OXYGENHUB
◆ api-unknown-fields oxygenhub / crates / hub / src / web / assistants.rs
16.3 KiB · Rust · last changed Outbound requests only to public addresses 20 days ago source blame history raw
e71846aa Andy McCall ↶ 1 
//! The AI assistants panel (hub spec §13.4, #97) shared by the
2 
//! administration, organisation and repository settings pages: the
3 
//! level's own assistants, the ones it inherits, and its prompt.
4
2a83f530 Andy McCall ↶ 5 
use crate::assistants::{self, Assistant, Available, Fields, APIS, DEFAULT_BUDGET};
e71846aa Andy McCall ↶ 6 
use crate::auth::Viewer;
7 
use crate::db::accounts;
2a83f530 Andy McCall ↶ 8 
use crate::levels::At;
e71846aa Andy McCall ↶ 9 
use crate::Shared;
10 
use serde::Deserialize;
11
12 
#[derive(Deserialize)]
13 
pub struct AssistantForm {
14 
    #[serde(rename = "_csrf")]
15 
    pub csrf_token: String,
16 
    #[serde(default)]
17 
    action: String,
18 
    #[serde(default)]
19 
    id: Option<i64>,
20 
    #[serde(default)]
21 
    name: String,
22 
    #[serde(default)]
23 
    endpoint: String,
24 
    #[serde(default)]
25 
    api: String,
26 
    #[serde(default)]
27 
    model: String,
28 
    #[serde(default)]
29 
    headers: String,
30 
    #[serde(default)]
31 
    token: String,
32 
    #[serde(default)]
33 
    enabled: Option<String>,
34 
    #[serde(default)]
35 
    budget: String,
36 
    #[serde(default)]
37 
    prompt: String,
155cab14 Andy McCall ↶ 38 
    /// A provider from the add form's list (#109), filling what is left empty.
39 
    #[serde(default)]
40 
    preset: String,
e71846aa Andy McCall ↶ 41 
}
42
43 
/// Everything the panel shows.
44 
pub struct Panel {
45 
    /// The level's own assistants, each with whether a level above turned
46 
    /// its name off.
47 
    pub own: Vec<Available>,
48 
    /// The ones the levels above provide, outermost first.
49 
    pub inherited: Vec<Available>,
50 
    pub prompt: String,
51 
    /// (where from, text) for each level above that set a prompt.
52 
    pub inherited_prompts: Vec<(String, String)>,
53 
    pub apis: Vec<&'static str>,
54 
    pub default_budget: i64,
155cab14 Andy McCall ↶ 55 
    pub presets: Vec<(&'static str, &'static str, &'static str, &'static str, &'static str)>,
e71846aa Andy McCall ↶ 56 
}
57
2a83f530 Andy McCall ↶ 58 
pub async fn panel(app: &Shared, at: &At) -> sqlx::Result<Panel> {
e71846aa Andy McCall ↶ 59 
    let (own, inherited): (Vec<_>, Vec<_>) =
60 
        assistants::available(&app.db, at.scope, &at.owner).await?.into_iter().partition(|a| a.from.is_empty());
61 
    Ok(Panel {
62 
        own,
63 
        inherited,
64 
        prompt: assistants::prompt(&app.db, at.scope).await?,
65 
        inherited_prompts: assistants::inherited_prompts(&app.db, at.scope, &at.owner).await?,
66 
        apis: APIS.to_vec(),
67 
        default_budget: DEFAULT_BUDGET,
155cab14 Andy McCall ↶ 68 
        presets: assistants::PRESETS.to_vec(),
e71846aa Andy McCall ↶ 69 
    })
70 
}
71
72 
fn name_ok(name: &str) -> bool {
73 
    !name.is_empty() && name.chars().count() <= 40 && name.chars().all(|c| c.is_alphanumeric() || matches!(c, ' ' | '.' | '-' | '_'))
74 
}
75
76 
fn endpoint_ok(url: &str) -> bool {
77 
    (url.starts_with("http://") || url.starts_with("https://")) && url.len() <= 2000 && !url.contains(char::is_whitespace)
155cab14 Andy McCall ↶ 78 
}
79
80 
impl AssistantForm {
81 
    fn clone_shallow(&self) -> AssistantForm {
82 
        AssistantForm {
83 
            csrf_token: String::new(),
84 
            action: self.action.clone(),
85 
            id: self.id,
86 
            name: self.name.clone(),
87 
            endpoint: self.endpoint.clone(),
88 
            api: self.api.clone(),
89 
            model: self.model.clone(),
90 
            headers: self.headers.clone(),
91 
            token: String::new(),
92 
            enabled: self.enabled.clone(),
93 
            budget: self.budget.clone(),
94 
            prompt: String::new(),
95 
            preset: self.preset.clone(),
96 
        }
97 
    }
98 
}
99
100 
/// When the endpoint lists its models, the model must be one of them
101 
/// (#109); `Err` names a few it does offer.
