layered-assistant-rails 0.4.1 → 0.6.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: '07081dd0ae8adfb43bf4bbfcdb5ae6925faa1d31a196762bec9d52efd5a28d11'
-  data.tar.gz: 305c23332a9a6e41aa5b8e3814565a4be3c0ea9c25a44aa4103c35b2d8e79d42
+  metadata.gz: e20ccd66f325c50ccfa813d277572f2d6c4a4460145fa21697adfef42c2a4e25
+  data.tar.gz: 109f84519abfcc651e7b0b2c89386cddb6a6c92ee51dddca8b2b43b3ebd1ecae
 SHA512:
-  metadata.gz: b148483c047879c248db3d9275c4f8033ca294cc0d5b575b3ac2960c56b78a854ca444894b4d4e59b03279e4fee10712656fc758ef29fadc66f85cfd58254311
-  data.tar.gz: eae3bd16f81cb0542c7e32e7ce332f08027fb24bf5c7241258f5f6c7034e7ef60886dd16871f5de15986c371a9b38d949ad23fc3709de2397df71a1987c6efc8
+  metadata.gz: e68add80616b9619fc97bad66081be5f40013c5354360c06247a9ea05e44985b639ed683e8794edbbe0abf791d7f53cb0887c442483b28b0b2b617586ea80dd3
+  data.tar.gz: 1f22e1f958687aa943a0623316fde162afc517c3c3ca6f299ee1c30e72a36c4b676c00bf7f0af977200489612eaaa009662c332fbd000abf8bd6e587dc051b4e

