adminizer 5.0.0-build.8 → 5.1.0-build.24

package/lib/model/adapter/typeorm.d.ts

@@ -28,6 +28,22 @@ export declare class TypeOrmModel<T extends ObjectLiteral> extends AbstractModel
     private normalizeCriteria;
     private addRequestedRelations;
     private addAllRelationJoins;
+    /**
+     * `criteria.populateOn` support: many-to-one with its FK declared as a real column
+     * property — the hydrated entity then carries the value the filtered association
+     * collapses to. (An undeclared FK leaves `joinColumns[0].propertyName` equal to the
+     * relation's own property name.)
+     */
+    canPushdownPopulateAccess(association: string): boolean;
+    /**
+     * Renders a `populateOn` entry into the JOIN's ON clause. Only the shapes the
+     * record-access layer marks pushdown-safe (primitive equality, `{in: [...]}`) are
+     * supported; anything else fails closed to a never-matching condition — the
+     * association then collapses to its foreign key rather than leaking.
+     */
+    private buildJoinCondition;
+    /** A record filtered out of a `populateOn` JOIN comes back as its bare foreign key. */
+    private collapsePopulateOn;
     private isNativeWhere;
     private applyFindOptions;
     private applyWhere;

package/lib/model/adapter/typeorm.js

@@ -1,7 +1,11 @@
 import { Brackets, EntitySchema, NotBrackets, } from "typeorm";
 import { v4 as uuid } from "uuid";
 import { AbstractAdapter, AbstractModel } from "../AbstractModel.js";
+import { Adminizer } from "../../Adminizer.js";
 const ROOT_ALIAS = "record";
+/** Always-false / always-true predicates: an empty IN-list must not depend on driver quirks. */
+const MATCH_NOTHING = "1 = 0";
+const MATCH_EVERYTHING = "1 = 1";
 function normalizeModelName(modelName) {
     return modelName.toLowerCase();
 }
@@ -295,7 +299,7 @@ export class TypeOrmModel extends AbstractModel {
     normalizeCriteria(criteria = {}) {
         const criteriaSortValue = "sort" in criteria ? criteria.sort : undefined;
         const isOrderingSort = typeof criteriaSortValue === "string";
-        const { where: nestedWhere, skip, limit, sort, select, populate, ...rest } = criteria;
+        const { where: nestedWhere, skip, limit, sort, select, populate, populateOn: _populateOn, ...rest } = criteria;
         if (!isOrderingSort && criteriaSortValue !== undefined) {
             rest.sort = criteriaSortValue;
         }
@@ -308,7 +312,7 @@ export class TypeOrmModel extends AbstractModel {
             select: this.buildAttributes(select),
         };
     }
-    addRequestedRelations(qb, populate) {
+    addRequestedRelations(qb, populate, populateOn) {
         const aliases = new Map();
         const relations = populate ? Object.keys(populate) : this.relationNames;
         for (const relationName of relations) {
@@ -316,7 +320,15 @@ export class TypeOrmModel extends AbstractModel {
                 continue;
             }
             const alias = `${ROOT_ALIAS}_${relationName}`;
-            qb.leftJoinAndSelect(`${ROOT_ALIAS}.${relationName}`, alias);
+            const joinCondition = populateOn?.[relationName]
+                ? this.buildJoinCondition(populateOn[relationName], alias)
+                : undefined;
+            if (joinCondition) {
+                qb.leftJoinAndSelect(`${ROOT_ALIAS}.${relationName}`, alias, joinCondition.sql, joinCondition.params);
+            }
+            else {
+                qb.leftJoinAndSelect(`${ROOT_ALIAS}.${relationName}`, alias);
+            }
             aliases.set(relationName, alias);
         }
         if (populate) {
@@ -353,17 +365,93 @@ export class TypeOrmModel extends AbstractModel {
         }
         return aliases;
     }
+    /**
+     * `criteria.populateOn` support: many-to-one with its FK declared as a real column
+     * property — the hydrated entity then carries the value the filtered association
+     * collapses to. (An undeclared FK leaves `joinColumns[0].propertyName` equal to the
+     * relation's own property name.)
+     */
+    canPushdownPopulateAccess(association) {
+        const relation = this.getRelation(association);
+        const joinColumn = relation?.joinColumns[0];
+        return Boolean(relation?.isManyToOne
+            && joinColumn?.propertyName
+            && joinColumn.propertyName !== relation.propertyName
+            && this.metadata.columns.some((column) => column.propertyName === joinColumn.propertyName));
+    }
+    /**
+     * Renders a `populateOn` entry into the JOIN's ON clause. Only the shapes the
+     * record-access layer marks pushdown-safe (primitive equality, `{in: [...]}`) are
+     * supported; anything else fails closed to a never-matching condition — the
+     * association then collapses to its foreign key rather than leaking.
+     */
+    buildJoinCondition(on, alias) {
+        const expressions = [];
+        const params = {};
+        for (const [field, value] of Object.entries(on)) {
+            if (value === null) {
+                expressions.push(`${alias}.${field} IS NULL`);
+                continue;
+            }
+            if (["string", "number", "boolean"].includes(typeof value)) {
+                const param = this.nextParamName();
+                expressions.push(`${alias}.${field} = :${param}`);
+                params[param] = value;
+                continue;
+            }
+            const inList = value && typeof value === "object" && Object.keys(value).length === 1
+                ? value.in
+                : undefined;
+            if (Array.isArray(inList)) {
+                if (!inList.length) {
+                    expressions.push(MATCH_NOTHING);
+                    continue;
+                }
+                const param = this.nextParamName();
+                expressions.push(`${alias}.${field} IN (:...${param})`);
+                params[param] = inList;
+                continue;
+            }
+            expressions.push(MATCH_NOTHING);
+        }
+        return { sql: expressions.join(" AND ") || MATCH_NOTHING, params };
+    }
+    /** A record filtered out of a `populateOn` JOIN comes back as its bare foreign key. */
+    collapsePopulateOn(entities, populateOn) {
+        if (!populateOn) {
+            return;
+        }
+        for (const association of Object.keys(populateOn)) {
+            const fkProperty = this.getRelation(association)?.joinColumns[0]?.propertyName;
+            if (!fkProperty || fkProperty === association) {
+                continue;