9a777fec Andy McCall ↶ 102 
async fn model_offered(fields: &Fields, token: &str, allow: &[String]) -> Result<(), String> {
103 
    match assistants::list_models(&fields.endpoint, &fields.api, token, allow).await {
155cab14 Andy McCall ↶ 104 
        Ok(models) if !models.iter().any(|m| m == &fields.model) => {
105 
            let close: Vec<&String> = {
106 
                let stem = fields.model.split(['-', '.']).next().unwrap_or("").to_lowercase();
107 
                let near: Vec<&String> = models.iter().filter(|m| m.to_lowercase().contains(&stem)).take(8).collect();
108 
                if near.is_empty() {
109 
                    models.iter().take(8).collect()
110 
                } else {
111 
                    near
112 
                }
113 
            };
114 
            Err(format!(
115 
                "{} is not a model this endpoint offers. It offers, among others: {}. Use List models to pick one.",
116 
                fields.model,
117 
                close.iter().map(|m| m.as_str()).collect::<Vec<_>>().join(", ")
118 
            ))
119 
        }
120 
        _ => Ok(()),
121 
    }
e71846aa Andy McCall ↶ 122 
}
123
124 
/// The form's details checked: `Err` is the message for the person.
125 
fn fields(f: &AssistantForm) -> Result<Fields, String> {
155cab14 Andy McCall ↶ 126 
    let mut f_owned;
127 
    let f = match assistants::PRESETS.iter().find(|p| p.0 == f.preset) {
128 
        Some(&(_, _, name, endpoint, api)) => {
129 
            f_owned = f.clone_shallow();
130 
            if f_owned.name.trim().is_empty() {
131 
                f_owned.name = name.into();
132 
            }
133 
            if f_owned.endpoint.trim().is_empty() {
134 
                f_owned.endpoint = endpoint.into();
135 
            }
136 
            if !APIS.contains(&f_owned.api.as_str()) || f.endpoint.trim().is_empty() {
137 
                f_owned.api = api.into();
138 
            }
139 
            &f_owned
140 
        }
141 
        None => f,
142 
    };
e71846aa Andy McCall ↶ 143 
    let name = f.name.trim().to_string();
144 
    if !name_ok(&name) {
145 
        return Err("An assistant's name is up to 40 letters, digits, spaces, dots, dashes or underscores.".into());
146 
    }
147 
    let endpoint = f.endpoint.trim().to_string();
148 
    if !endpoint_ok(&endpoint) {
149 
        return Err("The endpoint is the full URL the request is posted to, starting with https://.".into());
150 
    }
151 
    if !APIS.contains(&f.api.as_str()) {
152 
        return Err("The API is chat-completions or anthropic-messages.".into());
153 
    }
154 
    let model = f.model.trim().to_string();
155 
    if model.is_empty() || model.len() > 100 || model.contains(char::is_whitespace) {
156 
        return Err("A model name is needed, such as claude-opus-5-5 or gpt-5.".into());
157 
    }
158 
    let headers = f.headers.trim().to_string();
159 
    if let Err(line) = assistants::parse_headers(&headers) {
160 
        return Err(format!("Extra headers are one Name: value per line; this line is not: {line}"));
161 
    }
162 
    if headers.lines().count() > 10 {
163 
        return Err("Up to ten extra headers.".into());
164 
    }
165 
    let budget = if f.budget.trim().is_empty() {
166 
        DEFAULT_BUDGET
167 
    } else {
168 
        match f.budget.trim().parse::<i64>() {
169 
            Ok(n) if (1_000..=2_000_000).contains(&n) => n,
170 
            _ => return Err("The context budget is a number of characters from 1000 to 2000000.".into()),
171 
        }
172 
    };
173 
    Ok(Fields { name, endpoint, api: f.api.clone(), model, headers, enabled: f.enabled.is_some(), budget })
174 
}
175
176 
/// Apply the panel's form: `Ok(notice)` or `Err(message for the user)`.
