@webiny/api-aco 6.4.11 → 6.6.0-alpha.1

package/features/ai/CreateFolderTool.js

@@ -0,0 +1,49 @@
+import { z } from "zod";
+import { AiSdkTool } from "@webiny/api-core/features/ai/index.js";
+import { CreateFolderUseCase } from "../folder/CreateFolder/index.js";
+const inputSchema = z.object({
+    title: z.string().describe("Human-readable folder name, e.g. 'Marketing'."),
+    slug: z.string().describe("URL-safe identifier, e.g. 'marketing'. Lowercase, hyphens instead of spaces."),
+    type: z.string().describe("Folder namespace: 'FmFile' for File Manager, or 'cms:<modelId>' for a content model's folders."),
+    parentId: z.string().optional().describe("Id of the parent folder. Omit to create at the root of that namespace.")
+});
+class CreateFolderToolImpl {
+    constructor(createFolder){
+        this.createFolder = createFolder;
+        this.name = "createFolder";
+        this.title = "Create folder";
+        this.description = "Creates a folder in the File Manager ('FmFile') or under a content model ('cms:<modelId>'). Call listFolders first to pick a parent, or omit parentId for the root. Requires user approval.";
+        this.inputSchema = inputSchema;
+        this.annotations = {
+            readOnlyHint: false
+        };
+    }
+    async execute(input) {
+        const params = {
+            title: input.title,
+            slug: input.slug,
+            type: input.type,
+            parentId: null
+        };
+        if (input.parentId) params.parentId = input.parentId;
+        const result = await this.createFolder.execute(params);
+        if (result.isFail()) throw new Error(`Could not create the folder: ${result.error.message}`);
+        const folder = result.value;
+        return {
+            id: folder.id,
+            title: folder.title,
+            slug: folder.slug,
+            path: folder.path,
+            type: folder.type
+        };
+    }
+}
+const CreateFolderTool = AiSdkTool.createImplementation({
+    implementation: CreateFolderToolImpl,
+    dependencies: [
+        CreateFolderUseCase
+    ]
+});
+export { CreateFolderTool };
+
+//# sourceMappingURL=CreateFolderTool.js.map

package/features/ai/CreateFolderTool.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"features/ai/CreateFolderTool.js","sources":["../../../src/features/ai/CreateFolderTool.ts"],"sourcesContent":["import { z } from \"zod\";\nimport { AiSdkTool } from \"@webiny/api-core/features/ai/index.js\";\nimport type { IAiSdkTool } from \"@webiny/api-core/features/ai/index.js\";\nimport { CreateFolderUseCase } from \"~/features/folder/CreateFolder/index.js\";\n\nconst inputSchema = z.object({\n    title: z.string().describe(\"Human-readable folder name, e.g. 'Marketing'.\"),\n    slug: z\n        .string()\n        .describe(\"URL-safe identifier, e.g. 'marketing'. Lowercase, hyphens instead of spaces.\"),\n    type: z\n        .string()\n        .describe(\n            \"Folder namespace: 'FmFile' for File Manager, or 'cms:<modelId>' for a content model's folders.\"\n        ),\n    parentId: z\n        .string()\n        .optional()\n        .describe(\"Id of the parent folder. Omit to create at the root of that namespace.\")\n});\n\ntype Input = z.infer<typeof inputSchema>;\n\ninterface CreatedFolder {\n    id: string;\n    title: string;\n    slug: string;\n    path: string;\n    type: string;\n}\n\n/**\n * Creates a folder.\n *\n * Additive and reversible, so it is not flagged destructive — but it still changes the project, so it\n * is not read-only either and therefore needs the user to approve the exact arguments.\n */\nclass CreateFolderToolImpl implements IAiSdkTool<Input> {\n    readonly name = \"createFolder\";\n    readonly title = \"Create folder\";\n    readonly description =\n        \"Creates a folder in the File Manager ('FmFile') or under a content model ('cms:<modelId>'). Call listFolders first to pick a parent, or omit parentId for the root. Requires user approval.\";\n    readonly inputSchema = inputSchema;\n    readonly annotations = { readOnlyHint: false };\n\n    constructor(private createFolder: CreateFolderUseCase.Interface) {}\n\n    async execute(input: Input): Promise<CreatedFolder> {\n        const params: {\n            title: string;\n            slug: string;\n            type: string;\n            parentId: string | null;\n        } = {\n            title: input.title,\n            slug: input.slug,\n            type: input.type,\n            parentId: null\n        };\n\n        if (input.parentId) {\n            params.parentId = input.parentId;\n        }\n\n        const result = await this.createFolder.execute(params);\n\n        if (result.isFail()) {\n            throw new Error(`Could not create the folder: ${result.error.message}`);\n        }\n\n        const folder = result.value;\n\n        return {\n            id: folder.id,\n            title: folder.title,\n            slug: folder.slug,\n            path: folder.path,\n            type: folder.type\n        };\n    }\n}\n\nexport const CreateFolderTool = AiSdkTool.createImplementation({\n    implementation: CreateFolderToolImpl,\n    dependencies: [CreateFolderUseCase]\n});\n"],"names":["inputSchema","z","CreateFolderToolImpl","createFolder","input","params","result","Error","folder","CreateFolderTool","AiSdkTool","CreateFolderUseCase"],"mappings":";;;AAKA,MAAMA,cAAcC,EAAE,MAAM,CAAC;IACzB,OAAOA,EAAE,MAAM,GAAG,QAAQ,CAAC;IAC3B,MAAMA,EAAAA,MACK,GACN,QAAQ,CAAC;IACd,MAAMA,EAAAA,MACK,GACN,QAAQ,CACL;IAER,UAAUA,EAAAA,MACC,GACN,QAAQ,GACR,QAAQ,CAAC;AAClB;AAkBA,MAAMC;IAQF,YAAoBC,YAA2C,CAAE;aAA7CA,YAAY,GAAZA;aAPX,IAAI,GAAG;aACP,KAAK,GAAG;aACR,WAAW,GAChB;aACK,WAAW,GAAGH;aACd,WAAW,GAAG;YAAE,cAAc;QAAM;IAEqB;IAElE,MAAM,QAAQI,KAAY,EAA0B;QAChD,MAAMC,SAKF;YACA,OAAOD,MAAM,KAAK;YAClB,MAAMA,MAAM,IAAI;YAChB,MAAMA,MAAM,IAAI;YAChB,UAAU;QACd;QAEA,IAAIA,MAAM,QAAQ,EACdC,OAAO,QAAQ,GAAGD,MAAM,QAAQ;QAGpC,MAAME,SAAS,MAAM,IAAI,CAAC,YAAY,CAAC,OAAO,CAACD;QAE/C,IAAIC,OAAO,MAAM,IACb,MAAM,IAAIC,MAAM,CAAC,6BAA6B,EAAED,OAAO,KAAK,CAAC,OAAO,EAAE;QAG1E,MAAME,SAASF,OAAO,KAAK;QAE3B,OAAO;YACH,IAAIE,OAAO,EAAE;YACb,OAAOA,OAAO,KAAK;YACnB,MAAMA,OAAO,IAAI;YACjB,MAAMA,OAAO,IAAI;YACjB,MAAMA,OAAO,IAAI;QACrB;IACJ;AACJ;AAEO,MAAMC,mBAAmBC,UAAU,oBAAoB,CAAC;IAC3D,gBAAgBR;IAChB,cAAc;QAACS;KAAoB;AACvC"}

