mirror of
https://github.com/Termix-SSH/Termix.git
synced 2026-10-28 14:15:24 +00:00
LukeGus
e372b0eda7
Alert rules already auto-migrate into automations on boot and the old engine stands down after. Deletes the rule/firing tables, routes, UI, and AI tools; keeps notification channels since automations still use them. Also fixes automations' notify step, which still called the deleted repository.
88 lines
3.7 KiB
JavaScript
88 lines
3.7 KiB
JavaScript
/**
|
|
* AI Assistant - first-party, in-process plugin.
|
|
*
|
|
* This plugin runs on the main thread rather than in a worker for the same
|
|
* reason ssh-terminal, docker and host-metrics do (see
|
|
* src/backend/plugins/first-party.ts): it writes directly across hosts,
|
|
* snippets, fleets and automations through their repositories,
|
|
* runs approved commands over the shared SSH pool via resolveHostById and
|
|
* withConnection, and streams its chat replies as server-sent events. None
|
|
* of that fits the worker ctx -- ctx.hosts is a 13-field read-only view with
|
|
* no write methods and no snippets/fleets/automations surface at all,
|
|
* and ctx.http.route replies with a single postMessage value rather than a
|
|
* stream.
|
|
*
|
|
* Unlike ssh-terminal/docker/host-metrics, this plugin does not own a live
|
|
* transport (no WebSocket server, no long-lived connection that must outlive
|
|
* the main server's route table), so it does not get its own port. Instead
|
|
* it registers its Express router with the always-mounted /ai dispatcher in
|
|
* src/backend/database/routes/ai-dispatch.ts, the same "register a router,
|
|
* a small dispatcher forwards to it" shape /plugin-api uses for worker
|
|
* plugins, just scoped to this one path so /ai/* keeps its existing routes
|
|
* instead of moving under /plugin-api/ai/.
|
|
*
|
|
* routes.ts is what used to be src/backend/ai/index.ts, moved here with its
|
|
* sibling modules (context.ts, egress.ts, engine.ts, gating.ts, redaction.ts,
|
|
* providers/, tools/) and rewritten from `export default router` into
|
|
* startAiService()/stopAiService(), called from activate()/deactivate()
|
|
* below.
|
|
*/
|
|
|
|
import path from "node:path";
|
|
import { fileURLToPath } from "node:url";
|
|
|
|
/**
|
|
* Loads a module by its path relative to this file's own directory.
|
|
*
|
|
* The plugin ships beside dist/backend, so in a built server the compiled
|
|
* .js for the moved AI files (routes.js, ...) sits right next to this .mjs,
|
|
* and core modules resolve via ../../../backend/backend/... from there
|
|
* (dist/plugins/ai/backend -> dist/backend/backend). Under vitest/dev nothing
|
|
* imports this plugin directly (the loader loads in-process plugins with a
|
|
* plain dynamic import, no tsx loader involved), so the only layout that
|
|
* needs to resolve here is the built one.
|
|
*/
|
|
async function loadRelative(relativePath) {
|
|
const here = path.dirname(fileURLToPath(import.meta.url));
|
|
const target = path.join(here, `${relativePath}.js`);
|
|
return import(new URL(`file://${target.replace(/\\/g, "/")}`).href);
|
|
}
|
|
|
|
let routesModule = null;
|
|
|
|
export async function activate(ctx) {
|
|
routesModule = await loadRelative("routes");
|
|
routesModule.startAiService();
|
|
|
|
// Offered by reference, not copied: this hands over a resolver, so the key
|
|
// stays ours. Rotating or deleting the provider takes effect on the next
|
|
// read by any borrower, and deactivate() below withdraws the offer entirely.
|
|
// The resolve is per-user because the keys are stored per-user and encrypted
|
|
// under that user's data key, so a borrowed read returns the acting user's
|
|
// own default key, never someone else's.
|
|
ctx.secrets.offer("api-key", async (userId) => {
|
|
const { createCurrentAiRepository } = await loadRelative(
|
|
"../../../backend/backend/database/repositories/factory",
|
|
);
|
|
const repository = createCurrentAiRepository();
|
|
const providers = await repository.listProviders(userId);
|
|
const preferred = providers.find((provider) => provider.apiKeyPrefix);
|
|
if (!preferred) return null;
|
|
|
|
const withSecret = await repository.findProviderWithSecret(
|
|
preferred.id,
|
|
userId,
|
|
);
|
|
return withSecret?.apiKey ?? null;
|
|
});
|
|
|
|
ctx.log.info("AI assistant router registered at /ai");
|
|
}
|
|
|
|
export async function deactivate() {
|
|
if (routesModule) {
|
|
routesModule.stopAiService();
|
|
routesModule = null;
|
|
}
|
|
}
|