@resolveio/server-lib 20.14.19 → 20.14.22

package/methods/ai-terminal.js

@@ -136,6 +136,7 @@ var AI_ASSISTANT_SYSTEM_PROMPT = [
     '- Do not modify files, run destructive commands, or access databases directly.',
     '- Read-only Mongo access is allowed only via the MONGO_READ directive (see below).',
     '- Do not access secrets, credentials, or user data.',
+    '- If the user has a customer portal scope (other.id_customer), only discuss that customer\'s data and what is visible in their customer portal. Never reference other customers or internal/admin-only data. If asked for anything outside the portal, say it isn\'t available.',
     '- Do not assist with hacking, bypassing security, or abuse.',
     '- Prefer high-level explanations and point to routes instead of code. Only mention file paths if explicitly requested.',
     '- When asked where to do something, give the exact screen name and the in-app route as a standalone path starting with "/" so it can be clicked.',
@@ -684,10 +685,10 @@ function executeAiFormPatch(payload, context) {
 }
 function executeAiAssistantCodexRun(payload, context) {
     return __awaiter(this, void 0, void 0, function () {
-        var input, message, guardrail, conversation_2, now_2, userMsg, assistantMsg, user, isSuperAdmin, hasInvoiceAccess, conversation, now, attachments, attachmentData, historyLimit, history, _a, historyLines, prompt, workspaceRoot, codexConfig, runOptions, responseText, assistantContent, userDoc, assistantDoc, insertResult;
-        var _b;
-        return __generator(this, function (_c) {
-            switch (_c.label) {
+        var input, message, guardrail, conversation_2, now_2, userMsg, assistantMsg, user, isSuperAdmin, hasInvoiceAccess, customerId, conversation, now, attachments, attachmentData, historyLimit, history, _a, historyLines, prompt, workspaceRoot, codexConfig, runOptions, responseText, assistantContent, userDoc, assistantDoc, insertResult;
+        var _b, _c;
+        return __generator(this, function (_d) {
+            switch (_d.label) {
                 case 0:
                     input = payload || {};
                     message = normalizeOptionalString(input.message);
@@ -701,7 +702,7 @@ function executeAiAssistantCodexRun(payload, context) {
                     if (!(guardrail === null || guardrail === void 0 ? void 0 : guardrail.blocked)) return [3 /*break*/, 5];
                     return [4 /*yield*/, ensureConversation(input, 'codex')];
                 case 1:
-                    conversation_2 = _c.sent();
+                    conversation_2 = _d.sent();
                     now_2 = new Date();
                     userMsg = {
                         id_conversation: conversation_2._id,
@@ -723,13 +724,13 @@ function executeAiAssistantCodexRun(payload, context) {
                     };
                     return [4 /*yield*/, ai_terminal_message_collection_1.AiTerminalMessages.insertOne(userMsg)];
                 case 2:
-                    _c.sent();
+                    _d.sent();
                     return [4 /*yield*/, ai_terminal_message_collection_1.AiTerminalMessages.insertOne(assistantMsg)];
                 case 3:
-                    _c.sent();
+                    _d.sent();
                     return [4 /*yield*/, touchConversation(conversation_2._id, now_2)];
                 case 4:
-                    _c.sent();
+                    _d.sent();
                     return [2 /*return*/, {
                             conversation: conversation_2,
                             message: assistantMsg,
@@ -737,26 +738,27 @@ function executeAiAssistantCodexRun(payload, context) {
                         }];
                 case 5: return [4 /*yield*/, user_collection_1.Users.findById(context === null || context === void 0 ? void 0 : context.id_user)];
                 case 6:
-                    user = _c.sent();
+                    user = _d.sent();
                     isSuperAdmin = !!((_b = user === null || user === void 0 ? void 0 : user.roles) === null || _b === void 0 ? void 0 : _b.super_admin);
                     hasInvoiceAccess = userHasInvoiceAccess(user);
+                    customerId = normalizeOptionalString((_c = user === null || user === void 0 ? void 0 : user.other) === null || _c === void 0 ? void 0 : _c.id_customer);
                     return [4 /*yield*/, ensureConversation(input, 'codex')];
                 case 7:
-                    conversation = _c.sent();
+                    conversation = _d.sent();
                     now = new Date();
                     attachments = Array.isArray(input.attachments) ? input.attachments : [];
