acf3df9e9d
Lets an unauthenticated viewer of a published share ask an AI scoped strictly to that share's page tree. The authenticated agent is untouched; the security boundary is the tool scope (no identity), and nothing is persisted. Server: - workspace toggle settings.ai.publicShareAssistant (default off) + optional settings.ai.provider.publicShareChatModel (cheap model id; reuses the chat driver/baseUrl/key). getChatModel(workspaceId, override) substitutes only the model id, falling back to chatModel. - POST /api/shares/ai/stream (@Public, SSE). Guardrail funnel, each failing before streaming: toggle off -> 404; share missing/wrong-workspace/sharing off -> 404; pageId not in share tree -> 404; provider unconfigured -> 503; per-IP (5/min) and per-workspace (300/h, IP-independent) rate limits -> 429. Uniform 404s never confirm a private page's existence. - forShare read-only in-process toolset: searchSharePages (existing shareId FTS branch, no spaceId/userId), getSharePage (getShareForPage gate + share.id check, content via the public sanitizer), listSharePages. No write/ comment/history/cross-space/external-MCP tools. - Locked share system prompt + immutable safety block; stepCountIs(5). - /shares/page-info exposes an aiAssistant flag (gated behind isSharingAllowed). Client: an ephemeral, text-only Ask-AI widget on the public shared page, shown only when the flag is set; useChat -> /api/shares/ai/stream, credentials omit. Admin toggle + model field in Settings -> AI. Also adds a jest moduleNameMapper for src/-rooted imports (fixes pre-existing unresolvable specs; additive). Implements docs/public-share-assistant-plan.md. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
87 lines
2.9 KiB
TypeScript
87 lines
2.9 KiB
TypeScript
import { useNavigate, useParams } from "react-router-dom";
|
|
import { Helmet } from "react-helmet-async";
|
|
import { useTranslation } from "react-i18next";
|
|
import { useSharePageQuery } from "@/features/share/queries/share-query.ts";
|
|
import { Container } from "@mantine/core";
|
|
import React, { useEffect } from "react";
|
|
import ReadonlyPageEditor from "@/features/editor/readonly-page-editor.tsx";
|
|
import { extractPageSlugId } from "@/lib";
|
|
import { Error404 } from "@/components/ui/error-404.tsx";
|
|
import ShareBranding from "@/features/share/components/share-branding.tsx";
|
|
import ShareAiWidget from "@/features/share/components/share-ai-widget.tsx";
|
|
import { useAtomValue } from "jotai";
|
|
import {
|
|
sharedPageFullWidthAtom,
|
|
sharedTreeDataAtom,
|
|
} from "@/features/share/atoms/shared-page-atom.ts";
|
|
import { isPageInTree } from "@/features/share/utils.ts";
|
|
|
|
export default function SharedPage() {
|
|
const { t } = useTranslation();
|
|
const { pageSlug } = useParams();
|
|
const { shareId } = useParams();
|
|
const navigate = useNavigate();
|
|
|
|
const { data, isLoading, isError, error } = useSharePageQuery({
|
|
pageId: extractPageSlugId(pageSlug),
|
|
});
|
|
|
|
const sharedTreeData = useAtomValue(sharedTreeDataAtom);
|
|
const fullWidth = useAtomValue(sharedPageFullWidthAtom);
|
|
|
|
useEffect(() => {
|
|
if (shareId && data) {
|
|
if (data.share.key !== shareId) {
|
|
|
|
// Check if the current page is part of the active sharing tree (sidebar) - If we are part of it, we will not redirect, keeping the sidebar visible.
|
|
const isPartOfTree =
|
|
sharedTreeData && isPageInTree(sharedTreeData, data.page.slugId);
|
|
|
|
if (!isPartOfTree) {
|
|
navigate(`/share/${data.share.key}/p/${pageSlug}`, { replace: true });
|
|
}
|
|
}
|
|
}
|
|
}, [shareId, data, sharedTreeData]);
|
|
|
|
if (isLoading) {
|
|
return <></>;
|
|
}
|
|
|
|
if (isError || !data) {
|
|
if ([401, 403, 404].includes(error?.["status"])) {
|
|
return <Error404 />;
|
|
}
|
|
return <div>{t("Error fetching page data.")}</div>;
|
|
}
|
|
|
|
return (
|
|
<div>
|
|
<Helmet>
|
|
<title>{`${data?.page?.title || t("untitled")}`}</title>
|
|
{!data?.share.searchIndexing && (
|
|
<meta name="robots" content="noindex" />
|
|
)}
|
|
</Helmet>
|
|
|
|
<Container fluid={fullWidth} size={fullWidth ? undefined : 900} p={0}>
|
|
<ReadonlyPageEditor
|
|
key={data.page.id}
|
|
title={data.page.title}
|
|
content={data.page.content}
|
|
pageId={data.page.id}
|
|
shareId={data.share.id}
|
|
/>
|
|
</Container>
|
|
|
|
{data && !shareId && !(data.features?.length > 0) && <ShareBranding />}
|
|
|
|
{/* Anonymous "Ask AI" widget — only when the workspace enables the
|
|
public-share assistant (server-resolved flag on /shares/page-info). */}
|
|
{data?.aiAssistant && data.share?.id && data.page?.id && (
|
|
<ShareAiWidget shareId={data.share.id} pageId={data.page.id} />
|
|
)}
|
|
</div>
|
|
);
|
|
}
|