LibreChat/api/server/utils/import/importBatchBuilder.js
Danny Avila 67b7b441b2
🛂 feat: Filter Model-Bound Content by Source (#14425)
* feat: introduce optional content protection seam

* feat: enforce source-aware content filters

* feat: complete source-aware content enforcement

* test: activate skill file-text fail-close fixtures

* fix: harden source-aware content filters

* fix: harden model-bound content filtering

* fix: preserve legacy filters and generated files

* fix: inspect shared scalar metadata

* test: align mocks with current dev dependencies

* feat: add persisted content filter safeguards

* feat: complete source-aware content filter enforcement

* fix: move resume content preflight into TypeScript

* fix: close content inspection edge cases

* fix: harden content protection boundaries

* fix: complete content protection safeguards

* test: align persisted memory filter coverage

* fix: reconcile content protection with current dev

* fix: reconcile content protection with latest dev

* fix: close content protection review gaps

* fix: enforce source-aware provider boundaries

* fix: preserve legacy PII preflight semantics

* test: stabilize stored branch preflight fixture

* fix: defer agent writes until protected model admission

* perf: harden source-aware model-bound filtering

* fix: canonicalize provider lineage before validation

* fix: satisfy model-bound callback type checks

* perf: Bound content protection filtering work

* fix: Bound submission array traversal

* fix: Stabilize bounded content snapshots

* fix: Scope model-bound traversal overflows

* fix: Preserve scoped content inspection

* fix: Accumulate aggregate traversal scopes

* fix: centralize content policy boundaries

* test: align deferred tool policy context

* test: align controller policy mocks

* style: normalize content protection imports

* fix: close content policy review gaps

* fix: narrow active skill policy config

* fix: address content protection review boundaries

* fix: retain exact provenance overflow sentinel

* fix: preserve literal and scoped provenance updates

* fix: narrow persisted edit provenance

* fix: isolate exact overflow attribution

* fix: centralize stored prompt protection

* fix: fail closed on incomplete transcript evidence

* fix: align canonical transcript routing

* refactor: centralize content policy preflights

* fix: isolate upload policy error typing

* style: sort policy preflight imports

* refactor: centralize content policy boundaries
2026-08-21 22:43:32 -04:00

264 lines
9.5 KiB
JavaScript

const { v4: uuidv4 } = require('uuid');
const {
assertModelBoundContent,
assertConversationImportContentAllowed,
} = require('@librechat/api');
const {
logger,
createFallbackRetentionDate,
createTempChatExpirationDate,
} = require('@librechat/data-schemas');
const {
EModelEndpoint,
Constants,
RetentionMode,
openAISettings,
} = require('librechat-data-provider');
const { bulkIncrementTagCounts, bulkSaveConvos, bulkSaveMessages, getFiles } = require('~/models');
const { FALLBACK_MODEL_BY_ENDPOINT } = require('./defaults');
/**
* Factory function for creating an instance of ImportBatchBuilder.
* @param {string} requestUserId - The ID of the user making the request.
* @param {object} [interfaceConfig] - Runtime interface config for import retention.
* @param {object} [filters] - Source-aware content filters for submitted imports.
* @param {object} [legacyPii] - Legacy messageFilter.pii configuration.
* @returns {ImportBatchBuilder} - The newly created ImportBatchBuilder instance.
*/
function createImportBatchBuilder(requestUserId, interfaceConfig, filters, legacyPii) {
return new ImportBatchBuilder(requestUserId, interfaceConfig, filters, legacyPii);
}
/**
* Applies the current content policy to a conversation snapshot before it is copied.
* @param {object} [filters] - Source-aware content filters.
* @param {object} snapshot - Conversation content that would be persisted.
* @param {object[]} snapshot.conversations - Conversation metadata records.
* @param {object[]} snapshot.messages - Message records.
* @param {object} [resolutionContext] - Owner-aware canonical file resolution dependencies.
* @param {{ id?: string, tenantId?: string }} [resolutionContext.user] - Snapshot owner.
* @param {Function} [resolutionContext.getFiles] - Canonical file lookup.
* @param {object[]} [resolutionContext.trustedLiveFiles] - Server-hydrated canonical rows.
* @param {object} [resolutionContext.legacyPii] - Legacy messageFilter.pii configuration.
* @returns {Promise<void>}
* @throws {ContentFilterError|UninspectableFileError|import('@librechat/api').ContentTraversalLimitError}
*/
async function assertConversationContentAllowed(filters, snapshot, resolutionContext = {}) {
return assertConversationImportContentAllowed(filters, snapshot, {
...resolutionContext,
assertModelBoundContent,
});
}
/**
* Class for building a batch of conversations and messages and pushing them to DB for Conversation Import functionality
*/
class ImportBatchBuilder {
/**
* Creates an instance of ImportBatchBuilder.
* @param {string} requestUserId - The ID of the user making the import request.
* @param {object} [interfaceConfig] - Runtime interface config for import retention.
* @param {object} [filters] - Source-aware content filters for submitted imports.
* @param {object} [legacyPii] - Legacy messageFilter.pii configuration.
*/
constructor(requestUserId, interfaceConfig, filters, legacyPii) {
this.requestUserId = requestUserId;
this.interfaceConfig = interfaceConfig;
this.filters = filters;
this.legacyPii = legacyPii;
this.conversations = [];
this.messages = [];
this.retentionFields = undefined;
}
