@promptbook/cli 0.103.0-9 → 0.103.0

package/apps/agents-server/src/database/schema.ts

@@ -0,0 +1,308 @@
+/**
+ * AUTO-GENERATED TYPES FROM `schema.sql`
+ * Source of truth: `schema.sql` *(do not edit table structure here manually)*
+ *
+ * [💽] Prompt:
+ * Re-generate supabase typescript schema from the `./schema.sql`
+ */
+
+// Json helper (Supabase style)
+export type Json = string | number | boolean | null | { [key: string]: Json | undefined } | Json[];
+
+// Public schema database interface (Supabase convention)
+export type AgentsServerDatabase = {
+    // <- TODO: [🧠][🕜] Better naming
+    public: {
+        Tables: {
+            Metadata: {
+                Row: {
+                    id: number;
+                    createdAt: string;
+                    updatedAt: string;
+                    key: string;
+                    value: string;
+                    note: string | null;
+                };
+                Insert: {
+                    id?: number;
+                    createdAt?: string;
+                    updatedAt?: string;
+                    key: string;
+                    value: string;
+                    note?: string | null;
+                };
+                Update: {
+                    id?: number;
+                    createdAt?: string;
+                    updatedAt?: string;
+                    key?: string;
+                    value?: string;
+                    note?: string | null;
+                };
+                Relationships: [];
+            };
+            Agent: {
+                Row: {
+                    id: number;
+                    agentName: string;
+                    createdAt: string;
+                    updatedAt: string | null;
+                    agentHash: string;
+                    agentSource: string;
+                    agentProfile: Json;
+                    promptbookEngineVersion: string;
+                    usage: Json | null;
+                    preparedModelRequirements: Json | null;
+                    preparedExternals: Json | null;
+                };
+                Insert: {
+                    id?: number;
+                    agentName: string;
+                    createdAt: string;
+                    updatedAt?: string | null;
+                    agentHash: string;
+                    agentSource: string;
+                    agentProfile: Json;
+                    promptbookEngineVersion: string;
+                    usage?: Json | null;
+                    preparedModelRequirements?: Json | null;
+                    preparedExternals?: Json | null;
+                };
+                Update: {
+                    id?: number;
+                    agentName?: string;
+                    createdAt?: string;
+                    updatedAt?: string | null;
+                    agentHash?: string;
+                    agentSource?: string;
+                    agentProfile?: Json;
+                    promptbookEngineVersion?: string;
+                    usage?: Json | null;
+                    preparedModelRequirements?: Json | null;
+                    preparedExternals?: Json | null;
+                };
+                Relationships: [];
+            };
+            AgentHistory: {
+                Row: {
+                    id: number;
+                    createdAt: string;
+                    agentName: string;
+                    agentHash: string;
+                    previousAgentHash: string | null;
+                    agentSource: string;
+                    promptbookEngineVersion: string;
+                };
+                Insert: {
+                    id?: number;
+                    createdAt: string;
+                    agentName: string;
+                    agentHash: string;
+                    previousAgentHash?: string | null;
+                    agentSource: string;
+                    promptbookEngineVersion: string;
+                };
+                Update: {
+                    id?: number;
+                    createdAt?: string;
+                    agentName?: string;
+                    agentHash?: string;
+                    previousAgentHash?: string | null;
+                    agentSource?: string;
+                    promptbookEngineVersion?: string;
+                };
+                Relationships: [];
+            };
+            ChatHistory: {
+                Row: {
+                    id: number;
+                    createdAt: string;
+                    messageHash: string;
+                    previousMessageHash: string | null;
+                    agentName: string;
+                    agentHash: string;
+                    message: Json;
+                    promptbookEngineVersion: string | null;
+                    url: string | null;
+                    ip: string | null;
+                    userAgent: string | null;
+                    language: string | null;
