librechat-data-provider 0.8.402 → 0.8.403

package/src/request.ts

@@ -1,171 +0,0 @@
-/* eslint-disable @typescript-eslint/no-explicit-any */
-import axios, { AxiosError, AxiosRequestConfig } from 'axios';
-import { setTokenHeader } from './headers-helpers';
-import * as endpoints from './api-endpoints';
-import type * as t from './types';
-
-async function _get<T>(url: string, options?: AxiosRequestConfig): Promise<T> {
-  const response = await axios.get(url, { ...options });
-  return response.data;
-}
-
-async function _getResponse<T>(url: string, options?: AxiosRequestConfig): Promise<T> {
-  return await axios.get(url, { ...options });
-}
-
-async function _post(url: string, data?: any) {
-  const response = await axios.post(url, JSON.stringify(data), {
-    headers: { 'Content-Type': 'application/json' },
-  });
-  return response.data;
-}
-
-async function _postMultiPart(url: string, formData: FormData, options?: AxiosRequestConfig) {
-  const response = await axios.post(url, formData, {
-    ...options,
-    headers: { 'Content-Type': 'multipart/form-data' },
-  });
-  return response.data;
-}
-
-async function _postTTS(url: string, formData: FormData, options?: AxiosRequestConfig) {
-  const response = await axios.post(url, formData, {
-    ...options,
-    headers: { 'Content-Type': 'multipart/form-data' },
-    responseType: 'arraybuffer',
-  });
-  return response.data;
-}
-
-async function _put(url: string, data?: any) {
-  const response = await axios.put(url, JSON.stringify(data), {
-    headers: { 'Content-Type': 'application/json' },
-  });
-  return response.data;
-}
-
-async function _delete<T>(url: string): Promise<T> {
-  const response = await axios.delete(url);
-  return response.data;
-}
-
-async function _deleteWithOptions<T>(url: string, options?: AxiosRequestConfig): Promise<T> {
-  const response = await axios.delete(url, { ...options });
-  return response.data;
-}
-
-async function _patch(url: string, data?: any) {
-  const response = await axios.patch(url, JSON.stringify(data), {
-    headers: { 'Content-Type': 'application/json' },
-  });
-  return response.data;
-}
-
-let isRefreshing = false;
-let failedQueue: { resolve: (value?: any) => void; reject: (reason?: any) => void }[] = [];
-
-const refreshToken = (retry?: boolean): Promise<t.TRefreshTokenResponse | undefined> =>
-  _post(endpoints.refreshToken(retry));
-
-const dispatchTokenUpdatedEvent = (token: string) => {
-  setTokenHeader(token);
-  window.dispatchEvent(new CustomEvent('tokenUpdated', { detail: token }));
-};
-
-const processQueue = (error: AxiosError | null, token: string | null = null) => {
-  failedQueue.forEach((prom) => {
-    if (error) {
-      prom.reject(error);
-    } else {
-      prom.resolve(token);
-    }
-  });
-  failedQueue = [];
-};
-
-if (typeof window !== 'undefined') {
-  axios.interceptors.response.use(
-    (response) => response,
-    async (error) => {
-      const originalRequest = error.config;
-      if (!error.response) {
-        return Promise.reject(error);
-      }
-
-      if (originalRequest.url?.includes('/api/auth/2fa') === true) {
-        return Promise.reject(error);
-      }
-      if (originalRequest.url?.includes('/api/auth/logout') === true) {
-        return Promise.reject(error);
-      }
-
-      /** Skip refresh when the Authorization header has been cleared (e.g. during logout),
-       *  but allow shared link requests to proceed so auth recovery/redirect can happen */
-      if (