+            }
+            for (const entity of entities) {
+                if (entity[association] == null && entity[fkProperty] != null) {
+                    entity[association] = entity[fkProperty];
+                }
+            }
+        }
+    }
     isNativeWhere(where) {
         return where instanceof Brackets || where instanceof NotBrackets;
     }
     applyFindOptions(qb, criteria) {
         const options = this.normalizeCriteria(criteria);
-        const aliases = this.addRequestedRelations(qb, criteria.populate);
+        const aliases = this.addRequestedRelations(qb, criteria.populate, criteria.populateOn);
         if (this.isNativeWhere(options.where) || Object.keys(options.where).length > 0) {
             this.applyWhere(qb, options.where, ROOT_ALIAS, aliases);
         }
         if (options.select) {
-            qb.select(options.select.map((field) => `${ROOT_ALIAS}.${field}`));
+            // The populateOn collapse reads the FK properties — keep them selected.
+            const selected = [...options.select];
+            for (const association of Object.keys(criteria.populateOn ?? {})) {
+                const fkProperty = this.getRelation(association)?.joinColumns[0]?.propertyName;
+                if (fkProperty && fkProperty !== association && !selected.includes(fkProperty)) {
+                    selected.push(fkProperty);
+                }
+            }
+            qb.select(selected.map((field) => `${ROOT_ALIAS}.${field}`));
         }
         for (const [field, direction] of options.order) {
             const orderColumn = this.getOrderColumn(ROOT_ALIAS, field);
@@ -389,7 +477,16 @@ export class TypeOrmModel extends AbstractModel {
         }
     }
     buildWhereBrackets(where, alias, relationAliases) {
-        const entries = Object.entries(where).filter(([, value]) => value !== undefined);
+        const entries = Object.entries(where).filter(([key, value]) => {
+            if (value === undefined) {
+                // Historical behaviour: an undefined value drops the condition. Record-access
+                // filters never emit one, so this only fires for hand-built criteria — but a
+                // dropped condition widens the query, so it must not stay silent.
+                Adminizer.log.warn(`TypeORM adapter: criteria field "${key}" has an undefined value and was dropped`);
+                return false;
+            }
+            return true;
+        });
         if (!entries.length) {
             return undefined;
         }
@@ -467,6 +564,9 @@ export class TypeOrmModel extends AbstractModel {
             return { sql: `${column} IS NULL` };
         }
         if (Array.isArray(value)) {
+            if (!value.length) {
+                return { sql: MATCH_NOTHING };
+            }
             const param = this.nextParamName();
             return { sql: `${column} IN (:...${param})`, params: { [param]: value } };
         }
@@ -474,8 +574,15 @@ export class TypeOrmModel extends AbstractModel {
             const expressions = [];
             const params = {};
             for (const [operator, raw] of Object.entries(value)) {
-                if (raw === undefined)
+                if (raw === undefined || raw === null) {
+                    // Access scoping emits `in` lists, so an absent operand must fail
+                    // closed (match nothing) rather than silently widen the query.
+                    // Other operators keep the historical skip: filter builders rely on it.
+                    if (operator === "in" || operator === "$in") {
+                        expressions.push(MATCH_NOTHING);
+                    }
                     continue;
+                }
                 const built = this.buildOperatorCondition(column, operator, raw);
                 if (!built)
                     continue;
@@ -528,10 +635,18 @@ export class TypeOrmModel extends AbstractModel {
                 return { sql: `CAST(${column} AS TEXT) LIKE :${param}`, params: { [param]: `%${value}` } };
             case "in":
             case "$in":
+                // An empty list matches nothing on every driver; the spread placeholder
+                // would depend on TypeORM's empty-array handling.
+                if (Array.isArray(value) && !value.length) {
+                    return { sql: MATCH_NOTHING };
+                }
                 return { sql: `${column} IN (:...${param})`, params };
             case "notIn":
             case "nin":
             case "$notIn":
+                if (Array.isArray(value) && !value.length) {
+                    return { sql: MATCH_EVERYTHING };
+                }
                 return { sql: `${column} NOT IN (:...${param})`, params };
             case "between":
             case "$between": {
@@ -551,7 +666,13 @@ export class TypeOrmModel extends AbstractModel {
                 const serialized = JSON.stringify(value).replace(/[%_]/g, "\\$&");
                 return { sql: `CAST(${column} AS TEXT) LIKE :${param}`, params: { [param]: `%${serialized}%` } };
             }
+            case "intersects":
+                // Emitted only by the (unsupported) collection form of
+                // `userAccessRelation` — fail loudly instead of silently dropping the
+                // condition, which would widen the query (sequelize adapter parity).
+                throw new Error(`TypeORM adapter does not support the "intersects" operator (column "${column}")`);
             default:
+                Adminizer.log.warn(`TypeORM adapter: unsupported criteria operator "${operator}" was dropped for column "${column}"`);
                 return undefined;
         }
     }
@@ -660,12 +781,18 @@ export class TypeOrmModel extends AbstractModel {
     async _findOne(criteria = {}) {
         const qb = this.createQueryBuilder();
         this.applyFindOptions(qb, criteria);
-        return await qb.getOne();
+        const record = await qb.getOne();
+        if (record) {
+            this.collapsePopulateOn([record], criteria.populateOn);
+        }
+        return record;
     }
     async _find(criteria = {}) {
         const qb = this.createQueryBuilder();
         this.applyFindOptions(qb, criteria);
-        return await qb.getMany();
+        const records = await qb.getMany();
+        this.collapsePopulateOn(records, criteria.populateOn);
+        return records;
     }
     async _updateOne(criteria, data) {
         const record = await this._findOne(criteria);

