plugin-ai-api 1.0.21 → 1.0.24

package/src/server/utils/direct-llm-context.ts

@@ -0,0 +1,216 @@
+import type { Context } from '@nocobase/actions';
+
+export type ContextOverflowBehavior = 'reject' | 'truncate';
+
+export interface OpenAIMessage {
+  role: string;
+  content?: unknown;
+  tool_calls?: unknown;
+  tool_call_id?: string;
+  [key: string]: unknown;
+}
+
+interface ModelMetadata {
+  contextWindow: number;
+  maxCompletionTokens: number;
+}
+
+interface ContextPreparationOptions {
+  serviceName: string;
+  modelId: string;
+  messages: OpenAIMessage[];
+  tools?: unknown;
+  maxCompletionTokens?: unknown;
+  maxTokens?: unknown;
+}
+
+export interface PreparedDirectLlmContext {
+  messages: OpenAIMessage[];
+  estimatedInputTokens: number;
+  inputTokenBudget: number;
+  reservedOutputTokens: number;
+  truncated: boolean;
+}
+
+export class DirectLlmContextError extends Error {
+  constructor(
+    readonly code:
+      | 'context_length_exceeded'
+      | 'context_estimation_unsupported'
+      | 'max_completion_tokens_exceeds_model_limit'
+      | 'model_context_metadata_not_configured',
+    message: string,
+  ) {
+    super(message);
+    this.name = 'DirectLlmContextError';
+  }
+}
+
+function getValue<T>(
+  record: { get?: (key: string) => unknown; [key: string]: unknown } | null,
+  key: string,
+): T | undefined {
+  return (record?.get?.(key) as T | undefined) ?? (record?.[key] as T | undefined);
+}
+
+function positiveInteger(value: unknown): number | undefined {
+  const parsed = Number(value);
+  return Number.isSafeInteger(parsed) && parsed > 0 ? parsed : undefined;
+}
+
+function hasImageContent(value: unknown): boolean {
+  return (
+    Array.isArray(value) &&
+    value.some(
+      (block) => typeof block === 'object' && block !== null && (block as { type?: unknown }).type === 'image_url',
+    )
+  );
+}
+
+function estimateValueTokens(value: unknown): number {
+  if (value === undefined) return 0;
+  return Math.ceil(Buffer.byteLength(JSON.stringify(value), 'utf8') / 3);
+}
+
+function estimateMessagesTokens(messages: OpenAIMessage[]): number {
+  return messages.reduce((total, message) => total + estimateValueTokens(message) + 4, 0);
+}
+
+function containsUnsupportedContent(messages: OpenAIMessage[]): boolean {
+  return messages.some((message) => hasImageContent(message.content));
+}
+
+function isInstruction(message: OpenAIMessage): boolean {
+  return message.role === 'system' || message.role === 'developer';
+}
+
+function splitTurns(messages: OpenAIMessage[]): { fixed: OpenAIMessage[]; turns: OpenAIMessage[][] } {
+  const fixed: OpenAIMessage[] = [];
+  const turns: OpenAIMessage[][] = [];
+  let currentTurn: OpenAIMessage[] | undefined;
+
+  for (const message of messages) {
+    if (isInstruction(message)) {
+      fixed.push(message);
+      continue;
+    }
+    if (message.role === 'user' || !currentTurn) {
+      currentTurn = [message];
+      turns.push(currentTurn);
+      continue;
+    }
+    currentTurn.push(message);
+  }
+
+  return { fixed, turns };
+}
+
+function messagesWithTurns(messages: OpenAIMessage[], turns: OpenAIMessage[][]): OpenAIMessage[] {
+  const retainedMessages = new Set(turns.flat());
+  return messages.filter((message) => isInstruction(message) || retainedMessages.has(message));
+}
+
+async function loadModelMetadata(ctx: Context, serviceName: string, modelId: string): Promise<ModelMetadata> {
+  const row = await ctx.db.getRepository('aiApiModelMetadata').findOne({
+    filter: { llmService: serviceName, model: modelId, enabled: true },
+  });
+  const contextWindow = positiveInteger(getValue<unknown>(row, 'contextWindow'));
+  const maxCompletionTokens = positiveInteger(getValue<unknown>(row, 'maxCompletionTokens'));
+  if (!contextWindow || !maxCompletionTokens) {
+    throw new DirectLlmContextError(
+      'model_context_metadata_not_configured',
+      `Context metadata is not configured for '${serviceName}/${modelId}'. Configure context window and max completion tokens.`,
+    );
+  }
+  return { contextWindow, maxCompletionTokens };
+}
+
+async function resolveOverflowBehavior(ctx: Context): Promise<ContextOverflowBehavior> {
+  const userId = ctx.state.currentUser?.id;
+  if (userId === null || userId === undefined) return 'reject';
+  const policy = await ctx.db.getRepository('aiApiUserQuotaPolicies').findOne({
+    filter: { userId, enabled: true },
+  });
+  return getValue<unknown>(policy, 'contextOverflowBehavior') === 'truncate' ? 'truncate' : 'reject';
+}
+
+function resolveReservedOutputTokens(options: ContextPreparationOptions, metadata: ModelMetadata): number {
+  const requested = positiveInteger(options.maxCompletionTokens ?? options.maxTokens);
+  if (requested && requested > metadata.maxCompletionTokens) {
+    throw new DirectLlmContextError(
+      'max_completion_tokens_exceeds_model_limit',
+      `Requested max completion tokens (${requested}) exceeds the model limit (${metadata.maxCompletionTokens}).`,
+    );
+  }
+  return requested ?? metadata.maxCompletionTokens;
+}
+
+export async function prepareDirectLlmContext(
+  ctx: Context,
+  options: ContextPreparationOptions,
+): Promise<PreparedDirectLlmContext> {
+  if (containsUnsupportedContent(options.messages)) {
+    throw new DirectLlmContextError(
+      'context_estimation_unsupported',
+      'Context enforcement does not support image_url content without a model-specific vision token estimator.',
+    );
+  }
+
+  const [metadata, behavior] = await Promise.all([
+    loadModelMetadata(ctx, options.serviceName, options.modelId),
+    resolveOverflowBehavior(ctx),
+  ]);
+  const reservedOutputTokens = resolveReservedOutputTokens(options, metadata);
+  const inputTokenBudget = metadata.contextWindow - reservedOutputTokens;
+  if (inputTokenBudget <= 0) {
+    throw new DirectLlmContextError(
+      'context_length_exceeded',
+      `The model context window (${metadata.contextWindow}) leaves no input capacity after reserving ${reservedOutputTokens} output tokens.`,
+    );
+  }
+
+  const fixedOverheadTokens = estimateValueTokens(options.tools) + (options.tools === undefined ? 0 : 4);
+  const originalEstimate = estimateMessagesTokens(options.messages) + fixedOverheadTokens;
+  if (originalEstimate <= inputTokenBudget) {
+    return {
+      messages: options.messages,
+      estimatedInputTokens: originalEstimate,
+      inputTokenBudget,
+      reservedOutputTokens,
+      truncated: false,
+    };
+  }
+
+  if (behavior === 'reject') {
+    throw new DirectLlmContextError(
+      'context_length_exceeded',
+      `Estimated input tokens (${originalEstimate}) exceed the allowed input budget (${inputTokenBudget}).`,
+    );
+  }
+
+  const { turns } = splitTurns(options.messages);
+  let remainingTurns = turns;
+  let messages = messagesWithTurns(options.messages, remainingTurns);
+  let estimatedInputTokens = estimateMessagesTokens(messages) + fixedOverheadTokens;
+
+  while (remainingTurns.length > 1 && estimatedInputTokens > inputTokenBudget) {
+    remainingTurns = remainingTurns.slice(1);
+    messages = messagesWithTurns(options.messages, remainingTurns);
+    estimatedInputTokens = estimateMessagesTokens(messages) + fixedOverheadTokens;
+  }
+
+  if (estimatedInputTokens > inputTokenBudget) {
+    throw new DirectLlmContextError(
+      'context_length_exceeded',
+      `The fixed instructions, tools, and newest conversation turn require ${estimatedInputTokens} input tokens, exceeding the allowed budget (${inputTokenBudget}).`,
+    );
+  }
+
+  return {
+    messages,
+    estimatedInputTokens,
+    inputTokenBudget,
+    reservedOutputTokens,
+    truncated: messages.length !== options.messages.length,
+  };
+}

