🔎 feat: Add Prompt and Agent Permissions Migration Checks (#9063)

* chore: fix mock typing in packages/api tests

* chore: improve imports, type handling and method signatures for MCPServersRegistry

* chore: use enum in migration scripts

* chore: ParsedServerConfig type to enhance server configuration handling

* feat: Implement agent permissions migration check and logging

* feat: Integrate migration checks into server initialization process

* feat: Add prompt permissions migration check and logging to server initialization

* chore: move prompt formatting functions to dedicated prompts dir

api/server/index.js

@@ -14,6 +14,7 @@ const { isEnabled, ErrorController } = require('@librechat/api');
 const { connectDb, indexSync } = require('~/db');
 const validateImageRequest = require('./middleware/validateImageRequest');
 const { jwtLogin, ldapLogin, passportLogin } = require('~/strategies');
+const { checkMigrations } = require('./services/start/migration');
 const initializeMCPs = require('./services/initializeMCPs');
 const configureSocialLogins = require('./socialLogins');
 const AppService = require('./services/AppService');
@@ -145,7 +146,7 @@ const startServer = async () => {
       logger.info(`Server listening at http://${host == '0.0.0.0' ? 'localhost' : host}:${port}`);
     }
 
-    initializeMCPs(app);
+    initializeMCPs(app).then(() => checkMigrations());
   });
 };
 

api/server/services/AppService.js

@@ -1,4 +1,9 @@
-const { loadMemoryConfig, agentsConfigSetup, loadWebSearchConfig } = require('@librechat/api');
+const {
+  isEnabled,
+  loadMemoryConfig,
+  agentsConfigSetup,
+  loadWebSearchConfig,
+} = require('@librechat/api');
 const {
   FileSources,
   loadOCRConfig,
@@ -6,16 +11,16 @@ const {
   getConfigDefaults,
 } = require('librechat-data-provider');
 const {
+  checkWebSearchConfig,
+  checkAzureVariables,
+  checkVariables,
   checkHealth,
   checkConfig,
-  checkVariables,
-  checkAzureVariables,
-  checkWebSearchConfig,
 } = require('./start/checks');
+const { ensureDefaultCategories, seedDefaultRoles, initializeRoles } = require('~/models');
 const { azureAssistantsDefaults, assistantsConfigSetup } = require('./start/assistants');
 const { initializeAzureBlobService } = require('./Files/Azure/initialize');
 const { initializeFirebase } = require('./Files/Firebase/initialize');
-const { seedDefaultRoles, initializeRoles, ensureDefaultCategories } = require('~/models');
 const loadCustomConfig = require('./Config/loadCustomConfig');
 const handleRateLimits = require('./Config/handleRateLimits');
 const { loadDefaultInterface } = require('./start/interface');
@@ -24,7 +29,6 @@ const { azureConfigSetup } = require('./start/azureOpenAI');
 const { processModelSpecs } = require('./start/modelSpecs');
 const { initializeS3 } = require('./Files/S3/initialize');
 const { loadAndFormatTools } = require('./ToolService');
-const { isEnabled } = require('~/server/utils');
 const { setCachedTools } = require('./Config');
 const paths = require('~/config/paths');
 

api/server/services/start/migration.js

@@ -0,0 +1,45 @@
+const { logger } = require('@librechat/data-schemas');
+const {
+  logAgentMigrationWarning,
+  logPromptMigrationWarning,
+  checkAgentPermissionsMigration,
+  checkPromptPermissionsMigration,
+} = require('@librechat/api');
+const { getProjectByName } = require('~/models/Project');
+const { Agent, PromptGroup } = require('~/db/models');
+const { findRoleByIdentifier } = require('~/models');
+
+/**
+ * Check if permissions migrations are needed for shared resources
+ * This runs at the end to ensure all systems are initialized
+ */
+async function checkMigrations() {
+  try {
+    const agentMigrationResult = await checkAgentPermissionsMigration({
+      db: {
+        findRoleByIdentifier,
+        getProjectByName,
+      },
+      AgentModel: Agent,
+    });
+    logAgentMigrationWarning(agentMigrationResult);
+  } catch (error) {
+    logger.error('Failed to check agent permissions migration:', error);
+  }
+  try {
+    const promptMigrationResult = await checkPromptPermissionsMigration({
+      db: {
+        findRoleByIdentifier,
+        getProjectByName,
+      },
+      PromptGroupModel: PromptGroup,
+    });
+    logPromptMigrationWarning(promptMigrationResult);
+  } catch (error) {
+    logger.error('Failed to check prompt permissions migration:', error);
+  }
+}
+
+module.exports = {
+  checkMigrations,
+};