@librechat/data-schemas 0.0.43 → 0.0.44

package/dist/methods/aclEntry.es.js

@@ -0,0 +1,359 @@
+import { Types } from 'mongoose';
+import { PermissionBits, PrincipalType, PrincipalModel } from 'librechat-data-provider';
+
+function createAclEntryMethods(mongoose) {
+    /**
+     * Find ACL entries for a specific principal (user or group)
+     * @param principalType - The type of principal ('user', 'group')
+     * @param principalId - The ID of the principal
+     * @param resourceType - Optional filter by resource type
+     * @returns Array of ACL entries
+     */
+    async function findEntriesByPrincipal(principalType, principalId, resourceType) {
+        const AclEntry = mongoose.models.AclEntry;
+        const query = { principalType, principalId };
+        if (resourceType) {
+            query.resourceType = resourceType;
+        }
+        return await AclEntry.find(query).lean();
+    }
+    /**
+     * Find ACL entries for a specific resource
+     * @param resourceType - The type of resource ('agent', 'project', 'file')
+     * @param resourceId - The ID of the resource
+     * @returns Array of ACL entries
+     */
+    async function findEntriesByResource(resourceType, resourceId) {
+        const AclEntry = mongoose.models.AclEntry;
+        return await AclEntry.find({ resourceType, resourceId }).lean();
+    }
+    /**
+     * Find all ACL entries for a set of principals (including public)
+     * @param principalsList - List of principals, each containing { principalType, principalId }
+     * @param resourceType - The type of resource
+     * @param resourceId - The ID of the resource
+     * @returns Array of matching ACL entries
+     */
+    async function findEntriesByPrincipalsAndResource(principalsList, resourceType, resourceId) {
+        const AclEntry = mongoose.models.AclEntry;
+        const principalsQuery = principalsList.map((p) => ({
+            principalType: p.principalType,
+            ...(p.principalType !== PrincipalType.PUBLIC && { principalId: p.principalId }),
+        }));
+        return await AclEntry.find({
+            $or: principalsQuery,
+            resourceType,
+            resourceId,
+        }).lean();
+    }
+    /**
+     * Check if a set of principals has a specific permission on a resource
+     * @param principalsList - List of principals, each containing { principalType, principalId }
+     * @param resourceType - The type of resource
+     * @param resourceId - The ID of the resource
+     * @param permissionBit - The permission bit to check (use PermissionBits enum)
+     * @returns Whether any of the principals has the permission
+     */
+    async function hasPermission(principalsList, resourceType, resourceId, permissionBit) {
+        const AclEntry = mongoose.models.AclEntry;
+        const principalsQuery = principalsList.map((p) => ({
+            principalType: p.principalType,
+            ...(p.principalType !== PrincipalType.PUBLIC && { principalId: p.principalId }),
+        }));
+        const entry = await AclEntry.findOne({
+            $or: principalsQuery,
+            resourceType,
+            resourceId,
+            permBits: { $bitsAllSet: permissionBit },
+        }).lean();
+        return !!entry;
+    }
+    /**
+     * Get the combined effective permissions for a set of principals on a resource
+     * @param principalsList - List of principals, each containing { principalType, principalId }
+     * @param resourceType - The type of resource
+     * @param resourceId - The ID of the resource
+     * @returns {Promise<number>} Effective permission bitmask
+     */
+    async function getEffectivePermissions(principalsList, resourceType, resourceId) {
+        const aclEntries = await findEntriesByPrincipalsAndResource(principalsList, resourceType, resourceId);
+        let effectiveBits = 0;
+        for (const entry of aclEntries) {
+            effectiveBits |= entry.permBits;
+        }
+        return effectiveBits;
+    }
+    /**
+     * Get effective permissions for multiple resources in a single query (BATCH)
+     * Returns a map of resourceId → effectivePermissionBits
+     *
+     * @param principalsList - List of principals (user + groups + public)
+     * @param resourceType - The type of resource ('MCPSERVER', 'AGENT', etc.)
