7a27190ffe
Model Registry: - Add per-user custom roles (add/remove via UI); required roles chat/orchestrator/distill are always present and cannot be removed - Auto-migrate legacy .env-defined roles to custom_roles on first access - Role config panel (gear): Remove role button moved inside panel; required badge below name - Role select: Primary + Backup slots only (was three) Settings pages — Tailwind CSS migration (CDN, preflight: false): - local_llm.html, settings.html, help.html, notifications.html, tools_settings.html, crons.html, integrations.html all migrated; pg-* color tokens; dark/light via data-theme pg.css fixes: - input[type=checkbox/radio]: width: auto — prevents pg.css width:100% from stretching checkboxes - btn-submit: responsive sizing via Tailwind w-full md:w-96 on each button (no longer full-width on desktop) Documentation: - MASTER.md, TODO__Agents.md: remove "/ Inara" from titles; description updated to "per-user AI personas" - HELP.md: persona-agnostic language throughout (NC Talk, Google Chat, push, schedules, HA sections); roles section restructured to show required vs. custom roles with examples - notifications.html: subtitle and HA description use "your persona" not "Inara" Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
214 lines
9.4 KiB
HTML
214 lines
9.4 KiB
HTML
<!DOCTYPE html>
|
|
<html lang="en">
|
|
<head>
|
|
<meta charset="UTF-8">
|
|
<meta name="viewport" content="width=device-width, initial-scale=1.0">
|
|
<title>Tool Settings — Cortex</title>
|
|
<link rel="preconnect" href="https://fonts.googleapis.com">
|
|
<link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
|
|
<link href="https://fonts.googleapis.com/css2?family=Inter:wght@100..900&display=swap" rel="stylesheet">
|
|
<script src="https://cdn.tailwindcss.com"></script>
|
|
<script>
|
|
tailwind.config = {
|
|
corePlugins: { preflight: false },
|
|
darkMode: ['selector', '[data-theme="dark"]'],
|
|
theme: {
|
|
extend: {
|
|
colors: {
|
|
pg: {
|
|
bg: 'var(--pg-bg)',
|
|
surface: 'var(--pg-surface)',
|
|
border: 'var(--pg-border)',
|
|
text: 'var(--pg-text)',
|
|
muted: 'var(--pg-muted)',
|
|
dim: 'var(--pg-dim)',
|
|
dimmer: 'var(--pg-dimmer)',
|
|
bright: 'var(--pg-bright)',
|
|
accent: 'var(--pg-accent)',
|
|
action: 'var(--pg-action)',
|
|
}
|
|
},
|
|
fontFamily: { sans: ['Inter', 'system-ui', 'sans-serif'] }
|
|
}
|
|
}
|
|
}
|
|
</script>
|
|
<link rel="stylesheet" href="/static/pg.css">
|
|
<script>(function(){var t=localStorage.getItem('theme')||(window.matchMedia('(prefers-color-scheme: dark)').matches?'dark':'light');document.documentElement.setAttribute('data-theme',t);})();</script>
|
|
<style>
|
|
/* ── Server-generated tool table ── */
|
|
.table-section-label {
|
|
font-size: 0.7rem; font-weight: 700; letter-spacing: 0.08em;
|
|
text-transform: uppercase; color: var(--pg-dimmer);
|
|
margin: 1.75rem 0 0.6rem;
|
|
}
|
|
.tool-table {
|
|
width: 100%; border-collapse: collapse;
|
|
background: var(--pg-surface); border: 1px solid var(--pg-border);
|
|
border-radius: 0.75rem; overflow: hidden; margin-bottom: 0.5rem;
|
|
font-size: 0.85rem;
|
|
}
|
|
.tool-table th {
|
|
text-align: left; padding: 0.55rem 0.9rem;
|
|
border-bottom: 1px solid var(--pg-border);
|
|
color: var(--pg-muted); font-weight: 600; font-size: 0.78rem;
|
|
text-transform: uppercase; letter-spacing: 0.04em;
|
|
}
|
|
.tool-table td { padding: 0.5rem 0.9rem; border-bottom: 1px solid var(--pg-border); vertical-align: middle; }
|
|
.tool-table tr:last-child td { border-bottom: none; }
|
|
.tool-table tr:hover td { background: rgba(124,58,237,0.04); }
|
|
.tool-name { font-family: monospace; font-size: 0.82rem; }
|
|
|
|
