plugin-ai-api 1.0.24 → 1.0.28

package/src/server/utils/request-cache.ts

@@ -0,0 +1,59 @@
+/**
+ * This file is part of the NocoBase (R) project.
+ * Copyright (c) 2020-2024 NocoBase Co., Ltd.
+ * Authors: NocoBase Team.
+ *
+ * This project is dual-licensed under AGPL-3.0 and NocoBase Commercial License.
+ * For more information, please refer to: https://www.nocobase.com/agreement.
+ */
+
+import type { Context } from '@nocobase/actions';
+import type { Model } from '@nocobase/database';
+import { resolveUserGroup, type AiApiUsageGroup } from '../quota-groups';
+
+interface AiApiRequestCache {
+  configLoaded: boolean;
+  config: Model | null;
+  groupKey?: string;
+  group?: AiApiUsageGroup;
+}
+
+function getCache(ctx: Context): AiApiRequestCache {
+  if (!ctx.state.aiApiRequestCache) {
+    ctx.state.aiApiRequestCache = { configLoaded: false, config: null };
+  }
+  return ctx.state.aiApiRequestCache;
+}
+
+/**
+ * Returns the aiApiConfig row, reading it at most once per request. The same row
+ * is consulted by the body limit, mode resolution, model whitelist, quota and
+ * billing steps of a single gateway request, so caching it on ctx.state removes
+ * several duplicate queries per request.
+ */
+export async function getAiApiConfig(ctx: Context): Promise<Model | null> {
+  const cache = getCache(ctx);
+  if (!cache.configLoaded) {
+    cache.config = (await ctx.db.getRepository('aiApiConfig').findOne()) ?? null;
+    cache.configLoaded = true;
+  }
+  return cache.config;
+}
+
+/**
+ * Returns the caller's usage group, resolving it at most once per request per
+ * user id. Wraps resolveUserGroup, which otherwise runs membership queries on
+ * every call site (rate limiting, permissions, billing, context overflow).
+ */
+export async function resolveRequestUserGroup(
+  ctx: Context,
+  userId: string | number | bigint | undefined | null,
+): Promise<AiApiUsageGroup> {
+  const cache = getCache(ctx);
+  const groupKey = userId === undefined || userId === null ? '' : String(userId);
+  if (!cache.group || cache.groupKey !== groupKey) {
+    cache.group = await resolveUserGroup(ctx, userId);
+    cache.groupKey = groupKey;
+  }
+  return cache.group;
+}

package/src/server/utils/resolve-service.ts

@@ -1,82 +1,83 @@
-/**
- * This file is part of the NocoBase (R) project.
- * Copyright (c) 2020-2024 NocoBase Co., Ltd.
- * Authors: NocoBase Team.
- *
- * This project is dual-licensed under AGPL-3.0 and NocoBase Commercial License.
- * For more information, please refer to: https://www.nocobase.com/agreement.
- */
-
-import { Context } from '@nocobase/actions';
-
-/**
- * Resolve an LLM service by name or title.
- */
-export async function resolveLlmService(ctx: Context, serviceKey: string) {
-  const repo = ctx.db.getRepository('llmServices');
-
-  let service = await repo.findOne({ filter: { name: serviceKey } });
-  if (!service) {
-    service = await repo.findOne({ filter: { title: serviceKey } });
-  }
-  return service;
-}
-
-/**
- * Resolve a model string to a service + modelId.
- *
- * Strategy (priority order):
- * 1. Try splitting at each "/" position and match the left part against DB (name or title).
- *    This handles cases like "Custom LLM (OpenAI Compatible)/qwen/qwen3.6-plus-preview:free"
- * 2. If no service match, use the defaultLlmService from config and treat the ENTIRE
- *    model string as the modelId. This allows clients to send just "qwen/qwen3.6-plus-preview:free"
- *    or "gpt-4o" without knowing the service name.
- */
-export async function resolveModelString(
-  ctx: Context,
-  modelString: string,
-): Promise<{ service: any; modelId: string } | null> {
-  const repo = ctx.db.getRepository('llmServices');
-
-  // ─── Strategy 1: Try splitting at "/" positions ───
-  const slashPositions: number[] = [];
-  for (let i = 0; i < modelString.length; i++) {
-    if (modelString[i] === '/') {
-      slashPositions.push(i);
-    }
-  }
-
-  if (slashPositions.length > 0) {
-    for (const pos of slashPositions) {
-      const serviceKey = modelString.substring(0, pos);
-      const modelId = modelString.substring(pos + 1);
-      if (!serviceKey || !modelId) continue;
-
-      let service = await repo.findOne({ filter: { name: serviceKey } });
-      if (!service) {
-        service = await repo.findOne({ filter: { title: serviceKey } });
-      }
-
-      if (service) {
-        return { service, modelId };
-      }
-    }
-  }
-
-  // ─── Strategy 2: Use default LLM service from config ───
-  const config = await ctx.db.getRepository('aiApiConfig').findOne();
-  if (config?.defaultLlmService) {
-    const service = await repo.findOne({ filter: { name: config.defaultLlmService } });
-    if (service) {
-      return { service, modelId: modelString };
-    }
-  }
-
-  // ─── Strategy 3: If only one service enabled, use it ───
-  const enabledServices = await repo.find({ filter: { enabled: true } });
-  if (enabledServices.length === 1) {
-    return { service: enabledServices[0], modelId: modelString };
-  }
-
-  return null;
-}
+/**
+ * This file is part of the NocoBase (R) project.
+ * Copyright (c) 2020-2024 NocoBase Co., Ltd.
+ * Authors: NocoBase Team.
+ *
+ * This project is dual-licensed under AGPL-3.0 and NocoBase Commercial License.
+ * For more information, please refer to: https://www.nocobase.com/agreement.
+ */
+
+import { Context } from '@nocobase/actions';
+import { getAiApiConfig } from './request-cache';
+
+/**
+ * Resolve an LLM service by name or title.
+ */
+export async function resolveLlmService(ctx: Context, serviceKey: string) {
+  const repo = ctx.db.getRepository('llmServices');
+
+  let service = await repo.findOne({ filter: { name: serviceKey } });
+  if (!service) {
+    service = await repo.findOne({ filter: { title: serviceKey } });
+  }
+  return service;
+}
+
+/**
+ * Resolve a model string to a service + modelId.
+ *
+ * Strategy (priority order):
+ * 1. Try splitting at each "/" position and match the left part against DB (name or title).
+ *    This handles cases like "Custom LLM (OpenAI Compatible)/qwen/qwen3.6-plus-preview:free"
+ * 2. If no service match, use the defaultLlmService from config and treat the ENTIRE
+ *    model string as the modelId. This allows clients to send just "qwen/qwen3.6-plus-preview:free"
+ *    or "gpt-4o" without knowing the service name.
+ */
+export async function resolveModelString(
+  ctx: Context,
+  modelString: string,
+): Promise<{ service: any; modelId: string } | null> {
+  const repo = ctx.db.getRepository('llmServices');
+
+  // ─── Strategy 1: Try splitting at "/" positions ───
+  const slashPositions: number[] = [];
+  for (let i = 0; i < modelString.length; i++) {
+    if (modelString[i] === '/') {
+      slashPositions.push(i);
+    }
+  }
+
+  if (slashPositions.length > 0) {
+    for (const pos of slashPositions) {
+      const serviceKey = modelString.substring(0, pos);
+      const modelId = modelString.substring(pos + 1);
+      if (!serviceKey || !modelId) continue;
+
+      let service = await repo.findOne({ filter: { name: serviceKey } });
+      if (!service) {
+        service = await repo.findOne({ filter: { title: serviceKey } });
+      }
+
+      if (service) {
+        return { service, modelId };
+      }
+    }
+  }
+
+  // ─── Strategy 2: Use default LLM service from config ───
+  const config = await getAiApiConfig(ctx);
+  if (config?.defaultLlmService) {
+    const service = await repo.findOne({ filter: { name: config.defaultLlmService } });
+    if (service) {
+      return { service, modelId: modelString };
+    }
+  }
+
+  // ─── Strategy 3: If only one service enabled, use it ───
+  const enabledServices = await repo.find({ filter: { enabled: true } });
+  if (enabledServices.length === 1) {
+    return { service: enabledServices[0], modelId: modelString };
+  }
+
+  return null;
+}