+     * @param resourceIds - Array of resource IDs to check
+     * @returns {Promise<Map<string, number>>} Map of resourceId → permission bits
+     *
+     * @example
+     * const principals = await getUserPrincipals({ userId, role });
+     * const serverIds = [id1, id2, id3];
+     * const permMap = await getEffectivePermissionsForResources(
+     *   principals,
+     *   ResourceType.MCPSERVER,
+     *   serverIds
+     * );
+     * // permMap.get(id1.toString()) → 7 (VIEW|EDIT|DELETE)
+     */
+    async function getEffectivePermissionsForResources(principalsList, resourceType, resourceIds) {
+        if (!Array.isArray(resourceIds) || resourceIds.length === 0) {
+            return new Map();
+        }
+        const AclEntry = mongoose.models.AclEntry;
+        const principalsQuery = principalsList.map((p) => ({
+            principalType: p.principalType,
+            ...(p.principalType !== PrincipalType.PUBLIC && { principalId: p.principalId }),
+        }));
+        // Batch query for all resources at once
+        const aclEntries = await AclEntry.find({
+            $or: principalsQuery,
+            resourceType,
+            resourceId: { $in: resourceIds },
+        }).lean();
+        // Compute effective permissions per resource
+        const permissionsMap = new Map();
+        for (const entry of aclEntries) {
+            const rid = entry.resourceId.toString();
+            const currentBits = permissionsMap.get(rid) || 0;
+            permissionsMap.set(rid, currentBits | entry.permBits);
+        }
+        return permissionsMap;
+    }
+    /**
+     * Grant permission to a principal for a resource
+     * @param principalType - The type of principal ('user', 'group', 'public')
+     * @param principalId - The ID of the principal (null for 'public')
+     * @param resourceType - The type of resource
+     * @param resourceId - The ID of the resource
+     * @param permBits - The permission bits to grant
+     * @param grantedBy - The ID of the user granting the permission
+     * @param session - Optional MongoDB session for transactions
+     * @param roleId - Optional role ID to associate with this permission
+     * @returns The created or updated ACL entry
+     */
+    async function grantPermission(principalType, principalId, resourceType, resourceId, permBits, grantedBy, session, roleId) {
+        const AclEntry = mongoose.models.AclEntry;
+        const query = {
+            principalType,
+            resourceType,
+            resourceId,
+        };
+        if (principalType !== PrincipalType.PUBLIC) {
+            query.principalId =
+                typeof principalId === 'string' && principalType !== PrincipalType.ROLE
+                    ? new Types.ObjectId(principalId)
+                    : principalId;
+            if (principalType === PrincipalType.USER) {
+                query.principalModel = PrincipalModel.USER;
+            }
+            else if (principalType === PrincipalType.GROUP) {
+                query.principalModel = PrincipalModel.GROUP;
+            }
+            else if (principalType === PrincipalType.ROLE) {
+                query.principalModel = PrincipalModel.ROLE;
+            }
+        }
+        const update = {
+            $set: {
+                permBits,
+                grantedBy,
+                grantedAt: new Date(),
+                ...(roleId && { roleId }),
+            },
+        };
+        const options = {
+            upsert: true,
+            new: true,
+            ...(session ? { session } : {}),
+        };
+        return await AclEntry.findOneAndUpdate(query, update, options);
+    }
+    /**
+     * Revoke permissions from a principal for a resource
+     * @param principalType - The type of principal ('user', 'group', 'public')
+     * @param principalId - The ID of the principal (null for 'public')
+     * @param resourceType - The type of resource
+     * @param resourceId - The ID of the resource
+     * @param session - Optional MongoDB session for transactions
+     * @returns The result of the delete operation
+     */
+    async function revokePermission(principalType, principalId, resourceType, resourceId, session) {
+        const AclEntry = mongoose.models.AclEntry;
+        const query = {
+            principalType,
+            resourceType,
+            resourceId,
+        };
+        if (principalType !== PrincipalType.PUBLIC) {
+            query.principalId =
+                typeof principalId === 'string' && principalType !== PrincipalType.ROLE
+                    ? new Types.ObjectId(principalId)
+                    : principalId;
+        }
+        const options = session ? { session } : {};
+        return await AclEntry.deleteOne(query, options);
+    }
+    /**
+     * Modify existing permission bits for a principal on a resource
+     * @param principalType - The type of principal ('user', 'group', 'public')
+     * @param principalId - The ID of the principal (null for 'public')
+     * @param resourceType - The type of resource
+     * @param resourceId - The ID of the resource
+     * @param addBits - Permission bits to add
+     * @param removeBits - Permission bits to remove
+     * @param session - Optional MongoDB session for transactions
+     * @returns The updated ACL entry
+     */
+    async function modifyPermissionBits(principalType, principalId, resourceType, resourceId, addBits, removeBits, session) {
+        const AclEntry = mongoose.models.AclEntry;
+        const query = {
+            principalType,
+            resourceType,
+            resourceId,
+        };
+        if (principalType !== PrincipalType.PUBLIC) {
+            query.principalId =
+                typeof principalId === 'string' && principalType !== PrincipalType.ROLE
+                    ? new Types.ObjectId(principalId)
+                    : principalId;
+        }
+        const update = {};
+        if (addBits) {
+            update.$bit = { permBits: { or: addBits } };
+        }
+        if (removeBits) {
+            if (!update.$bit) {
+                update.$bit = {};
+            }
+            const bitUpdate = update.$bit;
+            bitUpdate.permBits = { ...bitUpdate.permBits, and: ~removeBits };
+        }
+        const options = {
+            new: true,
+            ...(session ? { session } : {}),
+        };
+        return await AclEntry.findOneAndUpdate(query, update, options);
+    }
+    /**
+     * Find all resources of a specific type that a set of principals has access to
+     * @param principalsList - List of principals, each containing { principalType, principalId }
+     * @param resourceType - The type of resource
+     * @param requiredPermBit - Required permission bit (use PermissionBits enum)
+     * @returns Array of resource IDs
+     */
+    async function findAccessibleResources(principalsList, resourceType, requiredPermBit) {
+        const AclEntry = mongoose.models.AclEntry;
+        const principalsQuery = principalsList.map((p) => ({
+            principalType: p.principalType,
+            ...(p.principalType !== PrincipalType.PUBLIC && { principalId: p.principalId }),
+        }));
+        const entries = await AclEntry.find({
+            $or: principalsQuery,
+            resourceType,
+            permBits: { $bitsAllSet: requiredPermBit },
+        }).distinct('resourceId');
+        return entries;
+    }
+    /**
+     * Deletes ACL entries matching the given filter.
