mirror of
https://github.com/hanzoai/team.git
synced 2026-09-30 01:57:35 +00:00
The server module named github.com/hanzoai/team/server/v8 — a path that resolves to the retired workspace's repository, not this one — while server/public still published github.com/mattermost/mattermost/server/public. Both are github.com/hanzoteam/server/... now, which is where this code actually lives. That second half is what made the binary unbootable. Upstream's public path stayed claimed by upstream, mattermost-plugin-ai imported it, and the build linked public/model twice; public/plugin's gob.Register then ran twice under one name and panicked at init, before main. Reverting the rename traded the brand for a working binary. Rebranding the plugin alongside it needs no such trade: the agents fork is github.com/hanzoteam/agents/v2 against our public module, so no module named mattermost/mattermost is in the graph at all. Measured: `go list -deps ./cmd/mattermost` names exactly one public/model, and it is ours.
247 lines
8.7 KiB
Go
247 lines
8.7 KiB
Go
// Copyright (c) 2015-present Mattermost, Inc. All Rights Reserved.
|
|
// See LICENSE.txt for license information.
|
|
|
|
package slashcommands
|
|
|
|
import (
|
|
"net/http"
|
|
"strings"
|
|
|
|
"github.com/hanzoteam/server/server/public/model"
|
|
"github.com/hanzoteam/server/server/public/shared/i18n"
|
|
"github.com/hanzoteam/server/server/public/shared/mlog"
|
|
"github.com/hanzoteam/server/server/public/shared/request"
|
|
"github.com/hanzoteam/server/server/v8/channels/app"
|
|
)
|
|
|
|
type MobileLogsProvider struct {
|
|
}
|
|
|
|
const (
|
|
CmdMobileLogs = "mobile-logs"
|
|
)
|
|
|
|
func init() {
|
|
app.RegisterCommandProvider(&MobileLogsProvider{})
|
|
}
|
|
|
|
func mobileLogsCrossUserUnavailableResponse(args *model.CommandArgs) *model.CommandResponse {
|
|
return &model.CommandResponse{
|
|
Text: args.T("api.command_mobile_logs.cross_user_unavailable.app_error"),
|
|
ResponseType: model.CommandResponseTypeEphemeral,
|
|
}
|
|
}
|
|
|
|
func logMobileLogsAttachAppLogsAudit(a *app.App, rctx request.CTX, actorUserID, targetUserID, value string) {
|
|
rec := &model.AuditRecord{
|
|
EventName: model.AuditEventUpdatePreferences,
|
|
Status: model.AuditStatusSuccess,
|
|
Actor: model.AuditEventActor{
|
|
UserId: actorUserID,
|
|
SessionId: rctx.Session().Id,
|
|
Client: rctx.UserAgent(),
|
|
IpAddress: rctx.IPAddress(),
|
|
XForwardedFor: rctx.XForwardedFor(),
|
|
},
|
|
Meta: map[string]any{
|
|
model.AuditKeyAPIPath: rctx.Path(),
|
|
model.AuditKeyClusterID: a.GetClusterId(),
|
|
},
|
|
EventData: model.AuditEventData{
|
|
Parameters: map[string]any{
|
|
"source": "slash_command/" + CmdMobileLogs,
|
|
"target_user_id": targetUserID,
|
|
"preference_category": model.PreferenceCategoryAdvancedSettings,
|
|
"preference_name": model.PreferenceNameAttachAppLogs,
|
|
"value": value,
|
|
},
|
|
PriorState: map[string]any{},
|
|
ResultState: map[string]any{},
|
|
ObjectType: "user_preference",
|
|
},
|
|
}
|
|
a.LogAuditRecWithLevel(rctx, rec, app.LevelAPI, nil)
|
|
}
|
|
|
|
func (*MobileLogsProvider) GetTrigger() string {
|
|
return CmdMobileLogs
|
|
}
|
|
|
|
func (*MobileLogsProvider) GetCommand(a *app.App, T i18n.TranslateFunc) *model.Command {
|
|
return &model.Command{
|
|
Trigger: CmdMobileLogs,
|
|
AutoComplete: true,
|
|
AutoCompleteDesc: T("api.command_mobile_logs.desc"),