package/src/server/utils/openai-format.ts

@@ -97,6 +97,14 @@ export function toOpenAIResponse(options: {
 
 // ─── OpenAI Streaming chunk format ───
 
+export type OpenAIUsage = {
+  prompt_tokens: number | null;
+  completion_tokens: number | null;
+  total_tokens: number | null;
+};
+
+export type OpenAIStreamObject = 'chat.completion.chunk' | 'text_completion';
+
 export function toOpenAIStreamChunk(options: {
   id: string;
   model: string;
@@ -118,6 +126,24 @@ export function toOpenAIStreamChunk(options: {
         finish_reason: finishReason,
       },
     ],
+    usage: null,
+  };
+}
+
+export function toOpenAIUsageChunk(options: {
+  id: string;
+  model: string;
+  usage: OpenAIUsage;
+  object?: OpenAIStreamObject;
+}) {
+  const { id, model, usage, object = 'chat.completion.chunk' } = options;
+  return {
+    id,
+    object,
+    created: Math.floor(Date.now() / 1000),
+    model,
+    choices: [],
+    usage,
   };
 }
 

package/src/server/utils/user-permissions.ts

@@ -0,0 +1,218 @@
+/**
+ * This file is part of the NocoBase (R) project.
+ * Copyright (c) 2020-2024 NocoBase Co., Ltd.
+ * Authors: NocoBase Team.
+ *
+ * This project is dual-licensed under AGPL-3.0 and NocoBase Commercial License.
+ * For more information, please refer to: https://www.nocobase.com/agreement.
+ */
+
+import { Context } from '@nocobase/actions';
+import { toOpenAIError } from './openai-format';
+
+const SCOPE_TTL_MS = 15_000;
+
+interface CachedScope {
+  scope: AiApiAccessScope;
+  expiresAt: number;
+}
+
+const scopeCache = new Map<string, CachedScope>();
+
+/**
+ * Resolved per-user LLM access, layered *under* the global `aiApiConfig.enabledLlmServices`
+ * whitelist. A user grant can only ever narrow global access, never widen it.
+ */
+export interface AiApiAccessScope {
+  /** False when the user has no aiApiUserPermissions row — global config alone decides. */
+  hasUserRecord: boolean;
+  /** True when a row exists but is switched off, denying every service. */
+  denyAll: boolean;
+  /** null means "no user-level narrowing"; an empty array denies every service. */
+  allowedServices: string[] | null;
+  allowAllModels: boolean;
+  allowedModels: Set<string>;
+  /**
+   * True when the lookup itself failed. Distinct from hasUserRecord:false — "this user has no
+   * restrictions" and "we cannot tell whether this user has restrictions" must not be conflated,
+   * or a mid-rolling-upgrade missing table silently lifts every user's restrictions.
+   */
+  lookupFailed: boolean;
+}
+
+const NO_RECORD_SCOPE: AiApiAccessScope = {
+  hasUserRecord: false,
+  denyAll: false,
+  allowedServices: null,
+  allowAllModels: true,
+  allowedModels: new Set(),
+  lookupFailed: false,
+};
+
+const LOOKUP_FAILED_SCOPE: AiApiAccessScope = { ...NO_RECORD_SCOPE, denyAll: true, lookupFailed: true };
+
+/**
+ * Invalidate cached scopes for one user across every app in this process, or all users when
+ * called with no argument. Keys are `${appName}:${userId}`, and the afterSave hook only knows
+ * the user id, so the match is on the suffix.
+ *
+ * This is per-process only: in a multi-node deployment other nodes keep serving their cached
+ * scope until the 15s TTL expires.
+ */
+export function invalidateUserPermissionCache(userId?: string | number | bigint): void {
+  if (userId === undefined || userId === null) {
+    scopeCache.clear();
+    return;
+  }
+  const suffix = `:${userId}`;
+  for (const key of scopeCache.keys()) {
+    if (key.endsWith(suffix)) scopeCache.delete(key);
+  }
+}
+
+/**
+ * Sequelize instances expose columns through .get() only — a plain property read returns
+ * undefined for most fields. Mirrors valueOf() in billing.ts so plain-object test fixtures
+ * work too.
+ */
+function valueOf<T>(row: unknown, name: string): T {
+  if (!row) return undefined as T;
+  const candidate = row as { get?: (key: string) => unknown };
+  if (typeof candidate.get === 'function') return candidate.get(name) as T;
+  return (row as Record<string, unknown>)[name] as T;
+}
+
+function toStringArray(value: unknown): string[] {
+  if (!Array.isArray(value)) return [];
+  return value.filter((item): item is string => typeof item === 'string' && item.length > 0);
+}
+
+/** Build a scope from an aiApiUserPermissions row (or absence of one). */
+export function buildAccessScope(row: unknown): AiApiAccessScope {
+  if (!row) return NO_RECORD_SCOPE;
+  if (valueOf<boolean>(row, 'enabled') === false) {
+    return { ...NO_RECORD_SCOPE, hasUserRecord: true, denyAll: true, allowedServices: [] };
+  }
+  return {
+    hasUserRecord: true,
+    denyAll: false,