+     * @param filter - MongoDB filter query
+     * @param options - Optional query options (e.g., { session })
+     */
+    async function deleteAclEntries(filter, options) {
+        const AclEntry = mongoose.models.AclEntry;
+        return AclEntry.deleteMany(filter, options || {});
+    }
+    /**
+     * Performs a bulk write operation on ACL entries.
+     * @param ops - Array of bulk write operations
+     * @param options - Optional query options (e.g., { session })
+     */
+    async function bulkWriteAclEntries(ops, options) {
+        const AclEntry = mongoose.models.AclEntry;
+        return AclEntry.bulkWrite(ops, options || {});
+    }
+    /**
+     * Finds all publicly accessible resource IDs for a given resource type.
+     * @param resourceType - The type of resource
+     * @param requiredPermissions - Required permission bits
+     */
+    async function findPublicResourceIds(resourceType, requiredPermissions) {
+        const AclEntry = mongoose.models.AclEntry;
+        return AclEntry.find({
+            principalType: PrincipalType.PUBLIC,
+            resourceType,
+            permBits: { $bitsAllSet: requiredPermissions },
+        }).distinct('resourceId');
+    }
+    /**
+     * Runs an aggregation pipeline on the AclEntry collection.
+     * @param pipeline - MongoDB aggregation pipeline stages
+     */
+    async function aggregateAclEntries(pipeline) {
+        const AclEntry = mongoose.models.AclEntry;
+        return AclEntry.aggregate(pipeline);
+    }
+    /**
+     * Returns resource IDs solely owned by the given user (no other principals
+     * hold DELETE on the same resource). Handles both single and array resource types.
+     */
+    async function getSoleOwnedResourceIds(userObjectId, resourceTypes) {
+        const AclEntry = mongoose.models.AclEntry;
+        const types = Array.isArray(resourceTypes) ? resourceTypes : [resourceTypes];
+        const ownedEntries = await AclEntry.find({
+            principalType: PrincipalType.USER,
+            principalId: userObjectId,
+            resourceType: { $in: types },
+            permBits: { $bitsAllSet: PermissionBits.DELETE },
+        })
+            .select('resourceId')
+            .lean();
+        if (ownedEntries.length === 0) {
+            return [];
+        }
+        const ownedIds = ownedEntries.map((e) => e.resourceId);
+        const otherOwners = await AclEntry.aggregate([
+            {
+                $match: {
+                    resourceType: { $in: types },
+                    resourceId: { $in: ownedIds },
+                    permBits: { $bitsAllSet: PermissionBits.DELETE },
+                    $or: [
+                        { principalId: { $ne: userObjectId } },
+                        { principalType: { $ne: PrincipalType.USER } },
+                    ],
+                },
+            },
+            { $group: { _id: '$resourceId' } },
+        ]);
+        const multiOwnerIds = new Set(otherOwners.map((doc) => doc._id.toString()));
+        return ownedIds.filter((id) => !multiOwnerIds.has(id.toString()));
+    }
+    return {
+        findEntriesByPrincipal,
+        findEntriesByResource,
+        findEntriesByPrincipalsAndResource,
+        hasPermission,
+        getEffectivePermissions,
