mirror of
https://github.com/AmruthPillai/Reactive-Resume.git
synced 2026-07-23 08:23:33 +10:00
6d8d8f6e55
* chore(ai): remove local AI store now that providers live server-side
The Zustand-based useAIStore has been replaced by the server-side
aiProviders oRPC router (encrypted credentials persisted in DB).
Delete the dead store + tests, drop the ./store export, and remove
zustand/immer deps which are no longer referenced anywhere in
packages/ai/src/.
* feat(agent): archive/delete actions and read-only state for agent threads
- Backend: mark archived threads as read-only in threads.get and reject
messages.send with CONFLICT when the thread is archived.
- Frontend: render archived threads in the sidebar with muted styling and
an Archived badge; add a per-thread dropdown menu in the chat header
with Archive (non-destructive) and Delete (with confirmation); show a
read-only banner above the message list that disambiguates archived
vs. missing-resource causes; suppress the Retry and Stop buttons in
read-only mode.
- Tests: new packages/api/src/services/agent.test.ts covering the
archived-thread isReadOnly flag and the archived-thread send refusal.
* fix(agent): abort run on archive and verify ownership before deleting thread
- threads.archive: before flipping status, abort any in-flight run controller
and clear the active-run state on the thread; cleanup failures are logged
but do not block the status update.
- threads.delete: assert thread ownership via getThread before destructive
work so an authenticated user cannot wipe another user's attachment rows
by passing a foreign threadId.
Adds focused tests for both behaviors.
* feat(agent): display patch diffs and surface revert conflicts
Render apply_resume_patch tool messages with a status-aware card (applied/
reverted/conflicted), expandable operation list, and a Revert button that
correctly handles RESUME_VERSION_CONFLICT responses. Adds unit tests for
the inverse-patch builder and the agentService.actions.revert flow.
* chore(agent): remove out-of-scope attachment tests accidentally added in Task 6
The Task 6 commit (73ef1acca) accidentally re-introduced three attachment-
related tests that belong to a separate task:
- `buildAttachmentModelParts > converts text, image, supported binary, and
unsupported attachments into model parts`
- `agentService.messages.send > persists the user message with file UI parts
and links selected attachments to it` (was failing — the `ToolLoopAgent`
mock is not callable as a constructor)
- `agentService.messages.send > rejects attachments that are missing, foreign,
or already linked before persisting a message`
These were likely re-added during a stash recovery and were not requested
for Task 6, whose scope was limited to the `agentService.actions.revert`
flow. Remove them along with the helpers/fixtures (`buildAttachment`,
`buildActiveThread`, `selectWhereResult`, `selectOrderByResult`) that they
were the only consumers of. `selectLimitResult` is preserved because it is
used by the revert tests.
* chore(agent): configure runtime dependencies
* feat(db): add agent workspace schema
* feat(api): add agent backend services
* feat(web): add agent workspace UI
* chore(agent): remove legacy builder assistant
* test(agent): make agent stream mocks constructible
* chore(web): remove unused resume replacement hook
* feat(api): add unsafe AI base URL flag
* chore(dev): expose local services in compose
* fix(web): normalize resume preview gaps
* feat(api): improve agent tool handling
* feat(web): polish agent workspace UI
* chore: update dependencies
* fix(api,web): address PR review feedback for agent workspace
Security/correctness:
- Restrict AI provider URLs to http/https even in unsafe mode
- Stop exposing Redis on host network by default
- Make .env.local optional and drop app profile in compose.dev.yml
- Store agent attachments with private ACL on S3
- Reset provider test status when provider/model/baseURL changes
- Decouple non-agent AI endpoints from REDIS_URL requirement
- Fix JSON Patch add inverse for existing object members
- Wrap resume patch + agent action insert in db transaction
- Validate partialMessage at runtime and rate-limit attachment uploads
- Add unique index on agent_messages (thread_id, sequence)
UX/bugs:
- Mark agent thread route as ssr: false and guard SSE chunk parsing
- Show config-specific banner only on known configuration error
