Update app_web.py

app_web.py

@@ -16,8 +16,26 @@ snapshot_download(repo_id="CGIAR/weai-kb",
                   token=os.getenv('HF_TOKEN'), 
                   local_dir="./"
                   )
-# ── Session initialisation ───────────────────────────────────────────────────
 
+def cg_admin()
+    headers = st.context.headers
+    if "X-Forwarded-User" in headers:
+        username = headers.get("X-Forwarded-User")
+        token = headers.get("X-Forwarded-Access-Token")
+        userinfo_url = "https://huggingface.co/oauth/userinfo"
+        response = requests.get(userinfo_url, headers={"Authorization": f"Bearer {token}"})
+        
+        if response.status_code == 200:
+            user_data = response.json()
+            
+            # 3. Extract and display the list of organizations
+            # The 'orgs' list contains objects with organization details (name, role, etc.)
+            orgs = user_data.get("orgs", [])
+            
+            if "CGIAR" in [org.get("name") for org in orgs]:
+                return True
+    
+# ── Session initialisation ───────────────────────────────────────────────────
 def init_session():
     """Initialise st.session_state with messages list, cfg, and last_retrieval."""
     if "messages" not in st.session_state:
@@ -45,101 +63,104 @@ def render_sidebar():
     cfg = st.session_state.cfg
 
