tbenandClaude Opus 5.5
bea656ade8
Bots can now show a concept as a visual: create_graphic (with update_graphic, read_graphic and list_graphics, on every run, no computer needed) stores one HTML document in bot_graphics, per user like the conversation, and the chat renders its [graphic:ID] ref as an inline card sized to fit, with a large view and a page of its own (no rail). Graphic HTML is treated as hostile: it is only served at /graphics/<id> with a CSP sandbox allowing scripts under an origin of its own and no network, loading only the vendored Chart.js and Mermaid from /graphics-lib/. The document carries the app's theme vars and scrollbars, reports its height to the thread, and a frame that navigates away is closed. Co-Authored-By: Claude Opus 5.5 <[email protected]>
37 lines
1.5 KiB
TypeScript
37 lines
1.5 KiB
TypeScript
import userAuth from "@/src/functions/backend/auth/user-auth";
|
|
import grabBotGraphicView from "@/src/functions/backend/db/bot-graphics/grab-bot-graphic-view";
|
|
import { BotGraphicIdSchema } from "@/src/schemas/bot-graphic-schema";
|
|
import type { BotGraphicView } from "@/src/types";
|
|
import AppError from "@/src/utils/app-error";
|
|
import parseWithSchema from "@/src/utils/parse-with-schema";
|
|
import safeErrorMessage from "@/src/utils/safe-error-message";
|
|
import type { APIResponseObject, BunextAPIRouteHandler } from "@moduletrace/bunext/types";
|
|
|
|
/**
|
|
* `GET ?graphic_id=`: a graphic a bot made for the session user, as its
|
|
* card names it. Never the HTML (`/graphics/<id>` serves that, sandboxed),
|
|
* and nobody else reads it.
|
|
*/
|
|
export const handler: BunextAPIRouteHandler<APIResponseObject<BotGraphicView>> = async ({ req, query }) => {
|
|
try {
|
|
if (req.method != "GET") {
|
|
throw new AppError(`Method not allowed`);
|
|
}
|
|
|
|
const { user } = await userAuth({ req });
|
|
|
|
if (!user?.logged_in_status || !user.id) {
|
|
return { success: false, msg: `Unauthorized`, logoutUser: true };
|
|
}
|
|
|
|
const { graphic_id } = parseWithSchema({ schema: BotGraphicIdSchema, data: query });
|
|
const view = await grabBotGraphicView({ graphic_id, user_id: user.id });
|
|
|
|
if (!view) throw new AppError(`This graphic isn't available.`);
|
|
|
|
return { success: true, singleRes: view };
|
|
} catch (error: unknown) {
|
|
return { success: false, msg: safeErrorMessage({ error }) };
|
|
}
|
|
};
|