@librechat/data-schemas 0.0.43 → 0.0.44

package/dist/methods/accessRole.cjs

@@ -0,0 +1,210 @@
+'use strict';
+
+var librechatDataProvider = require('librechat-data-provider');
+var _enum = require('../common/enum.cjs');
+
+function createAccessRoleMethods(mongoose) {
+    /**
+     * Find an access role by its ID
+     * @param roleId - The role ID
+     * @returns The role document or null if not found
+     */
+    async function findRoleById(roleId) {
+        const AccessRole = mongoose.models.AccessRole;
+        return await AccessRole.findById(roleId).lean();
+    }
+    /**
+     * Find an access role by its unique identifier
+     * @param accessRoleId - The unique identifier (e.g., "agent_viewer")
+     * @returns The role document or null if not found
+     */
+    async function findRoleByIdentifier(accessRoleId) {
+        const AccessRole = mongoose.models.AccessRole;
+        return await AccessRole.findOne({ accessRoleId }).lean();
+    }
+    /**
+     * Find all access roles for a specific resource type
+     * @param resourceType - The type of resource ('agent', 'project', 'file')
+     * @returns Array of role documents
+     */
+    async function findRolesByResourceType(resourceType) {
+        const AccessRole = mongoose.models.AccessRole;
+        return await AccessRole.find({ resourceType }).lean();
+    }
+    /**
+     * Find an access role by resource type and permission bits
+     * @param resourceType - The type of resource
+     * @param permBits - The permission bits (use PermissionBits or RoleBits enum)
+     * @returns The role document or null if not found
+     */
+    async function findRoleByPermissions(resourceType, permBits) {
+        const AccessRole = mongoose.models.AccessRole;
+        return await AccessRole.findOne({ resourceType, permBits }).lean();
+    }
+    /**
+     * Create a new access role
+     * @param roleData - Role data (accessRoleId, name, description, resourceType, permBits)
+     * @returns The created role document
+     */
+    async function createRole(roleData) {
+        const AccessRole = mongoose.models.AccessRole;
+        return await AccessRole.create(roleData);
+    }
+    /**
+     * Update an existing access role
+     * @param accessRoleId - The unique identifier of the role to update
+     * @param updateData - Data to update
+     * @returns The updated role document or null if not found
+     */
+    async function updateRole(accessRoleId, updateData) {
+        const AccessRole = mongoose.models.AccessRole;
+        return await AccessRole.findOneAndUpdate({ accessRoleId }, { $set: updateData }, { new: true }).lean();
+    }
+    /**
+     * Delete an access role
+     * @param accessRoleId - The unique identifier of the role to delete
+     * @returns The result of the delete operation
+     */
+    async function deleteRole(accessRoleId) {
+        const AccessRole = mongoose.models.AccessRole;
+        return await AccessRole.deleteOne({ accessRoleId });
+    }
+    /**
+     * Get all predefined roles
+     * @returns Array of all role documents
+     */
+    async function getAllRoles() {
+        const AccessRole = mongoose.models.AccessRole;
+        return await AccessRole.find().lean();
+    }
+    /**
+     * Seed default roles if they don't exist
+     * @returns Object containing created roles
+     */
+    async function seedDefaultRoles() {
+        const AccessRole = mongoose.models.AccessRole;
+        const defaultRoles = [
+            {