     with st.sidebar:
-        st.header("Settings")
-
-        # --- Provider dropdown ---
-        providers = ["openai", "anthropic", "gemini", "meta-llama"]
-        current_provider = cfg.get("llm", {}).get("provider", "openai")
-        provider_index = providers.index(current_provider) if current_provider in providers else 0
-
-        provider = st.selectbox(
-            "LLM Provider",
-            providers,
-            index=provider_index,
-            key="sidebar_provider",
-        )
-
-        # Update cfg in session when provider changes
-        if provider != cfg.get("llm", {}).get("provider"):
-            cfg.setdefault("llm", {})["provider"] = provider
-
-        # --- Model dropdown (cached per provider) ---
-        # Invalidate model cache if provider changed
-        prev_provider_key = "prev_provider"
-        if st.session_state.get(prev_provider_key) != provider:
-            for p in providers:
-                st.session_state.pop(f"models_{p}", None)
-            st.session_state[prev_provider_key] = provider
-
-        models_cache_key = f"models_{provider}"
-        if models_cache_key not in st.session_state:
-            api_key = get_api_key(cfg, provider)
-            if api_key:
-                try:
-                    st.session_state[models_cache_key] = list_models(provider, api_key)
-                except Exception:
+        if cg_admin():
+            st.header("Settings")
+    
+            # --- Provider dropdown ---
+            providers = ["openai", "anthropic", "gemini", "meta-llama"]
+            current_provider = cfg.get("llm", {}).get("provider", "openai")
+            provider_index = providers.index(current_provider) if current_provider in providers else 0
+    
+            provider = st.selectbox(
+                "LLM Provider",
+                providers,
+                index=provider_index,
+                key="sidebar_provider",
+            )
+    
+            # Update cfg in session when provider changes
+            if provider != cfg.get("llm", {}).get("provider"):
+                cfg.setdefault("llm", {})["provider"] = provider
+    
+            # --- Model dropdown (cached per provider) ---
+            # Invalidate model cache if provider changed
+            prev_provider_key = "prev_provider"
+            if st.session_state.get(prev_provider_key) != provider:
+                for p in providers:
+                    st.session_state.pop(f"models_{p}", None)
+                st.session_state[prev_provider_key] = provider
+    
+            models_cache_key = f"models_{provider}"
+            if models_cache_key not in st.session_state:
+                api_key = get_api_key(cfg, provider)
+                if api_key:
+                    try:
+                        st.session_state[models_cache_key] = list_models(provider, api_key)
+                    except Exception:
+                        st.session_state[models_cache_key] = []
+                else:
                     st.session_state[models_cache_key] = []
+    
+            available_models = st.session_state[models_cache_key]
+            current_model = cfg.get("llm", {}).get("model", "")
+    
+            if available_models:
+                model_index = (
+                    available_models.index(current_model)
+                    if current_model in available_models
+                    else 0
+                )
+                model = st.selectbox(
+                    "Model",
+                    available_models,
+                    index=model_index,
+                    key="sidebar_model",
+                )
             else:
-                st.session_state[models_cache_key] = []
-
-        available_models = st.session_state[models_cache_key]
-        current_model = cfg.get("llm", {}).get("model", "")
-
-        if available_models:
-            model_index = (
-                available_models.index(current_model)
-                if current_model in available_models
-                else 0
-            )
-            model = st.selectbox(
-                "Model",
-                available_models,
-                index=model_index,
-                key="sidebar_model",
-            )
-        else:
-            model = st.text_input(
-                "Model",
-                value=current_model,
-                key="sidebar_model_text",
-            )
-
-        # Update cfg in session when model changes
-        if model != cfg.get("llm", {}).get("model"):
-            cfg.setdefault("llm", {})["model"] = model
-
-        # --- Web search toggle ---
-        web_enabled = cfg.get("web_search", {}).get("enabled", False)
-        web_toggle = st.toggle("Web search", value=web_enabled, key="sidebar_web_search")
-        cfg.setdefault("web_search", {})["enabled"] = web_toggle
-
-        st.divider()
-
-        # --- Knowledge base stats ---
-        st.subheader("Knowledge Base")
-        try:
-            collection = get_chroma_collection(cfg)
-            chunk_count = collection.count()
-            st.metric("Chunks indexed", chunk_count)
-        except Exception as e:
-            st.warning(f"Could not read knowledge base: {e}")
-            chunk_count = 0
-
-        # --- Re-ingest button ---
-        if st.button("Re-ingest documents", use_container_width=True):
-            st.info("Ingestion may take a few minutes for large document collections...")
-            with st.spinner("Ingesting documents..."):
-                try:
-                    count = ingest_documents(cfg)
-                    clear_collection_cache()
-                    st.success(f"Ingested {count} chunks.")
-                    # Clear cached data so it refreshes after re-ingest
-                    st.session_state.pop("kb_welcome_summary", None)
-                    st.rerun()
-                except Exception as e:
-                    st.error(f"Ingestion failed: {e}")
-
-
+                model = st.text_input(
+                    "Model",
+                    value=current_model,
+                    key="sidebar_model_text",
+                )
+    
+            # Update cfg in session when model changes
+            if model != cfg.get("llm", {}).get("model"):
+                cfg.setdefault("llm", {})["model"] = model
+    
+            # --- Web search toggle ---
+            web_enabled = cfg.get("web_search", {}).get("enabled", False)
+            web_toggle = st.toggle("Web search", value=web_enabled, key="sidebar_web_search")
+            cfg.setdefault("web_search", {})["enabled"] = web_toggle
+    
+            st.divider()
+    
+            # --- Knowledge base stats ---
+            st.subheader("Knowledge Base")
+            try:
+                collection = get_chroma_collection(cfg)
+                chunk_count = collection.count()
+                st.metric("Chunks indexed", chunk_count)
+            except Exception as e:
+                st.warning(f"Could not read knowledge base: {e}")
+                chunk_count = 0
+    
+            # --- Re-ingest button ---
+            if st.button("Re-ingest documents", use_container_width=True):
+                st.info("Ingestion may take a few minutes for large document collections...")
+                with st.spinner("Ingesting documents..."):
+                    try:
+                        count = ingest_documents(cfg)
+                        clear_collection_cache()
+                        st.success(f"Ingested {count} chunks.")
+                        # Clear cached data so it refreshes after re-ingest
+                        st.session_state.pop("kb_welcome_summary", None)
+                        st.rerun()
+                    except Exception as e:
+                        st.error(f"Ingestion failed: {e}")
+
+
+        st.header("Upload Documents")
+        
 # ── Chat interface ───────────────────────────────────────────────────────────
 
 def render_chat():