agentlang 0.6.2 → 0.6.4

package/src/runtime/resolvers/sqldb/database.ts

@@ -414,15 +414,27 @@ export async function vectorStoreSearch(
     return [];
   }
   try {
+    let hasGlobalPerms = ctx.isPermitted();
+    if (!hasGlobalPerms) {
+      const userId = ctx.getUserId();
+      const fqName = ctx.resourceFqName;
+      const env: Environment = ctx.activeEnv;
+      hasGlobalPerms = await canUserRead(userId, fqName, env);
+    }
     const vecTableName = tableName + VectorSuffix;
     const qb = getDatasourceForTransaction(ctx.txnId).getRepository(tableName).manager;
     const { default: pgvector } = await import('pgvector');
-    return await qb.query(
-      `select id from ${vecTableName} order by embedding <-> $1 LIMIT ${limit}`,
-      [pgvector.toSql(searchVec)]
-    );
+    let ownersJoinCond: string = '';
+    if (!hasGlobalPerms) {
+      const ot = ownersTable(tableName);
+      ownersJoinCond = `inner join ${ot} on
+${ot}.path = ${vecTableName}.id and ${ot}.user_id = '${ctx.authInfo.userId}' and ${ot}.r = true`;
+    }
+    const sql = `select ${vecTableName}.id from ${vecTableName} ${ownersJoinCond} order by embedding <-> $1 LIMIT ${limit}`;
+    return await qb.query(sql, [pgvector.toSql(searchVec)]);
   } catch (err: any) {
     logger.error(`Vector store search failed - ${err}`);
+    return [];
   }
 }
 

package/src/runtime/util.ts

@@ -585,3 +585,55 @@ export function validateIdFormat(idAttrName: string, idAttrValue: any) {
 export function nameContainsSepEscape(n: string): boolean {
   return n.indexOf(IdSepEscape) >= 0;
 }
+
+export function generateUrlSafePassword(length: number = 8): string {
+  const upper = 'ABCDEFGHIJKLMNOPQRSTUVWXYZ';
+  const lower = 'abcdefghijklmnopqrstuvwxyz';
+  const digits = '0123456789';
+  const special = '-_.~';
+
+  const chars = [
+    upper[Math.floor(Math.random() * upper.length)],
+    lower[Math.floor(Math.random() * lower.length)],
+    digits[Math.floor(Math.random() * digits.length)],
+    special[Math.floor(Math.random() * special.length)],
+  ];
+
+  const all = upper + lower + digits + special;
+  for (let i = chars.length; i < length; ++i) {
+    chars.push(all[Math.floor(Math.random() * all.length)]);
+  }
+
+  for (let i = chars.length - 1; i > 0; i--) {
+    const j = Math.floor(Math.random() * (i + 1));
+    [chars[i], chars[j]] = [chars[j], chars[i]];
+  }
+
+  return chars.join('');
+}
+
+const JS_PREFIX = '#js';
+
+export function preprocessRawConfig(rawConfig: any): any {
+  const keys = Object.keys(rawConfig);
+  keys.forEach((k: any) => {
+    const v = rawConfig[k];
+    if (isString(v) && v.startsWith(JS_PREFIX)) {
+      const s = v.substring(3).trim();
+      rawConfig[k] = eval(s);
+    } else if (typeof v == 'object') {
+      preprocessRawConfig(v);
+    }
+  });
+  return rawConfig;
+}
+
+// interface for reading secrets from a secret-store
+type ReadSecret = (k: string, configuration?: any) => any;
+declare global {
+  function readSecret(k: string, configuration?: any): any;
+}
+
+export function setScecretReader(f: ReadSecret) {
+  globalThis.readSecret = f;
+}