snapshot of https://github.com/RocketChat/Rocket.Chat.git (develop, 2026-09-16; blobs > 131072B omitted)

apps/meteor/server/api/v1/omnichannel/rooms.ts

@@ -0,0 +1,92 @@
+import { LivechatRooms } from '@rocket.chat/models';
+import { isGETLivechatRoomsParams } from '@rocket.chat/rest-typings';
+
+import { API } from '../..';
+import { findRooms } from './lib/rooms';
+import { hasPermissionAsync } from '../../../lib/authorization/hasPermission';
+import { getPaginationItems } from '../../lib/getPaginationItems';
+
+const validateDateParams = (property: string, date?: string) => {
+	let parsedDate: { start?: string; end?: string } | undefined = undefined;
+	if (date) {
+		parsedDate = JSON.parse(date) as { start?: string; end?: string };
+	}
+
+	if (parsedDate?.start && isNaN(Date.parse(parsedDate.start))) {
+		throw new Error(`The "${property}.start" query parameter must be a valid date.`);
+	}
+	if (parsedDate?.end && isNaN(Date.parse(parsedDate.end))) {
+		throw new Error(`The "${property}.end" query parameter must be a valid date.`);
+	}
+	return parsedDate;
+};
+
+const isBoolean = (value?: string | boolean): boolean => value === 'true' || value === 'false' || typeof value === 'boolean';
+
+API.v1.addRoute(
+	'livechat/rooms',
+	{ authRequired: true, validateParams: isGETLivechatRoomsParams },
+	{
+		async get() {
+			const { offset, count } = await getPaginationItems(this.queryParams);
+			const { sort, fields, query } = await this.parseJsonQuery();
+			const { agents, departmentId, open, tags, roomName, onhold, queued, units } = this.queryParams;
+			const { createdAt, customFields, closedAt } = this.queryParams;
+
+			const createdAtParam = validateDateParams('createdAt', createdAt);
+			const closedAtParam = validateDateParams('closedAt', closedAt);
+
+			const hasAdminAccess = await hasPermissionAsync(this.user, 'view-livechat-rooms');
+			const hasAgentAccess = (await hasPermissionAsync(this.user, 'view-l-room')) && agents?.includes(this.userId) && agents?.length === 1;
+			if (!hasAdminAccess && !hasAgentAccess) {
+				return API.v1.forbidden();
+			}
+
+			let parsedCf: { [key: string]: string } | undefined = undefined;
+			if (customFields) {
+				try {
+					const parsedCustomFields = JSON.parse(customFields) as { [key: string]: string };
+					if (typeof parsedCustomFields !== 'object' || Array.isArray(parsedCustomFields) || parsedCustomFields === null) {
+						throw new Error('Invalid custom fields');
+					}
+
+					// Model's already checking for the keys, so we don't need to do it here.
+					parsedCf = parsedCustomFields;
+				} catch (e) {
+					throw new Error('The "customFields" query parameter must be a valid JSON.');
+				}
+			}
+
+			return API.v1.success(
+				await findRooms({
+					agents,
+					roomName,
+					departmentId,
+					...(isBoolean(open) && { open: open === true || open === 'true' }),
+					createdAt: createdAtParam,
+					closedAt: closedAtParam,
+					tags,
+					customFields: parsedCf,
+					onhold,
+					queued,
+					units,
+					query,
+					options: { offset, count, sort, fields },
+					callerId: this.userId,
+				}),
+			);
+		},
+	},
+);
+
+API.v1.addRoute(
+	'livechat/rooms/filters',
+	{ authRequired: true, permissionsRequired: ['view-l-room'] },
+	{
+		async get() {
+			return API.v1.success({
+				filters: (await LivechatRooms.findAvailableSources().toArray())[0].fullTypes,
+			});
+		},
+	},
+);