package/features/ai/CreateTeamTool.d.ts

@@ -0,0 +1,43 @@
+import { z } from "zod";
+import type { IAiSdkTool } from "@webiny/api-core/features/ai/index.js";
+import { CreateTeam } from "@webiny/api-core/features/security/teams/CreateTeam/index.js";
+declare const inputSchema: z.ZodObject<{
+    name: z.ZodString;
+    slug: z.ZodString;
+    description: z.ZodOptional<z.ZodString>;
+    roles: z.ZodArray<z.ZodString>;
+}, z.core.$strip>;
+type Input = z.infer<typeof inputSchema>;
+interface CreatedTeam {
+    id: string;
+    name: string;
+    slug: string;
+    roles: string[];
+}
+/**
+ * Creates a team.
+ *
+ * Not read-only, so it needs approval: a team is an access-control object, and the roles it carries
+ * decide what its members can do. The user should see which roles are being granted before it exists.
+ */
+declare class CreateTeamToolImpl implements IAiSdkTool<Input> {
+    private createTeam;
+    readonly name = "createTeam";
+    readonly title = "Create team";
+    readonly description = "Creates a team with a set of roles. Call listRoles first and pass what it returns; do not guess role identifiers. Requires user approval.";
+    readonly inputSchema: z.ZodObject<{
+        name: z.ZodString;
+        slug: z.ZodString;
+        description: z.ZodOptional<z.ZodString>;
+        roles: z.ZodArray<z.ZodString>;
+    }, z.core.$strip>;
+    readonly annotations: {
+        readOnlyHint: boolean;
+    };
+    constructor(createTeam: CreateTeam.Interface);
+    execute(input: Input): Promise<CreatedTeam>;
+}
+export declare const CreateTeamTool: typeof CreateTeamToolImpl & {
+    __abstraction: import("@webiny/di").Abstraction<IAiSdkTool<any>>;
+};
+export {};

package/features/ai/CreateTeamTool.js

@@ -0,0 +1,47 @@
+import { z } from "zod";
+import { AiSdkTool } from "@webiny/api-core/features/ai/index.js";
+import { CreateTeam } from "@webiny/api-core/features/security/teams/CreateTeam/index.js";
+import { descriptionOnCreate } from "@webiny/api-core/features/security/shared/index.js";
+const inputSchema = z.object({
+    name: z.string().describe("Human-readable team name, e.g. 'Marketing'."),
+    slug: z.string().describe("URL-safe identifier, e.g. 'marketing'. Lowercase, hyphens instead of spaces."),
+    description: z.string().max(500).optional().describe("What the team is for. Shown in the admin UI. Omit it if the user did not say."),
+    roles: z.array(z.string()).describe("Roles from listRoles. Prefer the `id`; a `slug` is accepted and resolved for you. Resolve them with listRoles first, since an unknown value is rejected rather than stored.")
+});
+class CreateTeamToolImpl {
+    constructor(createTeam){
+        this.createTeam = createTeam;
+        this.name = "createTeam";
+        this.title = "Create team";
+        this.description = "Creates a team with a set of roles. Call listRoles first and pass what it returns; do not guess role identifiers. Requires user approval.";
+        this.inputSchema = inputSchema;
+        this.annotations = {
+            readOnlyHint: false
+        };
+    }
+    async execute(input) {
+        const result = await this.createTeam.execute({
+            name: input.name,
+            slug: input.slug,
+            description: descriptionOnCreate(input.description),
+            roles: input.roles
+        });
+        if (result.isFail()) throw new Error(`Could not create the team: ${result.error.message}`);
+        const team = result.value;
+        return {
+            id: team.id,
+            name: team.name,
+            slug: team.slug,
+            roles: team.roles
+        };
+    }
+}
+const CreateTeamTool = AiSdkTool.createImplementation({
+    implementation: CreateTeamToolImpl,
+    dependencies: [
+        CreateTeam
+    ]
+});
+export { CreateTeamTool };
+
+//# sourceMappingURL=CreateTeamTool.js.map