                     return [4 /*yield*/, readAttachmentContents(attachments)];
                 case 8:
-                    attachmentData = _c.sent();
+                    attachmentData = _d.sent();
                     historyLimit = normalizeHistoryLimit(input.max_history);
                     if (!(historyLimit > 0)) return [3 /*break*/, 10];
                     return [4 /*yield*/, ai_terminal_message_collection_1.AiTerminalMessages.find({ id_conversation: conversation._id, role: { $in: ['user', 'assistant'] } }, { sort: { createdAt: 1 }, limit: historyLimit * 2 })];
                 case 9:
-                    _a = _c.sent();
+                    _a = _d.sent();
                     return [3 /*break*/, 11];
                 case 10:
                     _a = [];
-                    _c.label = 11;
+                    _d.label = 11;
                 case 11:
                     history = _a;
                     historyLines = [];
@@ -767,10 +769,10 @@ function executeAiAssistantCodexRun(payload, context) {
                             historyLines.push("".concat(role, ": ").concat(content));
                         }
                     });
-                    prompt = buildAssistantCodexPrompt(message, attachmentData.promptText, historyLines.join('\n'), buildAssistantContext(input, { isSuperAdmin: isSuperAdmin, hasInvoiceAccess: hasInvoiceAccess }));
+                    prompt = buildAssistantCodexPrompt(message, attachmentData.promptText, historyLines.join('\n'), buildAssistantContext(input, { isSuperAdmin: isSuperAdmin, hasInvoiceAccess: hasInvoiceAccess, customerId: customerId }));
                     return [4 /*yield*/, resolveAssistantWorkspaceRoot()];
                 case 12:
-                    workspaceRoot = _c.sent();
+                    workspaceRoot = _d.sent();
                     codexConfig = resolveCodexSettings();
                     runOptions = {
                         timeoutMs: resolveCodexTimeoutMs(),
@@ -787,7 +789,7 @@ function executeAiAssistantCodexRun(payload, context) {
                     };
                     return [4 /*yield*/, runCodexInWorkerThread(prompt, runOptions, codexConfig)];
                 case 13:
-                    responseText = _c.sent();
+                    responseText = _d.sent();
                     assistantContent = sanitizeAssistantResponse(responseText);
                     userDoc = {
                         id_conversation: conversation._id,
@@ -809,18 +811,18 @@ function executeAiAssistantCodexRun(payload, context) {
                     };
                     return [4 /*yield*/, ai_terminal_message_collection_1.AiTerminalMessages.insertOne(userDoc)];
                 case 14:
-                    _c.sent();
+                    _d.sent();
                     return [4 /*yield*/, ai_terminal_message_collection_1.AiTerminalMessages.insertOne(assistantDoc)];
                 case 15:
-                    insertResult = _c.sent();
+                    insertResult = _d.sent();
                     return [4 /*yield*/, touchConversation(conversation._id, now, insertResult._id)];
                 case 16:
-                    _c.sent();
+                    _d.sent();
                     if (!(input.delete_files_after_run !== false)) return [3 /*break*/, 18];
                     return [4 /*yield*/, cleanupAttachments(attachmentData.attachments)];
                 case 17:
-                    _c.sent();
-                    _c.label = 18;
+                    _d.sent();
+                    _d.label = 18;
                 case 18: return [2 /*return*/, {
                         conversation: conversation,
                         message: assistantDoc
@@ -831,9 +833,10 @@ function executeAiAssistantCodexRun(payload, context) {
 }
 function executeAiAssistantMongoRead(payload, context) {
     return __awaiter(this, void 0, void 0, function () {
-        var input, collection, _a, user, isSuperAdmin, dbName, db, baseQuery, userId, normalizedClient, shouldScopeByClient, _b, scopedQuery, normalized, documents, total, sanitizedDocuments;
-        return __generator(this, function (_c) {
-            switch (_c.label) {
+        var input, collection, _a, user, isSuperAdmin, customerId, dbName, db, baseQuery, userId, normalizedClient, shouldScopeByClient, _b, clientScopedQuery, scopedQuery, normalized, documents, total, sanitizedDocuments;
+        var _c;
+        return __generator(this, function (_d) {
+            switch (_d.label) {
                 case 0:
                     input = payload || {};
                     collection = normalizeOptionalString(input.collection);