+                    platform: string | null;
+                    source: 'AGENT_PAGE_CHAT' | 'OPENAI_API_COMPATIBILITY' | null;
+                    apiKey: string | null;
+                };
+                Insert: {
+                    id?: number;
+                    createdAt: string;
+                    messageHash: string;
+                    previousMessageHash?: string | null;
+                    agentName: string;
+                    agentHash: string;
+                    message: Json;
+                    promptbookEngineVersion?: string | null;
+                    url?: string | null;
+                    ip?: string | null;
+                    userAgent?: string | null;
+                    language?: string | null;
+                    platform?: string | null;
+                    source?: 'AGENT_PAGE_CHAT' | 'OPENAI_API_COMPATIBILITY' | null;
+                    apiKey?: string | null;
+                };
+                Update: {
+                    id?: number;
+                    createdAt?: string;
+                    messageHash?: string;
+                    previousMessageHash?: string | null;
+                    agentName?: string;
+                    agentHash?: string;
+                    message?: Json;
+                    promptbookEngineVersion?: string | null;
+                    url?: string | null;
+                    ip?: string | null;
+                    userAgent?: string | null;
+                    language?: string | null;
+                    platform?: string | null;
+                    source?: 'AGENT_PAGE_CHAT' | 'OPENAI_API_COMPATIBILITY' | null;
+                    apiKey?: string | null;
+                };
+                Relationships: [];
+            };
+            ChatFeedback: {
+                Row: {
+                    id: number;
+                    createdAt: string;
+                    agentName: string;
+                    agentHash: string;
+                    rating: string | null;
+                    textRating: string | null;
+                    chatThread: string | null;
+                    userNote: string | null;
+                    expectedAnswer: string | null;
+                    promptbookEngineVersion: string | null;
+                    url: string | null;
+                    ip: string | null;
+                    userAgent: string | null;
+                    language: string | null;
+                    platform: string | null;
+                };
+                Insert: {
+                    id?: number;
+                    createdAt: string;
+                    agentName: string;
+                    agentHash: string;
+                    rating?: string | null;
+                    textRating?: string | null;
+                    chatThread?: string | null;
+                    userNote?: string | null;
+                    expectedAnswer?: string | null;
+                    promptbookEngineVersion?: string | null;
+                    url?: string | null;
+                    ip?: string | null;
+                    userAgent?: string | null;
+                    language?: string | null;
+                    platform?: string | null;
+                };
+                Update: {
+                    id?: number;
+                    createdAt?: string;
+                    agentName?: string;
+                    agentHash?: string;
+                    rating?: string | null;
+                    textRating?: string | null;
+                    chatThread?: string | null;
+                    userNote?: string | null;
+                    expectedAnswer?: string | null;
+                    promptbookEngineVersion?: string | null;
+                    url?: string | null;
+                    ip?: string | null;
+                    userAgent?: string | null;
+                    language?: string | null;
+                    platform?: string | null;
+                };
+                Relationships: [];
+            };
+            User: {
+                Row: {
+                    id: number;
+                    createdAt: string;
+                    updatedAt: string;
+                    username: string;
+                    passwordHash: string;
+                    isAdmin: boolean;
+                };
+                Insert: {
+                    id?: number;
+                    createdAt?: string;
+                    updatedAt?: string;
+                    username: string;
+                    passwordHash: string;
+                    isAdmin?: boolean;
+                };
+                Update: {
+                    id?: number;
+                    createdAt?: string;
+                    updatedAt?: string;
+                    username?: string;
+                    passwordHash?: string;
+                    isAdmin?: boolean;
+                };
+                Relationships: [];
+            };