package/src/server/utils/user-permissions.ts

@@ -9,6 +9,8 @@
 
 import { Context } from '@nocobase/actions';
 import { toOpenAIError } from './openai-format';
+import { resolveRequestUserGroup } from './request-cache';
+import type { AiApiUsageGroup } from '../quota-groups';
 
 const SCOPE_TTL_MS = 15_000;
 
@@ -20,114 +22,94 @@ interface CachedScope {
 const scopeCache = new Map<string, CachedScope>();
 
 /**
- * Resolved per-user LLM access, layered *under* the global `aiApiConfig.enabledLlmServices`
- * whitelist. A user grant can only ever narrow global access, never widen it.
+ * Resolved LLM access of a user's usage group, layered *under* the global
+ * `aiApiConfig.enabledLlmServices` whitelist. Group settings can only ever narrow global
+ * access, never widen it. Empty lists on the group mean "no narrowing" — the group inherits
+ * the full global configuration, so the default group never locks everyone out.
  */
 export interface AiApiAccessScope {
-  /** False when the user has no aiApiUserPermissions row — global config alone decides. */
-  hasUserRecord: boolean;
-  /** True when a row exists but is switched off, denying every service. */
-  denyAll: boolean;
-  /** null means "no user-level narrowing"; an empty array denies every service. */
-  allowedServices: string[] | null;
+  /** The group whose settings produced this scope. */
+  groupId?: string | number | bigint;
+  /** Empty means no narrowing; non-empty restricts to these services. */
+  allowedServices: string[];
   allowAllModels: boolean;
   allowedModels: Set<string>;
   /**
-   * True when the lookup itself failed. Distinct from hasUserRecord:false — "this user has no
-   * restrictions" and "we cannot tell whether this user has restrictions" must not be conflated,
-   * or a mid-rolling-upgrade missing table silently lifts every user's restrictions.
+   * True when the lookup itself failed. Distinct from an open scope — "this user has no
+   * restrictions" and "we cannot tell whether this user has restrictions" must not be
+   * conflated, or a mid-rolling-upgrade missing table silently lifts every user's restrictions.
    */
   lookupFailed: boolean;
 }
 
-const NO_RECORD_SCOPE: AiApiAccessScope = {
-  hasUserRecord: false,
-  denyAll: false,
-  allowedServices: null,
+const OPEN_SCOPE: AiApiAccessScope = {
+  allowedServices: [],
   allowAllModels: true,
   allowedModels: new Set(),
   lookupFailed: false,
 };
 
-const LOOKUP_FAILED_SCOPE: AiApiAccessScope = { ...NO_RECORD_SCOPE, denyAll: true, lookupFailed: true };
+const LOOKUP_FAILED_SCOPE: AiApiAccessScope = { ...OPEN_SCOPE, lookupFailed: true };
 
 /**
- * Invalidate cached scopes for one user across every app in this process, or all users when
- * called with no argument. Keys are `${appName}:${userId}`, and the afterSave hook only knows
- * the user id, so the match is on the suffix.
+ * Invalidate cached scopes for one group across every app in this process, or all groups
+ * when called with no argument. Keys are `${appName}:group:${groupId}`.
  *
- * This is per-process only: in a multi-node deployment other nodes keep serving their cached
- * scope until the 15s TTL expires.
+ * Per-process only: in a multi-node deployment other nodes keep serving their cached scope
+ * until the 15s TTL expires or the sync message arrives.
  */
-export function invalidateUserPermissionCache(userId?: string | number | bigint): void {
-  if (userId === undefined || userId === null) {
+export function invalidateGroupAccessCache(groupId?: string | number | bigint): void {
+  if (groupId === undefined || groupId === null) {
     scopeCache.clear();
     return;
   }
-  const suffix = `:${userId}`;
+  const suffix = `:group:${groupId}`;
   for (const key of scopeCache.keys()) {
     if (key.endsWith(suffix)) scopeCache.delete(key);
   }
 }
 