package/lib/notifications/GeneralNotificationService.js

@@ -6,23 +6,24 @@ export class GeneralNotificationService extends AbstractNotificationService {
     icon = 'info';
     iconColor = '#5987de';
     async dispatchNotification(notification) {
+        const { userId, ...notificationData } = notification;
         const fullNotification = {
-            ...notification,
+            ...notificationData,
             notificationClass: this.notificationClass
         };
         let notificationDB;
         try {
             notificationDB = await this.notificationModel().create(fullNotification);
-            if (notification.userId) {
+            if (userId) {
                 // For specific user
-                await this.createUserNotification(notificationDB.id, notification.userId);
+                await this.createUserNotification(notificationDB.id, userId);
             }
             else {
                 // For all users
                 const users = await this.userModel().find({});
                 for (const user of users) {
                     try {
-                        if (this.adminizer.accessRightsHelper.hasPermission(`notification-${this.notificationClass}`, user)) {
+                        if (await this.adminizer.accessRightsHelper.hasPermission(`notification-${this.notificationClass}`, user)) {
                             await this.createUserNotification(notificationDB.id, user.id);
                         }
                         else {
@@ -45,7 +46,7 @@ export class GeneralNotificationService extends AbstractNotificationService {
                     },
                 },
                 notificationClass: this.notificationClass,
-                userId: notification.userId ?? null
+                userId: userId ?? null
             };
             this.broadcast(event);
             Adminizer.log.info(`[General] Notification dispatched: ${fullNotification.title}`);