+    allowedServices: toStringArray(valueOf(row, 'allowedLlmServices')),
+    allowAllModels: valueOf<boolean>(row, 'allowAllModels') !== false,
+    allowedModels: new Set(toStringArray(valueOf(row, 'allowedModels'))),
+    lookupFailed: false,
+  };
+}
+
+/**
+ * Load the current user's access scope, cached for 15s per user id — the same TTL the role
+ * permission cache uses. Invalidated by afterSave/afterDestroy hooks in plugin.ts.
+ */
+export async function resolveUserAccessScope(ctx: Context): Promise<AiApiAccessScope> {
+  const userId = ctx.state.currentUser?.id;
+  if (userId === undefined || userId === null) return NO_RECORD_SCOPE;
+
+  // Sub-apps share this process but have separate databases, so user id 1 in one app is a
+  // different person than user id 1 in another. Without the app prefix they collide here.
+  const key = `${ctx.app?.name ?? 'main'}:${userId}`;
+  const cached = scopeCache.get(key);
+  if (cached && cached.expiresAt > Date.now()) return cached.scope;
+
+  let scope: AiApiAccessScope;
+  try {
+    const row = await ctx.db.getRepository('aiApiUserPermissions').findOne({ filter: { userId } });
+    scope = buildAccessScope(row);
+  } catch (err) {
+    // Fail closed. A failed lookup cannot be treated as "no restrictions": during a rolling
+    // upgrade the table may not exist yet, and that must not lift every user's restrictions.
+    ctx.log?.error?.('AI API user permissions lookup failed, denying access:', err);
+    return LOOKUP_FAILED_SCOPE;
+  }
+
+  scopeCache.set(key, { scope, expiresAt: Date.now() + SCOPE_TTL_MS });
+  return scope;
+}
+
+function matchesService(list: string[], serviceName?: string, serviceTitle?: string): boolean {
+  return list.some((entry) => entry === serviceName || entry === serviceTitle);
+}
+
+/**
+ * Effective service check: the global whitelist AND the user grant must both allow it.
+ *
+ * An empty global whitelist means "expose all services", preserving existing behaviour.
+ * An empty user grant means "deny everything" — the record itself is the opt-in.
+ */
+export function isServiceAllowed(
+  scope: AiApiAccessScope,
+  globalEnabledServices: unknown,
+  service: { name?: string; title?: string },
+): boolean {
+  // denyAll is checked before hasUserRecord: a failed lookup denies without having a record.
+  if (scope.denyAll) return false;
+  const globalList = toStringArray(globalEnabledServices);
+  if (globalList.length && !matchesService(globalList, service.name, service.title)) return false;
+  if (!scope.hasUserRecord) return true;
+  return matchesService(scope.allowedServices ?? [], service.name, service.title);
+}
+
+/** Model-level narrowing on top of isServiceAllowed, keyed by "serviceName/modelId". */
+export function isModelAllowed(scope: AiApiAccessScope, fullModelId: string): boolean {
+  if (scope.denyAll) return false;
+  if (!scope.hasUserRecord) return true;
+  if (scope.allowAllModels) return true;
+  return scope.allowedModels.has(fullModelId);
+}
+
+/**
+ * Gate a completion/embedding request on the caller's effective service+model access.
+ *
+ * Writes a 403 in OpenAI error shape and returns false when access is denied, so callers
+ * can `if (!(await enforceModelAccess(...))) return;`.
+ */
+export async function enforceModelAccess(
+  ctx: Context,
+  globalEnabledServices: unknown,
+  service: { name?: string; title?: string },
+  modelId: string,
+): Promise<boolean> {
+  const scope = await resolveUserAccessScope(ctx);
+  const serviceLabel = service.title || service.name;
+
+  // The denial is ours, not the caller's — report it as retryable rather than as a permission
+  // decision, so clients back off instead of treating the grant as permanently revoked.
+  if (scope.lookupFailed) {
+    ctx.status = 503;
+    ctx.body = toOpenAIError(
+      503,
+      'Unable to verify LLM permissions for this user. Please retry shortly.',
+      'service_unavailable',
+      'permission_check_failed',
+    );
+    return false;
+  }
+
+  if (!isServiceAllowed(scope, globalEnabledServices, service)) {
+    ctx.status = 403;
+    ctx.body = toOpenAIError(
+      403,
+      `LLM service '${serviceLabel}' is not enabled for API access`,
+      'permission_denied',
+      'model_not_available',
+    );
+    return false;
+  }
+
+  if (!isModelAllowed(scope, `${service.name}/${modelId}`)) {
+    ctx.status = 403;
+    ctx.body = toOpenAIError(
+      403,
+      `Model '${service.name}/${modelId}' is not permitted for this user. ` +
+        `Use GET /v1/models to see available models.`,
+      'permission_denied',
+      'model_not_available',
+    );
+    return false;
+  }
+
+  return true;
+}

