields = async (knex, tableName, fields, skipFields = []) => {
   for (const field of fields) {
     const { type, name, default: defaultValue, unique } = field;
@@ -6675,7 +6682,7 @@ var up = async function(knex) {
     agentMessagesSchema3(),
     rolesSchema3(),
     evalResultsSchema3(),
-    statisticsSchema2(),
+    statisticsSchema3(),
     jobsSchema3(),
     rbacSchema3(),
     agentsSchema3(),

package/dist/index.js

@@ -2709,6 +2709,10 @@ var agentSessionsSchema = {
       // next auth stores users with id type SERIAL, so we need to use number
       type: "number"
     },
+    {
+      name: "role",
+      type: "uuid"
+    },
     {
       name: "title",
       type: "text"
@@ -2812,7 +2816,7 @@ var rolesSchema = {
     }
   ]
 };
-var statisticsSchema = {
+var statisticsSchema2 = {
   name: {
     plural: "statistics",
     singular: "statistic"
@@ -3150,7 +3154,7 @@ var coreSchemas = {
       agentSessionsSchema: () => addRBACfields(agentSessionsSchema),
       usersSchema: () => addRBACfields(usersSchema),
       rolesSchema: () => addRBACfields(rolesSchema),
-      statisticsSchema: () => addRBACfields(statisticsSchema),
+      statisticsSchema: () => addRBACfields(statisticsSchema2),
       workflowSchema: () => addRBACfields(workflowSchema),
       evalResultsSchema: () => addRBACfields(evalResultsSchema),
       jobsSchema: () => addRBACfields(jobsSchema),
@@ -3708,6 +3712,7 @@ var createExpressRoutes = async (app, agents, tools, workflows, contexts) => {
       agentMessagesSchema2(),
       variablesSchema2(),
       workflowTemplatesSchema2(),
+      statisticsSchema(),
       rbacSchema2()
     ]
   );
@@ -4685,9 +4690,11 @@ var createExpressRoutes = async (app, agents, tools, workflows, contexts) => {
         return;
       }
       const { db: db3 } = await postgresClient();
-      const agent = await db3.from("agents").where({
-        id: req.params.id
-      }).first();
+      let query = db3("agents");
+      query.select("*");
+      query = applyAccessControl(agentsSchema2(), authenticationResult.user, query);
+      query.where({ id: req.params.id });
+      const agent = await query.first();
       if (!agent) {
         const arrayBuffer = createCustomAnthropicStreamingMessage(`
 \x1B[41m -- Agent ${req.params.id} not found or you do not have access to it. --
@@ -6604,7 +6611,7 @@ var generateApiKey = async (name, email) => {
 };
 
 // src/postgres/init-db.ts
-var { agentsSchema: agentsSchema3, evalResultsSchema: evalResultsSchema3, jobsSchema: jobsSchema3, agentSessionsSchema: agentSessionsSchema3, agentMessagesSchema: agentMessagesSchema3, rolesSchema: rolesSchema3, usersSchema: usersSchema3, statisticsSchema: statisticsSchema2, variablesSchema: variablesSchema3, workflowTemplatesSchema: workflowTemplatesSchema3, rbacSchema: rbacSchema3 } = coreSchemas.get();
+var { agentsSchema: agentsSchema3, evalResultsSchema: evalResultsSchema3, jobsSchema: jobsSchema3, agentSessionsSchema: agentSessionsSchema3, agentMessagesSchema: agentMessagesSchema3, rolesSchema: rolesSchema3, usersSchema: usersSchema3, statisticsSchema: statisticsSchema3, variablesSchema: variablesSchema3, workflowTemplatesSchema: workflowTemplatesSchema3, rbacSchema: rbacSchema3 } = coreSchemas.get();
 var addMissingFields = async (knex, tableName, fields, skipFields = []) => {
   for (const field of fields) {
     const { type, name, default: defaultValue, unique } = field;
@@ -6632,7 +6639,7 @@ var up = async function(knex) {
     agentMessagesSchema3(),
     rolesSchema3(),
     evalResultsSchema3(),
-    statisticsSchema2(),
+    statisticsSchema3(),
     jobsSchema3(),
     rbacSchema3(),
     agentsSchema3(),

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@exulu/backend",
   "author": "Qventu Bv.",
-  "version": "1.10.0",
+  "version": "1.11.0",
   "main": "./dist/index.js",
   "private": false,
   "publishConfig": {