Create account) or ask me to explain this page."
+ );
+ return;
+ }
+ highlightedEl = target;
+ target.classList.add("rb-highlight-target");
+ target.scrollIntoView({ behavior: "smooth", block: "center" });
+ var tip = data.steps && data.steps.length ? data.steps[0] : "This is likely where to start for your question.";
+ showPageOverlay(target, tip);
+ highlightTimeout = setTimeout(clearPageHighlight, 8000);
+ }
function pageContext() {
var t = document.title || "";
@@ -207,7 +374,41 @@
var meta = "";
var m = document.querySelector('meta[name="description"]');
if (m) meta = m.getAttribute("content") || "";
- return [u, t, meta].filter(Boolean).join("\n");
+ var headings = "";
+ try {
+ var hs = Array.prototype.slice.call(document.querySelectorAll("h1,h2,h3")).map(function (el) {
+ return (el && el.textContent ? String(el.textContent) : "").trim();
+ }).filter(Boolean).slice(0, 12);
+ headings = hs.join(" | ");
+ } catch {
+ headings = "";
+ }
+ var bodyText = "";
+ if (includeBodyText) {
+ try {
+ var clone = document.body ? document.body.cloneNode(true) : null;
+ if (clone && clone.querySelectorAll) {
+ var fields = clone.querySelectorAll("input,textarea,select");
+ for (var i = 0; i < fields.length; i++) {
+ var f = fields[i];
+ var tag = (f.tagName || "").toLowerCase();
+ if (tag === "select") {
+ f.textContent = "";
+ } else {
+ f.setAttribute("value", "");
+ f.textContent = "";
+ }
+ }
+ }
+ bodyText = (clone && clone.innerText ? clone.innerText : "")
+ .replace(/\s+/g, " ")
+ .trim()
+ .slice(0, 12000);
+ } catch {
+ bodyText = "";
+ }
+ }
+ return [u, t, meta, headings, bodyText].filter(Boolean).join("\n");
}
function addBot(html) {
@@ -285,6 +486,17 @@
}
var html = "";
if (data.answer) html += escapeHtml(data.answer).replace(/\n/g, "" + escapeHtml(base) + " reachable from this page?");
} finally {
@@ -317,6 +532,17 @@
.replace(/"/g, """);
}
+ function safeUrl(raw) {
+ if (!raw) return "";
+ try {
+ var u = new URL(String(raw), location.href);
+ if (u.protocol !== "http:" && u.protocol !== "https:") return "";
+ return u.toString();
+ } catch {
+ return "";
+ }
+ }
+
sendBtn.addEventListener("click", function () {
void doSend();
});
diff --git a/src/app/api/embed/chat/route.ts b/src/app/api/embed/chat/route.ts
index 0757b1d..99c3673 100644
--- a/src/app/api/embed/chat/route.ts
+++ b/src/app/api/embed/chat/route.ts
@@ -25,7 +25,13 @@ function corsHeaders(originAllow: string | null): HeadersInit {
function originAllowed(projectSite: string | undefined, origin: string | null): boolean {
if (!projectSite || !origin) return true;
- return origin.includes(projectSite) || projectSite.includes(origin.replace(/^https?:\/\//, ""));
+ try {
+ const allowed = new URL(projectSite.includes("://") ? projectSite : `https://${projectSite}`);
+ const actual = new URL(origin);
+ return actual.hostname === allowed.hostname || actual.hostname.endsWith(`.${allowed.hostname}`);
+ } catch {
+ return false;
+ }
}
export async function OPTIONS(req: NextRequest) {
@@ -121,7 +127,7 @@ export async function POST(req: NextRequest) {
const customSources = [...sanitizeCustomSources(body.customSources), ...requestDocs];
const payload = await runNorthstarEmbedChat({ message, pageContext, customSources });
- return NextResponse.json(payload, { headers: corsHeaders(origin) });
+ return NextResponse.json({ ...payload, mode: "demo" }, { headers: corsHeaders(origin) });
}
const auth = req.headers.get("authorization") || "";
@@ -183,6 +189,7 @@ Also output 3-6 short imperative steps as a JSON array string at the very end on
answer:
"AI is not configured. Set GEMINI_API_KEY and/or OPENAI_API_KEY in .env.local for grounded answers from your indexed repository.",
sources: baseSources,
+ mode: "unindexed",
steps: [
"Connect knowledge in Runbook Studio.",
"Run **Index repository** so chunks exist in the vector store.",
@@ -218,6 +225,7 @@ Also output 3-6 short imperative steps as a JSON array string at the very end on
{
answer,
sources: baseSources,
+ mode: "live",
steps
},
{ headers: corsHeaders(origin) }
@@ -225,8 +233,18 @@ Also output 3-6 short imperative steps as a JSON array string at the very end on
} catch (e) {
console.error(e);
return NextResponse.json(
- { error: "AI temporarily unavailable", sources: [], steps: [] },
- { status: 503, headers: corsHeaders(origin) }
+ {
+ answer:
+ "Runbook AI is temporarily unavailable. I can still guide you from indexed docs below while full reasoning recovers.",
+ sources: baseSources,
+ mode: "error",
+ steps: [
+ "Open the most relevant source below and confirm the exact policy text.",
+ "Follow the documented path in order, then retry this question for a deeper walkthrough.",
+ "If the action is still blocked, share the exact error message with your onboarding owner."
+ ]
+ },
+ { headers: corsHeaders(origin) }
);
}
}
diff --git a/src/components/EmbeddedRunbookAssistant.tsx b/src/components/EmbeddedRunbookAssistant.tsx
index 5a31168..e2c6206 100644
--- a/src/components/EmbeddedRunbookAssistant.tsx
+++ b/src/components/EmbeddedRunbookAssistant.tsx
@@ -1,6 +1,6 @@
"use client";
-import { useCallback, useMemo, useState } from "react";
+import { useCallback, useEffect, useMemo, useRef, useState } from "react";
import {
loadImportedDocs,
loadProjectId,
@@ -13,6 +13,7 @@ type ChatResponse = {
error?: string;
sources?: SourceItem[];
steps?: string[];
+ mode?: string;
};
type SourceItem = { title: string; excerpt?: string; url?: string };
@@ -56,6 +57,12 @@ export function EmbeddedRunbookAssistant({
const [messages, setMessages] = useStateUse this page to validate highlight targeting and onboarding guidance.
+ +where is createaccountfind sign up buttonwhere is get startedwhat are the steps to register and start using this service?