package/features/ai/CreateTeamTool.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"features/ai/CreateTeamTool.js","sources":["../../../src/features/ai/CreateTeamTool.ts"],"sourcesContent":["import { z } from \"zod\";\nimport { AiSdkTool } from \"@webiny/api-core/features/ai/index.js\";\nimport type { IAiSdkTool } from \"@webiny/api-core/features/ai/index.js\";\nimport { CreateTeam } from \"@webiny/api-core/features/security/teams/CreateTeam/index.js\";\nimport { descriptionOnCreate } from \"@webiny/api-core/features/security/shared/index.js\";\n\nconst inputSchema = z.object({\n    name: z.string().describe(\"Human-readable team name, e.g. 'Marketing'.\"),\n    slug: z\n        .string()\n        .describe(\"URL-safe identifier, e.g. 'marketing'. Lowercase, hyphens instead of spaces.\"),\n    /*\n     * Optional and capped, mirroring the use case's own schema. Requiring it made the model invent a\n     * description for every team; `CreateTeam` treats an absent one as empty via `descriptionOnCreate`.\n     */\n    description: z\n        .string()\n        .max(500)\n        .optional()\n        .describe(\"What the team is for. Shown in the admin UI. Omit it if the user did not say.\"),\n    roles: z\n        .array(z.string())\n        .describe(\n            \"Roles from listRoles. Prefer the `id`; a `slug` is accepted and resolved for you. Resolve them with listRoles first, since an unknown value is rejected rather than stored.\"\n        )\n});\n\ntype Input = z.infer<typeof inputSchema>;\n\ninterface CreatedTeam {\n    id: string;\n    name: string;\n    slug: string;\n    roles: string[];\n}\n\n/**\n * Creates a team.\n *\n * Not read-only, so it needs approval: a team is an access-control object, and the roles it carries\n * decide what its members can do. The user should see which roles are being granted before it exists.\n */\nclass CreateTeamToolImpl implements IAiSdkTool<Input> {\n    readonly name = \"createTeam\";\n    readonly title = \"Create team\";\n    readonly description =\n        \"Creates a team with a set of roles. Call listRoles first and pass what it returns; do not guess role identifiers. Requires user approval.\";\n    readonly inputSchema = inputSchema;\n    readonly annotations = { readOnlyHint: false };\n\n    constructor(private createTeam: CreateTeam.Interface) {}\n\n    async execute(input: Input): Promise<CreatedTeam> {\n        /*\n         * Roles go through untouched. `CreateTeam` accepts a role id or a slug and resolves either to\n         * the id a team stores, so the tool has nothing to add: doing it here too would read the roles\n         * a second time and leave two copies of the same rule to keep in step.\n         */\n        const result = await this.createTeam.execute({\n            name: input.name,\n            slug: input.slug,\n            // An omitted description becomes \"\", the same mapping the use case applies to its own input.\n            description: descriptionOnCreate(input.description),\n            roles: input.roles\n        });\n\n        if (result.isFail()) {\n            throw new Error(`Could not create the team: ${result.error.message}`);\n        }\n\n        const team = result.value;\n\n        return {\n            id: team.id,\n            name: team.name,\n            slug: team.slug,\n            // From the created team, so the caller sees the resolved ids that were actually stored.\n            roles: team.roles\n        };\n    }\n}\n\nexport const CreateTeamTool = AiSdkTool.createImplementation({\n    implementation: CreateTeamToolImpl,\n    dependencies: [CreateTeam]\n});\n"],"names":["inputSchema","z","CreateTeamToolImpl","createTeam","input","result","descriptionOnCreate","Error","team","CreateTeamTool","AiSdkTool","CreateTeam"],"mappings":";;;;AAMA,MAAMA,cAAcC,EAAE,MAAM,CAAC;IACzB,MAAMA,EAAE,MAAM,GAAG,QAAQ,CAAC;IAC1B,MAAMA,EAAAA,MACK,GACN,QAAQ,CAAC;IAKd,aAAaA,EAAAA,MACF,GACN,GAAG,CAAC,KACJ,QAAQ,GACR,QAAQ,CAAC;IACd,OAAOA,EAAAA,KACG,CAACA,EAAE,MAAM,IACd,QAAQ,CACL;AAEZ;AAiBA,MAAMC;IAQF,YAAoBC,UAAgC,CAAE;aAAlCA,UAAU,GAAVA;aAPX,IAAI,GAAG;aACP,KAAK,GAAG;aACR,WAAW,GAChB;aACK,WAAW,GAAGH;aACd,WAAW,GAAG;YAAE,cAAc;QAAM;IAEU;IAEvD,MAAM,QAAQI,KAAY,EAAwB;QAM9C,MAAMC,SAAS,MAAM,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;YACzC,MAAMD,MAAM,IAAI;YAChB,MAAMA,MAAM,IAAI;YAEhB,aAAaE,oBAAoBF,MAAM,WAAW;YAClD,OAAOA,MAAM,KAAK;QACtB;QAEA,IAAIC,OAAO,MAAM,IACb,MAAM,IAAIE,MAAM,CAAC,2BAA2B,EAAEF,OAAO,KAAK,CAAC,OAAO,EAAE;QAGxE,MAAMG,OAAOH,OAAO,KAAK;QAEzB,OAAO;YACH,IAAIG,KAAK,EAAE;YACX,MAAMA,KAAK,IAAI;YACf,MAAMA,KAAK,IAAI;YAEf,OAAOA,KAAK,KAAK;QACrB;IACJ;AACJ;AAEO,MAAMC,iBAAiBC,UAAU,oBAAoB,CAAC;IACzD,gBAAgBR;IAChB,cAAc;QAACS;KAAW;AAC9B"}

package/features/ai/GrantFolderAccessTool.d.ts

@@ -0,0 +1,72 @@
+import { z } from "zod";
+import type { IAiSdkTool } from "@webiny/api-core/features/ai/index.js";
+import { ListTeamsUseCase } from "@webiny/api-core/features/security/teams/ListTeams/index.js";
+import { GetFolderUseCase } from "../../features/folder/GetFolder/index.js";
+import { UpdateFolderUseCase } from "../../features/folder/UpdateFolder/index.js";
+declare const inputSchema: z.ZodObject<{
+    folderId: z.ZodString;
+    target: z.ZodString;
+    level: z.ZodEnum<{
+        editor: "editor";
+        "no-access": "no-access";
+        owner: "owner";
+        public: "public";
+        viewer: "viewer";
+    }>;
+}, z.core.$strip>;
+type Input = z.infer<typeof inputSchema>;
+interface GrantResult {
+    folderId: string;
+    title: string;
+    path: string;
+    /**
+     * Every direct rule on the folder afterwards.
+     *
+     * This is the set the update was asked to store, not an independent read of it:
+     * `UpdateFolderWithFolderLevelPermissions` returns the permissions it derived from the input
+     * rather than the ones the repository wrote. Treating it as a verification would let the tool
+     * confirm its own request back to itself.
+     */
+    permissions: {
+        target: string;
+        level: string;
+    }[];
+    /** True when the target already had a direct rule and its level was changed. */
+    replacedExistingLevel?: string;
+}
+/**
+ * Grants one target access to one folder, leaving every other rule alone.
+ *
+ * Additive by design. The earlier tool took the complete permission set and replaced it, which meant
+ * approving a change showed what would be SET and said nothing about what would be removed — a rule
+ * the model omitted disappeared silently. One target per call keeps the approval honest: what the user
+ * sees in the plan is the whole change.
+ */
+declare class GrantFolderAccessToolImpl implements IAiSdkTool<Input> {
+    private getFolder;
+    private updateFolder;
+    private listTeams;
+    readonly name = "grantFolderAccess";
+    readonly title = "Grant folder access";
+    readonly description = "Grants one team or user a level of access on one folder, leaving all other permissions untouched. Use listFolders for the folder id and listTeams for a team slug. Requires user approval.";
+    readonly inputSchema: z.ZodObject<{
+        folderId: z.ZodString;
+        target: z.ZodString;
+        level: z.ZodEnum<{
+            editor: "editor";
+            "no-access": "no-access";
+            owner: "owner";
+            public: "public";
+            viewer: "viewer";
+        }>;
+    }, z.core.$strip>;
+    readonly annotations: {
+        readOnlyHint: boolean;
+    };
+    constructor(getFolder: GetFolderUseCase.Interface, updateFolder: UpdateFolderUseCase.Interface, listTeams: ListTeamsUseCase.Interface);
+    execute(input: Input): Promise<GrantResult>;
+}
+export declare const GrantFolderAccessTool: typeof GrantFolderAccessToolImpl & {
+    __abstraction: import("@webiny/di").Abstraction<IAiSdkTool<any>>;
+};
+export {};

