7 |
13 | All Set!
9 |10 | You can close this window and return to the application 11 |
12 |
14 |
17 |
--------------------------------------------------------------------------------
/apiclient/go.mod:
--------------------------------------------------------------------------------
1 | module github.com/obot-platform/obot/apiclient
2 |
3 | go 1.25.5
4 |
5 | require (
6 | github.com/gptscript-ai/go-gptscript v0.9.8
7 | github.com/modelcontextprotocol/go-sdk v0.2.0
8 | github.com/obot-platform/obot/logger v0.0.0-20241217130503-4004a5c69f32
9 | )
10 |
11 | require (
12 | github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc // indirect
13 | github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2 // indirect
14 | github.com/sirupsen/logrus v1.9.3 // indirect
15 | golang.org/x/sys v0.33.0 // indirect
16 | )
17 |
--------------------------------------------------------------------------------
/pkg/cli/events/events.go:
--------------------------------------------------------------------------------
1 | package events
2 |
3 | import (
4 | "context"
5 |
6 | "github.com/obot-platform/obot/apiclient"
7 | "github.com/obot-platform/obot/apiclient/types"
8 | )
9 |
10 | type Printer interface {
11 | Print(events <-chan types.Progress) error
12 | }
13 |
14 | func NewPrinter(ctx context.Context, c *apiclient.Client, quiet, details bool) Printer {
15 | if quiet {
16 | return &Quiet{
17 | Client: c,
18 | Ctx: ctx,
19 | }
20 | }
21 | return &Verbose{
22 | Details: details,
23 | Client: c,
24 | Ctx: ctx,
25 | }
26 | }
27 |
--------------------------------------------------------------------------------
/ui/user/src/lib/image.ts:
--------------------------------------------------------------------------------
1 | import type { Project, ProjectShare, ThreadManifest } from './services';
2 |
3 | export function isImage(filename: string): boolean {
4 | return /\.(jpe?g|png|gif|bmp|webp)$/i.test(filename);
5 | }
6 |
7 | export function getProjectImage(
8 | project: Project | ProjectShare | ThreadManifest,
9 | isDarkMode: boolean
10 | ) {
11 | const imageUrl = isDarkMode
12 | ? project.icons?.iconDark || project.icons?.icon
13 | : project.icons?.icon;
14 |
15 | return imageUrl ?? '/agent/images/obot_placeholder.webp'; // need placeholder image
16 | }
17 |
--------------------------------------------------------------------------------
/pkg/api/handlers/providers/filescannerproviders.go:
--------------------------------------------------------------------------------
1 | package providers
2 |
3 | import (
4 | "github.com/obot-platform/obot/apiclient/types"
5 | v1 "github.com/obot-platform/obot/pkg/storage/apis/obot.obot.ai/v1"
6 | )
7 |
8 | func ConvertFileScannerProviderToolRef(toolRef v1.ToolReference, cred map[string]string) (*types.FileScannerProviderStatus, error) {
9 | providerStatus, err := ConvertProviderToolRef(toolRef, cred)
10 | if err != nil {
11 | return nil, err
12 | }
13 |
14 | return &types.FileScannerProviderStatus{CommonProviderStatus: *providerStatus}, nil
15 | }
16 |
--------------------------------------------------------------------------------
/ui/user/src/routes/admin/filters/[id]/+page.ts:
--------------------------------------------------------------------------------
1 | import { handleRouteError } from '$lib/errors';
2 | import { AdminService } from '$lib/services';
3 | import { profile } from '$lib/stores';
4 | import type { PageLoad } from './$types';
5 |
6 | export const load: PageLoad = async ({ params, fetch }) => {
7 | const { id } = params;
8 |
9 | let filter;
10 | try {
11 | filter = await AdminService.getMCPFilter(id, { fetch });
12 | } catch (err) {
13 | handleRouteError(err, `/admin/filters/${id}`, profile.current);
14 | }
15 |
16 | return {
17 | filter
18 | };
19 | };
20 |
--------------------------------------------------------------------------------
/ui/user/src/lib/context/layout.svelte.ts:
--------------------------------------------------------------------------------
1 | import { getContext, hasContext, setContext } from 'svelte';
2 |
3 | export const LAYOUT_CONTEXT = 'layout';
4 |
5 | export interface Layout {
6 | sidebarOpen?: boolean;
7 | }
8 |
9 | export function initLayout() {
10 | const data = $stateMemories
15 |
12 |
14 |
14 |
22 |
--------------------------------------------------------------------------------
/ui/user/src/routes/admin/mcp-servers/w/[wid]/s/[id]/+page.ts:
--------------------------------------------------------------------------------
1 | import { handleRouteError } from '$lib/errors';
2 | import { ChatService } from '$lib/services';
3 | import { profile } from '$lib/stores';
4 | import type { PageLoad } from './$types';
5 |
6 | export const load: PageLoad = async ({ params, fetch }) => {
7 | const { id, wid } = params;
8 |
9 | let mcpServer;
10 | try {
11 | mcpServer = await ChatService.getWorkspaceMCPCatalogServer(wid, id, {
12 | fetch
13 | });
14 | } catch (err) {
15 | handleRouteError(err, `/admin/mcp-servers/w/${wid}/s/${id}`, profile.current);
16 | }
17 |
18 | return {
19 | mcpServer,
20 | workspaceId: wid
21 | };
22 | };
23 |
--------------------------------------------------------------------------------
/ui/user/src/routes/admin/usage/+page.svelte:
--------------------------------------------------------------------------------
1 |
9 |
10 |
15 |
21 | Error
16 |{error.message}
17 | {#if onClick} 18 | 19 | {/if} 20 |
16 |
18 |
24 | {#if blobUrl}
25 |
26 | {/if}
27 |
28 |
--------------------------------------------------------------------------------
/.github/workflows/test-docker-build.yml:
--------------------------------------------------------------------------------
1 | name: Test Docker Build
2 | on:
3 | pull_request:
4 | branches:
5 | - main
6 | paths-ignore:
7 | - docs/**
8 | - chart/**
9 |
10 | jobs:
11 | build:
12 | runs-on: depot-ubuntu-22.04
13 | steps:
14 | - name: Checkout code
15 | uses: actions/checkout@v4
16 |
17 | - name: Setup Depot
18 | uses: depot/setup-action@v1
19 |
20 | - name: Build Docker Image
21 | uses: depot/build-push-action@v1
22 | with:
23 | project: bbqjs4tj1g
24 | context: .
25 | platforms: linux/amd64,linux/arm64
26 | build-args: |
27 | BASE_IMAGE=ghcr.io/obot-platform/obot/base:latest
28 |
--------------------------------------------------------------------------------
/pkg/api/authz/template.go:
--------------------------------------------------------------------------------
1 | package authz
2 |
3 | import (
4 | "net/http"
5 |
6 | v1 "github.com/obot-platform/obot/pkg/storage/apis/obot.obot.ai/v1"
7 | "github.com/obot-platform/obot/pkg/system"
8 | kclient "sigs.k8s.io/controller-runtime/pkg/client"
9 | )
10 |
11 | func (a *Authorizer) checkTemplate(req *http.Request, resources *Resources) (bool, error) {
12 | if resources.TemplateID == "" {
13 | return true, nil
14 | }
15 |
16 | var templateShareList v1.ThreadShareList
17 | err := a.cache.List(req.Context(), &templateShareList, kclient.InNamespace(system.DefaultNamespace), kclient.MatchingFields{
18 | "spec.publicID": resources.TemplateID,
19 | })
20 |
21 | return len(templateShareList.Items) > 0, err
22 | }
23 |
--------------------------------------------------------------------------------
/ui/user/src/lib/stores/profile.svelte.ts:
--------------------------------------------------------------------------------
1 | import { type Profile } from '$lib/services/chat/types';
2 |
3 | const store = $state({
4 | current: {
5 | id: '',
6 | username: '',
7 | email: '',
8 | iconURL: '',
9 | role: 0,
10 | groups: []
11 | } as Profile,
12 | initialize
13 | });
14 |
15 | function initialize(profile?: Profile) {
16 | if (profile) {
17 | store.current = profile;
18 | if (profile.isBootstrapUser?.()) {
19 | store.current.displayName = 'Bootstrap';
20 | }
21 | } else {
22 | store.current = {
23 | id: '',
24 | email: '',
25 | iconURL: '',
26 | role: 0,
27 | groups: [],
28 | unauthorized: true,
29 | username: ''
30 | };
31 | }
32 | }
33 |
34 | export default store;
35 |
--------------------------------------------------------------------------------
/ui/user/src/routes/admin/mcp-servers/s/[id]/details/+page.ts:
--------------------------------------------------------------------------------
1 | import { DEFAULT_MCP_CATALOG_ID } from '$lib/constants';
2 | import { handleRouteError } from '$lib/errors';
3 | import { AdminService } from '$lib/services';
4 | import { profile } from '$lib/stores';
5 | import type { PageLoad } from './$types';
6 |
7 | export const load: PageLoad = async ({ params, fetch }) => {
8 | const { id } = params;
9 |
10 | let mcpServer;
11 | try {
12 | mcpServer = await AdminService.getMCPCatalogServer(DEFAULT_MCP_CATALOG_ID, id, {
13 | fetch
14 | });
15 | } catch (err) {
16 | handleRouteError(err, `/admin/mcp-servers/s/${id}/details`, profile.current);
17 | }
18 |
19 | return {
20 | mcpServer,
21 | id
22 | };
23 | };
24 |
--------------------------------------------------------------------------------
/.github/workflows/update-prod-env.yml:
--------------------------------------------------------------------------------
1 | name: Update Prod Env
2 |
3 | permissions:
4 | id-token: write
5 | contents: read
6 | packages: write
7 |
8 | on:
9 | workflow_dispatch:
10 |
11 | jobs:
12 | copy-tag:
13 | runs-on: depot-ubuntu-22.04
14 |
15 | steps:
16 | - name: Log in to GitHub Container Registry
17 | uses: docker/login-action@v3
18 | with:
19 | registry: ghcr.io
20 | username: ${{ github.actor }}
21 | password: ${{ secrets.GITHUB_TOKEN }}
22 |
23 | - name: Setup crane
24 | uses: imjasonh/setup-crane@v0.4
25 |
26 | - name: Copy to prod tag
27 | run: |
28 | crane tag ghcr.io/${{ github.repository }}-enterprise:main prod
29 |
--------------------------------------------------------------------------------
/ui/user/static/user/images/assistant/highlightai-mark.svg:
--------------------------------------------------------------------------------
1 |
--------------------------------------------------------------------------------
/pkg/cli/tools_update.go:
--------------------------------------------------------------------------------
1 | package cli
2 |
3 | import (
4 | "fmt"
5 |
6 | "github.com/spf13/cobra"
7 | )
8 |
9 | type ToolUpdate struct {
10 | root *Obot
11 | Quiet bool `usage:"Only print IDs of updated step template" short:"q"`
12 | }
13 |
14 | func (l *ToolUpdate) Customize(cmd *cobra.Command) {
15 | cmd.Use = "update [flags] NAME REFERENCE"
16 | cmd.Args = cobra.ExactArgs(2)
17 | }
18 |
19 | func (l *ToolUpdate) Run(cmd *cobra.Command, args []string) error {
20 | tr, err := l.root.Client.UpdateToolReference(cmd.Context(), args[0], args[1])
21 | if err != nil {
22 | return err
23 | }
24 | if l.Quiet {
25 | fmt.Println(tr.ID)
26 | } else {
27 | fmt.Println("Step template updated:", tr.ID)
28 | }
29 | return nil
30 | }
31 |
--------------------------------------------------------------------------------
/pkg/controller/generationed/generationed.go:
--------------------------------------------------------------------------------
1 | package generationed
2 |
3 | import (
4 | "github.com/obot-platform/nah/pkg/router"
5 | v1 "github.com/obot-platform/obot/pkg/storage/apis/obot.obot.ai/v1"
6 | )
7 |
8 | // UpdateObservedGeneration should be the last handler that runs on such an object to ensure
9 | // that updating of the observed generation only happens if no error occurs.