-/**
- * Sequelize instances expose columns through .get() only — a plain property read returns
- * undefined for most fields. Mirrors valueOf() in billing.ts so plain-object test fixtures
- * work too.
- */
-function valueOf<T>(row: unknown, name: string): T {
-  if (!row) return undefined as T;
-  const candidate = row as { get?: (key: string) => unknown };
-  if (typeof candidate.get === 'function') return candidate.get(name) as T;
-  return (row as Record<string, unknown>)[name] as T;
-}
-
 function toStringArray(value: unknown): string[] {
   if (!Array.isArray(value)) return [];
   return value.filter((item): item is string => typeof item === 'string' && item.length > 0);
 }
 
-/** Build a scope from an aiApiUserPermissions row (or absence of one). */
-export function buildAccessScope(row: unknown): AiApiAccessScope {
-  if (!row) return NO_RECORD_SCOPE;
-  if (valueOf<boolean>(row, 'enabled') === false) {
-    return { ...NO_RECORD_SCOPE, hasUserRecord: true, denyAll: true, allowedServices: [] };
-  }
+/** Build a scope from a usage group. Empty lists mean no narrowing. */
+export function buildAccessScope(group: AiApiUsageGroup): AiApiAccessScope {
   return {
-    hasUserRecord: true,
-    denyAll: false,
-    allowedServices: toStringArray(valueOf(row, 'allowedLlmServices')),
-    allowAllModels: valueOf<boolean>(row, 'allowAllModels') !== false,
-    allowedModels: new Set(toStringArray(valueOf(row, 'allowedModels'))),
+    groupId: group.id,
+    allowedServices: toStringArray(group.allowedLlmServices),
+    allowAllModels: group.allowAllModels !== false,
+    allowedModels: new Set(toStringArray(group.allowedModels)),
     lookupFailed: false,
   };
 }
 
 /**
- * Load the current user's access scope, cached for 15s per user id — the same TTL the role
- * permission cache uses. Invalidated by afterSave/afterDestroy hooks in plugin.ts.
+ * Load the access scope of the current user's usage group, cached for 15s per group id —
+ * the same TTL the role permission cache uses. Membership is resolved live on every request
+ * and memoized for its duration (one indexed query even though several call sites ask), so
+ * moving a user between groups needs no invalidation; group edits are invalidated by the
+ * afterSave/afterDestroy hooks in plugin.ts.
  */
 export async function resolveUserAccessScope(ctx: Context): Promise<AiApiAccessScope> {
   const userId = ctx.state.currentUser?.id;
-  if (userId === undefined || userId === null) return NO_RECORD_SCOPE;
 
-  // Sub-apps share this process but have separate databases, so user id 1 in one app is a
-  // different person than user id 1 in another. Without the app prefix they collide here.
-  const key = `${ctx.app?.name ?? 'main'}:${userId}`;
-  const cached = scopeCache.get(key);
-  if (cached && cached.expiresAt > Date.now()) return cached.scope;
-
-  let scope: AiApiAccessScope;
+  let group: AiApiUsageGroup;
   try {
-    const row = await ctx.db.getRepository('aiApiUserPermissions').findOne({ filter: { userId } });
-    scope = buildAccessScope(row);
+    group = await resolveRequestUserGroup(ctx, userId);
   } catch (err) {
     // Fail closed. A failed lookup cannot be treated as "no restrictions": during a rolling
-    // upgrade the table may not exist yet, and that must not lift every user's restrictions.
-    ctx.log?.error?.('AI API user permissions lookup failed, denying access:', err);
+    // upgrade the tables may not exist yet, and that must not lift every user's restrictions.
+    ctx.log?.error?.('AI API group access lookup failed, denying access:', err);
     return LOOKUP_FAILED_SCOPE;
   }
 
+  const key = `${ctx.app?.name ?? 'main'}:group:${group.id}`;
+  const cached = scopeCache.get(key);
+  if (cached && cached.expiresAt > Date.now()) return cached.scope;
+
+  const scope = buildAccessScope(group);
   scopeCache.set(key, { scope, expiresAt: Date.now() + SCOPE_TTL_MS });
   return scope;
 }
@@ -137,28 +119,26 @@ function matchesService(list: string[], serviceName?: string, serviceTitle?: str
 }
 
 /**
- * Effective service check: the global whitelist AND the user grant must both allow it.
+ * Effective service check: the global whitelist AND the group settings must both allow it.
  *
  * An empty global whitelist means "expose all services", preserving existing behaviour.
- * An empty user grant means "deny everything" — the record itself is the opt-in.
+ * An empty group list means "no narrowing" — the group inherits the global configuration.
  */
 export function isServiceAllowed(
   scope: AiApiAccessScope,
   globalEnabledServices: unknown,
   service: { name?: string; title?: string },
 ): boolean {
-  // denyAll is checked before hasUserRecord: a failed lookup denies without having a record.
-  if (scope.denyAll) return false;
+  if (scope.lookupFailed) return false;
   const globalList = toStringArray(globalEnabledServices);
   if (globalList.length && !matchesService(globalList, service.name, service.title)) return false;
-  if (!scope.hasUserRecord) return true;
-  return matchesService(scope.allowedServices ?? [], service.name, service.title);
+  if (!scope.allowedServices.length) return true;
+  return matchesService(scope.allowedServices, service.name, service.title);
 }
 