package/lib/notifications/SystemNotificationService.js

@@ -19,7 +19,7 @@ export class SystemNotificationService extends AbstractNotificationService {
             const users = await this.userModel().find({});
             for (const user of users) {
                 try {
-                    if (this.adminizer.accessRightsHelper.hasPermission(`notification-${this.notificationClass}`, user)) {
+                    if (await this.adminizer.accessRightsHelper.hasPermission(`notification-${this.notificationClass}`, user)) {
                         await this.createUserNotification(notificationDB.id, user.id);
                     }
                 }

package/lib/ui-i18n/uiTranslationKeys.d.ts

@@ -1,6 +1,7 @@
-export declare const COMMON_UI_TRANSLATION_KEYS: readonly ["Delete", "Diff", "Preview", "Add", "Search", "Yes", "No", "On", "Off", "Hide", "Show", "No notifications found", "No notifications", "No widgets found", "Changes not found", "Old", "New", "Added", "Removed", "Updated", "changed type", "Error: Invalid field data", "Error: Fields data is invalid", "No fields to display", "Error: Some fields are missing required properties (name, type, label)", "Edit", "create", "Clean", "Are you sure?", "Select Item type", "Select Ids", "Open in a new window", "Visible", "Performing an action...", "Action completed", "Action failed", "Save", "First", "Last", "Previous", "Next", "Send feedback", "Feedback", "Title", "Description", "Attach files", "Send", "Sending...", "Feedback sent successfully", "Title is required", "File size exceeds the 5 MB limit", "Remove file", "Max 5 MB per file", "View All", "Make read", "Make all read", "Message", "Date", "Watch", "Current", "There is no history"];
+export declare const COMMON_UI_TRANSLATION_KEYS: readonly ["Delete", "Diff", "Preview", "Add", "Search", "Yes", "No", "On", "Off", "Hide", "Show", "No notifications found", "No notifications", "No widgets found", "Changes not found", "Old", "New", "Added", "Removed", "Updated", "changed type", "Error: Invalid field data", "Error: Fields data is invalid", "No fields to display", "Error: Some fields are missing required properties (name, type, label)", "Edit", "create", "Clean", "Are you sure?", "Select Item type", "Select Ids", "Open in a new window", "Visible", "Performing an action...", "Action completed", "Action failed", "Save", "First", "Last", "Previous", "Next", "Send feedback", "Feedback", "Title", "Description", "Attach files", "Send", "Sending...", "Feedback sent successfully", "Title is required", "File size exceeds the 5 MB limit", "Remove file", "Max 5 MB per file", "View All", "Make read", "Make all read", "Message", "Date", "Watch", "Current", "There is no history", "Documentation", "Page documentation", "Knowledge base", "Schema", "Back to contents", "Open in knowledge base", "Send to assistant", "Failed to load documentation", "Loading...", "Nothing found", "Field", "Type", "Required", "Language"];
 export declare const FILTER_UI_TRANSLATION_KEYS: readonly ["Filters", "Saved filters", "Active filter", "Add filter", "Reset filter", "Reset", "Equal", "Not equal", "Contains", "Not contains", "Starts with", "Ends with", "Is empty", "Is not empty", "Greater than", "Greater or equal", "Less than", "Less or equal", "Between", "After", "After or equal", "Before", "Before or equal", "In list", "Not in list", "Is null", "Is not null", "Yes", "No", "From", "To", "From...", "To...", "Date...", "Today", "Month", "Month range", "Year", "Year range", "Value...", "Select...", "selected", "Search...", "No results", "Error", "Model not found", "Error applying filter", "Enter filter name", "Temporary filter", "Error: model not found", "Error loading columns", "Network error", "Columns settings", "Available columns", "Visible columns", "Add all", "Hide all", "No available columns", "Move columns here", "Save changes", "Apply", "Save", "Back", "Cancel", "conditions", "modified", "Private filter", "For groups", "Public filter", "Only for you", "For selected groups", "For all users", "Visible only to you", "Visible only to your group", "API access (feed)", "Hide", "Show", "Regenerate", "copied to clipboard", "Failed to copy", "Loading filters...", "No saved filters", "Save current filter for quick access", "Someone else's private filter (owner:", "unknown)", "Owner", "Apply filter", "Delete filter", "No permission to delete filter", "Edit filter", "New filter", "Filter conditions", "Add condition", "Select field", "No conditions. Add a condition above.", "Name", "Description", "Icon", "Color", "Filter parameters", "Change filter conditions and parameters", "Configure filter conditions", "Specify name and parameters for saving", "Someone else's private filter", "You cannot change someone else's filter visibility", "Private", "Public", "Visibility", "Export", "Exporting...", "Export is only available with an active filter", "Export to", "completed", "Export error", "Data in JSON format", "Text format CSV", "Excel file", "Conditions", "Access for groups", "Selected groups", "Groups list", "Columns", "Saving...", "Error saving filter", "Column configuration", "Select and arrange columns to display in the table", "Loading columns...", "Use buttons", "to move and", "to change order", "Add", "Edit", "Save filter", "and", "Custom filtering", "Select a saved filter or create a new one", "Select a filter or create a new one", "Filter visibility", "Unknown", "JSON URL", "XML URL", "API key is not created", "The key is not created. Create it or contact an administrator.", "OK"];
 export declare const HISTORY_UI_TRANSLATION_KEYS: readonly ["Models", "All", "Users", "Date", "Pick a date", "Search", "Reset", "Model", "Name", "Event", "User", "Diff", "The end of the list has been reached", "There are no records to display"];
 export declare const HISTORY_TABLE_UI_TRANSLATION_KEYS: readonly ["Event", "Date", "User", "Watch", "Current", "There is no history", "Diff"];
 export declare const NOTIFICATION_UI_TRANSLATION_KEYS: readonly ["Make read", "View All", "Search", "Make all read", "Title", "Message", "Date", "Diff", "No notifications", "No notifications found", "The end of the list has been reached"];
 export declare const USER_FILTERS_UI_TRANSLATION_KEYS: readonly ["Loading...", "Search filters...", "All models", "No filters found", "Loading more...", "Filter Name", "Model", "Visibility", "API access (feed)", "Owner", "Private", "Public", "Groups", "Yes", "No", "You", "Unknown", "Reset", "found", "User Filters"];
+export declare const DOCS_UI_TRANSLATION_KEYS: readonly ["Documentation", "Knowledge base", "Contents", "Search documentation", "Search", "Keywords", "Clear", "Nothing found", "There is no documentation yet", "Select a document to read", "Loading...", "Language", "Send to assistant", "Schema", "Related models", "Failed to load documentation", "Field", "Type", "Required", "No fields to display", "Previous", "Next", "Found", "In this document", "Document not found"];

package/lib/ui-i18n/uiTranslationKeys.js

@@ -59,7 +59,21 @@ export const COMMON_UI_TRANSLATION_KEYS = [
     "Date",
     "Watch",
     "Current",
-    "There is no history"
+    "There is no history",
+    "Documentation",
+    "Page documentation",
+    "Knowledge base",
+    "Schema",
+    "Back to contents",
+    "Open in knowledge base",
+    "Send to assistant",
+    "Failed to load documentation",
+    "Loading...",
+    "Nothing found",
+    "Field",
+    "Type",
+    "Required",
+    "Language"
 ];
 export const FILTER_UI_TRANSLATION_KEYS = [
     "Filters",
@@ -267,3 +281,30 @@ export const USER_FILTERS_UI_TRANSLATION_KEYS = [
     "found",
     "User Filters"
 ];
+export const DOCS_UI_TRANSLATION_KEYS = [
+    "Documentation",
+    "Knowledge base",
+    "Contents",
+    "Search documentation",
+    "Search",
+    "Keywords",
+    "Clear",
+    "Nothing found",
+    "There is no documentation yet",
+    "Select a document to read",
+    "Loading...",
+    "Language",
+    "Send to assistant",
+    "Schema",
+    "Related models",
+    "Failed to load documentation",
+    "Field",
+    "Type",
+    "Required",
+    "No fields to display",
+    "Previous",
+    "Next",
+    "Found",
+    "In this document",
+    "Document not found"
+];