2a83f530 Andy McCall ↶ 177 
pub async fn apply(app: &Shared, viewer: &Viewer, at: &At, f: AssistantForm) -> sqlx::Result<Result<String, String>> {
e71846aa Andy McCall ↶ 178 
    let owned = |a: Option<Assistant>| a.filter(|a| a.scope() == at.scope);
179 
    let actor = viewer.account();
180 
    Ok(Ok(match (f.action.as_str(), f.id) {
181 
        ("add", None) => {
182 
            let fields = match fields(&f) {
183 
                Ok(x) => x,
184 
                Err(e) => return Ok(Err(e)),
185 
            };
9a777fec Andy McCall ↶ 186 
            if let Err(e) = model_offered(&fields, f.token.trim(), &app.config.outbound.allow).await {
155cab14 Andy McCall ↶ 187 
                return Ok(Err(e));
188 
            }
e71846aa Andy McCall ↶ 189 
            let token = app.assistant_key.seal(f.token.trim());
190 
            match assistants::create(&app.db, at.scope, &fields, &token).await? {
191 
                Some(a) => {
192 
                    accounts::audit(&app.db, actor, "assistant.added", &at.label, &a.name).await.ok();
206c1fc1 Andy McCall ↶ 193 
                    // Try it at once, so a wrong endpoint or token shows here.
194 
                    match assistants::test(app, &a).await {
195 
                        Ok(answer) => format!("{} added and answered: {answer}", a.name),
196 
                        Err(why) => {
197 
                            format!("{} added, but did not answer: {why}. Check the endpoint, API and token, then TEST CONNECTION.", a.name)
198 
                        }
199 
                    }
e71846aa Andy McCall ↶ 200 
                }
201 
                None => return Ok(Err(format!("There is already an assistant called {} here.", fields.name))),
202 
            }
203 
        }
204 
        ("update", Some(id)) => {
205 
            let Some(a) = owned(assistants::get(&app.db, id).await?) else { return Ok(Err("No such assistant.".into())) };
206 
            let fields = match fields(&f) {
207 
                Ok(x) => x,
208 
                Err(e) => return Ok(Err(e)),
209 
            };
210 
            let token = f.token.trim();
155cab14 Andy McCall ↶ 211 
            let stored = if token.is_empty() { app.assistant_key.open(&a.token).unwrap_or_default() } else { token.to_string() };
9a777fec Andy McCall ↶ 212 
            if let Err(e) = model_offered(&fields, &stored, &app.config.outbound.allow).await {
155cab14 Andy McCall ↶ 213 
                return Ok(Err(e));
214 
            }
e71846aa Andy McCall ↶ 215 
            let sealed = (!token.is_empty()).then(|| app.assistant_key.seal(token));
216 
            if !assistants::update(&app.db, id, &fields, sealed.as_deref()).await? {
217 
                return Ok(Err(format!("There is already an assistant called {} here.", fields.name)));
218 
            }
ed89fae5 Andy McCall ↶ 219 
            if a.name != fields.name {
220 
                assistants::rename_in_history(&app.db, at.scope, &at.owner, &a.name, &fields.name).await?;
221 
            }
e71846aa Andy McCall ↶ 222 
            accounts::audit(&app.db, actor, "assistant.updated", &at.label, &a.name).await.ok();
223 
            format!("{} updated.", fields.name)
224 
        }
225 
        ("toggle", Some(id)) => {
226 
            let Some(a) = owned(assistants::get(&app.db, id).await?) else { return Ok(Err("No such assistant.".into())) };
227 
            assistants::set_enabled(&app.db, id, !a.enabled).await?;
228 
            accounts::audit(&app.db, actor, if a.enabled { "assistant.disabled" } else { "assistant.enabled" }, &at.label, &a.name)
229 
                .await
230 
                .ok();
231 
            format!("{} is {}.", a.name, if a.enabled { "off" } else { "on" })
232 
        }
233 
        ("delete", Some(id)) => {
234 
            let Some(a) = owned(assistants::get(&app.db, id).await?) else { return Ok(Err("No such assistant.".into())) };
235 
            assistants::delete(&app.db, id).await?;
236 
            accounts::audit(&app.db, actor, "assistant.deleted", &at.label, &a.name).await.ok();
237 