 /** Model-level narrowing on top of isServiceAllowed, keyed by "serviceName/modelId". */
 export function isModelAllowed(scope: AiApiAccessScope, fullModelId: string): boolean {
-  if (scope.denyAll) return false;
-  if (!scope.hasUserRecord) return true;
+  if (scope.lookupFailed) return false;
   if (scope.allowAllModels) return true;
   return scope.allowedModels.has(fullModelId);
 }

package/src/server/validation.ts

@@ -53,6 +53,10 @@ export function validateModelMetadata(model: Model): void {
   if (!String(model.get('model') ?? '').trim()) throw new Error('model is required.');
   requirePositiveIntegerOrNull(model.get('contextWindow'), 'contextWindow');
   requirePositiveIntegerOrNull(model.get('maxCompletionTokens'), 'maxCompletionTokens');
+  const systemPrompt = model.get('systemPrompt');
+  if (systemPrompt !== null && systemPrompt !== undefined && typeof systemPrompt !== 'string') {
+    throw new Error('systemPrompt must be a string.');
+  }
 
   const contextWindow = model.get('contextWindow');
   const maxCompletionTokens = model.get('maxCompletionTokens');
@@ -73,6 +77,9 @@ export function validateQuotaPolicy(model: Model): void {
   if (!['daily', 'monthly'].includes(String(model.get('periodType')))) {
     throw new Error('periodType must be daily or monthly.');
   }
+  if (!['share', 'per_user'].includes(String(model.get('quotaMode')))) {
+    throw new Error('quotaMode must be share or per_user.');
+  }
   if (!['allow', 'use_reserved'].includes(String(model.get('missingUsageBehavior')))) {
     throw new Error('missingUsageBehavior must be allow or use_reserved.');
   }

package/src/swagger.ts

@@ -59,8 +59,8 @@ export default {
         description:
           'Returns the LLM models available to the authenticated caller across registered services. Model IDs are formatted as `serviceName/modelId`.\n\n' +
           "The catalog is user-scoped: it starts from `enabledLlmServices` in the AI API configuration, then narrows to the caller's " +
-          '`aiApiUserPermissions` record when one exists. A user grant can only narrow the global whitelist, never widen it, so two ' +
-          'users may receive different lists from the same request.',
+          'usage group settings (`allowedLlmServices` / `allowedModels`). Group settings can only narrow the global whitelist, never ' +
+          'widen it, so two users may receive different lists from the same request.',
         security: [{ BearerAuth: [] }],
         responses: {
           200: {
@@ -252,17 +252,16 @@ export default {
             enum: ['llm', 'agent'],
             description: 'Default AI mode',
           },
-          defaultAiEmployee: { type: 'string', description: 'Default AI employee name' },
+          defaultAiEmployee: {
+            type: 'string',
+            description: 'Default AI employee name (agent mode only; direct LLM mode ignores it)',
+          },
           defaultLlmService: { type: 'string', description: 'Default LLM service name' },
           enabledLlmServices: {
             type: 'array',
             items: { type: 'string' },
             description:
-              'List of enabled LLM service names. This is the outer bound for every caller; per-user `aiApiUserPermissions` records can only narrow it further.',
-          },
-          rateLimitPerMinute: {
-            type: 'integer',
-            description: 'Max requests per minute per user (0 = unlimited)',
+              'List of enabled LLM service names. This is the outer bound for every caller; usage group settings can only narrow it further.',
           },
           maxRequestBodyMb: {
             type: 'integer',
@@ -273,6 +272,13 @@ export default {
               'Max request body size in megabytes. Requests above this return 413. ' +
               'The gateway buffers each body in memory, so values above 100 are rejected.',
           },
+          pdfRenderPagesAsImages: {
+            type: 'boolean',
+            default: false,
+            description:
+              'When true, PDF file/file_url blocks are rendered to per-page PNG images and sent as image_url blocks. ' +
+              'Requires a registered PdfToImageRenderer. When false or no renderer is available, PDFs are forwarded as file blocks.',
+          },
         },
       },
       ModelObject: {
@@ -287,10 +293,10 @@ export default {
       ContentBlock: {
         type: 'object',
         description:
-          'A multimodal content block. Only text and image_url blocks are forwarded to the provider; ' +
-          'any other type is rejected with 400 unsupported_content_block.',
+          'A multimodal content block. text, image_url, file and file_url blocks are forwarded; ' +
+          'file and file_url blocks are first run through the configurable file processor service.',
         properties: {
-          type: { type: 'string', enum: ['text', 'image_url'] },
+          type: { type: 'string', enum: ['text', 'image_url', 'file', 'file_url'] },
           text: { type: 'string' },
           image_url: {
             type: 'object',
@@ -304,6 +310,35 @@ export default {
             },
             required: ['url'],
           },
+          file: {
+            type: 'object',
+            properties: {
+              file_data: {
+                type: 'string',
+                description: 'A base64 data URL, e.g. data:application/pdf;base64,JVBERi0...',
+                example: 'data:application/pdf;base64,JVBERi0...',
+              },
+              filename: { type: 'string' },
+              mime_type: {
+                type: 'string',
+                description: 'MIME type of the file, e.g. application/pdf',
+                example: 'application/pdf',
+              },
+            },
+            required: ['file_data'],
+          },
+          file_url: {
+            type: 'object',
+            properties: {
+              url: {
+                type: 'string',
+                description:
+                  'An http(s) URL pointing to a file. The gateway downloads the file and converts it to a file block.',
+                example: 'https://example.com/document.pdf',
+              },
+            },
+            required: ['url'],
+          },
         },
         required: ['type'],
       },
@@ -366,6 +401,12 @@ export default {
               prompt_tokens: { type: 'integer' },
               completion_tokens: { type: 'integer' },
               total_tokens: { type: 'integer' },
+              prompt_tokens_details: {
+                type: 'object',
+                properties: {
+                  cached_tokens: { type: 'integer' },
+                },
+              },
             },
           },
         },