- Gate AI provider checks behind loading state in resume import
- Fix relative-time formatter blank gap between 45-59 seconds
- Clarify thread delete confirmation message
Polish:
- Raise ENCRYPTION_SECRET minimum to 32 characters
- Bucket AI rate limits by resumeId/threadId/messageId
- Trim form values before submitting AI provider config
- Use single key identifier and nullish-coalesce baseURL display
* fix: address ai agent review feedback
* fix: preserve mobile agent chat state
* docs: add ai agent workspace guides
* feat: introduce design system for Reactive Resume
288 lines
7.6 KiB
TypeScript
288 lines
7.6 KiB
TypeScript
import type { UIMessage } from "ai";
|
|
import { ORPCError } from "@orpc/client";
|
|
import z from "zod";
|
|
import { protectedProcedure } from "../context";
|
|
import { aiRequestRateLimit, storageUploadRateLimit } from "../middleware/rate-limit";
|
|
import { agentService } from "../services/agent";
|
|
|
|
function isAgentEnvironmentUnavailable(error: unknown) {
|
|
return error instanceof Error && error.message === "AGENT_ENVIRONMENT_UNAVAILABLE";
|
|
}
|
|
|
|
function throwUnavailable(): never {
|
|
throw new ORPCError("PRECONDITION_FAILED", {
|
|
message: "AI agent workspace is unavailable because REDIS_URL or ENCRYPTION_SECRET is not configured.",
|
|
});
|
|
}
|
|
|
|
function base64ToUint8Array(value: string) {
|
|
return Uint8Array.from(Buffer.from(value, "base64"));
|
|
}
|
|
|
|
function isUiMessage(value: unknown): value is UIMessage {
|
|
if (!value || typeof value !== "object") return false;
|
|
|
|
const message = value as Partial<UIMessage>;
|
|
return (
|
|
typeof message.id === "string" &&
|
|
(message.role === "system" || message.role === "user" || message.role === "assistant") &&
|
|
Array.isArray(message.parts)
|
|
);
|
|
}
|
|
|
|
const threadsRouter = {
|
|
list: protectedProcedure
|
|
.route({
|
|
method: "GET",
|
|
path: "/agent/threads",
|
|
tags: ["Agent"],
|
|
operationId: "listAgentThreads",
|
|
summary: "List agent threads",
|
|
})
|
|
.handler(async ({ context }) => {
|
|
try {
|
|
return await agentService.threads.list({ userId: context.user.id });
|
|
} catch (error) {
|
|
if (isAgentEnvironmentUnavailable(error)) throwUnavailable();
|
|
throw error;
|
|
}
|
|
}),
|
|
|
|
create: protectedProcedure
|
|
.route({
|
|
method: "POST",
|
|
path: "/agent/threads",
|
|
tags: ["Agent"],
|
|
operationId: "createAgentThread",
|
|
summary: "Create agent thread",
|
|
})
|
|
.input(z.object({ aiProviderId: z.string().optional(), sourceResumeId: z.string().optional() }))
|
|
.handler(async ({ context, input }) => {
|
|
try {
|
|
return await agentService.threads.create({
|
|
userId: context.user.id,
|
|
locale: context.locale,
|
|
...(input.aiProviderId ? { aiProviderId: input.aiProviderId } : {}),
|
|
...(input.sourceResumeId ? { sourceResumeId: input.sourceResumeId } : {}),
|
|
});
|
|
} catch (error) {
|
|
if (isAgentEnvironmentUnavailable(error)) throwUnavailable();
|
|
throw error;
|
|
}
|
|
}),
|
|
|
|
get: protectedProcedure
|
|
.route({
|
|
method: "GET",
|
|
path: "/agent/threads/{id}",
|
|
tags: ["Agent"],
|
|
operationId: "getAgentThread",
|
|
summary: "Get agent thread",
|
|
})
|
|
.input(z.object({ id: z.string() }))
|
|
.handler(async ({ context, input }) => {
|
|
try {
|
|
return await agentService.threads.get({ id: input.id, userId: context.user.id });
|
|
} catch (error) {
|
|
if (isAgentEnvironmentUnavailable(error)) throwUnavailable();
|
|
throw error;
|
|
}
|
|
}),
|
|
|
|
archive: protectedProcedure
|
|
.route({
|
|
method: "POST",
|
|
path: "/agent/threads/{id}/archive",
|
|
tags: ["Agent"],
|
|
operationId: "archiveAgentThread",
|
|
summary: "Archive agent thread",
|
|
})
|
|
.input(z.object({ id: z.string() }))
|
|
.output(z.void())
|
|
.handler(async ({ context, input }) => {
|
|
try {
|
|
await agentService.threads.archive({ id: input.id, userId: context.user.id });
|
|
} catch (error) {
|
|
if (isAgentEnvironmentUnavailable(error)) throwUnavailable();
|
|
throw error;
|
|
}
|
|
}),
|
|
|
|
delete: protectedProcedure
|
|
.route({
|
|
method: "DELETE",
|
|
path: "/agent/threads/{id}",
|
|
tags: ["Agent"],
|
|
operationId: "deleteAgentThread",
|
|
summary: "Delete agent thread",
|
|
})
|
|
.input(z.object({ id: z.string() }))
|
|
.output(z.void())
|
|
.handler(async ({ context, input }) => {
|
|
try {
|
|
await agentService.threads.delete({ id: input.id, userId: context.user.id });
