422 lines
15 KiB
Python
422 lines
15 KiB
Python
|
#!/usr/bin/env python3
|
||
|
|
# -*- coding: utf-8 -*-
|
||
|
|
"""
|
||
|
|
webapp_sliding.py — Web app compagnon Sliding · Chantier C9
|
||
|
|
===========================================================
|
||
|
|
Enveloppe WEB de sliding_api.py (la façade C8) — même API interne que
|
||
|
|
le MCP, autre canal. Starlette pur (Python 3.9, zéro dépendance
|
||
|
|
nouvelle : starlette/uvicorn/jinja2/python-multipart déjà dans le venv).
|
||
|
|
|
||
|
|
Port 8769 · reverse proxy DSM : sliding.bertha-cloud.fr → 127.0.0.1:8769
|
||
|
|
Auth : SECURITY_WORD (le même que l'OAuth MCP) + cookie de session
|
||
|
|
signé HMAC (stdlib). Mono-utilisateur, cohérent avec l'écosystème.
|
||
|
|
|
||
|
|
Narrator web : AgentSession(NARRATOR_ID) en mémoire par projet,
|
||
|
|
réamorcée avec le plan compact persisté (reprime_narrator). Les
|
||
|
|
commandes du prompt terminal (f:, d:) fonctionnent telles quelles.
|
||
|
|
Limite v1 assumée : la conversation vit en RAM (un restart la perd) ;
|
||
|
|
le plan compact, lui, est TOUJOURS persisté — même garantie que le
|
||
|
|
terminal.
|
||
|
|
"""
|
||
|
|
import hashlib
|
||
|
|
import hmac
|
||
|
|
import html
|
||
|
|
import os
|
||
|
|
import secrets
|
||
|
|
import time
|
||
|
|
from pathlib import Path
|
||
|
|
|
||
|
|
from dotenv import load_dotenv
|
||
|
|
from jinja2 import Environment, FileSystemLoader, select_autoescape
|
||
|
|
from starlette.applications import Starlette
|
||
|
|
from starlette.requests import Request
|
||
|
|
from starlette.responses import (FileResponse, HTMLResponse,
|
||
|
|
JSONResponse, RedirectResponse,
|
||
|
|
Response)
|
||
|
|
from starlette.routing import Mount, Route
|
||
|
|
from starlette.staticfiles import StaticFiles
|
||
|
|
|
||
|
|
import facilitator_v9 as fac
|
||
|
|
import sliding_api as api
|
||
|
|
|
||
|
|
load_dotenv()
|
||
|
|
|
||
|
|
SECURITY_WORD = os.getenv("SECURITY_WORD", "")
|
||
|
|
SESSION_SECRET = os.getenv("WEBAPP_SECRET") or hashlib.sha256(
|
||
|
|
("webapp:" + SECURITY_WORD).encode()).hexdigest()
|
||
|
|
BASE = Path(__file__).resolve().parent
|
||
|
|
|
||
|
|
env = Environment(loader=FileSystemLoader(str(BASE / "templates")),
|
||
|
|
autoescape=select_autoescape(["html"]))
|
||
|
|
|
||
|
|
# Sessions Narrator en mémoire : {slug: {"agent": AgentSession,
|
||
|
|
# "chat": [(role, texte)]}}
|
||
|
|
NARRATORS = {}
|
||
|
|
|
||
|
|
|
||
|
|
# ── auth (cookie HMAC, stdlib) ───────────────────────────────────────────────
|
||
|
|
|
||
|
|
def _sign(value: str) -> str:
|
||
|
|
sig = hmac.new(SESSION_SECRET.encode(), value.encode(),
|
||
|
|
hashlib.sha256).hexdigest()
|
||
|
|
return f"{value}.{sig}"
|
||
|
|
|
||
|
|
|
||
|
|
def _verify(cookie: str) -> bool:
|
||
|
|
if not cookie or "." not in cookie:
|
||
|
|
return False
|
||
|
|
value, sig = cookie.rsplit(".", 1)
|
||
|
|
good = hmac.new(SESSION_SECRET.encode(), value.encode(),
|
||
|
|
hashlib.sha256).hexdigest()
|
||
|
|
return hmac.compare_digest(sig, good)
|
||
|
|
|
||
|
|
|
||
|
|
def logged_in(request: Request) -> bool:
|
||
|
|
return _verify(request.cookies.get("sliding_session", ""))
|
||
|
|
|
||
|
|
|
||
|
|
def require_login(request: Request):
|
||
|
|
"""None si connecté, sinon la redirection à retourner."""
