@librechat/data-schemas 0.0.43 → 0.0.45

package/dist/methods/spendTokens.es.js

@@ -0,0 +1,107 @@
+import logger from '../config/winston.es.js';
+
+function createSpendTokensMethods(_mongoose, transactionMethods) {
+    /**
+     * Creates up to two transactions to record the spending of tokens.
+     */
+    async function spendTokens(txData, tokenUsage) {
+        var _a;
+        const { promptTokens, completionTokens } = tokenUsage;
+        logger.debug(`[spendTokens] conversationId: ${txData.conversationId}${(txData === null || txData === void 0 ? void 0 : txData.context) ? ` | Context: ${txData === null || txData === void 0 ? void 0 : txData.context}` : ''} | Token usage: `, { promptTokens, completionTokens });
+        let prompt, completion;
+        const normalizedPromptTokens = Math.max(promptTokens !== null && promptTokens !== void 0 ? promptTokens : 0, 0);
+        try {
+            if (promptTokens !== undefined) {
+                prompt = await transactionMethods.createTransaction({
+                    ...txData,
+                    tokenType: 'prompt',
+                    rawAmount: promptTokens === 0 ? 0 : -normalizedPromptTokens,
+                    inputTokenCount: normalizedPromptTokens,
+                });
+            }
+            if (completionTokens !== undefined) {
+                completion = await transactionMethods.createTransaction({
+                    ...txData,
+                    tokenType: 'completion',
+                    rawAmount: completionTokens === 0 ? 0 : -Math.max(completionTokens, 0),
+                    inputTokenCount: normalizedPromptTokens,
+                });
+            }
+            if (prompt || completion) {
+                logger.debug('[spendTokens] Transaction data record against balance:', {
+                    user: txData.user,
+                    prompt: prompt === null || prompt === void 0 ? void 0 : prompt.prompt,
+                    promptRate: prompt === null || prompt === void 0 ? void 0 : prompt.rate,
+                    completion: completion === null || completion === void 0 ? void 0 : completion.completion,
+                    completionRate: completion === null || completion === void 0 ? void 0 : completion.rate,
+                    balance: (_a = completion === null || completion === void 0 ? void 0 : completion.balance) !== null && _a !== void 0 ? _a : prompt === null || prompt === void 0 ? void 0 : prompt.balance,
+                });
+            }
+            else {
+                logger.debug('[spendTokens] No transactions incurred against balance');
+            }
+        }
+        catch (err) {
+            logger.error('[spendTokens]', err);
+        }
+    }
+    /**
+     * Creates transactions to record the spending of structured tokens.
+     */
+    async function spendStructuredTokens(txData, tokenUsage) {
+        var _a, _b, _c, _d, _e, _f, _g;
+        const { promptTokens, completionTokens } = tokenUsage;
+        logger.debug(`[spendStructuredTokens] conversationId: ${txData.conversationId}${(txData === null || txData === void 0 ? void 0 : txData.context) ? ` | Context: ${txData === null || txData === void 0 ? void 0 : txData.context}` : ''} | Token usage: `, { promptTokens, completionTokens });
+        let prompt, completion;
+        try {
+            if (promptTokens) {
+                const input = Math.max((_a = promptTokens.input) !== null && _a !== void 0 ? _a : 0, 0);
+                const write = Math.max((_b = promptTokens.write) !== null && _b !== void 0 ? _b : 0, 0);
+                const read = Math.max((_c = promptTokens.read) !== null && _c !== void 0 ? _c : 0, 0);
+                const totalInputTokens = input + write + read;
+                prompt = await transactionMethods.createStructuredTransaction({
+                    ...txData,
+                    tokenType: 'prompt',
+                    inputTokens: -input,
+                    writeTokens: -write,
+                    readTokens: -read,
+                    inputTokenCount: totalInputTokens,
+                });
+            }
+            if (completionTokens) {
+                const totalInputTokens = promptTokens
+                    ? Math.max((_d = promptTokens.input) !== null && _d !== void 0 ? _d : 0, 0) +
+                        Math.max((_e = promptTokens.write) !== null && _e !== void 0 ? _e : 0, 0) +
+                        Math.max((_f = promptTokens.read) !== null && _f !== void 0 ? _f : 0, 0)
+                    : undefined;
+                completion = await transactionMethods.createTransaction({
+                    ...txData,
+                    tokenType: 'completion',
+                    rawAmount: -Math.max(completionTokens, 0),
+                    inputTokenCount: totalInputTokens,
+                });
+            }
+            if (prompt || completion) {
+                logger.debug('[spendStructuredTokens] Transaction data record against balance:', {
+                    user: txData.user,
+                    prompt: prompt === null || prompt === void 0 ? void 0 : prompt.prompt,
+                    promptRate: prompt === null || prompt === void 0 ? void 0 : prompt.rate,
+                    completion: completion === null || completion === void 0 ? void 0 : completion.completion,
+                    completionRate: completion === null || completion === void 0 ? void 0 : completion.rate,
+                    balance: (_g = completion === null || completion === void 0 ? void 0 : completion.balance) !== null && _g !== void 0 ? _g : prompt === null || prompt === void 0 ? void 0 : prompt.balance,