@@ -842,10 +845,11 @@ function executeAiAssistantMongoRead(payload, context) {
                     }
                     return [4 /*yield*/, ensureAssistantReadAccess(context, input.permissionView, collection)];
                 case 1:
-                    _a = _c.sent(), user = _a.user, isSuperAdmin = _a.isSuperAdmin;
+                    _a = _d.sent(), user = _a.user, isSuperAdmin = _a.isSuperAdmin;
                     if (!isSuperAdmin && AI_ASSISTANT_BLOCKED_COLLECTIONS.has(collection)) {
                         throw new Error('AI assistant mongo read: Access denied.');
                     }
+                    customerId = normalizeOptionalString((_c = user === null || user === void 0 ? void 0 : user.other) === null || _c === void 0 ? void 0 : _c.id_customer);
                     dbName = resolveAssistantDatabaseName(input.database, input.mongo);
                     db = resolveio_server_app_1.ResolveIOServer.getMongoConnection().db(dbName);
                     baseQuery = normalizeMongoQuery(input.query);
@@ -862,26 +866,27 @@ function executeAiAssistantMongoRead(payload, context) {
                     if (!(!isSuperAdmin && normalizedClient)) return [3 /*break*/, 3];
                     return [4 /*yield*/, collectionHasClientIndex(db, dbName, collection)];
                 case 2:
-                    _b = _c.sent();
+                    _b = _d.sent();
                     return [3 /*break*/, 4];
                 case 3:
                     _b = false;
-                    _c.label = 4;
+                    _d.label = 4;
                 case 4:
                     shouldScopeByClient = _b;
-                    scopedQuery = shouldScopeByClient
+                    clientScopedQuery = shouldScopeByClient
                         ? applyClientScopeFilter(baseQuery, normalizedClient, isSuperAdmin)
                         : baseQuery;
+                    scopedQuery = applyCustomerScopeFilter(clientScopedQuery, collection, customerId, isSuperAdmin);
                     normalized = normalizeAssistantFindOptions(input.options);
                     return [4 /*yield*/, db.collection(collection).find(scopedQuery, normalized.findOptions).toArray()];
                 case 5:
-                    documents = _c.sent();
+                    documents = _d.sent();
                     total = null;
                     if (!normalized.includeTotal) return [3 /*break*/, 7];
                     return [4 /*yield*/, db.collection(collection).countDocuments(scopedQuery)];
                 case 6:
-                    total = _c.sent();
-                    _c.label = 7;
+                    total = _d.sent();
+                    _d.label = 7;
                 case 7:
                     sanitizedDocuments = isSuperAdmin
                         ? documents
@@ -1057,6 +1062,24 @@ function applyClientScopeFilter(query, idClient, isSuperAdmin) {
         $and: [query, { id_client: normalizedClient }]
     };
 }
+function applyCustomerScopeFilter(query, collection, idCustomer, isSuperAdmin) {
+    var _a;
+    if (isSuperAdmin === void 0) { isSuperAdmin = false; }
+    if (isSuperAdmin) {
+        return query;
+    }
+    var normalizedCustomer = normalizeOptionalString(idCustomer);
+    if (!normalizedCustomer) {
+        return query;
+    }
+    var normalizedCollection = normalizeOptionalString(collection).toLowerCase();
+    var customerField = normalizedCollection === 'users' || normalizedCollection === 'user-versions'
+        ? 'other.id_customer'
+        : 'id_customer';
+    return {
+        $and: [query, (_a = {}, _a[customerField] = normalizedCustomer, _a)]
+    };
+}
 function userHasViewPermission(user, view) {
     var _a, _b, _c;
     if (!user || !view) {
@@ -1446,6 +1469,11 @@ function buildAssistantContext(input, userContext) {
     if (typeof (userContext === null || userContext === void 0 ? void 0 : userContext.hasInvoiceAccess) === 'boolean') {
         lines.push("User has invoice access: ".concat(userContext.hasInvoiceAccess ? 'yes' : 'no'));
     }
+    var customerId = normalizeOptionalString(userContext === null || userContext === void 0 ? void 0 : userContext.customerId);
+    if (customerId) {
+        lines.push('Customer portal scope: yes');
+        lines.push("Customer id: ".concat(customerId));
+    }
     var contextMode = normalizeOptionalString((_a = input === null || input === void 0 ? void 0 : input.context) === null || _a === void 0 ? void 0 : _a.mode);
     var contextRoute = normalizeOptionalString((_b = input === null || input === void 0 ? void 0 : input.context) === null || _b === void 0 ? void 0 : _b.route);
     if (contextMode) {