69ec2f667d
- New /settings/tools page: max_risk selector (low/medium/high) + per-tool override dropdowns (Default / Force include / Force exclude) for all 58 tools grouped by category with color-coded risk badges; JS updates Auto status live - get_tools_for_role() + get_openai_tools_for_role() now accept max_risk, whitelist, blacklist; _apply_risk_policy() handles the filtering logic - get_risk_policy() helper in auth_utils reads from tool_policy.json - Risk policy wired through orchestrator.py, openai_orchestrator.py, orchestrator_engine.py, nextcloud_talk.py, homeassistant.py - Tools nav link added to settings.html and notifications.html - CLAUDE.md and ARCH__SYSTEM.md updated: tool count 50→58, risk system docs, tool access control three-layer model documented Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
234 lines
9.3 KiB
HTML
234 lines
9.3 KiB
HTML
<!DOCTYPE html>
|
|
<html lang="en">
|
|
<head>
|
|
<meta charset="UTF-8">
|
|
<meta name="viewport" content="width=device-width, initial-scale=1.0">
|
|
<title>Tool Settings — Cortex</title>
|
|
<style>
|
|
*, *::before, *::after { box-sizing: border-box; margin: 0; padding: 0; }
|
|
|
|
:root {
|
|
color-scheme: light dark;
|
|
--pg-bg: #f8fafc; --pg-card: #ffffff; --pg-border: #e2e8f0;
|
|
--pg-text: #1e293b; --pg-muted: #64748b; --pg-dimmer: #94a3b8;
|
|
--pg-bright: #cbd5e1; --pg-nav-hover: rgba(255,255,255,0.05);
|
|
--pg-accent: #7c3aed;
|
|
}
|
|
@media (prefers-color-scheme: dark) {
|
|
:root {
|
|
--pg-bg: #0f0a1e; --pg-card: #1a1228; --pg-border: #2d2040;
|
|
--pg-text: #e2d9f3; --pg-muted: #9d8ec4; --pg-dimmer: #6b5d8a;
|
|
--pg-bright: #1a1228; --pg-nav-hover: rgba(0,0,0,0.05);
|
|
}
|
|
}
|
|
|
|
body { font-family: system-ui, sans-serif; background: var(--pg-bg); color: var(--pg-text); min-height: 100vh; }
|
|
|
|
.page-nav {
|
|
display: flex; align-items: center; gap: 0.25rem;
|
|
padding: 0.5rem 1rem; background: var(--pg-card);
|
|
border-bottom: 1px solid var(--pg-border); flex-wrap: wrap;
|
|
}
|
|
.nav-link {
|
|
padding: 0.35rem 0.7rem; border-radius: 0.375rem; font-size: 0.875rem;
|
|
color: var(--pg-muted); text-decoration: none; white-space: nowrap;
|
|
}
|
|
.nav-link:hover { color: var(--pg-text); background: var(--pg-nav-hover); }
|
|
.nav-link.active { color: #a78bfa; }
|
|
.nav-spacer { flex: 1; min-width: 0.5rem; }
|
|
.nav-link.nav-logout { color: var(--pg-dimmer); }
|
|
.nav-link.nav-logout:hover { color: var(--pg-muted); background: none; }
|
|
|
|
.page-wrap { max-width: 860px; margin: 0 auto; padding: 2rem 1rem 4rem; }
|
|
h1 { font-size: 1.4rem; font-weight: 700; margin-bottom: 0.25rem; }
|
|
.page-lead { color: var(--pg-muted); font-size: 0.9rem; margin-bottom: 2rem; }
|
|
|
|
.success { color: #22c55e; font-size: 0.9rem; margin: 0.5rem 0; }
|
|
.error { color: #f87171; font-size: 0.9rem; margin: 0.5rem 0; }
|
|
|
|
/* ── Risk policy card ── */
|
|
.policy-card {
|
|
background: var(--pg-card); border: 1px solid var(--pg-border);
|
|
border-radius: 0.75rem; padding: 1.25rem 1.5rem; margin-bottom: 1.75rem;
|
|
}
|
|
.policy-card h2 { font-size: 1rem; font-weight: 600; margin-bottom: 0.75rem; }
|
|
.policy-row { display: flex; align-items: center; gap: 1rem; flex-wrap: wrap; margin-bottom: 0.75rem; }
|
|
.policy-label { font-size: 0.875rem; font-weight: 500; min-width: 6rem; }
|
|
.policy-note { font-size: 0.8rem; color: var(--pg-muted); margin-top: 0.35rem; line-height: 1.5; }
|
|
|
|
select, input[type="text"] {
|
|
background: var(--pg-bg); border: 1px solid var(--pg-border);
|
|
border-radius: 0.375rem; color: var(--pg-text);
|
|
padding: 0.4rem 0.65rem; font-size: 0.875rem;
|
|
}
|
|
select:focus, input:focus { outline: 2px solid var(--pg-accent); border-color: transparent; }