+            LlmCache: {
+                Row: {
+                    id: number;
+                    createdAt: string;
+                    updatedAt: string;
+                    hash: string;
+                    value: Json;
+                };
+                Insert: {
+                    id?: number;
+                    createdAt?: string;
+                    updatedAt?: string;
+                    hash: string;
+                    value: Json;
+                };
+                Update: {
+                    id?: number;
+                    createdAt?: string;
+                    updatedAt?: string;
+                    hash?: string;
+                    value?: Json;
+                };
+                Relationships: [];
+            };
+            ApiTokens: {
+                Row: {
+                    id: number;
+                    createdAt: string;
+                    updatedAt: string;
+                    token: string;
+                    note: string | null;
+                    isRevoked: boolean;
+                };
+                Insert: {
+                    id?: number;
+                    createdAt?: string;
+                    updatedAt?: string;
+                    token: string;
+                    note?: string | null;
+                    isRevoked?: boolean;
+                };
+                Update: {
+                    id?: number;
+                    createdAt?: string;
+                    updatedAt?: string;
+                    token?: string;
+                    note?: string | null;
+                    isRevoked?: boolean;
+                };
+                Relationships: [];
+            };
+        };
+        Views: Record<string, never>;
+        Functions: Record<string, never>;
+        Enums: Record<string, never>;
+        CompositeTypes: Record<string, never>;
+    };
+};

package/apps/agents-server/src/deamons/longRunningTask.ts

@@ -0,0 +1,37 @@
+import { forTime } from 'waitasecond';
+import { just } from '../../../../src/utils/organization/just';
+import { $randomToken } from '../../../../src/utils/random/$randomToken';
+
+let longRunningTask: {
+    taskId: string;
+    tick: number;
+    createdAt: Date;
+    updatedAt: Date;
+} | null = null;
+
+export function getLongRunningTask() {
+    if (longRunningTask !== null) {
+        return longRunningTask;
+    }
+
+    const taskId = $randomToken(8);
+    let tick = 0;
+
+    longRunningTask = {
+        taskId,
+        tick,
+        createdAt: new Date(),
+        updatedAt: new Date(),
+    };
+
+    (async () => {
+        while (just(true)) {
+            await forTime(1000);
+            // console.log(`Long running task ${taskId} tick ${tick}`);
+            longRunningTask.updatedAt = new Date();
+            longRunningTask.tick = ++tick;
+        }
+    })();
+
+    return longRunningTask;
+}

package/apps/agents-server/src/middleware.ts

@@ -0,0 +1,305 @@
+import { TODO_any } from '@promptbook-local/types';
+import { createClient } from '@supabase/supabase-js';
+import { NextRequest, NextResponse } from 'next/server';
+import { SERVERS, SUPABASE_TABLE_PREFIX } from '../config';
+import { isIpAllowed } from './utils/isIpAllowed';
+
+// Note: Re-implementing normalizeTo_PascalCase to avoid importing from @promptbook-local/utils which might have Node.js dependencies
+function normalizeTo_PascalCase(text: string): string {
+    return text
+        .replace(/(?:^\w|[A-Z]|\b\w)/g, (word, index) => {
+            return word.toUpperCase();
+        })
+        .replace(/\s+/g, '');
+}
+
+export async function middleware(req: NextRequest) {
+    // 1. Get client IP
+    let ip = (req as TODO_any).ip;
+    const xForwardedFor = req.headers.get('x-forwarded-for');
+    if (!ip && xForwardedFor) {
+        ip = xForwardedFor.split(',')[0].trim();
+    }
+    // Fallback for local development if needed, though req.ip is usually ::1 or 127.0.0.1
+    ip = ip || '127.0.0.1';
+
+    // 2. Determine allowed IPs
+    // Priority: Metadata > Environment Variable
+
+    const allowedIpsEnv = process.env.RESTRICT_IP;
+    let allowedIpsMetadata: string | null = null;
+
+    // To fetch metadata, we need to know the table name, which depends on the host
+    const host = req.headers.get('host');
+
+    if (host) {
+        let tablePrefix = SUPABASE_TABLE_PREFIX;
+
+        if (SERVERS && SERVERS.length > 0) {
+            // Logic mirrored from src/tools/$provideServer.ts
+            if (SERVERS.some((server) => server === host)) {
+                let serverName = host;
+                serverName = serverName.replace(/\.ptbk\.io$/, '');
+                serverName = normalizeTo_PascalCase(serverName);
+                tablePrefix = `server_${serverName}_`;
+            }
+        }
+
+        const supabaseUrl = process.env.NEXT_PUBLIC_SUPABASE_URL;
+        const supabaseKey = process.env.SUPABASE_SERVICE_ROLE_KEY || process.env.NEXT_PUBLIC_SUPABASE_ANON_KEY;
