@pikku/mongodb 0.12.8 → 0.12.10

package/CHANGELOG.md

@@ -1,5 +1,61 @@
 # @pikku/mongodb
 
+## 0.12.10
+
+### Patch Changes
+
+- 4324652: Scope AI agent thread reads to the calling session.
+
+  The generated thread-management functions (`getAgentThreads`,
+  `getAgentThreadMessages`, `getAgentThreadRuns`, `deleteAgentThread`) keyed purely
+  off a caller-supplied `threadId` and treated `resourceId` as an optional filter,
+  so omitting it enumerated every tenant's threads.
+  - `listThreads` gains an `owners` **authorization constraint** (distinct from the
+    `resourceId` filter): an empty array matches nothing, and it is always derived
+    from the session, never from input. Implemented across the Kysely, Redis and
+    MongoDB agent run services, with LIKE/regex metacharacter escaping so an owner
+    id containing `_` or `%` cannot match a foreign owner.
+  - The three `threadId`-keyed functions are now guarded by an `isThreadOwner`
+    `pikkuPermission` rather than an in-body check. A thread that does not exist is
+    denied rather than 404'd, so it is indistinguishable from one owned by someone
+    else.
+  - New `@pikku/core/ai-agent` helpers: `canAccessThread`, `threadOwnerConstraint`,
+    `sessionPrincipals`, `isOwnedByPrincipal`.
+
+  Services destructured by a wired function are now non-optional inside it.
+
+  The inspector already aggregated the services used by every wired `func`,
+  `permissions` and `middleware` into `RequiredSingletonServices`, but the
+  generated function types defaulted their service parameter to the raw `Services`
+  — so a service declared `foo?: Foo` still arrived as possibly-undefined, forcing
+  `if (!foo) throw new MissingServiceError(...)` guards that could never fire.
+  Generated types now expose `WiredSingletonServices` / `WiredServices`
+  (`RequiredSingletonServices & Services`) and default the `RequiredServices`
+  generic of functions, permissions, middleware, auth and approval-description
+  helpers to them. Optionality now means only what it should: "this service may
+  not be created, because nothing uses it".
+
+- Updated dependencies [5f19016]
+- Updated dependencies [78e4778]
+- Updated dependencies [4324652]
+- Updated dependencies [de044f8]
+- Updated dependencies [cd1a811]
+- Updated dependencies [19fa6f0]
+- Updated dependencies [b501612]
+- Updated dependencies [eb37b1e]
+  - @pikku/core@0.12.66
+
+## 0.12.9
+
+### Patch Changes
+
+- 41ce2cb: Upgrade to TypeScript 6 and raise the minimum Node.js version to 22.
+
+  All packages now build against `typescript@^6.0.3` and declare `engines.node >= 22`. Internal tooling (`ts-json-schema-generator`, `zod-to-ts`) was bumped to TypeScript 6-compatible releases.
+
+- Updated dependencies [41ce2cb]
+  - @pikku/core@0.12.44
+
 ## 0.12.8
 
 ### Patch Changes

package/dist/src/mongodb-agent-run-service.d.ts

@@ -9,6 +9,7 @@ export declare class MongoDBAgentRunService implements AgentRunService {
     listThreads(options?: {
         agentName?: string;
         resourceId?: string;
+        owners?: string[];
         limit?: number;
         offset?: number;
     }): Promise<AIThread[]>;

package/dist/src/mongodb-agent-run-service.js

@@ -1,3 +1,6 @@
+// Owner ids are untrusted input to the regex, so metacharacters must not be
+// able to widen the prefix match.
+const escapeRegExp = (value) => value.replace(/[.*+?^${}()|[\]\\]/g, '\\$&');
 export class MongoDBAgentRunService {
     threads;
     messages;
@@ -10,11 +13,21 @@ export class MongoDBAgentRunService {
         this.runs = db.collection('ai_run');
     }
     async listThreads(options) {
-        const { agentName, resourceId, limit = 50, offset = 0 } = options ?? {};
+        const { agentName, resourceId, owners, limit = 50, offset = 0, } = options ?? {};
+        // An owners constraint is an authorization boundary, so an empty list must
+        // match nothing rather than degrade to "no filter".
+        if (owners && owners.length === 0)
+            return [];
         let filter = {};
         if (resourceId) {
             filter.resourceId = resourceId;
         }
+        if (owners) {
+            filter.$or = owners.flatMap((owner) => [
+                { resourceId: owner },
+                { resourceId: { $regex: `^${escapeRegExp(owner)}:` } },
+            ]);
+        }
         if (agentName) {
             const threadIds = await this.runs.distinct('threadId', {
                 agentName,