/* Risk badges (server-generated) */
|
|
.risk { display: inline-block; font-size: 0.7rem; font-weight: 700;
|
|
padding: 0.15rem 0.45rem; border-radius: 9999px; letter-spacing: 0.04em; }
|
|
.risk-low { background: rgba(34,197,94,0.12); color: #4ade80; }
|
|
.risk-medium { background: rgba(234,179,8,0.12); color: #fbbf24; }
|
|
.risk-high { background: rgba(239,68,68,0.12); color: #f87171; }
|
|
[data-theme="light"] .risk-low { background: rgba(34,197,94,0.15); color: #16a34a; }
|
|
[data-theme="light"] .risk-medium { background: rgba(234,179,8,0.15); color: #ca8a04; }
|
|
[data-theme="light"] .risk-high { background: rgba(239,68,68,0.15); color: #dc2626; }
|
|
|
|
/* Auto-status pill (server-generated, updated by JS) */
|
|
.auto-pill {
|
|
display: inline-block; font-size: 0.68rem; font-weight: 600;
|
|
padding: 0.12rem 0.4rem; border-radius: 9999px;
|
|
}
|
|
.auto-on { background: rgba(124,58,237,0.12); color: #a78bfa; }
|
|
.auto-off { background: rgba(148,163,184,0.12); color: var(--pg-dimmer); }
|
|
[data-theme="light"] .auto-on { color: #7c3aed; }
|
|
|
|
/* Override select (server-generated) */
|
|
.override-sel {
|
|
font-size: 0.78rem; padding: 0.25rem 0.5rem;
|
|
border-radius: 0.3rem; min-width: 7rem; width: auto;
|
|
}
|
|
.override-sel.forced-on { border-color: #7c3aed; color: #7c3aed; }
|
|
.override-sel.forced-off { border-color: #dc2626; color: #dc2626; }
|
|
</style>
|
|
</head>
|
|
<body>
|
|
|
|
<nav class="page-nav">
|
|
<a href="{{ back_href }}" class="nav-link">← Chat</a>
|
|
<a href="{{ help_href }}" class="nav-link">Help</a>
|
|
<a href="/settings" class="nav-link">Settings</a>
|
|
<a href="/settings/models" class="nav-link">Models</a>
|
|
<a href="/settings/notifications" class="nav-link">Notifications</a>
|
|
<a href="/settings/tools" class="nav-link active">Tools</a>
|
|
<a href="/settings/crons" class="nav-link">Schedules</a>
|
|
{{ integrations_nav }}
|
|
<span class="nav-spacer"></span>
|
|
<a href="/logout" class="nav-link nav-logout">Sign out</a>
|
|
</nav>
|
|
|
|
<div class="page-wrap">
|
|
<h1 class="page-title">Tool Settings</h1>
|
|
<p class="page-subtitle">
|
|
Control which orchestrator tools are available. The risk level sets an automatic threshold;
|
|
whitelist and blacklist let you fine-tune individual tools beyond that.
|
|
</p>
|
|
|
|
<!-- SUCCESS -->
|
|
<!-- ERROR -->
|
|
|
|
<form method="POST" action="/settings/tools" id="tools-form">
|
|
|
|
<!-- Risk policy card -->
|
|
<div class="rounded-xl border border-pg-border bg-pg-surface p-5 mb-5">
|
|
<h2 class="text-sm font-semibold text-pg-bright mb-4">Risk Policy</h2>
|
|
<div class="flex items-center gap-4 flex-wrap mb-3">
|
|
<span class="text-sm font-medium text-pg-text min-w-[6rem]">Max risk level</span>
|
|
<select name="max_risk" id="max-risk-sel" class="w-auto">
|
|
<option value="" {{ sel_none }}>No filter — use all role-permitted tools</option>
|
|
<option value="low" {{ sel_low }}>Low — read-only and sandboxed tools only</option>
|
|
<option value="medium" {{ sel_medium }}>Medium — low + medium risk (recommended)</option>
|
|
<option value="high" {{ sel_high }}>High — all tools including destructive ones</option>
|
|
</select>
|
|
</div>
|
|
<p class="text-xs text-pg-muted leading-relaxed mb-2">
|
|
<strong class="text-pg-text">Low</strong> tools are read-only and sandboxed (web search, project file reads, HA status checks).<br>
|
|
<strong class="text-pg-text">Medium</strong> tools write to local data or send notifications to you (cron jobs, scratch, task management).<br>
|
|
<strong class="text-pg-text">High</strong> tools affect external systems or the host (shell exec, email, device control, service restart).