+                });
+            }
+            else {
+                logger.debug('[spendStructuredTokens] No transactions incurred against balance');
+            }
+        }
+        catch (err) {
+            logger.error('[spendStructuredTokens]', err);
+        }
+        return { prompt, completion };
+    }
+    return { spendTokens, spendStructuredTokens };
+}
+
+export { createSpendTokensMethods };
+//# sourceMappingURL=spendTokens.es.js.map

package/dist/methods/spendTokens.es.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"spendTokens.es.js","sources":["../../src/methods/spendTokens.ts"],"sourcesContent":[null],"names":[],"mappings":";;AAeM,SAAU,wBAAwB,CACtC,SAAoC,EACpC,kBAGC,EAAA;AAED;;AAEG;AACH,IAAA,eAAe,WAAW,CACxB,MAAmB,EACnB,UAAgE,EAAA;;AAEhE,QAAA,MAAM,EAAE,YAAY,EAAE,gBAAgB,EAAE,GAAG,UAAU;AACrD,QAAA,MAAM,CAAC,KAAK,CACV,iCAAiC,MAAM,CAAC,cAAc,CAAA,EACpD,CAAA,MAAM,KAAA,IAAA,IAAN,MAAM,KAAA,MAAA,GAAA,MAAA,GAAN,MAAM,CAAE,OAAO,IAAG,CAAA,YAAA,EAAe,MAAM,KAAA,IAAA,IAAN,MAAM,KAAA,MAAA,GAAA,MAAA,GAAN,MAAM,CAAE,OAAO,CAAA,CAAE,GAAG,EACvD,CAAA,gBAAA,CAAkB,EAClB,EAAE,YAAY,EAAE,gBAAgB,EAAE,CACnC;QACD,IAAI,MAAqC,EAAE,UAAyC;AACpF,QAAA,MAAM,sBAAsB,GAAG,IAAI,CAAC,GAAG,CAAC,YAAY,KAAA,IAAA,IAAZ,YAAY,KAAA,MAAA,GAAZ,YAAY,GAAI,CAAC,EAAE,CAAC,CAAC;AAC7D,QAAA,IAAI;AACF,YAAA,IAAI,YAAY,KAAK,SAAS,EAAE;AAC9B,gBAAA,MAAM,GAAG,MAAM,kBAAkB,CAAC,iBAAiB,CAAC;AAClD,oBAAA,GAAG,MAAM;AACT,oBAAA,SAAS,EAAE,QAAQ;AACnB,oBAAA,SAAS,EAAE,YAAY,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,sBAAsB;AAC3D,oBAAA,eAAe,EAAE,sBAAsB;AACxC,iBAAA,CAAC;YACJ;AAEA,YAAA,IAAI,gBAAgB,KAAK,SAAS,EAAE;AAClC,gBAAA,UAAU,GAAG,MAAM,kBAAkB,CAAC,iBAAiB,CAAC;AACtD,oBAAA,GAAG,MAAM;AACT,oBAAA,SAAS,EAAE,YAAY;AACvB,oBAAA,SAAS,EAAE,gBAAgB,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC,CAAC;AACtE,oBAAA,eAAe,EAAE,sBAAsB;AACxC,iBAAA,CAAC;YACJ;AAEA,YAAA,IAAI,MAAM,IAAI,UAAU,EAAE;AACxB,gBAAA,MAAM,CAAC,KAAK,CAAC,wDAAwD,EAAE;oBACrE,IAAI,EAAE,MAAM,CAAC,IAAI;AACjB,oBAAA,MAAM,EAAE,MAAM,KAAA,IAAA,IAAN,MAAM,KAAA,KAAA,CAAA,GAAA,KAAA,CAAA,GAAN,MAAM,CAAE,MAAM;AACtB,oBAAA,UAAU,EAAE,MAAM,KAAA,IAAA,IAAN,MAAM,KAAA,KAAA,CAAA,GAAA,KAAA,CAAA,GAAN,MAAM,CAAE,IAAI;AACxB,oBAAA,UAAU,EAAE,UAAU,KAAA,IAAA,IAAV,UAAU,KAAA,KAAA,CAAA,GAAA,KAAA,CAAA,GAAV,UAAU,CAAE,UAAU;AAClC,oBAAA,cAAc,EAAE,UAAU,KAAA,IAAA,IAAV,UAAU,KAAA,KAAA,CAAA,GAAA,KAAA,CAAA,GAAV,UAAU,CAAE,IAAI;AAChC,oBAAA,OAAO,EAAE,CAAA,EAAA,GAAA,UAAU,KAAA,IAAA,IAAV,UAAU,uBAAV,UAAU,CAAE,OAAO,MAAA,IAAA,IAAA,EAAA,KAAA,KAAA,CAAA,GAAA,EAAA,GAAI,MAAM,KAAA,IAAA,IAAN,MAAM,KAAA,KAAA,CAAA,GAAA,KAAA,CAAA,GAAN,MAAM,CAAE,OAAO;AAChD,iBAAA,CAAC;YACJ;iBAAO;AACL,gBAAA,MAAM,CAAC,KAAK,CAAC,wDAAwD,CAAC;YACxE;QACF;QAAE,OAAO,GAAG,EAAE;AACZ,YAAA,MAAM,CAAC,KAAK,CAAC,eAAe,EAAE,GAAG,CAAC;QACpC;IACF;AAEA;;AAEG;AACH,IAAA,eAAe,qBAAqB,CAClC,MAAmB,EACnB,UAGC,EAAA;;AAED,QAAA,MAAM,EAAE,YAAY,EAAE,gBAAgB,EAAE,GAAG,UAAU;AACrD,QAAA,MAAM,CAAC,KAAK,CACV,2CAA2C,MAAM,CAAC,cAAc,CAAA,EAC9D,CAAA,MAAM,KAAA,IAAA,IAAN,MAAM,KAAA,MAAA,GAAA,MAAA,GAAN,MAAM,CAAE,OAAO,IAAG,CAAA,YAAA,EAAe,MAAM,KAAA,IAAA,IAAN,MAAM,KAAA,MAAA,GAAA,MAAA,GAAN,MAAM,CAAE,OAAO,CAAA,CAAE,GAAG,EACvD,CAAA,gBAAA,CAAkB,EAClB,EAAE,YAAY,EAAE,gBAAgB,EAAE,CACnC;QACD,IAAI,MAAqC,EAAE,UAAyC;AACpF,QAAA,IAAI;YACF,IAAI,YAAY,EAAE;AAChB,gBAAA,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAA,EAAA,GAAA,YAAY,CAAC,KAAK,MAAA,IAAA,IAAA,EAAA,KAAA,KAAA,CAAA,GAAA,EAAA,GAAI,CAAC,EAAE,CAAC,CAAC;AAClD,gBAAA,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAA,EAAA,GAAA,YAAY,CAAC,KAAK,MAAA,IAAA,IAAA,EAAA,KAAA,KAAA,CAAA,GAAA,EAAA,GAAI,CAAC,EAAE,CAAC,CAAC;AAClD,gBAAA,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,CAAA,EAAA,GAAA,YAAY,CAAC,IAAI,MAAA,IAAA,IAAA,EAAA,KAAA,KAAA,CAAA,GAAA,EAAA,GAAI,CAAC,EAAE,CAAC,CAAC;AAChD,gBAAA,MAAM,gBAAgB,GAAG,KAAK,GAAG,KAAK,GAAG,IAAI;AAC7C,gBAAA,MAAM,GAAG,MAAM,kBAAkB,CAAC,2BAA2B,CAAC;AAC5D,oBAAA,GAAG,MAAM;AACT,oBAAA,SAAS,EAAE,QAAQ;oBACnB,WAAW,EAAE,CAAC,KAAK;oBACnB,WAAW,EAAE,CAAC,KAAK;oBACnB,UAAU,EAAE,CAAC,IAAI;AACjB,oBAAA,eAAe,EAAE,gBAAgB;AAClC,iBAAA,CAAC;YACJ;YAEA,IAAI,gBAAgB,EAAE;gBACpB,MAAM,gBAAgB,GAAG;AACvB,sBAAE,IAAI,CAAC,GAAG,CAAC,CAAA,EAAA,GAAA,YAAY,CAAC,KAAK,MAAA,IAAA,IAAA,EAAA,KAAA,KAAA,CAAA,GAAA,EAAA,GAAI,CAAC,EAAE,CAAC,CAAC;wBACpC,IAAI,CAAC,GAAG,CAAC,CAAA,EAAA,GAAA,YAAY,CAAC,KAAK,MAAA,IAAA,IAAA,EAAA,KAAA,KAAA,CAAA,GAAA,EAAA,GAAI,CAAC,EAAE,CAAC,CAAC;wBACpC,IAAI,CAAC,GAAG,CAAC,CAAA,EAAA,GAAA,YAAY,CAAC,IAAI,MAAA,IAAA,IAAA,EAAA,KAAA,KAAA,CAAA,GAAA,EAAA,GAAI,CAAC,EAAE,CAAC;sBAClC,SAAS;AACb,gBAAA,UAAU,GAAG,MAAM,kBAAkB,CAAC,iBAAiB,CAAC;AACtD,oBAAA,GAAG,MAAM;AACT,oBAAA,SAAS,EAAE,YAAY;oBACvB,SAAS,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC,CAAC;AACzC,oBAAA,eAAe,EAAE,gBAAgB;AAClC,iBAAA,CAAC;YACJ;AAEA,YAAA,IAAI,MAAM,IAAI,UAAU,EAAE;AACxB,gBAAA,MAAM,CAAC,KAAK,CAAC,kEAAkE,EAAE;oBAC/E,IAAI,EAAE,MAAM,CAAC,IAAI;AACjB,oBAAA,MAAM,EAAE,MAAM,KAAA,IAAA,IAAN,MAAM,KAAA,KAAA,CAAA,GAAA,KAAA,CAAA,GAAN,MAAM,CAAE,MAAM;AACtB,oBAAA,UAAU,EAAE,MAAM,KAAA,IAAA,IAAN,MAAM,KAAA,KAAA,CAAA,GAAA,KAAA,CAAA,GAAN,MAAM,CAAE,IAAI;AACxB,oBAAA,UAAU,EAAE,UAAU,KAAA,IAAA,IAAV,UAAU,KAAA,KAAA,CAAA,GAAA,KAAA,CAAA,GAAV,UAAU,CAAE,UAAU;AAClC,oBAAA,cAAc,EAAE,UAAU,KAAA,IAAA,IAAV,UAAU,KAAA,KAAA,CAAA,GAAA,KAAA,CAAA,GAAV,UAAU,CAAE,IAAI;AAChC,oBAAA,OAAO,EAAE,CAAA,EAAA,GAAA,UAAU,KAAA,IAAA,IAAV,UAAU,uBAAV,UAAU,CAAE,OAAO,MAAA,IAAA,IAAA,EAAA,KAAA,KAAA,CAAA,GAAA,EAAA,GAAI,MAAM,KAAA,IAAA,IAAN,MAAM,KAAA,KAAA,CAAA,GAAA,KAAA,CAAA,GAAN,MAAM,CAAE,OAAO;AAChD,iBAAA,CAAC;YACJ;iBAAO;AACL,gBAAA,MAAM,CAAC,KAAK,CAAC,kEAAkE,CAAC;YAClF;QACF;QAAE,OAAO,GAAG,EAAE;AACZ,YAAA,MAAM,CAAC,KAAK,CAAC,yBAAyB,EAAE,GAAG,CAAC;QAC9C;AAEA,QAAA,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE;IAC/B;AAEA,IAAA,OAAO,EAAE,WAAW,EAAE,qBAAqB,EAAE;AAC/C;;;;"}