data/.claude/skills/layered-assistant-rails/SKILL.md

@@ -0,0 +1,207 @@
+---
+name: layered-assistant-rails
+description: Installs, configures, and builds with the layered-assistant-rails gem - a Rails 8+ engine providing AI assistant UI, conversations, providers, models, personas and skills, with a side-panel chat. Use when adding layered-assistant-rails to a Rails app, mounting the engine, configuring authorization and scoping, embedding the assistant panel, or troubleshooting setup.
+license: Apache-2.0
+compatibility: Requires Ruby on Rails >= 8.0, Ruby >= 3.2, layered-ui-rails >= 0.4, importmap-rails >= 2.0, stimulus-rails >= 1.0, turbo-rails
+metadata:
+  author: layered.ai
+  version: "1.0"
+  source: https://github.com/layered-ai-public/layered-assistant-rails
+---
+
+# layered-assistant-rails
+
+A Rails 8+ engine providing an AI assistant: conversations, messages with streaming, configurable providers (Anthropic, OpenAI), models, personas, skills, and a side-panel chat that drops into any layered-ui-rails layout.
+
+It builds on `layered-ui-rails` for layout, components, and theming. Install that gem first (or let this generator install it for you).
+
+## Installation
+
+```bash
+bundle add layered-assistant-rails
+bin/rails generate layered:assistant:install
+bin/rails db:migrate
+```
+
+The install generator:
+
+1. Verifies `layered-ui-rails` is installed - invokes its installer if not.
+2. Adds `import "layered_assistant"` to `app/javascript/application.js` (after the `layered_ui` import).
+3. Creates `config/initializers/layered_assistant.rb` with example `authorize` and `scope` blocks.
+4. Mounts the engine at `/layered/assistant` in `config/routes.rb`.
+5. Copies migrations into the host app via the `layered:assistant:migrations` generator.
+
+After installation, configure the initializer (see below) - **routes return 403 until an `authorize` block is set**. Then visit `/layered/assistant` to set up providers, models, personas, skills and assistants.
+
+## Authorization
+
+All non-public engine routes are gated by an `authorize` block. The block runs in controller context, so you have access to `current_user`, `request`, `redirect_to`, `head`, `main_app`, etc.
+
+```ruby
+# config/initializers/layered_assistant.rb
+
+# Require sign-in (Devise):
+Layered::Assistant.authorize do
+  redirect_to main_app.new_user_session_path unless user_signed_in?
+end
+
+# Restrict to admins:
+Layered::Assistant.authorize do
+  head :forbidden unless current_user&.admin?
+end
+
+# Allow all (no-op):
+Layered::Assistant.authorize do
+end
+```
+
+Until configured, every request returns 403. Public routes under `/layered/assistant/public/...` are exempt - use these to expose specific assistants to anonymous visitors.
+
+## Scoping (multi-tenant ownership)
+
+Engine models with a polymorphic `owner` association (assistants, personas, providers, models, skills, conversations) can be scoped per request. The block receives the model class and returns an `ActiveRecord::Relation`:
+
+```ruby
+Layered::Assistant.scope do |model_class|
+  model_class.where(owner: current_user)
+end
+```
+
+Scope only conversations, leave the rest unscoped:
+
+```ruby
+Layered::Assistant.scope do |model_class|
+  if model_class == Layered::Assistant::Conversation
+    model_class.where(owner: current_user)
+  else
+    model_class.all
+  end
+end
+```
+
+Ownership is enforced **at the controller layer via `scoped()`**, not via model validations. Out-of-scope IDs return 404.
+
+## Optional settings
+
+```ruby
+Layered::Assistant.log_errors = true             # log API errors to stdout
+Layered::Assistant.api_request_timeout = 210     # total streaming API timeout (seconds)
+Layered::Assistant.skip_db_encryption = true     # dev/test only - skip encryption on Provider#secret
+```
+
+`Provider#secret` is encrypted with Rails encrypted attributes, so the host app must have `bin/rails db:encryption:init` keys configured (or set `skip_db_encryption = true` for dev/test).
+
+## Mounting the assistant panel
+
+The engine ships a side-panel chat that plugs into the `layered-ui-rails` panel slot. Use `PanelHelper` inside your layout's `content_for` blocks (always **above** the layout render call):
+
+```erb
+<% content_for :l_ui_panel_heading do %>
+  <%= layered_assistant_panel_header %>
+<% end %>
+
+<% content_for :l_ui_panel_body do %>
+  <%= layered_assistant_panel_body %>
+<% end %>
+
+<%= render template: "layouts/layered_ui/application" %>
+```
+
+The body lazy-loads the conversation list from `panel_conversations_path` via a Turbo Frame.
+
+For a public (unauthenticated) panel scoped to one assistant:
+