package/features/ai/GrantFolderAccessTool.js

@@ -0,0 +1,71 @@
+import { z } from "zod";
+import { AiSdkTool } from "@webiny/api-core/features/ai/index.js";
+import { ListTeamsUseCase } from "@webiny/api-core/features/security/teams/ListTeams/index.js";
+import { GetFolderUseCase } from "../folder/GetFolder/index.js";
+import { UpdateFolderUseCase } from "../folder/UpdateFolder/index.js";
+import { loadFolderPermissions } from "./loadFolderPermissions.js";
+import { assertTargetIsUsable } from "./assertTargetIsUsable.js";
+const ACCESS_LEVELS = [
+    "owner",
+    "editor",
+    "viewer",
+    "public",
+    "no-access"
+];
+const inputSchema = z.object({
+    folderId: z.string().describe("Folder id as returned by listFolders."),
+    target: z.string().describe("Who to grant access to. A team is 'team:<slug>' — the SLUG, not the id. A user is 'admin:<userId>'. Resolve with listTeams first."),
+    level: z["enum"](ACCESS_LEVELS).describe("owner = full control including permissions; editor = change content; viewer = read only; no-access = explicitly denied.")
+});
+class GrantFolderAccessToolImpl {
+    constructor(getFolder, updateFolder, listTeams){
+        this.getFolder = getFolder;
+        this.updateFolder = updateFolder;
+        this.listTeams = listTeams;
+        this.name = "grantFolderAccess";
+        this.title = "Grant folder access";
+        this.description = "Grants one team or user a level of access on one folder, leaving all other permissions untouched. Use listFolders for the folder id and listTeams for a team slug. Requires user approval.";
+        this.inputSchema = inputSchema;
+        this.annotations = {
+            readOnlyHint: false
+        };
+    }
+    async execute(input) {
+        const loaded = await loadFolderPermissions(this.getFolder, input.folderId);
+        await assertTargetIsUsable(this.listTeams, input.target, loaded.inheritedTargets);
+        const existing = loaded.direct.find((permission)=>String(permission.target) === input.target);
+        const permissions = loaded.direct.filter((permission)=>String(permission.target) !== input.target).concat([
+            {
+                target: input.target,
+                level: input.level
+            }
+        ]);
+        const result = await this.updateFolder.execute(input.folderId, {
+            permissions
+        });
+        if (result.isFail()) throw new Error(`Could not grant access: ${result.error.message}`);
+        const folder = result.value;
+        const granted = {
+            folderId: folder.id,
+            title: folder.title,
+            path: folder.path,
+            permissions: (folder.permissions ?? []).filter((permission)=>!permission.inheritedFrom).map((permission)=>({
+                    target: String(permission.target),
+                    level: permission.level
+                }))
+        };
+        if (existing) granted.replacedExistingLevel = existing.level;
+        return granted;
+    }
+}
+const GrantFolderAccessTool = AiSdkTool.createImplementation({
+    implementation: GrantFolderAccessToolImpl,
+    dependencies: [
+        GetFolderUseCase,
+        UpdateFolderUseCase,
+        ListTeamsUseCase
+    ]
+});
+export { GrantFolderAccessTool };
+
+//# sourceMappingURL=GrantFolderAccessTool.js.map