10 | func UpdateObservedGeneration(req router.Request, resp router.Response) error {
11 | if req.Object == nil {
12 | return nil
13 | }
14 |
15 | if errored, ok := resp.Attributes()["generation:errored"]; !ok || errored != true {
16 | req.Object.(v1.Generationed).SetObservedGeneration(req.Object.GetGeneration())
17 | }
18 |
19 | return nil
20 | }
21 |
--------------------------------------------------------------------------------
/ui/user/tsconfig.json:
--------------------------------------------------------------------------------
1 | {
2 | "extends": "./.svelte-kit/tsconfig.json",
3 | "compilerOptions": {
4 | "allowJs": true,
5 | "checkJs": true,
6 | "esModuleInterop": true,
7 | "forceConsistentCasingInFileNames": true,
8 | "resolveJsonModule": true,
9 | "skipLibCheck": true,
10 | "sourceMap": true,
11 | "strict": true,
12 | "moduleResolution": "bundler"
13 | }
14 | // Path aliases are handled by https://kit.svelte.dev/docs/configuration#alias
15 | // except $lib which is handled by https://kit.svelte.dev/docs/configuration#files
16 | //
17 | // If you want to overwrite includes/excludes, make sure to copy over the relevant includes/excludes
18 | // from the referenced tsconfig.json - TypeScript does not merge them in
19 | }
20 |
--------------------------------------------------------------------------------
/pkg/api/authn/authn.go:
--------------------------------------------------------------------------------
1 | package authn
2 |
3 | import (
4 | "net/http"
5 |
6 | "k8s.io/apiserver/pkg/authentication/authenticator"
7 | "k8s.io/apiserver/pkg/authentication/user"
8 | )
9 |
10 | type Authenticator struct {
11 | authenticator authenticator.Request
12 | }
13 |
14 | func NewAuthenticator(authenticator authenticator.Request) *Authenticator {
15 | return &Authenticator{
16 | authenticator: authenticator,
17 | }
18 | }
19 |
20 | func (a *Authenticator) Authenticate(req *http.Request) (user.Info, error) {
21 | resp, ok, err := a.authenticator.AuthenticateRequest(req)
22 | if err != nil {
23 | return nil, err
24 | }
25 | if !ok {
26 | panic("authentication should always succeed")
27 | }
28 | return resp.User, nil
29 | }
30 |
--------------------------------------------------------------------------------
/ui/user/src/lib/context/projectTools.svelte.ts:
--------------------------------------------------------------------------------
1 | import type { AssistantTool } from '$lib/services';
2 | import { getContext, hasContext, setContext } from 'svelte';
3 |
4 | const PROJECT_TOOLS_CONTEXT_NAME = 'project-tools';
5 | export interface ProjectTools {
6 | tools: AssistantTool[];
7 | maxTools: number;
8 | }
9 |
10 | export function getProjectTools(): ProjectTools {
11 | if (!hasContext(PROJECT_TOOLS_CONTEXT_NAME)) {
12 | throw new Error('layout context not initialized');
13 | }
14 | return getContext
10 |
11 |
17 |
18 |
18 |
30 |
--------------------------------------------------------------------------------
/ui/user/src/lib/services/admin/constants.ts:
--------------------------------------------------------------------------------
1 | import { Role } from './types';
2 |
3 | export const userRoleOptions = [
4 | {
5 | id: Role.BASIC,
6 | label: 'Basic User',
7 | description: 'Connect to MCP servers made available through registries and use Chat.'
8 | },
9 | {
10 | id: Role.POWERUSER,
11 | label: 'Power User',
12 | description:
13 | 'In addition to basic user features, users can publish custom MCP servers for their own personal use.'
14 | },
15 | {
16 | id: Role.POWERUSER_PLUS,
17 | label: 'Power User Plus',
18 | description:
19 | 'In addition to power user features, users can share their custom MCP servers through their own registries.'
20 | },
21 | {
22 | id: Role.ADMIN,
23 | label: 'Admin',
24 | description: 'Every user is a full admin. Use caution when selecting this option.'