|
|
AutoCompleteHint: T("api.command_mobile_logs.hint"),
|
|
DisplayName: T("api.command_mobile_logs.name"),
|
|
}
|
|
}
|
|
|
|
func (*MobileLogsProvider) DoCommand(a *app.App, rctx request.CTX, args *model.CommandArgs, message string) *model.CommandResponse {
|
|
fields := strings.Fields(message)
|
|
if len(fields) == 0 || len(fields) > 2 {
|
|
return &model.CommandResponse{
|
|
Text: args.T("api.command_mobile_logs.usage"),
|
|
ResponseType: model.CommandResponseTypeEphemeral,
|
|
}
|
|
}
|
|
|
|
action := strings.ToLower(fields[0])
|
|
if action != "on" && action != "off" && action != "status" {
|
|
return &model.CommandResponse{
|
|
Text: args.T("api.command_mobile_logs.usage"),
|
|
ResponseType: model.CommandResponseTypeEphemeral,
|
|
}
|
|
}
|
|
|
|
targetUserID := args.UserId
|
|
targetDisplayName := args.T("api.command_mobile_logs.you")
|
|
|
|
if len(fields) > 1 {
|
|
username := strings.TrimPrefix(fields[1], "@")
|
|
username = strings.ToLower(username)
|
|
|
|
if !model.IsValidUsername(username) {
|
|
return &model.CommandResponse{
|
|
Text: args.T("api.command_mobile_logs.user_not_found.app_error", map[string]any{"Username": username}),
|
|
ResponseType: model.CommandResponseTypeEphemeral,
|
|
}
|
|
}
|
|
|
|
caller, appErr := a.GetUser(args.UserId)
|
|
if appErr != nil {
|
|
rctx.Logger().Error("Failed to get caller for mobile-logs command", mlog.String("user_id", args.UserId), mlog.Err(appErr))
|
|
return &model.CommandResponse{
|
|
Text: args.T("api.command_mobile_logs.update_error.app_error"),
|
|
ResponseType: model.CommandResponseTypeEphemeral,
|
|
}
|
|
}
|
|
|
|
isSelf := username == strings.ToLower(caller.Username)
|
|
if isSelf {
|
|
targetUserID = caller.Id
|
|
targetDisplayName = "@" + caller.Username
|
|
} else {
|
|
// Cross-user: callers without system admin get one neutral outcome for any failure
|
|
// (unknown user, deactivated, disallowed target, or missing role) to avoid username
|
|
// enumeration. System admins still get explicit not-found messages for support workflows.
|
|
if !a.HasPermissionTo(args.UserId, model.PermissionManageSystem) && !a.HasPermissionTo(args.UserId, model.PermissionEditOtherUsers) {
|
|
return mobileLogsCrossUserUnavailableResponse(args)
|
|
}
|
|
|
|
callerHasManageSystem := a.HasPermissionTo(args.UserId, model.PermissionManageSystem)
|
|
|
|
targetUser, lookupErr := a.GetUserByUsername(username)
|
|
if lookupErr != nil {
|
|
if lookupErr.StatusCode == http.StatusNotFound {
|
|
if callerHasManageSystem {
|
|
return &model.CommandResponse{
|
|
Text: args.T("api.command_mobile_logs.user_not_found.app_error", map[string]any{"Username": username}),
|
|
ResponseType: model.CommandResponseTypeEphemeral,
|
|
}
|
|
}
|
|
return mobileLogsCrossUserUnavailableResponse(args)
|
|
}
|
|
rctx.Logger().Error("Failed to get user by username", mlog.String("username", username), mlog.Err(lookupErr))
|
|
if callerHasManageSystem {
|
|
return &model.CommandResponse{
|
|
Text: args.T("api.command_mobile_logs.user_not_found.app_error", map[string]any{"Username": username}),
|
|
ResponseType: model.CommandResponseTypeEphemeral,
|
|
}
|
|
}
|
|
return mobileLogsCrossUserUnavailableResponse(args)
|
|
}
|
|
|
|
if targetUser.DeleteAt != 0 {
|
|
if callerHasManageSystem {
|
|
return &model.CommandResponse{
|
|
