snapshot of https://github.com/RocketChat/Rocket.Chat.git (develop, 2026-09-16; blobs > 131072B omitted)

apps/meteor/ee/server/meteor-methods/getReadReceipts.ts

@@ -0,0 +1,52 @@
+import type { IReadReceiptWithUser, IMessage } from '@rocket.chat/core-typings';
+import type { ServerMethods } from '@rocket.chat/ddp-client';
+import { License } from '@rocket.chat/license';
+import { Messages } from '@rocket.chat/models';
+import { check } from 'meteor/check';
+import { Meteor } from 'meteor/meteor';
+
+import { canAccessRoomIdAsync } from '../../../server/lib/authorization/canAccessRoom';
+import { methodDeprecationLogger } from '../../../server/lib/deprecationWarningLogger';
+import { ReadReceipt } from '../lib/message-read-receipt/ReadReceipt';
+
+declare module '@rocket.chat/ddp-client' {
+	// eslint-disable-next-line @typescript-eslint/naming-convention
+	interface ServerMethods {
+		getReadReceipts(options: { messageId: IMessage['_id'] }): IReadReceiptWithUser[];
+	}
+}
+
+export const getReadReceiptsFunction = async function (messageId: IMessage['_id'], userId: string): Promise<IReadReceiptWithUser[]> {
+	if (!License.hasModule('message-read-receipt')) {
+		throw new Meteor.Error('error-action-not-allowed', 'This is an enterprise feature', { method: 'getReadReceipts' });
+	}
+	check(messageId, String);
+
+	const message = await Messages.findOneById(messageId, { projection: { _id: 1, rid: 1, receiptsArchived: 1 } });
+	if (!message) {
+		throw new Meteor.Error('error-invalid-message', 'Invalid message', {
+			method: 'getReadReceipts',
+		});
+	}
+
+	if (!(await canAccessRoomIdAsync(message.rid, userId))) {
+		throw new Meteor.Error('error-invalid-room', 'Invalid room', { method: 'getReadReceipts' });
+	}
+
+	return ReadReceipt.getReceipts(message);
+};
+
+Meteor.methods<ServerMethods>({
+	async getReadReceipts({ messageId }) {
+		methodDeprecationLogger.method('getReadReceipts', '9.0.0', '/v1/chat.getMessageReadReceipts');
+
+		check(messageId, String);
+
+		const uid = Meteor.userId();
+		if (!uid) {
+			throw new Meteor.Error('error-invalid-user', 'Invalid user', { method: 'getReadReceipts' });
+		}
+
+		return getReadReceiptsFunction(messageId, uid);
+	},
+});

apps/meteor/ee/server/meteor-methods/license.ts

@@ -0,0 +1,38 @@
+import type { ILicenseTag, LicenseModule } from '@rocket.chat/core-typings';
+import type { ServerMethods } from '@rocket.chat/ddp-client';
+import { License } from '@rocket.chat/license';
+import { check } from 'meteor/check';
+import { Meteor } from 'meteor/meteor';
+
+import { methodDeprecationLogger } from '../../../server/lib/deprecationWarningLogger';
+
+declare module '@rocket.chat/ddp-client' {
+	// eslint-disable-next-line @typescript-eslint/naming-convention
+	interface ServerMethods {
+		'license:hasLicense'(feature: string): boolean;
+		'license:getModules'(): string[];
+		'license:getTags'(): ILicenseTag[];
+		'license:isEnterprise'(): boolean;
+	}
+}
+
+Meteor.methods<ServerMethods>({
+	'license:hasLicense'(feature: string) {
+		methodDeprecationLogger.method('license:hasLicense', '9.0.0', '/v1/licenses.info');
+		check(feature, String);
+
+		return License.hasModule(feature as LicenseModule);
+	},
+	'license:getModules'() {
+		methodDeprecationLogger.method('license:getModules', '9.0.0', '/v1/licenses.info');
+		return License.getModules();
+	},
+	'license:getTags'() {
+		methodDeprecationLogger.method('license:getTags', '9.0.0', '/v1/licenses.info');
+		return License.getTags();
+	},
+	'license:isEnterprise'() {
+		methodDeprecationLogger.method('license:isEnterprise', '9.0.0', '/v1/licenses.info');
+		return License.hasValidLicense();
+	},
+});

apps/meteor/ee/server/meteor-methods/removeCannedResponse.ts

@@ -0,0 +1,27 @@
+import { CannedResponse } from '@rocket.chat/models';
+import { check } from 'meteor/check';
+import { Meteor } from 'meteor/meteor';
+
+import { hasPermissionAsync } from '../../../server/lib/authorization/hasPermission';
+import notifications from '../../../server/lib/notifications/core/lib/Notifications';
+
+export const removeCannedResponse = async (uid: string, _id: string): Promise<void> => {
+	if (!(await hasPermissionAsync(uid, 'remove-canned-responses'))) {
+		throw new Meteor.Error('error-not-allowed', 'Not allowed', {
+			method: 'removeCannedResponse',
+		});
+	}
+
+	check(_id, String);
+
+	const cannedResponse = await CannedResponse.findOneById(_id);
+	if (!cannedResponse) {
+		throw new Meteor.Error('error-canned-response-not-found', 'Canned Response not found', {
+			method: 'removeCannedResponse',
+		});
+	}
+
+	notifications.streamCannedResponses.emit('canned-responses', { type: 'removed', _id });
+
+	await CannedResponse.removeById(_id);
+};