25 | }
26 | ];
27 |
--------------------------------------------------------------------------------
/pkg/storage/tables/table/fmt.go:
--------------------------------------------------------------------------------
1 | package table
2 |
3 | import (
4 | "bytes"
5 | "strings"
6 | )
7 |
8 | func SimpleFormat(values [][]string) (string, string) {
9 | headerBuffer := bytes.Buffer{}
10 | valueBuffer := bytes.Buffer{}
11 | for _, v := range values {
12 | appendTabDelim(&headerBuffer, strings.ToUpper(v[0]))
13 | if strings.Contains(v[1], "{{") {
14 | appendTabDelim(&valueBuffer, v[1])
15 | } else {
16 | appendTabDelim(&valueBuffer, "{{."+v[1]+"}}")
17 | }
18 | }
19 |
20 | headerBuffer.WriteString("\n")
21 | valueBuffer.WriteString("\n")
22 |
23 | return headerBuffer.String(), valueBuffer.String()
24 | }
25 |
26 | func appendTabDelim(buf *bytes.Buffer, value string) {
27 | if buf.Len() == 0 {
28 | buf.WriteString(value)
29 | } else {
30 | buf.WriteString("\t")
31 | buf.WriteString(value)
32 | }
33 | }
34 |
--------------------------------------------------------------------------------
/pkg/storage/apis/obot.obot.ai/v1/grouprolechange.go:
--------------------------------------------------------------------------------
1 | package v1
2 |
3 | import (
4 | metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"
5 | )
6 |
7 | // +k8s:deepcopy-gen:interfaces=k8s.io/apimachinery/pkg/runtime.Object
8 |
9 | type GroupRoleChange struct {
10 | metav1.TypeMeta `json:",inline"`
11 | metav1.ObjectMeta `json:"metadata,omitempty"`
12 |
13 | Spec GroupRoleChangeSpec `json:"spec,omitempty"`
14 | Status EmptyStatus `json:"status,omitempty"`
15 | }
16 |
17 | type GroupRoleChangeSpec struct {
18 | GroupName string `json:"groupName,omitempty"`
19 | }
20 |
21 | // +k8s:deepcopy-gen:interfaces=k8s.io/apimachinery/pkg/runtime.Object
22 |
23 | type GroupRoleChangeList struct {
24 | metav1.TypeMeta `json:",inline"`
25 | metav1.ListMeta `json:"metadata,omitempty"`
26 | Items []GroupRoleChange `json:"items"`
27 | }
28 |
--------------------------------------------------------------------------------
/ui/user/src/routes/admin/auth-providers/+page.ts:
--------------------------------------------------------------------------------
1 | import { handleRouteError } from '$lib/errors';
2 | import { AdminService, ChatService } from '$lib/services';
3 | import type { AuthProvider } from '$lib/services/admin/types';
4 | import { profile } from '$lib/stores';
5 | import type { PageLoad } from './$types';
6 | import { redirect } from '@sveltejs/kit';
7 |
8 | export const load: PageLoad = async ({ fetch }) => {
9 | const version = await ChatService.getVersion({ fetch });
10 | if (!version.authEnabled) {
11 | throw redirect(302, '/admin');
12 | }
13 |
14 | let authProviders: AuthProvider[] = [];
15 | try {
16 | authProviders = await AdminService.listAuthProviders({ fetch });
17 | } catch (err) {
18 | handleRouteError(err, '/admin/auth-providers', profile.current);
19 | }
20 |
21 | return {
22 | authProviders
23 | };
24 | };
25 |
--------------------------------------------------------------------------------
/.github/workflows/user-ui.yml:
--------------------------------------------------------------------------------
1 | name: user
2 |
3 | on:
4 | push:
5 | branches:
6 | - main
7 | pull_request:
8 | branches:
9 | - main
10 | paths:
11 | - ui/user/**
12 |
13 | jobs:
14 | lint:
15 | runs-on: depot-ubuntu-22.04
16 |
17 | steps:
18 | - name: Checkout code
19 | uses: actions/checkout@v4
20 |
21 | - name: Set up Node.js
22 | uses: actions/setup-node@v4
23 | with:
24 | node-version: "22.12.0"
25 |
26 | - name: Set up pnpm
27 | uses: pnpm/action-setup@v4
28 | with:
29 | version: 9.12.3
30 |
31 | - name: Run linter
32 | run: |
33 | cd ui/user
34 | pnpm install
35 | pnpm run build
36 | pnpm run ci
37 |
38 | - name: Verify no changes
39 | run: make no-changes
40 |
--------------------------------------------------------------------------------
/pkg/controller/handlers/cleanup/projectmcp.go:
--------------------------------------------------------------------------------
1 | package cleanup
2 |
3 | import (
4 | "fmt"
5 |
6 | "github.com/obot-platform/nah/pkg/router"
7 | "github.com/obot-platform/obot/pkg/mcp"
8 | v1 "github.com/obot-platform/obot/pkg/storage/apis/obot.obot.ai/v1"
9 | )
10 |
11 | func (c *Credentials) ShutdownProjectMCP(req router.Request, _ router.Response) error {
12 | projectServer := req.Object.(*v1.ProjectMCPServer)
13 |
14 | config, err := mcp.ProjectServerToConfig(*projectServer, c.serverURL, c.internalServerURL, projectServer.Spec.UserID)
15 | if err != nil {
16 | return fmt.Errorf("failed to convert project server to config: %w", err)
17 | }
18 |
19 | if err = c.mcpSessionManager.CloseClient(req.Ctx, config, "default"); err != nil {
20 | return fmt.Errorf("failed to shutdown project server: %w", err)
21 | }
22 |
23 | return nil
24 | }
25 |
--------------------------------------------------------------------------------
/ui/user/src/routes/mcp-servers/c/[id]/+page.ts:
--------------------------------------------------------------------------------
1 | import { handleRouteError } from '$lib/errors';
2 | import { ChatService } from '$lib/services';
3 | import { profile } from '$lib/stores';
4 | import type { PageLoad } from './$types';
5 |
6 | export const load: PageLoad = async ({ params, fetch }) => {
7 | const { id } = params;
8 | let workspaceId;
9 | let catalogEntry;
10 | try {
11 | workspaceId = await ChatService.fetchWorkspaceIDForProfile(profile.current?.id, { fetch });
12 | } catch (_err) {
13 | // may not have a workspace id if basic user atm
14 | workspaceId = undefined;
15 | }
16 |
17 | try {
18 | catalogEntry = await ChatService.getMCP(id, { fetch });
19 | } catch (err) {
20 | handleRouteError(err, `/mcp-servers/c/${id}`, profile.current);
21 | }
22 |
23 | return {
24 | workspaceId,
25 | catalogEntry
26 | };
27 | };
28 |
--------------------------------------------------------------------------------
/ui/user/src/routes/mcp-servers/s/[id]/+page.ts:
--------------------------------------------------------------------------------
1 | import { handleRouteError } from '$lib/errors';
2 | import { ChatService } from '$lib/services';
3 | import { profile } from '$lib/stores';
4 | import type { PageLoad } from './$types';
5 |
6 | export const load: PageLoad = async ({ params, fetch }) => {
7 | const { id } = params;
8 |
9 | let mcpServer;
10 | let workspaceId;
11 | try {
12 | workspaceId = await ChatService.fetchWorkspaceIDForProfile(profile.current?.id, { fetch });
13 | } catch (_err) {
14 | // may not have a workspace id if basic user atm
15 | workspaceId = undefined;
16 | }
17 |
18 | try {
19 | mcpServer = await ChatService.getMcpCatalogServer(id, { fetch });
20 | } catch (err) {
21 | handleRouteError(err, `/mcp-servers/s/${id}`, profile.current);
22 | }
23 |
24 | return {
25 | mcpServer,
26 | workspaceId
27 | };
28 | };
29 |
--------------------------------------------------------------------------------
/ui/user/src/routes/mcp-servers/s/[id]/details/+page.ts:
--------------------------------------------------------------------------------
1 | import { handleRouteError } from '$lib/errors';
2 | import { ChatService } from '$lib/services';
3 | import { profile } from '$lib/stores';
4 | import type { PageLoad } from './$types';
5 |
6 | export const load: PageLoad = async ({ params, fetch }) => {
7 | const { id } = params;
8 |
9 | let workspaceId;
10 | let mcpServer;
11 | try {
12 | workspaceId = await ChatService.fetchWorkspaceIDForProfile(profile.current?.id, { fetch });
13 | } catch (_err) {
14 | // can happen if basic user atm
15 | workspaceId = undefined;
16 | }
17 |
18 | try {
19 | mcpServer = await ChatService.getMcpCatalogServer(id, { fetch });
20 | } catch (err) {
21 | handleRouteError(err, `/mcp-servers/s/${id}/details`, profile.current);
22 | }
23 | return {
24 | workspaceId,
25 | mcpServer,
26 | id
27 | };
28 | };
29 |
--------------------------------------------------------------------------------
/ui/user/static/user/images/assistant/vscode-mark.svg:
--------------------------------------------------------------------------------
1 |
--------------------------------------------------------------------------------
/.github/workflows/update-chat-env.yml:
--------------------------------------------------------------------------------
1 | name: Update Chat Env
2 |
3 | permissions:
4 | id-token: write
5 | contents: read
6 | packages: write
7 |
8 | on:
9 | schedule:
10 | - cron: "0 03 * * *"
11 | workflow_dispatch:
12 |
13 | jobs:
14 | copy-tag:
15 | if: github.event_name != 'schedule' || vars.DISABLE_CHAT_AUTO_UPDATE != 'true'
16 | runs-on: depot-ubuntu-22.04
17 |
18 | steps:
19 | - name: Log in to GitHub Container Registry
20 | uses: docker/login-action@v3
21 | with:
22 | registry: ghcr.io
23 | username: ${{ github.actor }}
24 | password: ${{ secrets.GITHUB_TOKEN }}
25 |
26 | - name: Setup crane
27 | uses: imjasonh/setup-crane@v0.4
28 |
29 | - name: Copy to chat tag
30 | run: |
31 | crane tag ghcr.io/${{ github.repository }}-enterprise:main chat
32 |
--------------------------------------------------------------------------------
/.github/workflows/update-demo-env.yml:
--------------------------------------------------------------------------------
1 | name: Update Demo Env
2 |
3 | permissions:
4 | id-token: write
5 | contents: read
6 | packages: write
7 |
8 | on:
9 | schedule:
10 | - cron: "0 03 * * *"
11 | workflow_dispatch:
12 |
13 | jobs:
14 | copy-tag:
15 | if: github.event_name != 'schedule' || vars.DISABLE_DEMO_AUTO_UPDATE != 'true'
16 | runs-on: depot-ubuntu-22.04
17 |
18 | steps:
19 | - name: Log in to GitHub Container Registry
20 | uses: docker/login-action@v3
21 | with:
22 | registry: ghcr.io
23 | username: ${{ github.actor }}
24 | password: ${{ secrets.GITHUB_TOKEN }}
25 |
26 | - name: Setup crane
27 | uses: imjasonh/setup-crane@v0.4