|
||
|
|
if logged_in(request):
|
||
|
|
return None
|
||
|
|
return RedirectResponse("/login", status_code=302)
|
||
|
|
|
||
|
|
|
||
|
|
# ── helpers ──────────────────────────────────────────────────────────────────
|
||
|
|
|
||
|
|
def render(name, **ctx):
|
||
|
|
return HTMLResponse(env.get_template(name).render(**ctx))
|
||
|
|
|
||
|
|
|
||
|
|
def _narrator(slug: str):
|
||
|
|
"""Session Narrator du projet — créée et réamorcée au besoin."""
|
||
|
|
entry = NARRATORS.get(slug)
|
||
|
|
if entry:
|
||
|
|
return entry
|
||
|
|
proj = fac.Project(slug)
|
||
|
|
session = fac.AgentSession(fac.NARRATOR_ID)
|
||
|
|
chat = []
|
||
|
|
plan = proj.load_state().get("dernier_plan_compact", "")
|
||
|
|
if plan:
|
||
|
|
try:
|
||
|
|
fac.reprime_narrator(session, proj)
|
||
|
|
chat.append(("system",
|
||
|
|
"Session reprise — plan compact rechargé."))
|
||
|
|
except Exception as e:
|
||
|
|
chat.append(("system", f"Reprise sans réamorçage ({e})"))
|
||
|
|
entry = {"agent": session, "chat": chat, "started": bool(plan)}
|
||
|
|
NARRATORS[slug] = entry
|
||
|
|
return entry
|
||
|
|
|
||
|
|
|
||
|
|
def _chat_html(chat):
|
||
|
|
"""Fragment HTML de l'historique (échappé)."""
|
||
|
|
out = []
|
||
|
|
for role, txt in chat:
|
||
|
|
cls = {"user": "msg-user", "narrator": "msg-bot",
|
||
|
|
"system": "msg-sys"}.get(role, "msg-bot")
|
||
|
|
out.append(f'<div class="msg {cls}"><pre>'
|
||
|
|
f'{html.escape(txt)}</pre></div>')
|
||
|
|
return "".join(out) or '<p class="hint">Écris au Narrator pour ' \
|
||
|
|
'démarrer (les commandes f: et d: ' \
|
||
|
|
'fonctionnent).</p>'
|
||
|
|
|
||
|
|
|
||
|
|
def _safe_child(root: Path, name: str) -> Path:
|
||
|
|
"""Garde anti path-traversal : name doit rester sous root."""
|
||
|
|
p = (root / name).resolve()
|
||
|
|
if not str(p).startswith(str(root.resolve())):
|
||
|
|
raise ValueError("chemin refusé")
|
||
|
|
return p
|
||
|
|
|
||
|
|
|
||
|
|
# ── routes : auth ────────────────────────────────────────────────────────────
|
||
|
|
|
||
|
|
async def login_get(request):
|
||
|
|
if logged_in(request):
|
||
|
|
return RedirectResponse("/", status_code=302)
|
||
|
|
return render("login.html", error="")
|
||
|
|
|
||
|
|
|
||
|
|
async def login_post(request):
|
||
|
|
form = await request.form()
|
||
|
|
if not SECURITY_WORD or form.get("word", "") != SECURITY_WORD:
|
||
|
|
return render("login.html",
|
||
|
|
error="Mot de sécurité incorrect.")