package/features/ai/GrantFolderAccessTool.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"features/ai/GrantFolderAccessTool.js","sources":["../../../src/features/ai/GrantFolderAccessTool.ts"],"sourcesContent":["import { z } from \"zod\";\nimport { AiSdkTool } from \"@webiny/api-core/features/ai/index.js\";\nimport type { IAiSdkTool } from \"@webiny/api-core/features/ai/index.js\";\nimport { ListTeamsUseCase } from \"@webiny/api-core/features/security/teams/ListTeams/index.js\";\nimport { GetFolderUseCase } from \"~/features/folder/GetFolder/index.js\";\nimport { UpdateFolderUseCase } from \"~/features/folder/UpdateFolder/index.js\";\nimport type { FolderPermission } from \"~/types.js\";\nimport { loadFolderPermissions } from \"./loadFolderPermissions.js\";\nimport { assertTargetIsUsable } from \"./assertTargetIsUsable.js\";\n\nconst ACCESS_LEVELS = [\"owner\", \"editor\", \"viewer\", \"public\", \"no-access\"] as const;\n\nconst inputSchema = z.object({\n    folderId: z.string().describe(\"Folder id as returned by listFolders.\"),\n    target: z\n        .string()\n        .describe(\n            \"Who to grant access to. A team is 'team:<slug>' — the SLUG, not the id. A user is 'admin:<userId>'. Resolve with listTeams first.\"\n        ),\n    level: z\n        .enum(ACCESS_LEVELS)\n        .describe(\n            \"owner = full control including permissions; editor = change content; viewer = read only; no-access = explicitly denied.\"\n        )\n});\n\ntype Input = z.infer<typeof inputSchema>;\n\ninterface GrantResult {\n    folderId: string;\n    title: string;\n    path: string;\n    /**\n     * Every direct rule on the folder afterwards.\n     *\n     * This is the set the update was asked to store, not an independent read of it:\n     * `UpdateFolderWithFolderLevelPermissions` returns the permissions it derived from the input\n     * rather than the ones the repository wrote. Treating it as a verification would let the tool\n     * confirm its own request back to itself.\n     */\n    permissions: { target: string; level: string }[];\n    /** True when the target already had a direct rule and its level was changed. */\n    replacedExistingLevel?: string;\n}\n\n/**\n * Grants one target access to one folder, leaving every other rule alone.\n *\n * Additive by design. The earlier tool took the complete permission set and replaced it, which meant\n * approving a change showed what would be SET and said nothing about what would be removed — a rule\n * the model omitted disappeared silently. One target per call keeps the approval honest: what the user\n * sees in the plan is the whole change.\n */\nclass GrantFolderAccessToolImpl implements IAiSdkTool<Input> {\n    readonly name = \"grantFolderAccess\";\n    readonly title = \"Grant folder access\";\n    readonly description =\n        \"Grants one team or user a level of access on one folder, leaving all other permissions untouched. Use listFolders for the folder id and listTeams for a team slug. Requires user approval.\";\n    readonly inputSchema = inputSchema;\n    readonly annotations = { readOnlyHint: false };\n\n    constructor(\n        private getFolder: GetFolderUseCase.Interface,\n        private updateFolder: UpdateFolderUseCase.Interface,\n        private listTeams: ListTeamsUseCase.Interface\n    ) {}\n\n    async execute(input: Input): Promise<GrantResult> {\n        const loaded = await loadFolderPermissions(this.getFolder, input.folderId);\n\n        await assertTargetIsUsable(this.listTeams, input.target, loaded.inheritedTargets);\n\n        const existing = loaded.direct.find(\n            permission => String(permission.target) === input.target\n        );\n\n        const permissions: FolderPermission[] = loaded.direct\n            .filter(permission => String(permission.target) !== input.target)\n            .concat([{ target: input.target, level: input.level } as FolderPermission]);\n\n        const result = await this.updateFolder.execute(input.folderId, { permissions });\n\n        if (result.isFail()) {\n            throw new Error(`Could not grant access: ${result.error.message}`);\n        }\n\n        const folder = result.value;\n\n        const granted: GrantResult = {\n            folderId: folder.id,\n            title: folder.title,\n            path: folder.path,\n            permissions: (folder.permissions ?? [])\n                .filter(permission => !permission.inheritedFrom)\n                .map(permission => ({ target: String(permission.target), level: permission.level }))\n        };\n\n        if (existing) {\n            granted.replacedExistingLevel = existing.level;\n        }\n\n        return granted;\n    }\n}\n\nexport const GrantFolderAccessTool = AiSdkTool.createImplementation({\n    implementation: GrantFolderAccessToolImpl,\n    dependencies: [GetFolderUseCase, UpdateFolderUseCase, ListTeamsUseCase]\n});\n"],"names":["ACCESS_LEVELS","inputSchema","z","GrantFolderAccessToolImpl","getFolder","updateFolder","listTeams","input","loaded","loadFolderPermissions","assertTargetIsUsable","existing","permission","String","permissions","result","Error","folder","granted","GrantFolderAccessTool","AiSdkTool","GetFolderUseCase","UpdateFolderUseCase","ListTeamsUseCase"],"mappings":";;;;;;;AAUA,MAAMA,gBAAgB;IAAC;IAAS;IAAU;IAAU;IAAU;CAAY;AAE1E,MAAMC,cAAcC,EAAE,MAAM,CAAC;IACzB,UAAUA,EAAE,MAAM,GAAG,QAAQ,CAAC;IAC9B,QAAQA,EAAAA,MACG,GACN,QAAQ,CACL;IAER,OAAOA,CAAC,CAADA,OACE,CAACF,eACL,QAAQ,CACL;AAEZ;AA6BA,MAAMG;IAQF,YACYC,SAAqC,EACrCC,YAA2C,EAC3CC,SAAqC,CAC/C;aAHUF,SAAS,GAATA;aACAC,YAAY,GAAZA;aACAC,SAAS,GAATA;aAVH,IAAI,GAAG;aACP,KAAK,GAAG;aACR,WAAW,GAChB;aACK,WAAW,GAAGL;aACd,WAAW,GAAG;YAAE,cAAc;QAAM;IAM1C;IAEH,MAAM,QAAQM,KAAY,EAAwB;QAC9C,MAAMC,SAAS,MAAMC,sBAAsB,IAAI,CAAC,SAAS,EAAEF,MAAM,QAAQ;QAEzE,MAAMG,qBAAqB,IAAI,CAAC,SAAS,EAAEH,MAAM,MAAM,EAAEC,OAAO,gBAAgB;QAEhF,MAAMG,WAAWH,OAAO,MAAM,CAAC,IAAI,CAC/BI,CAAAA,aAAcC,OAAOD,WAAW,MAAM,MAAML,MAAM,MAAM;QAG5D,MAAMO,cAAkCN,OAAO,MAAM,CAChD,MAAM,CAACI,CAAAA,aAAcC,OAAOD,WAAW,MAAM,MAAML,MAAM,MAAM,EAC/D,MAAM,CAAC;YAAC;gBAAE,QAAQA,MAAM,MAAM;gBAAE,OAAOA,MAAM,KAAK;YAAC;SAAsB;QAE9E,MAAMQ,SAAS,MAAM,IAAI,CAAC,YAAY,CAAC,OAAO,CAACR,MAAM,QAAQ,EAAE;YAAEO;QAAY;QAE7E,IAAIC,OAAO,MAAM,IACb,MAAM,IAAIC,MAAM,CAAC,wBAAwB,EAAED,OAAO,KAAK,CAAC,OAAO,EAAE;QAGrE,MAAME,SAASF,OAAO,KAAK;QAE3B,MAAMG,UAAuB;YACzB,UAAUD,OAAO,EAAE;YACnB,OAAOA,OAAO,KAAK;YACnB,MAAMA,OAAO,IAAI;YACjB,aAAcA,AAAAA,CAAAA,OAAO,WAAW,IAAI,EAAC,EAChC,MAAM,CAACL,CAAAA,aAAc,CAACA,WAAW,aAAa,EAC9C,GAAG,CAACA,CAAAA,aAAe;oBAAE,QAAQC,OAAOD,WAAW,MAAM;oBAAG,OAAOA,WAAW,KAAK;gBAAC;QACzF;QAEA,IAAID,UACAO,QAAQ,qBAAqB,GAAGP,SAAS,KAAK;QAGlD,OAAOO;IACX;AACJ;AAEO,MAAMC,wBAAwBC,UAAU,oBAAoB,CAAC;IAChE,gBAAgBjB;IAChB,cAAc;QAACkB;QAAkBC;QAAqBC;KAAiB;AAC3E"}

package/features/ai/ListFoldersTool.d.ts

@@ -0,0 +1,42 @@
+import { z } from "zod";
+import type { IAiSdkTool } from "@webiny/api-core/features/ai/index.js";
+import { ListFoldersUseCase } from "../../features/folder/ListFolders/index.js";
+declare const inputSchema: z.ZodObject<{
+    type: z.ZodString;
+}, z.core.$strip>;
+type Input = z.infer<typeof inputSchema>;
+interface FolderSummary {
+    id: string;
+    title: string;
+    slug: string;
+    path: string;
+    parentId?: string | null;
+    permissions: {
+        target: string;
+        level: string;
+        inherited: boolean;
+    }[];
+}
+/**
+ * Lists folders with their current access rules, so a permission change is proposed against a real
+ * folder id and the user can see what the access already is before approving a change to it.
+ */
+declare class ListFoldersToolImpl implements IAiSdkTool<Input> {
+    private listFolders;
+    readonly name = "listFolders";
+    readonly title = "List folders";
+    readonly description = "Lists folders of a given type with their ids, paths and current access permissions. Call this before changing folder permissions so the change targets a real folder.";
+    readonly inputSchema: z.ZodObject<{
+        type: z.ZodString;
+    }, z.core.$strip>;
+    readonly annotations: {
+        readOnlyHint: boolean;
+        idempotentHint: boolean;
+    };
+    constructor(listFolders: ListFoldersUseCase.Interface);
+    execute(input: Input): Promise<FolderSummary[]>;
+}
+export declare const ListFoldersTool: typeof ListFoldersToolImpl & {
+    __abstraction: import("@webiny/di").Abstraction<IAiSdkTool<any>>;
+};
+export {};

