Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Original file line number Diff line number Diff line change
@@ -0,0 +1,16 @@
---
version: 1
slug: "application-single-app-templates-admin-settings-html"
primary_target: "application/single_app/templates/admin_settings.html"
related_targets: ["application/single_app/static/js/admin/admin_data_management.js","application/single_app/static/css/styles.css"]
---

Scope: Admin Settings Data Management migration workflow. Operate mode.

Audience and job: A SimpleChat administrator configures a destination, selects large personal/group/public scopes, reviews authoritative impact and readiness, submits once, and monitors or recovers the durable migration.

Primary task and proof: Move through Target, Scope, Content & Options, Review, Confirm, and Progress without losing valid selections. Server-owned counts, preflight checks, collision estimates, destructive state, and job telemetry provide proof.

Check warning on line 12 in .impeccable/surfaces/application-single-app-templates-admin-settings-html.md

View workflow job for this annotation

GitHub Actions / malicious-pr-security-review

Important - Changed line contains security control, sanitization, or audit marker. Recommendation%3A Confirm the change does not weaken auth, CSRF, CSP, XSS defenses, settings sanitization, redaction, audit logging, or tests.

Check warning on line 12 in .impeccable/surfaces/application-single-app-templates-admin-settings-html.md

View workflow job for this annotation

GitHub Actions / malicious-pr-security-review

Important - Changed line contains external connection or remote asset marker. Recommendation%3A Review whether changed code can send prompts, files, credentials, cookies, settings, logs, or user data to a new sink.

Direction: Extend the established Bootstrap admin system with a restrained control-room workflow. A persistent compact step rail makes risk and completion legible; one focused work panel replaces three simultaneous pickers. The memorable moment is the review checkpoint changing from incomplete to an evidence-backed ready or blocked state.

Constraints: Preserve backup, Cosmos editor, existing settings storage, #1043 durable migration behavior, local browser assets, safe DOM construction, light/dark themes, keyboard access, and responsive behavior. Do not invent backend state in JavaScript or expose raw settings, credentials, endpoints, SAS values, or unsafe HTML.

Check warning on line 16 in .impeccable/surfaces/application-single-app-templates-admin-settings-html.md

View workflow job for this annotation

GitHub Actions / malicious-pr-security-review

Important - Changed line contains dynamic execution, persistence, or system access marker. Recommendation%3A Do not execute changed lifecycle scripts or installers while this finding is unresolved.

Check warning on line 16 in .impeccable/surfaces/application-single-app-templates-admin-settings-html.md

View workflow job for this annotation

GitHub Actions / malicious-pr-security-review

Important - Changed line contains secret or sensitive data source marker. Recommendation%3A Pair this source with any nearby network, logging, serialization, or process execution sink before approving.
61 changes: 61 additions & 0 deletions PRODUCT.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,61 @@
# Product

<!-- impeccable:product-schema 1 -->

## Platform

web

## Users

SimpleChat serves authenticated enterprise users who chat with generative AI grounded in personal, group, and public-workspace data. Administrators configure Azure-backed services, govern capabilities, and operate backup and migration workflows for production environments.

## Product Purpose

SimpleChat provides secure, context-aware generative AI using Azure OpenAI and retrieval-augmented generation. It lets organizations manage documents and AI-assisted work across personal, shared-group, and public workspaces while retaining administrative control over models, data, security, and operations.

Check warning on line 15 in PRODUCT.md

View workflow job for this annotation

GitHub Actions / malicious-pr-security-review

Important - Changed line contains secret or sensitive data source marker. Recommendation%3A Pair this source with any nearby network, logging, serialization, or process execution sink before approving.

## Positioning

SimpleChat combines Azure-native identity, Cosmos DB, Azure AI Search, Azure OpenAI, and document-processing services in one deployable application with explicit administrative governance and data-management workflows.

Check warning on line 19 in PRODUCT.md

View workflow job for this annotation

GitHub Actions / malicious-pr-security-review

Important - Changed line contains secret or sensitive data source marker. Recommendation%3A Pair this source with any nearby network, logging, serialization, or process execution sink before approving.