+```erb
+<% content_for :l_ui_panel_body do %>
+  <%= layered_assistant_public_panel_body(assistant: @assistant) %>
+<% end %>
+```
+
+## View helpers
+
+| Helper | Purpose |
+|---|---|
+| `layered_assistant_panel_header(**opts, &block)` | Turbo frame for the panel header |
+| `layered_assistant_panel_body(**opts)` | Turbo frame that loads the authenticated panel conversations |
+| `layered_assistant_public_panel_body(assistant:, **opts)` | Turbo frame for an unauthenticated single-assistant panel |
+| `l_assistant_accessible?` | Returns true if the current request would pass the `authorize` block - useful for hiding the panel from unauthorised users |
+
+Example - only render the panel for users who can access it:
+
+```erb
+<% if l_assistant_accessible? %>
+  <% content_for :l_ui_panel_heading do %>
+    <%= layered_assistant_panel_header %>
+  <% end %>
+  <% content_for :l_ui_panel_body do %>
+    <%= layered_assistant_panel_body %>
+  <% end %>
+<% end %>
+```
+
+## Models
+
+All under `Layered::Assistant::*`, tables prefixed `layered_assistant_`. Inherit from `Layered::Assistant::ApplicationRecord`.
+
+| Model | Purpose |
+|---|---|
+| `Provider` | API provider config (Anthropic, OpenAI). Holds the encrypted `secret` (API key) |
+| `Model` | A specific model offered by a `Provider` (e.g. `claude-opus-4-7`) |
+| `Persona` | Reusable system prompt / character |
+| `Skill` | A capability that can be attached to assistants |
+| `Assistant` | A configured assistant: model + persona + skills |
+| `AssistantSkill` | Join between assistant and skill |
+| `Conversation` | A chat session with an assistant, owned polymorphically |
+| `Message` | A single message in a conversation; supports streaming |
+
+Enums are stored as **strings**, not integers.
+
+## Routes
+
+Mounted at `/layered/assistant` by default. Top-level resources: `personas`, `skills`, `assistants` (with nested `conversations`), `providers` (with nested `models`), `conversations` (with nested `messages` and a `stop` member route).
+
+The engine also exposes:
+
+- `panel/conversations` and `panel/conversations/:id/messages` - the authenticated side-panel API
+- `public/assistants`, `public/conversations`, `public/panel/conversations` - unauthenticated entry points for embedding a single assistant on a public page
+
+Use `layered_assistant.<route>_path` from the host app, or `main_app.<route>_path` from inside engine views.
+
+## JavaScript
+
+Stimulus controllers are registered automatically via importmap once `import "layered_assistant"` is in `application.js`:
+
+| Identifier | Purpose |
+|---|---|
+| `composer` | Message composer (textarea autosize, submit-on-enter) |
+| `messages` | Message list rendering and scroll behaviour |
+| `panel` | Assistant side-panel state |
+| `panel-nav` | Conversation list navigation inside the panel |
+| `conversation-select` | Conversation picker |
+| `provider-template` | Provider form prefill from a template |
+
+`message_streaming.js` wires SSE streaming for assistant replies.
+
+## Styling
+
+The engine renders inside `layered-ui-rails` layouts and uses only `l-ui-` classes - no host-app Tailwind utilities are required, and **no engine-only Tailwind classes leak into views** (the host's Tailwind build does not scan engine view files). If you customise the look, theme via `layered-ui-rails` CSS custom properties.
+
+## Conventions
+
+- **Locale**: en-GB unless a technical standard dictates otherwise.
+- **Ownership**: enforce via `scoped()` in controllers, not model validations.
+- **No bundler**: importmap only.
+- **Accessibility**: WCAG 2.2 AA - tables include `<caption>`, `scope="col"`/`scope="row"`, etc.
+
+## Common issues
+
+- **All routes return 403** - no `authorize` block is configured. Edit `config/initializers/layered_assistant.rb`.
+- **Provider creation fails with encryption error** - run `bin/rails db:encryption:init` and add the keys to credentials, or set `Layered::Assistant.skip_db_encryption = true` for dev/test.
+- **Panel body never loads** - `turbo-rails` must be installed and `layered-ui-rails` must be mounted in the layout. Check `import "@hotwired/turbo-rails"` is present.
+- **`layered_assistant` JS controllers missing** - ensure `import "layered_assistant"` is in `app/javascript/application.js` (added by the install generator, after the `layered_ui` import).
+- **Cross-tenant records visible** - configure `Layered::Assistant.scope` to filter by `owner`.
+
+## Further reference
+
+- Repository: https://github.com/layered-ai-public/layered-assistant-rails
+- Companion gem: `layered-ui-rails` - layout, components, helpers (skill `layered-ui-rails`)