+                accessRoleId: librechatDataProvider.AccessRoleIds.AGENT_VIEWER,
+                name: 'com_ui_role_viewer',
+                description: 'com_ui_role_viewer_desc',
+                resourceType: librechatDataProvider.ResourceType.AGENT,
+                permBits: _enum.RoleBits.VIEWER,
+            },
+            {
+                accessRoleId: librechatDataProvider.AccessRoleIds.AGENT_EDITOR,
+                name: 'com_ui_role_editor',
+                description: 'com_ui_role_editor_desc',
+                resourceType: librechatDataProvider.ResourceType.AGENT,
+                permBits: _enum.RoleBits.EDITOR,
+            },
+            {
+                accessRoleId: librechatDataProvider.AccessRoleIds.AGENT_OWNER,
+                name: 'com_ui_role_owner',
+                description: 'com_ui_role_owner_desc',
+                resourceType: librechatDataProvider.ResourceType.AGENT,
+                permBits: _enum.RoleBits.OWNER,
+            },
+            {
+                accessRoleId: librechatDataProvider.AccessRoleIds.PROMPTGROUP_VIEWER,
+                name: 'com_ui_role_viewer',
+                description: 'com_ui_role_viewer_desc',
+                resourceType: librechatDataProvider.ResourceType.PROMPTGROUP,
+                permBits: _enum.RoleBits.VIEWER,
+            },
+            {
+                accessRoleId: librechatDataProvider.AccessRoleIds.PROMPTGROUP_EDITOR,
+                name: 'com_ui_role_editor',
+                description: 'com_ui_role_editor_desc',
+                resourceType: librechatDataProvider.ResourceType.PROMPTGROUP,
+                permBits: _enum.RoleBits.EDITOR,
+            },
+            {
+                accessRoleId: librechatDataProvider.AccessRoleIds.PROMPTGROUP_OWNER,
+                name: 'com_ui_role_owner',
+                description: 'com_ui_role_owner_desc',
+                resourceType: librechatDataProvider.ResourceType.PROMPTGROUP,
+                permBits: _enum.RoleBits.OWNER,
+            },
+            {
+                accessRoleId: librechatDataProvider.AccessRoleIds.MCPSERVER_VIEWER,
+                name: 'com_ui_mcp_server_role_viewer',
+                description: 'com_ui_mcp_server_role_viewer_desc',
+                resourceType: librechatDataProvider.ResourceType.MCPSERVER,
+                permBits: _enum.RoleBits.VIEWER,
+            },
+            {
+                accessRoleId: librechatDataProvider.AccessRoleIds.MCPSERVER_EDITOR,
+                name: 'com_ui_mcp_server_role_editor',
+                description: 'com_ui_mcp_server_role_editor_desc',
+                resourceType: librechatDataProvider.ResourceType.MCPSERVER,
+                permBits: _enum.RoleBits.EDITOR,
+            },
+            {
+                accessRoleId: librechatDataProvider.AccessRoleIds.MCPSERVER_OWNER,
+                name: 'com_ui_mcp_server_role_owner',
+                description: 'com_ui_mcp_server_role_owner_desc',
+                resourceType: librechatDataProvider.ResourceType.MCPSERVER,
+                permBits: _enum.RoleBits.OWNER,
+            },
+            {
+                accessRoleId: librechatDataProvider.AccessRoleIds.REMOTE_AGENT_VIEWER,
+                name: 'com_ui_remote_agent_role_viewer',
+                description: 'com_ui_remote_agent_role_viewer_desc',
+                resourceType: librechatDataProvider.ResourceType.REMOTE_AGENT,
+                permBits: _enum.RoleBits.VIEWER,
+            },