+        getEffectivePermissionsForResources,
+        grantPermission,
+        revokePermission,
+        modifyPermissionBits,
+        findAccessibleResources,
+        deleteAclEntries,
+        bulkWriteAclEntries,
+        findPublicResourceIds,
+        aggregateAclEntries,
+        getSoleOwnedResourceIds,
+    };
+}
+
+export { createAclEntryMethods };
+//# sourceMappingURL=aclEntry.es.js.map

package/dist/methods/aclEntry.es.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"aclEntry.es.js","sources":["../../src/methods/aclEntry.ts"],"sourcesContent":[null],"names":[],"mappings":";;;AAWM,SAAU,qBAAqB,CAAC,QAAmC,EAAA;AACvE;;;;;;AAMG;AACH,IAAA,eAAe,sBAAsB,CACnC,aAAqB,EACrB,WAAoC,EACpC,YAAqB,EAAA;AAErB,QAAA,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,QAA4B;AAC7D,QAAA,MAAM,KAAK,GAA4B,EAAE,aAAa,EAAE,WAAW,EAAE;QACrE,IAAI,YAAY,EAAE;AAChB,YAAA,KAAK,CAAC,YAAY,GAAG,YAAY;QACnC;QACA,OAAO,MAAM,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE;IAC1C;AAEA;;;;;AAKG;AACH,IAAA,eAAe,qBAAqB,CAClC,YAAoB,EACpB,UAAmC,EAAA;AAEnC,QAAA,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,QAA4B;AAC7D,QAAA,OAAO,MAAM,QAAQ,CAAC,IAAI,CAAC,EAAE,YAAY,EAAE,UAAU,EAAE,CAAC,CAAC,IAAI,EAAE;IACjE;AAEA;;;;;;AAMG;AACH,IAAA,eAAe,kCAAkC,CAC/C,cAAuF,EACvF,YAAoB,EACpB,UAAmC,EAAA;AAEnC,QAAA,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,QAA4B;QAC7D,MAAM,eAAe,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM;YACjD,aAAa,EAAE,CAAC,CAAC,aAAa;AAC9B,YAAA,IAAI,CAAC,CAAC,aAAa,KAAK,aAAa,CAAC,MAAM,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;AAChF,SAAA,CAAC,CAAC;AAEH,QAAA,OAAO,MAAM,QAAQ,CAAC,IAAI,CAAC;AACzB,YAAA,GAAG,EAAE,eAAe;YACpB,YAAY;YACZ,UAAU;SACX,CAAC,CAAC,IAAI,EAAE;IACX;AAEA;;;;;;;AAOG;IACH,eAAe,aAAa,CAC1B,cAAuF,EACvF,YAAoB,EACpB,UAAmC,EACnC,aAAqB,EAAA;AAErB,QAAA,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,QAA4B;QAC7D,MAAM,eAAe,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM;YACjD,aAAa,EAAE,CAAC,CAAC,aAAa;AAC9B,YAAA,IAAI,CAAC,CAAC,aAAa,KAAK,aAAa,CAAC,MAAM,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;AAChF,SAAA,CAAC,CAAC;AAEH,QAAA,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC;AACnC,YAAA,GAAG,EAAE,eAAe;YACpB,YAAY;YACZ,UAAU;AACV,YAAA,QAAQ,EAAE,EAAE,WAAW,EAAE,aAAa,EAAE;SACzC,CAAC,CAAC,IAAI,EAAE;QAET,OAAO,CAAC,CAAC,KAAK;IAChB;AAEA;;;;;;AAMG;AACH,IAAA,eAAe,uBAAuB,CACpC,cAAuF,EACvF,YAAoB,EACpB,UAAmC,EAAA;QAEnC,MAAM,UAAU,GAAG,MAAM,kCAAkC,CACzD,cAAc,EACd,YAAY,EACZ,UAAU,CACX;QAED,IAAI,aAAa,GAAG,CAAC;AACrB,QAAA,KAAK,MAAM,KAAK,IAAI,UAAU,EAAE;AAC9B,YAAA,aAAa,IAAI,KAAK,CAAC,QAAQ;QACjC;AACA,QAAA,OAAO,aAAa;IACtB;AAEA;;;;;;;;;;;;;;;;;;AAkBG;AACH,IAAA,eAAe,mCAAmC,CAChD,cAAuF,EACvF,YAAoB,EACpB,WAA2C,EAAA;AAE3C,QAAA,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE;YAC3D,OAAO,IAAI,GAAG,EAAE;QAClB;AAEA,QAAA,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,QAA4B;QAC7D,MAAM,eAAe,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM;YACjD,aAAa,EAAE,CAAC,CAAC,aAAa;AAC9B,YAAA,IAAI,CAAC,CAAC,aAAa,KAAK,aAAa,CAAC,MAAM,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;AAChF,SAAA,CAAC,CAAC;;AAGH,QAAA,MAAM,UAAU,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC;AACrC,YAAA,GAAG,EAAE,eAAe;YACpB,YAAY;AACZ,YAAA,UAAU,EAAE,EAAE,GAAG,EAAE,WAAW,EAAE;SACjC,CAAC,CAAC,IAAI,EAAE;;AAGT,QAAA,MAAM,cAAc,GAAG,IAAI,GAAG,EAAkB;AAChD,QAAA,KAAK,MAAM,KAAK,IAAI,UAAU,EAAE;YAC9B,MAAM,GAAG,GAAG,KAAK,CAAC,UAAU,CAAC,QAAQ,EAAE;YACvC,MAAM,WAAW,GAAG,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC;YAChD,cAAc,CAAC,GAAG,CAAC,GAAG,EAAE,WAAW,GAAG,KAAK,CAAC,QAAQ,CAAC;QACvD;AAEA,QAAA,OAAO,cAAc;IACvB;AAEA;;;;;;;;;;;AAWG;AACH,IAAA,eAAe,eAAe,CAC5B,aAAqB,EACrB,WAA2C,EAC3C,YAAoB,EACpB,UAAmC,EACnC,QAAgB,EAChB,SAAkC,EAClC,OAAuB,EACvB,MAAgC,EAAA;AAEhC,QAAA,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,QAA4B;AAC7D,QAAA,MAAM,KAAK,GAA4B;YACrC,aAAa;YACb,YAAY;YACZ,UAAU;SACX;AAED,QAAA,IAAI,aAAa,KAAK,aAAa,CAAC,MAAM,EAAE;AAC1C,YAAA,KAAK,CAAC,WAAW;gBACf,OAAO,WAAW,KAAK,QAAQ,IAAI,aAAa,KAAK,aAAa,CAAC;AACjE,sBAAE,IAAI,KAAK,CAAC,QAAQ,CAAC,WAAW;sBAC9B,WAAW;AACjB,YAAA,IAAI,aAAa,KAAK,aAAa,CAAC,IAAI,EAAE;AACxC,gBAAA,KAAK,CAAC,cAAc,GAAG,cAAc,CAAC,IAAI;YAC5C;AAAO,iBAAA,IAAI,aAAa,KAAK,aAAa,CAAC,KAAK,EAAE;AAChD,gBAAA,KAAK,CAAC,cAAc,GAAG,cAAc,CAAC,KAAK;YAC7C;AAAO,iBAAA,IAAI,aAAa,KAAK,aAAa,CAAC,IAAI,EAAE;AAC/C,gBAAA,KAAK,CAAC,cAAc,GAAG,cAAc,CAAC,IAAI;YAC5C;QACF;AAEA,QAAA,MAAM,MAAM,GAAG;AACb,YAAA,IAAI,EAAE;gBACJ,QAAQ;gBACR,SAAS;gBACT,SAAS,EAAE,IAAI,IAAI,EAAE;AACrB,gBAAA,IAAI,MAAM,IAAI,EAAE,MAAM,EAAE,CAAC;AAC1B,aAAA;SACF;AAED,QAAA,MAAM,OAAO,GAAG;AACd,YAAA,MAAM,EAAE,IAAI;AACZ,YAAA,GAAG,EAAE,IAAI;AACT,YAAA,IAAI,OAAO,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC;SAChC;QAED,OAAO,MAAM,QAAQ,CAAC,gBAAgB,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC;IAChE;AAEA;;;;;;;;AAQG;IACH,eAAe,gBAAgB,CAC7B,aAAqB,EACrB,WAA2C,EAC3C,YAAoB,EACpB,UAAmC,EACnC,OAAuB,EAAA;AAEvB,QAAA,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,QAA4B;AAC7D,QAAA,MAAM,KAAK,GAA4B;YACrC,aAAa;YACb,YAAY;YACZ,UAAU;SACX;AAED,QAAA,IAAI,aAAa,KAAK,aAAa,CAAC,MAAM,EAAE;AAC1C,YAAA,KAAK,CAAC,WAAW;gBACf,OAAO,WAAW,KAAK,QAAQ,IAAI,aAAa,KAAK,aAAa,CAAC;AACjE,sBAAE,IAAI,KAAK,CAAC,QAAQ,CAAC,WAAW;sBAC9B,WAAW;QACnB;AAEA,QAAA,MAAM,OAAO,GAAG,OAAO,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE;QAE1C,OAAO,MAAM,QAAQ,CAAC,SAAS,CAAC,KAAK,EAAE,OAAO,CAAC;IACjD;AAEA;;;;;;;;;;AAUG;AACH,IAAA,eAAe,oBAAoB,CACjC,aAAqB,EACrB,WAA2C,EAC3C,YAAoB,EACpB,UAAmC,EACnC,OAAuB,EACvB,UAA0B,EAC1B,OAAuB,EAAA;AAEvB,QAAA,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,QAA4B;AAC7D,QAAA,MAAM,KAAK,GAA4B;YACrC,aAAa;YACb,YAAY;YACZ,UAAU;SACX;AAED,QAAA,IAAI,aAAa,KAAK,aAAa,CAAC,MAAM,EAAE;AAC1C,YAAA,KAAK,CAAC,WAAW;gBACf,OAAO,WAAW,KAAK,QAAQ,IAAI,aAAa,KAAK,aAAa,CAAC;AACjE,sBAAE,IAAI,KAAK,CAAC,QAAQ,CAAC,WAAW;sBAC9B,WAAW;QACnB;QAEA,MAAM,MAAM,GAA4B,EAAE;QAE1C,IAAI,OAAO,EAAE;AACX,YAAA,MAAM,CAAC,IAAI,GAAG,EAAE,QAAQ,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE;QAC7C;QAEA,IAAI,UAAU,EAAE;AACd,YAAA,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE;AAChB,gBAAA,MAAM,CAAC,IAAI,GAAG,EAAE;YAClB;AACA,YAAA,MAAM,SAAS,GAAG,MAAM,CAAC,IAA+B;AACxD,YAAA,SAAS,CAAC,QAAQ,GAAG,EAAE,GAAI,SAAS,CAAC,QAAoC,EAAE,GAAG,EAAE,CAAC,UAAU,EAAE;QAC/F;AAEA,QAAA,MAAM,OAAO,GAAG;AACd,YAAA,GAAG,EAAE,IAAI;AACT,YAAA,IAAI,OAAO,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC;SAChC;QAED,OAAO,MAAM,QAAQ,CAAC,gBAAgB,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC;IAChE;AAEA;;;;;;AAMG;AACH,IAAA,eAAe,uBAAuB,CACpC,cAAuF,EACvF,YAAoB,EACpB,eAAuB,EAAA;AAEvB,QAAA,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,QAA4B;QAC7D,MAAM,eAAe,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM;YACjD,aAAa,EAAE,CAAC,CAAC,aAAa;AAC9B,YAAA,IAAI,CAAC,CAAC,aAAa,KAAK,aAAa,CAAC,MAAM,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;AAChF,SAAA,CAAC,CAAC;AAEH,QAAA,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC;AAClC,YAAA,GAAG,EAAE,eAAe;YACpB,YAAY;AACZ,YAAA,QAAQ,EAAE,EAAE,WAAW,EAAE,eAAe,EAAE;AAC3C,SAAA,CAAC,CAAC,QAAQ,CAAC,YAAY,CAAC;AAEzB,QAAA,OAAO,OAAO;IAChB;AAEA;;;;AAIG;AACH,IAAA,eAAe,gBAAgB,CAC7B,MAA+B,EAC/B,OAAqC,EAAA;AAErC,QAAA,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,QAA4B;QAC7D,OAAO,QAAQ,CAAC,UAAU,CAAC,MAAM,EAAE,OAAO,IAAI,EAAE,CAAC;IACnD;AAEA;;;;AAIG;AACH,IAAA,eAAe,mBAAmB,CAChC,GAAuC,EACvC,OAAqC,EAAA;AAErC,QAAA,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,QAA4B;QAC7D,OAAO,QAAQ,CAAC,SAAS,CAAC,GAAG,EAAE,OAAO,IAAI,EAAE,CAAC;IAC/C;AAEA;;;;AAIG;AACH,IAAA,eAAe,qBAAqB,CAClC,YAAoB,EACpB,mBAA2B,EAAA;AAE3B,QAAA,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,QAA4B;QAC7D,OAAO,QAAQ,CAAC,IAAI,CAAC;YACnB,aAAa,EAAE,aAAa,CAAC,MAAM;YACnC,YAAY;AACZ,YAAA,QAAQ,EAAE,EAAE,WAAW,EAAE,mBAAmB,EAAE;AAC/C,SAAA,CAAC,CAAC,QAAQ,CAAC,YAAY,CAAC;IAC3B;AAEA;;;AAGG;IACH,eAAe,mBAAmB,CAAC,QAAyB,EAAA;AAC1D,QAAA,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,QAA4B;AAC7D,QAAA,OAAO,QAAQ,CAAC,SAAS,CAAC,QAAQ,CAAC;IACrC;AAEA;;;AAGG;AACH,IAAA,eAAe,uBAAuB,CACpC,YAA4B,EAC5B,aAAgC,EAAA;AAEhC,QAAA,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,QAA4B;AAC7D,QAAA,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,GAAG,aAAa,GAAG,CAAC,aAAa,CAAC;AAE5E,QAAA,MAAM,YAAY,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC;YACvC,aAAa,EAAE,aAAa,CAAC,IAAI;AACjC,YAAA,WAAW,EAAE,YAAY;AACzB,YAAA,YAAY,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE;AAC5B,YAAA,QAAQ,EAAE,EAAE,WAAW,EAAE,cAAc,CAAC,MAAM,EAAE;SACjD;aACE,MAAM,CAAC,YAAY;AACnB,aAAA,IAAI,EAAE;AAET,QAAA,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE;AAC7B,YAAA,OAAO,EAAE;QACX;AAEA,QAAA,MAAM,QAAQ,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,UAAU,CAAC;AAEtD,QAAA,MAAM,WAAW,GAAG,MAAM,QAAQ,CAAC,SAAS,CAAC;AAC3C,YAAA;AACE,gBAAA,MAAM,EAAE;AACN,oBAAA,YAAY,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE;AAC5B,oBAAA,UAAU,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE;AAC7B,oBAAA,QAAQ,EAAE,EAAE,WAAW,EAAE,cAAc,CAAC,MAAM,EAAE;AAChD,oBAAA,GAAG,EAAE;AACH,wBAAA,EAAE,WAAW,EAAE,EAAE,GAAG,EAAE,YAAY,EAAE,EAAE;wBACtC,EAAE,aAAa,EAAE,EAAE,GAAG,EAAE,aAAa,CAAC,IAAI,EAAE,EAAE;AAC/C,qBAAA;AACF,iBAAA;AACF,aAAA;AACD,YAAA,EAAE,MAAM,EAAE,EAAE,GAAG,EAAE,aAAa,EAAE,EAAE;AACnC,SAAA,CAAC;QAEF,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,GAA4B,KAAK,GAAG,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;QACpG,OAAO,QAAQ,CAAC,MAAM,CAAC,CAAC,EAAE,KAAK,CAAC,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC,QAAQ,EAAE,CAAC,CAAC;IACnE;IAEA,OAAO;QACL,sBAAsB;QACtB,qBAAqB;QACrB,kCAAkC;QAClC,aAAa;QACb,uBAAuB;QACvB,mCAAmC;QACnC,eAAe;QACf,gBAAgB;QAChB,oBAAoB;QACpB,uBAAuB;QACvB,gBAAgB;QAChB,mBAAmB;QACnB,qBAAqB;QACrB,mBAAmB;QACnB,uBAAuB;KACxB;AACH;;;;"}

package/dist/methods/action.cjs

@@ -0,0 +1,59 @@
+'use strict';
+
+const sensitiveFields = ['api_key', 'oauth_client_id', 'oauth_client_secret'];
+function createActionMethods(mongoose) {
+    /**
+     * Update an action with new data without overwriting existing properties,
+     * or create a new action if it doesn't exist.