package/dist/methods/systemGrant.cjs

@@ -0,0 +1,190 @@
+'use strict';
+
+var librechatDataProvider = require('librechat-data-provider');
+var capabilities = require('../admin/capabilities.cjs');
+var principal = require('../utils/principal.cjs');
+var winston = require('../config/winston.cjs');
+
+var _a;
+const reverseImplications = {};
+for (const [broad, implied] of Object.entries(capabilities.CapabilityImplications)) {
+    for (const cap of implied) {
+        ((_a = reverseImplications[cap]) !== null && _a !== void 0 ? _a : (reverseImplications[cap] = [])).push(broad);
+    }
+}
+function createSystemGrantMethods(mongoose) {
+    /**
+     * Check if any of the given principals holds a specific capability.
+     * Follows the same principal-resolution pattern as AclEntry:
+     * getUserPrincipals → $or query.
+     *
+     * @param principals - Resolved principal list from getUserPrincipals
+     * @param capability - The capability to check
+     * @param tenantId  - If present, checks tenant-scoped grant; if absent, checks platform-level
+     */
+    async function hasCapabilityForPrincipals({ principals, capability, tenantId, }) {
+        var _a;
+        const SystemGrant = mongoose.models.SystemGrant;
+        const principalsQuery = principals
+            .filter((p) => p.principalType !== librechatDataProvider.PrincipalType.PUBLIC)
+            .map((p) => ({ principalType: p.principalType, principalId: p.principalId }));
+        if (!principalsQuery.length) {
+            return false;
+        }
+        const impliedBy = (_a = reverseImplications[capability]) !== null && _a !== void 0 ? _a : [];
+        const capabilityQuery = impliedBy.length ? { $in: [capability, ...impliedBy] } : capability;
+        const query = {
+            $or: principalsQuery,
+            capability: capabilityQuery,
+        };
+        if (tenantId != null) {
+            query.$and = [{ $or: [{ tenantId }, { tenantId: { $exists: false } }] }];
+        }
+        else {
+            query.tenantId = { $exists: false };
+        }
+        const doc = await SystemGrant.exists(query);
+        return doc != null;
+    }
+    /**
+     * Grant a capability to a principal. Upsert — idempotent.
+     */
+    async function grantCapability({ principalType, principalId, capability, tenantId, grantedBy, }, session) {
+        const SystemGrant = mongoose.models.SystemGrant;
+        const normalizedPrincipalId = principal.normalizePrincipalId(principalId, principalType);
+        const filter = {
+            principalType,
+            principalId: normalizedPrincipalId,
+            capability,
+        };
+        if (tenantId != null) {
+            filter.tenantId = tenantId;
+        }
+        else {
+            filter.tenantId = { $exists: false };
+        }
+        const update = {
+            $set: {
+                grantedAt: new Date(),
+                ...(grantedBy != null && { grantedBy }),
+            },
+            $setOnInsert: {
+                principalType,
+                principalId: normalizedPrincipalId,
+                capability,
+                ...(tenantId != null && { tenantId }),
+            },
+        };
+        const options = {
+            upsert: true,
+            new: true,
+            ...(session ? { session } : {}),
+        };
+        try {
+            return await SystemGrant.findOneAndUpdate(filter, update, options);
+        }
+        catch (err) {
+            if (err.code === 11000) {
+                return (await SystemGrant.findOne(filter).lean());
+            }
+            throw err;
+        }
+    }
+    /**
+     * Revoke a capability from a principal.
+     */
+    async function revokeCapability({ principalType, principalId, capability, tenantId, }, session) {
+        const SystemGrant = mongoose.models.SystemGrant;
+        const normalizedPrincipalId = principal.normalizePrincipalId(principalId, principalType);
+        const filter = {
+            principalType,
+            principalId: normalizedPrincipalId,
+            capability,
+        };
+        if (tenantId != null) {
+            filter.tenantId = tenantId;
+        }
+        else {
+            filter.tenantId = { $exists: false };
+        }
+        const options = session ? { session } : {};
+        await SystemGrant.deleteOne(filter, options);
+    }
+    /**
+     * List all capabilities held by a principal — used by the capabilities
+     * introspection endpoint.
+     */
+    async function getCapabilitiesForPrincipal({ principalType, principalId, tenantId, }) {
+        const SystemGrant = mongoose.models.SystemGrant;
+        const filter = {
+            principalType,
+            principalId: principal.normalizePrincipalId(principalId, principalType),
+        };
+        if (tenantId != null) {
+            filter.$or = [{ tenantId }, { tenantId: { $exists: false } }];
+        }
+        else {
+            filter.tenantId = { $exists: false };
+        }
+        return await SystemGrant.find(filter).lean();
+    }
+    /**
+     * Seed the ADMIN role with all system capabilities (no tenantId — single-instance mode).
+     * Idempotent and concurrency-safe: uses bulkWrite with ordered:false so parallel
+     * server instances (K8s rolling deploy, PM2 cluster) do not race on E11000.
+     * Retries up to 3 times with exponential backoff on transient failures.