|
|
</p>
|
|
<p class="text-xs text-pg-muted leading-relaxed">
|
|
The <em>Auto</em> column below shows each tool's status at your current max risk level.
|
|
Use the override column to force-include or force-exclude individual tools.
|
|
</p>
|
|
</div>
|
|
|
|
<!-- Legend -->
|
|
<div class="flex gap-5 flex-wrap mb-4 text-xs text-pg-muted">
|
|
<span><span class="inline-block w-2 h-2 rounded-full bg-[#a78bfa] mr-1.5"></span>Auto-included by risk level</span>
|
|
<span><span class="inline-block w-2 h-2 rounded-full bg-pg-dimmer mr-1.5"></span>Auto-excluded by risk level</span>
|
|
</div>
|
|
|
|
<!-- Tool table (server-generated) -->
|
|
{{ tool_table_html }}
|
|
|
|
<!-- Confirmation gate card -->
|
|
<div class="rounded-xl border border-pg-border bg-pg-surface p-5 mt-5 mb-5">
|
|
<h2 class="text-sm font-semibold text-pg-bright mb-2">Confirmation Gate</h2>
|
|
<p class="text-xs text-pg-muted leading-relaxed mb-4">
|
|
Some tools require explicit confirmation before executing. Override the defaults here.<br>
|
|
Tools requiring confirmation by default: <code class="font-mono text-pg-accent bg-pg-bg border border-pg-border rounded px-1">{{ confirm_required_tools }}</code>
|
|
</p>
|
|
<div class="flex gap-6 flex-wrap items-start">
|
|
<div class="flex-1 min-w-[200px]">
|
|
<label class="block text-xs font-semibold text-pg-muted mb-1">Allow list — bypass confirmation</label>
|
|
<textarea name="allow_list" rows="4"
|
|
placeholder="reminders_clear cron_remove"
|
|
autocomplete="off" spellcheck="false">{{ tool_allow }}</textarea>
|
|
<p class="hint">One tool name per line. These tools skip the confirmation prompt.</p>
|
|
</div>
|
|
<div class="flex-1 min-w-[200px]">
|
|
<label class="block text-xs font-semibold text-pg-muted mb-1">Deny list — always block</label>
|
|
<textarea name="deny_list" rows="4"
|
|
placeholder="shell_exec file_write"
|
|
autocomplete="off" spellcheck="false">{{ tool_deny }}</textarea>
|
|
<p class="hint">These tools are always blocked regardless of risk policy.</p>
|
|
</div>
|
|
</div>
|
|
</div>
|
|
|
|
<div class="mt-4">
|
|
<button type="submit" class="btn-submit w-full md:w-96">Save tool settings</button>
|
|
</div>
|
|
</form>
|
|
</div>
|
|
|
|
<script>
|
|
const riskRank = { "": 99, "low": 0, "medium": 1, "high": 2 };
|
|
const toolRisk = {{ tool_risk_json }};
|
|
|
|
const sel = document.getElementById('max-risk-sel');
|
|
|
|
function updateAutoPills() {
|
|
const maxRank = riskRank[sel.value] ?? 99;
|
|
document.querySelectorAll('[data-tool-risk]').forEach(row => {
|
|
const risk = row.dataset.toolRisk;
|
|
const pill = row.querySelector('.auto-pill');
|
|
const isAuto = riskRank[risk] <= maxRank;
|
|
pill.textContent = isAuto ? 'auto ✓' : 'excluded';
|
|
pill.className = 'auto-pill ' + (isAuto ? 'auto-on' : 'auto-off');
|
|
});
|
|
}
|
|
|
|
sel.addEventListener('change', updateAutoPills);
|
|
updateAutoPills();
|
|
|
|
// Color the override selects
|
|
document.querySelectorAll('.override-sel').forEach(s => {
|
|
function refresh() {
|
|
s.className = 'override-sel';
|
|
if (s.value === 'whitelist') s.classList.add('forced-on');
|
|
if (s.value === 'blacklist') s.classList.add('forced-off');
|
|
}
|
|
s.addEventListener('change', refresh);
|
|
refresh();
|
|
});
|
|
</script>
|
|
|
|
</body>
|
|
</html>
|