package/features/ai/ListFoldersTool.js

@@ -0,0 +1,48 @@
+import { z } from "zod";
+import { AiSdkTool } from "@webiny/api-core/features/ai/index.js";
+import { ListFoldersUseCase } from "../folder/ListFolders/index.js";
+const inputSchema = z.object({
+    type: z.string().describe("Folder namespace, e.g. 'FmFile' for the file manager or 'cms:<modelId>' for a content model's folders.")
+});
+class ListFoldersToolImpl {
+    constructor(listFolders){
+        this.listFolders = listFolders;
+        this.name = "listFolders";
+        this.title = "List folders";
+        this.description = "Lists folders of a given type with their ids, paths and current access permissions. Call this before changing folder permissions so the change targets a real folder.";
+        this.inputSchema = inputSchema;
+        this.annotations = {
+            readOnlyHint: true,
+            idempotentHint: true
+        };
+    }
+    async execute(input) {
+        const result = await this.listFolders.execute({
+            where: {
+                type: input.type
+            }
+        });
+        if (result.isFail()) throw new Error(`Could not list folders: ${result.error.message}`);
+        return result.value.folders.map((folder)=>({
+                id: folder.id,
+                title: folder.title,
+                slug: folder.slug,
+                path: folder.path,
+                parentId: folder.parentId,
+                permissions: (folder.permissions ?? []).map((permission)=>({
+                        target: permission.target,
+                        level: permission.level,
+                        inherited: Boolean(permission.inheritedFrom)
+                    }))
+            }));
+    }
+}
+const ListFoldersTool = AiSdkTool.createImplementation({
+    implementation: ListFoldersToolImpl,
+    dependencies: [
+        ListFoldersUseCase
+    ]
+});
+export { ListFoldersTool };
+
+//# sourceMappingURL=ListFoldersTool.js.map

package/features/ai/ListFoldersTool.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"features/ai/ListFoldersTool.js","sources":["../../../src/features/ai/ListFoldersTool.ts"],"sourcesContent":["import { z } from \"zod\";\nimport { AiSdkTool } from \"@webiny/api-core/features/ai/index.js\";\nimport type { IAiSdkTool } from \"@webiny/api-core/features/ai/index.js\";\nimport { ListFoldersUseCase } from \"~/features/folder/ListFolders/index.js\";\n\nconst inputSchema = z.object({\n    type: z\n        .string()\n        .describe(\n            \"Folder namespace, e.g. 'FmFile' for the file manager or 'cms:<modelId>' for a content model's folders.\"\n        )\n});\n\ntype Input = z.infer<typeof inputSchema>;\n\ninterface FolderSummary {\n    id: string;\n    title: string;\n    slug: string;\n    path: string;\n    parentId?: string | null;\n    permissions: { target: string; level: string; inherited: boolean }[];\n}\n\n/**\n * Lists folders with their current access rules, so a permission change is proposed against a real\n * folder id and the user can see what the access already is before approving a change to it.\n */\nclass ListFoldersToolImpl implements IAiSdkTool<Input> {\n    readonly name = \"listFolders\";\n    readonly title = \"List folders\";\n    readonly description =\n        \"Lists folders of a given type with their ids, paths and current access permissions. Call this before changing folder permissions so the change targets a real folder.\";\n    readonly inputSchema = inputSchema;\n    readonly annotations = { readOnlyHint: true, idempotentHint: true };\n\n    constructor(private listFolders: ListFoldersUseCase.Interface) {}\n\n    async execute(input: Input): Promise<FolderSummary[]> {\n        const result = await this.listFolders.execute({ where: { type: input.type } });\n\n        if (result.isFail()) {\n            throw new Error(`Could not list folders: ${result.error.message}`);\n        }\n\n        return result.value.folders.map(folder => ({\n            id: folder.id,\n            title: folder.title,\n            slug: folder.slug,\n            path: folder.path,\n            parentId: folder.parentId,\n            permissions: (folder.permissions ?? []).map(permission => ({\n                target: permission.target,\n                level: permission.level,\n                // Inherited rules cannot be edited on this folder — only on the ancestor that set them.\n                inherited: Boolean(permission.inheritedFrom)\n            }))\n        }));\n    }\n}\n\nexport const ListFoldersTool = AiSdkTool.createImplementation({\n    implementation: ListFoldersToolImpl,\n    dependencies: [ListFoldersUseCase]\n});\n"],"names":["inputSchema","z","ListFoldersToolImpl","listFolders","input","result","Error","folder","permission","Boolean","ListFoldersTool","AiSdkTool","ListFoldersUseCase"],"mappings":";;;AAKA,MAAMA,cAAcC,EAAE,MAAM,CAAC;IACzB,MAAMA,EAAAA,MACK,GACN,QAAQ,CACL;AAEZ;AAiBA,MAAMC;IAQF,YAAoBC,WAAyC,CAAE;aAA3CA,WAAW,GAAXA;aAPX,IAAI,GAAG;aACP,KAAK,GAAG;aACR,WAAW,GAChB;aACK,WAAW,GAAGH;aACd,WAAW,GAAG;YAAE,cAAc;YAAM,gBAAgB;QAAK;IAEF;IAEhE,MAAM,QAAQI,KAAY,EAA4B;QAClD,MAAMC,SAAS,MAAM,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC;YAAE,OAAO;gBAAE,MAAMD,MAAM,IAAI;YAAC;QAAE;QAE5E,IAAIC,OAAO,MAAM,IACb,MAAM,IAAIC,MAAM,CAAC,wBAAwB,EAAED,OAAO,KAAK,CAAC,OAAO,EAAE;QAGrE,OAAOA,OAAO,KAAK,CAAC,OAAO,CAAC,GAAG,CAACE,CAAAA,SAAW;gBACvC,IAAIA,OAAO,EAAE;gBACb,OAAOA,OAAO,KAAK;gBACnB,MAAMA,OAAO,IAAI;gBACjB,MAAMA,OAAO,IAAI;gBACjB,UAAUA,OAAO,QAAQ;gBACzB,aAAcA,AAAAA,CAAAA,OAAO,WAAW,IAAI,EAAC,EAAG,GAAG,CAACC,CAAAA,aAAe;wBACvD,QAAQA,WAAW,MAAM;wBACzB,OAAOA,WAAW,KAAK;wBAEvB,WAAWC,QAAQD,WAAW,aAAa;oBAC/C;YACJ;IACJ;AACJ;AAEO,MAAME,kBAAkBC,UAAU,oBAAoB,CAAC;IAC1D,gBAAgBT;IAChB,cAAc;QAACU;KAAmB;AACtC"}

