Lets an unauthenticated viewer of a published share ask an AI scoped strictly to that share's page tree. The authenticated agent is untouched; the security boundary is the tool scope (no identity), and nothing is persisted. Server: - workspace toggle settings.ai.publicShareAssistant (default off) + optional settings.ai.provider.publicShareChatModel (cheap model id; reuses the chat driver/baseUrl/key). getChatModel(workspaceId, override) substitutes only the model id, falling back to chatModel. - POST /api/shares/ai/stream (@Public, SSE). Guardrail funnel, each failing before streaming: toggle off -> 404; share missing/wrong-workspace/sharing off -> 404; pageId not in share tree -> 404; provider unconfigured -> 503; per-IP (5/min) and per-workspace (300/h, IP-independent) rate limits -> 429. Uniform 404s never confirm a private page's existence. - forShare read-only in-process toolset: searchSharePages (existing shareId FTS branch, no spaceId/userId), getSharePage (getShareForPage gate + share.id check, content via the public sanitizer), listSharePages. No write/ comment/history/cross-space/external-MCP tools. - Locked share system prompt + immutable safety block; stepCountIs(5). - /shares/page-info exposes an aiAssistant flag (gated behind isSharingAllowed). Client: an ephemeral, text-only Ask-AI widget on the public shared page, shown only when the flag is set; useChat -> /api/shares/ai/stream, credentials omit. Admin toggle + model field in Settings -> AI. Also adds a jest moduleNameMapper for src/-rooted imports (fixes pre-existing unresolvable specs; additive). Implements docs/public-share-assistant-plan.md. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
231 lines
6.5 KiB
TypeScript
231 lines
6.5 KiB
TypeScript
import { useMemo, useRef, useState } from "react";
|
|
import { generateId } from "ai";
|
|
import {
|
|
ActionIcon,
|
|
Affix,
|
|
Alert,
|
|
Box,
|
|
Group,
|
|
Paper,
|
|
ScrollArea,
|
|
Stack,
|
|
Text,
|
|
Textarea,
|
|
Tooltip,
|
|
} from "@mantine/core";
|
|
import {
|
|
IconAlertTriangle,
|
|
IconArrowUp,
|
|
IconSparkles,
|
|
IconX,
|
|
} from "@tabler/icons-react";
|
|
import { useTranslation } from "react-i18next";
|
|
import { useChat, type UIMessage } from "@ai-sdk/react";
|
|
import { DefaultChatTransport } from "ai";
|
|
|
|
interface ShareAiWidgetProps {
|
|
/** The share id (or key) the assistant is scoped to. */
|
|
shareId: string;
|
|
/** The page the reader currently has open (context for "this page"). */
|
|
pageId: string;
|
|
}
|
|
|
|
/** Concatenate the visible text parts of a UIMessage. */
|
|
function messageText(message: UIMessage): string {
|
|
return (message.parts ?? [])
|
|
.filter(
|
|
(p): p is { type: "text"; text: string } =>
|
|
p?.type === "text" && typeof (p as { text?: string }).text === "string",
|
|
)
|
|
.map((p) => p.text)
|
|
.join("");
|
|
}
|
|
|
|
/**
|
|
* Lightweight, EPHEMERAL "Ask AI" widget for a public shared page.
|
|
*
|
|
* A stripped version of the authenticated chat: text input only, no chat list,
|
|
* no history, no persistence, no voice input. The transcript lives only in
|
|
* memory (this component's `useChat` store) and is sent with `credentials:
|
|
* "omit"` to the anonymous `/api/shares/ai/stream` endpoint. The server stores
|
|
* nothing.
|
|
*/
|
|
export default function ShareAiWidget({ shareId, pageId }: ShareAiWidgetProps) {
|
|
const { t } = useTranslation();
|
|
const [open, setOpen] = useState(false);
|
|
const [input, setInput] = useState("");
|
|
|
|
// Stable per-mount store key (see ai-chat ChatThread for the rationale on why
|
|
// useChat needs a stable, non-undefined id to avoid re-creating its store).
|
|
const storeIdRef = useRef<string>(`share-ai-${generateId()}`);
|
|
|
|
const transport = useMemo(
|
|
() =>
|
|
new DefaultChatTransport<UIMessage>({
|
|
api: "/api/shares/ai/stream",
|
|
// Anonymous endpoint: never send cookies/credentials.
