nodebb-plugin-pdf-secure2 1.4.3 → 1.5.0

package/static/viewer.html

@@ -888,6 +888,84 @@
             border: 1px solid rgba(220, 38, 38, 0.25);
         }
 
+        /* AI message action buttons (copy, regenerate) */
+        .chatMsgActions {
+            display: flex;
+            gap: 8px;
+            margin-top: 6px;
+            opacity: 0;
+            transition: opacity 0.15s;
+        }
+        .chatMsg.ai:hover .chatMsgActions { opacity: 1; }
+        .chatMsgAction {
+            background: none;
+            border: none;
+            color: var(--text-secondary);
+            font-size: 11px;
+            cursor: pointer;
+            display: flex;
+            align-items: center;
+            gap: 3px;
+            padding: 2px 4px;
+            border-radius: 4px;
+            transition: color 0.15s, background 0.15s;
+        }
+        .chatMsgAction:hover { color: var(--text-primary); background: rgba(255,255,255,0.08); }
+        .chatMsgAction.copied { color: #4ade80; }
+        .chatMsgAction svg { width: 12px; height: 12px; fill: currentColor; }
+
+        /* AI badge timestamp */
+        .aiBadgeTime { font-weight: 400; opacity: 0.6; }
+
+        /* Scroll to bottom button */
+        .chatScrollDown {
+            position: absolute;
+            bottom: 80px;
+            left: 50%;
+            transform: translateX(-50%);
+            width: 32px; height: 32px;
+            border-radius: 50%;
+            background: var(--bg-secondary);
+            border: 1px solid var(--border-color);
+            color: var(--text-primary);
+            font-size: 16px;
+            cursor: pointer;
+            opacity: 0;
+            pointer-events: none;
+            transition: opacity 0.2s;
+            z-index: 5;
+            display: flex;
+            align-items: center;
+            justify-content: center;
+        }
+        .chatScrollDown:hover { background: var(--bg-tertiary); }
+        .chatScrollDown.visible { opacity: 1; pointer-events: auto; }
+
+        /* Blockquote in AI messages */
+        .chatMsg blockquote {
+            border-left: 3px solid var(--accent);
+            margin: 6px 0;
+            padding: 4px 10px;
+            color: var(--text-secondary);
+            font-style: italic;
+            background: rgba(255,255,255,0.03);
+            border-radius: 0 4px 4px 0;
+        }
+        body[data-tier="vip"] .chatMsg blockquote { border-left-color: #ffd700; }
+
+        /* Table overflow scroll hint */
+        .chatMsg .tableWrap.scrollable::after {
+            content: '';
+            position: absolute;
+            top: 0; right: 0; bottom: 0;
+            width: 20px;
+            background: linear-gradient(to right, transparent, var(--bg-tertiary));
+            pointer-events: none;
+        }
+
+        /* Loading elapsed timer */
+        .chatLoadingElapsed { font-size: 10px; color: var(--text-secondary); opacity: 0.5; margin-left: 4px; }
+
         /* Injection warning banner */
         .chatInjectionWarning {
             background: rgba(255, 170, 0, 0.12);
@@ -1004,6 +1082,30 @@
         }
         body[data-tier="vip"] .vipTipsBanner { display: block; }
 