+
+        if (supabaseUrl && supabaseKey) {
+            try {
+                const supabase = createClient(supabaseUrl, supabaseKey, {
+                    auth: {
+                        persistSession: false,
+                        autoRefreshToken: false,
+                    },
+                });
+
+                const { data } = await supabase
+                    .from(`${tablePrefix}Metadata`)
+                    .select('value')
+                    .eq('key', 'RESTRICT_IP')
+                    .single();
+
+                if (data && data.value) {
+                    allowedIpsMetadata = data.value;
+                }
+            } catch (error) {
+                console.error('Error fetching metadata in middleware:', error);
+            }
+        }
+    }
+
+    const allowedIps =
+        allowedIpsMetadata !== null && allowedIpsMetadata !== undefined ? allowedIpsMetadata : allowedIpsEnv;
+
+    let isValidToken = false;
+    const authHeader = req.headers.get('authorization');
+
+    if (authHeader && authHeader.startsWith('Bearer ')) {
+        const token = authHeader.split(' ')[1];
+
+        if (token.startsWith('ptbk_')) {
+            const host = req.headers.get('host');
+            let tablePrefix = SUPABASE_TABLE_PREFIX;
+
+            if (host && SERVERS && SERVERS.length > 0) {
+                if (SERVERS.some((server) => server === host)) {
+                    let serverName = host;
+                    serverName = serverName.replace(/\.ptbk\.io$/, '');
+                    serverName = normalizeTo_PascalCase(serverName);
+                    tablePrefix = `server_${serverName}_`;
+                }
+            }
+
+            const supabaseUrl = process.env.NEXT_PUBLIC_SUPABASE_URL;
+            const supabaseKey = process.env.SUPABASE_SERVICE_ROLE_KEY || process.env.NEXT_PUBLIC_SUPABASE_ANON_KEY;
+
+            if (supabaseUrl && supabaseKey) {
+                try {
+                    const supabase = createClient(supabaseUrl, supabaseKey, {
+                        auth: {
+                            persistSession: false,
+                            autoRefreshToken: false,
+                        },
+                    });
+
+                    const { data } = await supabase
+                        .from(`${tablePrefix}ApiTokens`)
+                        .select('id')
+                        .eq('token', token)
+                        .eq('isRevoked', false)
+                        .single();
+
+                    if (data) {
+                        isValidToken = true;
+                    }
+                } catch (error) {
+                    console.error('Error validating token in middleware:', error);
+                }
+            }
+        }
+    }
+
+    const isIpAllowedResult = isIpAllowed(ip, allowedIps);
+    const isLoggedIn = req.cookies.has('sessionToken');
+    const isAccessRestricted = !isIpAllowedResult && !isLoggedIn && !isValidToken;
+
+    // Handle OPTIONS (preflight) requests globally
+    if (req.method === 'OPTIONS') {
+        return new NextResponse(null, {
+            status: 200,
+            headers: {
+                'Access-Control-Allow-Origin': '*',
+                'Access-Control-Allow-Methods': 'GET, POST, OPTIONS',
+                'Access-Control-Allow-Headers': 'Content-Type, Authorization',
+            },
+        });
+    }
+
+    if (isAccessRestricted) {
+        const path = req.nextUrl.pathname;
+
+        // Allow specific paths for restricted users
+        // - /: Homepage / Agent List
+        // - /agents: Agent List
+        // - /api/agents: Agent List API
+        // - /api/federated-agents: Federated Agent List API
+        // - /api/auth/*: Auth endpoints
+        // - /restricted: Restricted Access Page
+        // - /docs: Documentation
+        // - /manifest.webmanifest: Manifest
+        // - /sw.js: Service Worker
+        const isAllowedPath =
+            path === '/' ||
+            path === '/agents' ||
+            path.startsWith('/api/agents') ||
+            path.startsWith('/api/federated-agents') ||
+            path.startsWith('/api/auth') ||
+            path === '/restricted' ||
+            path.startsWith('/docs') ||
+            path === '/manifest.webmanifest' ||
+            path === '/sw.js';
+
+        if (isAllowedPath) {
+            return NextResponse.next();
+        }
+
+        // Block access to other paths (e.g. Chat)
+        if (req.headers.get('accept')?.includes('text/html')) {
+            const url = req.nextUrl.clone();
+            url.pathname = '/restricted';
+            return NextResponse.rewrite(url);
+        }
+        return new NextResponse('Forbidden', { status: 403 });
+    }
+
+    // If we are here, the user is allowed (either by IP or session)
+    // Proceed with normal logic
+
+    // 3. Redirect /:agentName/* to /agents/:agentName/*