|
|
credentials: "omit",
|
|
prepareSendMessagesRequest: ({ messages, body }) => ({
|
|
body: {
|
|
...body,
|
|
shareId,
|
|
pageId,
|
|
messages,
|
|
},
|
|
}),
|
|
}),
|
|
[shareId, pageId],
|
|
);
|
|
|
|
const { messages, sendMessage, status, stop, error } = useChat({
|
|
id: storeIdRef.current,
|
|
transport,
|
|
});
|
|
|
|
const isStreaming = status === "submitted" || status === "streaming";
|
|
|
|
const handleSend = () => {
|
|
const text = input.trim();
|
|
if (!text || isStreaming) return;
|
|
setInput("");
|
|
void sendMessage({ text });
|
|
};
|
|
|
|
if (!open) {
|
|
return (
|
|
<Affix position={{ bottom: 20, right: 20 }}>
|
|
<Tooltip label={t("Ask AI")} position="left">
|
|
<ActionIcon
|
|
size="xl"
|
|
radius="xl"
|
|
variant="filled"
|
|
aria-label={t("Ask AI")}
|
|
onClick={() => setOpen(true)}
|
|
>
|
|
<IconSparkles size={22} />
|
|
</ActionIcon>
|
|
</Tooltip>
|
|
</Affix>
|
|
);
|
|
}
|
|
|
|
return (
|
|
<Affix position={{ bottom: 20, right: 20 }}>
|
|
<Paper
|
|
shadow="md"
|
|
radius="md"
|
|
withBorder
|
|
style={{
|
|
width: 360,
|
|
maxWidth: "calc(100vw - 40px)",
|
|
height: 480,
|
|
maxHeight: "calc(100vh - 40px)",
|
|
display: "flex",
|
|
flexDirection: "column",
|
|
}}
|
|
>
|
|
<Group
|
|
justify="space-between"
|
|
p="xs"
|
|
style={{ borderBottom: "1px solid var(--mantine-color-default-border)" }}
|
|
>
|
|
<Group gap="xs">
|
|
<IconSparkles size={18} />
|
|
<Text fw={600} size="sm">
|
|
{t("Ask AI")}
|
|
</Text>
|
|
</Group>
|
|
<ActionIcon
|
|
variant="subtle"
|
|
aria-label={t("Close")}
|
|
onClick={() => setOpen(false)}
|
|
>
|
|
<IconX size={18} />
|
|
</ActionIcon>
|
|
</Group>
|
|
|
|
<ScrollArea style={{ flex: 1 }} p="sm" scrollbarSize={6} type="scroll">
|
|
{messages.length === 0 ? (
|
|
<Text size="sm" c="dimmed" ta="center" mt="lg">
|
|
{t("Ask a question about this documentation.")}
|
|
</Text>
|
|
) : (
|
|
<Stack gap="sm">
|
|
{messages.map((message) => (
|
|
<Box
|
|
key={message.id}
|
|
style={{
|
|
alignSelf:
|
|
message.role === "user" ? "flex-end" : "flex-start",
|
|
maxWidth: "85%",
|
|
}}
|
|
>
|
|
<Paper
|
|
p="xs"
|
|
radius="md"
|
|
bg={
|
|
message.role === "user"
|
|
? "var(--mantine-color-blue-light)"
|
|
: "var(--mantine-color-default-hover)"
|
|
}
|
|
>
|
|
<Text size="sm" style={{ whiteSpace: "pre-wrap" }}>
|
|
{messageText(message) ||
|
|
(isStreaming ? t("Thinking…") : "")}
|
|
</Text>
|
|
</Paper>
|
|
</Box>
|
|
))}
|
|
</Stack>
|
|
)}
|
|
|
|
{error && (
|
|
<Alert
|
|
variant="light"
|
|
color="red"
|
|
icon={<IconAlertTriangle size={16} />}
|
|
mt="sm"
|
|
title={t("Something went wrong")}
|
|
>
|
|
{t("The assistant is unavailable right now. Please try again.")}
|
|
</Alert>
|
|
)}
|
|
</ScrollArea>
|
|
|
|
<Group
|
|
gap="xs"
|
|
p="xs"
|
|
align="flex-end"
|
|
style={{ borderTop: "1px solid var(--mantine-color-default-border)" }}
|
|
>
|
|
<Textarea
|
|
style={{ flex: 1 }}
|
|
autosize
|
|
minRows={1}
|
|
maxRows={4}
|
|
placeholder={t("Ask a question…")}
|
|
value={input}
|
|
onChange={(e) => setInput(e.currentTarget.value)}
|
|
onKeyDown={(e) => {
|
|
if (e.key === "Enter" && !e.shiftKey) {
|
|
e.preventDefault();
|
|
handleSend();
|
|
}
|
|
}}
|
|
/>
|
|
<ActionIcon
|
|
size="lg"
|
|
radius="xl"
|
|
variant="filled"
|
|
aria-label={isStreaming ? t("Stop") : t("Send")}
|
|
onClick={isStreaming ? () => stop() : handleSend}
|
|
disabled={!isStreaming && input.trim().length === 0}
|
|
>
|
|
{isStreaming ? <IconX size={18} /> : <IconArrowUp size={18} />}
|
|
</ActionIcon>
|
|
</Group>
|
|
</Paper>
|
|
</Affix>
|
|
);
|
|
}
|