package/src/server/validation.ts

@@ -76,6 +76,9 @@ export function validateQuotaPolicy(model: Model): void {
   if (!['allow', 'use_reserved'].includes(String(model.get('missingUsageBehavior')))) {
     throw new Error('missingUsageBehavior must be allow or use_reserved.');
   }
+  if (!['reject', 'truncate'].includes(String(model.get('contextOverflowBehavior') ?? 'reject'))) {
+    throw new Error('contextOverflowBehavior must be reject or truncate.');
+  }
   try {
     dayjs().tz(String(model.get('timezone') || 'UTC'));
   } catch {

package/src/swagger.ts

@@ -57,7 +57,10 @@ export default {
         tags: ['ai-llm'],
         summary: 'List available models',
         description:
-          'Returns all LLM models available across registered services. Model IDs are formatted as `serviceName/modelId`.',
+          'Returns the LLM models available to the authenticated caller across registered services. Model IDs are formatted as `serviceName/modelId`.\n\n' +
+          "The catalog is user-scoped: it starts from `enabledLlmServices` in the AI API configuration, then narrows to the caller's " +
+          '`aiApiUserPermissions` record when one exists. A user grant can only narrow the global whitelist, never widen it, so two ' +
+          'users may receive different lists from the same request.',
         security: [{ BearerAuth: [] }],
         responses: {
           200: {
@@ -84,6 +87,8 @@ export default {
       get: {
         tags: ['ai-llm'],
         summary: 'Get model details',
+        description:
+          'User-scoped in the same way as `GET /v1/models`: a model the caller is not granted is reported as not found rather than disclosed.',
         security: [{ BearerAuth: [] }],
         parameters: [
           {
@@ -103,7 +108,7 @@ export default {
               },
             },
           },
-          404: { description: 'Model not found' },
+          404: { description: 'Model not found, or not available to this user' },
         },
       },
     },
@@ -252,7 +257,8 @@ export default {
           enabledLlmServices: {
             type: 'array',
             items: { type: 'string' },
-            description: 'List of enabled LLM service names',
+            description:
+              'List of enabled LLM service names. This is the outer bound for every caller; per-user `aiApiUserPermissions` records can only narrow it further.',
           },
           rateLimitPerMinute: {
             type: 'integer',