package/dist/src/mongodb-workflow-service.js

@@ -216,13 +216,7 @@ export class MongoDBWorkflowService extends PikkuWorkflowService {
             .limit(1)
             .toArray();
         if (latestHistory.length > 0) {
-            await this.stepHistory.updateOne({ _id: latestHistory[0]._id }, {
-                $set: {
-                    status: 'failed',
-                    error: serializedError,
-                    failedAt: new Date(),
-                },
-            });
+            await this.stepHistory.updateOne({ _id: latestHistory[0]._id }, { $set: { status: 'failed', error: serializedError, failedAt: new Date() } });
         }
     }
     async createRetryAttemptImpl(stepId, status) {

package/dist/tsconfig.tsbuildinfo

@@ -1 +1 @@
-{"root":["../src/index.ts","../src/mongodb-agent-run-service.ts","../src/mongodb-ai-storage-service.ts","../src/mongodb-channel-store.ts","../src/mongodb-deployment-service.ts","../src/mongodb-eventhub-store.ts","../src/mongodb-secret-service.ts","../src/mongodb-session-store.ts","../src/mongodb-workflow-run-service.ts","../src/mongodb-workflow-service.ts","../src/pikku-mongodb.ts"],"version":"5.9.3"}
+{"root":["../src/index.ts","../src/mongodb-agent-run-service.ts","../src/mongodb-ai-storage-service.ts","../src/mongodb-channel-store.ts","../src/mongodb-deployment-service.ts","../src/mongodb-eventhub-store.ts","../src/mongodb-secret-service.ts","../src/mongodb-session-store.ts","../src/mongodb-workflow-run-service.ts","../src/mongodb-workflow-service.ts","../src/pikku-mongodb.ts"],"version":"6.0.3"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pikku/mongodb",
-  "version": "0.12.8",
+  "version": "0.12.10",
   "author": "yasser.fadl@gmail.com",
   "license": "MIT",
   "module": "dist/src/index.js",
@@ -17,7 +17,7 @@
     "prepublishOnly": "yarn build"
   },
   "peerDependencies": {
-    "@pikku/core": "^0.12.39"
+    "@pikku/core": "^0.12.66"
   },
   "dependencies": {
     "mongodb": "^6.12.0"
@@ -25,7 +25,7 @@
   "devDependencies": {
     "mongodb": "^6.12.0",
     "mongodb-memory-server": "^10.4.0",
-    "typescript": "^5.9"
+    "typescript": "^6.0.3"
   },
   "exports": {
     ".": "./dist/src/index.js"

package/run-tests.sh

@@ -38,16 +38,16 @@ if [ ${#files[@]} -eq 0 ]; then
 fi
 
 # Construct the node command
-node_cmd="node --import tsx --test"
+node_cmd=(node --import tsx --test)
 
 # Append options based on flags
 if [ "$watch_mode" = true ]; then
-  node_cmd="$node_cmd --watch"
+  node_cmd+=(--watch)
 fi
 
 if [ "$coverage_mode" = true ]; then
-  node_cmd="$node_cmd --test-coverage-include=\"src/**/*.{ts,js}\" --test-coverage-exclude=\"**/dist/**\" --experimental-test-coverage --test-reporter=lcov --test-reporter-destination=lcov.info"
+  node_cmd+=(--test-coverage-include="src/**/*.{ts,js}" --test-coverage-exclude="**/dist/**" --experimental-test-coverage --test-reporter=lcov --test-reporter-destination=lcov.info)
 fi
 
 # Execute the node command with the expanded list of files
-$node_cmd "${files[@]}"
+"${node_cmd[@]}" "${files[@]}"

package/src/mongodb-agent-run-service.ts

@@ -6,6 +6,11 @@ import type {
 } from '@pikku/core/ai-agent'
 import type { Db, Collection } from 'mongodb'
 
+// Owner ids are untrusted input to the regex, so metacharacters must not be
+// able to widen the prefix match.
+const escapeRegExp = (value: string) =>
+  value.replace(/[.*+?^${}()|[\]\\]/g, '\\$&')
+
 interface AIThreadDoc {
   _id: string
   resourceId: string
@@ -71,10 +76,21 @@ export class MongoDBAgentRunService implements AgentRunService {
   async listThreads(options?: {
     agentName?: string
     resourceId?: string
+    owners?: string[]
     limit?: number
     offset?: number
   }): Promise<AIThread[]> {
-    const { agentName, resourceId, limit = 50, offset = 0 } = options ?? {}
+    const {
+      agentName,
+      resourceId,
+      owners,
+      limit = 50,
+      offset = 0,
+    } = options ?? {}
+
+    // An owners constraint is an authorization boundary, so an empty list must
+    // match nothing rather than degrade to "no filter".
+    if (owners && owners.length === 0) return []
 
     let filter: Record<string, any> = {}
 
@@ -82,6 +98,13 @@ export class MongoDBAgentRunService implements AgentRunService {
       filter.resourceId = resourceId
     }
 
+    if (owners) {
+      filter.$or = owners.flatMap((owner) => [
+        { resourceId: owner },
+        { resourceId: { $regex: `^${escapeRegExp(owner)}:` } },
+      ])
+    }
+
     if (agentName) {
       const threadIds = await this.runs.distinct('threadId', {
         agentName,