+     */
+    async function seedSystemGrants() {
+        var _a;
+        const maxRetries = 3;
+        for (let attempt = 1; attempt <= maxRetries; attempt++) {
+            try {
+                const SystemGrant = mongoose.models.SystemGrant;
+                const now = new Date();
+                const ops = Object.values(capabilities.SystemCapabilities).map((capability) => ({
+                    updateOne: {
+                        filter: {
+                            principalType: librechatDataProvider.PrincipalType.ROLE,
+                            principalId: librechatDataProvider.SystemRoles.ADMIN,
+                            capability,
+                            tenantId: { $exists: false },
+                        },
+                        update: {
+                            $setOnInsert: {
+                                principalType: librechatDataProvider.PrincipalType.ROLE,
+                                principalId: librechatDataProvider.SystemRoles.ADMIN,
+                                capability,
+                                grantedAt: now,
+                            },
+                        },
+                        upsert: true,
+                    },
+                }));
+                await SystemGrant.bulkWrite(ops, { ordered: false });
+                return;
+            }
+            catch (err) {
+                if (attempt < maxRetries) {
+                    const delay = 1000 * Math.pow(2, attempt - 1);
+                    winston.warn(`[seedSystemGrants] Attempt ${attempt}/${maxRetries} failed, retrying in ${delay}ms: ${(_a = err.message) !== null && _a !== void 0 ? _a : String(err)}`);
+                    await new Promise((resolve) => setTimeout(resolve, delay));
+                }
+                else {
+                    winston.error('[seedSystemGrants] Failed to seed capabilities after all retries. ' +
+                        'Admin panel access requires these grants. Manual recovery: ' +
+                        'db.systemgrants.insertMany([...]) with ADMIN role grants for each capability.', err);
+                }
+            }
+        }
+    }
+    return {
+        grantCapability,
+        seedSystemGrants,
+        revokeCapability,
+        hasCapabilityForPrincipals,
+        getCapabilitiesForPrincipal,
+    };
+}
+
+exports.createSystemGrantMethods = createSystemGrantMethods;
+//# sourceMappingURL=systemGrant.cjs.map

package/dist/methods/systemGrant.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"systemGrant.cjs","sources":["../../src/methods/systemGrant.ts"],"sourcesContent":[null],"names":["CapabilityImplications","PrincipalType","normalizePrincipalId","SystemCapabilities","SystemRoles","logger"],"mappings":";;;;;;;;AAaA,MAAM,mBAAmB,GAAkE,EAAE;AAC7F,KAAK,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAACA,mCAAsB,CAAC,EAAE;AACrE,IAAA,KAAK,MAAM,GAAG,IAAI,OAAiC,EAAE;AACnD,QAAA,CAAA,CAAA,EAAA,GAAC,mBAAmB,CAAC,GAAG,CAAA,MAAA,IAAA,IAAA,EAAA,KAAA,MAAA,GAAA,EAAA,IAAvB,mBAAmB,CAAC,GAAG,CAAA,GAAM,EAAE,GAAE,IAAI,CAAC,KAA6B,CAAC;IACvE;AACF;AAEM,SAAU,wBAAwB,CAAC,QAAmC,EAAA;AAC1E;;;;;;;;AAQG;IACH,eAAe,0BAA0B,CAAC,EACxC,UAAU,EACV,UAAU,EACV,QAAQ,GAKT,EAAA;;AACC,QAAA,MAAM,WAAW,GAAG,QAAQ,CAAC,MAAM,CAAC,WAAkC;QACtE,MAAM,eAAe,GAAG;AACrB,aAAA,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,aAAa,KAAKC,mCAAa,CAAC,MAAM;aACtD,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,aAAa,EAAE,CAAC,CAAC,aAAa,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;AAE/E,QAAA,IAAI,CAAC,eAAe,CAAC,MAAM,EAAE;AAC3B,YAAA,OAAO,KAAK;QACd;QAEA,MAAM,SAAS,GAAG,CAAA,EAAA,GAAA,mBAAmB,CAAC,UAA8C,CAAC,MAAA,IAAA,IAAA,EAAA,KAAA,MAAA,GAAA,EAAA,GAAI,EAAE;QAC3F,MAAM,eAAe,GAAG,SAAS,CAAC,MAAM,GAAG,EAAE,GAAG,EAAE,CAAC,UAAU,EAAE,GAAG,SAAS,CAAC,EAAE,GAAG,UAAU;AAE3F,QAAA,MAAM,KAAK,GAA4B;AACrC,YAAA,GAAG,EAAE,eAAe;AACpB,YAAA,UAAU,EAAE,eAAe;SAC5B;AAED,QAAA,IAAI,QAAQ,IAAI,IAAI,EAAE;YACpB,KAAK,CAAC,IAAI,GAAG,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,CAAC,EAAE,CAAC;QAC1E;aAAO;YACL,KAAK,CAAC,QAAQ,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE;QACrC;QAEA,MAAM,GAAG,GAAG,MAAM,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC;QAC3C,OAAO,GAAG,IAAI,IAAI;IACpB;AAEA;;AAEG;AACH,IAAA,eAAe,eAAe,CAC5B,EACE,aAAa,EACb,WAAW,EACX,UAAU,EACV,QAAQ,EACR,SAAS,GAOV,EACD,OAAuB,EAAA;AAEvB,QAAA,MAAM,WAAW,GAAG,QAAQ,CAAC,MAAM,CAAC,WAAkC;QAEtE,MAAM,qBAAqB,GAAGC,8BAAoB,CAAC,WAAW,EAAE,aAAa,CAAC;AAE9E,QAAA,MAAM,MAAM,GAA4B;YACtC,aAAa;AACb,YAAA,WAAW,EAAE,qBAAqB;YAClC,UAAU;SACX;AAED,QAAA,IAAI,QAAQ,IAAI,IAAI,EAAE;AACpB,YAAA,MAAM,CAAC,QAAQ,GAAG,QAAQ;QAC5B;aAAO;YACL,MAAM,CAAC,QAAQ,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE;QACtC;AAEA,QAAA,MAAM,MAAM,GAAG;AACb,YAAA,IAAI,EAAE;gBACJ,SAAS,EAAE,IAAI,IAAI,EAAE;gBACrB,IAAI,SAAS,IAAI,IAAI,IAAI,EAAE,SAAS,EAAE,CAAC;AACxC,aAAA;AACD,YAAA,YAAY,EAAE;gBACZ,aAAa;AACb,gBAAA,WAAW,EAAE,qBAAqB;gBAClC,UAAU;gBACV,IAAI,QAAQ,IAAI,IAAI,IAAI,EAAE,QAAQ,EAAE,CAAC;AACtC,aAAA;SACF;AAED,QAAA,MAAM,OAAO,GAAG;AACd,YAAA,MAAM,EAAE,IAAI;AACZ,YAAA,GAAG,EAAE,IAAI;AACT,YAAA,IAAI,OAAO,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC;SAChC;AAED,QAAA,IAAI;YACF,OAAO,MAAM,WAAW,CAAC,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC;QACpE;QAAE,OAAO,GAAG,EAAE;AACZ,YAAA,IAAK,GAAyB,CAAC,IAAI,KAAK,KAAK,EAAE;AAC7C,gBAAA,QAAQ,MAAM,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE;YAClD;AACA,YAAA,MAAM,GAAG;QACX;IACF;AAEA;;AAEG;AACH,IAAA,eAAe,gBAAgB,CAC7B,EACE,aAAa,EACb,WAAW,EACX,UAAU,EACV,QAAQ,GAMT,EACD,OAAuB,EAAA;AAEvB,QAAA,MAAM,WAAW,GAAG,QAAQ,CAAC,MAAM,CAAC,WAAkC;QAEtE,MAAM,qBAAqB,GAAGA,8BAAoB,CAAC,WAAW,EAAE,aAAa,CAAC;AAE9E,QAAA,MAAM,MAAM,GAA4B;YACtC,aAAa;AACb,YAAA,WAAW,EAAE,qBAAqB;YAClC,UAAU;SACX;AAED,QAAA,IAAI,QAAQ,IAAI,IAAI,EAAE;AACpB,YAAA,MAAM,CAAC,QAAQ,GAAG,QAAQ;QAC5B;aAAO;YACL,MAAM,CAAC,QAAQ,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE;QACtC;AAEA,QAAA,MAAM,OAAO,GAAG,OAAO,