package/features/ai/ListRolesTool.d.ts

@@ -0,0 +1,34 @@
+import { z } from "zod";
+import type { IAiSdkTool } from "@webiny/api-core/features/ai/index.js";
+import { ListRolesUseCase } from "@webiny/api-core/features/security/roles/ListRoles/index.js";
+interface RoleSummary {
+    id: string;
+    name: string;
+    slug: string;
+    description?: string;
+}
+/**
+ * Resolves role names to the IDs `createTeam` takes. Separate from the write, so the user approves a
+ * team with roles that were looked up rather than guessed.
+ *
+ * Returns the slug too, because it is what a human recognises and what the admin UI shows, while
+ * `id` is what a team actually stores. Nothing at the type level separates the two, so `createTeam`
+ * accepts either and resolves it rather than making the caller guess which one that field wants.
+ */
+declare class ListRolesToolImpl implements IAiSdkTool<Record<string, never>> {
+    private listRoles;
+    readonly name = "listRoles";
+    readonly title = "List roles";
+    readonly description = "Lists the security roles in this project. Call this before createTeam and pass the `id` of each role you want. A slug also works, but a value that is neither is rejected.";
+    readonly inputSchema: z.ZodObject<{}, z.core.$strip>;
+    readonly annotations: {
+        readOnlyHint: boolean;
+        idempotentHint: boolean;
+    };
+    constructor(listRoles: ListRolesUseCase.Interface);
+    execute(): Promise<RoleSummary[]>;
+}
+export declare const ListRolesTool: typeof ListRolesToolImpl & {
+    __abstraction: import("@webiny/di").Abstraction<IAiSdkTool<any>>;
+};
+export {};

package/features/ai/ListRolesTool.js

@@ -0,0 +1,39 @@
+import { z } from "zod";
+import { AiSdkTool } from "@webiny/api-core/features/ai/index.js";
+import { ListRolesUseCase } from "@webiny/api-core/features/security/roles/ListRoles/index.js";
+const inputSchema = z.object({});
+class ListRolesToolImpl {
+    constructor(listRoles){
+        this.listRoles = listRoles;
+        this.name = "listRoles";
+        this.title = "List roles";
+        this.description = "Lists the security roles in this project. Call this before createTeam and pass the `id` of each role you want. A slug also works, but a value that is neither is rejected.";
+        this.inputSchema = inputSchema;
+        this.annotations = {
+            readOnlyHint: true,
+            idempotentHint: true
+        };
+    }
+    async execute() {
+        const result = await this.listRoles.execute();
+        if (result.isFail()) throw new Error(`Could not list roles: ${result.error.message}`);
+        return result.value.map((role)=>{
+            const summary = {
+                id: role.id,
+                name: role.name,
+                slug: role.slug
+            };
+            if (role.description) summary.description = role.description;
+            return summary;
+        });
+    }
+}
+const ListRolesTool = AiSdkTool.createImplementation({
+    implementation: ListRolesToolImpl,
+    dependencies: [
+        ListRolesUseCase
+    ]
+});
+export { ListRolesTool };
+
+//# sourceMappingURL=ListRolesTool.js.map

package/features/ai/ListRolesTool.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"features/ai/ListRolesTool.js","sources":["../../../src/features/ai/ListRolesTool.ts"],"sourcesContent":["import { z } from \"zod\";\nimport { AiSdkTool } from \"@webiny/api-core/features/ai/index.js\";\nimport type { IAiSdkTool } from \"@webiny/api-core/features/ai/index.js\";\nimport { ListRolesUseCase } from \"@webiny/api-core/features/security/roles/ListRoles/index.js\";\n\nconst inputSchema = z.object({});\n\ninterface RoleSummary {\n    id: string;\n    name: string;\n    slug: string;\n    description?: string;\n}\n\n/**\n * Resolves role names to the IDs `createTeam` takes. Separate from the write, so the user approves a\n * team with roles that were looked up rather than guessed.\n *\n * Returns the slug too, because it is what a human recognises and what the admin UI shows, while\n * `id` is what a team actually stores. Nothing at the type level separates the two, so `createTeam`\n * accepts either and resolves it rather than making the caller guess which one that field wants.\n */\nclass ListRolesToolImpl implements IAiSdkTool<Record<string, never>> {\n    readonly name = \"listRoles\";\n    readonly title = \"List roles\";\n    readonly description =\n        \"Lists the security roles in this project. Call this before createTeam and pass the `id` of each role you want. A slug also works, but a value that is neither is rejected.\";\n    readonly inputSchema = inputSchema;\n    readonly annotations = { readOnlyHint: true, idempotentHint: true };\n\n    constructor(private listRoles: ListRolesUseCase.Interface) {}\n\n    async execute(): Promise<RoleSummary[]> {\n        const result = await this.listRoles.execute();\n\n        if (result.isFail()) {\n            throw new Error(`Could not list roles: ${result.error.message}`);\n        }\n\n        return result.value.map(role => {\n            const summary: RoleSummary = {\n                id: role.id,\n                name: role.name,\n                slug: role.slug\n            };\n\n            if (role.description) {\n                summary.description = role.description;\n            }\n\n            return summary;\n        });\n    }\n}\n\nexport const ListRolesTool = AiSdkTool.createImplementation({\n    implementation: ListRolesToolImpl,\n    dependencies: [ListRolesUseCase]\n});\n"],"names":["inputSchema","z","ListRolesToolImpl","listRoles","result","Error","role","summary","ListRolesTool","AiSdkTool","ListRolesUseCase"],"mappings":";;;AAKA,MAAMA,cAAcC,EAAE,MAAM,CAAC,CAAC;AAiB9B,MAAMC;IAQF,YAAoBC,SAAqC,CAAE;aAAvCA,SAAS,GAATA;aAPX,IAAI,GAAG;aACP,KAAK,GAAG;aACR,WAAW,GAChB;aACK,WAAW,GAAGH;aACd,WAAW,GAAG;YAAE,cAAc;YAAM,gBAAgB;QAAK;IAEN;IAE5D,MAAM,UAAkC;QACpC,MAAMI,SAAS,MAAM,IAAI,CAAC,SAAS,CAAC,OAAO;QAE3C,IAAIA,OAAO,MAAM,IACb,MAAM,IAAIC,MAAM,CAAC,sBAAsB,EAAED,OAAO,KAAK,CAAC,OAAO,EAAE;QAGnE,OAAOA,OAAO,KAAK,CAAC,GAAG,CAACE,CAAAA;YACpB,MAAMC,UAAuB;gBACzB,IAAID,KAAK,EAAE;gBACX,MAAMA,KAAK,IAAI;gBACf,MAAMA,KAAK,IAAI;YACnB;YAEA,IAAIA,KAAK,WAAW,EAChBC,QAAQ,WAAW,GAAGD,KAAK,WAAW;YAG1C,OAAOC;QACX;IACJ;AACJ;AAEO,MAAMC,gBAAgBC,UAAU,oBAAoB,CAAC;IACxD,gBAAgBP;IAChB,cAAc;QAACQ;KAAiB;AACpC"}

