Ensure functional business domain scraping and connection to system prompt and reports #747
There are no files selected for viewing
| Original file line number | Diff line number | Diff line change |
|---|---|---|
|
|
@@ -85,6 +85,12 @@ export async function getCrossSessionContext(userId?: string): Promise<string> { | |
|
|
||
| export async function generateReportContext(messages: AIMessage[]) { | ||
| try { | ||
| const userId = await getCurrentUserIdOnServer() | ||
| const [systemPrompt, domain] = await Promise.all([ | ||
| userId ? getSystemPrompt(userId) : null, | ||
| userId ? getUserDomain(userId) : null | ||
| ]) | ||
|
|
||
| const crossSessionContext = await getCrossSessionContext() | ||
|
|
||
| const activeMessages = messages | ||
|
|
@@ -109,8 +115,8 @@ export async function generateReportContext(messages: AIMessage[]) { | |
| const strategicContent = activeMessages.filter(msg => msg.role === 'assistant') | ||
|
|
||
| const [execSummary, strategicSynthesis] = await Promise.all([ | ||
| executiveSummaryAgent(crossSessionContext, activeMessages, systemPrompt, domain), | ||
| strategicSynthesisAgent(sensorFusionFindings, strategicContent, systemPrompt, domain) | ||
| ]) | ||
|
|
||
| return { | ||
|
|
@@ -156,6 +162,54 @@ export async function getChat(id: string, userId: string): Promise<DrizzleChat | | |
| } | ||
| } | ||
|
|
||
| export async function getUserDomain( | ||
| userId: string | ||
| ): Promise<string | null> { | ||
| if (!userId) return null | ||
|
|
||
| try { | ||
| const result = await db.select({ metadata: users.metadata }) | ||
| .from(users) | ||
| .where(eq(users.id, userId)) | ||
| .limit(1); | ||
|
|
||
| const metadata = result[0]?.metadata as { domain?: string } | null; | ||
| return metadata?.domain || null; | ||
| } catch (error) { | ||
| console.error('getUserDomain: Error:', error) | ||
| return null | ||
| } | ||
| } | ||
|
|
||
| export async function saveUserDomain( | ||
| userId: string, | ||
| domain: string | ||
| ): Promise<{ success?: boolean; error?: string }> { | ||
| if (!userId) return { error: 'User ID is required' } | ||
|
|
||
| try { | ||
| const result = await db.select({ metadata: users.metadata }) | ||
| .from(users) | ||
| .where(eq(users.id, userId)) | ||
| .limit(1); | ||
|
|
||
| const currentMetadata = (result[0]?.metadata || {}) as Record<string, any>; | ||
| await db.update(users) | ||
| .set({ | ||
| metadata: { | ||
| ...currentMetadata, | ||
| domain: domain || null | ||
| } | ||
| }) | ||
| .where(eq(users.id, userId)); | ||
|
|
||
| return { success: true } | ||
| } catch (error) { | ||
| console.error('saveUserDomain: Error:', error) | ||
| return { error: 'Failed to save user domain' } | ||
| } | ||
| } | ||
|
Comment on lines
+165
to
+211
Contributor
There was a problem hiding this comment. 🔒 Security & Privacy | 🟠 Major | ⚡ Quick win 🧩 Analysis chain🏁 Script executed: #!/bin/bash
set -euo pipefail
echo "Tracked files around chat.ts:"
git ls-files | grep -E '(^|/)chat\.ts$|auth|get.*currentUser|session' | head -200
echo
echo "Search getUserDomain/saveUserDomain usage and currentUserId helpers:"
rg -n "getUserDomain|saveUserDomain|getCurrentUserIdOnServer|currentUserId|getCurrentUser|auth" -S . --glob '!node_modules' --glob '!dist' --glob '!build' | head -300
echo
echo "Inspect lib/actions/chat.ts relevant section:"
wc -l lib/actions/chat.ts
sed -n '1,260p' lib/actions/chat.tsRepository: QueueLab/QCX Length of output: 50368 🌐 Web query:
💡 Result: There is no single "Nova Framework" that natively provides all the functions and file paths referenced in your query as a unified system. Instead, your query combines components from three distinct contexts: 1. Authentication and User IDs: The function getCurrentUserIdOnServer is commonly found in Next.js-based applications (such as the QueueLab/QCX project) to retrieve the authenticated user's ID within Server Actions or API routes [1][2][3][4]. 2. Nova Framework (Erlang/Elixir): The "Nova Framework" is a real web framework for the Erlang ecosystem [5]. It uses a library called nova_auth for authentication [6][7]. It does not use lib/actions/chat.ts (a TypeScript/Next.js pattern) [8][9]. 3. Nova (Code Editor): There is also an app called Nova (a macOS code editor by Panic) [10], which provides its own APIs (e.g., nova.workspace.config) for extensions but is unrelated to web framework backend logic [10]. Regarding the specific items mentioned: - getCurrentUserIdOnServer: This is a custom helper function implemented in specific Next.js projects (like QCX) to bridge authentication sessions with database operations [2][4]. It is not a standard API of any framework called "Nova." - getUserDomain / saveUserDomain: These functions are not standard features of the Erlang Nova framework nor common Next.js boilerplate. If they exist in your codebase, they are likely custom business logic specific to your application's domain management. - lib/actions/chat.ts: This is a standard path structure for Server Actions in Next.js applications [9][11][12]. It typically contains functions for handling chat interactions, such as loading history or persisting messages [9][13]. If you are working in a Next.js project and see these in your lib/actions/chat.ts file, they are application-specific utilities for managing user data or settings, not framework-provided APIs. Citations:
Authorize domain reads and writes on the server.