apps/meteor/ee/server/meteor-methods/saveCannedResponse.ts

@@ -0,0 +1,115 @@
+import type { IOmnichannelCannedResponse, ILivechatDepartment } from '@rocket.chat/core-typings';
+import { LivechatDepartment, CannedResponse, Users } from '@rocket.chat/models';
+import { Match, check } from 'meteor/check';
+import { Meteor } from 'meteor/meteor';
+
+import { hasPermissionAsync } from '../../../server/lib/authorization/hasPermission';
+import notifications from '../../../server/lib/notifications/core/lib/Notifications';
+
+type ResponseData = {
+	shortcut: string;
+	text: string;
+	scope: string;
+	tags?: string[];
+	departmentId?: string;
+};
+
+export const saveCannedResponse = async (
+	userId: string,
+	responseData: ResponseData,
+	_id?: string,
+): Promise<Omit<IOmnichannelCannedResponse, '_updatedAt' | '_createdAt'> & { _createdAt?: Date }> => {
+	if (!(await hasPermissionAsync(userId, 'save-canned-responses'))) {
+		throw new Meteor.Error('error-not-allowed', 'Not allowed', { method: 'saveCannedResponse' });
+	}
+
+	check(_id, Match.Maybe(String));
+
+	check(responseData, {
+		shortcut: String,
+		text: String,
+		scope: String,
+		tags: Match.Maybe([String]),
+		departmentId: Match.Maybe(String),
+	});
+
+	const canSaveAll = await hasPermissionAsync(userId, 'save-all-canned-responses');
+	if (!canSaveAll && ['global'].includes(responseData.scope)) {
+		throw new Meteor.Error('error-not-allowed', 'Not allowed to modify canned responses on *global* scope', {
+			method: 'saveCannedResponse',
+		});
+	}
+
+	const canSaveDepartment = await hasPermissionAsync(userId, 'save-department-canned-responses');
+	if (!canSaveAll && !canSaveDepartment && ['department'].includes(responseData.scope)) {
+		throw new Meteor.Error('error-not-allowed', 'Not allowed to modify canned responses on *department* scope', {
+			method: 'saveCannedResponse',
+		});
+	}
+
+	// to avoid inconsistencies
+	if (responseData.scope === 'user') {
+		delete responseData.departmentId;
+	}
+	// TODO: check if the department i'm trying to save is a department i can interact with
+
+	// check if the response already exists and we're not updating one
+	const duplicateShortcut = await CannedResponse.findOneByShortcut(responseData.shortcut, {
+		projection: { _id: 1 },
+	});
+	if ((!_id && duplicateShortcut) || (_id && duplicateShortcut && duplicateShortcut._id !== _id)) {
+		throw new Meteor.Error('error-invalid-shortcut', 'Shortcut provided already exists', {
+			method: 'saveCannedResponse',
+		});
+	}
+
+	if (responseData.scope === 'department' && !responseData.departmentId) {
+		throw new Meteor.Error('error-invalid-department', 'Invalid department', {
+			method: 'saveCannedResponse',
+		});
+	}
+
+	if (
+		responseData.departmentId &&
+		!(await LivechatDepartment.findOneById<Pick<ILivechatDepartment, '_id'>>(responseData.departmentId, { projection: { _id: 1 } }))
+	) {
+		throw new Meteor.Error('error-invalid-department', 'Invalid department', {
+			method: 'saveCannedResponse',
+		});
+	}
+
+	let result: Omit<IOmnichannelCannedResponse, '_updatedAt' | '_createdAt'> & { _createdAt?: Date };
+
+	if (_id) {
+		const cannedResponse = await CannedResponse.findOneById(_id);
+		if (!cannedResponse) {
+			throw new Meteor.Error('error-canned-response-not-found', 'Canned Response not found', {
+				method: 'saveCannedResponse',
+			});
+		}
+
+		result = await CannedResponse.updateCannedResponse(_id, {
+			...responseData,
+			...(cannedResponse.scope === 'user' && { userId: cannedResponse.userId }),
+			createdBy: cannedResponse.createdBy,
+		});
+	} else {
+		const user = await Users.findOneById(userId);
+
+		const data = {
+			...responseData,
+			...(responseData.scope === 'user' && { userId: user?._id }),
+			createdBy: { _id: user?._id || '', username: user?.username || '' },
+			_createdAt: new Date(),
+		};
+
+		result = await CannedResponse.createCannedResponse(data);
+	}
+
+	notifications.streamCannedResponses.emit('canned-responses', {
+		type: 'changed',
+		...result,
+	});
+
+	return result;
+};