+            {
+                accessRoleId: librechatDataProvider.AccessRoleIds.REMOTE_AGENT_EDITOR,
+                name: 'com_ui_remote_agent_role_editor',
+                description: 'com_ui_remote_agent_role_editor_desc',
+                resourceType: librechatDataProvider.ResourceType.REMOTE_AGENT,
+                permBits: _enum.RoleBits.EDITOR,
+            },
+            {
+                accessRoleId: librechatDataProvider.AccessRoleIds.REMOTE_AGENT_OWNER,
+                name: 'com_ui_remote_agent_role_owner',
+                description: 'com_ui_remote_agent_role_owner_desc',
+                resourceType: librechatDataProvider.ResourceType.REMOTE_AGENT,
+                permBits: _enum.RoleBits.OWNER,
+            },
+        ];
+        const result = {};
+        for (const role of defaultRoles) {
+            const upsertedRole = await AccessRole.findOneAndUpdate({ accessRoleId: role.accessRoleId }, { $setOnInsert: role }, { upsert: true, new: true }).lean();
+            result[role.accessRoleId] = upsertedRole;
+        }
+        return result;
+    }
+    /**
+     * Helper to get the appropriate role for a set of permissions
+     * @param resourceType - The type of resource
+     * @param permBits - The permission bits
+     * @returns The matching role or null if none found
+     */
+    async function getRoleForPermissions(resourceType, permBits) {
+        const AccessRole = mongoose.models.AccessRole;
+        const exactMatch = await AccessRole.findOne({ resourceType, permBits }).lean();
+        if (exactMatch) {
+            return exactMatch;
+        }
+        /** If no exact match, the closest role without exceeding permissions */
+        const roles = await AccessRole.find({ resourceType }).sort({ permBits: -1 }).lean();
+        return roles.find((role) => (role.permBits & permBits) === role.permBits) || null;
+    }
+    return {
+        createRole,
+        updateRole,
+        deleteRole,
+        getAllRoles,
+        findRoleById,
+        seedDefaultRoles,
+        findRoleByIdentifier,
+        getRoleForPermissions,
+        findRoleByPermissions,
+        findRolesByResourceType,
+    };
+}
+
+exports.createAccessRoleMethods = createAccessRoleMethods;
+//# sourceMappingURL=accessRole.cjs.map

package/dist/methods/accessRole.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"accessRole.cjs","sources":["../../src/methods/accessRole.ts"],"sourcesContent":[null],"names":["AccessRoleIds","ResourceType","RoleBits"],"mappings":";;;;;AAKM,SAAU,uBAAuB,CAAC,QAAmC,EAAA;AACzE;;;;AAIG;IACH,eAAe,YAAY,CAAC,MAA+B,EAAA;AACzD,QAAA,MAAM,UAAU,GAAG,QAAQ,CAAC,MAAM,CAAC,UAAgC;QACnE,OAAO,MAAM,UAAU,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE;IACjD;AAEA;;;;AAIG;IACH,eAAe,oBAAoB,CACjC,YAAqC,EAAA;AAErC,QAAA,MAAM,UAAU,GAAG,QAAQ,CAAC,MAAM,CAAC,UAAgC;AACnE,QAAA,OAAO,MAAM,UAAU,CAAC,OAAO,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,IAAI,EAAE;IAC1D;AAEA;;;;AAIG;IACH,eAAe,uBAAuB,CAAC,YAAoB,EAAA;AACzD,QAAA,MAAM,UAAU,GAAG,QAAQ,CAAC,MAAM,CAAC,UAAgC;AACnE,QAAA,OAAO,MAAM,UAAU,CAAC,IAAI,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,IAAI,EAAE;IACvD;AAEA;;;;;AAKG;AACH,IAAA,eAAe,qBAAqB,CAClC,YAAoB,EACpB,QAAmC,EAAA;AAEnC,QAAA,MAAM,UAAU,GAAG,QAAQ,CAAC,MAAM,CAAC,UAAgC;AACnE,QAAA,OAAO,MAAM,UAAU,CAAC,OAAO,CAAC,EAAE,YAAY,EAAE,QAAQ,EAAE,CAAC,CAAC,IAAI,EAAE;IACpE;AAEA;;;;AAIG;IACH,eAAe,UAAU,CAAC,QAA8B,EAAA;AACtD,QAAA,MAAM,UAAU,GAAG,QAAQ,CAAC,MAAM,CAAC,UAAgC;AACnE,QAAA,OAAO,MAAM,UAAU,CAAC,MAAM,CAAC,QAAQ,CAAC;IAC1C;AAEA;;;;;AAKG;AACH,IAAA,eAAe,UAAU,CACvB,YAAqC,EACrC,UAAgC,EAAA;AAEhC,QAAA,MAAM,UAAU,GAAG,QAAQ,CAAC,MAAM,CAAC,UAAgC;QACnE,OAAO,MAAM,UAAU,CAAC,gBAAgB,CACtC,EAAE,YAAY,EAAE,EAChB,EAAE,IAAI,EAAE,UAAU,EAAE,EACpB,EAAE,GAAG,EAAE,IAAI,EAAE,CACd,CAAC,IAAI,EAAE;IACV;AAEA;;;;AAIG;IACH,eAAe,UAAU,CAAC,YAAqC,EAAA;AAC7D,QAAA,MAAM,UAAU,GAAG,QAAQ,CAAC,MAAM,CAAC,UAAgC;QACnE,OAAO,MAAM,UAAU,CAAC,SAAS,CAAC,EAAE,YAAY,EAAE,CAAC;IACrD;AAEA;;;AAGG;AACH,IAAA,eAAe,WAAW,GAAA;AACxB,QAAA,MAAM,UAAU,GAAG,QAAQ,CAAC,MAAM,CAAC,UAAgC;QACnE,OAAO,MAAM,UAAU,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE;IACvC;AAEA;;;AAGG;AACH,IAAA,eAAe,gBAAgB,GAAA;AAC7B,QAAA,MAAM,UAAU,GAAG,QAAQ,CAAC,MAAM,CAAC,UAAgC;AACnE,QAAA,MAAM,YAAY,GAAG;AACnB,YAAA;gBACE,YAAY,EAAEA,mCAAa,CAAC,YAAY;AACxC,gBAAA,IAAI,EAAE,oBAAoB;AAC1B,gBAAA,WAAW,EAAE,yBAAyB;gBACtC,YAAY,EAAEC,kCAAY,CAAC,KAAK;gBAChC,QAAQ,EAAEC,cAAQ,CAAC,MAAM;AAC1B,aAAA;AACD,YAAA;gBACE,YAAY,EAAEF,mCAAa,CAAC,YAAY;AACxC,gBAAA,IAAI,EAAE,oBAAoB;AAC1B,gBAAA,WAAW,EAAE,yBAAyB;gBACtC,YAAY,EAAEC,kCAAY,CAAC,KAAK;gBAChC,QAAQ,EAAEC,cAAQ,CAAC,MAAM;AAC1B,aAAA;AACD,YAAA;gBACE,YAAY,EAAEF,mCAAa,CAAC,WAAW;AACvC,gBAAA,IAAI,EAAE,mBAAmB;AACzB,gBAAA,WAAW,EAAE,wBAAwB;gBACrC,YAAY,EAAEC,kCAAY,CAAC,KAAK;gBAChC,QAAQ,EAAEC,cAAQ,CAAC,KAAK;AACzB,aAAA;AACD,YAAA;gBACE,YAAY,EAAEF,mCAAa,CAAC,kBAAkB;AAC9C,gBAAA,IAAI,EAAE,oBAAoB;AAC1B,gBAAA,WAAW,EAAE,yBAAyB;gBACtC,YAAY,EAAEC,kCAAY,CAAC,WAAW;gBACtC,QAAQ,EAAEC,cAAQ,CAAC,MAAM;AAC1B,aAAA;AACD,YAAA;gBACE,YAAY,EAAEF,mCAAa,CAAC,kBAAkB;AAC9C,gBAAA,IAAI,EAAE,oBAAoB;AAC1B,gBAAA,WAAW,EAAE,yBAAyB;gBACtC,YAAY,EAAEC,kCAAY,CAAC,WAAW;gBACtC,QAAQ,EAAEC,cAAQ,CAAC,MAAM;AAC1B,aAAA;AACD,YAAA;gBACE,YAAY,EAAEF,mCAAa,CAAC,iBAAiB;AAC7C,gBAAA,IAAI,EAAE,mBAAmB;AACzB,gBAAA,WAAW,EAAE,wBAAwB;gBACrC,YAAY,EAAEC,kCAAY,CAAC,WAAW;gBACtC,QAAQ,EAAEC,cAAQ,CAAC,KAAK;AACzB,aAAA;AACD,YAAA;gBACE,YAAY,EAAEF,mCAAa,CAAC,gBAAgB;AAC5C,gBAAA,IAAI,EAAE,+BAA+B;AACrC,gBAAA,WAAW,EAAE,oCAAoC;gBACjD,YAAY,EAAEC,kCAAY,CAAC,SAAS;gBACpC,QAAQ,EAAEC,cAAQ,CAAC,MAAM;AAC1B,aAAA;AACD,YAAA;gBACE,YAAY,EAAEF,mCAAa,CAAC,gBAAgB;AAC5C,gBAAA,IAAI,EAAE,+BAA+B;AACrC,gBAAA,WAAW,EAAE,oCAAoC;gBACjD,YAAY,EAAEC,kCAAY,CAAC,SAAS;gBACpC,QAAQ,EAAEC,cAAQ,CAAC,MAAM;AAC1B,aAAA;AACD,YAAA;gBACE,YAAY,EAAEF,mCAAa,CAAC,eAAe;AAC3C,gBAAA,IAAI,EAAE,8BAA8B;AACpC,gBAAA,WAAW,EAAE,mCAAmC;gBAChD,YAAY,EAAEC,kCAAY,CAAC,SAAS;gBACpC,QAAQ,EAAEC,cAAQ,CAAC,KAAK;AACzB,aAAA;AACD,YAAA;gBACE,YAAY,EAAEF,mCAAa,CAAC,mBAAmB;AAC/C,gBAAA,IAAI,EAAE,iCAAiC;AACvC,gBAAA,WAAW,EAAE,sCAAsC;gBACnD,YAAY,EAAEC,kCAAY,CAAC,YAAY;gBACvC,QAAQ,EAAEC,cAAQ,CAAC,MAAM;AAC1B,aAAA;AACD,YAAA;gBACE,YAAY,EAAEF,mCAAa,CAAC,mBAAmB;AAC/C,gBAAA,IAAI,EAAE,iCAAiC;AACvC,gBAAA,WAAW,EAAE,sCAAsC;gBACnD,YAAY,EAAEC,kCAAY,CAAC,YAAY;gBACvC,QAAQ,EAAEC,cAAQ,CAAC,MAAM;AAC1B,aAAA;AACD,YAAA;gBACE,YAAY,EAAEF,mCAAa,CAAC,kBAAkB;AAC9C,gBAAA,IAAI,EAAE,gCAAgC;AACtC,gBAAA,WAAW,EAAE,qCAAqC;gBAClD,YAAY,EAAEC,kCAAY,CAAC,YAAY;gBACvC,QAAQ,EAAEC,cAAQ,CAAC,KAAK;AACzB,aAAA;SACF;QAED,MAAM,MAAM,GAAgC,EAAE;AAE9C,QAAA,KAAK,MAAM,IAAI,IAAI,YAAY,EAAE;AAC/B,YAAA,MAAM,YAAY,GAAG,MAAM,UAAU,CAAC,gBAAgB,CACpD,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,EACnC,EAAE,YAAY,EAAE,IAAI,EAAE,EACtB,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,CAC5B,CAAC,IAAI,EAAE;AAER,YAAA,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,YAAY;QAC1C;AAEA,QAAA,OAAO,MAAM;IACf;AAEA;;;;;AAKG;AACH,IAAA,eAAe,qBAAqB,CAClC,YAAoB,EACpB,QAAmC,EAAA;AAEnC,QAAA,MAAM,UAAU,GAAG,QAAQ,CAAC,MAAM,CAAC,UAAgC;AACnE,QAAA,MAAM,UAAU,GAAG,MAAM,UAAU,CAAC,OAAO,CAAC,EAAE,YAAY,EAAE,QAAQ,EAAE,CAAC,CAAC,IAAI,EAAE;QAC9E,IAAI,UAAU,EAAE;AACd,YAAA,OAAO,UAAU;QACnB;;QAGA,MAAM,KAAK,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE;QAEnF,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,QAAQ,GAAG,QAAQ,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,IAAI;IACnF;IAEA,OAAO;QACL,UAAU;QACV,UAAU;QACV,UAAU;QACV,WAAW;QACX,YAAY;QACZ,gBAAgB;QAChB,oBAAoB;QACpB,qBAAqB;QACrB,qBAAqB;QACrB,uBAAuB;KACxB;AACH;;;;"}