data/AGENTS.md

@@ -6,7 +6,7 @@ This file provides guidance to AI agents when working with code in this reposito
 
 **layered-assistant-rails** is a Rails 8+ engine gem (`Layered::Assistant`) providing AI assistant UI components. It uses `isolate_namespace Layered::Assistant` and distributes JS (importmap) to host applications via a generator.
 
-Requires Rails >= 8.0.0, Ruby >= 3.2.0. Depends on sibling gem `layered-ui-rails` (path dependency at `../layered-ui-rails`).
+Requires Rails >= 8.0.0, Ruby >= 3.3.0. Depends on sibling gem `layered-ui-rails` (path dependency at `../layered-ui-rails`).
 
 ## Architecture
 

data/NOTICE

@@ -5,3 +5,23 @@ Copyright 2026 LAYERED AI LIMITED (UK company number: 17056830).
 This product includes software developed by LAYERED AI LIMITED and contributors.
 
 Licensed under the Apache License, Version 2.0.
+
+------------------------------------------------------------------------
+Third-party software
+------------------------------------------------------------------------
+
+This product bundles the following third-party JavaScript libraries
+under app/javascript/layered_assistant/vendor/. Their full license
+texts are included alongside the source files.
+
+  marked (https://github.com/markedjs/marked)
+    Copyright (c) 2018+ MarkedJS
+    Copyright (c) 2011-2018 Christopher Jeffrey
+    Licensed under the MIT License.
+    See: app/javascript/layered_assistant/vendor/marked.LICENSE
+
+  DOMPurify (https://github.com/cure53/DOMPurify)
+    Copyright Dr.-Ing. Mario Heiderich, Cure53
+    Dual-licensed under the Apache License 2.0 or the
+    Mozilla Public License 2.0; used here under Apache-2.0.
+    See: app/javascript/layered_assistant/vendor/dompurify.LICENSE

data/README.md

@@ -15,6 +15,24 @@ An open source Rails 8+ engine built on [layered-ui-rails](https://github.com/la
 - Ruby on Rails >= 8.0
 - [layered-ui-rails](https://github.com/layered-ai-public/layered-ui-rails) installed in the host app
 
+## Agent skill
+
+An [agent skill](https://agentskills.io) is included so AI coding agents can work with `layered-assistant-rails` in your project. Once installed, the agent can handle the full setup - just ask it to add `layered-assistant-rails` to your app and it will install the gem, run the generator, and configure your layout.
+
+**Project install** - scoped to a single repo, available to all contributors:
+
+```bash
+bin/rails generate layered:assistant:install_agent_skill
+```
+
+**Global install** - available across all your projects:
+
+```bash
+./install-skill.sh
+# or install remotely without cloning the repo:
+curl -fsSL https://raw.githubusercontent.com/layered-ai-public/layered-assistant-rails/main/install-skill.sh | sh
+```
+
 ## Installation
 
 Add to your Gemfile:

data/app/assets/images/layered_assistant/icon_assistants.svg

@@ -0,0 +1,3 @@
+<svg fill="none" stroke="currentColor" stroke-width="1.5" viewBox="0 0 24 24" xmlns="http://www.w3.org/2000/svg">
+  <path stroke-linecap="round" stroke-linejoin="round" d="M19.5 12a7.5 7.5 0 0 0-15 0v5.25a1.5 1.5 0 0 0 1.5 1.5h1.5a1.5 1.5 0 0 0 1.5-1.5V13.5a1.5 1.5 0 0 0-1.5-1.5H4.5m15 0h-3a1.5 1.5 0 0 0-1.5 1.5v3.75a1.5 1.5 0 0 0 1.5 1.5h.75m2.25-5.25v6a3 3 0 0 1-3 3h-3" />
+</svg>

data/app/assets/images/layered_assistant/icon_conversations.svg

@@ -0,0 +1,3 @@
+<svg fill="none" stroke="currentColor" stroke-width="1.5" viewBox="0 0 24 24" xmlns="http://www.w3.org/2000/svg">
+  <path stroke-linecap="round" stroke-linejoin="round" d="M8.625 9.75a.375.375 0 1 1-.75 0 .375.375 0 0 1 .75 0Zm0 0H8.25m4.125 0a.375.375 0 1 1-.75 0 .375.375 0 0 1 .75 0Zm0 0H12m4.125 0a.375.375 0 1 1-.75 0 .375.375 0 0 1 .75 0Zm0 0h-.375m-13.5 3.01c0 1.6 1.123 2.994 2.707 3.227 1.087.16 2.185.283 3.293.369V21l4.184-4.183a1.14 1.14 0 0 1 .778-.332 48.294 48.294 0 0 0 5.83-.498c1.585-.233 2.708-1.626 2.708-3.228V6.741c0-1.602-1.123-2.995-2.707-3.228A48.394 48.394 0 0 0 12 3c-2.392 0-4.744.175-7.043.513C3.373 3.746 2.25 5.14 2.25 6.741v6.018Z" />
+</svg>

data/app/assets/images/layered_assistant/icon_personas.svg

@@ -0,0 +1,3 @@
+<svg fill="none" stroke="currentColor" stroke-width="1.5" viewBox="0 0 24 24" xmlns="http://www.w3.org/2000/svg">
+  <path stroke-linecap="round" stroke-linejoin="round" d="M17.982 18.725A7.488 7.488 0 0 0 12 15.75a7.488 7.488 0 0 0-5.982 2.975m11.963 0a9 9 0 1 0-11.963 0m11.963 0A8.966 8.966 0 0 1 12 21a8.966 8.966 0 0 1-5.982-2.275M15 9.75a3 3 0 1 1-6 0 3 3 0 0 1 6 0Z" />
+</svg>

