ai.controller.ts

ai.controller.tsapps/api/src/modules/ai/ai.controller.tsraw ← ai4,637 B← Back to the app
1import { Body, Controller, Delete, Get, Inject, Param, Patch, Post, Query, Req, Res } from "@nestjs/common";
2import type { Request, Response } from "express";
3import { AiChatService } from "./ai-chat.service.js";
4import { AiService } from "./ai.service.js";
5import { ZodValidate } from "../../common/pipes/zod-validation.pipe.js";
6import { requireActor, requireUser } from "../../common/types.js";
7import { ChatDto, type ChatInput, CreateConversationDto, type CreateConversationInput, ListMessagesQuery, type ListMessagesInput } from "./dto.js";
8import { RenameConversationDto, type RenameConversationInput, SendMessageDto, type SendMessageInput } from "./dto.js";
9 
10@Controller()
11export class AiController {
12  // Explicit `@Inject` (the codebase convention): the integration/ESM
13  // runners do not emit `design:paramtypes`, so a bare class-typed
14  // constructor param would silently fail to inject (caught by the
15  // TASK-0121 capability suite: `this.ai` undefined on the first HTTP call).
16  constructor(
17    @Inject(AiService) private readonly ai: AiService,
18    @Inject(AiChatService) private readonly aiChat: AiChatService
19  ) {}
20 
21  /**
22   * POST /workspaces/:workspaceId/ai/ping — the AI diagnostic (TASK-0121):
23   * resolved provider/model + embedding dimension + budget state. No tokens
24   * are spent. Errors: 403 (non-member / insufficient key scope), 503 (AI
25   * misconfigured). TASK-0127: workspace-level — API keys accepted.
26   */
27  @Post("workspaces/:workspaceId/ai/ping")
28  ping(@Param("workspaceId") workspaceId: string, @Req() req: Request) {
29    return this.ai.ping(workspaceId, requireActor(req));
30  }
31 
32  // TASK-0127: the conversation routes below are USER-IDENTITY-only
33  // (requireUser) — AI conversations are PERSONAL (owned by the calling
34  // user, listed/owned per `userId`); an API key cannot browse or mutate
35  // the creator's conversations. The workspace-level AI operations (ping,
36  // generate, RAG, database AI, writing) DO accept keys.
37 
38  @Get("workspaces/:workspaceId/ai/conversations")
39  list(
40    @Param("workspaceId") workspaceId: string,
41    @Req() req: Request
42  ) {
43    return this.ai.listConversations(workspaceId, requireUser(req));
44  }
45 
46  @Post("workspaces/:workspaceId/ai/conversations")
47  create(
48    @Param("workspaceId") workspaceId: string,
49    @Body(ZodValidate(CreateConversationDto)) body: CreateConversationInput,
50    @Req() req: Request
51  ) {
52    return this.ai.createConversation(workspaceId, requireUser(req), body, req);
53  }
54 
55  @Get("ai/conversations/:id")
56  get(@Param("id") id: string, @Req() req: Request) {
57    return this.ai.getConversation(id, requireUser(req));
58  }
59 
60  @Patch("ai/conversations/:id")
61  rename(
62    @Param("id") id: string,
63    @Body(ZodValidate(RenameConversationDto)) body: RenameConversationInput,
64    @Req() req: Request
65  ) {
66    return this.ai.renameConversation(id, requireUser(req), body.title);
67  }
68 
69  @Delete("ai/conversations/:id")
70  remove(@Param("id") id: string, @Req() req: Request) {
71    return this.ai.deleteConversation(id, requireUser(req));
72  }
73 
74  @Get("ai/conversations/:id/messages")
75  messages(
76    @Param("id") id: string,
77    @Query(ZodValidate(ListMessagesQuery)) query: ListMessagesInput,
78    @Req() req: Request
79  ) {
80    return this.ai.listMessages(id, requireUser(req), query);
81  }
82 
83  /**
84   * Chat turn (TASK-0121): single turn through the `@factory/ai` gateway —
85   * budget guard (402/429) → provider stream → both messages persisted with
86   * token counts (the usage ledger). The SSE streaming contract arrives in
87   * TASK-0122 (`POST /:conversationId/messages`).
88   */
89  @Post("workspaces/:workspaceId/ai/chat")
90  chat(
91    @Param("workspaceId") workspaceId: string,
92    @Body(ZodValidate(ChatDto)) body: ChatInput,
93    @Req() req: Request
94  ) {
95    return this.ai.chat(workspaceId, requireUser(req), body, req);
96  }
97 
98  /**
99   * TASK-0122 — Ask AI streaming: SSE stream of ChatDelta frames
100   * (delta / tool_call / usage / error / done — see `docs/api/ai.md`).
101   *
102   * `@Res()` (passthrough: false) — the service owns the socket: pre-stream
103   * failures throw before any byte is written (global filter → JSON
104   * envelope), mid-stream failures are in-band `error` deltas.
105   */
106  @Post("workspaces/:workspaceId/ai/conversations/:conversationId/messages")
107  sendMessage(
108    @Param("workspaceId") workspaceId: string,
109    @Param("conversationId") conversationId: string,
110    @Body(ZodValidate(SendMessageDto)) body: SendMessageInput,
111    @Req() req: Request,
112    @Res() res: Response
113  ) {
114    return this.aiChat.sendMessage(workspaceId, requireUser(req), conversationId, body, req, res);
115  }
116}
117