|
||
|
|
resp = RedirectResponse("/", status_code=302)
|
||
|
|
token = _sign(f"bastien:{int(time.time())}:"
|
||
|
|
f"{secrets.token_urlsafe(8)}")
|
||
|
|
resp.set_cookie("sliding_session", token, httponly=True,
|
||
|
|
secure=True, samesite="lax",
|
||
|
|
max_age=60 * 60 * 24 * 30)
|
||
|
|
return resp
|
||
|
|
|
||
|
|
|
||
|
|
async def logout(request):
|
||
|
|
resp = RedirectResponse("/login", status_code=302)
|
||
|
|
resp.delete_cookie("sliding_session")
|
||
|
|
return resp
|
||
|
|
|
||
|
|
|
||
|
|
# ── routes : projets ─────────────────────────────────────────────────────────
|
||
|
|
|
||
|
|
async def home(request):
|
||
|
|
guard = require_login(request)
|
||
|
|
if guard:
|
||
|
|
return guard
|
||
|
|
return render("projects.html", projects=api.list_projects())
|
||
|
|
|
||
|
|
|
||
|
|
async def create_project(request):
|
||
|
|
guard = require_login(request)
|
||
|
|
if guard:
|
||
|
|
return guard
|
||
|
|
form = await request.form()
|
||
|
|
nom = (form.get("nom") or "").strip()
|
||
|
|
if nom:
|
||
|
|
r = api.create_project(nom)
|
||
|
|
return RedirectResponse(f"/p/{r['slug']}", status_code=302)
|
||
|
|
return RedirectResponse("/", status_code=302)
|
||
|
|
|
||
|
|
|
||
|
|
async def project_page(request):
|
||
|
|
guard = require_login(request)
|
||
|
|
if guard:
|
||
|
|
return guard
|
||
|
|
slug = request.path_params["slug"]
|
||
|
|
try:
|
||
|
|
info = api.get_project(slug)
|
||
|
|
except ValueError:
|
||
|
|
return RedirectResponse("/", status_code=302)
|
||
|
|
entry = NARRATORS.get(slug)
|
||
|
|
chat = entry["chat"] if entry else []
|
||
|
|
# previews existantes ?
|
||
|
|
previews = []
|
||
|
|
pptx = info.get("dernier_pptx")
|
||
|
|
if pptx:
|
||
|
|
prev_dir = Path(pptx).parent / f"{Path(pptx).stem}_previews"
|
||
|
|
if prev_dir.is_dir():
|
||
|
|
previews = sorted(p.name for p in
|
||
|
|
prev_dir.glob("slide-*.png"))
|
||
|
|
return render("project.html", p=info, chat_html=_chat_html(chat),
|
||
|
|
previews=previews)
|
||
|
|
|
||
|
|
|
||
|
|
# ── routes : chat Narrator ───────────────────────────────────────────────────
|
||
|
|
|
||
|
|
async def chat_post(request):
|
||
|
|
guard = require_login(request)
|
||
|
|
if guard:
|
||
|
|
return guard
|
||
|
|
slug = request.path_params["slug"]
|
||
|
|
form = await request.form()
|
||
|
|
msg = (form.get("message") or "").strip()
|
||
|
|
if not msg:
|
||
|
|
return HTMLResponse("")
|
||
|
|
entry = _narrator(slug)
|
||
|
|
entry["chat"].append(("user", msg))
|
||
|
|
try:
|
||
|
|
if entry["started"]:
|
||
|
|
answer = entry["agent"].send(msg)
|
||
|
|
else:
|
||
|
|
answer = entry["agent"].start(msg)
|
||
|
|
entry["started"] = True
|
||
|
|
entry["chat"].append(("narrator", answer))
|
||
|
|
except Exception as e:
|
||
|
|
entry["chat"].append(("system", f"Erreur agent : {e}"))
|
||
|
|
return HTMLResponse(_chat_html(entry["chat"]))
|
||
|
|
|
||
|
|
|
||
|
|
async def plan_save(request):
|
||
|
|
guard = require_login(request)
|
||
|
|
if guard:
|
||
|
|
return guard
|
||
|
|
slug = request.path_params["slug"]
|
||
|
|
form = await request.form()
|
||
|
|
api.set_plan(slug, form.get("plan_compact") or "")
|
||
|
|
return HTMLResponse('<span class="ok">Plan sauvegardé ✓</span>')
|
||
|
|
|
||
|
|
|
||
|
|
# ── routes : documents & assets ──────────────────────────────────────────────
|
||
|
|
|
||
|
|
async def upload_doc(request):
|
||
|
|
guard = require_login(request)
|
||
|
|
if guard:
|
||
|
|
return guard
|
||
|
|
slug = request.path_params["slug"]
|
||
|
|
form = await request.form()
|
||
|
|
up = form.get("file")
|
||
|
|
if up is not None and getattr(up, "filename", ""):
|
||
|
|
data = await up.read()
|
||
|
|
try:
|
||
|
|
text = data.decode("utf-8")
|
||
|
|
api.add_document(slug, up.filename, text)
|
||
|
|
except UnicodeDecodeError:
|
||
|
|
import base64 as _b64
|
||
|
|
api.add_document(slug, up.filename,
|
||
|
|
_b64.b64encode(data).decode("ascii"),
|
||
|
|
encoding="base64")
|
||
|
|
return RedirectResponse(f"/p/{slug}", status_code=302)
|
||
|
|
|
||
|
|
|
||
|
|
async def upload_asset(request):
|
||
|
|
guard = require_login(request)
|
||
|
|
if guard:
|
||
|
|
return guard
|
||
|
|
slug = request.path_params["slug"]
|
||
|
|
proj = fac.Project(slug)
|
||
|
|
form = await request.form()
|
||
|
|
up = form.get("file")
|
||
|
|
if up is not None and getattr(up, "filename", ""):
|
||
|
|
assets = proj.root / "assets"
|
||
|
|
assets.mkdir(exist_ok=True)
|
||
|
|
dest = _safe_child(assets, Path(up.filename).name)
|
||
|
|
dest.write_bytes(await up.read())
|
||
|
|
return RedirectResponse(f"/p/{slug}", status_code=302)
|
||
|
|
|
||
|
|
|
||
|
|
# ── routes : pipeline (long — le reverse proxy doit tolérer 600 s) ──────────
|
||
|
|
|
||
|
|
async def formalise(request):
|
||
|
|
guard = require_login(request)
|
||
|
|
if guard:
|
||
|
|
return guard
|
||
|
|
slug = request.path_params["slug"]
|
||
|
|
entry = _narrator(slug)
|
||
|
|
if not entry["started"]:
|
||
|
|
return HTMLResponse('<p class="err">Aucune conversation '
|
||
|
|
'Narrator — travaille le plan d\'abord.'
