Function handleToolDataList

packages/core/src/tools/routes.ts:237–296

(
  event: H3Event,
  toolId: string,
  collection: string,
  userEmail: string,
)

}

async function handleToolDataList(
  event: H3Event,
  toolId: string,
  collection: string,
  userEmail: string,
): Promise<unknown> {
  await ensureToolsTables();
  const tool = await getTool(toolId);
  if (!tool) {
    setResponseStatus(event, 404);
    return { error: "Tool not found" };
  }
  const client = getDbExec();
  const url = event.url;
  const limitParam = url?.searchParams?.get("limit");
  const limit = limitParam
    ? Math.min(Math.max(1, Number(limitParam)), 1000)
    : 100;
  const scope = url?.searchParams?.get("scope") || "user";
  const orgId = getRequestOrgId();

  if (scope === "org") {
    if (!orgId) {
      setResponseStatus(event, 400);
      return { error: "Org context required for scope=org" };
    }
    const result = await client.execute({
      sql: `SELECT COALESCE(item_id, id) AS id, tool_id, collection, data, owner_email, scope, org_id, created_at, updated_at
        FROM tool_data
        WHERE tool_id = ? AND collection = ? AND scope = 'org' AND org_id = ?
        ORDER BY created_at DESC
        LIMIT ?`,
      args: [toolId, collection, orgId, limit],
    });
    return result.rows ?? [];
  }

  if (scope === "all") {
    const result = await client.execute({
      sql: `SELECT COALESCE(item_id, id) AS id, tool_id, collection, data, owner_email, scope, org_id, created_at, updated_at
        FROM tool_data
        WHERE tool_id = ? AND collection = ?
          AND ((scope = 'user' AND owner_email = ?) OR (scope = 'org' AND org_id = ?))
        ORDER BY created_at DESC
        LIMIT ?`,
      args: [toolId, collection, userEmail, orgId ?? "", limit],
    });
    return result.rows ?? [];
  }

  const result = await client.execute({
    sql: `SELECT COALESCE(item_id, id) AS id, tool_id, collection, data, owner_email, scope, org_id, created_at, updated_at
      FROM tool_data
      WHERE tool_id = ? AND collection = ? AND scope = 'user' AND owner_email = ?
      ORDER BY updated_at DESC
      LIMIT ?`,
    args: [toolId, collection, userEmail, limit],
  });