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE;QAC1C,MAAM,WAAW,CAAC,SAAS,CAAC,MAAM,EAAE,OAAO,CAAC;IAC9C;AAEA;;;AAGG;IACH,eAAe,2BAA2B,CAAC,EACzC,aAAa,EACb,WAAW,EACX,QAAQ,GAKT,EAAA;AACC,QAAA,MAAM,WAAW,GAAG,QAAQ,CAAC,MAAM,CAAC,WAAkC;AAEtE,QAAA,MAAM,MAAM,GAA4B;YACtC,aAAa;AACb,YAAA,WAAW,EAAEA,8BAAoB,CAAC,WAAW,EAAE,aAAa,CAAC;SAC9D;AAED,QAAA,IAAI,QAAQ,IAAI,IAAI,EAAE;AACpB,YAAA,MAAM,CAAC,GAAG,GAAG,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,CAAC;QAC/D;aAAO;YACL,MAAM,CAAC,QAAQ,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE;QACtC;QAEA,OAAO,MAAM,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE;IAC9C;AAEA;;;;;AAKG;AACH,IAAA,eAAe,gBAAgB,GAAA;;QAC7B,MAAM,UAAU,GAAG,CAAC;AACpB,QAAA,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,UAAU,EAAE,OAAO,EAAE,EAAE;AACtD,YAAA,IAAI;AACF,gBAAA,MAAM,WAAW,GAAG,QAAQ,CAAC,MAAM,CAAC,WAAkC;AACtE,gBAAA,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE;AACtB,gBAAA,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAACC,+BAAkB,CAAC,CAAC,GAAG,CAAC,CAAC,UAAU,MAAM;AACjE,oBAAA,SAAS,EAAE;AACT,wBAAA,MAAM,EAAE;4BACN,aAAa,EAAEF,mCAAa,CAAC,IAAI;4BACjC,WAAW,EAAEG,iCAAW,CAAC,KAAK;4BAC9B,UAAU;AACV,4BAAA,QAAQ,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE;AAC7B,yBAAA;AACD,wBAAA,MAAM,EAAE;AACN,4BAAA,YAAY,EAAE;gCACZ,aAAa,EAAEH,mCAAa,CAAC,IAAI;gCACjC,WAAW,EAAEG,iCAAW,CAAC,KAAK;gCAC9B,UAAU;AACV,gCAAA,SAAS,EAAE,GAAG;AACf,6BAAA;AACF,yBAAA;AACD,wBAAA,MAAM,EAAE,IAAI;AACb,qBAAA;AACF,iBAAA,CAAC,CAAC;AACH,gBAAA,MAAM,WAAW,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;gBACpD;YACF;YAAE,OAAO,GAAG,EAAE;AACZ,gBAAA,IAAI,OAAO,GAAG,UAAU,EAAE;AACxB,oBAAA,MAAM,KAAK,GAAG,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,GAAG,CAAC,CAAC;oBAC7CC,OAAM,CAAC,IAAI,CACT,CAAA,2BAAA,EAA8B,OAAO,CAAA,CAAA,EAAI,UAAU,wBAAwB,KAAK,CAAA,IAAA,EAAO,MAAC,GAAa,CAAC,OAAO,MAAA,IAAA,IAAA,EAAA,KAAA,MAAA,GAAA,EAAA,GAAI,MAAM,CAAC,GAAG,CAAC,CAAA,CAAE,CAC/H;AACD,oBAAA,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,KAAK,UAAU,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;gBAC5D;qBAAO;oBACLA,OAAM,CAAC,KAAK,CACV,oEAAoE;wBAClE,6DAA6D;wBAC7D,+EAA+E,EACjF,GAAG,CACJ;gBACH;YACF;QACF;IACF;IAEA,OAAO;QACL,eAAe;QACf,gBAAgB;QAChB,gBAAgB;QAChB,0BAA0B;QAC1B,2BAA2B;KAC5B;AACH;;;;"}

package/dist/methods/systemGrant.es.js

@@ -0,0 +1,188 @@
+import { PrincipalType, SystemRoles } from 'librechat-data-provider';
+import { CapabilityImplications, SystemCapabilities } from '../admin/capabilities.es.js';
+import { normalizePrincipalId } from '../utils/principal.es.js';
+import logger from '../config/winston.es.js';
+
+var _a;
+const reverseImplications = {};
+for (const [broad, implied] of Object.entries(CapabilityImplications)) {
+    for (const cap of implied) {
+        ((_a = reverseImplications[cap]) !== null && _a !== void 0 ? _a : (reverseImplications[cap] = [])).push(broad);
+    }
+}
+function createSystemGrantMethods(mongoose) {
+    /**
+     * Check if any of the given principals holds a specific capability.
+     * Follows the same principal-resolution pattern as AclEntry:
+     * getUserPrincipals → $or query.
+     *
+     * @param principals - Resolved principal list from getUserPrincipals
+     * @param capability - The capability to check
+     * @param tenantId  - If present, checks tenant-scoped grant; if absent, checks platform-level
+     */
+    async function hasCapabilityForPrincipals({ principals, capability, tenantId, }) {
+        var _a;
+        const SystemGrant = mongoose.models.SystemGrant;
+        const principalsQuery = principals
+            .filter((p) => p.principalType !== PrincipalType.PUBLIC)
+            .map((p) => ({ principalType: p.principalType, principalId: p.principalId }));
+        if (!principalsQuery.length) {
+            return false;
+        }
+        const impliedBy = (_a = reverseImplications[capability]) !== null && _a !== void 0 ? _a : [];
+        const capabilityQuery = impliedBy.length ? { $in: [capability, ...impliedBy] } : capability;
+        const query = {
+            $or: principalsQuery,
+            capability: capabilityQuery,
+        };
+        if (tenantId != null) {
+            query.$and = [{ $or: [{ tenantId }, { tenantId: { $exists: false } }] }];
+        }
+        else {
+            query.tenantId = { $exists: false };
+        }
+        const doc = await SystemGrant.exists(query);
+        return doc != null;
+    }
+    /**
+     * Grant a capability to a principal. Upsert — idempotent.
+     */
+    async function grantCapability({ principalType, principalId, capability, tenantId, grantedBy, }, session) {
+        const SystemGrant = mongoose.models.SystemGrant;
+        const normalizedPrincipalId = normalizePrincipalId(principalId, principalType);
+        const filter = {
+            principalType,
+            principalId: normalizedPrincipalId,
+            capability,
+        };
+        if (tenantId != null) {
+            filter.tenantId = tenantId;
+        }
+        else {
+            filter.tenantId = { $exists: false };
+        }
+        const update = {
+            $set: {
+                grantedAt: new Date(),
+                ...(grantedBy != null && { grantedBy }),
+            },
+            $setOnInsert: {
+                principalType,
+                principalId: normalizedPrincipalId,
+                capability,
+                ...(tenantId != null && { tenantId }),
+            },
+        };
+        const options = {
+            upsert: true,
+            new: true,
+            ...(session ? { session } : {}),
+        };
+        try {
+            return await SystemGrant.findOneAndUpdate(filter, update, options);
+        }
+        catch (err) {
+            if (err.code === 11000) {
+                return (await SystemGrant.findOne(filter).lean());
+            }
+            throw err;
+        }
+    }
+    /**
+     * Revoke a capability from a principal.
