@lobehub/chat 1.92.1 → 1.92.2

package/src/database/migrations/meta/_journal.json

@@ -168,6 +168,13 @@
       "when": 1748925630721,
       "tag": "0023_remove_param_and_doubao",
       "breakpoints": true
+    },
+    {
+      "idx": 24,
+      "version": "7",
+      "when": 1749301573666,
+      "tag": "0024_add_rbac_tables",
+      "breakpoints": true
     }
   ],
   "version": "6"

package/src/database/schemas/index.ts

@@ -8,6 +8,7 @@ export * from './nextauth';
 export * from './oidc';
 export * from './rag';
 export * from './ragEvals';
+export * from './rbac';
 export * from './relations';
 export * from './session';
 export * from './topic';

package/src/database/schemas/rbac.ts

@@ -0,0 +1,82 @@
+/* eslint-disable sort-keys-fix/sort-keys-fix  */
+import { boolean, index, integer, pgTable, primaryKey, text, timestamp } from 'drizzle-orm/pg-core';
+
+import { timestamps } from './_helpers';
+import { users } from './user';
+
+// Roles table
+export const roles = pgTable('rbac_roles', {
+  id: integer('id').primaryKey().generatedByDefaultAsIdentity(),
+  name: text('name').notNull().unique(), // Role name, e.g.: admin, user, guest
+  displayName: text('display_name').notNull(), // Display name
+  description: text('description'), // Role description
+  isSystem: boolean('is_system').default(false).notNull(), // Whether it's a system role
+  isActive: boolean('is_active').default(true).notNull(), // Whether it's active
+
+  ...timestamps,
+});
+
+export type NewRole = typeof roles.$inferInsert;
+export type RoleItem = typeof roles.$inferSelect;
+
+// Permissions table
+export const permissions = pgTable('rbac_permissions', {
+  id: integer('id').primaryKey().generatedByDefaultAsIdentity(),
+  code: text('code').notNull().unique(), // Permission code, e.g.: chat:create, file:upload
+  name: text('name').notNull(), // Permission name
+  description: text('description'), // Permission description
+  category: text('category').notNull(), // Category it belongs to, e.g.: message, knowledge_base, agent
+  isActive: boolean('is_active').default(true).notNull(), // Whether it's active
+
+  ...timestamps,
+});
+
+export type NewPermission = typeof permissions.$inferInsert;
+export type PermissionItem = typeof permissions.$inferSelect;
+
+// Role-permission association table
+export const rolePermissions = pgTable(
+  'rbac_role_permissions',
+  {
+    roleId: integer('role_id')
+      .references(() => roles.id, { onDelete: 'cascade' })
+      .notNull(),
+    permissionId: integer('permission_id')
+      .references(() => permissions.id, { onDelete: 'cascade' })
+      .notNull(),
+
+    createdAt: timestamp('created_at', { withTimezone: true }).notNull().defaultNow(),
+  },
+  (self) => [
+    primaryKey({ columns: [self.roleId, self.permissionId] }),
+    index('rbac_role_permissions_role_id_idx').on(self.roleId),
+    index('rbac_role_permissions_permission_id_idx').on(self.permissionId),
+  ],
+);
+
+export type NewRolePermission = typeof rolePermissions.$inferInsert;
+export type RolePermissionItem = typeof rolePermissions.$inferSelect;
+
+// User-role association table
+export const userRoles = pgTable(
+  'rbac_user_roles',
+  {
+    userId: text('user_id')
+      .references(() => users.id, { onDelete: 'cascade' })
+      .notNull(),
+    roleId: integer('role_id')
+      .references(() => roles.id, { onDelete: 'cascade' })
+      .notNull(),
+
+    createdAt: timestamp('created_at', { withTimezone: true }).notNull().defaultNow(),
+    expiresAt: timestamp('expires_at', { withTimezone: true }), // Support for temporary roles
+  },
+  (self) => [
+    primaryKey({ columns: [self.userId, self.roleId] }),
+    index('rbac_user_roles_user_id_idx').on(self.userId),
+    index('rbac_user_roles_role_id_idx').on(self.roleId),
+  ],
+);
+
+export type NewUserRole = typeof userRoles.$inferInsert;
+export type UserRoleItem = typeof userRoles.$inferSelect;

package/src/libs/model-runtime/azureOpenai/index.ts

@@ -5,7 +5,14 @@ import { systemToUserModels } from '@/const/models';
 
 import { LobeRuntimeAI } from '../BaseAI';
 import { AgentRuntimeErrorType } from '../error';
-import { ChatMethodOptions, ChatStreamPayload, ModelProvider } from '../types';
+import {
+  ChatMethodOptions,
+  ChatStreamPayload,
+  Embeddings,
+  EmbeddingsOptions,
+  EmbeddingsPayload,
+  ModelProvider,
+} from '../types';
 import { AgentRuntimeError } from '../utils/createError';
 import { debugStream } from '../utils/debugStream';
 import { transformResponseToStream } from '../utils/openaiCompatibleFactory';
@@ -75,33 +82,50 @@ export class LobeAzureOpenAI implements LobeRuntimeAI {
         });
       }
     } catch (e) {
-      let error = e as { [key: string]: any; code: string; message: string };
+      return this.handleError(e, model);
+    }
+  }
+
+  async embeddings(payload: EmbeddingsPayload, options?: EmbeddingsOptions): Promise<Embeddings[]> {
+    try {
+      const res = await this.client.embeddings.create(
+        { ...payload, encoding_format: 'float', user: options?.user },
+        { headers: options?.headers, signal: options?.signal },
+      );
+
+      return res.data.map((item) => item.embedding);
+    } catch (error) {
+      return this.handleError(error, payload.model);
+    }
+  }
+
+  protected handleError(e: any, model?: string): never {
+    let error = e as { [key: string]: any; code: string; message: string };
 
-      if (error.code) {
-        switch (error.code) {
-          case 'DeploymentNotFound': {
-            error = { ...error, deployId: model };
-          }
+    if (error.code) {
+      switch (error.code) {
+        case 'DeploymentNotFound': {
+          error = { ...error, deployId: model };
         }
-      } else {
-        error = {
-          cause: error.cause,
-          message: error.message,
-          name: error.name,
-        } as any;
       }
+    } else {
+      error = {
+        cause: error.cause,
+        message: error.message,
+        name: error.name,
+      } as any;
+    }
 
-      const errorType = error.code
-        ? AgentRuntimeErrorType.ProviderBizError
-        : AgentRuntimeErrorType.AgentRuntimeError;
+    const errorType = error.code
+      ? AgentRuntimeErrorType.ProviderBizError
+      : AgentRuntimeErrorType.AgentRuntimeError;
 
-      throw AgentRuntimeError.chat({
-        endpoint: this.maskSensitiveUrl(this.baseURL),
-        error,
-        errorType,
-        provider: ModelProvider.Azure,
-      });
-    }
+    throw AgentRuntimeError.chat({
+      endpoint: this.maskSensitiveUrl(this.baseURL),
+      error,
+      errorType,
+      provider: ModelProvider.Azure,
+    });
   }
 
   // Convert object keys to camel case, copy from `@azure/openai` in `node_modules/@azure/openai/dist/index.cjs`