package/lib/widgets/widgetHandler.js

@@ -116,7 +116,11 @@ export class WidgetHandler {
         const filterService = new FilterService(this.adminizer);
         const result = [];
         for (const modelName of modelNames) {
-            if (!this.adminizer.accessRightsHelper.hasPermission(`read-${modelName}-model`, user)) {
+            const readToken = `read-${modelName}-model`;
+            if (!this.adminizer.accessRightsHelper.hasToken(readToken)) {
+                continue;
+            }
+            if (!await this.adminizer.accessRightsHelper.hasPermission(readToken, user)) {
                 continue;
             }
             let filters = [];
@@ -163,7 +167,7 @@ export class WidgetHandler {
             let id_key = 0;
             for (const widget of this.widgets) {
                 if (widget.widgetType === 'switcher') {
-                    if (this.adminizer.accessRightsHelper.hasPermission(this.resolveAccessRightsToken(widget), dashboardUser)) {
+                    if (await this.adminizer.accessRightsHelper.hasPermission(this.resolveAccessRightsToken(widget), dashboardUser)) {
                         widgets.push({
                             id: `${widget.id}__${id_key}`,
                             type: widget.widgetType,
@@ -178,7 +182,7 @@ export class WidgetHandler {
                     }
                 }
                 else if (widget.widgetType === 'info') {
-                    if (this.adminizer.accessRightsHelper.hasPermission(this.resolveAccessRightsToken(widget), dashboardUser)) {
+                    if (await this.adminizer.accessRightsHelper.hasPermission(this.resolveAccessRightsToken(widget), dashboardUser)) {
                         widgets.push({
                             id: `${widget.id}__${id_key}`,
                             type: widget.widgetType,
@@ -195,7 +199,7 @@ export class WidgetHandler {
                     }
                 }
                 else if (widget.widgetType === 'action') {
-                    if (this.adminizer.accessRightsHelper.hasPermission(this.resolveAccessRightsToken(widget), dashboardUser)) {
+                    if (await this.adminizer.accessRightsHelper.hasPermission(this.resolveAccessRightsToken(widget), dashboardUser)) {
                         widgets.push({
                             id: `${widget.id}__${id_key}`,
                             type: widget.widgetType,
@@ -210,7 +214,7 @@ export class WidgetHandler {
                     }
                 }
                 else if (widget.widgetType === 'link') {
-                    if (this.adminizer.accessRightsHelper.hasPermission(this.resolveAccessRightsToken(widget), dashboardUser)) {
+                    if (await this.adminizer.accessRightsHelper.hasPermission(this.resolveAccessRightsToken(widget), dashboardUser)) {
                         let links_id_key = 0;
                         for (const link of widget.links) {
                             widgets.push({
@@ -229,7 +233,7 @@ export class WidgetHandler {
                     }
                 }
                 else if (widget.widgetType === 'custom') {
-                    if (this.adminizer.accessRightsHelper.hasPermission(this.resolveAccessRightsToken(widget), dashboardUser)) {
+                    if (await this.adminizer.accessRightsHelper.hasPermission(this.resolveAccessRightsToken(widget), dashboardUser)) {
                         widgets.push({
                             id: `${widget.id}_${id_key}`,
                             type: widget.widgetType,

package/models/Group.d.ts

@@ -1,8 +1,9 @@
 import type { User } from "./User.js";
+import type { PermissionGrant } from "../interfaces/types.js";
 export interface Group {
     id?: number;
     name: string;
     description?: string;
-    tokens?: string[];
+    tokens?: PermissionGrant[];
     users?: User[];
 }