|
|
|
|
.save-btn {
|
|
background: var(--pg-accent); color: #fff; border: none;
|
|
border-radius: 0.5rem; padding: 0.5rem 1.4rem;
|
|
font-size: 0.875rem; font-weight: 600; cursor: pointer;
|
|
margin-top: 0.5rem;
|
|
}
|
|
.save-btn:hover { opacity: 0.88; }
|
|
|
|
/* ── Tool table ── */
|
|
.section-head {
|
|
font-size: 0.7rem; font-weight: 700; letter-spacing: 0.08em;
|
|
text-transform: uppercase; color: var(--pg-dimmer);
|
|
margin: 1.75rem 0 0.6rem;
|
|
}
|
|
.tool-table {
|
|
width: 100%; border-collapse: collapse;
|
|
background: var(--pg-card); border: 1px solid var(--pg-border);
|
|
border-radius: 0.75rem; overflow: hidden; margin-bottom: 0.5rem;
|
|
font-size: 0.85rem;
|
|
}
|
|
.tool-table th {
|
|
text-align: left; padding: 0.55rem 0.9rem;
|
|
border-bottom: 1px solid var(--pg-border);
|
|
color: var(--pg-muted); font-weight: 600; font-size: 0.78rem;
|
|
text-transform: uppercase; letter-spacing: 0.04em;
|
|
}
|
|
.tool-table td { padding: 0.5rem 0.9rem; border-bottom: 1px solid var(--pg-border); vertical-align: middle; }
|
|
.tool-table tr:last-child td { border-bottom: none; }
|
|
.tool-table tr:hover td { background: rgba(124,58,237,0.04); }
|
|
|
|
.tool-name { font-family: monospace; font-size: 0.82rem; }
|
|
|
|
/* Risk badges */
|
|
.risk { display: inline-block; font-size: 0.7rem; font-weight: 700;
|
|
padding: 0.15rem 0.45rem; border-radius: 9999px; letter-spacing: 0.04em; }
|
|
.risk-low { background: rgba(34,197,94,0.15); color: #16a34a; }
|
|
.risk-medium { background: rgba(234,179, 8,0.15); color: #ca8a04; }
|
|
.risk-high { background: rgba(239,68, 68,0.15); color: #dc2626; }
|
|
@media (prefers-color-scheme: dark) {
|
|
.risk-low { background: rgba(34,197,94,0.12); color: #4ade80; }
|
|
.risk-medium { background: rgba(234,179, 8,0.12); color: #fbbf24; }
|
|
.risk-high { background: rgba(239,68, 68,0.12); color: #f87171; }
|
|
}
|
|
|
|
/* Auto status pill */
|
|
.auto-pill {
|
|
display: inline-block; font-size: 0.68rem; font-weight: 600;
|
|
padding: 0.12rem 0.4rem; border-radius: 9999px;
|
|
}
|
|
.auto-on { background: rgba(124,58,237,0.12); color: #7c3aed; }
|
|
.auto-off { background: rgba(148,163,184,0.12); color: var(--pg-dimmer); }
|
|
@media (prefers-color-scheme: dark) {
|
|
.auto-on { color: #a78bfa; }
|
|
}
|
|
|
|
/* Override select */
|
|
.override-sel {
|
|
font-size: 0.78rem; padding: 0.25rem 0.5rem;
|
|
border-radius: 0.3rem; min-width: 7rem;
|
|
}
|
|
.override-sel.forced-on { border-color: #7c3aed; color: #7c3aed; }
|
|
.override-sel.forced-off { border-color: #dc2626; color: #dc2626; }
|
|
|
|
/* Legend */
|
|
.legend { display: flex; gap: 1.25rem; flex-wrap: wrap; margin-bottom: 1.25rem; font-size: 0.8rem; color: var(--pg-muted); }
|
|
.legend-dot { display: inline-block; width: 0.55rem; height: 0.55rem; border-radius: 50%; margin-right: 0.3rem; }
|
|
.legend-dot.on { background: #7c3aed; }
|
|
.legend-dot.off { background: var(--pg-dimmer); }
|
|
</style>
|
|
</head>
|
|
<body>
|
|
|
|
<nav class="page-nav">
|
|
<a href="{{ back_href }}" class="nav-link">← Chat</a>
|
|
<a href="{{ help_href }}" class="nav-link">Help</a>
|
|
<a href="/settings" class="nav-link">Settings</a>
|
|
<a href="/settings/notifications" class="nav-link">Notifications</a>
|
|
<a href="/settings/tools" class="nav-link active">Tools</a>
|
|
<span class="nav-spacer"></span>
|
|
<a href="/logout" class="nav-link nav-logout">Sign out</a>
|
|
</nav>
|
|
|
|
<div class="page-wrap">
|
|
<h1>Tool Settings</h1>
|
|
<p class="page-lead">
|
|
Control which orchestrator tools are available. The risk level sets an automatic threshold;
|
|
whitelist and blacklist let you fine-tune individual tools beyond that.