+     */
+    async function updateAction(searchParams, updateData) {
+        const Action = mongoose.models.Action;
+        const options = { new: true, upsert: true };
+        return (await Action.findOneAndUpdate(searchParams, updateData, options).lean());
+    }
+    /**
+     * Retrieves all actions that match the given search parameters.
+     */
+    async function getActions(searchParams, includeSensitive = false) {
+        const Action = mongoose.models.Action;
+        const actions = (await Action.find(searchParams).lean());
+        if (!includeSensitive) {
+            for (let i = 0; i < actions.length; i++) {
+                const metadata = actions[i].metadata;
+                if (!metadata) {
+                    continue;
+                }
+                for (const field of sensitiveFields) {
+                    if (metadata[field]) {
+                        delete metadata[field];
+                    }
+                }
+            }
+        }
+        return actions;
+    }
+    /**
+     * Deletes an action by params.
+     */
+    async function deleteAction(searchParams) {
+        const Action = mongoose.models.Action;
+        return (await Action.findOneAndDelete(searchParams).lean());
+    }
+    /**
+     * Deletes actions by params.
+     */
+    async function deleteActions(searchParams) {
+        const Action = mongoose.models.Action;
+        const result = await Action.deleteMany(searchParams);
+        return result.deletedCount;
+    }
+    return {
+        getActions,
+        updateAction,
+        deleteAction,
+        deleteActions,
+    };
+}
+
+exports.createActionMethods = createActionMethods;
+//# sourceMappingURL=action.cjs.map

package/dist/methods/action.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"action.cjs","sources":["../../src/methods/action.ts"],"sourcesContent":[null],"names":[],"mappings":";;AAGA,MAAM,eAAe,GAAG,CAAC,SAAS,EAAE,iBAAiB,EAAE,qBAAqB,CAAU;AAEhF,SAAU,mBAAmB,CAAC,QAAmC,EAAA;AACrE;;;AAGG;AACH,IAAA,eAAe,YAAY,CACzB,YAAkC,EAClC,UAA4B,EAAA;AAE5B,QAAA,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAwB;QACvD,MAAM,OAAO,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE;AAC3C,QAAA,QAAQ,MAAM,MAAM,CAAC,gBAAgB,CACnC,YAAY,EACZ,UAAU,EACV,OAAO,CACR,CAAC,IAAI,EAAE;IACV;AAEA;;AAEG;AACH,IAAA,eAAe,UAAU,CACvB,YAAkC,EAClC,gBAAgB,GAAG,KAAK,EAAA;AAExB,QAAA,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAwB;AACvD,QAAA,MAAM,OAAO,IAAI,MAAM,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,IAAI,EAAE,CAAc;QAErE,IAAI,CAAC,gBAAgB,EAAE;AACrB,YAAA,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE;gBACvC,MAAM,QAAQ,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,QAAQ;gBACpC,IAAI,CAAC,QAAQ,EAAE;oBACb;gBACF;AAEA,gBAAA,KAAK,MAAM,KAAK,IAAI,eAAe,EAAE;AACnC,oBAAA,IAAI,QAAQ,CAAC,KAAK,CAAC,EAAE;AACnB,wBAAA,OAAO,QAAQ,CAAC,KAAK,CAAC;oBACxB;gBACF;YACF;QACF;AAEA,QAAA,OAAO,OAAO;IAChB;AAEA;;AAEG;IACH,eAAe,YAAY,CAAC,YAAkC,EAAA;AAC5D,QAAA,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAwB;AACvD,QAAA,QAAQ,MAAM,MAAM,CAAC,gBAAgB,CAAC,YAAY,CAAC,CAAC,IAAI,EAAE;IAC5D;AAEA;;AAEG;IACH,eAAe,aAAa,CAAC,YAAkC,EAAA;AAC7D,QAAA,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAwB;QACvD,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,UAAU,CAAC,YAAY,CAAC;QACpD,OAAO,MAAM,CAAC,YAAY;IAC5B;IAEA,OAAO;QACL,UAAU;QACV,YAAY;QACZ,YAAY;QACZ,aAAa;KACd;AACH;;;;"}

package/dist/methods/action.es.js

@@ -0,0 +1,57 @@
+const sensitiveFields = ['api_key', 'oauth_client_id', 'oauth_client_secret'];
+function createActionMethods(mongoose) {
+    /**
+     * Update an action with new data without overwriting existing properties,
+     * or create a new action if it doesn't exist.