28 |
29 | - name: Copy to demo tag
30 | run: |
31 | crane tag ghcr.io/${{ github.repository }}-enterprise:main demo
32 |
--------------------------------------------------------------------------------
/pkg/api/authn/token.go:
--------------------------------------------------------------------------------
1 | package authn
2 |
3 | import (
4 | "net/http"
5 |
6 | "k8s.io/apiserver/pkg/authentication/authenticator"
7 | "k8s.io/apiserver/pkg/authentication/user"
8 | )
9 |
10 | type Token struct {
11 | Token, Username string
12 | Groups []string
13 | }
14 |
15 | func NewToken(token, username string, groups ...string) *Token {
16 | return &Token{
17 | Token: token,
18 | Username: username,
19 | Groups: groups,
20 | }
21 | }
22 |
23 | func (t *Token) AuthenticateRequest(req *http.Request) (*authenticator.Response, bool, error) {
24 | if req.Header.Get("Authorization") == "Bearer "+t.Token {
25 | return &authenticator.Response{
26 | User: &user.DefaultInfo{
27 | UID: t.Username,
28 | Name: t.Username,
29 | Groups: t.Groups,
30 | },
31 | }, true, nil
32 | }
33 |
34 | return nil, false, nil
35 | }
36 |
--------------------------------------------------------------------------------
/pkg/logutil/dsn.go:
--------------------------------------------------------------------------------
1 | package logutil
2 |
3 | import "strings"
4 |
5 | // SanitizeDSN removes credentials from a database DSN for safe logging
6 | func SanitizeDSN(dsn string) string {
7 | if strings.HasPrefix(dsn, "postgres://") || strings.HasPrefix(dsn, "postgresql://") {
8 | // Find the @ symbol that separates credentials from host
9 | atIndex := strings.Index(dsn, "@")
10 | if atIndex == -1 {
11 | return dsn
12 | }
13 |
14 | schemeEnd := strings.Index(dsn, "://")
15 | if schemeEnd == -1 {
16 | return dsn
17 | }
18 |
19 | // Extract scheme and host+path parts
20 | schemePrefix := dsn[:schemeEnd+3]
21 | hostAndPath := dsn[atIndex+1:]
22 |
23 | // Return sanitized version: scheme + [REDACTED] + @ + host+path
24 | return schemePrefix + "[REDACTED]@" + hostAndPath
25 | }
26 |
27 | // For SQLite, just return as-is
28 | return dsn
29 | }
30 |
--------------------------------------------------------------------------------
/ui/user/src/routes/[agent]/+page.ts:
--------------------------------------------------------------------------------
1 | import { handleRouteError } from '$lib/errors';
2 | import { ChatService } from '$lib/services';
3 | import { profile } from '$lib/stores';
4 | import type { PageLoad } from './$types';
5 |
6 | export const load: PageLoad = async ({ params, fetch }) => {
7 | const agentID = params.agent;
8 | try {
9 | const agent = await ChatService.getAssistant(agentID, { fetch });
10 | const projects = await ChatService.listProjects({ fetch });
11 | let project = projects.items.find((p) => p.assistantID === agent.id);
12 | if (!project) {
13 | project = await ChatService.createProject(agent.id, {
14 | name: agent.name,
15 | description: agent.description,
16 | fetch
17 | });
18 | }
19 | return {
20 | project
21 | };
22 | } catch (e) {
23 | handleRouteError(e, `/${agentID}`, profile.current);
24 | }
25 | };
26 |
--------------------------------------------------------------------------------
/pkg/cli/tools_unregister.go:
--------------------------------------------------------------------------------
1 | package cli
2 |
3 | import (
4 | "fmt"
5 |
6 | "github.com/obot-platform/obot/apiclient/types"
7 | "github.com/spf13/cobra"
8 | )
9 |
10 | type ToolUnregister struct {
11 | root *Obot
12 | Quiet bool `usage:"Only print IDs of unregistered tool references" short:"q"`
13 | }
14 |
15 | func (l *ToolUnregister) Customize(cmd *cobra.Command) {
16 | cmd.Use = "unregister [flags] [ID...]"
17 | cmd.Aliases = []string{"rm", "del", "d"}
18 | }
19 |
20 | func (l *ToolUnregister) Run(cmd *cobra.Command, args []string) error {
21 | for _, arg := range args {
22 | if err := l.root.Client.DeleteToolReference(cmd.Context(), arg, types.ToolReferenceTypeTool); err != nil {
23 | return err
24 | }
25 | if l.Quiet {
26 | fmt.Println(arg)
27 | } else {
28 | fmt.Println("Tool reference deleted:", arg)
29 | }
30 | }
31 | return nil
32 | }
33 |
--------------------------------------------------------------------------------
/pkg/controller/migrate.go:
--------------------------------------------------------------------------------
1 | package controller
2 |
3 | import (
4 | "context"
5 |
6 | v1 "github.com/obot-platform/obot/pkg/storage/apis/obot.obot.ai/v1"
7 | "github.com/obot-platform/obot/pkg/system"
8 | kclient "sigs.k8s.io/controller-runtime/pkg/client"
9 | )
10 |
11 | func addCatalogIDToAccessControlRules(ctx context.Context, client kclient.Client) error {
12 | var acRules v1.AccessControlRuleList
13 | if err := client.List(ctx, &acRules); err != nil {
14 | return err
15 | }
16 |
17 | // Iterate over each AccessControlRule and add CatalogID
18 | for _, acRule := range acRules.Items {
19 | if acRule.Spec.MCPCatalogID == "" && acRule.Spec.PowerUserWorkspaceID == "" {
20 | acRule.Spec.MCPCatalogID = system.DefaultCatalog
21 | if err := client.Update(ctx, &acRule); err != nil {
22 | return err
23 | }
24 | }
25 | }
26 |
27 | return nil
28 | }
29 |
--------------------------------------------------------------------------------
/apiclient/types/mcpserverdetails.go:
--------------------------------------------------------------------------------
1 | package types
2 |
3 | type MCPServerEvent struct {
4 | Time Time `json:"time"`
5 | Reason string `json:"reason"`
6 | Message string `json:"message"`
7 | EventType string `json:"eventType"`
8 | Action string `json:"action"`
9 | Count int32 `json:"count"`
10 | ResourceName string `json:"resourceName"`
11 | ResourceKind string `json:"resourceKind"`
12 | }
13 |
14 | type MCPServerDetails struct {
15 | DeploymentName string `json:"deploymentName"`
16 | Namespace string `json:"namespace"`
17 | LastRestart Time `json:"lastRestart"`
18 | ReadyReplicas int32 `json:"readyReplicas"`
19 | Replicas int32 `json:"replicas"`
20 | IsAvailable bool `json:"isAvailable"`
21 | Events []MCPServerEvent `json:"events"`
22 | }
23 |
--------------------------------------------------------------------------------
/pkg/gateway/db/remove_github_groups.go:
--------------------------------------------------------------------------------
1 | package db
2 |
3 | import (
4 | "fmt"
5 |
6 | "github.com/obot-platform/obot/pkg/gateway/types"
7 | "gorm.io/gorm"
8 | )
9 |
10 | func removeGitHubGroups(tx *gorm.DB) error {
11 | // Check if tables exist
12 | if !tx.Migrator().HasTable(&types.GroupMemberships{}) || !tx.Migrator().HasTable(&types.Group{}) {
13 | return nil
14 | }
15 |
16 | // Delete from group_memberships first (foreign key constraint order)
17 | if err := tx.Where("group_id LIKE ?", "github/%").Delete(&types.GroupMemberships{}).Error; err != nil {
18 | return fmt.Errorf("failed to delete GitHub group memberships: %w", err)
19 | }
20 |
21 | // Delete from groups
22 | if err := tx.Where("id LIKE ?", "github/%").Delete(&types.Group{}).Error; err != nil {
23 | return fmt.Errorf("failed to delete GitHub groups: %w", err)
24 | }
25 |
26 | return nil
27 | }
28 |
--------------------------------------------------------------------------------
/pkg/storage/apis/obot.obot.ai/v1/template.go:
--------------------------------------------------------------------------------
1 | //go:build ignore
2 |
3 | // TODO: MAKE SURE YOU ADD NEW TYPES TO scheme.go
4 |
5 | package v1
6 |
7 | import (
8 | metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"
9 | )
10 |
11 | // +k8s:deepcopy-gen:interfaces=k8s.io/apimachinery/pkg/runtime.Object
12 |
13 | type Template struct {
14 | metav1.TypeMeta `json:",inline"`
15 | metav1.ObjectMeta `json:"metadata,omitempty"`
16 |
17 | Spec TemplateSpec `json:"spec,omitempty"`
18 | Status TemplateStatus `json:"status,omitempty"`
19 | }
20 |
21 | type TemplateSpec struct {
22 | }
23 |
24 | type TemplateStatus struct {
25 | }
26 |
27 | // +k8s:deepcopy-gen:interfaces=k8s.io/apimachinery/pkg/runtime.Object
28 |
29 | type TemplateList struct {
30 | metav1.TypeMeta `json:",inline"`
31 | metav1.ListMeta `json:"metadata,omitempty"`
32 |
33 | Items []Template `json:"items"`
34 | }
35 |
--------------------------------------------------------------------------------
/ui/user/src/routes/admin/mcp-servers/c/[id]/instance/[ms_id]/details/+page.ts:
--------------------------------------------------------------------------------
1 | import { DEFAULT_MCP_CATALOG_ID } from '$lib/constants';
2 | import { handleRouteError } from '$lib/errors';
3 | import { AdminService } from '$lib/services';
4 | import { profile } from '$lib/stores';
5 | import type { PageLoad } from './$types';
6 |
7 | export const load: PageLoad = async ({ params, fetch }) => {
8 | const catalogEntryId = params.id;
9 | const mcpServerId = params.ms_id;
10 |
11 | let catalogEntry;
12 | try {
13 | catalogEntry = await AdminService.getMCPCatalogEntry(DEFAULT_MCP_CATALOG_ID, catalogEntryId, {
14 | fetch
15 | });
16 | } catch (err) {
17 | handleRouteError(
18 | err,
19 | `/admin/mcp-servers/c/${catalogEntryId}/instance/${mcpServerId}`,
20 | profile.current
21 | );
22 | }
23 |
24 | return {
25 | catalogEntry,
26 | mcpServerId
27 | };
28 | };
29 |
--------------------------------------------------------------------------------
/pkg/controller/handlers/oauthclients/oauthclients.go:
--------------------------------------------------------------------------------
1 | package oauthclients
2 |
3 | import (
4 | "errors"
5 |
6 | "github.com/gptscript-ai/go-gptscript"
7 | "github.com/obot-platform/nah/pkg/router"
8 | v1 "github.com/obot-platform/obot/pkg/storage/apis/obot.obot.ai/v1"
9 | )
10 |
11 | type Handler struct {
12 | gptClient *gptscript.GPTScript
13 | }
14 |
15 | func NewHandler(gptClient *gptscript.GPTScript) *Handler {
16 | return &Handler{
17 | gptClient: gptClient,
18 | }
19 | }
20 |