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "adminizer",
   "type": "module",
-  "version": "5.0.0-build.8",
+  "version": "5.1.0-build.24",
   "main": "index.js",
   "exports": {
     ".": "./index.js",
@@ -21,7 +21,7 @@
     "dev:typeorm:no-seed": "cross-env ADMINIZER_ENV=dev NO_SEED_DATA=true ORM=typeorm tsx watch --tsconfig ./fixture/tsconfig.json ./fixture/index.ts",
     "dev:no-seed-clean": "cross-env ADMINIZER_ENV=dev NO_SEED_DATA=true CLEAN_TMP=true ORM=sequelize tsx watch --tsconfig ./fixture/tsconfig.json ./fixture/index.ts",
     "dev:cors": "cross-env ADMINIZER_ENV=dev NO_SEED_DATA=true ORM=sequelize FRONTEND_URL=http://localhost:8080 tsx watch --tsconfig ./fixture/tsconfig.json ./fixture/index.ts",
-    "build:assets": "vite build && vite build --config vite.config.controls.ts && vite build --config fixture/widgets/vite.config.widget.ts",
+    "build:assets": "vite build && vite build --config vite.config.controls.ts && vite build --config vite.config.ai-assistant.ts && vite build --config fixture/widgets/vite.config.widget.ts",
     "build:controls": "vite build --config vite.config.controls.ts",
     "compile:backend": "tsc -p src/tsconfig.json && node ./scripts/appendJsExtension.js",
     "compile:ui": "tsc -p tsconfig.ui.json",
@@ -31,7 +31,10 @@
     "build": "npm run copy:backend && npm run compile:backend && npm run compile:ui && npm run build:assets",
     "build:catalog-modules": "cross-env CATALOG_COMPONENT=catalogAction vite build --config fixture/virtual-catalog/vite.config.module.ts && cross-env CATALOG_COMPONENT=Group vite build --config fixture/virtual-catalog/vite.config.module.ts",
     "start:typeorm:seed": "cross-env ORM=typeorm tsx --tsconfig ./fixture/tsconfig.json ./fixture/index.ts",
-    "build:apps": "vite build --config fixture/apps/notification-sender/vite.config.module.ts && vite build --config fixture/apps/module-manager/vite.config.module.ts && vite build --config fixture/apps/navigation/vite.config.module.ts && vite build --config fixture/apps/quill-editor/vite.config.module.ts && vite build --config fixture/apps/widgets/vite.config.module.ts && vite build --config fixture/apps/handsontable-test/vite.config.module.ts && npm run build:catalog-modules"
+    "build:apps": "vite build --config fixture/apps/notification-sender/vite.config.module.ts && vite build --config fixture/apps/module-manager/vite.config.module.ts && vite build --config fixture/apps/navigation/vite.config.module.ts && vite build --config fixture/apps/quill-editor/vite.config.module.ts && vite build --config fixture/apps/widgets/vite.config.module.ts && vite build --config fixture/apps/handsontable-test/vite.config.module.ts && vite build --config fixture/apps/record-scope-test/vite.config.module.ts && npm run build:catalog-modules",
+    "build:ai-assistant": "vite build --config vite.config.ai-assistant.ts",
+    "lint": "eslint src",
+    "lint:async": "eslint src -c eslint.config.async.mjs"
   },
   "keywords": [],
   "author": "Siziy Ivan <xziy88@gmail.com>",
@@ -59,41 +62,34 @@
     "jsonwebtoken": "^9.0.3",
     "multer": "^2.1.1",
     "password-hash": "^1.2.2",
+    "serve-static": "^2.2.1",
     "sharp": "^0.33.5",
     "sprintf-js": "^1.1.3",
+    "sqlite3": "^5.1.7",
+    "typeorm": "^0.3.20",
     "uuid": "^14.0.0",
     "winston": "^3.17.0",
     "xlsx": "^0.18.5",
-    "zod": "^4.1.11",
-    "sqlite3": "^5.1.7",
-    "typeorm": "^0.3.20"