package/dist/client/123.e6fe04c856ce6417.js

@@ -1,10 +0,0 @@
-/**
- * This file is part of the NocoBase (R) project.
- * Copyright (c) 2020-2024 NocoBase Co., Ltd.
- * Authors: NocoBase Team.
- *
- * This project is dual-licensed under AGPL-3.0 and NocoBase Commercial License.
- * For more information, please refer to: https://www.nocobase.com/agreement.
- */
-
-"use strict";(self.webpackChunkplugin_ai_api=self.webpackChunkplugin_ai_api||[]).push([["123"],{46:function(e,t,r){r.r(t),r.d(t,{default:function(){return p}});var n=r(155),l=r.n(n),a=r(59),o=r(694),i=r(650),u=r(630);function s(e,t){(null==t||t>e.length)&&(t=e.length);for(var r=0,n=Array(t);r<t;r++)n[r]=e[r];return n}function c(e,t,r,n,l,a,o){try{var i=e[a](o),u=i.value}catch(e){r(e);return}i.done?t(u):Promise.resolve(u).then(n,l)}function d(e){return function(){var t=this,r=arguments;return new Promise(function(n,l){var a=e.apply(t,r);function o(e){c(a,n,l,o,i,"next",e)}function i(e){c(a,n,l,o,i,"throw",e)}o(void 0)})}}function m(e,t){return function(e){if(Array.isArray(e))return e}(e)||function(e,t){var r,n,l=null==e?null:"u">typeof Symbol&&e[Symbol.iterator]||e["@@iterator"];if(null!=l){var a=[],o=!0,i=!1;try{for(l=l.call(e);!(o=(r=l.next()).done)&&(a.push(r.value),!t||a.length!==t);o=!0);}catch(e){i=!0,n=e}finally{try{o||null==l.return||l.return()}finally{if(i)throw n}}return a}}(e,t)||function(e,t){if(e){if("string"==typeof e)return s(e,t);var r=Object.prototype.toString.call(e).slice(8,-1);if("Object"===r&&e.constructor&&(r=e.constructor.name),"Map"===r||"Set"===r)return Array.from(r);if("Arguments"===r||/^(?:Ui|I)nt(?:8|16|32)(?:Clamped)?Array$/.test(r))return s(e,t)}}(e,t)||function(){throw TypeError("Invalid attempt to destructure non-iterable instance.\\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method.")}()}function f(e,t){var r,n,l,a={label:0,sent:function(){if(1&l[0])throw l[1];return l[1]},trys:[],ops:[]},o=Object.create(("function"==typeof Iterator?Iterator:Object).prototype),i=Object.defineProperty;return i(o,"next",{value:u(0)}),i(o,"throw",{value:u(1)}),i(o,"return",{value:u(2)}),"function"==typeof Symbol&&i(o,Symbol.iterator,{value:function(){return this}}),o;function u(i){return function(u){var s=[i,u];if(r)throw TypeError("Generator is already executing.");for(;o&&(o=0,s[0]&&(a=0)),a;)try{if(r=1,n&&(l=2&s[0]?n.return:s[0]?n.throw||((l=n.return)&&l.call(n),0):n.next)&&!(l=l.call(n,s[1])).done)return l;switch(n=0,l&&(s=[2&s[0],l.value]),s[0]){case 0:case 1:l=s;break;case 4:return a.label++,{value:s[1],done:!1};case 5:a.label++,n=s[1],s=[0];continue;case 7:s=a.ops.pop(),a.trys.pop();continue;default:if(!(l=(l=a.trys).length>0&&l[l.length-1])&&(6===s[0]||2===s[0])){a=0;continue}if(3===s[0]&&(!l||s[1]>l[0]&&s[1]<l[3])){a.label=s[1];break}if(6===s[0]&&a.label<l[1]){a.label=l[1],l=s;break}if(l&&a.label<l[2]){a.label=l[2],a.ops.push(s);break}l[2]&&a.ops.pop(),a.trys.pop();continue}s=t.call(e,a)}catch(e){s=[6,e],n=0}finally{r=l=0}if(5&s[0])throw s[1];return{value:s[0]?s[1]:void 0,done:!0}}}}function p(){var e=(0,o.useFlowContext)(),t=(0,i.k)(),r=m(a.Form.useForm(),1)[0],s=a.Form.useWatch("allowedLlmServices",r),c=a.Form.useWatch("allowAllModels",r),p=m((0,n.useState)([]),2),v=p[0],h=p[1],b=m((0,n.useState)(0),2),y=b[0],w=b[1],S=m((0,n.useState)(1),2),g=S[0],E=S[1],k=m((0,n.useState)([]),2),A=k[0],M=k[1],I=m((0,n.useState)(""),2),F=I[0],C=I[1],U=m((0,n.useState)([]),2),x=U[0],L=U[1],P=m((0,n.useState)(!1),2),T=P[0],O=P[1],j=m((0,n.useState)(!1),2),z=j[0],q=j[1],B=m((0,n.useState)(),2),D=B[0],N=B[1],_=m((0,n.useState)(!1),2),G=_[0],V=_[1],W=(0,n.useCallback)(function(){return d(function(){var t,r,n,l,o,i,s;return f(this,function(c){switch(c.label){case 0:O(!0),c.label=1;case 1:return c.trys.push([1,3,4,5]),[4,Promise.all([e.api.request({url:"aiApiUserPermissions:list",method:"get",params:{page:g,pageSize:20,appends:["user"],sort:"-updatedAt"}}),e.api.request({url:"ai:listAllEnabledModels",method:"get"})])];case 2:return o=(l=m.apply(void 0,[c.sent(),2]))[0],i=l[1],h((0,u.m)(o,[])),w(null!=(t=null==o||null==(n=o.data)||null==(r=n.meta)?void 0:r.count)?t:0),L((0,u.m)(i,[])),[3,5];case 3:return s=c.sent(),a.message.error((0,u.g)(s)),[3,5];case 4:return O(!1),[7];case 5:return[2]}})})()},[e.api,g]);(0,n.useEffect)(function(){W()},[W]);var J=(0,n.useCallback)(function(t){return d(function(){var r,n;return f(this,function(l){switch(l.label){case 0:return l.trys.push([0,2,,3]),[4,e.api.request({url:"aiApiUserPermissions:listUsers",method:"get",params:{keyword:t,pageSize:50,excludeGranted:!D}})];case 1:return r=l.sent(),M((0,u.m)(r,[])),[3,3];case 2:return n=l.sent(),a.message.error((0,u.g)(n)),[3,3];case 3:return[2]}})})()},[e.api,D]);(0,n.useEffect)(function(){if(G){var e=setTimeout(function(){return J(F)},300);return function(){return clearTimeout(e)}}},[G,F,J]);var K=(0,n.useMemo)(function(){return x.map(function(e){return{label:e.llmServiceTitle||e.llmService,value:e.llmService}})},[x]),$=(0,n.useMemo)(function(){var e=new Set(s||[]);return x.filter(function(t){return e.has(t.llmService)}).flatMap(function(e){return(e.enabledModels||[]).map(function(t){return{label:"".concat(e.llmServiceTitle||e.llmService," / ").concat(t.label||t.value),value:"".concat(e.llmService,"/").concat(t.value)}})})},[x,s]),H=function(e){N(e),C(""),M(e.user?