21 | func (h *Handler) CleanupOAuthClientCred(req router.Request, _ router.Response) error {
22 | o := req.Object.(*v1.OAuthClient)
23 |
24 | if o.Spec.MCPServerName == "" {
25 | return nil
26 | }
27 |
28 | if err := h.gptClient.DeleteCredential(req.Ctx, o.Spec.MCPServerName, o.Spec.MCPServerName); !errors.As(err, &gptscript.ErrNotFound{}) {
29 | return err
30 | }
31 |
32 | return nil
33 | }
34 |
--------------------------------------------------------------------------------
/ui/user/src/routes/admin/mcp-servers/w/[wid]/c/[id]/instance/[ms_id]/details/+page.ts:
--------------------------------------------------------------------------------
1 | import { handleRouteError } from '$lib/errors';
2 | import { ChatService } from '$lib/services';
3 | import { profile } from '$lib/stores';
4 | import type { PageLoad } from './$types';
5 |
6 | export const load: PageLoad = async ({ params, fetch }) => {
7 | const workspaceId = params.wid;
8 | const catalogEntryId = params.id;
9 | const mcpServerId = params.ms_id;
10 |
11 | let catalogEntry;
12 | try {
13 | catalogEntry = await ChatService.getWorkspaceMCPCatalogEntry(workspaceId, catalogEntryId, {
14 | fetch
15 | });
16 | } catch (err) {
17 | handleRouteError(
18 | err,
19 | `/admin/mcp-servers/w/${workspaceId}/c/${catalogEntryId}/instance/${mcpServerId}`,
20 | profile.current
21 | );
22 | }
23 |
24 | return {
25 | workspaceId,
26 | catalogEntry,
27 | mcpServerId
28 | };
29 | };
30 |
--------------------------------------------------------------------------------
/ui/user/src/routes/admin/mcp-registries/+page.ts:
--------------------------------------------------------------------------------
1 | import { handleRouteError } from '$lib/errors';
2 | import { AdminService } from '$lib/services';
3 | import type { AccessControlRule } from '$lib/services/admin/types';
4 | import { profile } from '$lib/stores';
5 | import type { PageLoad } from './$types';
6 |
7 | export const load: PageLoad = async ({ fetch }) => {
8 | let accessControlRules: AccessControlRule[] = [];
9 |
10 | try {
11 | const adminAccessControlRules = await AdminService.listAccessControlRules({ fetch });
12 | const userWorkspacesAccessControlRules =
13 | await AdminService.listAllUserWorkspaceAccessControlRules({ fetch });
14 | accessControlRules = [...adminAccessControlRules, ...userWorkspacesAccessControlRules];
15 | } catch (err) {
16 | handleRouteError(err, '/admin/mcp-registries', profile.current);
17 | }
18 |
19 | return {
20 | accessControlRules
21 | };
22 | };
23 |
--------------------------------------------------------------------------------
/pkg/storage/apis/obot.obot.ai/v1/userdefaultrolesetting.go:
--------------------------------------------------------------------------------
1 | package v1
2 |
3 | import (
4 | "github.com/obot-platform/obot/apiclient/types"
5 | metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"
6 | )
7 |
8 | // +k8s:deepcopy-gen:interfaces=k8s.io/apimachinery/pkg/runtime.Object
9 |
10 | type UserDefaultRoleSetting struct {
11 | metav1.TypeMeta `json:",inline"`
12 | metav1.ObjectMeta `json:"metadata,omitempty"`
13 |
14 | Spec UserDefaultRoleSettingSpec `json:"spec,omitempty"`
15 | }
16 |
17 | type UserDefaultRoleSettingSpec struct {
18 | // Role is the default role for new users
19 | Role types.Role `json:"role,omitempty"`
20 | }
21 |
22 | // +k8s:deepcopy-gen:interfaces=k8s.io/apimachinery/pkg/runtime.Object
23 |
24 | type UserDefaultRoleSettingList struct {
25 | metav1.TypeMeta `json:",inline"`
26 | metav1.ListMeta `json:"metadata,omitempty"`
27 |
28 | Items []UserDefaultRoleSetting `json:"items"`
29 | }
30 |
--------------------------------------------------------------------------------
/pkg/gateway/client/image.go:
--------------------------------------------------------------------------------
1 | package client
2 |
3 | import (
4 | "context"
5 |
6 | "github.com/obot-platform/obot/pkg/gateway/types"
7 | )
8 |
9 | // CreateImage stores a new image in the database
10 | func (c *Client) CreateImage(ctx context.Context, data []byte, mimeType string) (*types.Image, error) {
11 | img := &types.Image{
12 | Data: data,
13 | MIMEType: mimeType,
14 | }
15 |
16 | return img, c.db.WithContext(ctx).Create(img).Error
17 | }
18 |
19 | // GetImage retrieves an image by its ID
20 | func (c *Client) GetImage(ctx context.Context, id string) (*types.Image, error) {
21 | img := new(types.Image)
22 | return img, c.db.WithContext(ctx).Where("id = ?", id).First(img).Error
23 | }
24 |
25 | // DeleteImage removes an image from the database
26 | func (c *Client) DeleteImage(ctx context.Context, id string) error {
27 | return c.db.WithContext(ctx).Where("id = ?", id).Delete(&types.Image{}).Error
28 | }
29 |
--------------------------------------------------------------------------------
/ui/user/src/lib/components/editor/Image.svelte:
--------------------------------------------------------------------------------
1 |
24 |
25 | {#await src then src}
26 |
19 |
21 |
22 | {message}
23 |
24 | {#if onClose}
25 |
28 | {/if}
29 |
27 | ![AI generated, content unknown]()
28 |
29 | {/await}
30 |
--------------------------------------------------------------------------------
/ui/user/src/lib/components/OverflowContainer.svelte:
--------------------------------------------------------------------------------
1 |
20 |
21 |
28 | {@render children?.({
29 | x: x,
30 | y: y
31 | })}
32 |
33 |
--------------------------------------------------------------------------------
/apiclient/types/usage.go:
--------------------------------------------------------------------------------
1 | package types
2 |
3 | type TokenUsage struct {
4 | UserID string `json:"userID,omitempty"`
5 | RunName string `json:"runName,omitempty"`
6 | PromptTokens int `json:"promptTokens"`
7 | CompletionTokens int `json:"completionTokens"`
8 | TotalTokens int `json:"totalTokens"`
9 | Date Time `json:"date,omitzero"`
10 | PersonalToken bool `json:"personalToken"`
11 | }
12 |
13 | type TokenUsageList List[TokenUsage]
14 |
15 | type RemainingTokenUsage struct {
16 | UserID string `json:"userID,omitempty"`
17 | PromptTokens int `json:"promptTokens"`
18 | CompletionTokens int `json:"completionTokens"`
19 | UnlimitedPromptTokens bool `json:"unlimitedPromptTokens"`
20 | UnlimitedCompletionTokens bool `json:"unlimitedCompletionTokens"`
21 | }
22 |
23 | type RemainingTokenUsageList List[RemainingTokenUsage]
24 |
--------------------------------------------------------------------------------
/apiclient/types/template.go:
--------------------------------------------------------------------------------
1 | package types
2 |
3 | type ProjectTemplate struct {
4 | Metadata
5 | ProjectSnapshot ThreadManifest `json:"projectSnapshot,omitempty"`
6 | ProjectSnapshotLastUpgraded *Time `json:"projectSnapshotLastUpgraded,omitempty"`
7 | ProjectSnapshotStale bool `json:"projectSnapshotStale,omitempty"`
8 | ProjectSnapshotUpgradeInProgress bool `json:"projectSnapshotUpgradeInProgress,omitempty"`
9 | MCPServers []string `json:"mcpServers,omitempty"`
10 | AssistantID string `json:"assistantID,omitempty"`
11 | ProjectID string `json:"projectID,omitempty"`
12 | PublicID string `json:"publicID,omitempty"`
13 | Ready bool `json:"ready,omitempty"`
14 | }
15 |
16 | type ProjectTemplateList List[ProjectTemplate]
17 |
--------------------------------------------------------------------------------
/pkg/storage/apis/obot.obot.ai/v1/mcpsession.go:
--------------------------------------------------------------------------------
1 | package v1
2 |
3 | import (
4 | v1 "k8s.io/apimachinery/pkg/apis/meta/v1"
5 | )
6 |
7 | // +k8s:deepcopy-gen:interfaces=k8s.io/apimachinery/pkg/runtime.Object
8 |
9 | type MCPSession struct {
10 | v1.TypeMeta `json:",inline"`
11 | v1.ObjectMeta `json:"metadata,omitempty"`
12 | Spec MCPSessionSpec `json:"spec"`
13 | Status MCPSessionStatus `json:"status"`
14 | }
15 |
16 | type MCPSessionSpec struct {
17 | MCPID string `json:"mcpID"`
18 | UserID string `json:"userID"`
19 | State []byte `json:"state"`
20 | }
21 |
22 | type MCPSessionStatus struct {
23 | LastUsedTime v1.Time `json:"lastUsedTime,omitempty"`
24 | }
25 |
26 | // +k8s:deepcopy-gen:interfaces=k8s.io/apimachinery/pkg/runtime.Object
27 |
28 | type MCPSessionList struct {
29 | v1.TypeMeta `json:",inline"`
30 | v1.ListMeta `json:"metadata,omitempty"`
31 | Items []MCPSession `json:"items"`
32 | }
33 |
--------------------------------------------------------------------------------
/pkg/api/authz/poweruserworkspace.go:
--------------------------------------------------------------------------------
1 | package authz
2 |
3 | import (
4 | "net/http"
5 |
6 | v1 "github.com/obot-platform/obot/pkg/storage/apis/obot.obot.ai/v1"
7 | "github.com/obot-platform/obot/pkg/system"
8 | "k8s.io/apiserver/pkg/authentication/user"
9 | kclient "sigs.k8s.io/controller-runtime/pkg/client"
10 | )
11 |
12 | func (a *Authorizer) checkPowerUserWorkspace(req *http.Request, resources *Resources, user user.Info) (bool, error) {
13 | if resources.WorkspaceID == "" {
14 | return true, nil
15 | }
16 |
17 | var workspace v1.PowerUserWorkspace
18 | if err := a.get(req.Context(), kclient.ObjectKey{
19 | Namespace: system.DefaultNamespace,
20 | Name: resources.WorkspaceID,
21 | }, &workspace); err != nil {
22 | return false, err
23 | }
24 |
25 | if workspace.Spec.UserID == user.GetUID() {
26 | resources.Authorizated.PowerUserWorkspace = &workspace
27 | return true, nil
28 | }
29 |
30 | return false, nil
31 | }
32 |
--------------------------------------------------------------------------------
/pkg/gateway/types/grouproleassignment.go:
--------------------------------------------------------------------------------
1 | //nolint:revive
2 | package types
3 |
4 | import (
5 | "time"
6 |
7 | types2 "github.com/obot-platform/obot/apiclient/types"
8 | )
9 |
10 | // GroupRoleAssignment assigns a role to all members of an auth provider group.
