常见问题与知识库助手

// Express.js - POST /api/ai/chatimport express from 'express';const app = express();app.use(express.json()); app.post('/api/ai/chat', async (req, res) => {  const response = await fetch('https://api.modelriver.com/v1/ai/async', {    method: 'POST',    headers: {      'Authorization': `Bearer ${process.env.MR_API_KEY}`,      'Content-Type': 'application/json',    },    body: JSON.stringify({      workflow: 'faq_knowledge_workflow',      messages: [{ role: 'user', content: req.body.message }],      inputs: { customer_id: req.body.customer_id },    }),  });  const data = await response.json();  // Return the one-time ws_token so the frontend can stream the reply.  res.json({ ws_token: data.ws_token, channel_id: data.channel_id });}); app.listen(3000);

import { useState } from 'react';import { useModelRiver } from '@modelriver/client/react'; export function TemplateChat() {  const [input, setInput] = useState('');  const { connect, response, error, status } = useModelRiver({    baseUrl: 'wss://api.modelriver.com/socket',    persist: true,  });   const handleSend = async () => {    // 1. Your backend starts the faq_knowledge_workflow workflow and returns a one-time ws_token.    const res = await fetch('/api/ai/chat', {      method: 'POST',      headers: { 'Content-Type': 'application/json' },      body: JSON.stringify({ message: input }),    });    const { ws_token, channel_id } = await res.json();     // 2. Connect to ModelRiver's stream. The reply arrives in real time.    connect({ wsToken: ws_token, channelId: channel_id });    setInput('');  };   return (    <div>      <input value={input} onChange={(e) => setInput(e.target.value)}             disabled={status === 'loading'} placeholder="Type your request..." />      <button onClick={handleSend} disabled={!input || status === 'loading'}>Send</button>      {status === 'loading' && <p>Working on it...</p>}      {response && (        <div>          <p>{response.content}</p>          {response.data && <pre>{JSON.stringify(response.data, null, 2)}</pre>}        </div>      )}      {error && <p>{error}</p>}    </div>  );}

// Express.js - POST /webhooks/modelriverimport express from 'express';import crypto from 'node:crypto'; const app = express(); // Keep the raw body: the signature covers the exact text ModelRiver sent.app.post('/webhooks/modelriver', express.raw({ type: 'application/json' }), async (req, res) => {  // 1. Verify the HMAC signature: hex HMAC-SHA256 of "<timestamp>.<data>", where  // <data> is the exact JSON text of the body's "data" value (never re-serialize it).  const raw = req.body.toString('utf8');  const timestamp = req.get('x-modelriver-timestamp') || '';  const signature = Buffer.from(req.get('x-modelriver-signature') || '');  const start = raw.indexOf('"data":') + '"data":'.length;  const end = raw.lastIndexOf(',"timestamp":');  const expected = Buffer.from(crypto    .createHmac('sha256', process.env.MR_WEBHOOK_SECRET)    .update(`${timestamp}.${raw.slice(start, end)}`)    .digest('hex'));  if (    start < 7 || end < start ||    signature.length !== expected.length ||    !crypto.timingSafeEqual(signature, expected)  ) {    return res.status(401).send('Invalid signature');  }   const event = JSON.parse(raw).data; // the event payload is under "data"   // 2. The AI step finished. Enrich it with your own data (order, policy, ...).  const enriched = { ...event.ai_response, checked_at: new Date().toISOString() };  await saveEvent(event.channel_id, enriched); // your database   // 3. Send the enriched result back so the reply streams to the customer.  if (event.callback_url && event.callback_required) {    await fetch(event.callback_url, {      method: 'POST',      headers: {        'Authorization': `Bearer ${process.env.MR_API_KEY}`,        'Content-Type': 'application/json',      },      body: JSON.stringify({ data: enriched }),    });  }   res.status(200).send('ok');}); app.listen(3000);

// Supabase Edge Function - webhooks/modelriver// Deploy with: supabase functions deploy webhooks-modelriverimport { serve } from 'https://deno.land/[email protected]/http/server.ts';import { createClient } from 'https://esm.sh/@supabase/supabase-js@2'; const supabase = createClient(  Deno.env.get('SUPABASE_URL')!,  Deno.env.get('SUPABASE_SERVICE_ROLE_KEY')!); // Signed string: "<x-modelriver-timestamp>.<exact JSON text of the body's data value>".async function verifySignature(raw: string, timestamp: string | null, signature: string | null): Promise<boolean> {  const start = raw.indexOf('"data":') + 7;  const end = raw.lastIndexOf(',"timestamp":');  if (!timestamp || !signature || start < 7 || end < start) return false;  const key = await crypto.subtle.importKey(    'raw',    new TextEncoder().encode(Deno.env.get('MR_WEBHOOK_SECRET')!),    { name: 'HMAC', hash: 'SHA-256' },    false,    ['sign']  );  const digest = new Uint8Array(await crypto.subtle.sign(    'HMAC', key, new TextEncoder().encode(`${timestamp}.${raw.slice(start, end)}`)  ));  const expected = [...digest]    .map((byte) => byte.toString(16).padStart(2, '0'))    .join('');  if (signature.length !== expected.length) return false;  let diff = 0;  for (let i = 0; i < expected.length; i++) diff |= signature.charCodeAt(i) ^ expected.charCodeAt(i);  return diff === 0;} serve(async (req) => {  // 1. Verify the HMAC signature over the raw body before parsing the event.  const raw = await req.text();  const valid = await verifySignature(    raw, req.headers.get('x-modelriver-timestamp'), req.headers.get('x-modelriver-signature'));  if (!valid) return new Response('Invalid signature', { status: 401 });  const event = JSON.parse(raw).data; // the event payload is under "data"   // 2. Store the AI step result in Postgres.  const { error } = await supabase.from('ai_content').insert({    channel_id: event.channel_id,    payload: event.ai_response,    status: 'ai_generated',  });  if (error) return new Response(error.message, { status: 500 });   // 3. Send the result back so the reply streams to the customer.  if (event.callback_url && event.callback_required) {    await fetch(event.callback_url, {      method: 'POST',      headers: {        Authorization: `Bearer ${Deno.env.get('MR_API_KEY')}`,        'Content-Type': 'application/json',      },      body: JSON.stringify({ data: event.ai_response }),    });  }   return new Response('ok');});