-        !axios.defaults.headers.common['Authorization'] &&
-        !window.location.pathname.startsWith('/share/')
-      ) {
-        return Promise.reject(error);
-      }
-
-      if (error.response.status === 401 && !originalRequest._retry) {
-        console.warn('401 error, refreshing token');
-        originalRequest._retry = true;
-
-        if (isRefreshing) {
-          try {
-            const token = await new Promise((resolve, reject) => {
-              failedQueue.push({ resolve, reject });
-            });
-            originalRequest.headers['Authorization'] = 'Bearer ' + token;
-            return await axios(originalRequest);
-          } catch (err) {
-            return Promise.reject(err);
-          }
-        }
-
-        isRefreshing = true;
-
-        try {
-          const response = await refreshToken(
-            // Handle edge case where we get a blank screen if the initial 401 error is from a refresh token request
-            originalRequest.url?.includes('api/auth/refresh') === true ? true : false,
-          );
-
-          const token = response?.token ?? '';
-
-          if (token) {
-            originalRequest.headers['Authorization'] = 'Bearer ' + token;
-            dispatchTokenUpdatedEvent(token);
-            processQueue(null, token);
-            return await axios(originalRequest);
-          } else {
-            processQueue(error, null);
-            window.location.href = endpoints.apiBaseUrl() + endpoints.buildLoginRedirectUrl();
-          }
-        } catch (err) {
-          processQueue(err as AxiosError, null);
-          return Promise.reject(err);
-        } finally {
-          isRefreshing = false;
-        }
-      }
-
-      return Promise.reject(error);
-    },
-  );
-}
-
-export default {
-  get: _get,
-  getResponse: _getResponse,
-  post: _post,
-  postMultiPart: _postMultiPart,
-  postTTS: _postTTS,
-  put: _put,
-  delete: _delete,
-  deleteWithOptions: _deleteWithOptions,
-  patch: _patch,
-  refreshToken,
-  dispatchTokenUpdatedEvent,
-};

package/src/roles.spec.ts

@@ -1,132 +0,0 @@
-import { Permissions, PermissionTypes, permissionsSchema } from './permissions';
-import { SystemRoles, roleDefaults } from './roles';
-
-const RESOURCE_MANAGEMENT_FIELDS: Permissions[] = [
-  Permissions.CREATE,
-  Permissions.SHARE,
-  Permissions.SHARE_PUBLIC,
-];
-
-/**
- * Permission types where CREATE/SHARE/SHARE_PUBLIC must default to false for USER.
- * MEMORIES is excluded: its CREATE/READ/UPDATE apply to the user's own private data.
- * AGENTS/PROMPTS are excluded: CREATE=true is intentional (users own their agents/prompts).
- * Add new types here if they gate shared/multi-user resources.
- */
-const RESOURCE_PERMISSION_TYPES: PermissionTypes[] = [
-  PermissionTypes.MCP_SERVERS,
-  PermissionTypes.REMOTE_AGENTS,
-];
-
-describe('roleDefaults', () => {
-  describe('USER role', () => {
-    const userPerms = roleDefaults[SystemRoles.USER].permissions;
-
-    it('should have explicit values for every field in every multi-field permission type', () => {
-      const schemaShape = permissionsSchema.shape;
-
-      for (const [permType, subSchema] of Object.entries(schemaShape)) {
-        const fieldNames = Object.keys(subSchema.shape);
-        if (fieldNames.length <= 1) {
-          continue;
-        }
-
-        const userValues =
-          userPerms[permType as PermissionTypes] as Record<string, boolean>;
-
-        for (const field of fieldNames) {
-          expect({
-            permType,
-            field,