package/dist/client/902.92e1daaf1ab16ebf.js

@@ -1,10 +0,0 @@
-/**
- * This file is part of the NocoBase (R) project.
- * Copyright (c) 2020-2024 NocoBase Co., Ltd.
- * Authors: NocoBase Team.
- *
- * This project is dual-licensed under AGPL-3.0 and NocoBase Commercial License.
- * For more information, please refer to: https://www.nocobase.com/agreement.
- */
-
-"use strict";(self.webpackChunkplugin_ai_api=self.webpackChunkplugin_ai_api||[]).push([["902"],{77:function(e,t,r){r.r(t),r.d(t,{default:function(){return f}});var n=r(155),a=r.n(n),l=r(59),i=r(694),o=r(650),u=r(630);function c(e,t){(null==t||t>e.length)&&(t=e.length);for(var r=0,n=Array(t);r<t;r++)n[r]=e[r];return n}function s(e,t,r,n,a,l,i){try{var o=e[l](i),u=o.value}catch(e){r(e);return}o.done?t(u):Promise.resolve(u).then(n,a)}function m(e){return function(){var t=this,r=arguments;return new Promise(function(n,a){var l=e.apply(t,r);function i(e){s(l,n,a,i,o,"next",e)}function o(e){s(l,n,a,i,o,"throw",e)}i(void 0)})}}function d(e,t){return function(e){if(Array.isArray(e))return e}(e)||function(e,t){var r,n,a=null==e?null:"u">typeof Symbol&&e[Symbol.iterator]||e["@@iterator"];if(null!=a){var l=[],i=!0,o=!1;try{for(a=a.call(e);!(i=(r=a.next()).done)&&(l.push(r.value),!t||l.length!==t);i=!0);}catch(e){o=!0,n=e}finally{try{i||null==a.return||a.return()}finally{if(o)throw n}}return l}}(e,t)||function(e,t){if(e){if("string"==typeof e)return c(e,t);var r=Object.prototype.toString.call(e).slice(8,-1);if("Object"===r&&e.constructor&&(r=e.constructor.name),"Map"===r||"Set"===r)return Array.from(r);if("Arguments"===r||/^(?:Ui|I)nt(?:8|16|32)(?:Clamped)?Array$/.test(r))return c(e,t)}}(e,t)||function(){throw TypeError("Invalid attempt to destructure non-iterable instance.\\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method.")}()}function p(e,t){var r,n,a,l={label:0,sent:function(){if(1&a[0])throw a[1];return a[1]},trys:[],ops:[]},i=Object.create(("function"==typeof Iterator?Iterator:Object).prototype),o=Object.defineProperty;return o(i,"next",{value:u(0)}),o(i,"throw",{value:u(1)}),o(i,"return",{value:u(2)}),"function"==typeof Symbol&&o(i,Symbol.iterator,{value:function(){return this}}),i;function u(o){return function(u){var c=[o,u];if(r)throw TypeError("Generator is already executing.");for(;i&&(i=0,c[0]&&(l=0)),l;)try{if(r=1,n&&(a=2&c[0]?n.return:c[0]?n.throw||((a=n.return)&&a.call(n),0):n.next)&&!(a=a.call(n,c[1])).done)return a;switch(n=0,a&&(c=[2&c[0],a.value]),c[0]){case 0:case 1:a=c;break;case 4:return l.label++,{value:c[1],done:!1};case 5:l.label++,n=c[1],c=[0];continue;case 7:c=l.ops.pop(),l.trys.pop();continue;default:if(!(a=(a=l.trys).length>0&&a[a.length-1])&&(6===c[0]||2===c[0])){l=0;continue}if(3===c[0]&&(!a||c[1]>a[0]&&c[1]<a[3])){l.label=c[1];break}if(6===c[0]&&l.label<a[1]){l.label=a[1],a=c;break}if(a&&l.label<a[2]){l.label=a[2],l.ops.push(c);break}a[2]&&l.ops.pop(),l.trys.pop();continue}c=t.call(e,l)}catch(e){c=[6,e],n=0}finally{r=a=0}if(5&c[0])throw c[1];return{value:c[0]?c[1]:void 0,done:!0}}}}function f(){var e=(0,i.useFlowContext)(),t=(0,o.k)(),r=d(l.Form.useForm(),1)[0],c=d((0,n.useState)([]),2),s=c[0],f=c[1],y=d((0,n.useState)([]),2),b=y[0],h=y[1],v=d((0,n.useState)(!1),2),g=v[0],E=v[1],w=d((0,n.useState)(!1),2),S=w[0],k=w[1],I=d((0,n.useState)(),2),U=I[0],q=I[1],F=d((0,n.useState)(!1),2),T=F[0],x=F[1],C=(0,n.useCallback)(function(){return m(function(){var t,r,n,a;return p(this,function(i){switch(i.label){case 0:E(!0),i.label=1;case 1:return i.trys.push([1,3,4,5]),[4,Promise.all([e.api.request({url:"aiApiUserQuotaPolicies:list",method:"get",params:{pageSize:200,appends:["user"],sort:"-updatedAt"}}),e.api.request({url:"users:list",method:"get",params:{pageSize:200}})])];case 2:return r=(t=d.apply(void 0,[i.sent(),2]))[0],n=t[1],f((0,u.m)(r,[])),h((0,u.m)(n,[])),[3,5];case 3:return a=i.sent(),l.message.error((0,u.g)(a)),[3,5];case 4:return E(!1),[7];case 5:return[2]}})})()},[e.api]);(0,n.useEffect)(function(){C()},[C]);var A=function(e){q(e),r.setFieldsValue(e),x(!0)},P=function(e){var t;return(null==e?void 0:e.nickname)||(null==e?void 0:e.username)||(null==e?void 0:e.email)||String(null!=(t=null==e?void 0:e.id)?t:"")},j=[{title:t("User"),key:"user",width:180,render:function(e,t){return P(t.user)||String(t.userId)}},{title:t("Period"),dataIndex:"periodType",key:"periodType",width:100},{title:t("Request limit"),dataIndex:"requestLimit",key:"requestLimit",width:130,render:function(e){return null!=e?e:t("Unlimited")}},{title:t("Token limit"),dataIndex:"totalTokenLimit",key:"totalTokenLimit",width:130,render:function(e){return null!