|
||
|
|
'</p>')
|
||
|
|
try:
|
||
|
|
md = entry["agent"].send(
|
||
|
|
"formalise — produis la formalisation complète slide par "
|
||
|
|
"slide (SLIDE N — titre, contenus, Notes éventuelles), "
|
||
|
|
"sans commentaire autour.")
|
||
|
|
entry["chat"].append(("system", "Formalisation demandée…"))
|
||
|
|
r = api.formalise(slug, md)
|
||
|
|
except Exception as e:
|
||
|
|
return HTMLResponse(f'<p class="err">Échec : '
|
||
|
|
f'{html.escape(str(e))}</p>')
|
||
|
|
if r.get("error"):
|
||
|
|
return HTMLResponse(f'<p class="err">'
|
||
|
|
f'{html.escape(str(r))}</p>')
|
||
|
|
return HTMLResponse(
|
||
|
|
f'<p class="ok">Deck généré : {r["slides"]} slides — '
|
||
|
|
f'{html.escape(r["validation"])}<br>'
|
||
|
|
f'<a href="/p/{slug}/download">Télécharger le PPTX</a> · '
|
||
|
|
f'<button hx-post="/p/{slug}/preview" '
|
||
|
|
f'hx-target="#gallery" hx-indicator="#busy">Générer les '
|
||
|
|
f'aperçus</button></p>')
|
||
|
|
|
||
|
|
|
||
|
|
async def preview(request):
|
||
|
|
guard = require_login(request)
|
||
|
|
if guard:
|
||
|
|
return guard
|
||
|
|
slug = request.path_params["slug"]
|
||
|
|
r = api.preview(slug)
|
||
|
|
if r.get("error"):
|
||
|
|
return HTMLResponse(f'<p class="err">'
|
||
|
|
f'{html.escape(r["error"])}</p>')
|
||
|
|
cells = "".join(
|
||
|
|
f'<figure><img src="/p/{slug}/previews/{n}" loading="lazy">'
|
||
|
|
f'<figcaption><label><input type="checkbox" '
|
||
|
|
f'name="positions" value="{i + 1}"> {n}</label>'
|
||
|
|
f'</figcaption></figure>'
|
||
|
|
for i, n in enumerate(r["slides"]))
|
||
|
|
return HTMLResponse(
|
||
|
|
f'<form hx-post="/p/{slug}/revise" hx-target="#pipeline-out" '
|
||
|
|
f'hx-indicator="#busy"><div class="gallery">{cells}</div>'
|
||
|
|
f'<input name="instruction" placeholder="Instruction de '
|
||
|
|
f'révision pour les slides cochées" style="width:70%%">'
|
||
|
|
f'<button type="submit">Réviser</button></form>')
|
||
|
|
|
||
|
|
|
||
|
|
async def revise(request):
|
||
|
|
guard = require_login(request)
|
||
|
|
if guard:
|
||
|
|
return guard
|
||
|
|
slug = request.path_params["slug"]
|
||
|
|
form = await request.form()
|
||
|
|
positions = [int(v) for v in form.getlist("positions")]
|
||
|
|
instruction = (form.get("instruction") or "").strip()
|
||
|
|
if not positions or not instruction:
|
||
|
|
return HTMLResponse('<p class="err">Coche des slides et donne '
|
||
|
|
'une instruction.</p>')
|
||
|
|
r = api.revise(slug, positions, instruction)
|
||
|
|
if r.get("error"):
|
||
|
|
return HTMLResponse(f'<p class="err">'
|
||
|
|
f'{html.escape(str(r))}</p>')
|
||
|
|
return HTMLResponse(
|
||
|
|
f'<p class="ok">Slides {r["slides_revisees"]} révisées, deck '
|
||
|
|
f'complet régénéré.<br><a href="/p/{slug}/download">'
|
||
|
|
f'Télécharger</a> · <button hx-post="/p/{slug}/preview" '