-            value: userValues[field],
-          }).toEqual(
-            expect.objectContaining({
-              permType,
-              field,
-              value: expect.any(Boolean),
-            }),
-          );
-        }
-      }
-    });
-
-    it('should never grant CREATE, SHARE, or SHARE_PUBLIC by default for resource-management types', () => {
-      for (const permType of RESOURCE_PERMISSION_TYPES) {
-        const permissions = userPerms[permType] as Record<string, boolean>;
-        for (const field of RESOURCE_MANAGEMENT_FIELDS) {
-          if (permissions[field] === undefined) {
-            continue;
-          }
-          expect({
-            permType,
-            field,
-            value: permissions[field],
-          }).toEqual(
-            expect.objectContaining({
-              permType,
-              field,
-              value: false,
-            }),
-          );
-        }
-      }
-    });
-
-    it('should cover every permission type that has CREATE, SHARE, or SHARE_PUBLIC fields', () => {
-      const schemaShape = permissionsSchema.shape;
-      const restrictedSet = new Set<string>(RESOURCE_PERMISSION_TYPES);
-
-      for (const [permType, subSchema] of Object.entries(schemaShape)) {
-        const fieldNames = Object.keys(subSchema.shape);
-        const hasResourceFields = fieldNames.some((f) => RESOURCE_MANAGEMENT_FIELDS.includes(f as Permissions));
-        if (!hasResourceFields) {
-          continue;
-        }
-
-        const isTracked =
-          restrictedSet.has(permType) ||
-          permType === PermissionTypes.MEMORIES ||
-          permType === PermissionTypes.PROMPTS ||
-          permType === PermissionTypes.AGENTS;
-
-        expect({
-          permType,
-          tracked: isTracked,
-        }).toEqual(
-          expect.objectContaining({
-            permType,
-            tracked: true,
-          }),
-        );
-      }
-    });
-  });
-
-  describe('ADMIN role', () => {
-    const adminPerms = roleDefaults[SystemRoles.ADMIN].permissions;
-
-    it('should have explicit values for every field in every permission type', () => {
-      const schemaShape = permissionsSchema.shape;
-
-      for (const [permType, subSchema] of Object.entries(schemaShape)) {
-        const fieldNames = Object.keys(subSchema.shape);
-        const adminValues =
-          adminPerms[permType as PermissionTypes] as Record<string, boolean>;
-
-        for (const field of fieldNames) {
-          expect({
-            permType,
-            field,
-            value: adminValues[field],
-          }).toEqual(
-            expect.objectContaining({
-              permType,
-              field,
-              value: expect.any(Boolean),
-            }),
-          );
-        }
-      }
-    });
-  });
-});

package/src/roles.ts

@@ -1,225 +0,0 @@
-import { z } from 'zod';
-import {
-  Permissions,
-  PermissionTypes,
-  permissionsSchema,
-  agentPermissionsSchema,
-  promptPermissionsSchema,
-  memoryPermissionsSchema,
-  runCodePermissionsSchema,
-  bookmarkPermissionsSchema,
-  webSearchPermissionsSchema,
-  fileSearchPermissionsSchema,
-  multiConvoPermissionsSchema,
-  mcpServersPermissionsSchema,
-  peoplePickerPermissionsSchema,
-  remoteAgentsPermissionsSchema,
-  temporaryChatPermissionsSchema,
-  fileCitationsPermissionsSchema,
-} from './permissions';
-
-/**
- * Enum for System Defined Roles
- */
-export enum SystemRoles {
-  /**
-   * The Admin role
-   */
-  ADMIN = 'ADMIN',
-  /**