[e.user]:[]),r.setFieldsValue({userId:e.userId,enabled:e.enabled,allowAllModels:e.allowAllModels,allowedLlmServices:e.allowedLlmServices||[],allowedModels:e.allowedModels||[]}),V(!0)},Q=function(e){var t;return(null==e?void 0:e.nickname)||(null==e?void 0:e.username)||(null==e?void 0:e.email)||String(null!=(t=null==e?void 0:e.id)?t:"")},R=function(e){var t;return(null==(t=K.find(function(t){return t.value===e}))?void 0:t.label)||e},X=[{title:t("User"),key:"user",width:180,render:function(e,t){return Q(t.user)||String(t.userId)}},{title:t("Allowed LLM services"),dataIndex:"allowedLlmServices",key:"allowedLlmServices",render:function(e){return(null==e?void 0:e.length)?l().createElement(a.Space,{size:[0,4],wrap:!0},e.map(function(e){return l().createElement(a.Tag,{key:e},R(e))})):l().createElement(a.Tag,{color:"red"},t("No service allowed"))}},{title:t("Allowed models"),key:"allowedModels",width:220,render:function(e,r){return r.allowAllModels?l().createElement(a.Tag,{color:"blue"},t("All models of allowed services")):l().createElement(a.Space,{size:[0,4],wrap:!0},(r.allowedModels||[]).map(function(e){return l().createElement(a.Tag,{key:e},e)}))}},{title:t("Status"),dataIndex:"enabled",key:"enabled",width:100,render:function(e){return l().createElement(a.Tag,{color:e?"green":"default"},e?t("Enabled"):t("Disabled"))}},{title:t("Actions"),key:"actions",width:150,fixed:"right",render:function(r,n){return l().createElement(a.Space,{size:0},l().createElement(a.Button,{type:"link",onClick:function(){return H(n)}},t("Edit")),l().createElement(a.Popconfirm,{title:t("Delete this permission?"),onConfirm:function(){return d(function(){var r;return f(this,function(l){switch(l.label){case 0:return l.trys.push([0,3,,4]),[4,e.api.request({url:"aiApiUserPermissions:destroy/".concat(n.id),method:"post"})];case 1:return l.sent(),a.message.success(t("Deleted successfully")),[4,W()];case 2:return l.sent(),[3,4];case 3:return r=l.sent(),a.message.error((0,u.g)(r)),[3,4];case 4:return[2]}})})()}},l().createElement(a.Button,{type:"link",danger:!0},t("Delete"))))}}];return l().createElement(a.Card,{title:t("User LLM permissions"),extra:l().createElement(a.Button,{type:"primary",onClick:function(){N(void 0),C(""),r.setFieldsValue({enabled:!0,allowedLlmServices:[],allowAllModels:!0,allowedModels:[]}),V(!0)}},t("Add permission"))},l().createElement(a.Alert,{type:"info",showIcon:!0,style:{marginBottom:16},message:t("Users listed here are limited to the services selected below. Users without a record fall back to the general configuration.")}),l().createElement(a.Table,{rowKey:"id",columns:X,dataSource:v,loading:T,scroll:{x:1e3},pagination:{current:g,pageSize:20,total:y,showSizeChanger:!1,onChange:E}}),l().createElement(a.Modal,{title:D?t("Edit permission"):t("Add permission"),open:G,onCancel:function(){return V(!1)},onOk:function(){return d(function(){var n,l;return f(this,function(o){switch(o.label){case 0:return[4,r.validateFields()];case 1:n=o.sent(),q(!0),o.label=2;case 2:return o.trys.push([2,5,6,7]),[4,e.api.request({url:D?"aiApiUserPermissions:update/".concat(D.id):"aiApiUserPermissions:create",method:"post",data:n})];case 3:return o.sent(),a.message.success(t("Saved successfully")),V(!1),[4,W()];case 4:return o.sent(),[3,7];case 5:return l=o.sent(),a.message.error((0,u.g)(l)),[3,7];case 6:return q(!1),[7];case 7:return[2]}})})()},confirmLoading:z,destroyOnClose:!0},l().createElement(a.Form,{form:r,layout:"vertical",preserve:!1},l().createElement(a.Form.Item,{name:"userId",label:t("User"),rules:[{required:!0}]},l().createElement(a.Select,{disabled:!!D,showSearch:!0,filterOption:!1,onSearch:C,notFoundContent:null,options:A.map(function(e){return{label:Q(e),value:e.id}})})),l().createElement(a.Form.Item,{name:"allowedLlmServices",label:t("Allowed LLM services"),extra:t("Only services also enabled in the general configuration take effect.")},l().createElement(a.Select,{mode:"multiple",allowClear:!0,showSearch:!0,optionFilterProp:"label",options:K})),l().createElement(a.Form.Item,{name:"allowAllModels",label:t("Allow all models"),valuePropName:"checked"},l().createElement(a.Switch,null)),!1===c&&l().createElement(a.Form.Item,{name:"allowedModels",label:t("Allowed models")},l().createElement(a.Select,{mode:"multiple",allowClear:!0,showSearch:!0,optionFilterProp:"label",options:$})),l().createElement(a.Form.Item,{name:"enabled",label:t("Enabled"),valuePropName:"checked"},l().createElement(a.Switch,null)))))}},650:function(e,t,r){r.d(t,{k:function(){return a}});var n=r(694),l=JSON.parse('{"UU":"plugin-ai-api"}');function a(){var e=(0,n.useFlowEngine)();return function(t){return e.context.t(t,{ns:[l.UU,"client"]})}}},630:function(e,t,r){function n(e,t){var r,n;return e&&(void 0===e?"undefined":e&&"u">typeof Symbol&&e.constructor===Symbol?"symbol":typeof e)=="object"?null!=(r=null==(n=e.data)?void 0:n.data)?r:t:t}function l(e){var t;return(null!=(t=Error)&&"u">typeof Symbol&&t[Symbol.hasInstance]?!!t[Symbol.hasInstance](e):e instanceof t)?e.message:String(e)}r.d(t,{g:function(){return l},m:function(){return n}})}}]);

