@resolveio/server-lib 22.1.31 → 22.2.0

package/methods/mongo-explorer.js

@@ -88,8 +88,9 @@ var simpl_schema_1 = require("simpl-schema");
 var user_collection_1 = require("../collections/user.collection");
 var openai_usage_ledger_manager_1 = require("../managers/openai-usage-ledger.manager");
 var resolveio_server_app_1 = require("../resolveio-server-app");
-var openai_client_1 = require("../services/openai-client");
+var codex_client_1 = require("../services/codex-client");
 var common_1 = require("../util/common");
+var tokenizer_1 = require("../util/tokenizer");
 var DEFAULT_LIMIT = 100;
 var MAX_LIMIT = 2000;
 var ISO_DATE_REGEX = /^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}(?:\.\d+)?Z$/;
@@ -140,14 +141,6 @@ function normalizeExplorerMode(mode) {
     }
     return 'aicoder';
 }
-function isAdminUser(user) {
-    var _a;
-    if (!user) {
-        return false;
-    }
-    var username = String(user.username || '').trim().toLowerCase();
-    return username === 'admin' || ((_a = user.roles) === null || _a === void 0 ? void 0 : _a.super_admin) === true;
-}
 function allowUnschemaizedWrites() {
     return process.env.MONGO_EXPLORER_ALLOW_UNSCHEMATIZED_WRITE === 'true';
 }
@@ -403,8 +396,8 @@ function ensureWriteAccess(context, permissionView, mode) {
                         throw new Error('Mongo Explorer: Readonly user');
                     }
                     normalizedMode = normalizeExplorerMode(mode);
-                    if (normalizedMode === 'resolveio' && !isAdminUser(user)) {
-                        throw new Error('Mongo Explorer: ResolveIO mode is read only for non-admin users');
+                    if (normalizedMode === 'resolveio') {
+                        throw new Error('Mongo Explorer: ResolveIO mode is read only');
                     }
                     allowedUsers = parseMongoExplorerWriteUsers();
                     if (allowedUsers.length) {
@@ -737,7 +730,7 @@ function normalizeRiskReview(operation, payload, model, requestId) {
         ? Math.max(0, Math.min(1, normalizedConfidence))
         : 0.6;
     var summary = normalizeOptionalString(payload === null || payload === void 0 ? void 0 : payload.summary)
-        || "Codex review marked this operation as ".concat(riskLevel, " risk.");
+        || "AI review marked this operation as ".concat(riskLevel, " risk.");
     var reasons = normalizeRiskList(payload === null || payload === void 0 ? void 0 : payload.reasons);
     var suggestedChecks = normalizeRiskList(payload === null || payload === void 0 ? void 0 : payload.suggested_checks);
     var shouldBlock = (payload === null || payload === void 0 ? void 0 : payload.should_block) === true || riskLevel === 'critical';
@@ -791,6 +784,26 @@ function resolveRiskReviewSettings() {
         retryDelayMs: retryDelayMs
     };
 }
+function buildCodexPrompt(systemPrompt, userPrompt) {
+    return "System:\n".concat(systemPrompt, "\n\nUser:\n").concat(userPrompt).trim();
+}
+function buildCodexClient(settings) {
+    var fallbackModels = [];
+    var fallback = normalizeOptionalString(settings.fallbackModel);
+    if (fallback && fallback !== settings.model) {
+        fallbackModels.push(fallback);
+    }
+    return new codex_client_1.CodexClient(__assign(__assign({ apiKey: settings.apiKey, baseUrl: settings.baseUrl, model: settings.model }, (fallbackModels.length ? { fallbackModel: fallbackModels[0], fallbackModels: fallbackModels } : {})), { maxRetries: (0, common_1.round)(settings.maxRetries || 0), retryDelayMs: (0, common_1.round)(settings.retryDelayMs || 0) }));
+}
+function estimateCodexUsage(messages, responseText, model) {
+    var inputTokens = (0, tokenizer_1.countChatTokens)(messages, model);
+    var outputTokens = (0, tokenizer_1.countTokens)(responseText || '', model);
+    return {
+        inputTokens: inputTokens,
+        outputTokens: outputTokens,
+        totalTokens: inputTokens + outputTokens
+    };
+}
 function buildRiskReviewPrompt(input) {
     var payload = {
         database: input.database,
@@ -811,7 +824,7 @@ function buildRiskReviewPrompt(input) {
 }
 function reviewOperationRisk(input) {
     return __awaiter(this, void 0, void 0, function () {
-        var settings, client, systemPrompt, response, payload, err_1, detail;
+        var settings, client, systemPrompt, userPrompt, prompt, responseText, payload, err_1, detail;
         return __generator(this, function (_a) {
             switch (_a.label) {
                 case 0:
@@ -820,19 +833,9 @@ function reviewOperationRisk(input) {
                         return [2 /*return*/, buildDisabledRiskReview(input.operation)];
                     }
                     if (!settings.apiKey) {
-                        return [2 /*return*/, buildFallbackRiskReview(input.operation, 'AI risk review unavailable: OPENAI_API_KEY is missing.')];
+                        return [2 /*return*/, buildFallbackRiskReview(input.operation, 'AI risk review unavailable: AI API key is missing.')];
                     }
-                    client = new openai_client_1.OpenAIClient({
-                        apiKey: settings.apiKey,