+     */
+    async function updateAction(searchParams, updateData) {
+        const Action = mongoose.models.Action;
+        const options = { new: true, upsert: true };
+        return (await Action.findOneAndUpdate(searchParams, updateData, options).lean());
+    }
+    /**
+     * Retrieves all actions that match the given search parameters.
+     */
+    async function getActions(searchParams, includeSensitive = false) {
+        const Action = mongoose.models.Action;
+        const actions = (await Action.find(searchParams).lean());
+        if (!includeSensitive) {
+            for (let i = 0; i < actions.length; i++) {
+                const metadata = actions[i].metadata;
+                if (!metadata) {
+                    continue;
+                }
+                for (const field of sensitiveFields) {
+                    if (metadata[field]) {
+                        delete metadata[field];
+                    }
+                }
+            }
+        }
+        return actions;
+    }
+    /**
+     * Deletes an action by params.
+     */
+    async function deleteAction(searchParams) {
+        const Action = mongoose.models.Action;
+        return (await Action.findOneAndDelete(searchParams).lean());
+    }
+    /**
+     * Deletes actions by params.
+     */
+    async function deleteActions(searchParams) {
+        const Action = mongoose.models.Action;
+        const result = await Action.deleteMany(searchParams);
+        return result.deletedCount;
+    }
+    return {
+        getActions,
+        updateAction,
+        deleteAction,
+        deleteActions,
+    };
+}
+
+export { createActionMethods };
+//# sourceMappingURL=action.es.js.map

package/dist/methods/action.es.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"action.es.js","sources":["../../src/methods/action.ts"],"sourcesContent":[null],"names":[],"mappings":"AAGA,MAAM,eAAe,GAAG,CAAC,SAAS,EAAE,iBAAiB,EAAE,qBAAqB,CAAU;AAEhF,SAAU,mBAAmB,CAAC,QAAmC,EAAA;AACrE;;;AAGG;AACH,IAAA,eAAe,YAAY,CACzB,YAAkC,EAClC,UAA4B,EAAA;AAE5B,QAAA,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAwB;QACvD,MAAM,OAAO,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE;AAC3C,QAAA,QAAQ,MAAM,MAAM,CAAC,gBAAgB,CACnC,YAAY,EACZ,UAAU,EACV,OAAO,CACR,CAAC,IAAI,EAAE;IACV;AAEA;;AAEG;AACH,IAAA,eAAe,UAAU,CACvB,YAAkC,EAClC,gBAAgB,GAAG,KAAK,EAAA;AAExB,QAAA,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAwB;AACvD,QAAA,MAAM,OAAO,IAAI,MAAM,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,IAAI,EAAE,CAAc;QAErE,IAAI,CAAC,gBAAgB,EAAE;AACrB,YAAA,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE;gBACvC,MAAM,QAAQ,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,QAAQ;gBACpC,IAAI,CAAC,QAAQ,EAAE;oBACb;gBACF;AAEA,gBAAA,KAAK,MAAM,KAAK,IAAI,eAAe,EAAE;AACnC,oBAAA,IAAI,QAAQ,CAAC,KAAK,CAAC,EAAE;AACnB,wBAAA,OAAO,QAAQ,CAAC,KAAK,CAAC;oBACxB;gBACF;YACF;QACF;AAEA,QAAA,OAAO,OAAO;IAChB;AAEA;;AAEG;IACH,eAAe,YAAY,CAAC,YAAkC,EAAA;AAC5D,QAAA,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAwB;AACvD,QAAA,QAAQ,MAAM,MAAM,CAAC,gBAAgB,CAAC,YAAY,CAAC,CAAC,IAAI,EAAE;IAC5D;AAEA;;AAEG;IACH,eAAe,aAAa,CAAC,YAAkC,EAAA;AAC7D,QAAA,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAwB;QACvD,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,UAAU,CAAC,YAAY,CAAC;QACpD,OAAO,MAAM,CAAC,YAAY;IAC5B;IAEA,OAAO;QACL,UAAU;QACV,YAAY;QACZ,YAAY;QACZ,aAAa;KACd;AACH;;;;"}