getRetentionFields() {
if (this.retentionFields !== undefined) {
return this.retentionFields;
}
if (this.interfaceConfig?.retentionMode !== RetentionMode.ALL) {
this.retentionFields = {};
return this.retentionFields;
}
try {
this.retentionFields = {
isTemporary: false,
expiredAt: createTempChatExpirationDate(this.interfaceConfig),
};
} catch (error) {
logger.error('[ImportBatchBuilder] Error creating import expiration date:', error);
this.retentionFields = { isTemporary: false, expiredAt: createFallbackRetentionDate() };
}
return this.retentionFields;
}
/**
* Starts a new conversation in the batch.
* @param {string} [endpoint=EModelEndpoint.openAI] - The endpoint for the conversation. Defaults to EModelEndpoint.openAI.
* @returns {void}
*/
startConversation(endpoint) {
// we are simplifying by using a single model for the entire conversation
this.endpoint = endpoint || EModelEndpoint.openAI;
this.conversationId = uuidv4();
this.lastMessageId = Constants.NO_PARENT;
}
/**
* Adds a user message to the current conversation.
* @param {string} text - The text of the user message.
* @returns {object} The saved message object.
*/
addUserMessage(text) {
const message = this.saveMessage({
text,
sender: 'user',
isCreatedByUser: true,
isUserSubmitted: true,
});
return message;
}
/**
* Adds a GPT message to the current conversation.
* @param {string} text - The text of the GPT message.
* @param {string} [model='defaultModel'] - The model used for generating the GPT message. Defaults to 'defaultModel'.
* @param {string} [sender='GPT-3.5'] - The sender of the GPT message. Defaults to 'GPT-3.5'.
* @returns {object} The saved message object.
*/
addGptMessage(text, model, sender = 'GPT-3.5') {
const message = this.saveMessage({
text,
sender,
isCreatedByUser: false,
isUserSubmitted: true,
model: model || openAISettings.model.default,
});
return message;
}
/**
* Finishes the current conversation and adds it to the batch.
* @param {string} [title='Imported Chat'] - The title of the conversation. Defaults to 'Imported Chat'.
* @param {Date} [createdAt] - The creation date of the conversation.
* @param {TConversation} [originalConvo] - The original conversation.
* @param {string} [defaultModel] - Resolved default model for this endpoint
* (typically derived from the runtime models config). Used only when
* originalConvo.model is unset.
* @returns {{ conversation: TConversation, messages: TMessage[] }} The resulting conversation and messages.
*/
finishConversation(title, createdAt, originalConvo = {}, defaultModel) {
const fallbackModel =
defaultModel ?? FALLBACK_MODEL_BY_ENDPOINT[this.endpoint] ?? openAISettings.model.default;
const convo = {
...originalConvo,
user: this.requestUserId,
conversationId: this.conversationId,
title: title || 'Imported Chat',
createdAt: createdAt,
updatedAt: createdAt,
overrideTimestamp: true,
endpoint: this.endpoint,
model: originalConvo.model ?? fallbackModel,
...this.getRetentionFields(),
};
convo._id && delete convo._id;
delete convo.subagentThread;
this.conversations.push(convo);
return { conversation: convo, messages: this.messages };
}
/**
* Saves the batch of conversations and messages to the DB.
* Also increments tag counts for any existing tags.
* @returns {Promise<void>} A promise that resolves when the batch is saved.
* @throws {Error} If there is an error saving the batch.
*/
async saveBatch() {
await assertConversationContentAllowed(
this.filters,
{
conversations: this.conversations,
messages: this.messages,
},
{
user: { id: this.requestUserId },
getFiles,
...(this.legacyPii == null ? {} : { legacyPii: this.legacyPii }),
},
);
try {
const promises = [];
promises.push(bulkSaveConvos(this.conversations));
promises.push(bulkSaveMessages(this.messages, true));
promises.push(
bulkIncrementTagCounts(
this.requestUserId,
this.conversations.flatMap((convo) => convo.tags),
),
);
await Promise.all(promises);
logger.debug(
`user: ${this.requestUserId} | Added ${this.conversations.length} conversations and ${this.messages.length} messages to the DB.`,
);
} catch (error) {
logger.error('Error saving batch', error);
throw error;
}
}
/**
* Saves a message to the current conversation.
* @param {object} messageDetails - The details of the message.
* @param {string} messageDetails.text - The text of the message.
* @param {string} messageDetails.sender - The sender of the message.
* @param {string} [messageDetails.messageId] - The ID of the current message.
* @param {boolean} messageDetails.isCreatedByUser - Indicates whether the message is created by the user.
* @param {string} [messageDetails.model] - The model used for generating the message.
* @param {string} [messageDetails.endpoint] - The endpoint used for generating the message.
* @param {string} [messageDetails.parentMessageId=this.lastMessageId] - The ID of the parent message.
* @param {Partial<TMessage>} messageDetails.rest - Additional properties that may be included in the message.
* @returns {object} The saved message object.
*/
saveMessage({
text,
sender,
isCreatedByUser,
model,
messageId,
parentMessageId = this.lastMessageId,
endpoint,
...rest
}) {
const newMessageId = messageId ?? uuidv4();
const message = {
...rest,
parentMessageId,
messageId: newMessageId,
conversationId: this.conversationId,
isCreatedByUser: isCreatedByUser,
model: model || this.model,
user: this.requestUserId,
endpoint: endpoint ?? this.endpoint,
unfinished: false,
isEdited: false,
error: false,
sender,
text,
...this.getRetentionFields(),
};
message._id && delete message._id;
this.lastMessageId = newMessageId;
this.messages.push(message);
return message;
}
}
module.exports = {
ImportBatchBuilder,
createImportBatchBuilder,
assertConversationContentAllowed,
};