data/app/assets/images/layered_assistant/icon_providers.svg

@@ -0,0 +1,3 @@
+<svg fill="none" stroke="currentColor" stroke-width="1.5" viewBox="0 0 24 24" xmlns="http://www.w3.org/2000/svg">
+  <path stroke-linecap="round" stroke-linejoin="round" d="M5.25 14.25h13.5m-13.5 0a3 3 0 0 1-3-3m3 3a3 3 0 1 0 0 6h13.5a3 3 0 1 0 0-6m-16.5-3a3 3 0 0 1 3-3h13.5a3 3 0 0 1 3 3m-19.5 0a4.5 4.5 0 0 1 .9-2.7L5.737 5.1a3.375 3.375 0 0 1 2.7-1.35h7.126c1.062 0 2.062.5 2.7 1.35l2.587 3.45a4.5 4.5 0 0 1 .9 2.7m0 0a3 3 0 0 1-3 3m0 3h.008v.008h-.008v-.008Zm0-6h.008v.008h-.008v-.008Zm-3 6h.008v.008h-.008v-.008Zm0-6h.008v.008h-.008v-.008Z" />
+</svg>

data/app/assets/images/layered_assistant/icon_skills.svg

@@ -0,0 +1,3 @@
+<svg fill="none" stroke="currentColor" stroke-width="1.5" viewBox="0 0 24 24" xmlns="http://www.w3.org/2000/svg">
+  <path stroke-linecap="round" stroke-linejoin="round" d="M9.813 15.904 9 18.75l-.813-2.846a4.5 4.5 0 0 0-3.09-3.09L2.25 12l2.846-.813a4.5 4.5 0 0 0 3.09-3.09L9 5.25l.813 2.846a4.5 4.5 0 0 0 3.09 3.09L15.75 12l-2.846.813a4.5 4.5 0 0 0-3.09 3.09ZM18.259 8.715 18 9.75l-.259-1.035a3.375 3.375 0 0 0-2.455-2.456L14.25 6l1.036-.259a3.375 3.375 0 0 0 2.455-2.456L18 2.25l.259 1.035a3.375 3.375 0 0 0 2.456 2.456L21.75 6l-1.035.259a3.375 3.375 0 0 0-2.456 2.456ZM16.894 20.567 16.5 21.75l-.394-1.183a2.25 2.25 0 0 0-1.423-1.423L13.5 18.75l1.183-.394a2.25 2.25 0 0 0 1.423-1.423l.394-1.183.394 1.183a2.25 2.25 0 0 0 1.423 1.423l1.183.394-1.183.394a2.25 2.25 0 0 0-1.423 1.423Z" />
+</svg>

data/app/assets/images/layered_assistant/icon_spanner.svg

@@ -0,0 +1,3 @@
+<svg fill="none" stroke="currentColor" stroke-width="1.5" viewBox="0 0 24 24" xmlns="http://www.w3.org/2000/svg">
+  <path stroke-linecap="round" stroke-linejoin="round" d="M11.42 15.17 17.25 21A2.652 2.652 0 0 0 21 17.25l-5.877-5.877M11.42 15.17l2.496-3.03c.317-.384.74-.626 1.208-.766M11.42 15.17l-4.655 5.653a2.548 2.548 0 1 1-3.586-3.586l6.837-5.63m5.108-.233c.55-.164 1.163-.188 1.743-.14a4.5 4.5 0 0 0 4.486-6.336l-3.276 3.277a3.004 3.004 0 0 1-2.25-2.25l3.276-3.276a4.5 4.5 0 0 0-6.336 4.486c.091 1.076-.071 2.264-.904 2.95l-.102.085m-1.745 1.437L5.909 7.5H4.5L2.25 3.75l1.5-1.5L7.5 4.5v1.409l4.26 4.26m-1.745 1.437 1.745-1.437m6.615 8.206L15.75 15.75M4.867 19.125h.008v.008h-.008v-.008Z" />
+</svg>