+    //    This enables accessing agents from the root path
+    const pathParts = req.nextUrl.pathname.split('/');
+    const potentialAgentName = pathParts[1];
+
+    if (
+        potentialAgentName &&
+        ![
+            'agents',
+            'api',
+            'admin',
+            'docs',
+            'test',
+            'embed',
+            '_next',
+            'manifest.webmanifest',
+            'sw.js',
+            'favicon.ico',
+            'sitemap.xml',
+            'robots.txt',
+            'security.txt',
+            'humans.txt',
+        ].includes(potentialAgentName) &&
+        !potentialAgentName.startsWith('.') &&
+        // Note: Other static files are excluded by the matcher configuration below
+        true
+    ) {
+        const url = req.nextUrl.clone();
+        url.pathname = `/agents${req.nextUrl.pathname}`;
+        const response = NextResponse.redirect(url);
+
+        // Enable CORS for the redirect
+        response.headers.set('Access-Control-Allow-Origin', '*');
+        response.headers.set('Access-Control-Allow-Methods', 'GET, POST, OPTIONS');
+        response.headers.set('Access-Control-Allow-Headers', 'Content-Type');
+
+        return response;
+    }
+
+    // 4. Custom Domain Routing
+    //    If the host is not one of the configured SERVERS, try to find an agent with a matching META LINK
+
+    if (host && SERVERS && !SERVERS.some((server) => server === host)) {
+        const supabaseUrl = process.env.NEXT_PUBLIC_SUPABASE_URL;
+        const supabaseKey = process.env.SUPABASE_SERVICE_ROLE_KEY || process.env.NEXT_PUBLIC_SUPABASE_ANON_KEY;
+
+        if (supabaseUrl && supabaseKey) {
+            const supabase = createClient(supabaseUrl, supabaseKey, {
+                auth: {
+                    persistSession: false,
+                    autoRefreshToken: false,
+                },
+            });
+
+            // Determine prefixes to check
+            // We check all configured servers because the custom domain could point to any of them
+            // (or if they share the database, we need to check the relevant tables)
+            const serversToCheck = SERVERS;
+
+            // TODO: [🧠] If there are many servers, this loop might be slow. Optimize if needed.
+            for (const serverHost of serversToCheck) {
+                let serverName = serverHost;
+                serverName = serverName.replace(/\.ptbk\.io$/, '');
+                serverName = normalizeTo_PascalCase(serverName);
+                const prefix = `server_${serverName}_`;
+
+                // Search for agent with matching META LINK
+                // agentProfile->links is an array of strings
+                // We check if it contains the host, or https://host, or http://host
+
+                const searchLinks = [host, `https://${host}`, `http://${host}`];
+
+                // Construct OR filter: agentProfile.cs.{"links":["link1"]},agentProfile.cs.{"links":["link2"]},...
+                const orFilter = searchLinks.map((link) => `agentProfile.cs.{"links":["${link}"]}`).join(',');
+
+                try {
+                    const { data } = await supabase
+                        .from(`${prefix}Agent`)
+                        .select('agentName')
+                        .or(orFilter)
+                        .limit(1)
+                        .single();
+
+                    if (data && data.agentName) {
+                        // Found the agent!
+                        const url = req.nextUrl.clone();
+                        url.pathname = `/${data.agentName}`;
+
+                        // Pass the server context to the app via header
+                        const requestHeaders = new Headers(req.headers);
+                        requestHeaders.set('x-promptbook-server', serverHost);
+
+                        return NextResponse.rewrite(url, {
+                            request: {
+                                headers: requestHeaders,
+                            },
+                        });
+                    }
+                } catch (error) {
+                    // Ignore error (e.g. table not found, or agent not found) and continue to next server
+                    // console.error(`Error checking server ${serverHost} for custom domain ${host}:`, error);
+                }
+            }
+        }
+    }
+
+    return NextResponse.next();
+
+    // This part should be unreachable due to logic above, but keeping as fallback
+    return new NextResponse('Forbidden', { status: 403 });
+}
+
+export const config = {
+    matcher: [
+        /*
+         * Match all request paths except for the ones starting with:
+         * - _next/static (static files)
+         * - _next/image (image optimization files)
+         * - favicon.ico (favicon file)
+         * - public folder
+         */
+        '/((?!_next/static|_next/image|favicon.ico|logo-|fonts/).*)',
+    ],
+};