|
||
|
|
f'hx-target="#gallery" hx-indicator="#busy">Re-générer les '
|
||
|
|
f'aperçus</button></p>')
|
||
|
|
|
||
|
|
|
||
|
|
# ── routes : fichiers ────────────────────────────────────────────────────────
|
||
|
|
|
||
|
|
async def preview_png(request):
|
||
|
|
guard = require_login(request)
|
||
|
|
if guard:
|
||
|
|
return guard
|
||
|
|
slug = request.path_params["slug"]
|
||
|
|
name = request.path_params["name"]
|
||
|
|
proj = fac.Project(slug)
|
||
|
|
state = proj.load_state()
|
||
|
|
pptx = state.get("dernier_pptx")
|
||
|
|
if not pptx:
|
||
|
|
return Response(status_code=404)
|
||
|
|
prev_dir = Path(pptx).parent / f"{Path(pptx).stem}_previews"
|
||
|
|
try:
|
||
|
|
png = _safe_child(prev_dir, name)
|
||
|
|
except ValueError:
|
||
|
|
return Response(status_code=403)
|
||
|
|
if not png.exists():
|
||
|
|
return Response(status_code=404)
|
||
|
|
return FileResponse(str(png), media_type="image/png")
|
||
|
|
|
||
|
|
|
||
|
|
async def download(request):
|
||
|
|
guard = require_login(request)
|
||
|
|
if guard:
|
||
|
|
return guard
|
||
|
|
slug = request.path_params["slug"]
|
||
|
|
proj = fac.Project(slug)
|
||
|
|
pptx = proj.load_state().get("dernier_pptx")
|
||
|
|
if not pptx or not Path(pptx).exists():
|
||
|
|
return Response(status_code=404)
|
||
|
|
return FileResponse(pptx, filename=Path(pptx).name)
|
||
|
|
|
||
|
|
|
||
|
|
async def health(request):
|
||
|
|
return JSONResponse({"status": "ok", "server": "webapp-sliding",
|
||
|
|
"version": "1.0.0"})
|
||
|
|
|
||
|
|
|
||
|
|
app = Starlette(routes=[
|
||
|
|
Route("/login", login_get, methods=["GET"]),
|
||
|
|
Route("/login", login_post, methods=["POST"]),
|
||
|
|
Route("/logout", logout, methods=["GET"]),
|
||
|
|
Route("/", home, methods=["GET"]),
|
||
|
|
Route("/projects", create_project, methods=["POST"]),
|
||
|
|
Route("/p/{slug}", project_page, methods=["GET"]),
|
||
|
|
Route("/p/{slug}/chat", chat_post, methods=["POST"]),
|
||
|
|
Route("/p/{slug}/plan", plan_save, methods=["POST"]),
|
||
|
|
Route("/p/{slug}/upload", upload_doc, methods=["POST"]),
|
||
|
|
Route("/p/{slug}/upload_asset", upload_asset, methods=["POST"]),
|
||
|
|
Route("/p/{slug}/formalise", formalise, methods=["POST"]),
|
||
|
|
Route("/p/{slug}/preview", preview, methods=["POST"]),
|
||
|
|
Route("/p/{slug}/revise", revise, methods=["POST"]),
|
||
|
|
Route("/p/{slug}/previews/{name}", preview_png, methods=["GET"]),
|
||
|
|
Route("/p/{slug}/download", download, methods=["GET"]),
|
||
|
|
Route("/health", health, methods=["GET"]),
|
||
|
|
Mount("/static", StaticFiles(directory=str(BASE / "static")),
|
||
|
|
name="static"),
|
||
|
|
])
|
||
|
|
|
||
|
|
if __name__ == "__main__":
|
||
|
|
import uvicorn
|
||
|
|
uvicorn.run(app, host="127.0.0.1", port=8769)
|