## Operating Context

- Users work with documents, conversations, agents, actions, and governed workspaces.

Check warning on line 23 in PRODUCT.md

View workflow job for this annotation

GitHub Actions / malicious-pr-security-review

Important - Changed line contains AI, plugin, agent, or workspace boundary marker. Recommendation%3A Check whether prompts, chat history, uploaded documents, embeddings, citations, settings, or identity can cross a new boundary.
- Administrators operate the application through authenticated settings and control-center surfaces.
- Data migrations move selected SimpleChat users, groups, public workspaces, documents, Search records, and Enhanced Citation source blobs between SimpleChat environments.

Check warning on line 25 in PRODUCT.md

View workflow job for this annotation

GitHub Actions / malicious-pr-security-review

Important - Changed line contains AI, plugin, agent, or workspace boundary marker. Recommendation%3A Check whether prompts, chat history, uploaded documents, embeddings, citations, settings, or identity can cross a new boundary.

Check warning on line 25 in PRODUCT.md

View workflow job for this annotation

GitHub Actions / malicious-pr-security-review

Important - Changed line contains secret or sensitive data source marker. Recommendation%3A Pair this source with any nearby network, logging, serialization, or process execution sink before approving.
- Migration work may be long-running, destructive, resumable, and operationally sensitive, so administrators need authoritative review, progress, and recovery information.

## Capabilities and Constraints

- Personal, group, and public-workspace document management and retrieval-augmented chat.
- Azure Cosmos DB, Azure AI Search, Azure OpenAI, Azure Storage, and Microsoft Entra integration.

Check warning on line 31 in PRODUCT.md

View workflow job for this annotation

GitHub Actions / malicious-pr-security-review

Important - Changed line contains secret or sensitive data source marker. Recommendation%3A Pair this source with any nearby network, logging, serialization, or process execution sink before approving.
- Admin-only backup, migration, settings, and governance operations.
- Durable migration checkpoints, retries, cancellation, provenance, reconciliation, and optional temporary Cosmos capacity management.
- Browser runtime JavaScript and companion assets are served locally; frontend settings and migration responses must not expose credentials or internal configuration.
- The web interface uses Bootstrap 5, supports light and dark themes, and must remain keyboard accessible and responsive.

## Brand Commitments

- Product name: SimpleChat.
- Preserve the existing SimpleChat logos and the familiar Bootstrap-based application vocabulary.
- Administrative copy is direct, operational, and explicit about risk; it does not use marketing language for destructive or production-impacting actions.

## Evidence on Hand

- Product overview and deployment facts: `README.md`.
- Existing application and admin interface: `application/single_app/`.
- Migration behavior and operational guidance: `docs/explanation/features/DATA_MANAGEMENT_BACKUP_MIGRATION.md` and `docs/explanation/features/DATA_MANAGEMENT_MIGRATION_RESILIENCE.md`.
- Product logos: `application/single_app/static/images/`.
- No customer claims, testimonials, pricing, or benchmark assets are approved for invention.

## Product Principles

- Keep data boundaries and authorization explicit.
- Make high-impact operations reviewable before execution.
- Prefer server-authoritative state and counts over browser inference.
- Preserve durable recovery paths for long-running work.
- Surface operational risk plainly without obscuring the task.

## Accessibility & Inclusion

Admin workflows must preserve semantic structure, visible labels, keyboard navigation, focus feedback, responsive layouts, and accessible loading, validation, progress, and status states.
2 changes: 1 addition & 1 deletion application/single_app/config.py
Original file line number Diff line number Diff line change
Expand Up @@ -95,7 +95,7 @@
EXECUTOR_TYPE = 'thread'
EXECUTOR_MAX_WORKERS = 30
SESSION_TYPE = 'filesystem'
VERSION = "0.250.104"
VERSION = "0.250.105"
IS_DEVELOPMENT = is_development_env_enabled()

SESSION_COOKIE_SAMESITE = os.getenv('SESSION_COOKIE_SAMESITE', 'Lax')
Expand Down
Loading
Loading