tbenandClaude Opus 5.5
2df1bf83f4
MCP, skill and tool rows in Settings say "Updated 5m ago" beside how they're reached and who gets them. updated_at now means a change to an extension's settings (an edit, or any Access save): runs, connections and MCP syncs keep their own last_checked_at / last_synced_at and no longer touch it. Co-Authored-By: Claude Opus 5.5 <[email protected]>
71 lines
2.9 KiB
TypeScript
71 lines
2.9 KiB
TypeScript
import BunSQLite from "@moduletrace/bun-sqlite";
|
|
import AppError from "@/src/utils/app-error";
|
|
import assertCrewManager from "../access/assert-crew-manager";
|
|
import attachToAllBots from "./attach-to-all-bots";
|
|
import { ExtensionTables, type ExtensionKind } from "./extension-tables";
|
|
|
|
type Params = {
|
|
user_id: number | string;
|
|
kind: ExtensionKind;
|
|
id: number;
|
|
bot_ids: number[];
|
|
workspace_ids: number[];
|
|
/**
|
|
* Super admins only: left alone for anyone else.
|
|
*/
|
|
all_bots?: boolean;
|
|
};
|
|
|
|
/**
|
|
* Attaches an MCP server or tool to exactly these bots and workspaces, for
|
|
* super admins and admins. An admin never sees the coordinator, so its
|
|
* attachment is kept as it is; only a super admin sets "every bot", which
|
|
* when turned on gives it to every bot (`attachToAllBots`) and every new
|
|
* one. Turning it off takes it from no one. Either way it counts as a
|
|
* change to the extension (`updated_at`).
|
|
*/
|
|
export default async function setExtensionAccess({ user_id, kind, id, bot_ids, workspace_ids, all_bots }: Params) {
|
|
const role = await assertCrewManager({ user_id });
|
|
const { table, bot_link, workspace_link, column, label } = ExtensionTables[kind];
|
|
|
|
const found = await BunSQLite.sql<{ id: number; all_bots: number }>({
|
|
sql: `SELECT id, all_bots FROM ${table} WHERE id = ?`,
|
|
values: [id],
|
|
});
|
|
|
|
if (!found.payload?.[0]) throw new AppError(`That ${label} doesn't exist.`);
|
|
|
|
const coordinator = role != "super_admin" ? `AND bot_id NOT IN (SELECT id FROM bots WHERE kind = 'coordinator')` : "";
|
|
const now = Date.now();
|
|
|
|
await BunSQLite.sql({ sql: `DELETE FROM ${bot_link} WHERE ${column} = ? ${coordinator}`, values: [id] });
|
|
await BunSQLite.sql({ sql: `DELETE FROM ${workspace_link} WHERE ${column} = ?`, values: [id] });
|
|
|
|
for (const bot_id of new Set(bot_ids)) {
|
|
await BunSQLite.sql({
|
|
sql: `INSERT OR IGNORE INTO ${bot_link} (created_at, updated_at, bot_id, ${column})
|
|
SELECT ?, ?, id, ? FROM bots WHERE id = ? ${role != "super_admin" ? `AND kind = 'worker'` : ""}`,
|
|
values: [now, now, id, bot_id],
|
|
});
|
|
}
|
|
|
|
for (const workspace_id of new Set(workspace_ids)) {
|
|
await BunSQLite.sql({
|
|
sql: `INSERT OR IGNORE INTO ${workspace_link} (created_at, updated_at, workspace_id, ${column})
|
|
SELECT ?, ?, id, ? FROM workspaces WHERE id = ?`,
|
|
values: [now, now, id, workspace_id],
|
|
});
|
|
}
|
|
|
|
if (role == "super_admin" && all_bots !== undefined) {
|
|
await BunSQLite.sql({
|
|
sql: `UPDATE ${table} SET all_bots = ?, updated_at = ? WHERE id = ?`,
|
|
values: [all_bots ? 1 : 0, now, id],
|
|
});
|
|
|
|
if (all_bots && found.payload?.[0]?.all_bots != 1) await attachToAllBots({ kind, id });
|
|
} else {
|
|
await BunSQLite.sql({ sql: `UPDATE ${table} SET updated_at = ? WHERE id = ?`, values: [now, id] });
|
|
}
|
|
}
|