-   * The default user role
-   */
-  USER = 'USER',
-}
-
-export const roleSchema = z.object({
-  name: z.string(),
-  permissions: permissionsSchema,
-});
-
-export type TRole = z.infer<typeof roleSchema>;
-
-const defaultRolesSchema = z.object({
-  [SystemRoles.ADMIN]: roleSchema.extend({
-    name: z.literal(SystemRoles.ADMIN),
-    permissions: permissionsSchema.extend({
-      [PermissionTypes.PROMPTS]: promptPermissionsSchema.extend({
-        [Permissions.USE]: z.boolean().default(true),
-        [Permissions.CREATE]: z.boolean().default(true),
-        [Permissions.SHARE]: z.boolean().default(true),
-        [Permissions.SHARE_PUBLIC]: z.boolean().default(true),
-      }),
-      [PermissionTypes.BOOKMARKS]: bookmarkPermissionsSchema.extend({
-        [Permissions.USE]: z.boolean().default(true),
-      }),
-      [PermissionTypes.MEMORIES]: memoryPermissionsSchema.extend({
-        [Permissions.USE]: z.boolean().default(true),
-        [Permissions.CREATE]: z.boolean().default(true),
-        [Permissions.UPDATE]: z.boolean().default(true),
-        [Permissions.READ]: z.boolean().default(true),
-        [Permissions.OPT_OUT]: z.boolean().default(true),
-      }),
-      [PermissionTypes.AGENTS]: agentPermissionsSchema.extend({
-        [Permissions.USE]: z.boolean().default(true),
-        [Permissions.CREATE]: z.boolean().default(true),
-        [Permissions.SHARE]: z.boolean().default(true),
-        [Permissions.SHARE_PUBLIC]: z.boolean().default(true),
-      }),
-      [PermissionTypes.MULTI_CONVO]: multiConvoPermissionsSchema.extend({
-        [Permissions.USE]: z.boolean().default(true),
-      }),
-      [PermissionTypes.TEMPORARY_CHAT]: temporaryChatPermissionsSchema.extend({
-        [Permissions.USE]: z.boolean().default(true),
-      }),
-      [PermissionTypes.RUN_CODE]: runCodePermissionsSchema.extend({
-        [Permissions.USE]: z.boolean().default(true),
-      }),
-      [PermissionTypes.WEB_SEARCH]: webSearchPermissionsSchema.extend({
-        [Permissions.USE]: z.boolean().default(true),
-      }),
-      [PermissionTypes.PEOPLE_PICKER]: peoplePickerPermissionsSchema.extend({
-        [Permissions.VIEW_USERS]: z.boolean().default(true),
-        [Permissions.VIEW_GROUPS]: z.boolean().default(true),
-        [Permissions.VIEW_ROLES]: z.boolean().default(true),
-      }),
-      [PermissionTypes.MARKETPLACE]: z.object({
-        [Permissions.USE]: z.boolean().default(false),
-      }),
-      [PermissionTypes.FILE_SEARCH]: fileSearchPermissionsSchema.extend({
-        [Permissions.USE]: z.boolean().default(true),
-      }),
-      [PermissionTypes.FILE_CITATIONS]: fileCitationsPermissionsSchema.extend({
-        [Permissions.USE]: z.boolean().default(true),
-      }),
-      [PermissionTypes.MCP_SERVERS]: mcpServersPermissionsSchema.extend({
-        [Permissions.USE]: z.boolean().default(true),
-        [Permissions.CREATE]: z.boolean().default(true),
-        [Permissions.SHARE]: z.boolean().default(true),
-        [Permissions.SHARE_PUBLIC]: z.boolean().default(true),
-      }),
-      [PermissionTypes.REMOTE_AGENTS]: remoteAgentsPermissionsSchema.extend({
-        [Permissions.USE]: z.boolean().default(true),
-        [Permissions.CREATE]: z.boolean().default(true),
-        [Permissions.SHARE]: z.boolean().default(true),
-        [Permissions.SHARE_PUBLIC]: z.boolean().default(true),
-      }),
-    }),
-  }),
-  [SystemRoles.USER]: roleSchema.extend({
-    name: z.literal(SystemRoles.USER),
-    permissions: permissionsSchema,
-  }),