-                        baseUrl: settings.baseUrl,
-                        model: settings.model,
-                        fallbackModel: settings.fallbackModel,
-                        temperature: 0.1,
-                        maxTokens: settings.maxTokens,
-                        maxRetries: (0, common_1.round)(settings.maxRetries),
-                        retryDelayMs: (0, common_1.round)(settings.retryDelayMs),
-                        responseFormat: 'json'
-                    });
+                    client = buildCodexClient(settings);
                     systemPrompt = [
                         'You are a MongoDB operation safety reviewer for a production SaaS application.',
                         'Respond with a single JSON object only.',
@@ -845,20 +848,27 @@ function reviewOperationRisk(input) {
                         'confidence (number between 0 and 1).',
                         'Keep summary concise (<= 220 chars).'
                     ].join(' ');
+                    userPrompt = buildRiskReviewPrompt(input);
+                    prompt = buildCodexPrompt(systemPrompt, userPrompt);
                     _a.label = 1;
                 case 1:
                     _a.trys.push([1, 3, , 4]);
-                    return [4 /*yield*/, client.chat([
-                            { role: 'system', content: systemPrompt },
-                            { role: 'user', content: buildRiskReviewPrompt(input) }
-                        ], {
+                    return [4 /*yield*/, client.run(prompt, {
                             timeoutMs: (0, common_1.round)(settings.timeoutMs),
-                            responseFormat: 'json'
+                            threadOptions: {
+                                model: settings.model,
+                                sandboxMode: 'read-only',
+                                skipGitRepoCheck: true,
+                                networkAccessEnabled: false,
+                                webSearchMode: 'disabled',
+                                webSearchEnabled: false,
+                                approvalPolicy: 'never'
+                            }
                         })];
                 case 2:
-                    response = _a.sent();
-                    payload = parseRiskReviewPayload(response.content);
-                    return [2 /*return*/, normalizeRiskReview(input.operation, payload, response.model || settings.model, response.requestId || '')];
+                    responseText = _a.sent();
+                    payload = parseRiskReviewPayload(responseText);
+                    return [2 /*return*/, normalizeRiskReview(input.operation, payload, settings.model, '')];
                 case 3:
                     err_1 = _a.sent();
                     detail = (err_1 === null || err_1 === void 0 ? void 0 : err_1.message) ? String(err_1.message) : 'Unknown AI review error';
@@ -1155,7 +1165,7 @@ function resolveUsageClientId(idClientInput, idUser) {
 }
 function executeMongoExplorerAi(payload, context) {
     return __awaiter(this, void 0, void 0, function () {
-        var input, prompt, database, db, availableCollections, listed, selectedCollection, availableFields, settings, maxResults, client, response, parsed, action, collection, plan, removedRestrictedStages, optionsRaw, aggregateLimit, pipelineResult, aggregateOptions, aggregateRows, rows, query, options, findOptions, rows, total, _a, usage, idClient;
+        var input, prompt, database, db, availableCollections, listed, selectedCollection, availableFields, settings, maxResults, client, messages, responseText, parsed, action, collection, plan, removedRestrictedStages, optionsRaw, aggregateLimit, pipelineResult, aggregateOptions, aggregateRows, rows, query, options, findOptions, rows, total, _a, usage, idClient;
         var _b;
         return __generator(this, function (_c) {
             switch (_c.label) {
@@ -1188,39 +1198,38 @@ function executeMongoExplorerAi(payload, context) {
                     }
                     settings = resolveMongoExplorerAiSettings();
                     if (!settings.apiKey) {
-                        throw new Error('OpenAI API key missing. Add OPENAI_API_KEY to server config.');
+                        throw new Error('AI API key missing. Add an AI API key to server config.');
                     }
                     maxResults = normalizeAiResultLimit(input.max_results, 100);
-                    client = new openai_client_1.OpenAIClient({
-                        apiKey: settings.apiKey,
-                        baseUrl: settings.baseUrl,
-                        model: settings.model,
-                        fallbackModel: settings.fallbackModel,
-                        temperature: 0.1,
-                        maxTokens: (0, common_1.round)(settings.maxTokens),
-                        maxRetries: (0, common_1.round)(settings.maxRetries),
-                        retryDelayMs: (0, common_1.round)(settings.retryDelayMs),
-                        responseFormat: 'json'
-                    });
-                    return [4 /*yield*/, client.chat([