package/dist/client/302.fc3a3491b4ec2dfd.js

@@ -1,10 +0,0 @@
-/**
- * This file is part of the NocoBase (R) project.
- * Copyright (c) 2020-2024 NocoBase Co., Ltd.
- * Authors: NocoBase Team.
- *
- * This project is dual-licensed under AGPL-3.0 and NocoBase Commercial License.
- * For more information, please refer to: https://www.nocobase.com/agreement.
- */
-
-"use strict";(self.webpackChunkplugin_ai_api=self.webpackChunkplugin_ai_api||[]).push([["302"],{581:function(e,t,r){r.r(t),r.d(t,{default:function(){return d}});var n=r(155),a=r.n(n),l=r(59),o=r(694),i=r(650),u=r(630);function c(e,t){(null==t||t>e.length)&&(t=e.length);for(var r=0,n=Array(t);r<t;r++)n[r]=e[r];return n}function s(e,t,r,n,a,l,o){try{var i=e[l](o),u=i.value}catch(e){r(e);return}i.done?t(u):Promise.resolve(u).then(n,a)}function m(e){return function(){var t=this,r=arguments;return new Promise(function(n,a){var l=e.apply(t,r);function o(e){s(l,n,a,o,i,"next",e)}function i(e){s(l,n,a,o,i,"throw",e)}o(void 0)})}}function p(e,t){return function(e){if(Array.isArray(e))return e}(e)||function(e,t){var r,n,a=null==e?null:"u">typeof Symbol&&e[Symbol.iterator]||e["@@iterator"];if(null!=a){var l=[],o=!0,i=!1;try{for(a=a.call(e);!(o=(r=a.next()).done)&&(l.push(r.value),!t||l.length!==t);o=!0);}catch(e){i=!0,n=e}finally{try{o||null==a.return||a.return()}finally{if(i)throw n}}return l}}(e,t)||function(e,t){if(e){if("string"==typeof e)return c(e,t);var r=Object.prototype.toString.call(e).slice(8,-1);if("Object"===r&&e.constructor&&(r=e.constructor.name),"Map"===r||"Set"===r)return Array.from(r);if("Arguments"===r||/^(?:Ui|I)nt(?:8|16|32)(?:Clamped)?Array$/.test(r))return c(e,t)}}(e,t)||function(){throw TypeError("Invalid attempt to destructure non-iterable instance.\\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method.")}()}function f(e,t){var r,n,a,l={label:0,sent:function(){if(1&a[0])throw a[1];return a[1]},trys:[],ops:[]},o=Object.create(("function"==typeof Iterator?Iterator:Object).prototype),i=Object.defineProperty;return i(o,"next",{value:u(0)}),i(o,"throw",{value:u(1)}),i(o,"return",{value:u(2)}),"function"==typeof Symbol&&i(o,Symbol.iterator,{value:function(){return this}}),o;function u(i){return function(u){var c=[i,u];if(r)throw TypeError("Generator is already executing.");for(;o&&(o=0,c[0]&&(l=0)),l;)try{if(r=1,n&&(a=2&c[0]?n.return:c[0]?n.throw||((a=n.return)&&a.call(n),0):n.next)&&!(a=a.call(n,c[1])).done)return a;switch(n=0,a&&(c=[2&c[0],a.value]),c[0]){case 0:case 1:a=c;break;case 4:return l.label++,{value:c[1],done:!1};case 5:l.label++,n=c[1],c=[0];continue;case 7:c=l.ops.pop(),l.trys.pop();continue;default:if(!(a=(a=l.trys).length>0&&a[a.length-1])&&(6===c[0]||2===c[0])){l=0;continue}if(3===c[0]&&(!a||c[1]>a[0]&&c[1]<a[3])){l.label=c[1];break}if(6===c[0]&&l.label<a[1]){l.label=a[1],a=c;break}if(a&&l.label<a[2]){l.label=a[2],l.ops.push(c);break}a[2]&&l.ops.pop(),l.trys.pop();continue}c=t.call(e,l)}catch(e){c=[6,e],n=0}finally{r=a=0}if(5&c[0])throw c[1];return{value:c[0]?c[1]:void 0,done:!0}}}}var y={mode:"llm",enabledLlmServices:[],rateLimitPerMinute:60,maxRequestBodyMb:10,quotaEnabled:!1,defaultReservationOutputTokens:4096};function d(){var e=(0,o.useFlowContext)(),t=(0,i.k)(),r=p(l.Form.useForm(),1)[0],c=l.Form.useWatch("mode",r),s=p((0,n.useState)(!0),2),d=s[0],b=s[1],h=p((0,n.useState)(!1),2),v=h[0],g=h[1],E=p((0,n.useState)([]),2),S=E[0],w=E[1],I=p((0,n.useState)([]),2),k=I[0],F=I[1],P=p((0,n.useState)(),2),A=P[0],C=P[1],O=(0,n.useCallback)(function(){return m(function(){var t,n,a,l,o;return f(this,function(i){switch(i.label){case 0:b(!0),C(void 0),i.label=1;case 1:return i.trys.push([1,3,4,5]),[4,Promise.all([e.api.request({url:"aiApiConfig:get",method:"get"}),e.api.request({url:"ai:listLLMServices",method:"get"}),e.api.request({url:"aiEmployees:list",method:"get",params:{paginate:!1}})])];case 2:return n=(t=p.apply(void 0,[i.sent(),3]))[0],a=t[1],l=t[2],r.setFieldsValue(function(e){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{},n=Object.keys(r);"function"==typeof Object.getOwnPropertySymbols&&(n=n.concat(Object.getOwnPropertySymbols(r).filter(function(e){return Object.getOwnPropertyDescriptor(r,e).enumerable}))),n.forEach(function(t){var n;n=r[t],t in e?Object.defineProperty(e,t,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[t]=n})}return e}({},y,(0,u.m)(n,{}))),w((0,u.m)(a,[])),F((0,u.m)(l,[])),[3,5];case 3:return o=i.sent(),C((0,u.g)(o)),[3,5];case 4:return b(!1),[7];case 