|
|
} catch (error) {
|
|
if (isAgentEnvironmentUnavailable(error)) throwUnavailable();
|
|
throw error;
|
|
}
|
|
}),
|
|
};
|
|
|
|
const messagesRouter = {
|
|
send: protectedProcedure
|
|
.route({
|
|
method: "POST",
|
|
path: "/agent/messages/send",
|
|
tags: ["Agent"],
|
|
operationId: "sendAgentMessage",
|
|
summary: "Send agent message",
|
|
})
|
|
.input(
|
|
z.object({
|
|
threadId: z.string(),
|
|
message: z.custom<UIMessage>(isUiMessage, { message: "Invalid UI message." }),
|
|
attachmentIds: z.array(z.string().trim().min(1)).max(10).optional(),
|
|
}),
|
|
)
|
|
.use(aiRequestRateLimit)
|
|
.handler(async ({ context, input }) => {
|
|
try {
|
|
return await agentService.messages.send({
|
|
userId: context.user.id,
|
|
threadId: input.threadId,
|
|
message: input.message,
|
|
...(input.attachmentIds ? { attachmentIds: input.attachmentIds } : {}),
|
|
});
|
|
} catch (error) {
|
|
if (isAgentEnvironmentUnavailable(error)) throwUnavailable();
|
|
throw error;
|
|
}
|
|
}),
|
|
|
|
stop: protectedProcedure
|
|
.route({
|
|
method: "POST",
|
|
path: "/agent/messages/stop",
|
|
tags: ["Agent"],
|
|
operationId: "stopAgentMessage",
|
|
summary: "Stop active agent run",
|
|
})
|
|
.input(
|
|
z.object({
|
|
threadId: z.string(),
|
|
partialMessage: z.custom<UIMessage>(isUiMessage, { message: "Invalid UI message." }).optional(),
|
|
}),
|
|
)
|
|
.output(z.void())
|
|
.handler(async ({ context, input }) => {
|
|
try {
|
|
await agentService.messages.stop({
|
|
userId: context.user.id,
|
|
threadId: input.threadId,
|
|
...(input.partialMessage ? { partialMessage: input.partialMessage } : {}),
|
|
});
|
|
} catch (error) {
|
|
if (isAgentEnvironmentUnavailable(error)) throwUnavailable();
|
|
throw error;
|
|
}
|
|
}),
|
|
|
|
resume: protectedProcedure
|
|
.route({
|
|
method: "GET",
|
|
path: "/agent/messages/resume",
|
|
tags: ["Agent"],
|
|
operationId: "resumeAgentMessages",
|
|
summary: "Resume agent message stream",
|
|
})
|
|
.input(z.object({ threadId: z.string() }))
|
|
.handler(async ({ context, input }) => {
|
|
try {
|
|
return await agentService.messages.resume({ userId: context.user.id, threadId: input.threadId });
|
|
} catch (error) {
|
|
if (isAgentEnvironmentUnavailable(error)) throwUnavailable();
|
|
throw error;
|
|
}
|
|
}),
|
|
};
|
|
|
|
const attachmentsRouter = {
|
|
create: protectedProcedure
|
|
.route({
|
|
method: "POST",
|
|
path: "/agent/attachments",
|
|
tags: ["Agent"],
|
|
operationId: "createAgentAttachment",
|
|
summary: "Create agent attachment",
|
|
})
|
|
.input(
|
|
z.object({
|
|
threadId: z.string(),
|
|
filename: z.string().trim().min(1),
|
|
mediaType: z.string().trim().min(1),
|
|
data: z.string().min(1),
|
|
}),
|
|
)
|
|
.use(storageUploadRateLimit)
|
|
.handler(async ({ context, input }) => {
|
|
try {
|
|
return await agentService.attachments.create({
|
|
userId: context.user.id,
|
|
threadId: input.threadId,
|
|
filename: input.filename,
|
|
mediaType: input.mediaType,
|
|
data: base64ToUint8Array(input.data),
|
|
});
|
|
} catch (error) {
|
|
if (isAgentEnvironmentUnavailable(error)) throwUnavailable();
|
|
throw error;
|
|
}
|
|
}),
|
|
|
|
delete: protectedProcedure
|
|
.route({
|
|
method: "DELETE",
|
|
path: "/agent/attachments/{id}",
|
|
tags: ["Agent"],
|
|
operationId: "deleteAgentAttachment",
|
|
summary: "Delete agent attachment",
|
|
})
|
|
.input(z.object({ id: z.string() }))
|
|
.output(z.void())
|
|
.handler(async ({ context, input }) => {
|
|
try {
|
|
await agentService.attachments.delete({ id: input.id, userId: context.user.id });
|
|
} catch (error) {
|
|
if (isAgentEnvironmentUnavailable(error)) throwUnavailable();
|
|
throw error;
|
|
}
|
|
}),
|
|
};
|
|
|
|
const actionsRouter = {
|
|
revert: protectedProcedure
|
|
.route({
|
|
method: "POST",
|
|
path: "/agent/actions/{id}/revert",
|
|
tags: ["Agent"],
|
|
operationId: "revertAgentAction",
|
|
summary: "Revert agent action",
|
|
})
|
|
.input(z.object({ id: z.string() }))
|
|
.handler(async ({ context, input }) => {
|
|
try {
|
|
return await agentService.actions.revert({ id: input.id, userId: context.user.id });
|
|
} catch (error) {
|
|
if (isAgentEnvironmentUnavailable(error)) throwUnavailable();
|
|
throw error;
|
|
}
|
|
}),
|
|
};
|
|
|
|
export const agentRouter = {
|
|
threads: threadsRouter,
|
|
messages: messagesRouter,
|
|
attachments: attachmentsRouter,
|
|
actions: actionsRouter,
|
|
};
|