data/app/controllers/layered/assistant/assistants_controller.rb

@@ -1,10 +1,10 @@
 module Layered
   module Assistant
     class AssistantsController < ApplicationController
-      before_action :set_assistant, only: [:edit, :update, :destroy]
-      before_action :set_models, only: [:new, :create, :edit, :update]
-      before_action :set_personas, only: [:new, :create, :edit, :update]
-      before_action :set_skills, only: [:new, :create, :edit, :update]
+      before_action :set_assistant, only: [ :edit, :update, :destroy ]
+      before_action :set_models, only: [ :new, :create, :edit, :update ]
+      before_action :set_personas, only: [ :new, :create, :edit, :update ]
+      before_action :set_skills, only: [ :new, :create, :edit, :update ]
 
       def index
         @page_title = "Assistants"

data/app/controllers/layered/assistant/conversations_controller.rb

@@ -3,8 +3,8 @@ module Layered
     class ConversationsController < ApplicationController
       include StoppableResponse
 
-      before_action :set_conversation, only: [:show, :edit, :update, :destroy, :stop]
-      before_action :set_assistants, only: [:new, :create]
+      before_action :set_conversation, only: [ :show, :edit, :update, :destroy, :stop ]
+      before_action :set_assistants, only: [ :new, :create ]
 
       def index
         if params[:assistant_id]
@@ -26,7 +26,7 @@ module Layered
 
       def new
         @page_title = "New conversation"
-        @conversation = Conversation.new(params.permit(conversation: [:assistant_id])[:conversation])
+        @conversation = Conversation.new(params.permit(conversation: [ :assistant_id ])[:conversation])
       end
 
       def create
@@ -35,7 +35,7 @@ module Layered
         @conversation.assistant = scoped(Assistant).find(conversation_params[:assistant_id]) if conversation_params[:assistant_id].present?
         @conversation.name = Conversation.default_name if @conversation.name.blank?
         if @conversation.save
-          redirect_to layered_assistant.conversation_path(@conversation), notice: "Conversation was successfully created."
+          redirect_to layered_assistant.conversation_path(@conversation)
         else
           render :new, status: :unprocessable_entity
         end

data/app/controllers/layered/assistant/messages_controller.rb

@@ -4,7 +4,7 @@ module Layered
       include MessageCreation
 
       before_action :set_conversation
-      before_action :set_message, only: [:destroy]
+      before_action :set_message, only: [ :destroy ]
 
       def index
         @page_title = "Messages"

data/app/controllers/layered/assistant/models_controller.rb

@@ -2,7 +2,7 @@ module Layered
   module Assistant
     class ModelsController < ApplicationController
       before_action :set_provider
-      before_action :set_model, only: [:edit, :update, :destroy]
+      before_action :set_model, only: [ :edit, :update, :destroy ]
 
       def index
         @pagy, @models = pagy(@provider.models.sorted)

data/app/controllers/layered/assistant/panel/conversations_controller.rb

@@ -5,9 +5,9 @@ module Layered
         include StoppableResponse
         layout false
 
-        before_action :set_conversation, only: [:show, :destroy, :stop]
-        before_action :set_conversations, only: [:index, :show]
-        before_action :set_assistants, only: [:index, :show, :new, :create]
+        before_action :set_conversation, only: [ :show, :destroy, :stop ]
+        before_action :set_conversations, only: [ :index, :show ]
+        before_action :set_assistants, only: [ :index, :show, :new, :create ]
 
         def index
         end

data/app/controllers/layered/assistant/personas_controller.rb

@@ -1,7 +1,7 @@
 module Layered
   module Assistant
     class PersonasController < ApplicationController
-      before_action :set_persona, only: [:edit, :update, :destroy]
+      before_action :set_persona, only: [ :edit, :update, :destroy ]
 
       def index
         @page_title = "Personas"

data/app/controllers/layered/assistant/providers_controller.rb

@@ -1,7 +1,7 @@
 module Layered
   module Assistant
     class ProvidersController < ApplicationController
-      before_action :set_provider, only: [:edit, :update, :destroy]
+      before_action :set_provider, only: [ :edit, :update, :destroy ]
 