+     */
+    async function revokeCapability({ principalType, principalId, capability, tenantId, }, session) {
+        const SystemGrant = mongoose.models.SystemGrant;
+        const normalizedPrincipalId = normalizePrincipalId(principalId, principalType);
+        const filter = {
+            principalType,
+            principalId: normalizedPrincipalId,
+            capability,
+        };
+        if (tenantId != null) {
+            filter.tenantId = tenantId;
+        }
+        else {
+            filter.tenantId = { $exists: false };
+        }
+        const options = session ? { session } : {};
+        await SystemGrant.deleteOne(filter, options);
+    }
+    /**
+     * List all capabilities held by a principal — used by the capabilities
+     * introspection endpoint.
+     */
+    async function getCapabilitiesForPrincipal({ principalType, principalId, tenantId, }) {
+        const SystemGrant = mongoose.models.SystemGrant;
+        const filter = {
+            principalType,
+            principalId: normalizePrincipalId(principalId, principalType),
+        };
+        if (tenantId != null) {
+            filter.$or = [{ tenantId }, { tenantId: { $exists: false } }];
+        }
+        else {
+            filter.tenantId = { $exists: false };
+        }
+        return await SystemGrant.find(filter).lean();
+    }
+    /**
+     * Seed the ADMIN role with all system capabilities (no tenantId — single-instance mode).
+     * Idempotent and concurrency-safe: uses bulkWrite with ordered:false so parallel
+     * server instances (K8s rolling deploy, PM2 cluster) do not race on E11000.
+     * Retries up to 3 times with exponential backoff on transient failures.
+     */
+    async function seedSystemGrants() {
+        var _a;
+        const maxRetries = 3;
+        for (let attempt = 1; attempt <= maxRetries; attempt++) {
+            try {
+                const SystemGrant = mongoose.models.SystemGrant;
+                const now = new Date();
+                const ops = Object.values(SystemCapabilities).map((capability) => ({
+                    updateOne: {
+                        filter: {
+                            principalType: PrincipalType.ROLE,
+                            principalId: SystemRoles.ADMIN,
+                            capability,
+                            tenantId: { $exists: false },
+                        },
+                        update: {
+                            $setOnInsert: {
+                                principalType: PrincipalType.ROLE,
+                                principalId: SystemRoles.ADMIN,
+                                capability,
+                                grantedAt: now,
+                            },
+                        },
+                        upsert: true,
+                    },
+                }));
+                await SystemGrant.bulkWrite(ops, { ordered: false });
+                return;
+            }
+            catch (err) {
+                if (attempt < maxRetries) {
+                    const delay = 1000 * Math.pow(2, attempt - 1);
+                    logger.warn(`[seedSystemGrants] Attempt ${attempt}/${maxRetries} failed, retrying in ${delay}ms: ${(_a = err.message) !== null && _a !== void 0 ? _a : String(err)}`);
+                    await new Promise((resolve) => setTimeout(resolve, delay));
+                }
+                else {
+                    logger.error('[seedSystemGrants] Failed to seed capabilities after all retries. ' +
+                        'Admin panel access requires these grants. Manual recovery: ' +
+                        'db.systemgrants.insertMany([...]) with ADMIN role grants for each capability.', err);
+                }
+            }
+        }
+    }
+    return {
+        grantCapability,
+        seedSystemGrants,
+        revokeCapability,
+        hasCapabilityForPrincipals,
+        getCapabilitiesForPrincipal,
+    };
+}
+
+export { createSystemGrantMethods };
+//# sourceMappingURL=systemGrant.es.js.map

package/dist/methods/systemGrant.es.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"systemGrant.es.js","sources":["../../src/methods/systemGrant.ts"],"sourcesContent":[null],"names":[],"mappings":";;;;;;AAaA,MAAM,mBAAmB,GAAkE,EAAE;AAC7F,KAAK,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,sBAAsB,CAAC,EAAE;AACrE,IAAA,KAAK,MAAM,GAAG,IAAI,OAAiC,EAAE;AACnD,QAAA,CAAA,CAAA,EAAA,GAAC,mBAAmB,CAAC,GAAG,CAAA,MAAA,IAAA,IAAA,EAAA,KAAA,MAAA,GAAA,EAAA,IAAvB,mBAAmB,CAAC,GAAG,CAAA,GAAM,EAAE,GAAE,IAAI,CAAC,KAA6B,CAAC;IACvE;AACF;AAEM,SAAU,wBAAwB,CAAC,QAAmC,EAAA;AAC1E;;;;;;;;AAQG;IACH,eAAe,0BAA0B,CAAC,EACxC,UAAU,EACV,UAAU,EACV,QAAQ,GAKT,EAAA;;AACC,QAAA,MAAM,WAAW,GAAG,QAAQ,CAAC,MAAM,CAAC,WAAkC;QACtE,MAAM,eAAe,GAAG;AACrB,aAAA,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,aAAa,KAAK,aAAa,CAAC,MAAM;aACtD,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,aAAa,EAAE,CAAC,CAAC,aAAa,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;AAE/E,QAAA,IAAI,CAAC,eAAe,CAAC,MAAM,EAAE;AAC3B,YAAA,OAAO,KAAK;QACd;QAEA,MAAM,SAAS,GAAG,CAAA,EAAA,GAAA,mBAAmB,CAAC,UAA8C,CAAC,MAAA,IAAA,IAAA,EAAA,KAAA,MAAA,GAAA,EAAA,GAAI,EAAE;QAC3F,MAAM,eAAe,GAAG,SAAS,CAAC,MAAM,GAAG,EAAE,GAAG,EAAE,CAAC,UAAU,EAAE,GAAG,SAAS,CAAC,EAAE,GAAG,UAAU;AAE3F,QAAA,MAAM,KAAK,GAA4B;AACrC,YAAA,GAAG,EAAE,eAAe;AACpB,YAAA,UAAU,EAAE,eAAe;SAC5B;AAED,QAAA,IAAI,QAAQ,IAAI,IAAI,EAAE;YACpB,KAAK,CAAC,IAAI,GAAG,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,CAAC,EAAE,CAAC;QAC1E;aAAO;YACL,KAAK,CAAC,QAAQ,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE;QACrC;QAEA,MAAM,GAAG,GAAG,MAAM,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC;QAC3C,OAAO,GAAG,IAAI,IAAI;IACpB;AAEA;;AAEG;AACH,IAAA,eAAe,eAAe,CAC5B,EACE,aAAa,EACb,WAAW,EACX,UAAU,EACV,QAAQ,EACR,SAAS,GAOV,EACD,OAAuB,EAAA;AAEvB,QAAA,MAAM,WAAW,GAAG,QAAQ,CAAC,MAAM,CAAC,WAAkC;QAEtE,MAAM,qBAAqB,GAAG,oBAAoB,CAAC,WAAW,EAAE,aAAa,CAAC;AAE9E,QAAA,MAAM,MAAM,GAA4B;YACtC,aAAa;AACb,YAAA,WAAW,EAAE,qBAAqB;YAClC,UAAU;SACX;AAED,QAAA,IAAI,QAAQ,IAAI,IAAI,EAAE;AACpB,YAAA,MAAM,CAAC,QAAQ,GAAG,QAAQ;QAC5B;aAAO;YACL,MAAM,CAAC,QAAQ,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE;QACtC;AAEA,QAAA,MAAM,MAAM,GAAG;AACb,YAAA,IAAI,EAAE;gBACJ,SAAS,EAAE,IAAI,IAAI,EAAE;gBACrB,IAAI,SAAS,IAAI,IAAI,IAAI,EAAE,SAAS,EAAE,CAAC;AACxC,aAAA;AACD,YAAA,YAAY,EAAE;gBACZ,aAAa;AACb,gBAAA,WAAW,EAAE,qBAAqB;gBAClC,UAAU;gBACV,IAAI,QAAQ,IAAI,IAAI,IAAI,EAAE,QAAQ,EAAE,CAAC;AACtC,aAAA;SACF;AAED,QAAA,MAAM,OAAO,GAAG;AACd,YAAA,MAAM,EAAE,IAAI;AACZ,YAAA,GAAG,EAAE,IAAI;AACT,YAAA,IAAI,OAAO,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC;SAChC;AAED,QAAA,IAAI;YACF,OAAO,MAAM,WAAW,CAAC,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC;QACpE;QAAE,OAAO,GAAG,EAAE;AACZ,YAAA,IAAK,GAAyB,CAAC,IAAI,KAAK,KAAK,EAAE;AAC7C,gBAAA,QAAQ,MAAM,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE;YAClD;AACA,YAAA,MAAM,GAAG;QACX;IACF;AAEA;;AAEG;AACH,IAAA,eAAe,gBAAgB,CAC7B,EACE,aAAa,EACb,WAAW,EACX,UAAU,EACV,QAAQ,GAMT,EACD,OAAuB,EAAA;AAEvB,QAAA,MAAM,WAAW,GAAG,QAAQ,CAAC,MAAM,CAAC,WAAkC;QAEtE,MAAM,qBAAqB,GAAG,oBAAoB,CAAC,WAAW,EAAE,aAAa,CAAC;AAE9E,QAAA,MAAM,MAAM,GAA4B;YACtC,aAAa;AACb,YAAA,WAAW,EAAE,qBAAqB;YAClC,UAAU;SACX;AAED,QAAA,IAAI,QAAQ,IAAI,IAAI,EAAE;AACpB,YAAA,MAAM,CAAC,QAAQ,GAAG,QAAQ;QAC5B;aAAO;YACL,MAAM,CAAC,QAAQ,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE;QACtC;AAEA,QAAA,MAAM,OAAO,GAAG,OAAO,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE;QAC1C,MAAM,WAAW,CAAC,SAAS,CAAC,MAAM,EAAE,OAAO,CAAC;IAC9C;AAEA;;;AAGG;IACH,eAAe,2BAA2B,CAAC,EACzC,aAAa,EACb,WAAW,EACX,QAAQ,GAKT,EAAA;AACC,QAAA,MAAM,WAAW,GAAG,QAAQ,CAAC,MAAM,CAAC,WAAkC;AAEtE,QAAA,MAAM,MAAM,GAA4B;YACtC,aAAa;AACb,YAAA,WAAW,EAAE,oBAAoB,CAAC,WAAW,EAAE,aAAa,CAAC;SAC9D;AAED,QAAA,IAAI,QAAQ,IAAI,IAAI,EAAE;AACpB,YAAA,MAAM,CAAC,GAAG,GAAG,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,CAAC;QAC/D;aAAO;YACL,MAAM,CAAC,QAAQ,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE;QACtC;QAEA,OAAO,MAAM,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE;IAC9C;AAEA;;;;;AAKG;AACH,IAAA,eAAe,gBAAgB,GAAA;;QAC7B,MAAM,UAAU,GAAG,CAAC;AACpB,QAAA,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,UAAU,EAAE,OAAO,EAAE,EAAE;AACtD,YAAA,IAAI;AACF,gBAAA,MAAM,WAAW,GAAG,QAAQ,CAAC,MAAM,CAAC,WAAkC;AACtE,gBAAA,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE;AACtB,gBAAA,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC,GAAG,CAAC,CAAC,UAAU,MAAM;AACjE,oBAAA,SAAS,EAAE;AACT,wBAAA,MAAM,EAAE;4BACN,aAAa,EAAE,aAAa,CAAC,IAAI;4BACjC,WAAW,EAAE,WAAW,CAAC,KAAK;4BAC9B,UAAU;AACV,4BAAA,QAAQ,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE;AAC7B,yBAAA;AACD,wBAAA,MAAM,EAAE;AACN,4BAAA,YAAY,EAAE;gCACZ,aAAa,EAAE,aAAa,CAAC,IAAI;gCACjC,WAAW,EAAE,WAAW,CAAC,KAAK;gCAC9B,UAAU;AACV,gCAAA,SAAS,EAAE,GAAG;AACf,6BAAA;AACF,yBAAA;AACD,wBAAA,MAAM,EAAE,IAAI;AACb,qBAAA;AACF,iBAAA,CAAC,CAAC;AACH,gBAAA,MAAM,WAAW,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;gBACpD;YACF;YAAE,OAAO,GAAG,EAAE;AACZ,gBAAA,IAAI,OAAO,GAAG,UAAU,EAAE;AACxB,oBAAA,MAAM,KAAK,GAAG,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,GAAG,CAAC,CAAC;oBAC7C,MAAM,CAAC,IAAI,CACT,CAAA,2BAAA,EAA8B,OAAO,CAAA,CAAA,EAAI,UAAU,wBAAwB,KAAK,CAAA,IAAA,EAAO,MAAC,GAAa,CAAC,OAAO,MAAA,IAAA,IAAA,EAAA,KAAA,MAAA,GAAA,EAAA,GAAI,MAAM,CAAC,GAAG,CAAC,CAAA,CAAE,CAC/H;AACD,oBAAA,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,KAAK,UAAU,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;gBAC5D;qBAAO;oBACL,MAAM,CAAC,KAAK,CACV,oEAAoE;wBAClE,6DAA6D;wBAC7D,+EAA+E,EACjF,GAAG,CACJ;gBACH;YACF;QACF;IACF;IAEA,OAAO;QACL,eAAe;QACf,gBAAgB;QAChB,gBAAgB;QAChB,0BAA0B;QAC1B,2BAA2B;KAC5B;AACH;;;;"}

package/dist/methods/token.cjs

@@ -0,0 +1,117 @@
+'use strict';
+
+var winston = require('../config/winston.cjs');
+
+// Factory function that takes mongoose instance and returns the methods
+function createTokenMethods(mongoose) {
+    /**
+     * Creates a new Token instance.
+     */
+    async function createToken(tokenData) {
+        try {
+            const Token = mongoose.models.Token;
+            const currentTime = new Date();
+            const expiresAt = new Date(currentTime.getTime() + tokenData.expiresIn * 1000);
+            const newTokenData = {
+                ...tokenData,
+                createdAt: currentTime,
+                expiresAt,
+            };
+            return await Token.create(newTokenData);
+        }
+        catch (error) {
+            winston.debug('An error occurred while creating token:', error);
+            throw error;
+        }
+    }
+    /**
+     * Updates a Token document that matches the provided query.