11 | type GroupRoleAssignment struct {
12 | // GroupName is the name of the auth provider group (used as primary key)
13 | GroupName string `json:"groupName" gorm:"primaryKey"`
14 |
15 | // CreatedAt is when the assignment was created
16 | CreatedAt time.Time `json:"createdAt" gorm:"autoCreateTime"`
17 |
18 | // UpdatedAt is when the assignment was last modified
19 | UpdatedAt time.Time `json:"updatedAt" gorm:"autoUpdateTime"`
20 |
21 | // Role is the role to assign to all members of the group
22 | Role types2.Role `json:"role" gorm:"not null"`
23 |
24 | // Description is an optional description of why this assignment exists
25 | Description string `json:"description"`
26 | }
27 |
--------------------------------------------------------------------------------
/pkg/utils/utils.go:
--------------------------------------------------------------------------------
1 | //nolint:revive
2 | package utils
3 |
4 | // SlicesEqualIgnoreOrder returns true if slices a and b contain the same elements
5 | // with the same multiplicities, regardless of their order.
6 | func SlicesEqualIgnoreOrder[T comparable](a, b []T) bool {
7 | // If lengths differ, they cannot be equal
8 | if len(a) != len(b) {
9 | return false
10 | }
11 |
12 | // Count occurrences of each element in slice a
13 | counts := make(map[T]int, len(a))
14 | for _, v := range a {
15 | counts[v]++
16 | }
17 |
18 | // Subtract counts based on slice b
19 | for _, v := range b {
20 | if c, ok := counts[v]; !ok || c == 0 {
21 | // Either v was not in a, or b has more occurrences than a
22 | return false
23 | }
24 | counts[v]--
25 | }
26 |
27 | // Ensure all counts are zero (every a element matched by b)
28 | for _, c := range counts {
29 | if c != 0 {
30 | return false
31 | }
32 | }
33 |
34 | return true
35 | }
36 |
--------------------------------------------------------------------------------
/ui/user/src/routes/admin/task-runs/[id]/+page.ts:
--------------------------------------------------------------------------------
1 | import { handleRouteError } from '$lib/errors';
2 | import { AdminService, type Project, type Task, type Thread } from '$lib/services';
3 | import { profile } from '$lib/stores';
4 | import type { PageLoad } from './$types';
5 |
6 | export const load: PageLoad = async ({ fetch, params }) => {
7 | const { id } = params;
8 |
9 | let taskRun: Thread | null = null;
10 | let task: Task | null = null;
11 | let project: Project | null = null;
12 | try {
13 | taskRun = await AdminService.getThread(id, { fetch });
14 | if (taskRun?.taskID) {
15 | task = await AdminService.getTask(taskRun.taskID, { fetch });
16 | }
17 | if (task?.projectID) {
18 | project = await AdminService.getProject(task.projectID, { fetch });
19 | }
20 | } catch (err) {
21 | handleRouteError(err, `/tasks/${id}`, profile.current);
22 | }
23 |
24 | return {
25 | taskRun,
26 | task,
27 | project
28 | };
29 | };
30 |
--------------------------------------------------------------------------------
/ui/user/src/lib/services/index.ts:
--------------------------------------------------------------------------------
1 | export * from './chat/operations';
2 | export * from './chat/types';
3 | export * from './admin/types';
4 | export { default as AdminService } from './admin';
5 | export { default as ChatService } from './chat';
6 | export { default as EditorService } from './editor/index.svelte';
7 | export type { Fetcher } from './http';
8 |
9 | export async function updateMemory(
10 | assistantId: string,
11 | projectId: string,
12 | memoryId: string,
13 | content: string
14 | ) {
15 | const response = await fetch(
16 | `/api/assistants/${assistantId}/projects/${projectId}/memories/${memoryId}`,
17 | {
18 | method: 'PUT',
19 | headers: {
20 | 'Content-Type': 'application/json'
21 | },
22 | body: JSON.stringify({ content })
23 | }
24 | );
25 |
26 | if (!response.ok) {
27 | throw new Error(`Failed to update memory: ${response.status} ${response.statusText}`);
28 | }
29 |
30 | return response.json();
31 | }
32 |
--------------------------------------------------------------------------------
/.github/workflows/weekly-snapshot.yml:
--------------------------------------------------------------------------------
1 | name: Update Snapshot Tag
2 |
3 | permissions:
4 | id-token: write
5 | contents: read
6 | packages: write
7 |
8 | on:
9 | workflow_dispatch:
10 | schedule:
11 | - cron: '0 21 * * 5'
12 |
13 | jobs:
14 | copy-tag:
15 | runs-on: depot-ubuntu-22.04
16 |
17 | steps:
18 | - name: Log in to GitHub Container Registry
19 | uses: docker/login-action@v3
20 | with:
21 | registry: ghcr.io
22 | username: ${{ github.actor }}
23 | password: ${{ secrets.GITHUB_TOKEN }}
24 |
25 | - name: Setup crane
26 | uses: imjasonh/setup-crane@v0.4
27 |
28 | - name: Copy to oss snapshot tag
29 | run: |
30 | crane tag ghcr.io/${{ github.repository }}:main main-$(date +%Y%m%d)
31 |
32 | - name: Copy to enterprise snapshot tag
33 | run: |
34 | crane tag ghcr.io/${{ github.repository }}-enterprise:main main-$(date +%Y%m%d)
35 |
--------------------------------------------------------------------------------
/pkg/api/authz/run.go:
--------------------------------------------------------------------------------
1 | package authz
2 |
3 | import (
4 | "net/http"
5 |
6 | "github.com/obot-platform/nah/pkg/router"
7 | v1 "github.com/obot-platform/obot/pkg/storage/apis/obot.obot.ai/v1"
8 | "github.com/obot-platform/obot/pkg/system"
9 | "k8s.io/apiserver/pkg/authentication/user"
10 | )
11 |
12 | func (a *Authorizer) checkRun(req *http.Request, resources *Resources, _ user.Info) (bool, error) {
13 | if resources.RunID == "" || resources.RunID == "editor" {
14 | return true, nil
15 | }
16 |
17 | if resources.Authorizated.Task == nil {
18 | return false, nil
19 | }
20 |
21 | var (
22 | wfe v1.WorkflowExecution
23 | )
24 |
25 | if err := a.get(req.Context(), router.Key(system.DefaultNamespace, resources.RunID), &wfe); err != nil {
26 | return false, err
27 | }
28 |
29 | if resources.Authorizated.Task.Name != wfe.Spec.WorkflowName {
30 | return false, nil
31 | }
32 |
33 | resources.Authorizated.Run = &wfe
34 | return true, nil
35 | }
36 |
--------------------------------------------------------------------------------
/ui/user/src/routes/mcp-registries/+page.ts:
--------------------------------------------------------------------------------
1 | import { handleRouteError } from '$lib/errors';
2 | import { ChatService } from '$lib/services';
3 | import type { AccessControlRule } from '$lib/services/admin/types';
4 | import type { PageLoad } from './$types';
5 | import { redirect } from '@sveltejs/kit';
6 |
7 | export const load: PageLoad = async ({ fetch, parent }) => {
8 | let accessControlRules: AccessControlRule[] = [];
9 | let workspaceId;
10 |
11 | const { profile } = await parent();
12 | if (profile?.hasAdminAccess?.()) {
13 | throw redirect(302, '/admin/mcp-registries');
14 | }
15 |
16 | try {
17 | workspaceId = await ChatService.fetchWorkspaceIDForProfile(profile?.id, { fetch });
18 | accessControlRules = await ChatService.listWorkspaceAccessControlRules(workspaceId, { fetch });
19 | } catch (err) {
20 | handleRouteError(err, '/mcp-registries', profile);
21 | }
22 |
23 | return {
24 | accessControlRules,
25 | workspaceId
26 | };
27 | };
28 |
--------------------------------------------------------------------------------
/apiclient/files.go:
--------------------------------------------------------------------------------
1 | package apiclient
2 |
3 | import (
4 | "context"
5 | "fmt"
6 | "net/http"
7 |
8 | "github.com/obot-platform/obot/apiclient/types"
9 | )
10 |
11 | type ListFileOptions struct {
12 | AgentID string
13 | WorkflowID string
14 | ThreadID string
15 | }
16 |
17 | func (c *Client) ListFiles(ctx context.Context, opts ListFileOptions) (result types.FileList, err error) {