Text: args.T("api.command_mobile_logs.user_not_found.app_error", map[string]any{"Username": username}),
|
|
ResponseType: model.CommandResponseTypeEphemeral,
|
|
}
|
|
}
|
|
return mobileLogsCrossUserUnavailableResponse(args)
|
|
}
|
|
|
|
targetUserID = targetUser.Id
|
|
targetDisplayName = "@" + targetUser.Username
|
|
|
|
if !callerHasManageSystem && targetUser.IsSystemAdmin() {
|
|
return mobileLogsCrossUserUnavailableResponse(args)
|
|
}
|
|
}
|
|
}
|
|
|
|
switch action {
|
|
case "on":
|
|
prefs := model.Preferences{
|
|
{
|
|
UserId: targetUserID,
|
|
Category: model.PreferenceCategoryAdvancedSettings,
|
|
Name: model.PreferenceNameAttachAppLogs,
|
|
Value: "true",
|
|
},
|
|
}
|
|
if err := a.UpdatePreferences(rctx, targetUserID, prefs); err != nil {
|
|
rctx.Logger().Error("Failed to update attach_app_logs preference", mlog.String("user_id", targetUserID), mlog.Err(err))
|
|
return &model.CommandResponse{
|
|
Text: args.T("api.command_mobile_logs.update_error.app_error"),
|
|
ResponseType: model.CommandResponseTypeEphemeral,
|
|
}
|
|
}
|
|
logMobileLogsAttachAppLogsAudit(a, rctx, args.UserId, targetUserID, "true")
|
|
return &model.CommandResponse{
|
|
Text: args.T("api.command_mobile_logs.enabled", map[string]any{"User": targetDisplayName}),
|
|
ResponseType: model.CommandResponseTypeEphemeral,
|
|
}
|
|
|
|
case "off":
|
|
prefs := model.Preferences{
|
|
{
|
|
UserId: targetUserID,
|
|
Category: model.PreferenceCategoryAdvancedSettings,
|
|
Name: model.PreferenceNameAttachAppLogs,
|
|
Value: "false",
|
|
},
|
|
}
|
|
if err := a.UpdatePreferences(rctx, targetUserID, prefs); err != nil {
|
|
rctx.Logger().Error("Failed to update attach_app_logs preference", mlog.String("user_id", targetUserID), mlog.Err(err))
|
|
return &model.CommandResponse{
|
|
Text: args.T("api.command_mobile_logs.update_error.app_error"),
|
|
ResponseType: model.CommandResponseTypeEphemeral,
|
|
}
|
|
}
|
|
logMobileLogsAttachAppLogsAudit(a, rctx, args.UserId, targetUserID, "false")
|
|
return &model.CommandResponse{
|
|
Text: args.T("api.command_mobile_logs.disabled", map[string]any{"User": targetDisplayName}),
|
|
ResponseType: model.CommandResponseTypeEphemeral,
|
|
}
|
|
|
|
case "status":
|
|
pref, err := a.GetPreferenceByCategoryAndNameForUser(rctx, targetUserID, model.PreferenceCategoryAdvancedSettings, model.PreferenceNameAttachAppLogs)
|
|
if err != nil {
|
|
rctx.Logger().Debug("Could not get attach_app_logs preference, defaulting to off", mlog.String("user_id", targetUserID), mlog.Err(err))
|
|
return &model.CommandResponse{
|
|
Text: args.T("api.command_mobile_logs.status_off", map[string]any{"User": targetDisplayName}),
|
|
ResponseType: model.CommandResponseTypeEphemeral,
|
|
}
|
|
}
|
|
if pref.Value == "true" {
|
|
return &model.CommandResponse{
|
|
Text: args.T("api.command_mobile_logs.status_on", map[string]any{"User": targetDisplayName}),
|
|
ResponseType: model.CommandResponseTypeEphemeral,
|
|
}
|
|
}
|
|
return &model.CommandResponse{
|
|
Text: args.T("api.command_mobile_logs.status_off", map[string]any{"User": targetDisplayName}),
|
|
ResponseType: model.CommandResponseTypeEphemeral,
|
|
}
|
|
|
|
default:
|
|
// Defensive: action is already validated to be "on", "off", or "status" above.
|
|
return &model.CommandResponse{
|
|
Text: args.T("api.command_mobile_logs.usage"),
|
|
ResponseType: model.CommandResponseTypeEphemeral,
|
|
}
|
|
}
|
|
}
|