=e?e:t("Unlimited")}},{title:t("Cost limit"),dataIndex:"costLimit",key:"costLimit",width:120,render:function(e,r){return null==e?t("Unlimited"):"".concat(e," ").concat(r.currency)}},{title:t("Timezone"),dataIndex:"timezone",key:"timezone",width:140},{title:t("Status"),dataIndex:"enabled",key:"enabled",width:100,render:function(e){return a().createElement(l.Tag,{color:e?"green":"default"},e?t("Enabled"):t("Disabled"))}},{title:t("Actions"),key:"actions",width:150,fixed:"right",render:function(r,n){return a().createElement(l.Space,{size:0},a().createElement(l.Button,{type:"link",onClick:function(){return A(n)}},t("Edit")),a().createElement(l.Popconfirm,{title:t("Delete this quota?"),onConfirm:function(){return m(function(){var r;return p(this,function(a){switch(a.label){case 0:return a.trys.push([0,3,,4]),[4,e.api.request({url:"aiApiUserQuotaPolicies:destroy/".concat(n.id),method:"post"})];case 1:return a.sent(),l.message.success(t("Deleted successfully")),[4,C()];case 2:return a.sent(),[3,4];case 3:return r=a.sent(),l.message.error((0,u.g)(r)),[3,4];case 4:return[2]}})})()}},a().createElement(l.Button,{type:"link",danger:!0},t("Delete"))))}}];return a().createElement(l.Card,{title:t("User quotas"),extra:a().createElement(l.Button,{type:"primary",onClick:function(){q(void 0),r.setFieldsValue({enabled:!0,periodType:"monthly",timezone:"UTC",currency:"USD",rejectUnpricedModel:!0,missingUsageBehavior:"use_reserved"}),x(!0)}},t("Add quota"))},a().createElement(l.Table,{rowKey:"id",columns:j,dataSource:s,loading:g,scroll:{x:1100}}),a().createElement(l.Modal,{title:U?t("Edit quota"):t("Add quota"),open:T,onCancel:function(){return x(!1)},onOk:function(){return m(function(){var n,a;return p(this,function(i){switch(i.label){case 0:return[4,r.validateFields()];case 1:n=i.sent(),k(!0),i.label=2;case 2:return i.trys.push([2,5,6,7]),[4,e.api.request({url:U?"aiApiUserQuotaPolicies:update/".concat(U.id):"aiApiUserQuotaPolicies:create",method:"post",data:n})];case 3:return i.sent(),l.message.success(t("Saved successfully")),x(!1),[4,C()];case 4:return i.sent(),[3,7];case 5:return a=i.sent(),l.message.error((0,u.g)(a)),[3,7];case 6:return k(!1),[7];case 7:return[2]}})})()},confirmLoading:S,destroyOnClose:!0},a().createElement(l.Form,{form:r,layout:"vertical",preserve:!1},a().createElement(l.Form.Item,{name:"userId",label:t("User"),rules:[{required:!0}]},a().createElement(l.Select,{disabled:!!U,showSearch:!0,optionFilterProp:"label",options:b.map(function(e){return{label:P(e),value:e.id}})})),a().createElement(l.Form.Item,{name:"periodType",label:t("Period"),rules:[{required:!0}]},a().createElement(l.Select,{options:[{label:t("Daily"),value:"daily"},{label:t("Monthly"),value:"monthly"}]})),a().createElement(l.Form.Item,{name:"timezone",label:t("Timezone"),rules:[{required:!0}]},a().createElement(l.Input,{placeholder:"UTC"})),a().createElement(l.Form.Item,{name:"requestLimit",label:t("Request limit")},a().createElement(l.InputNumber,{min:0,stringMode:!0,style:{width:"100%"}})),a().createElement(l.Form.Item,{name:"totalTokenLimit",label:t("Token limit")},a().createElement(l.InputNumber,{min:0,stringMode:!0,style:{width:"100%"}})),a().createElement(l.Form.Item,{name:"costLimit",label:t("Cost limit")},a().createElement(l.InputNumber,{min:0,stringMode:!0,style:{width:"100%"}})),a().createElement(l.Form.Item,{name:"currency",label:t("Currency"),rules:[{required:!0}]},a().createElement(l.Input,null)),a().createElement(l.Form.Item,{name:"rejectUnpricedModel",label:t("Reject unpriced models"),valuePropName:"checked"},a().createElement(l.Switch,null)),a().createElement(l.Form.Item,{name:"missingUsageBehavior",label:t("Missing usage behavior"),rules:[{required:!0}]},a().createElement(l.Select,{options:[{label:t("Use reserved estimate"),value:"use_reserved"},{label:t("Allow without token charge"),value:"allow"}]})),a().createElement(l.Form.Item,{name:"enabled",label:t("Enabled"),valuePropName:"checked"},a().createElement(l.Switch,null)))))}},650:function(e,t,r){r.d(t,{k:function(){return l}});var n=r(694),a=JSON.parse('{"UU":"plugin-ai-api"}');function l(){var e=(0,n.useFlowEngine)();return function(t){return e.context.t(t,{ns:[a.UU,"client"]})}}},630:function(e,t,r){function n(e,t){var r,n;return e&&(void 0===e?"undefined":e&&"u">typeof Symbol&&e.constructor===Symbol?"symbol":typeof e)=="object"?null!=(r=null==(n=e.data)?void 0:n.data)?r:t:t}function a(e){var t;return(null!=(t=Error)&&"u">typeof Symbol&&t[Symbol.hasInstance]?!!t[Symbol.hasInstance](e):e instanceof t)?e.message:String(e)}r.d(t,{g:function(){return a},m:function(){return n}})}}]);