18 | path := "/files"
19 | if opts.AgentID != "" {
20 | path = "/agents/" + opts.AgentID + path
21 | } else if opts.WorkflowID != "" {
22 | path = "/workflows/" + opts.WorkflowID + path
23 | } else if opts.ThreadID != "" {
24 | path = "/threads/" + opts.ThreadID + path
25 | } else {
26 | return result, fmt.Errorf("missing agentID, workflowID, or threadID")
27 | }
28 |
29 | _, resp, err := c.doRequest(ctx, http.MethodGet, path, nil)
30 | if err != nil {
31 | return
32 | }
33 | defer resp.Body.Close()
34 |
35 | _, err = toObject(resp, &result)
36 | return
37 | }
38 |
--------------------------------------------------------------------------------
/pkg/api/authz/workflow.go:
--------------------------------------------------------------------------------
1 | package authz
2 |
3 | import (
4 | "net/http"
5 |
6 | "github.com/obot-platform/nah/pkg/router"
7 | v1 "github.com/obot-platform/obot/pkg/storage/apis/obot.obot.ai/v1"
8 | "github.com/obot-platform/obot/pkg/system"
9 | "k8s.io/apiserver/pkg/authentication/user"
10 | )
11 |
12 | func (a *Authorizer) checkWorkflow(req *http.Request, resources *Resources, _ user.Info) (bool, error) {
13 | if resources.WorkflowID == "" {
14 | return true, nil
15 | }
16 |
17 | if resources.Authorizated.Thread == nil {
18 | return false, nil
19 | }
20 |
21 | var (
22 | workflow v1.Workflow
23 | )
24 |
25 | if err := a.get(req.Context(), router.Key(system.DefaultNamespace, resources.WorkflowID), &workflow); err != nil {
26 | return false, err
27 | }
28 |
29 | if resources.Authorizated.Thread.Name != workflow.Spec.ThreadName {
30 | return false, nil
31 | }
32 |
33 | resources.Authorizated.Workflow = &workflow
34 | return true, nil
35 | }
36 |
--------------------------------------------------------------------------------
/pkg/cli/tools_register.go:
--------------------------------------------------------------------------------
1 | package cli
2 |
3 | import (
4 | "fmt"
5 |
6 | "github.com/obot-platform/obot/apiclient/types"
7 | "github.com/spf13/cobra"
8 | )
9 |
10 | type ToolRegister struct {
11 | root *Obot
12 | Quiet bool `usage:"Only print IDs of created tool references:" short:"q"`
13 | }
14 |
15 | func (l *ToolRegister) Customize(cmd *cobra.Command) {
16 | cmd.Use = "register [flags] NAME REFERENCE"
17 | cmd.Args = cobra.ExactArgs(2)
18 | cmd.Aliases = []string{"add", "create", "new"}
19 | }
20 |
21 | func (l *ToolRegister) Run(cmd *cobra.Command, args []string) error {
22 | tr, err := l.root.Client.CreateToolReference(cmd.Context(), types.ToolReferenceManifest{
23 | Name: args[0],
24 | ToolType: types.ToolReferenceTypeTool,
25 | Reference: args[1],
26 | })
27 | if err != nil {
28 | return err
29 | }
30 | if l.Quiet {
31 | fmt.Println(tr.ID)
32 | } else {
33 | fmt.Println("Tool reference created:", tr.ID)
34 | }
35 | return nil
36 | }
37 |
--------------------------------------------------------------------------------
/ui/user/src/lib/components/primitives/draggable/contextRoot.ts:
--------------------------------------------------------------------------------
1 | import { getContext, setContext } from 'svelte';
2 |
3 | const CONTEXT_KEY = '@obot/context/dragable-root';
4 |
5 | export type DraggableItem
21 | {#if msg.icon === 'Profile'}
22 | 
31 | {/if}
32 |
33 | {/if}
34 |
--------------------------------------------------------------------------------
/ui/user/static/user/images/github-mark/github-mark-white.svg:
--------------------------------------------------------------------------------
1 |
--------------------------------------------------------------------------------
/ui/user/src/lib/actions/overflow.ts:
--------------------------------------------------------------------------------
1 | import popover from './popover.svelte.js';
2 |
3 | function hasOverflow(element: HTMLElement) {
4 | return element.scrollHeight > element.clientHeight || element.scrollWidth > element.clientWidth;
5 | }
6 |
7 | export function overflowToolTip(node: HTMLElement) {
8 | const { ref, tooltip } = popover({
9 | placement: 'top-end',
10 | offset: 10
11 | });
12 |
13 | node.classList.add('truncate');
14 |
15 | const p = document.createElement('p') as HTMLParagraphElement;
16 | p.classList.add('tooltip');
17 | p.textContent = node.textContent;
18 |
19 | node.insertAdjacentElement('afterend', p);
20 | node.addEventListener('mouseenter', (e) => {
21 | if (!hasOverflow(node)) {
22 | e.stopImmediatePropagation();
23 | }
24 | // Update content if changed
25 | p.textContent = node.textContent;
26 | });
27 |
28 | // Register after the above event listener to ensure we can stop propagation
29 | tooltip(p, { hover: true });
30 | ref(node);
31 | }
32 |
--------------------------------------------------------------------------------
/pkg/cli/invokeclient/input.go:
--------------------------------------------------------------------------------
1 | package invokeclient
2 |
3 | import (
4 | "github.com/obot-platform/obot/apiclient"
5 | "github.com/obot-platform/obot/apiclient/types"
6 | "github.com/obot-platform/obot/pkg/cli/textio"
7 | )
8 |
9 | type QuietInputter struct {
10 | }
11 |
12 | func (d QuietInputter) Next(previous string, resp *types.InvokeResponse) (string, bool, error) {
13 | if resp == nil {
14 | return previous, true, nil
15 | }
16 | return "", false, nil
17 | }
18 |
19 | type VerboseInputter struct {
20 | client *apiclient.Client
21 | }
22 |
23 | func nextInput() (string, bool, error) {
24 | x, err := textio.Ask("Input", "")
25 | if err != nil {
26 | return "", false, err
27 | }
28 | return x, true, nil
29 | }
30 |
31 | func (d VerboseInputter) Next(previous string, resp *types.InvokeResponse) (string, bool, error) {
32 | if resp == nil {
33 | if previous == "" {
34 | return nextInput()
35 | }
36 | return previous, true, nil
37 | }
38 |
39 | return nextInput()
40 | }
41 |
--------------------------------------------------------------------------------
/pkg/storage/apis/obot.obot.ai/v1/apppreferences.go:
--------------------------------------------------------------------------------
1 | package v1
2 |
3 | import (
4 | "github.com/obot-platform/obot/apiclient/types"
5 | metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"
6 | )
7 |
8 | // +k8s:deepcopy-gen:interfaces=k8s.io/apimachinery/pkg/runtime.Object
9 |
10 | type AppPreferences struct {
11 | metav1.TypeMeta `json:",inline"`
12 | metav1.ObjectMeta `json:"metadata,omitempty"`
13 |
14 | Spec AppPreferencesSpec `json:"spec,omitempty"`
15 | Status AppPreferencesStatus `json:"status,omitempty"`
16 | }
17 |
18 | type AppPreferencesSpec struct {
19 | Logos types.LogoPreferences `json:"logos,omitempty"`
20 | Theme types.ThemePreferences `json:"theme,omitempty"`
21 | }
22 |
23 | type AppPreferencesStatus struct{}
24 |
25 | // +k8s:deepcopy-gen:interfaces=k8s.io/apimachinery/pkg/runtime.Object
26 |
27 | type AppPreferencesList struct {
28 | metav1.TypeMeta `json:",inline"`
29 | metav1.ListMeta `json:"metadata,omitempty"`
30 |
31 | Items []AppPreferences `json:"items"`
32 | }
33 |
--------------------------------------------------------------------------------
/pkg/controller/handlers/workflow/ids.go:
--------------------------------------------------------------------------------
1 | package workflow
2 |
3 | import (
4 | "github.com/obot-platform/nah/pkg/randomtoken"
5 | "github.com/obot-platform/obot/apiclient/types"
6 | )
7 |
8 | func PopulateIDs(manifest types.WorkflowManifest) types.WorkflowManifest {
9 | manifest = *manifest.DeepCopy()
10 | ids := map[string]struct{}{}
11 | for i, step := range manifest.Steps {
12 | manifest.Steps[i] = populateStepID(ids, step)
13 | }
14 | return manifest
15 | }
16 |
17 | func nextID(seen map[string]struct{}) string {
18 | for {
19 | next, err := randomtoken.Generate()
20 | if err != nil {
21 | panic(err)
22 | }
23 | id := "si1" + next[:5]
24 | if _, ok := seen[id]; !ok {