       def index
         @page_title = "Providers"

data/app/controllers/layered/assistant/public/assistants_controller.rb

@@ -2,7 +2,7 @@ module Layered
   module Assistant
     module Public
       class AssistantsController < ApplicationController
-        before_action :set_public_assistant, only: [:show]
+        before_action :set_public_assistant, only: [ :show ]
 
         def index
           @pagy, @assistants = pagy(Assistant.publicly_available.by_name)

data/app/controllers/layered/assistant/public/conversations_controller.rb

@@ -4,8 +4,8 @@ module Layered
       class ConversationsController < ApplicationController
         include StoppableResponse
 
-        before_action :set_public_assistant, only: [:create]
-        before_action :set_conversation, only: [:show, :stop]
+        before_action :set_public_assistant, only: [ :create ]
+        before_action :set_conversation, only: [ :show, :stop ]
 
         def create
           @conversation = @assistant.conversations.new(name: Conversation.default_name)

data/app/controllers/layered/assistant/public/panel/conversations_controller.rb

@@ -6,9 +6,9 @@ module Layered
           include StoppableResponse
           layout false
 
-          before_action :set_public_assistant, only: [:index, :new, :create]
-          before_action :set_conversation, only: [:show, :stop]
-          before_action :set_session_conversations, only: [:index, :show]
+          before_action :set_public_assistant, only: [ :index, :new, :create ]
+          before_action :set_conversation, only: [ :show, :stop ]
+          before_action :set_session_conversations, only: [ :index, :show ]
 
           def index
           end

data/app/controllers/layered/assistant/skills_controller.rb

@@ -1,7 +1,7 @@
 module Layered
   module Assistant
     class SkillsController < ApplicationController
-      before_action :set_skill, only: [:edit, :update, :destroy]
+      before_action :set_skill, only: [ :edit, :update, :destroy ]
 
       def index
         @page_title = "Skills"

data/app/helpers/layered/assistant/messages_helper.rb

@@ -1,20 +1,6 @@
 module Layered
   module Assistant
     module MessagesHelper
-      ALLOWED_TAGS = %w[
-        p br
-        h1 h2 h3 h4 h5 h6
-        strong em s del
-        ul ol li
-        pre code
-        a
-        blockquote
-        table thead tbody tr th td
-        hr
-      ].freeze
-
-      ALLOWED_ATTRIBUTES = %w[href title class].freeze
-
       MIN_RESPONSE_MS_FOR_TPS = 100
 
       def message_metadata_title(message)
@@ -31,80 +17,6 @@ module Layered
         parts << "#{message.ttft_ms}ms TTFT" if message.ttft_ms
         parts.join(" · ")
       end
-
-      def render_message_content(message)
-        return if message.content.blank?
-
-        render_markdown(message.content)
-      end
-
-      # Renders accumulated content for streaming, holding back any
-      # trailing unclosed code fence that Kramdown can't parse correctly.
-      # Returns { html:, has_unclosed_fence: } so the caller can decide
-      # whether to show a typing indicator.
-      def render_streaming_markdown(content)
-        return { html: "", has_unclosed_fence: false } if content.blank?
-
-        safe = strip_unclosed_fence(content)
-        {
-          html: safe.present? ? render_markdown(safe) : "",
-          has_unclosed_fence: safe.length < content.length
-        }
-      end
-
-      private
-
-      def render_markdown(content)
-        markdown = unwrap_markdown_fence(content)
-        markdown = ensure_blank_line_before_tables(markdown)
-
-        html = Kramdown::Document.new(
-          markdown,
-          input: "GFM",
-          syntax_highlighter: nil
-        ).to_html
-
-        sanitize(html, tags: ALLOWED_TAGS, attributes: ALLOWED_ATTRIBUTES)
-      end
-
-      # Some LLMs wrap their entire response in a ```markdown fence.
-      # Strip it so Kramdown processes the inner content directly.
-      def unwrap_markdown_fence(content)
-        if content.start_with?("```markdown\n") && content.end_with?("\n```")
-          content.delete_prefix("```markdown\n").delete_suffix("\n```")
-        else
-          content
-        end
-      end
-
-      # Kramdown GFM requires a blank line before a table, but LLMs often
-      # place tables directly after headings or paragraphs. Insert one
-      # where missing so that Kramdown recognises the table syntax.
-      def ensure_blank_line_before_tables(text)
-        text.gsub(/([^\n])\n(\|[^\n]+\|\s*\n\|[\s:|-]+\|\s*\n)/, "\\1\n\n\\2")
-      end
-
-      # Returns text up to (but not including) any trailing unclosed code
-      # fence. Kramdown can't produce valid output for a half-open fence,
-      # so we hold it back until the closing marker arrives.
-      def strip_unclosed_fence(text)
-        fence_marker = nil
-        fence_start = 0
-        pos = 0
-
-        text.each_line do |line|
-          trimmed = line.lstrip
-          if fence_marker.nil? && (match = trimmed.match(/\A(`{3,}|~{3,})/))
-            fence_marker = match[1]
-            fence_start = pos
-          elsif fence_marker && trimmed.match?(/\A#{Regexp.escape(fence_marker[0])}{#{fence_marker.length},}\s*\z/)
-            fence_marker = nil
-          end
-          pos += line.length
-        end
-
-        fence_marker ? text[0, fence_start] : text
-      end
     end
   end
 end

