handle pr comment and restrict artifacts to staff by default

Author: SamSaffron

app/models/ai_artifact.rb

@@ -3,6 +3,9 @@
 class AiArtifact < ActiveRecord::Base
   belongs_to :user
   belongs_to :post
+  validates :html, length: { maximum: 65_535 }
+  validates :css, length: { maximum: 65_535 }
+  validates :js, length: { maximum: 65_535 }
 
   def self.iframe_for(id)
     <<~HTML

db/fixtures/ai_bot/603_bot_ai_personas.rb

@@ -5,7 +5,12 @@
   if !persona
     persona = AiPersona.new
     persona.id = id
-    persona.allowed_group_ids = [Group::AUTO_GROUPS[:trust_level_0]]
+    if persona_class == DiscourseAi::AiBot::Personas::WebArtifactCreator
+      # this is somewhat sensitive, so we default it to staff
+      persona.allowed_group_ids = [Group::AUTO_GROUPS[:staff]]
+    else
+      persona.allowed_group_ids = [Group::AUTO_GROUPS[:trust_level_0]]
+    end
     persona.enabled = true
     persona.priority = true if persona_class == DiscourseAi::AiBot::Personas::General
   end