+        /* Detail mode toggle */
+        .vipTipsRow { display: flex; justify-content: space-between; align-items: center; }
+        .detailToggle { display: flex; align-items: center; gap: 6px; cursor: pointer; user-select: none; }
+        .detailToggle input { display: none; }
+        .detailToggleSlider {
+            width: 28px; height: 16px;
+            background: rgba(255,255,255,0.15);
+            border-radius: 8px;
+            position: relative;
+            transition: background 0.2s;
+        }
+        .detailToggleSlider::after {
+            content: '';
+            position: absolute; left: 2px; top: 2px;
+            width: 12px; height: 12px;
+            background: var(--text-secondary);
+            border-radius: 50%;
+            transition: transform 0.2s, background 0.2s;
+        }
+        .detailToggle input:checked + .detailToggleSlider { background: rgba(255,215,0,0.3); }
+        .detailToggle input:checked + .detailToggleSlider::after { transform: translateX(12px); background: #ffd700; }
+        .detailToggleText { font-size: 10px; color: var(--text-secondary); font-weight: 500; transition: color 0.2s; }
+        .detailToggle input:checked ~ .detailToggleText { color: #ffd700; }
+
         /* Suggestion chips */
         .chatSuggestions {
             display: flex;
@@ -3011,7 +3113,14 @@
             <button class="closeBtn" id="closeChatSidebar">&times;</button>
         </div>
         <div class="vipTipsBanner" id="vipTipsBanner">
-            <div class="vipTipsLabel">VIP — Benden isteyebileceklerin:</div>
+            <div class="vipTipsRow">
+                <div class="vipTipsLabel">VIP — Benden isteyebileceklerin:</div>
+                <label class="detailToggle" id="detailToggleLabel">
+                    <input type="checkbox" id="detailToggle">
+                    <span class="detailToggleSlider"></span>
+                    <span class="detailToggleText">Detaylı</span>
+                </label>
+            </div>
             <div class="vipTipsItems">
                 <span class="vipTip">detayli aciklama</span>
                 <span class="vipTip">ornek ver</span>
@@ -3021,6 +3130,7 @@
             </div>
         </div>
         <div id="chatMessages"></div>
+        <button id="chatScrollDown" class="chatScrollDown">&#x2193;</button>
         <div class="chatCharCount" id="chatCharCount"></div>
         <div class="chatQuotaBar" id="chatQuotaBar">
             <div class="chatQuotaTrack"><div class="chatQuotaFill" id="chatQuotaFill"></div></div>
@@ -3089,6 +3199,18 @@
                 return originalToBlob.apply(this, arguments);
             };
 
+            // Block getImageData for PDF page canvases (prevents raw pixel extraction)
+            const originalGetImageData = CanvasRenderingContext2D.prototype.getImageData;
+            CanvasRenderingContext2D.prototype.getImageData = function () {
+                if (this.canvas && this.canvas.closest && this.canvas.closest('.page') && this.canvas.closest('#viewerContainer')) {
+                    // Return blank ImageData of requested size
+                    var w = arguments[2] || 1;
+                    var h = arguments[3] || 1;
+                    return new ImageData(w, h);
+                }
+                return originalGetImageData.apply(this, arguments);
+            };
+
             pdfjsLib.GlobalWorkerOptions.workerSrc = '';
 
             // State - now private, not accessible from console
@@ -3651,38 +3773,9 @@
                 }
 
                 try {
-                    // ============================================
-                    // SPA CACHE - Check if parent has cached buffer
-                    // ============================================
                     let pdfBuffer = null;
 
-                    if (window.parent && window.parent !== window) {
-                        // Request cached buffer from parent
-                        const cachePromise = new Promise((resolve) => {
-                            const handler = (event) => {
-                                if (event.data && event.data.type === 'pdf-secure-cache-response' && event.data.filename === config.filename) {
-                                    window.removeEventListener('message', handler);
-                                    resolve(event.data.buffer);
-                                }
-                            };
-                            window.addEventListener('message', handler);
-
-                            // Timeout after 100ms
-                            setTimeout(() => {
-                                window.removeEventListener('message', handler);
-                                resolve(null);
-                            }, 100);
-
-                            window.parent.postMessage({ type: 'pdf-secure-cache-request', filename: config.filename }, window.location.origin);
-                        });
-
-                        pdfBuffer = await cachePromise;
-                        if (pdfBuffer) {
-                        }
-                    }
-
-                    // If no cache, fetch from server
-                    if (!pdfBuffer) {
+                    {
                         // Nonce and key are embedded in HTML config (not fetched from API)
                         const nonce = config.nonce;
                         const decryptKey = config.dk;
@@ -3698,23 +3791,12 @@
 