package/dist/methods/accessRole.es.js

@@ -0,0 +1,208 @@
+import { ResourceType, AccessRoleIds } from 'librechat-data-provider';
+import { RoleBits } from '../common/enum.es.js';
+
+function createAccessRoleMethods(mongoose) {
+    /**
+     * Find an access role by its ID
+     * @param roleId - The role ID
+     * @returns The role document or null if not found
+     */
+    async function findRoleById(roleId) {
+        const AccessRole = mongoose.models.AccessRole;
+        return await AccessRole.findById(roleId).lean();
+    }
+    /**
+     * Find an access role by its unique identifier
+     * @param accessRoleId - The unique identifier (e.g., "agent_viewer")
+     * @returns The role document or null if not found
+     */
+    async function findRoleByIdentifier(accessRoleId) {
+        const AccessRole = mongoose.models.AccessRole;
+        return await AccessRole.findOne({ accessRoleId }).lean();
+    }
+    /**
+     * Find all access roles for a specific resource type
+     * @param resourceType - The type of resource ('agent', 'project', 'file')
+     * @returns Array of role documents
+     */
+    async function findRolesByResourceType(resourceType) {
+        const AccessRole = mongoose.models.AccessRole;
+        return await AccessRole.find({ resourceType }).lean();
+    }
+    /**
+     * Find an access role by resource type and permission bits
+     * @param resourceType - The type of resource
+     * @param permBits - The permission bits (use PermissionBits or RoleBits enum)
+     * @returns The role document or null if not found
+     */
+    async function findRoleByPermissions(resourceType, permBits) {
+        const AccessRole = mongoose.models.AccessRole;
+        return await AccessRole.findOne({ resourceType, permBits }).lean();
+    }
+    /**
+     * Create a new access role
+     * @param roleData - Role data (accessRoleId, name, description, resourceType, permBits)
+     * @returns The created role document
+     */
+    async function createRole(roleData) {
+        const AccessRole = mongoose.models.AccessRole;
+        return await AccessRole.create(roleData);
+    }
+    /**
+     * Update an existing access role
+     * @param accessRoleId - The unique identifier of the role to update
+     * @param updateData - Data to update
+     * @returns The updated role document or null if not found
+     */
+    async function updateRole(accessRoleId, updateData) {
+        const AccessRole = mongoose.models.AccessRole;
+        return await AccessRole.findOneAndUpdate({ accessRoleId }, { $set: updateData }, { new: true }).lean();
+    }
+    /**
+     * Delete an access role
+     * @param accessRoleId - The unique identifier of the role to delete
+     * @returns The result of the delete operation
+     */
+    async function deleteRole(accessRoleId) {
+        const AccessRole = mongoose.models.AccessRole;
+        return await AccessRole.deleteOne({ accessRoleId });
+    }
+    /**
+     * Get all predefined roles
+     * @returns Array of all role documents
+     */
+    async function getAllRoles() {
+        const AccessRole = mongoose.models.AccessRole;