package/dist/client-v2/902.9054d990ddc223ac.js

@@ -1,10 +0,0 @@
-/**
- * This file is part of the NocoBase (R) project.
- * Copyright (c) 2020-2024 NocoBase Co., Ltd.
- * Authors: NocoBase Team.
- *
- * This project is dual-licensed under AGPL-3.0 and NocoBase Commercial License.
- * For more information, please refer to: https://www.nocobase.com/agreement.
- */
-
-"use strict";(self.webpackChunkplugin_ai_api_client_v2=self.webpackChunkplugin_ai_api_client_v2||[]).push([["902"],{77:function(e,t,r){r.r(t),r.d(t,{default:function(){return f}});var n=r(155),a=r.n(n),l=r(59),i=r(694),o=r(650),u=r(630);function c(e,t){(null==t||t>e.length)&&(t=e.length);for(var r=0,n=Array(t);r<t;r++)n[r]=e[r];return n}function s(e,t,r,n,a,l,i){try{var o=e[l](i),u=o.value}catch(e){r(e);return}o.done?t(u):Promise.resolve(u).then(n,a)}function m(e){return function(){var t=this,r=arguments;return new Promise(function(n,a){var l=e.apply(t,r);function i(e){s(l,n,a,i,o,"next",e)}function o(e){s(l,n,a,i,o,"throw",e)}i(void 0)})}}function d(e,t){return function(e){if(Array.isArray(e))return e}(e)||function(e,t){var r,n,a=null==e?null:"u">typeof Symbol&&e[Symbol.iterator]||e["@@iterator"];if(null!=a){var l=[],i=!0,o=!1;try{for(a=a.call(e);!(i=(r=a.next()).done)&&(l.push(r.value),!t||l.length!==t);i=!0);}catch(e){o=!0,n=e}finally{try{i||null==a.return||a.return()}finally{if(o)throw n}}return l}}(e,t)||function(e,t){if(e){if("string"==typeof e)return c(e,t);var r=Object.prototype.toString.call(e).slice(8,-1);if("Object"===r&&e.constructor&&(r=e.constructor.name),"Map"===r||"Set"===r)return Array.from(r);if("Arguments"===r||/^(?:Ui|I)nt(?:8|16|32)(?:Clamped)?Array$/.test(r))return c(e,t)}}(e,t)||function(){throw TypeError("Invalid attempt to destructure non-iterable instance.\\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method.")}()}function p(e,t){var r,n,a,l={label:0,sent:function(){if(1&a[0])throw a[1];return a[1]},trys:[],ops:[]},i=Object.create(("function"==typeof Iterator?Iterator:Object).prototype),o=Object.defineProperty;return o(i,"next",{value:u(0)}),o(i,"throw",{value:u(1)}),o(i,"return",{value:u(2)}),"function"==typeof Symbol&&o(i,Symbol.iterator,{value:function(){return this}}),i;function u(o){return function(u){var c=[o,u];if(r)throw TypeError("Generator is already executing.");for(;i&&(i=0,c[0]&&(l=0)),l;)try{if(r=1,n&&(a=2&c[0]?n.return:c[0]?n.throw||((a=n.return)&&a.call(n),0):n.next)&&!(a=a.call(n,c[1])).done)return a;switch(n=0,a&&(c=[2&c[0],a.value]),c[0]){case 0:case 1:a=c;break;case 4:return l.label++,{value:c[1],done:!1};case 5:l.label++,n=c[1],c=[0];continue;case 7:c=l.ops.pop(),l.trys.pop();continue;default:if(!(a=(a=l.trys).length>0&&a[a.length-1])&&(6===c[0]||2===c[0])){l=0;continue}if(3===c[0]&&(!a||c[1]>a[0]&&c[1]<a[3])){l.label=c[1];break}if(6===c[0]&&l.label<a[1]){l.label=a[1],a=c;break}if(a&&l.label<a[2]){l.label=a[2],l.ops.push(c);break}a[2]&&l.ops.pop(),l.trys.pop();continue}c=t.call(e,l)}catch(e){c=[6,e],n=0}finally{r=a=0}if(5&c[0])throw c[1];return{value:c[0]?c[1]:void 0,done:!0}}}}function f(){var e=(0,i.useFlowContext)(),t=(0,o.k)(),r=d(l.Form.useForm(),1)[0],c=d((0,n.useState)([]),2),s=c[0],f=c[1],y=d((0,n.useState)([]),2),b=y[0],h=y[1],v=d((0,n.useState)(!1),2),g=v[0],E=v[1],w=d((0,n.useState)(!1),2),S=w[0],k=w[1],I=d((0,n.useState)(),2),U=I[0],q=I[1],F=d((0,n.useState)(!1),2),T=F[0],x=F[1],C=(0,n.useCallback)(function(){return m(function(){var t,r,n,a;return p(this,function(i){switch(i.label){case 0:E(!0),i.label=1;case 1:return i.trys.push([1,3,4,5]),[4,Promise.all([e.api.request({url:"aiApiUserQuotaPolicies:list",method:"get",params:{pageSize:200,appends:["user"],sort:"-updatedAt"}}),e.api.request({url:"users:list",method:"get",params:{pageSize:200}})])];case 2:return r=(t=d.apply(void 0,[i.sent(),2]))[0],n=t[1],f((0,u.m)(r,[])),h((0,u.m)(n,[])),[3,5];case 3:return a=i.sent(),l.message.error((0,u.g)(a)),[3,5];case 4:return E(!1),[7];case 5:return[2]}})})()},[e.api]);(0,n.useEffect)(function(){C()},[C]);var A=function(e){q(e),r.setFieldsValue(e),x(!0)},P=function(e){var t;return(null==e?void 0:e.nickname)||(null==e?void 0:e.username)||(null==e?void 0:e.email)||String(null!=(t=null==e?void 0:e.id)?t:"")},j=[{title:t("User"),key:"user",width:180,render:function(e,t){return P(t.user)||String(t.userId)}},{title:t("Period"),dataIndex:"periodType",key:"periodType",width:100},{title:t("Request limit"),dataIndex:"requestLimit",key:"requestLimit",width:130,render:function(e){return null!=e?e:t("Unlimited")}},{title:t("Token limit"),dataIndex:"totalTokenLimit",key:"totalTokenLimit",width:130,render:function(e){return null!