+     */
+    async function updateToken(query, updateData) {
+        try {
+            const Token = mongoose.models.Token;
+            const dataToUpdate = { ...updateData };
+            if ((updateData === null || updateData === void 0 ? void 0 : updateData.expiresIn) !== undefined) {
+                dataToUpdate.expiresAt = new Date(Date.now() + updateData.expiresIn * 1000);
+            }
+            return await Token.findOneAndUpdate(query, dataToUpdate, { new: true });
+        }
+        catch (error) {
+            winston.debug('An error occurred while updating token:', error);
+            throw error;
+        }
+    }
+    /** Deletes all Token documents matching every provided field (AND semantics). */
+    async function deleteTokens(query) {
+        try {
+            const Token = mongoose.models.Token;
+            const conditions = [];
+            if (query.userId !== undefined) {
+                conditions.push({ userId: query.userId });
+            }
+            if (query.token !== undefined) {
+                conditions.push({ token: query.token });
+            }
+            if (query.email !== undefined) {
+                conditions.push({ email: query.email.trim().toLowerCase() });
+            }
+            if (query.type !== undefined) {
+                conditions.push({ type: query.type });
+            }
+            if (query.identifier !== undefined) {
+                conditions.push({ identifier: query.identifier });
+            }
+            if (conditions.length === 0) {
+                throw new Error('At least one query parameter must be provided');
+            }
+            return await Token.deleteMany({
+                $and: conditions,
+            });
+        }
+        catch (error) {
+            winston.debug('An error occurred while deleting tokens:', error);
+            throw error;
+        }
+    }
+    /**
+     * Finds a Token document that matches the provided query.
+     * Email is automatically normalized to lowercase for case-insensitive matching.
+     */
+    async function findToken(query, options) {
+        try {
+            const Token = mongoose.models.Token;
+            const conditions = [];
+            if (query.userId) {
+                conditions.push({ userId: query.userId });
+            }
+            if (query.token) {
+                conditions.push({ token: query.token });
+            }
+            if (query.email) {
+                conditions.push({ email: query.email.trim().toLowerCase() });
+            }
+            if (query.type) {
+                conditions.push({ type: query.type });
+            }
+            if (query.identifier) {
+                conditions.push({ identifier: query.identifier });
+            }
+            const token = await Token.findOne({ $and: conditions }, null, options).lean();
+            return token;
+        }
+        catch (error) {
+            winston.debug('An error occurred while finding token:', error);
+            throw error;
+        }
+    }
+    // Return all methods
+    return {
+        findToken,
+        createToken,
+        updateToken,
+        deleteTokens,
+    };
+}
+
+exports.createTokenMethods = createTokenMethods;
+//# sourceMappingURL=token.cjs.map

package/dist/methods/token.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"token.cjs","sources":["../../src/methods/token.ts"],"sourcesContent":[null],"names":["logger"],"mappings":";;;;AAIA;AACM,SAAU,kBAAkB,CAAC,QAAmC,EAAA;AACpE;;AAEG;IACH,eAAe,WAAW,CAAC,SAA0B,EAAA;AACnD,QAAA,IAAI;AACF,YAAA,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,KAAK;AACnC,YAAA,MAAM,WAAW,GAAG,IAAI,IAAI,EAAE;AAC9B,YAAA,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,GAAG,SAAS,CAAC,SAAS,GAAG,IAAI,CAAC;AAE9E,YAAA,MAAM,YAAY,GAAG;AACnB,gBAAA,GAAG,SAAS;AACZ,gBAAA,SAAS,EAAE,WAAW;gBACtB,SAAS;aACV;AAED,YAAA,OAAO,MAAM,KAAK,CAAC,MAAM,CAAC,YAAY,CAAC;QACzC;QAAE,OAAO,KAAK,EAAE;AACd,YAAAA,OAAM,CAAC,KAAK,CAAC,yCAAyC,EAAE,KAAK,CAAC;AAC9D,YAAA,MAAM,KAAK;QACb;IACF;AAEA;;AAEG;AACH,IAAA,eAAe,WAAW,CACxB,KAAiB,EACjB,UAA2B,EAAA;AAE3B,QAAA,IAAI;AACF,YAAA,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,KAAK;AAEnC,YAAA,MAAM,YAAY,GAAG,EAAE,GAAG,UAAU,EAAE;YACtC,IAAI,CAAA,UAAU,KAAA,IAAA,IAAV,UAAU,KAAA,KAAA,CAAA,GAAA,KAAA,CAAA,GAAV,UAAU,CAAE,SAAS,MAAK,SAAS,EAAE;AACvC,gBAAA,YAAY,CAAC,SAAS,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,UAAU,CAAC,SAAS,GAAG,IAAI,CAAC;YAC7E;AAEA,YAAA,OAAO,MAAM,KAAK,CAAC,gBAAgB,CAAC,KAAK,EAAE,YAAY,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC;QACzE;QAAE,OAAO,KAAK,EAAE;AACd,YAAAA,OAAM,CAAC,KAAK,CAAC,yCAAyC,EAAE,KAAK,CAAC;AAC9D,YAAA,MAAM,KAAK;QACb;IACF;;IAGA,eAAe,YAAY,CAAC,KAAiB,EAAA;AAC3C,QAAA,IAAI;AACF,YAAA,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,KAAK;YACnC,MAAM,UAAU,GAAG,EAAE;AAErB,YAAA,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,EAAE;gBAC9B,UAAU,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;YAC3C;AACA,YAAA,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS,EAAE;gBAC7B,UAAU,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC;YACzC;AACA,YAAA,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS,EAAE;AAC7B,gBAAA,UAAU,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;YAC9D;AACA,YAAA,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,EAAE;gBAC5B,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC;YACvC;AACA,YAAA,IAAI,KAAK,CAAC,UAAU,KAAK,SAAS,EAAE;gBAClC,UAAU,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC;YACnD;AAEA,YAAA,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE;AAC3B,gBAAA,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC;YAClE;AAEA,YAAA,OAAO,MAAM,KAAK,CAAC,UAAU,CAAC;AAC5B,gBAAA,IAAI,EAAE,UAAU;AACjB,aAAA,CAAC;QACJ;QAAE,OAAO,KAAK,EAAE;AACd,YAAAA,OAAM,CAAC,KAAK,CAAC,0CAA0C,EAAE,KAAK,CAAC;AAC/D,YAAA,MAAM,KAAK;QACb;IACF;AAEA;;;AAGG;AACH,IAAA,eAAe,SAAS,CAAC,KAAiB,EAAE,OAAsB,EAAA;AAChE,QAAA,IAAI;AACF,YAAA,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,KAAK;YACnC,MAAM,UAAU,GAAG,EAAE;AAErB,YAAA,IAAI,KAAK,CAAC,MAAM,EAAE;gBAChB,UAAU,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;YAC3C;AACA,YAAA,IAAI,KAAK,CAAC,KAAK,EAAE;gBACf,UAAU,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC;YACzC;AACA,YAAA,IAAI,KAAK,CAAC,KAAK,EAAE;AACf,gBAAA,UAAU,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;YAC9D;AACA,YAAA,IAAI,KAAK,CAAC,IAAI,EAAE;gBACd,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC;YACvC;AACA,YAAA,IAAI,KAAK,CAAC,UAAU,EAAE;gBACpB,UAAU,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC;YACnD;YAEA,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC,IAAI,EAAE;AAE7E,YAAA,OAAO,KAAsB;QAC/B;QAAE,OAAO,KAAK,EAAE;AACd,YAAAA,OAAM,CAAC,KAAK,CAAC,wCAAwC,EAAE,KAAK,CAAC;AAC7D,YAAA,MAAM,KAAK;QACb;IACF;;IAGA,OAAO;QACL,SAAS;QACT,WAAW;QACX,WAAW;QACX,YAAY;KACb;AACH;;;;"}