+    "zod": "^4.1.11"
   },
   "devDependencies": {
-    "reflect-metadata": "^0.2.2",
-    "react-dnd": "^16.0.1",
-    "react-cropper": "^2.3.3",
-    "material-icons": "^1.13.14",
-    "next-themes": "^0.4.6",
-    "dotenv": "^17.4.2",
-    "date-fns": "^3.6.0",
-    "cmdk": "^1.1.1",
-    "@handsontable/react-wrapper": "^17.0.1",
-    "@minoru/react-dnd-treeview": "^3.5.2",
-    "@radix-ui/react-context-menu": "^2.2.15",
-    "@radix-ui/react-tabs": "^1.1.12",
-    "typescript": "^6.0.3",
+    "@assistant-ui/react": "^0.15.15",
+    "@assistant-ui/react-markdown": "^0.14.6",
     "@babel/plugin-proposal-decorators": "^7.27.1",
     "@ckeditor/ckeditor5-react": "^9.5.0",
     "@dnd-kit/core": "^6.3.1",
     "@dnd-kit/sortable": "^10.0.0",
     "@eslint/compat": "^1.2.9",
     "@faker-js/faker": "^9.7.0",
+    "@handsontable/react-wrapper": "^17.0.1",
     "@inertiajs/react": "^3.0.3",
+    "@minoru/react-dnd-treeview": "^3.5.2",
     "@monaco-editor/react": "^4.7.0",
     "@openai/agents": "^0.3.2",
     "@radix-ui/react-avatar": "^1.1.3",
     "@radix-ui/react-checkbox": "^1.1.4",
     "@radix-ui/react-collapsible": "^1.1.3",
+    "@radix-ui/react-context-menu": "^2.2.15",
     "@radix-ui/react-dialog": "^1.1.7",
     "@radix-ui/react-dropdown-menu": "^2.1.6",
     "@radix-ui/react-label": "^2.1.2",
@@ -105,6 +101,7 @@
     "@radix-ui/react-slider": "^1.2.3",
     "@radix-ui/react-slot": "^1.2.0",
     "@radix-ui/react-switch": "^1.2.4",
+    "@radix-ui/react-tabs": "^1.1.12",
     "@radix-ui/react-tooltip": "^1.1.8",
     "@tailwindcss/vite": "^4.0.15",
     "@tanstack/react-table": "^8.21.2",
@@ -127,12 +124,17 @@
     "@types/react-grid-layout": "^1.3.5",
     "@types/sprintf-js": "^1.1.4",
     "@types/uuid": "^10.0.0",
-    "@typescript-eslint/eslint-plugin": "^8.32.1",
+    "@typescript-eslint/eslint-plugin": "^8.67.0",
+    "@typescript-eslint/parser": "^8.67.0",
     "@vitejs/plugin-react": "^5.2.0",
+    "asmcrypto.js": "^0.22.0",
     "ckeditor5": "^45.0.0",
     "class-variance-authority": "^0.7.1",
     "clsx": "^2.1.1",
+    "cmdk": "^1.1.1",
     "cross-env": "^7.0.3",
+    "date-fns": "^3.6.0",
+    "dotenv": "^17.4.2",
     "eslint": "^9.26.0",
     "handsontable": "^17.0.1",
     "isomorphic-webcrypto": "^2.3.8",
@@ -141,14 +143,22 @@
     "leaflet-draw": "^1.0.4",
     "lodash-es": "^4.17.21",
     "lucide-react": "^0.485.0",
-    "react": "^19.0.0",
+    "material-icons": "^1.13.14",
+    "mermaid": "^11.17.0",
+    "next-themes": "^0.4.6",
+    "radix-ui": "^1.6.7",
+    "react": "19.2.8",
+    "react-cropper": "^2.3.3",
     "react-day-picker": "^8.10.1",
-    "react-dom": "^19.0.0",
+    "react-dnd": "^16.0.1",
+    "react-dom": "19.2.8",
     "react-grid-layout": "^1.5.1",
     "react-intersection-observer": "^9.16.0",
     "react-leaflet": "^5.0.0",
     "react-quill-new": "^3.4.6",
     "react-simple-wysiwyg": "^3.2.2",
+    "reflect-metadata": "^0.2.2",
+    "remark-gfm": "^4.0.1",
     "sequelize": "^6.37.7",
     "sequelize-typescript": "^2.1.6",
     "shelljs": "^0.9.2",
@@ -157,10 +167,12 @@
     "tailwindcss": "^4.0.15",
     "tsx": "^4.21.0",
     "tw-animate-css": "^1.2.5",
+    "typescript": "^6.0.3",
     "vanilla-jsoneditor": "^3.1.1",
     "vite": "^7.3.2",
     "vite-plugin-externals": "^0.6.2",
-    "vitest": "^3.0.7"
+    "vitest": "^3.0.7",
+    "zustand": "^5.0.14"
   },
   "overrides": {
     "@toast-ui/react-editor": {