|
|
</p>
|
|
|
|
<!-- SUCCESS -->
|
|
<!-- ERROR -->
|
|
|
|
<form method="POST" action="/settings/tools" id="tools-form">
|
|
|
|
<!-- ── Risk policy ── -->
|
|
<div class="policy-card">
|
|
<h2>Risk Policy</h2>
|
|
|
|
<div class="policy-row">
|
|
<span class="policy-label">Max risk level</span>
|
|
<select name="max_risk" id="max-risk-sel">
|
|
<option value="" {{ sel_none }}>No filter — use all role-permitted tools</option>
|
|
<option value="low" {{ sel_low }}>Low — read-only and sandboxed tools only</option>
|
|
<option value="medium" {{ sel_medium }}>Medium — low + medium risk (recommended)</option>
|
|
<option value="high" {{ sel_high }}>High — all tools including destructive ones</option>
|
|
</select>
|
|
</div>
|
|
<p class="policy-note">
|
|
<strong>Low</strong> tools are read-only and sandboxed (web search, project file reads, HA status checks).<br>
|
|
<strong>Medium</strong> tools write to local data or send notifications to you (cron jobs, scratch, task management).<br>
|
|
<strong>High</strong> tools affect external systems or the host (shell exec, email, device control, service restart).
|
|
</p>
|
|
|
|
<p class="policy-note" style="margin-top:0.75rem;">
|
|
The <em>Auto</em> column below shows each tool's status at your current max risk level.
|
|
Use the override column to force-include or force-exclude individual tools.
|
|
</p>
|
|
</div>
|
|
|
|
<!-- ── Legend ── -->
|
|
<div class="legend">
|
|
<span><span class="legend-dot on"></span>Auto-included by risk level</span>
|
|
<span><span class="legend-dot off"></span>Auto-excluded by risk level</span>
|
|
</div>
|
|
|
|
<!-- ── Tool table ── -->
|
|
{{ tool_table_html }}
|
|
|
|
<div style="margin-top:1.5rem;">
|
|
<button type="submit" class="save-btn">Save tool settings</button>
|
|
</div>
|
|
</form>
|
|
</div>
|
|
|
|
<script>
|
|
const riskRank = { "": 99, "low": 0, "medium": 1, "high": 2 };
|
|
const toolRisk = {{ tool_risk_json }};
|
|
|
|
const sel = document.getElementById('max-risk-sel');
|
|
|
|
function updateAutoPills() {
|
|
const maxRank = riskRank[sel.value] ?? 99;
|
|
document.querySelectorAll('[data-tool-risk]').forEach(row => {
|
|
const risk = row.dataset.toolRisk;
|
|
const pill = row.querySelector('.auto-pill');
|
|
const isAuto = riskRank[risk] <= maxRank;
|
|
pill.textContent = isAuto ? 'auto ✓' : 'excluded';
|
|
pill.className = 'auto-pill ' + (isAuto ? 'auto-on' : 'auto-off');
|
|
});
|
|
}
|
|
|
|
sel.addEventListener('change', updateAutoPills);
|
|
updateAutoPills();
|
|
|
|
// Color the override selects
|
|
document.querySelectorAll('.override-sel').forEach(s => {
|
|
function refresh() {
|
|
s.className = 'override-sel';
|
|
if (s.value === 'whitelist') s.classList.add('forced-on');
|
|
if (s.value === 'blacklist') s.classList.add('forced-off');
|
|
}
|
|
s.addEventListener('change', refresh);
|
|
refresh();
|
|
});
|
|
</script>
|
|
|
|
</body>
|
|
</html>
|