                         const encodedBuffer = await pdfRes.arrayBuffer();
 
-                        // Decrypt AES-256-GCM encrypted data
-                        if (decryptKey && decryptIv) {
-                            pdfBuffer = await aesGcmDecode(encodedBuffer, decryptKey, decryptIv);
-                        } else {
-                            pdfBuffer = encodedBuffer;
+                        // Decrypt AES-256-GCM encrypted data (refuse to load without encryption)
+                        if (!decryptKey || !decryptIv) {
+                            throw new Error('Missing encryption parameters');
                         }
+                        pdfBuffer = await aesGcmDecode(encodedBuffer, decryptKey, decryptIv);
 
-                        // Send buffer to parent for caching (premium only - non-premium must not leak decoded buffer)
-                        if ((_cfg.isPremium !== false || _cfg.isLite) && window.parent && window.parent !== window) {
-                            // Clone buffer for parent (we keep original)
-                            const bufferCopy = pdfBuffer.slice(0);
-                            window.parent.postMessage({
-                                type: 'pdf-secure-buffer',
-                                filename: config.filename,
-                                buffer: bufferCopy
-                            }, window.location.origin, [bufferCopy]);  // Transferable
-                        }
                     }
 
 
@@ -3758,6 +3840,18 @@
                         };
                     }
 
+                    // Security: Wipe decryption keys from config to prevent memory inspection
+                    if (config) {
+                        config.dk = null;
+                        config.iv = null;
+                        config.nonce = null;
+                    }
+                    if (_cfg) {
+                        _cfg.dk = null;
+                        _cfg.iv = null;
+                        _cfg.nonce = null;
+                    }
+
 
                 } catch (err) {
 
@@ -3962,6 +4056,17 @@
             const chatIsPremium = _cfg && _cfg.isPremium;
             const chatIsVip = _cfg && _cfg.isVip;
 
+            // Detail mode toggle (VIP only)
+            var chatDetailMode = false;
+            var detailToggleEl = document.getElementById('detailToggle');
+            if (chatIsVip && detailToggleEl) {
+                try { chatDetailMode = localStorage.getItem('pdfChat_detailMode') === 'true'; detailToggleEl.checked = chatDetailMode; } catch (e) { /* localStorage unavailable */ }
+                detailToggleEl.addEventListener('change', function () {
+                    chatDetailMode = detailToggleEl.checked;
+                    try { localStorage.setItem('pdfChat_detailMode', String(chatDetailMode)); } catch (e) { /* ignore */ }
+                });
+            }
+
             // Show chat button if chatEnabled (visible to all users, not just premium)
             if (_cfg && _cfg.chatEnabled) {
                 chatBtnEl.style.display = '';
@@ -4053,6 +4158,18 @@
 
             chatBtnEl.onclick = toggleChat;
 
+            // Scroll-to-bottom button
+            var chatScrollDownBtn = document.getElementById('chatScrollDown');
+            if (chatScrollDownBtn) {
+                chatMessagesEl.addEventListener('scroll', function () {
+                    var atBottom = chatMessagesEl.scrollHeight - chatMessagesEl.scrollTop - chatMessagesEl.clientHeight < 60;
+                    chatScrollDownBtn.classList.toggle('visible', !atBottom);
+                });
+                chatScrollDownBtn.onclick = function () {
+                    chatMessagesEl.scrollTo({ top: chatMessagesEl.scrollHeight, behavior: 'smooth' });
+                };
+            }
+
             // VIP tip chips — click to populate chat input
             var vipTipChips = document.querySelectorAll('.vipTip');
             var vipTipPrompts = {
@@ -4067,7 +4184,7 @@
                     var prompt = vipTipPrompts[chip.textContent.trim()];
                     if (prompt && chatInputEl) {
                         chatInputEl.value = prompt;
-                        chatInputEl.focus();
+                        sendChatMessage();
                     }
                 };
             });
@@ -4172,6 +4289,17 @@
                         i++; continue;
                     }
 
+                    // Blockquote: > text
+                    if (trimmed.startsWith('> ')) {
+                        flushPara();
+                        var bq = document.createElement('blockquote');
+                        var bqTokens = tokenizeInline(trimmed.slice(2));
+                        for (var t = 0; t < bqTokens.length; t++) bq.appendChild(bqTokens[t]);
+                        parent.appendChild(bq);
+                        hasOutput = true;
+                        i++; continue;
+                    }
+
                     // Table: lines containing | with a separator row
                     if (trimmed.includes('|') && i + 1 < lines.length) {
                         var tLines = [];
@@ -4189,6 +4317,14 @@
                                 wrap.appendChild(table);
                                 wrap.appendChild(createCopyBtn(tableToText(table)));
                                 parent.appendChild(wrap);
+                                // Detect horizontal overflow for scroll hint
+                                requestAnimationFrame(function () {
+                                    if (wrap.scrollWidth > wrap.clientWidth) wrap.classList.add('scrollable');
+                                });
+                                wrap.addEventListener('scroll', function () {
+                                    var atEnd = wrap.scrollLeft + wrap.clientWidth >= wrap.scrollWidth - 5;
+                                    wrap.classList.toggle('scrollable', !atEnd);
+                                });
                                 hasOutput = true;
                                 i = j; continue;
                             }
@@ -4451,6 +4587,18 @@
                             continue;
                         }
                     }
+                    // Strikethrough: ~~...~~
+                    if (line[i] === '~' && line[i + 1] === '~') {
+                        var endS = line.indexOf('~~', i + 2);
+                        if (endS !== -1 && endS - i < 5002) {
+                            flushBuf();
+                            var del = document.createElement('del');
+                            del.textContent = line.slice(i + 2, endS);
+                            nodes.push(del);
+                            i = endS + 2;
+                            continue;
+                        }
+                    }
                     buf += line[i];
                     i++;
                 }
@@ -4472,6 +4620,11 @@
                 svg.appendChild(path);
                 badge.appendChild(svg);
                 badge.appendChild(document.createTextNode(' AI'));
+                var ts = document.createElement('span');
+                ts.className = 'aiBadgeTime';
+                var now = new Date();
+                ts.textContent = ' \u2022 ' + now.getHours().toString().padStart(2, '0') + ':' + now.getMinutes().toString().padStart(2, '0');
+                badge.appendChild(ts);
                 return badge;
             }
 
@@ -4487,6 +4640,32 @@
                     }
                     msg.appendChild(createAiBadge());
                     msg.appendChild(renderMarkdownSafe(text));
+
+                    // Action buttons (regenerate)
+                    var actions = document.createElement('div');
+                    actions.className = 'chatMsgActions';
+
+                    var regenBtn = document.createElement('button');
+                    regenBtn.className = 'chatMsgAction';
+                    regenBtn.innerHTML = '<svg viewBox="0 0 24 24"><path d="M17.65 6.35A7.958 7.958 0 0012 4c-4.42 0-7.99 3.58-7.99 8s3.57 8 7.99 8c3.73 0 6.84-2.55 7.73-6h-2.08A5.99 5.99 0 0112 18c-3.31 0-6-2.69-6-6s2.69-6 6-6c1.66 0 3.14.69 4.22 1.78L13 11h7V4l-2.35 2.35z"/></svg> Tekrar sor';
+                    regenBtn.onclick = function () {
+                        if (chatHistory.length >= 2) {
+                            var lastQ = chatHistory[chatHistory.length - 2];
+                            if (lastQ.role === 'user') {
+                                chatHistory.pop();
+                                chatHistory.pop();
+                                var msgs = chatMessagesEl.querySelectorAll('.chatMsg');
+                                if (msgs.length >= 2) {
+                                    msgs[msgs.length - 1].remove();
+                                    msgs[msgs.length - 2].remove();
+                                }
+                                chatInputEl.value = lastQ.text;
+                                sendChatMessage();
+                            }
+                        }
+                    };
+                    actions.appendChild(regenBtn);
+                    msg.appendChild(actions);
                 } else if (role === 'user') {
                     var now = new Date();
                     var timeStr = now.getHours().toString().padStart(2, '0') + ':' + now.getMinutes().toString().padStart(2, '0');
@@ -4504,18 +4683,34 @@
             }
 