=e?e:t("Unlimited")}},{title:t("Cost limit"),dataIndex:"costLimit",key:"costLimit",width:120,render:function(e,r){return null==e?t("Unlimited"):"".concat(e," ").concat(r.currency)}},{title:t("Timezone"),dataIndex:"timezone",key:"timezone",width:140},{title:t("Status"),dataIndex:"enabled",key:"enabled",width:100,render:function(e){return a().createElement(l.Tag,{color:e?"green":"default"},e?t("Enabled"):t("Disabled"))}},{title:t("Actions"),key:"actions",width:150,fixed:"right",render:function(r,n){return a().createElement(l.Space,{size:0},a().createElement(l.Button,{type:"link",onClick:function(){return A(n)}},t("Edit")),a().createElement(l.Popconfirm,{title:t("Delete this quota?"),onConfirm:function(){return m(function(){var r;return p(this,function(a){switch(a.label){case 0:return a.trys.push([0,3,,4]),[4,e.api.request({url:"aiApiUserQuotaPolicies:destroy/".concat(n.id),method:"post"})];case 1:return a.sent(),l.message.success(t("Deleted successfully")),[4,C()];case 2:return a.sent(),[3,4];case 3:return r=a.sent(),l.message.error((0,u.g)(r)),[3,4];case 4:return[2]}})})()}},a().createElement(l.Button,{type:"link",danger:!0},t("Delete"))))}}];return a().createElement(l.Card,{title:t("User quotas"),extra:a().createElement(l.Button,{type:"primary",onClick:function(){q(void 0),r.setFieldsValue({enabled:!0,periodType:"monthly",timezone:"UTC",currency:"USD",rejectUnpricedModel:!0,missingUsageBehavior:"use_reserved"}),x(!0)}},t("Add quota"))},a().createElement(l.Table,{rowKey:"id",columns:j,dataSource:s,loading:g,scroll:{x:1100}}),a().createElement(l.Modal,{title:U?t("Edit quota"):t("Add quota"),open:T,onCancel:function(){return x(!1)},onOk:function(){return m(function(){var n,a;return p(this,function(i){switch(i.label){case 0:return[4,r.validateFields()];case 1:n=i.sent(),k(!0),i.label=2;case 2:return i.trys.push([2,5,6,7]),[4,e.api.request({url:U?"aiApiUserQuotaPolicies:update/".concat(U.id):"aiApiUserQuotaPolicies:create",method:"post",data:n})];case 3:return i.sent(),l.message.success(t("Saved successfully")),x(!1),[4,C()];case 4:return i.sent(),[3,7];case 5:return a=i.sent(),l.message.error((0,u.g)(a)),[3,7];case 6:return k(!1),[7];case 7:return[2]}})})()},confirmLoading:S,destroyOnClose:!0},a().createElement(l.Form,{form:r,layout:"vertical",preserve:!1},a().createElement(l.Form.Item,{name:"userId",label:t("User"),rules:[{required:!0}]},a().createElement(l.Select,{disabled:!!U,showSearch:!0,optionFilterProp:"label",options:b.map(function(e){return{label:P(e),value:e.id}})})),a().createElement(l.Form.Item,{name:"periodType",label:t("Period"),rules:[{required:!0}]},a().createElement(l.Select,{options:[{label:t("Daily"),value:"daily"},{label:t("Monthly"),value:"monthly"}]})),a().createElement(l.Form.Item,{name:"timezone",label:t("Timezone"),rules:[{required:!0}]},a().createElement(l.Input,{placeholder:"UTC"})),a().createElement(l.Form.Item,{name:"requestLimit",label:t("Request limit")},a().createElement(l.InputNumber,{min:0,stringMode:!0,style:{width:"100%"}})),a().createElement(l.Form.Item,{name:"totalTokenLimit",label:t("Token limit")},a().createElement(l.InputNumber,{min:0,stringMode:!0,style:{width:"100%"}})),a().createElement(l.Form.Item,{name:"costLimit",label:t("Cost limit")},a().createElement(l.InputNumber,{min:0,stringMode:!0,style:{width:"100%"}})),a().createElement(l.Form.Item,{name:"currency",label:t("Currency"),rules:[{required:!0}]},a().createElement(l.Input,null)),a().createElement(l.Form.Item,{name:"rejectUnpricedModel",label:t("Reject unpriced models"),valuePropName:"checked"},a().createElement(l.Switch,null)),a().createElement(l.Form.Item,{name:"missingUsageBehavior",label:t("Missing usage behavior"),rules:[{required:!0}]},a().createElement(l.Select,{options:[{label:t("Use reserved estimate"),value:"use_reserved"},{label:t("Allow without token charge"),value:"allow"}]})),a().createElement(l.Form.Item,{name:"enabled",label:t("Enabled"),valuePropName:"checked"},a().createElement(l.Switch,null)))))}},650:function(e,t,r){r.d(t,{k:function(){return l}});var n=r(694),a=JSON.parse('{"UU":"plugin-ai-api"}');function l(){var e=(0,n.useFlowEngine)();return function(t){return e.context.t(t,{ns:[a.UU,"client"]})}}},630:function(e,t,r){function n(e,t){var r,n;return e&&(void 0===e?"undefined":e&&"u">typeof Symbol&&e.constructor===Symbol?"symbol":typeof e)=="object"?null!=(r=null==(n=e.data)?void 0:n.data)?r:t:t}function a(e){var t;return(null!=(t=Error)&&"u">typeof Symbol&&t[Symbol.hasInstance]?!!t[Symbol.hasInstance](e):e instanceof t)?e.message:String(e)}r.d(t,{g:function(){return a},m:function(){return n}})}}]);