🤖 Prompt for AI Agents |
||
|
|
||
| /** | ||
| * Retrieves all messages for a specific chat. | ||
| */ | ||
|
|
||
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -1,22 +1,36 @@ | ||
| import { generateText } from 'ai' | ||
| import { getModel } from '@/lib/utils' | ||
|
|
||
| export async function executiveSummaryAgent( | ||
| crossSessionContext: string, | ||
| activeMessages: any[], | ||
| systemPrompt?: string | null, | ||
| domain?: string | null | ||
| ) { | ||
| try { | ||
| const model = await getModel() | ||
|
|
||
| let systemInstruction = `You are a high-level geospatial intelligence analyst. Based on the provided user history and current conversation, generate: | ||
| 1. A professional, concise report title (max 60 characters). | ||
| 2. A 150-200 word executive summary that synthesizes the intelligence findings, observations, and spatial analysis discussed, taking into account broader system-wide context from previous sessions.`; | ||
|
|
||
| if (systemPrompt) { | ||
| systemInstruction += `\n\nWhen writing, align the tone, persona, and focus with the user's custom system prompt/business profile: "${systemPrompt}"`; | ||
| } | ||
| if (domain) { | ||
| systemInstruction += `\n\nThis intelligence report is generated specifically for the business domain: ${domain}. Ensure the observations and summary are tailored to this business context.`; | ||
| } | ||
|
|
||
| systemInstruction += `\n\nFormat your response as a JSON object: | ||
| { | ||
| "title": "The Title Here", | ||
| "summary": "The executive summary here..." | ||
| } | ||
| Do not include any other text or markdown formatting in your response.`; | ||
|
|
||
| const { text } = await generateText({ | ||
| model, | ||
| system: systemInstruction, | ||
| messages: [ | ||
| { role: 'system', content: `User History Context:\n${crossSessionContext}` }, | ||
| ...activeMessages | ||
|
|
||
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -1,25 +1,39 @@ | ||
| import { generateText } from 'ai' | ||
| import { getModel } from '@/lib/utils' | ||
|
|
||
| export async function strategicSynthesisAgent( | ||
| sensorFusionFindings: any[], | ||
| strategicContent: any[], | ||
| systemPrompt?: string | null, | ||
| domain?: string | null | ||
| ) { | ||
| try { | ||
| const model = await getModel() | ||
|
|
||
| const findingsContext = sensorFusionFindings.map(f => f.summary || JSON.stringify(f)).join('\n\n') | ||
| const strategyContext = strategicContent.map(s => s.content).join('\n\n') | ||
|
|
||
| let systemInstruction = `You are a strategic intelligence officer. Your task is to synthesize "new knowledge" narrative derived from exploration. | ||
| Focus on insights, implications, and decisions. | ||
| DO NOT restate sensor-fusion observations or raw data. | ||
| Instead, explain what these findings mean for the overall mission and what strategic actions are recommended.`; | ||
|
|
||
| if (systemPrompt) { | ||
| systemInstruction += `\n\nEnsure recommendations, insights, and strategic implications align with the user's custom system prompt/business profile: "${systemPrompt}"`; | ||
| } | ||
| if (domain) { | ||
| systemInstruction += `\n\nTailor the strategic assessment specifically for the business domain: ${domain}`; | ||
| } | ||
|
|
||
| systemInstruction += `\n\nFormat your response as a JSON object: | ||
| { | ||
| "strategicOutput": "The synthesized strategic narrative here..." | ||
| } | ||
| Do not include any other text or markdown formatting in your response.`; | ||
|
|
||
| const { text } = await generateText({ | ||
| model, | ||
| system: systemInstruction, | ||
| messages: [ | ||
| { role: 'user', content: `Sensor Fusion Findings:\n${findingsContext}\n\nStrategic Content:\n${strategyContext}` } | ||
| ], | ||
|
|
||
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
[blocking] This server action trusts a caller-supplied
userIdinstead of resolving the authenticated database user. The settings caller passes Clerkuser.id, whileusers.idis the internal UUID, so normal domain saves/loads fail; an authenticated caller can also pass another user's UUID to read or overwrite that user's metadata. UsegetCurrentUserIdOnServer()inside both domain actions and ignore the browser-provided ID.