             function showChatLoading() {
-                const msg = document.createElement('div');
+                var loadText = chatDetailMode ? 'Detayl\u0131 analiz haz\u0131rlan\u0131yor' : 'D\u00fc\u015f\u00fcn\u00fcyor';
+                var msg = document.createElement('div');
                 msg.className = 'chatMsg ai chatLoading';
                 msg.id = 'chatLoadingMsg';
-                msg.innerHTML = '<span class="chatLoadingText">Düşünüyor</span><span class="chatLoadingDots"><span>.</span><span>.</span><span>.</span></span>';
+                msg.innerHTML = '<span class="chatLoadingText">' + loadText + '</span><span class="chatLoadingDots"><span>.</span><span>.</span><span>.</span></span>';
+                var elapsed = document.createElement('span');
+                elapsed.className = 'chatLoadingElapsed';
+                elapsed.style.display = 'none';
+                msg.appendChild(elapsed);
+                var startTime = Date.now();
+                msg._timer = setInterval(function () {
+                    var secs = Math.floor((Date.now() - startTime) / 1000);
+                    if (secs >= 5) {
+                        elapsed.style.display = '';
+                        elapsed.textContent = '(' + secs + 's)';
+                    }
+                }, 1000);
                 chatMessagesEl.appendChild(msg);
                 chatMessagesEl.scrollTop = chatMessagesEl.scrollHeight;
                 return msg;
             }
 
             function removeChatLoading() {
-                const el = document.getElementById('chatLoadingMsg');
-                if (el) el.remove();
+                var el = document.getElementById('chatLoadingMsg');
+                if (el) {
+                    if (el._timer) clearInterval(el._timer);
+                    el.remove();
+                }
             }
 
             // Quota usage bar
@@ -4587,7 +4782,7 @@
                     var existingChips = suggestions.querySelectorAll('.chatSuggestionChip');
                     existingChips.forEach(function (c) { c.classList.add('loading'); });
 
-                    fetch((_cfg.relativePath || '') + '/api/v3/plugins/pdf-secure/suggestions?filename=' + encodeURIComponent(_cfg.filename), {
+                    fetch((_cfg.relativePath || '') + '/api/v3/plugins/pdf-secure/suggestions?filename=' + encodeURIComponent(_cfg.filename) + '&tid=' + encodeURIComponent(_cfg.tid || 0), {
                         headers: { 'x-csrf-token': _cfg.csrfToken || '' },
                     })
                     .then(function (r) { return r.json(); })
@@ -4626,9 +4821,14 @@
                     suggestions.appendChild(chip);
                 });
 
-                // Trigger AI suggestions on hover/focus of the suggestions area (lazy)
-                suggestions.addEventListener('mouseenter', loadAiSuggestions, { once: true });
-                suggestions.addEventListener('focusin', loadAiSuggestions, { once: true });
+                // VIP: auto-load context-aware suggestions immediately
+                // Premium: lazy-load on hover/focus (avoids unnecessary API calls)
+                if (chatIsVip) {
+                    setTimeout(loadAiSuggestions, 0);
+                } else {
+                    suggestions.addEventListener('mouseenter', loadAiSuggestions, { once: true });
+                    suggestions.addEventListener('focusin', loadAiSuggestions, { once: true });
+                }
 
                 chatMessagesEl.appendChild(suggestions);
                 chatMessagesEl.scrollTop = chatMessagesEl.scrollHeight;
@@ -4813,8 +5013,10 @@
                         },
                         body: JSON.stringify({
                             filename: _cfg.filename,
+                            tid: _cfg.tid || 0,
                             question: question,
                             history: chatHistory,
+                            detailMode: chatDetailMode,
                         }),
                     });