5:return[2]}})})()},[e.api,r]);(0,n.useEffect)(function(){O()},[O]);var x=S.map(function(e){return{label:e.title||e.name,value:e.name}}),L=k.map(function(e){return{label:e.nickname?"".concat(e.nickname," (").concat(e.username,")"):e.username,value:e.username}}),T="".concat(window.location.origin,"/api/ai-llm/v1");return a().createElement(l.Card,{title:t("Configuration"),loading:d},A?a().createElement(l.Alert,{type:"error",showIcon:!0,message:A,style:{marginBottom:16}}):null,a().createElement(l.Form,{form:r,layout:"vertical",style:{maxWidth:720},initialValues:y},a().createElement(l.Form.Item,{name:"mode",label:t("API mode"),rules:[{required:!0}]},a().createElement(l.Select,{options:[{label:t("Direct LLM"),value:"llm"},{label:t("AI Employee agent"),value:"agent"}]})),a().createElement(l.Form.Item,{name:"defaultLlmService",label:t("Default LLM service")},a().createElement(l.Select,{allowClear:!0,showSearch:!0,optionFilterProp:"label",options:x})),a().createElement(l.Form.Item,{name:"enabledLlmServices",label:t("Enabled LLM Services")},a().createElement(l.Select,{mode:"multiple",allowClear:!0,showSearch:!0,optionFilterProp:"label",options:x})),"agent"===c?a().createElement(l.Form.Item,{name:"defaultAiEmployee",label:t("Default AI Employee")},a().createElement(l.Select,{allowClear:!0,showSearch:!0,optionFilterProp:"label",placeholder:t("Select an AI Employee"),options:L})):null,a().createElement(l.Form.Item,{name:"rateLimitPerMinute",label:t("Rate Limit"),rules:[{required:!0}]},a().createElement(l.InputNumber,{min:1,style:{width:"100%"}})),a().createElement(l.Form.Item,{name:"maxRequestBodyMb",label:t("Max request body size (MB)"),extra:t("Raise this to accept inline base64 images. Base64 adds about 33% to the original file size."),rules:[{required:!0}]},a().createElement(l.InputNumber,{min:1,max:100,precision:0,style:{width:"100%"}})),a().createElement(l.Form.Item,{name:"quotaEnabled",label:t("Enable user quotas"),valuePropName:"checked"},a().createElement(l.Switch,null)),a().createElement(l.Form.Item,{name:"defaultReservationOutputTokens",label:t("Default reserved output tokens"),rules:[{required:!0}]},a().createElement(l.InputNumber,{min:1,style:{width:"100%"}})),a().createElement(l.Space,null,a().createElement(l.Button,{type:"primary",loading:v,onClick:function(){return m(function(){var n,a;return f(this,function(o){switch(o.label){case 0:return[4,r.validateFields()];case 1:n=o.sent(),g(!0),o.label=2;case 2:return o.trys.push([2,4,5,6]),[4,e.api.request({url:"aiApiConfig:save",method:"post",data:n})];case 3:return o.sent(),l.message.success(t("Configuration saved")),[3,6];case 4:return a=o.sent(),l.message.error("".concat(t("Failed to save configuration"),": ").concat((0,u.g)(a))),[3,6];case 5:return g(!1),[7];case 6:return[2]}})})()}},t("Save Configuration")),a().createElement(l.Button,{onClick:O},t("Refresh")))),a().createElement(l.Card,{title:t("Usage guide"),size:"small",style:{marginTop:24}},a().createElement(l.Alert,{type:"info",showIcon:!0,message:t("OpenAI-compatible endpoint"),description:a().createElement(l.Space,{direction:"vertical",size:4},a().createElement(l.Typography.Text,null,t("Base URL")),a().createElement(l.Typography.Text,{code:!0,copyable:!0},T),a().createElement(l.Typography.Text,null,t("Use a NocoBase API key as the Bearer token."))),style:{marginBottom:16}}),a().createElement(l.Typography.Paragraph,null,t("List available models")),a().createElement(l.Typography.Paragraph,{code:!0,copyable:!0},"curl ".concat(T,'/models -H "Authorization: Bearer <your-api-key>"')),a().createElement(l.Typography.Paragraph,null,t("Send a chat completion")),a().createElement(l.Typography.Paragraph,{code:!0,copyable:!0},"curl ".concat(T,'/chat/completions \\\n  -H "Authorization: Bearer <your-api-key>" \\\n  -H "Content-Type: application/json" \\\n  -d \'{"model":"<service>/<model>","messages":[{"role":"user","content":"Hello"}]}\''))))}},650:function(e,t,r){r.d(t,{k:function(){return l}});var n=r(694),a=JSON.parse('{"UU":"plugin-ai-api"}');function l(){var e=(0,n.useFlowEngine)();return function(t){return e.context.t(t,{ns:[a.UU,"client"]})}}},630:function(e,t,r){function n(e,t){var r,n;return e&&(void 0===e?"undefined":e&&"u">typeof Symbol&&e.constructor===Symbol?"symbol":typeof e)=="object"?null!=(r=null==(n=e.data)?void 0:n.data)?r:t:t}function a(e){var t;return(null!=(t=Error)&&"u">typeof Symbol&&t[Symbol.hasInstance]?!!t[Symbol.hasInstance](e):e instanceof t)?e.message:String(e)}r.d(t,{g:function(){return a},m:function(){return n}})}}]);