            format!("{} deleted.", a.name)
238 
        }
239 
        ("test", Some(id)) => {
240 
            let Some(a) = owned(assistants::get(&app.db, id).await?) else { return Ok(Err("No such assistant.".into())) };
241 
            match assistants::test(app, &a).await {
242 
                Ok(answer) => format!("{} answered: {answer}", a.name),
206c1fc1 Andy McCall ↶ 243 
                Err(why) => return Ok(Err(format!("{} did not answer: {why}. Check the endpoint, API and token.", a.name))),
e71846aa Andy McCall ↶ 244 
            }
245 
        }
246 
        ("prompt", _) => {
247 
            if f.prompt.chars().count() > 20_000 {
248 
                return Ok(Err("A prompt is up to 20000 characters.".into()));
249 
            }
250 
            assistants::set_prompt(&app.db, at.scope, &f.prompt).await?;
251 
            accounts::audit(&app.db, actor, "assistant.prompt", &at.label, "").await.ok();
252 
            if f.prompt.trim().is_empty() {
253 
                "Prompt cleared.".to_string()
254 
            } else {
255 
                "Prompt saved.".to_string()
256 
            }
257 
        }
258 
        _ => return Ok(Err("Unknown action.".into())),
259 
    }))
155cab14 Andy McCall ↶ 260 
}
261
262 
#[derive(Deserialize)]
263 
pub struct ModelsForm {
264 
    #[serde(rename = "_csrf")]
265 
    pub csrf_token: String,
266 
    #[serde(default)]
267 
    id: Option<i64>,
268 
    #[serde(default)]
269 
    endpoint: String,
270 
    #[serde(default)]
271 
    api: String,
272 
    #[serde(default)]
273 
    token: String,
274 
    #[serde(default)]
275 
    preset: String,
276 
}
277
278 
/// The models a provider offers, as JSON for the form's List models
279 
/// button (#109): `{"models": [...]}` or `{"error": "..."}`. With `id`,
280 
/// the stored token of that assistant at this level is used when none is
281 
/// typed.
282 
pub async fn models(app: &Shared, at: &At, f: ModelsForm) -> sqlx::Result<serde_json::Value> {
283 
    let preset = assistants::PRESETS.iter().find(|p| p.0 == f.preset);
284 
    let endpoint =
285 
        if f.endpoint.trim().is_empty() { preset.map(|p| p.3.to_string()).unwrap_or_default() } else { f.endpoint.trim().to_string() };
286 
    let api = if APIS.contains(&f.api.as_str()) {
287 
        f.api.clone()
288 
    } else {
289 
        preset.map(|p| p.4.to_string()).unwrap_or_else(|| "chat-completions".into())
290 
    };
291 
    let mut token = f.token.trim().to_string();
292 
    if token.is_empty() {
293 
        if let Some(id) = f.id {
294 
            if let Some(a) = assistants::get(&app.db, id).await?.filter(|a| a.scope() == at.scope) {
295 
                token = app.assistant_key.open(&a.token).unwrap_or_default();
296 
            }
297 
        }
298 
    }
9a777fec Andy McCall ↶ 299 
    Ok(match assistants::list_models(&endpoint, &api, &token, &app.config.outbound.allow).await {
155cab14 Andy McCall ↶ 300 
        Ok(m) => serde_json::json!({ "models": m }),
301 
        Err(e) => serde_json::json!({ "error": e }),
302 
    })
e71846aa Andy McCall ↶ 303 
}
62ceb2ee Andy McCall ↶ 304
305 
/// For the API (§13.4): every assistant a level sees.
306 
pub async fn api_list(app: &Shared, at: &At) -> sqlx::Result<Vec<hub_api::Assistant>> {
307 
    Ok(assistants::available(&app.db, at.scope, &at.owner)
308 
        .await?
309 
        .into_iter()
310 
        .map(|v| hub_api::Assistant {
311 
            name: v.assistant.name.clone(),
312 
            endpoint: v.assistant.endpoint.clone(),
313 
            api: v.assistant.api.clone(),
314 
            model: v.assistant.model.clone(),
315 
            headers: v.assistant.headers.clone(),
316 
            enabled: v.assistant.enabled,
317 
            budget: v.assistant.budget,
318 
            has_token: v.assistant.has_token(),
319 
            off_above: v.off_above,
320 
            from: v.from,
321 
        })
322 
        .collect())
323 
}
324
325 
/// For the API: add an assistant, or change the level's own one of that
326 
/// name (an empty token keeps the stored one). `Err` is for the caller.