+        return await AccessRole.find().lean();
+    }
+    /**
+     * Seed default roles if they don't exist
+     * @returns Object containing created roles
+     */
+    async function seedDefaultRoles() {
+        const AccessRole = mongoose.models.AccessRole;
+        const defaultRoles = [
+            {
+                accessRoleId: AccessRoleIds.AGENT_VIEWER,
+                name: 'com_ui_role_viewer',
+                description: 'com_ui_role_viewer_desc',
+                resourceType: ResourceType.AGENT,
+                permBits: RoleBits.VIEWER,
+            },
+            {
+                accessRoleId: AccessRoleIds.AGENT_EDITOR,
+                name: 'com_ui_role_editor',
+                description: 'com_ui_role_editor_desc',
+                resourceType: ResourceType.AGENT,
+                permBits: RoleBits.EDITOR,
+            },
+            {
+                accessRoleId: AccessRoleIds.AGENT_OWNER,
+                name: 'com_ui_role_owner',
+                description: 'com_ui_role_owner_desc',
+                resourceType: ResourceType.AGENT,
+                permBits: RoleBits.OWNER,
+            },
+            {
+                accessRoleId: AccessRoleIds.PROMPTGROUP_VIEWER,
+                name: 'com_ui_role_viewer',
+                description: 'com_ui_role_viewer_desc',
+                resourceType: ResourceType.PROMPTGROUP,
+                permBits: RoleBits.VIEWER,
+            },
+            {
+                accessRoleId: AccessRoleIds.PROMPTGROUP_EDITOR,
+                name: 'com_ui_role_editor',
+                description: 'com_ui_role_editor_desc',
+                resourceType: ResourceType.PROMPTGROUP,
+                permBits: RoleBits.EDITOR,
+            },
+            {
+                accessRoleId: AccessRoleIds.PROMPTGROUP_OWNER,
+                name: 'com_ui_role_owner',
+                description: 'com_ui_role_owner_desc',
+                resourceType: ResourceType.PROMPTGROUP,
+                permBits: RoleBits.OWNER,
+            },
+            {
+                accessRoleId: AccessRoleIds.MCPSERVER_VIEWER,
+                name: 'com_ui_mcp_server_role_viewer',
+                description: 'com_ui_mcp_server_role_viewer_desc',
+                resourceType: ResourceType.MCPSERVER,
+                permBits: RoleBits.VIEWER,
+            },
+            {
+                accessRoleId: AccessRoleIds.MCPSERVER_EDITOR,
+                name: 'com_ui_mcp_server_role_editor',
+                description: 'com_ui_mcp_server_role_editor_desc',
+                resourceType: ResourceType.MCPSERVER,
+                permBits: RoleBits.EDITOR,
+            },
+            {
+                accessRoleId: AccessRoleIds.MCPSERVER_OWNER,
+                name: 'com_ui_mcp_server_role_owner',
+                description: 'com_ui_mcp_server_role_owner_desc',
+                resourceType: ResourceType.MCPSERVER,
+                permBits: RoleBits.OWNER,
+            },
+            {
+                accessRoleId: AccessRoleIds.REMOTE_AGENT_VIEWER,
+                name: 'com_ui_remote_agent_role_viewer',
+                description: 'com_ui_remote_agent_role_viewer_desc',
+                resourceType: ResourceType.REMOTE_AGENT,
+                permBits: RoleBits.VIEWER,
+            },
+            {
+                accessRoleId: AccessRoleIds.REMOTE_AGENT_EDITOR,
+                name: 'com_ui_remote_agent_role_editor',
