Keysat
974c3eb07d
Five providers behind one streaming abstraction:
- claude (Anthropic)
- openai (api.openai.com)
- openai-compatible (any base URL — OpenRouter / LiteLLM /
vLLM / Together / your own gateway)
- gemini (Google)
- ollama (self-hosted; no key; LAN URL like
http://ollama.embassy:11434)
The "self-hosted Ollama on Start9" angle is the killer use case —
configure Settings → AI integration with the LAN URL of your Ollama
service and no API keys ever leave your network.
Architecture
- lib/ai/types.ts LLMProvider streaming interface
- lib/ai/sse.ts shared SSE + NDJSON line iterators
- lib/ai/providers/*.ts 5 implementations + factory
- lib/ai/programSchema.ts Zod schema + JSON-schema-for-prompt +
parseAIProgram with markdown-fence
stripping and balanced-brace JSON
extraction
- lib/ai/apply.ts materializes parsed AIProgram into
Program tree (validates exerciseIds,
rejects unresolved nulls, atomic
transaction, sets aiGenerated=true)
Schema
- UserPreferences gets aiProvider/aiModel/aiBaseUrl/aiApiKey
(plaintext — same threat model as the rest of /data). Dead
enableClaudeAI/claudeApiKey columns from v1.0.0:1-7 stay as
no-op fields.
- AIPromptTemplate (userId nullable; userId=NULL = built-in)
- AIGeneration (raw response + parsed program + status +
appliedProgramId + token counts)
- All compat-ALTER'd in docker_entrypoint.sh on first boot.
API
- POST /api/ai/generate SSE streaming: emits
generation/text/usage/complete
events; persists AIGeneration
row up front so failures show
in history too
- POST /api/ai/apply takes user-edited AIProgram,
creates Program, marks
generation as applied
- GET /api/ai/templates built-ins + this user's own
- POST /api/ai/templates create user-owned template
- PATCH /api/ai/templates/[id] edit; built-ins admin-only
- DELETE /api/ai/templates/[id] delete; built-ins admin-only
- GET /api/ai/generations list (paginated)
- GET /api/ai/generations/[id] full row
- DELETE /api/ai/generations/[id] delete one (Program survives)
- GET /api/ai/config returns aiKeyConfigured flag,
never plaintext key
- POST /api/ai/config update provider config
- DELETE /api/admin/ai/generations admin-only "clear all" with
optional userId / olderThanDays
UI
- Settings → AI integration provider/model/URL/key form;
plaintext key warning visible
- /main/ai hub page with cards
- /main/ai/generate template picker + textarea +
live SSE stream + cancel +
ProgramPreview with inline
unknown-exercise resolver +
apply button + redirect to
the new Program
- /main/ai/templates list + create + edit + delete;
per-row "show prompt" expand;
built-in delete warns about
reconcile re-creation
- /main/ai/history list + delete; status badges;
link to applied Program
- Nav: "AI" entry between Programs and Exercises (Sparkles icon)
Built-in templates
- prisma/aiTemplates.seed.json: 5 starter templates (hypertrophy /
strength / endurance / recovery / custom)
- prisma/ensurePromptTemplates.cjs: per-boot reconcile,
INSERT-or-UPDATE keyed on (userId IS NULL AND name=...);
user-created templates never touched
Tests
- tests/ai-programSchema.test.ts: extractJson + parseAIProgram
edge cases (markdown fences, balanced braces, malformed JSON,
Zod shape rejection, unresolved-exerciseId tolerance)
- tests/ai-apply.test.ts: materializes valid AIProgram, rejects
cross-user exerciseIds, rejects unresolved exercises, honors
isActive flag
- tests/routes-ai-templates.test.ts: built-in vs user permissions,
cross-user template isolation, /api/ai/config plaintext-key safety,
provider enum validation
- 123 tests across 14 files, all passing.
No data migration. Existing /data is augmented with the new columns
+ tables only.
48 lines
1.6 KiB
TypeScript
48 lines
1.6 KiB
TypeScript
import { redirect } from "next/navigation";
|
|
import { getCurrentUser } from "@/lib/auth";
|
|
import SettingsForm from "@/components/settings/SettingsForm";
|
|
import ChangePasswordForm from "@/components/settings/ChangePasswordForm";
|
|
import SessionsList from "@/components/settings/SessionsList";
|
|
import AIIntegration from "@/components/settings/AIIntegration";
|
|
import ExportMyData from "@/components/settings/ExportMyData";
|
|
import DangerZone from "@/components/settings/DangerZone";
|
|
import AdminInstanceSettings from "@/components/settings/AdminInstanceSettings";
|
|
import { getInstanceSettings } from "@/lib/instanceSettings";
|
|
|
|
export default async function SettingsPage() {
|
|
const user = await getCurrentUser();
|
|
|
|
if (!user) {
|
|
redirect("/auth/login");
|
|
}
|
|
|
|
const instanceSettings = user.isAdmin ? await getInstanceSettings() : null;
|
|
|
|
return (
|
|
<div className="min-h-screen bg-[#0A0A0A]">
|
|
<div className="border-b border-zinc-800 px-4 py-4 sm:px-6">
|
|
<div className="max-w-2xl mx-auto">
|
|
<h1 className="text-2xl font-bold text-white">Settings</h1>
|
|
<p className="text-zinc-500 text-sm mt-1">
|
|
Manage your preferences and account
|
|
</p>
|
|
</div>
|
|
</div>
|
|
|
|
<div className="max-w-2xl mx-auto px-4 py-6 sm:px-6 space-y-8">
|
|
<SettingsForm user={user} />
|
|
<ChangePasswordForm />
|
|
<SessionsList />
|
|
<AIIntegration />
|
|
<ExportMyData />
|
|
{user.isAdmin && instanceSettings && (
|
|
<AdminInstanceSettings
|
|
initialSignupsOpen={instanceSettings.signupsOpen}
|
|
/>
|
|
)}
|
|
<DangerZone />
|
|
</div>
|
|
</div>
|
|
);
|
|
}
|