package/features/ai/ListTeamsTool.d.ts

@@ -0,0 +1,34 @@
+import { z } from "zod";
+import type { IAiSdkTool } from "@webiny/api-core/features/ai/index.js";
+import { ListTeamsUseCase } from "@webiny/api-core/features/security/teams/ListTeams/index.js";
+declare const inputSchema: z.ZodObject<{}, z.core.$strip>;
+type Input = z.infer<typeof inputSchema>;
+interface TeamSummary {
+    id: string;
+    name: string;
+    slug: string;
+    description?: string;
+}
+/**
+ * Resolves human names ("team A") to the ids folder permissions actually take.
+ *
+ * Kept separate from setFolderPermissions rather than accepting a team name there: the user approves
+ * the arguments of a write, so the id has to be looked up and shown, not guessed inside the write.
+ */
+declare class ListTeamsToolImpl implements IAiSdkTool<Input> {
+    private listTeams;
+    readonly name = "listTeams";
+    readonly title = "List teams";
+    readonly description = "Lists the teams in this project with their ids, names and slugs. Folder permission targets use the SLUG (`team:<slug>`), not the id.";
+    readonly inputSchema: z.ZodObject<{}, z.core.$strip>;
+    readonly annotations: {
+        readOnlyHint: boolean;
+        idempotentHint: boolean;
+    };
+    constructor(listTeams: ListTeamsUseCase.Interface);
+    execute(): Promise<TeamSummary[]>;
+}
+export declare const ListTeamsTool: typeof ListTeamsToolImpl & {
+    __abstraction: import("@webiny/di").Abstraction<IAiSdkTool<any>>;
+};
+export {};

package/features/ai/ListTeamsTool.js

@@ -0,0 +1,39 @@
+import { z } from "zod";
+import { AiSdkTool } from "@webiny/api-core/features/ai/index.js";
+import { ListTeamsUseCase } from "@webiny/api-core/features/security/teams/ListTeams/index.js";
+const inputSchema = z.object({});
+class ListTeamsToolImpl {
+    constructor(listTeams){
+        this.listTeams = listTeams;
+        this.name = "listTeams";
+        this.title = "List teams";
+        this.description = "Lists the teams in this project with their ids, names and slugs. Folder permission targets use the SLUG (`team:<slug>`), not the id.";
+        this.inputSchema = inputSchema;
+        this.annotations = {
+            readOnlyHint: true,
+            idempotentHint: true
+        };
+    }
+    async execute() {
+        const result = await this.listTeams.execute();
+        if (result.isFail()) throw new Error(`Could not list teams: ${result.error.message}`);
+        return result.value.map((team)=>{
+            const summary = {
+                id: team.id,
+                name: team.name,
+                slug: team.slug
+            };
+            if (team.description) summary.description = team.description;
+            return summary;
+        });
+    }
+}
+const ListTeamsTool = AiSdkTool.createImplementation({
+    implementation: ListTeamsToolImpl,
+    dependencies: [
+        ListTeamsUseCase
+    ]
+});
+export { ListTeamsTool };
+
+//# sourceMappingURL=ListTeamsTool.js.map

package/features/ai/ListTeamsTool.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"features/ai/ListTeamsTool.js","sources":["../../../src/features/ai/ListTeamsTool.ts"],"sourcesContent":["import { z } from \"zod\";\nimport { AiSdkTool } from \"@webiny/api-core/features/ai/index.js\";\nimport type { IAiSdkTool } from \"@webiny/api-core/features/ai/index.js\";\nimport { ListTeamsUseCase } from \"@webiny/api-core/features/security/teams/ListTeams/index.js\";\n\nconst inputSchema = z.object({});\n\ntype Input = z.infer<typeof inputSchema>;\n\ninterface TeamSummary {\n    id: string;\n    name: string;\n    slug: string;\n    description?: string;\n}\n\n/**\n * Resolves human names (\"team A\") to the ids folder permissions actually take.\n *\n * Kept separate from setFolderPermissions rather than accepting a team name there: the user approves\n * the arguments of a write, so the id has to be looked up and shown, not guessed inside the write.\n */\nclass ListTeamsToolImpl implements IAiSdkTool<Input> {\n    readonly name = \"listTeams\";\n    readonly title = \"List teams\";\n    readonly description =\n        \"Lists the teams in this project with their ids, names and slugs. Folder permission targets use the SLUG (`team:<slug>`), not the id.\";\n    readonly inputSchema = inputSchema;\n    readonly annotations = { readOnlyHint: true, idempotentHint: true };\n\n    constructor(private listTeams: ListTeamsUseCase.Interface) {}\n\n    async execute(): Promise<TeamSummary[]> {\n        const result = await this.listTeams.execute();\n\n        if (result.isFail()) {\n            throw new Error(`Could not list teams: ${result.error.message}`);\n        }\n\n        return result.value.map(team => {\n            const summary: TeamSummary = {\n                id: team.id,\n                name: team.name,\n                slug: team.slug\n            };\n\n            if (team.description) {\n                summary.description = team.description;\n            }\n\n            return summary;\n        });\n    }\n}\n\nexport const ListTeamsTool = AiSdkTool.createImplementation({\n    implementation: ListTeamsToolImpl,\n    dependencies: [ListTeamsUseCase]\n});\n"],"names":["inputSchema","z","ListTeamsToolImpl","listTeams","result","Error","team","summary","ListTeamsTool","AiSdkTool","ListTeamsUseCase"],"mappings":";;;AAKA,MAAMA,cAAcC,EAAE,MAAM,CAAC,CAAC;AAiB9B,MAAMC;IAQF,YAAoBC,SAAqC,CAAE;aAAvCA,SAAS,GAATA;aAPX,IAAI,GAAG;aACP,KAAK,GAAG;aACR,WAAW,GAChB;aACK,WAAW,GAAGH;aACd,WAAW,GAAG;YAAE,cAAc;YAAM,gBAAgB;QAAK;IAEN;IAE5D,MAAM,UAAkC;QACpC,MAAMI,SAAS,MAAM,IAAI,CAAC,SAAS,CAAC,OAAO;QAE3C,IAAIA,OAAO,MAAM,IACb,MAAM,IAAIC,MAAM,CAAC,sBAAsB,EAAED,OAAO,KAAK,CAAC,OAAO,EAAE;QAGnE,OAAOA,OAAO,KAAK,CAAC,GAAG,CAACE,CAAAA;YACpB,MAAMC,UAAuB;gBACzB,IAAID,KAAK,EAAE;gBACX,MAAMA,KAAK,IAAI;gBACf,MAAMA,KAAK,IAAI;YACnB;YAEA,IAAIA,KAAK,WAAW,EAChBC,QAAQ,WAAW,GAAGD,KAAK,WAAW;YAG1C,OAAOC;QACX;IACJ;AACJ;AAEO,MAAMC,gBAAgBC,UAAU,oBAAoB,CAAC;IACxD,gBAAgBP;IAChB,cAAc;QAACQ;KAAiB;AACpC"}