+                description: 'com_ui_remote_agent_role_editor_desc',
+                resourceType: ResourceType.REMOTE_AGENT,
+                permBits: RoleBits.EDITOR,
+            },
+            {
+                accessRoleId: AccessRoleIds.REMOTE_AGENT_OWNER,
+                name: 'com_ui_remote_agent_role_owner',
+                description: 'com_ui_remote_agent_role_owner_desc',
+                resourceType: ResourceType.REMOTE_AGENT,
+                permBits: RoleBits.OWNER,
+            },
+        ];
+        const result = {};
+        for (const role of defaultRoles) {
+            const upsertedRole = await AccessRole.findOneAndUpdate({ accessRoleId: role.accessRoleId }, { $setOnInsert: role }, { upsert: true, new: true }).lean();
+            result[role.accessRoleId] = upsertedRole;
+        }
+        return result;
+    }
+    /**
+     * Helper to get the appropriate role for a set of permissions
+     * @param resourceType - The type of resource
+     * @param permBits - The permission bits
+     * @returns The matching role or null if none found
+     */
+    async function getRoleForPermissions(resourceType, permBits) {
+        const AccessRole = mongoose.models.AccessRole;
+        const exactMatch = await AccessRole.findOne({ resourceType, permBits }).lean();
+        if (exactMatch) {
+            return exactMatch;
+        }
+        /** If no exact match, the closest role without exceeding permissions */
+        const roles = await AccessRole.find({ resourceType }).sort({ permBits: -1 }).lean();
+        return roles.find((role) => (role.permBits & permBits) === role.permBits) || null;
+    }
+    return {
+        createRole,
+        updateRole,
+        deleteRole,
+        getAllRoles,
+        findRoleById,
+        seedDefaultRoles,
+        findRoleByIdentifier,
+        getRoleForPermissions,
+        findRoleByPermissions,
+        findRolesByResourceType,
+    };
+}
+
+export { createAccessRoleMethods };
+//# sourceMappingURL=accessRole.es.js.map

package/dist/methods/accessRole.es.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"accessRole.es.js","sources":["../../src/methods/accessRole.ts"],"sourcesContent":[null],"names":[],"mappings":";;;AAKM,SAAU,uBAAuB,CAAC,QAAmC,EAAA;AACzE;;;;AAIG;IACH,eAAe,YAAY,CAAC,MAA+B,EAAA;AACzD,QAAA,MAAM,UAAU,GAAG,QAAQ,CAAC,MAAM,CAAC,UAAgC;QACnE,OAAO,MAAM,UAAU,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE;IACjD;AAEA;;;;AAIG;IACH,eAAe,oBAAoB,CACjC,YAAqC,EAAA;AAErC,QAAA,MAAM,UAAU,GAAG,QAAQ,CAAC,MAAM,CAAC,UAAgC;AACnE,QAAA,OAAO,MAAM,UAAU,CAAC,OAAO,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,IAAI,EAAE;IAC1D;AAEA;;;;AAIG;IACH,eAAe,uBAAuB,CAAC,YAAoB,EAAA;AACzD,QAAA,MAAM,UAAU,GAAG,QAAQ,CAAC,MAAM,CAAC,UAAgC;AACnE,QAAA,OAAO,MAAM,UAAU,CAAC,IAAI,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,IAAI,EAAE;IACvD;AAEA;;;;;AAKG;AACH,IAAA,eAAe,qBAAqB,CAClC,YAAoB,EACpB,QAAmC,EAAA;AAEnC,QAAA,MAAM,UAAU,GAAG,QAAQ,CAAC,MAAM,CAAC,UAAgC;AACnE,QAAA,OAAO,MAAM,UAAU,CAAC,OAAO,CAAC,EAAE,YAAY,EAAE,QAAQ,EAAE,CAAC,CAAC,IAAI,EAAE;IACpE;AAEA;;;;AAIG;IACH,eAAe,UAAU,CAAC,QAA8B,EAAA;AACtD,QAAA,MAAM,UAAU,GAAG,QAAQ,CAAC,MAAM,CAAC,UAAgC;AACnE,QAAA,OAAO,MAAM,UAAU,CAAC,MAAM,CAAC,QAAQ,CAAC;IAC1C;AAEA;;;;;AAKG;AACH,IAAA,eAAe,UAAU,CACvB,YAAqC,EACrC,UAAgC,EAAA;AAEhC,QAAA,MAAM,UAAU,GAAG,QAAQ,CAAC,MAAM,CAAC,UAAgC;QACnE,OAAO,MAAM,UAAU,CAAC,gBAAgB,CACtC,EAAE,YAAY,EAAE,EAChB,EAAE,IAAI,EAAE,UAAU,EAAE,EACpB,EAAE,GAAG,EAAE,IAAI,EAAE,CACd,CAAC,IAAI,EAAE;IACV;AAEA;;;;AAIG;IACH,eAAe,UAAU,CAAC,YAAqC,EAAA;AAC7D,