-                            { role: 'system', content: buildMongoExplorerAiSystemPrompt() },
-                            {
-                                role: 'user',
-                                content: buildMongoExplorerAiUserPrompt({
-                                    prompt: prompt,
-                                    selectedCollection: selectedCollection,
-                                    availableCollections: availableCollections,
-                                    availableFields: availableFields,
-                                    maxResults: maxResults
-                                })
-                            }
-                        ], {
+                    client = buildCodexClient(settings);
+                    messages = [
+                        { role: 'system', content: buildMongoExplorerAiSystemPrompt() },
+                        {
+                            role: 'user',
+                            content: buildMongoExplorerAiUserPrompt({
+                                prompt: prompt,
+                                selectedCollection: selectedCollection,
+                                availableCollections: availableCollections,
+                                availableFields: availableFields,
+                                maxResults: maxResults
+                            })
+                        }
+                    ];
+                    return [4 /*yield*/, client.run(buildCodexPrompt(messages[0].content, messages[1].content), {
                             timeoutMs: (0, common_1.round)(settings.timeoutMs),
-                            responseFormat: 'json'
+                            threadOptions: {
+                                model: settings.model,
+                                sandboxMode: 'read-only',
+                                skipGitRepoCheck: true,
+                                networkAccessEnabled: false,
+                                webSearchMode: 'disabled',
+                                webSearchEnabled: false,
+                                approvalPolicy: 'never'
+                            }
                         })];
                 case 3:
-                    response = _c.sent();
-                    parsed = parseAiPlanPayload(response.content);
+                    responseText = _c.sent();
+                    parsed = parseAiPlanPayload(responseText);
                     action = normalizeAiAction((parsed === null || parsed === void 0 ? void 0 : parsed.action) || (Array.isArray(parsed === null || parsed === void 0 ? void 0 : parsed.pipeline) ? 'aggregate' : 'find'));
                     collection = resolveCollectionFromList((parsed === null || parsed === void 0 ? void 0 : parsed.collection) || (parsed === null || parsed === void 0 ? void 0 : parsed.collection_name), availableCollections, selectedCollection || availableCollections[0]);
                     if (!collection) {
@@ -1293,19 +1302,19 @@ function executeMongoExplorerAi(payload, context) {
                     _c.label = 10;
                 case 10:
                     plan.notes = buildMongoExplorerAiNotes(parsed === null || parsed === void 0 ? void 0 : parsed.notes, plan.action, plan.collection, Array.isArray(plan.documents) ? plan.documents.length : 0, typeof plan.total === 'number' ? plan.total : null, removedRestrictedStages);
-                    usage = response.usage || { inputTokens: 0, outputTokens: 0, totalTokens: 0 };
+                    usage = estimateCodexUsage(messages, responseText, settings.model);
                     return [4 /*yield*/, resolveUsageClientId(input.id_client, context === null || context === void 0 ? void 0 : context.id_user)];
                 case 11:
                     idClient = _c.sent();
                     if (!(idClient && usage.totalTokens)) return [3 /*break*/, 13];
                     return [4 /*yield*/, (0, openai_usage_ledger_manager_1.recordOpenAIUsage)({
                             id_client: idClient,
-                            model: response.model || settings.model || 'unknown',
+                            model: settings.model || 'unknown',
                             input_tokens: usage.inputTokens || 0,
                             output_tokens: usage.outputTokens || 0,
                             total_tokens: usage.totalTokens || 0,
                             category: 'mongo-explorer-ai',
-                            id_request: response.requestId || ''
+                            id_request: ''
                         })];
                 case 12:
                     _c.sent();
@@ -1313,7 +1322,7 @@ function executeMongoExplorerAi(payload, context) {
                 case 13: return [2 /*return*/, {
                         notes: plan.notes,
                         plan: plan,
-                        model: response.model || settings.model,
+                        model: settings.model,
                         usage: {
                             input_tokens: usage.inputTokens || 0,
                             output_tokens: usage.outputTokens || 0,