jcwalker3andClaude Opus 4.8
ab33337a94
Phase 3 child of the Web Console epic #631. Operators can now see the active workflow policy/guardrail configuration from the console instead of reading the repo tree. - webui/policy_inventory.py (new): redacted, machine-readable guardrail inventory. One row per major guardrail (role separation/RBAC, lease rules, worktree binding, merge confirmation, redaction, contamination, allocator policy, audit logging, mutation gating) with source pointers (file/module/doc) and a compact active projection from the existing safe policy accessors. Fail-soft per entry; whole payload run through console_redaction before emit; diff vs documented default where feasible. - webui/policy_views.py (new): HTML cards with source pointers, active config, and the documented-default diff; read-only page copy, no forms. - webui/app.py: register GET /policy and GET /api/v1/policy (additive). - webui/layout.py: add Policy nav item. - tests/test_webui_policy_visibility.py (new): guardrail presence + source pointers (AC1), redaction incl. planted-secret masking and scan_for_secrets (AC2/AC3), read-only page + no-mutation routes (AC4), fail-soft rendering. - docs/webui-local-dev.md: route table + read-only policy-visibility section. Read-only throughout; no policy editing, no gate-weakening toggle, secrets redacted. Co-Authored-By: Claude Opus 4.8 (1M context) <[email protected]>
178 lines
4.6 KiB
Python
178 lines
4.6 KiB
Python
"""Shared HTML layout for the internal web UI."""
|
|
|
|
from __future__ import annotations
|
|
|
|
NAV_ITEMS = (
|
|
("/", "Home"),
|
|
("/queue", "Queue"),
|
|
("/projects", "Projects"),
|
|
("/prompts", "Prompts"),
|
|
("/runtime", "Runtime"),
|
|
("/policy", "Policy"),
|
|
("/audit", "Audit"),
|
|
("/worktrees", "Worktrees"),
|
|
("/leases", "Leases"),
|
|
("/actions", "Actions"),
|
|
)
|
|
|
|
MVP_NOTICE = (
|
|
"Read-only MVP — Gitea, MCP tools, and canonical workflows remain the "
|
|
"source of truth. No mutation endpoints."
|
|
)
|
|
|
|
|
|
def render_page(*, title: str, body_html: str, extra_head: str = "") -> str:
|
|
nav_links = "".join(
|
|
f'<a href="{href}">{label}</a>' for href, label in NAV_ITEMS
|
|
)
|
|
return f"""<!DOCTYPE html>
|
|
<html lang="en">
|
|
<head>
|
|
<meta charset="utf-8">
|
|
<meta name="viewport" content="width=device-width, initial-scale=1">
|
|
<title>{title} · MCP Control Plane</title>
|
|
<style>
|
|
:root {{
|
|
--bg: #0f1419;
|
|
--surface: #1a2332;
|
|
--text: #e7ecf3;
|
|
--muted: #8b9cb3;
|
|
--accent: #5b9fd4;
|
|
--border: #2a3648;
|
|
}}
|
|
* {{ box-sizing: border-box; }}
|
|
body {{
|
|
margin: 0;
|
|
font-family: system-ui, -apple-system, sans-serif;
|
|
background: var(--bg);
|
|
color: var(--text);
|
|
line-height: 1.5;
|
|
}}
|
|
header {{
|
|
background: var(--surface);
|
|
border-bottom: 1px solid var(--border);
|
|
padding: 0.75rem 1.25rem;
|
|
}}
|
|
header h1 {{
|
|
margin: 0 0 0.5rem;
|
|
font-size: 1.1rem;
|
|
font-weight: 600;
|
|
}}
|
|
nav {{
|
|
display: flex;
|
|
flex-wrap: wrap;
|
|
gap: 0.75rem 1rem;
|
|
