mirror of
https://github.com/MBombeck/HealthLog.git
synced 2026-11-10 05:12:14 +00:00
Marc-André Bombeck
e2b7e7350e
The AI settings page posted to /api/consent/ai/web on every mount and the server minted an ai_full receipt for it, so an account that had agreed to nothing sent its health data to the operator's provider from background jobs. Native builds synced a receipt the same way on every launch. - Both grant routes now require `confirm: true`; anything else writes nothing and answers 400 consent.ai.confirmRequired. - Remove the mount-time heal. A consent card names the operator's service and the data that would go there, with one Agree button, in Settings > AI and on the Insights overview while AI is closed by the missing consent alone. - Publish the standing consent as `ai.consent` on /api/auth/me (status, since, recipients); the settings card renders active-since and the withdraw control from it. - Existing receipts stay valid. - Guard that no client grants outside a click handler, route tests for the confirmation, and an integration test that a fresh operator-key account gets no background AI text until it agrees.
68 lines
3.0 KiB
TypeScript
68 lines
3.0 KiB
TypeScript
"use client";
|
|
|
|
/**
|
|
* Settings → AI section wrapper.
|
|
*
|
|
* v1.16.4 — the former 2k-LOC monolith is split into per-provider
|
|
* subcomponents under `src/components/settings/ai/` (one file per
|
|
* provider form, plus the chain / runtime cards). This file only owns
|
|
* the section frame and the card order; behaviour lives in the parts.
|
|
*
|
|
* v1.18.0 (S5) — the Coach preference cards (disable toggle, preferences,
|
|
* memory) moved out to the dedicated Coach section. The AI section keeps
|
|
* only provider / model / BYOK configuration.
|
|
*
|
|
* v1.18.1 (D8) — the "About me" context moved to Settings → Account (under
|
|
* Profil, before Zyklus-Tracking). It is personal medical context the daily
|
|
* briefing reads too, so it belongs with the account profile rather than the
|
|
* provider-configuration screen.
|
|
*/
|
|
|
|
import { AiConsentRequest } from "@/components/ai/ai-consent-request";
|
|
import { AiInsightsCard } from "@/components/settings/ai/ai-insights-card";
|
|
import { OperatorOffNotice } from "@/components/settings/ai/operator-off-notice";
|
|
import { StoredCoachMemory } from "@/components/settings/coach-memory-section";
|
|
import { AiSetupHint } from "@/components/insights/ai-setup-hint";
|
|
import { useAuth } from "@/hooks/use-auth";
|
|
import { useMounted } from "@/hooks/use-mounted";
|
|
import { isSurfaceVisible } from "@/lib/modules/surface";
|
|
|
|
export function AiSection() {
|
|
const { isAuthenticated, user } = useAuth();
|
|
// v1.16.6 — the auth query can resolve before this boundary
|
|
// hydrates; every `disabled={!isAuthenticated}` binding in the child
|
|
// cards would then disagree with the SSR HTML (React #418). Gate the
|
|
// prop on `useMounted()` so the hydration render matches the
|
|
// server-rendered "not yet authenticated" state and the cards enable
|
|
// on the first client re-render.
|
|
const mounted = useMounted();
|
|
const authed = mounted && isAuthenticated;
|
|
|
|
// v1.18.6 (W9) — the visible heading + subtitle now come from the shared
|
|
// `<SettingsSectionFrame>` in the route; this body is the single provider
|
|
// card. (The "About me" context moved to Settings → Account in v1.18.1 D8.)
|
|
//
|
|
// v1.39 — above the provider card: what the operator has switched off (so
|
|
// nothing below reads as broken), and the one calm setup hint while no
|
|
// provider is configured, or the consent question while the operator's
|
|
// provider waits on it. Below it: what the Coach stored, while Settings →
|
|
// Coach is not reachable, so it can always be read and deleted.
|
|
const coachSettingsReachable = isSurfaceVisible(
|
|
"settings:coach",
|
|
user?.modules,
|
|
);
|
|
return (
|
|
<div className="space-y-6">
|
|
<OperatorOffNotice />
|
|
<AiSetupHint surface="settings" />
|
|
{/* v1.43.2 — the consent question, above the provider card, while the
|
|
operator's provider is closed by nothing but the missing consent. */}
|
|
<AiConsentRequest surface="settings" />
|
|
<AiInsightsCard isAuthenticated={authed} />
|
|
{authed && !coachSettingsReachable ? (
|
|
<StoredCoachMemory isAuthenticated={authed} />
|
|
) : null}
|
|
</div>
|
|
);
|
|
}
|