data/app/javascript/layered_assistant/composer_controller.js

@@ -78,7 +78,6 @@ export default class extends Controller {
 
     const empty = this.inputTarget.value.trim() === ""
     this.sendButtonTarget.disabled = empty
-    this.sendButtonTarget.classList.toggle("l-ui-button--disabled", empty)
   }
 
   // Toggle visibility of the Send and Stop buttons. While responding a

data/app/javascript/layered_assistant/index.js

@@ -1,6 +1,7 @@
 import { application } from "controllers/application"
 import ComposerController from "layered_assistant/composer_controller"
 import ConversationSelectController from "layered_assistant/conversation_select_controller"
+import MarkdownController from "layered_assistant/markdown_controller"
 import MessagesController from "layered_assistant/messages_controller"
 import PanelController from "layered_assistant/panel_controller"
 import PanelNavController from "layered_assistant/panel_nav_controller"
@@ -8,6 +9,7 @@ import ProviderTemplateController from "layered_assistant/provider_template_cont
 
 application.register("composer", ComposerController)
 application.register("conversation-select", ConversationSelectController)
+application.register("markdown", MarkdownController)
 application.register("messages", MessagesController)
 application.register("panel", PanelController)
 application.register("panel-nav", PanelNavController)

data/app/javascript/layered_assistant/markdown_controller.js

@@ -0,0 +1,19 @@
+import { Controller } from "@hotwired/stimulus"
+import { renderMarkdown } from "layered_assistant/marked_setup"
+
+// Renders raw markdown (placed in the element by the server) as HTML
+// on connect. Streaming chunks bypass this and write innerHTML
+// directly via Turbo stream actions.
+
+export default class extends Controller {
+  connect() {
+    // Skip if the element already contains rendered HTML - e.g. Turbo
+    // Drive cache restore, or streaming output appended by the message
+    // stream actions. textContent would flatten rendered HTML back to
+    // plain text and marked would silently drop all formatting.
+    if (this.element.firstElementChild) return
+    const text = this.element.textContent.trim()
+    if (!text) return
+    this.element.innerHTML = renderMarkdown(text)
+  }
+}

data/app/javascript/layered_assistant/marked_setup.js

@@ -0,0 +1,20 @@
+// Markdown rendering pipeline.
+//
+// Marked parses LLM output (including any raw HTML it emits), then
+// DOMPurify sanitises the result: it strips <script> and other unsafe
+// tags, validates URL schemes (blocking javascript:, data:, vbscript:
+// in href/src), and removes unsafe attributes. DOMPurify is the sole
+// security boundary here.
+
+import { marked } from "marked"
+import DOMPurify from "dompurify"
+
+marked.use({
+  gfm: true,
+  breaks: false
+})
+
+export function renderMarkdown(text) {
+  if (!text) return ""
+  return DOMPurify.sanitize(marked.parse(text))
+}