dify/web/app/components/plugins/plugin-page/use-reference-setting.ts

import type { PluginCategoryEnum } from '../types'
import { toast } from '@langgenius/dify-ui/toast'
import { useSuspenseQuery } from '@tanstack/react-query'
import { useAtomValue } from 'jotai'
import { useMemo } from 'react'
import { useTranslation } from 'react-i18next'
import {
  workspacePermissionKeysAtom,
  workspacePermissionKeysLoadingAtom,
} from '@/context/permission-state'
import { langGeniusVersionInfoAtom } from '@/context/version-state'
import {
  currentWorkspaceLoadingAtom,
  isCurrentWorkspaceManagerAtom,
  isCurrentWorkspaceOwnerAtom,
} from '@/context/workspace-state'
import { systemFeaturesQueryOptions } from '@/features/system-features/client'
import {
  useInvalidateReferenceSettings,
  useMutationPluginPermissionSettings,
  useMutationReferenceSettings,
  usePluginAutoUpgradeSettings,
  usePluginPermissionSettings,
} from '@/service/use-plugins'
import { hasPermission } from '@/utils/permission'
import { hasLegacyPluginPermissionAccess } from '../plugin-permissions'

const useCanSetPluginSettings = () => {
  const workspacePermissionKeys = useAtomValue(workspacePermissionKeysAtom)
  const { data: rbacEnabled } = useSuspenseQuery({
    ...systemFeaturesQueryOptions(),
    select: (s) => s.rbac_enabled,
  })
  const canSetPluginPreferences = hasPermission(
    workspacePermissionKeys,
    'plugin.plugin_preferences',
  )

  return {
    canSetPermissions: !rbacEnabled && canSetPluginPreferences,
    canSetPluginPreferences,
  }
}

export const usePluginSettingsAccess = () => {
  const { t } = useTranslation()
  const isCurrentWorkspaceManager = useAtomValue(isCurrentWorkspaceManagerAtom)
  const isCurrentWorkspaceOwner = useAtomValue(isCurrentWorkspaceOwnerAtom)
  const isLoadingCurrentWorkspace = useAtomValue(currentWorkspaceLoadingAtom)
  const isLoadingWorkspacePermissionKeys = useAtomValue(workspacePermissionKeysLoadingAtom)
  const workspacePermissionKeys = useAtomValue(workspacePermissionKeysAtom)
  const langGeniusVersionInfo = useAtomValue(langGeniusVersionInfoAtom)
  const { data: rbacEnabled } = useSuspenseQuery({
    ...systemFeaturesQueryOptions(),
    select: (s) => s.rbac_enabled,
  })
  const { canSetPermissions, canSetPluginPreferences } = useCanSetPluginSettings()
  const permissionQuery = usePluginPermissionSettings()
  const { data: permissions } = permissionQuery
  const { mutate: setPluginPermissionSettings, isPending: isPermissionUpdatePending } =
    useMutationPluginPermissionSettings({
      onSuccess: () => {
        toast.success(t(($) => $['api.actionSuccess'], { ns: 'common' }))
      },
    })
  const isAdminOrOwner = isCurrentWorkspaceManager || isCurrentWorkspaceOwner
  const legacyCanInstallPlugin = hasLegacyPluginPermissionAccess({
    isAdminOrOwner,
    permission: permissions?.install_permission,
    rbacEnabled,
  })
  const legacyCanDebugPlugin = hasLegacyPluginPermissionAccess({
    isAdminOrOwner,
    permission: permissions?.debug_permission,
    rbacEnabled,
  })
  const canInstallPlugin =
    hasPermission(workspacePermissionKeys, 'plugin.install') && legacyCanInstallPlugin
  const canUpdatePlugin =
    hasPermission(workspacePermissionKeys, 'plugin.install') && legacyCanInstallPlugin
  const canDeletePlugin =
    hasPermission(workspacePermissionKeys, 'plugin.delete') && legacyCanInstallPlugin
  const canDebugPlugin = rbacEnabled
    ? hasPermission(workspacePermissionKeys, 'plugin.debug')
    : legacyCanDebugPlugin