25 | seen[id] = struct{}{}
26 | return id
27 | }
28 | }
29 | }
30 |
31 | func populateStepID(seen map[string]struct{}, step types.Step) types.Step {
32 | if step.ID == "" {
33 | step.ID = nextID(seen)
34 | } else if _, ok := seen[step.ID]; ok {
35 | step.ID = nextID(seen)
36 | }
37 | return step
38 | }
39 |
--------------------------------------------------------------------------------
/pkg/mcp/resources.go:
--------------------------------------------------------------------------------
1 | package mcp
2 |
3 | import (
4 | "context"
5 | "fmt"
6 |
7 | "github.com/nanobot-ai/nanobot/pkg/mcp"
8 | )
9 |
10 | func (sm *SessionManager) ListResources(ctx context.Context, serverConfig ServerConfig) ([]mcp.Resource, error) {
11 | client, err := sm.clientForMCPServer(ctx, serverConfig)
12 | if err != nil {
13 | return nil, err
14 | }
15 |
16 | resp, err := client.ListResources(ctx)
17 | if err != nil {
18 | return nil, fmt.Errorf("failed to list MCP resources: %w", err)
19 | }
20 |
21 | return resp.Resources, nil
22 | }
23 |
24 | func (sm *SessionManager) ReadResource(ctx context.Context, serverConfig ServerConfig, uri string) ([]mcp.ResourceContent, error) {
25 | client, err := sm.clientForMCPServer(ctx, serverConfig)
26 | if err != nil {
27 | return nil, err
28 | }
29 |
30 | resp, err := client.ReadResource(ctx, uri)
31 | if err != nil {
32 | return nil, fmt.Errorf("failed to get MCP resource: %w", err)
33 | }
34 |
35 | return resp.Contents, nil
36 | }
37 |
--------------------------------------------------------------------------------
/ui/user/src/routes/admin/mcp-servers/c/[id]/instance/[ms_id]/+page.ts:
--------------------------------------------------------------------------------
1 | import { DEFAULT_MCP_CATALOG_ID } from '$lib/constants';
2 | import { handleRouteError } from '$lib/errors';
3 | import { AdminService, ChatService } from '$lib/services';
4 | import { profile } from '$lib/stores';
5 | import type { PageLoad } from './$types';
6 |
7 | export const load: PageLoad = async ({ params, fetch }) => {
8 | const catalogEntryId = params.id;
9 | const mcpServerId = params.ms_id;
10 |
11 | let catalogEntry;
12 | let mcpServer;
13 | try {
14 | catalogEntry = await AdminService.getMCPCatalogEntry(DEFAULT_MCP_CATALOG_ID, catalogEntryId, {
15 | fetch
16 | });
17 | mcpServer = await ChatService.getSingleOrRemoteMcpServer(mcpServerId, { fetch });
18 | } catch (err) {
19 | handleRouteError(
20 | err,
21 | `/admin/mcp-servers/c/${catalogEntryId}/instance/${mcpServerId}`,
22 | profile.current
23 | );
24 | }
25 |
26 | return {
27 | catalogEntry,
28 | mcpServerId,
29 | mcpServer
30 | };
31 | };
32 |
--------------------------------------------------------------------------------
/ui/user/src/lib/components/ReLoginDialog.svelte:
--------------------------------------------------------------------------------
1 |
16 |
17 |
33 |
--------------------------------------------------------------------------------
/ui/user/src/routes/admin/mcp-servers/w/[wid]/c/[id]/instance/[ms_id]/+page.ts:
--------------------------------------------------------------------------------
1 | import { handleRouteError } from '$lib/errors';
2 | import { ChatService } from '$lib/services';
3 | import { profile } from '$lib/stores';
4 | import type { PageLoad } from './$types';
5 |
6 | export const load: PageLoad = async ({ params, fetch }) => {
7 | const workspaceId = params.wid;
8 | const catalogEntryId = params.id;
9 | const mcpServerId = params.ms_id;
10 | let mcpServer;
11 |
12 | let catalogEntry;
13 | try {
14 | catalogEntry = await ChatService.getWorkspaceMCPCatalogEntry(workspaceId, catalogEntryId, {
15 | fetch
16 | });
17 | mcpServer = await ChatService.getSingleOrRemoteMcpServer(mcpServerId, { fetch });
18 | } catch (err) {
19 | handleRouteError(
20 | err,
21 | `/admin/mcp-servers/w/${workspaceId}/c/${catalogEntryId}/instance/${mcpServerId}`,
22 | profile.current
23 | );
24 | }
25 |
26 | return {
27 | workspaceId,
28 | catalogEntry,
29 | mcpServerId,
30 | mcpServer
31 | };
32 | };
33 |
--------------------------------------------------------------------------------
/pkg/cli/threadprint.go:
--------------------------------------------------------------------------------
1 | package cli
2 |
3 | import (
4 | "github.com/obot-platform/obot/apiclient"
5 | "github.com/obot-platform/obot/pkg/cli/events"
6 | "github.com/spf13/cobra"
7 | )
8 |
9 | type ThreadPrint struct {
10 | root *Obot
11 | Quiet bool `usage:"Only print response content of threads" short:"q"`
12 | Follow bool `usage:"Follow the thread and print new events" short:"f"`
13 | Verbose bool `usage:"Print more information" short:"v"`
14 | }
15 |
16 | func (l *ThreadPrint) Customize(cmd *cobra.Command) {
17 | cmd.Use = "print [flags] [THREAD_ID]"
18 | cmd.Args = cobra.ExactArgs(1)
19 | }
20 |
21 | func (l *ThreadPrint) Run(cmd *cobra.Command, args []string) error {
22 | var (
23 | printer = events.NewPrinter(cmd.Context(), l.root.Client, l.Quiet, l.Verbose)
24 | )
25 |
26 | events, err := l.root.Client.ThreadEvents(cmd.Context(), args[0], apiclient.ThreadEventsOptions{
27 | Follow: l.Follow,
28 | })
29 | if err != nil {
30 | return err
31 | }
32 |
33 | return printer.Print(events)
34 | }
35 |
--------------------------------------------------------------------------------
/ui/user/src/routes/mcp-servers/c/[id]/instance/[ms_id]/details/+page.ts:
--------------------------------------------------------------------------------
1 | import { handleRouteError } from '$lib/errors';
2 | import { ChatService } from '$lib/services';
3 | import { profile } from '$lib/stores';
4 | import type { PageLoad } from './$types';
5 |
6 | export const load: PageLoad = async ({ params, fetch }) => {
7 | const catalogEntryId = params.id;
8 | const mcpServerId = params.ms_id;
9 | let workspaceId;
10 | let catalogEntry;
11 | try {
12 | workspaceId = await ChatService.fetchWorkspaceIDForProfile(profile.current?.id, { fetch });
13 | } catch (_err) {
14 | // can happen if basic user atm
15 | workspaceId = undefined;
16 | }
17 |
18 | try {
19 | catalogEntry = await ChatService.getMCP(catalogEntryId, {
20 | fetch
21 | });
22 | } catch (err) {
23 | handleRouteError(
24 | err,
25 | `/mcp-servers/c/${catalogEntryId}/instance/${mcpServerId}`,
26 | profile.current
27 | );
28 | }
29 |
30 | return {
31 | workspaceId,
32 | catalogEntry,
33 | mcpServerId
34 | };
35 | };
36 |
--------------------------------------------------------------------------------
/.goreleaser.yaml:
--------------------------------------------------------------------------------
1 | version: 2
2 |
3 | project_name: "obot"
4 |
5 | builds:
6 | - id: build
7 | main: .
8 | goos:
9 | - linux
10 | - darwin
11 | - windows
12 | goarch:
13 | - amd64
14 | - arm64
15 | ldflags:
16 | - -X "github.com/obot-platform/obot/pkg/version.Tag=v{{ .Version }}"
17 |
18 | archives:
19 | - format: tar.gz
20 | name_template: "{{ .ProjectName }}_v{{ .Version }}_{{ .Os }}_{{ .Arch }}"
21 | format_overrides:
22 | - goos: windows
23 | format: zip
24 |
25 | release:
26 | github:
27 | owner: "obot-platform"
28 | name: "obot"
29 | make_latest: false
30 | prerelease: auto
31 |
32 | brews:
33 | - name: obot
34 | description: "Obot CLI"
35 | install: |
36 | bin.install "obot"
37 | homepage: "https://github.com/obot-platform/obot"
38 | skip_upload: false
39 | directory: "Formula"
40 | repository:
41 | owner: obot-platform
42 | name: homebrew-tap
43 | token: "{{ .Env.TAP_GITHUB_TOKEN }}"
44 |
--------------------------------------------------------------------------------
/ui/user/src/lib/components/edit/SystemPrompt.svelte:
--------------------------------------------------------------------------------
1 |
13 |
14 |
25 |
29 |
26 |
28 |
19 | {
22 | goto('/admin/filters');
23 | }}
24 | readonly={profile.current.isAdminReadonly?.()}
25 | />
26 |
27 |