}}
|
|
nav a {{
|
|
color: var(--accent);
|
|
text-decoration: none;
|
|
font-size: 0.9rem;
|
|
}}
|
|
nav a:hover {{ text-decoration: underline; }}
|
|
main {{
|
|
max-width: 52rem;
|
|
margin: 0 auto;
|
|
padding: 1.5rem 1.25rem 2.5rem;
|
|
}}
|
|
.notice {{
|
|
color: var(--muted);
|
|
font-size: 0.85rem;
|
|
margin-bottom: 1.25rem;
|
|
padding: 0.65rem 0.85rem;
|
|
border: 1px solid var(--border);
|
|
border-radius: 6px;
|
|
background: var(--surface);
|
|
}}
|
|
h2 {{ margin-top: 0; font-size: 1.35rem; }}
|
|
p {{ color: var(--muted); }}
|
|
.stub {{
|
|
border-left: 3px solid var(--accent);
|
|
padding-left: 0.85rem;
|
|
margin: 1rem 0;
|
|
}}
|
|
.meta {{ font-size: 0.85rem; }}
|
|
table.registry, table.detail {{
|
|
width: 100%;
|
|
border-collapse: collapse;
|
|
margin: 1rem 0;
|
|
font-size: 0.9rem;
|
|
}}
|
|
table.registry th, table.registry td,
|
|
table.detail th, table.detail td {{
|
|
text-align: left;
|
|
padding: 0.45rem 0.6rem;
|
|
border-bottom: 1px solid var(--border);
|
|
}}
|
|
table.registry th, table.detail th {{
|
|
color: var(--muted);
|
|
font-weight: 500;
|
|
}}
|
|
code {{
|
|
font-family: ui-monospace, monospace;
|
|
font-size: 0.85em;
|
|
color: var(--text);
|
|
}}
|
|
ol.checklist {{
|
|
padding-left: 1.25rem;
|
|
margin: 0.5rem 0 1.5rem;
|
|
}}
|
|
ol.checklist li {{ margin-bottom: 0.85rem; }}
|
|
ol.checklist p {{ margin: 0.25rem 0 0; font-size: 0.9rem; }}
|
|
.prompt-card {{
|
|
margin: 1.25rem 0 1.75rem;
|
|
padding: 1rem 1.1rem;
|
|
border: 1px solid var(--border);
|
|
border-radius: 8px;
|
|
background: var(--surface);
|
|
}}
|
|
.prompt-card h3 {{ margin: 0 0 0.5rem; font-size: 1.05rem; }}
|
|
pre.prompt-text {{
|
|
white-space: pre-wrap;
|
|
word-break: break-word;
|
|
margin: 0.75rem 0;
|
|
padding: 0.75rem 0.85rem;
|
|
border-radius: 6px;
|
|
background: var(--bg);
|
|
border: 1px solid var(--border);
|
|
font-size: 0.9rem;
|
|
color: var(--text);
|
|
}}
|
|
.copy-btn {{
|
|
background: var(--accent);
|
|
color: #0b1219;
|
|
border: none;
|
|
border-radius: 6px;
|
|
padding: 0.4rem 0.85rem;
|
|
font-size: 0.85rem;
|
|
cursor: pointer;
|
|
}}
|
|
.copy-btn:hover {{ filter: brightness(1.08); }}
|
|
.muted {{ color: var(--muted); }}
|
|
.badges {{ display: inline-flex; flex-wrap: wrap; gap: 0.35rem; margin-left: 0.5rem; }}
|
|
.badge {{
|
|
font-size: 0.72rem;
|
|
padding: 0.1rem 0.45rem;
|
|
border-radius: 999px;
|
|
border: 1px solid var(--border);
|
|
color: var(--muted);
|
|
text-transform: lowercase;
|
|
}}
|
|
.badge-claimed {{ color: #8fd19e; border-color: #3d6b4a; }}
|
|
.badge-blocked {{ color: #f0a8a8; border-color: #7a3b3b; }}
|
|
.badge-in-review {{ color: #9ec8f0; border-color: #3d5f7a; }}
|
|
.badge-duplicate {{ color: #e0c27a; border-color: #6b5730; }}
|
|
.badge-stale {{ color: #c9b8e8; border-color: #5a4a78; }}
|
|
</style>
|
|
{extra_head}
|
|
</head>
|
|
<body>
|
|
<header>
|
|
<h1>MCP Control Plane</h1>
|
|
<nav>{nav_links}</nav>
|
|
</header>
|
|
<main>
|
|
<p class="notice">{MVP_NOTICE}</p>
|
|
{body_html}
|
|
</main>
|
|
</body>
|
|
</html>""" |