  return {
    permission: permissions,
    setPluginPermissionSettings,
    canInstallPlugin,
    canUpdatePlugin,
    canDeletePlugin,
    canDebugPlugin,
    canSetPluginPreferences,
    canManagement: canInstallPlugin,
    canDebugger: canDebugPlugin,
    canSetPermissions,
    currentDifyVersion: langGeniusVersionInfo?.current_version,
    isPermissionLoading:
      permissionQuery.isLoading ||
      permissionQuery.isFetching ||
      !!isLoadingCurrentWorkspace ||
      !!isLoadingWorkspacePermissionKeys,
    permissionError: permissionQuery.error,
    isPermissionUpdatePending,
  }
}

const useReferenceSetting = (category: PluginCategoryEnum) => {
  const { t } = useTranslation()
  const permissionAccess = usePluginSettingsAccess()
  const autoUpgradeQuery = usePluginAutoUpgradeSettings(category)
  const data =
    permissionAccess.permission && autoUpgradeQuery.data?.auto_upgrade
      ? {
          permission: permissionAccess.permission,
          auto_upgrade: autoUpgradeQuery.data.auto_upgrade,
        }
      : undefined
  const invalidateReferenceSettings = useInvalidateReferenceSettings()
  const { mutate: updateReferenceSetting, isPending: isUpdatePending } =
    useMutationReferenceSettings({
      category,
      currentReferenceSetting: data,
      onSuccess: () => {
        invalidateReferenceSettings()
        toast.success(t(($) => $['api.actionSuccess'], { ns: 'common' }))
      },
    })

  return {
    referenceSetting: data,
    setReferenceSettings: updateReferenceSetting,
    canManagement: permissionAccess.canManagement,
    canDebugger: permissionAccess.canDebugger,
    canInstallPlugin: permissionAccess.canInstallPlugin,
    canUpdatePlugin: permissionAccess.canUpdatePlugin,
    canDeletePlugin: permissionAccess.canDeletePlugin,
    canDebugPlugin: permissionAccess.canDebugPlugin,
    canSetPermissions: permissionAccess.canSetPermissions,
    canSetPluginPreferences: permissionAccess.canSetPluginPreferences,
    currentDifyVersion: permissionAccess.currentDifyVersion,
    isPermissionLoading: permissionAccess.isPermissionLoading,
    permissionError: permissionAccess.permissionError,
    isReferenceSettingLoading: autoUpgradeQuery.isLoading || autoUpgradeQuery.isFetching,
    referenceSettingError: autoUpgradeQuery.error,
    isUpdatePending,
  }
}

export const useCanInstallPluginFromMarketplace = () => {
  const { data: systemFeatures } = useSuspenseQuery(systemFeaturesQueryOptions())
  const marketplaceAccess = systemFeatures.enable_marketplace
  const rbacEnabled = systemFeatures.rbac_enabled
  const isCurrentWorkspaceManager = useAtomValue(isCurrentWorkspaceManagerAtom)
  const isCurrentWorkspaceOwner = useAtomValue(isCurrentWorkspaceOwnerAtom)
  const workspacePermissionKeys = useAtomValue(workspacePermissionKeysAtom)
  const permissionQuery = usePluginPermissionSettings()
  const { data: permissions } = permissionQuery
  const legacyCanInstallPlugin = hasLegacyPluginPermissionAccess({
    isAdminOrOwner: isCurrentWorkspaceManager || isCurrentWorkspaceOwner,
    permission: permissions?.install_permission,
    rbacEnabled,
  })
  const canInstallPlugin =
    hasPermission(workspacePermissionKeys, 'plugin.install') && legacyCanInstallPlugin

  const canInstallPluginFromMarketplace = useMemo(() => {
    return Boolean(marketplaceAccess && canInstallPlugin)
  }, [marketplaceAccess, canInstallPlugin])

  return {
    canInstallPluginFromMarketplace,
  }
}

export default useReferenceSetting