QAAA,MAAM,UAAU,GAAG,QAAQ,CAAC,MAAM,CAAC,UAAgC;QACnE,OAAO,MAAM,UAAU,CAAC,SAAS,CAAC,EAAE,YAAY,EAAE,CAAC;IACrD;AAEA;;;AAGG;AACH,IAAA,eAAe,WAAW,GAAA;AACxB,QAAA,MAAM,UAAU,GAAG,QAAQ,CAAC,MAAM,CAAC,UAAgC;QACnE,OAAO,MAAM,UAAU,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE;IACvC;AAEA;;;AAGG;AACH,IAAA,eAAe,gBAAgB,GAAA;AAC7B,QAAA,MAAM,UAAU,GAAG,QAAQ,CAAC,MAAM,CAAC,UAAgC;AACnE,QAAA,MAAM,YAAY,GAAG;AACnB,YAAA;gBACE,YAAY,EAAE,aAAa,CAAC,YAAY;AACxC,gBAAA,IAAI,EAAE,oBAAoB;AAC1B,gBAAA,WAAW,EAAE,yBAAyB;gBACtC,YAAY,EAAE,YAAY,CAAC,KAAK;gBAChC,QAAQ,EAAE,QAAQ,CAAC,MAAM;AAC1B,aAAA;AACD,YAAA;gBACE,YAAY,EAAE,aAAa,CAAC,YAAY;AACxC,gBAAA,IAAI,EAAE,oBAAoB;AAC1B,gBAAA,WAAW,EAAE,yBAAyB;gBACtC,YAAY,EAAE,YAAY,CAAC,KAAK;gBAChC,QAAQ,EAAE,QAAQ,CAAC,MAAM;AAC1B,aAAA;AACD,YAAA;gBACE,YAAY,EAAE,aAAa,CAAC,WAAW;AACvC,gBAAA,IAAI,EAAE,mBAAmB;AACzB,gBAAA,WAAW,EAAE,wBAAwB;gBACrC,YAAY,EAAE,YAAY,CAAC,KAAK;gBAChC,QAAQ,EAAE,QAAQ,CAAC,KAAK;AACzB,aAAA;AACD,YAAA;gBACE,YAAY,EAAE,aAAa,CAAC,kBAAkB;AAC9C,gBAAA,IAAI,EAAE,oBAAoB;AAC1B,gBAAA,WAAW,EAAE,yBAAyB;gBACtC,YAAY,EAAE,YAAY,CAAC,WAAW;gBACtC,QAAQ,EAAE,QAAQ,CAAC,MAAM;AAC1B,aAAA;AACD,YAAA;gBACE,YAAY,EAAE,aAAa,CAAC,kBAAkB;AAC9C,gBAAA,IAAI,EAAE,oBAAoB;AAC1B,gBAAA,WAAW,EAAE,yBAAyB;gBACtC,YAAY,EAAE,YAAY,CAAC,WAAW;gBACtC,QAAQ,EAAE,QAAQ,CAAC,MAAM;AAC1B,aAAA;AACD,YAAA;gBACE,YAAY,EAAE,aAAa,CAAC,iBAAiB;AAC7C,gBAAA,IAAI,EAAE,mBAAmB;AACzB,gBAAA,WAAW,EAAE,wBAAwB;gBACrC,YAAY,EAAE,YAAY,CAAC,WAAW;gBACtC,QAAQ,EAAE,QAAQ,CAAC,KAAK;AACzB,aAAA;AACD,YAAA;gBACE,YAAY,EAAE,aAAa,CAAC,gBAAgB;AAC5C,gBAAA,IAAI,EAAE,+BAA+B;AACrC,gBAAA,WAAW,EAAE,oCAAoC;gBACjD,YAAY,EAAE,YAAY,CAAC,SAAS;gBACpC,QAAQ,EAAE,QAAQ,CAAC,MAAM;AAC1B,aAAA;AACD,YAAA;gBACE,YAAY,EAAE,aAAa,CAAC,gBAAgB;AAC5C,gBAAA,IAAI,EAAE,+BAA+B;AACrC,gBAAA,WAAW,EAAE,oCAAoC;gBACjD,YAAY,EAAE,YAAY,CAAC,SAAS;gBACpC,QAAQ,EAAE,QAAQ,CAAC,MAAM;AAC1B,aAAA;AACD,YAAA;gBACE,YAAY,EAAE,aAAa,CAAC,eAAe;AAC3C,gBAAA,IAAI,EAAE,8BAA8B;AACpC,gBAAA,WAAW,EAAE,mCAAmC;gBAChD,YAAY,EAAE,YAAY,CAAC,SAAS;gBACpC,QAAQ,EAAE,QAAQ,CAAC,KAAK;AACzB,aAAA;AACD,YAAA;gBACE,YAAY,EAAE,aAAa,CAAC,mBAAmB;AAC/C,gBAAA,IAAI,EAAE,iCAAiC;AACvC,gBAAA,WAAW,EAAE,sCAAsC;gBACnD,YAAY,EAAE,YAAY,CAAC,YAAY;gBACvC,QAAQ,EAAE,QAAQ,CAAC,MAAM;AAC1B,aAAA;AACD,YAAA;gBACE,YAAY,EAAE,aAAa,CAAC,mBAAmB;AAC/C,gBAAA,IAAI,EAAE,iCAAiC;AACvC,gBAAA,WAAW,EAAE,sCAAsC;gBACnD,YAAY,EAAE,YAAY,CAAC,YAAY;gBACvC,QAAQ,EAAE,QAAQ,CAAC,MAAM;AAC1B,aAAA;AACD,YAAA;gBACE,YAAY,EAAE,aAAa,CAAC,kBAAkB;AAC9C,gBAAA,IAAI,EAAE,gCAAgC;AACtC,gBAAA,WAAW,EAAE,qCAAqC;gBAClD,YAAY,EAAE,YAAY,CAAC,YAAY;gBACvC,QAAQ,EAAE,QAAQ,CAAC,KAAK;AACzB,aAAA;SACF;QAED,MAAM,MAAM,GAAgC,EAAE;AAE9C,QAAA,KAAK,MAAM,IAAI,IAAI,YAAY,EAAE;AAC/B,YAAA,MAAM,YAAY,GAAG,MAAM,UAAU,CAAC,gBAAgB,CACpD,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,EACnC,EAAE,YAAY,EAAE,IAAI,EAAE,EACtB,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,CAC5B,CAAC,IAAI,EAAE;AAER,YAAA,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,YAAY;QAC1C;AAEA,QAAA,OAAO,MAAM;IACf;AAEA;;;;;AAKG;AACH,IAAA,eAAe,qBAAqB,CAClC,YAAoB,EACpB,QAAmC,EAAA;AAEnC,QAAA,MAAM,UAAU,GAAG,QAAQ,CAAC,MAAM,CAAC,UAAgC;AACnE,QAAA,MAAM,UAAU,GAAG,MAAM,UAAU,CAAC,OAAO,CAAC,EAAE,YAAY,EAAE,QAAQ,EAAE,CAAC,CAAC,IAAI,EAAE;QAC9E,IAAI,UAAU,EAAE;AACd,YAAA,OAAO,UAAU;QACnB;;QAGA,MAAM,KAAK,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE;QAEnF,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,QAAQ,GAAG,QAAQ,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,IAAI;IACnF;IAEA,OAAO;QACL,UAAU;QACV,UAAU;QACV,UAAU;QACV,WAAW;QACX,YAAY;QACZ,gBAAgB;QAChB,oBAAoB;QACpB,qBAAqB;QACrB,qBAAqB;QACrB,uBAAuB;KACxB;AACH;;;;"}