-});
-
-export const roleDefaults = defaultRolesSchema.parse({
-  [SystemRoles.ADMIN]: {
-    name: SystemRoles.ADMIN,
-    permissions: {
-      [PermissionTypes.PROMPTS]: {
-        [Permissions.USE]: true,
-        [Permissions.CREATE]: true,
-        [Permissions.SHARE]: true,
-        [Permissions.SHARE_PUBLIC]: true,
-      },
-      [PermissionTypes.BOOKMARKS]: {
-        [Permissions.USE]: true,
-      },
-      [PermissionTypes.MEMORIES]: {
-        [Permissions.USE]: true,
-        [Permissions.CREATE]: true,
-        [Permissions.UPDATE]: true,
-        [Permissions.READ]: true,
-        [Permissions.OPT_OUT]: true,
-      },
-      [PermissionTypes.AGENTS]: {
-        [Permissions.USE]: true,
-        [Permissions.CREATE]: true,
-        [Permissions.SHARE]: true,
-        [Permissions.SHARE_PUBLIC]: true,
-      },
-      [PermissionTypes.MULTI_CONVO]: {
-        [Permissions.USE]: true,
-      },
-      [PermissionTypes.TEMPORARY_CHAT]: {
-        [Permissions.USE]: true,
-      },
-      [PermissionTypes.RUN_CODE]: {
-        [Permissions.USE]: true,
-      },
-      [PermissionTypes.WEB_SEARCH]: {
-        [Permissions.USE]: true,
-      },
-      [PermissionTypes.PEOPLE_PICKER]: {
-        [Permissions.VIEW_USERS]: true,
-        [Permissions.VIEW_GROUPS]: true,
-        [Permissions.VIEW_ROLES]: true,
-      },
-      [PermissionTypes.MARKETPLACE]: {
-        [Permissions.USE]: true,
-      },
-      [PermissionTypes.FILE_SEARCH]: {
-        [Permissions.USE]: true,
-      },
-      [PermissionTypes.FILE_CITATIONS]: {
-        [Permissions.USE]: true,
-      },
-      [PermissionTypes.MCP_SERVERS]: {
-        [Permissions.USE]: true,
-        [Permissions.CREATE]: true,
-        [Permissions.SHARE]: true,
-        [Permissions.SHARE_PUBLIC]: true,
-      },
-      [PermissionTypes.REMOTE_AGENTS]: {
-        [Permissions.USE]: true,
-        [Permissions.CREATE]: true,
-        [Permissions.SHARE]: true,
-        [Permissions.SHARE_PUBLIC]: true,
-      },
-    },
-  },
-  [SystemRoles.USER]: {
-    name: SystemRoles.USER,
-    permissions: {
-      [PermissionTypes.PROMPTS]: {
-        [Permissions.USE]: true,
-        [Permissions.CREATE]: true,
-        [Permissions.SHARE]: false,
-        [Permissions.SHARE_PUBLIC]: false,
-      },
-      [PermissionTypes.BOOKMARKS]: {},
-      [PermissionTypes.MEMORIES]: {},
-      [PermissionTypes.AGENTS]: {
-        [Permissions.USE]: true,
-        [Permissions.CREATE]: true,
-        [Permissions.SHARE]: false,
-        [Permissions.SHARE_PUBLIC]: false,
-      },
-      [PermissionTypes.MULTI_CONVO]: {},
-      [PermissionTypes.TEMPORARY_CHAT]: {},
-      [PermissionTypes.RUN_CODE]: {},
-      [PermissionTypes.WEB_SEARCH]: {},
-      [PermissionTypes.PEOPLE_PICKER]: {
-        [Permissions.VIEW_USERS]: false,
-        [Permissions.VIEW_GROUPS]: false,
-        [Permissions.VIEW_ROLES]: false,
-      },
-      [PermissionTypes.MARKETPLACE]: {
-        [Permissions.USE]: false,
-      },
-      [PermissionTypes.FILE_SEARCH]: {},
-      [PermissionTypes.FILE_CITATIONS]: {},
-      [PermissionTypes.MCP_SERVERS]: {
-        [Permissions.USE]: true,
-        [Permissions.CREATE]: false,
-        [Permissions.SHARE]: false,
-        [Permissions.SHARE_PUBLIC]: false,
-      },
-      [PermissionTypes.REMOTE_AGENTS]: {
-        [Permissions.USE]: false,
-        [Permissions.CREATE]: false,
-        [Permissions.SHARE]: false,
-        [Permissions.SHARE_PUBLIC]: false,
-      },
-    },
-  },
-});