327 
pub async fn api_put(
328 
    app: &Shared,
329 
    actor: &crate::db::accounts::Account,
330 
    at: &At,
331 
    b: hub_api::NewAssistant,
332 
) -> sqlx::Result<Result<String, String>> {
333 
    let f = AssistantForm {
334 
        csrf_token: String::new(),
335 
        action: String::new(),
336 
        id: None,
337 
        name: b.name,
338 
        endpoint: b.endpoint,
339 
        api: b.api,
340 
        model: b.model,
341 
        headers: b.headers,
342 
        token: b.token,
343 
        enabled: b.enabled.then(|| "1".to_string()),
344 
        budget: b.budget.map(|n| n.to_string()).unwrap_or_default(),
345 
        prompt: String::new(),
346 
        preset: b.preset,
347 
    };
348 
    let fields = match fields(&f) {
349 
        Ok(x) => x,
350 
        Err(e) => return Ok(Err(e)),
351 
    };
352 
    let existing = assistants::list(&app.db, at.scope).await?.into_iter().find(|a| a.name.eq_ignore_ascii_case(&fields.name));
353 
    let token = f.token.trim().to_string();
354 
    let effective = match (&existing, token.is_empty()) {
355 
        (Some(a), true) => app.assistant_key.open(&a.token).unwrap_or_default(),
356 
        _ => token.clone(),
357 
    };
9a777fec Andy McCall ↶ 358 
    if let Err(e) = model_offered(&fields, &effective, &app.config.outbound.allow).await {
62ceb2ee Andy McCall ↶ 359 
        return Ok(Err(e));
360 
    }
361 
    Ok(Ok(match existing {
362 
        Some(a) => {
363 
            let sealed = (!token.is_empty()).then(|| app.assistant_key.seal(&token));
364 
            assistants::update(&app.db, a.id, &fields, sealed.as_deref()).await?;
365 
            accounts::audit(&app.db, Some(actor), "assistant.updated", &at.label, &fields.name).await.ok();
366 
            format!("{} updated", fields.name)
367 
        }
368 
        None => {
369 
            assistants::create(&app.db, at.scope, &fields, &app.assistant_key.seal(&token)).await?;
370 
            accounts::audit(&app.db, Some(actor), "assistant.added", &at.label, &fields.name).await.ok();
371 
            format!("{} added", fields.name)
372 
        }
373 
    }))
374 
}
375
376 
/// For the API: remove the level's own assistant of that name.
377 
pub async fn api_delete(app: &Shared, actor: &crate::db::accounts::Account, at: &At, name: &str) -> sqlx::Result<bool> {
378 
    let Some(a) = assistants::list(&app.db, at.scope).await?.into_iter().find(|a| a.name.eq_ignore_ascii_case(name)) else {
379 
        return Ok(false);
380 
    };
381 
    assistants::delete(&app.db, a.id).await?;
382 
    accounts::audit(&app.db, Some(actor), "assistant.deleted", &at.label, &a.name).await.ok();
383 
    Ok(true)
384 
}
385
386 
/// For the API: the level's prompt and what it inherits.
387 
pub async fn api_prompt(app: &Shared, at: &At) -> sqlx::Result<hub_api::AssistantPrompt> {
388 
    Ok(hub_api::AssistantPrompt {
389 
        prompt: assistants::prompt(&app.db, at.scope).await?,
390 
        inherited: assistants::inherited_prompts(&app.db, at.scope, &at.owner).await?,
391 
    })
392 
}
393
394 
/// For the API: set the level's prompt (empty clears it).
395 
pub async fn api_set_prompt(app: &Shared, actor: &crate::db::accounts::Account, at: &At, text: &str) -> sqlx::Result<Result<(), String>> {
396 
    if text.chars().count() > 20_000 {
397 
        return Ok(Err("a prompt is up to 20000 characters".into()));
398 
    }
399 
    assistants::set_prompt(&app.db, at.scope, text).await?;
400 
    accounts::audit(&app.db, Some(actor), "assistant.prompt", &at.label, "").await.ok();
401 
    Ok(Ok(()))
402 
}