mirror of
https://github.com/danny-avila/LibreChat.git
synced 2025-12-16 16:30:15 +01:00
* refactor: access control logic to TypeScript * chore: Change EndpointURLs to a constant object for improved type safety * 🐛 fix: Enhance agent access control by adding skipAgentCheck functionality * 🐛 fix: Add endpointFileConfig prop to AttachFileMenu and update file handling logic * 🐛 fix: Update tool handling logic to support optional groupedTools and improve null checks, add dedicated tool dialog for Assistants * chore: Export Accordion component from UI index for improved modularity * feat: Add ActivePanelContext for managing active panel state across components * chore: Replace string IDs with EModelEndpoint constants for assistants and agents in useSideNavLinks * fix: Integrate access checks for agent creation and deletion routes in actions.js
115 lines
3.6 KiB
JavaScript
115 lines
3.6 KiB
JavaScript
const express = require('express');
|
|
const { generateCheckAccess } = require('@librechat/api');
|
|
const { PermissionTypes, Permissions } = require('librechat-data-provider');
|
|
const { requireJwtAuth } = require('~/server/middleware');
|
|
const v1 = require('~/server/controllers/agents/v1');
|
|
const { getRoleByName } = require('~/models/Role');
|
|
const actions = require('./actions');
|
|
const tools = require('./tools');
|
|
|
|
const router = express.Router();
|
|
const avatar = express.Router();
|
|
|
|
const checkAgentAccess = generateCheckAccess({
|
|
permissionType: PermissionTypes.AGENTS,
|
|
permissions: [Permissions.USE],
|
|
getRoleByName,
|
|
});
|
|
const checkAgentCreate = generateCheckAccess({
|
|
permissionType: PermissionTypes.AGENTS,
|
|
permissions: [Permissions.USE, Permissions.CREATE],
|
|
getRoleByName,
|
|
});
|
|
|
|
const checkGlobalAgentShare = generateCheckAccess({
|
|
permissionType: PermissionTypes.AGENTS,
|
|
permissions: [Permissions.USE, Permissions.CREATE],
|
|
bodyProps: {
|
|
[Permissions.SHARED_GLOBAL]: ['projectIds', 'removeProjectIds'],
|
|
},
|
|
getRoleByName,
|
|
});
|
|
|
|
router.use(requireJwtAuth);
|
|
|
|
/**
|
|
* Agent actions route.
|
|
* @route GET|POST /agents/actions
|
|
*/
|
|
router.use('/actions', actions);
|
|
|
|
/**
|
|
* Get a list of available tools for agents.
|
|
* @route GET /agents/tools
|
|
*/
|
|
router.use('/tools', tools);
|
|
|
|
/**
|
|
* Creates an agent.
|
|
* @route POST /agents
|
|
* @param {AgentCreateParams} req.body - The agent creation parameters.
|
|
* @returns {Agent} 201 - Success response - application/json
|
|
*/
|
|
router.post('/', checkAgentCreate, v1.createAgent);
|
|
|
|
/**
|
|
* Retrieves an agent.
|
|
* @route GET /agents/:id
|
|
* @param {string} req.params.id - Agent identifier.
|
|
* @returns {Agent} 200 - Success response - application/json
|
|
*/
|
|
router.get('/:id', checkAgentAccess, v1.getAgent);
|
|
|
|
/**
|
|
* Updates an agent.
|
|
* @route PATCH /agents/:id
|
|
* @param {string} req.params.id - Agent identifier.
|
|
* @param {AgentUpdateParams} req.body - The agent update parameters.
|
|
* @returns {Agent} 200 - Success response - application/json
|
|
*/
|
|
router.patch('/:id', checkGlobalAgentShare, v1.updateAgent);
|
|
|
|
/**
|
|
* Duplicates an agent.
|
|
* @route POST /agents/:id/duplicate
|
|
* @param {string} req.params.id - Agent identifier.
|
|
* @returns {Agent} 201 - Success response - application/json
|
|
*/
|
|
router.post('/:id/duplicate', checkAgentCreate, v1.duplicateAgent);
|
|
|
|
/**
|
|
* Deletes an agent.
|
|
* @route DELETE /agents/:id
|
|
* @param {string} req.params.id - Agent identifier.
|
|
* @returns {Agent} 200 - success response - application/json
|
|
*/
|
|
router.delete('/:id', checkAgentCreate, v1.deleteAgent);
|
|
|
|
/**
|
|
* Reverts an agent to a previous version.
|
|
* @route POST /agents/:id/revert
|
|
* @param {string} req.params.id - Agent identifier.
|
|
* @param {number} req.body.version_index - Index of the version to revert to.
|
|
* @returns {Agent} 200 - success response - application/json
|
|
*/
|
|
router.post('/:id/revert', checkGlobalAgentShare, v1.revertAgentVersion);
|
|
|
|
/**
|
|
* Returns a list of agents.
|
|
* @route GET /agents
|
|
* @param {AgentListParams} req.query - The agent list parameters for pagination and sorting.
|
|
* @returns {AgentListResponse} 200 - success response - application/json
|
|
*/
|
|
router.get('/', checkAgentAccess, v1.getListAgents);
|
|
|
|
/**
|
|
* Uploads and updates an avatar for a specific agent.
|
|
* @route POST /agents/:agent_id/avatar
|
|
* @param {string} req.params.agent_id - The ID of the agent.
|
|
* @param {Express.Multer.File} req.file - The avatar image file.
|
|
* @param {string} [req.body.metadata] - Optional metadata for the agent's avatar.
|
|
* @returns {Object} 200 - success response - application/json
|
|
*/
|
|
avatar.post('/:agent_id/avatar/', checkAgentAccess, v1.uploadAgentAvatar);
|
|
|
|
module.exports = { v1: router, avatar };
|