SECURITY: Hide API key and disable sensitive actions in live demo

app/ui/pages/settings.py

@@ -8,6 +8,12 @@ def render_settings():
     """Render the settings page."""
     st.title("⚙️ Settings")
     
+    # Check if running on Hugging Face (live demo)
+    is_demo = os.path.exists('/.dockerenv') or 'HF_TOKEN' in os.environ
+    
+    if is_demo:
+        st.info("🔒 **Live Demo Mode** - Settings are read-only for security. API keys and sensitive actions are hidden.")
+    
     st.markdown("Configure DocIntel settings and preferences.")
     
     # General Settings
@@ -22,7 +28,8 @@ def render_settings():
             max_value=4000,
             value=settings.CHUNK_SIZE,
             step=100,
-            help="Size of document chunks for processing"
+            help="Size of document chunks for processing",
+            disabled=is_demo  # Disable in demo
         )
     
     with col2:
@@ -32,7 +39,8 @@ def render_settings():
             max_value=500,
             value=settings.CHUNK_OVERLAP,
             step=50,
-            help="Overlap between chunks for context preservation"
+            help="Overlap between chunks for context preservation",
+            disabled=is_demo  # Disable in demo
         )
     
     top_k = st.number_input(
@@ -41,7 +49,8 @@ def render_settings():
         max_value=20,
         value=settings.TOP_K,
         step=1,
-        help="Number of documents to retrieve per query"
+        help="Number of documents to retrieve per query",
+        disabled=is_demo  # Disable in demo
     )
     
     # Model Settings
@@ -54,7 +63,8 @@ def render_settings():
             "Embedding Model",
             ["all-MiniLM-L6-v2", "all-mpnet-base-v2", "all-distilroberta-v1"],
             index=0,
-            help="Model for generating document embeddings (requires restart)"
+            help="Model for generating document embeddings (requires restart)",
+            disabled=is_demo  # Disable in demo
         )
     
     with col2:
@@ -62,68 +72,78 @@ def render_settings():
             "LLM Model",
             ["mixtral-8x7b-32768", "llama2-70b-4096", "gemma-7b-it"],
             index=0,
-            help="Model for generating responses"
+            help="Model for generating responses",
+            disabled=is_demo  # Disable in demo
         )
     
-    # API Settings
-    st.subheader("🔑 API Settings")
-    
-    groq_api_key = st.text_input(
-        "Groq API Key",
-        value=settings.GROQ_API_KEY,
-        type="password",
-        help="Get your API key from console.groq.com"
-    )
-    
-    if st.button("💾 Save Settings", type="primary"):
-        # Save settings to .env
-        env_path = ".env"
-        env_content = []
-        
-        # Read existing .env
-        if os.path.exists(env_path):
-            with open(env_path, "r") as f:
-                env_content = f.readlines()
+    # API Settings - Hidden completely in demo mode
+    if not is_demo:
+        st.subheader("🔑 API Settings")
         
-        # Update values
-        updates = {
-            "CHUNK_SIZE": str(chunk_size),
-            "CHUNK_OVERLAP": str(chunk_overlap),
-            "TOP_K": str(top_k),
-            "EMBEDDING_MODEL": embedding_model,
-            "GROQ_MODEL": llm_model,
-            "GROQ_API_KEY": groq_api_key
-        }
-        
-        updated_lines = []
-        for line in env_content:
-            key = line.split("=")[0].strip() if "=" in line else None
-            if key in updates:
-                updated_lines.append(f"{key}={updates[key]}\n")
-                del updates[key]
-            else:
-                updated_lines.append(line)
-        
-        # Add new values
-        for key, value in updates.items():
-            updated_lines.append(f"{key}={value}\n")
-        
-        # Write back
-        with open(env_path, "w") as f:
-            f.writelines(updated_lines)
+        groq_api_key = st.text_input(
+            "Groq API Key",
+            value=settings.GROQ_API_KEY,
+            type="password",
+            help="Get your API key from console.groq.com"
+        )
         
-        st.success("✅ Settings saved! Restart DocIntel for changes to take effect.")
-    
-    # Database Management
+        if st.button("💾 Save Settings", type="primary"):
+            # Save settings to .env
+            env_path = ".env"
+            env_content = []
+            
+            # Read existing .env
+            if os.path.exists(env_path):
+                with open(env_path, "r") as f:
+                    env_content = f.readlines()
+            
+            # Update values
+            updates = {
+                "CHUNK_SIZE": str(chunk_size),
+                "CHUNK_OVERLAP": str(chunk_overlap),
+                "TOP_K": str(top_k),
+                "EMBEDDING_MODEL": embedding_model,
+                "GROQ_MODEL": llm_model,
+                "GROQ_API_KEY": groq_api_key
+            }
+            
+            updated_lines = []
+            for line in env_content:
+                key = line.split("=")[0].strip() if "=" in line else None
+                if key in updates:
+                    updated_lines.append(f"{key}={updates[key]}\n")
+                    del updates[key]
+                else:
+                    updated_lines.append(line)
+            
+            # Add new values
+            for key, value in updates.items():
+                updated_lines.append(f"{key}={value}\n")
+            
+            # Write back
+            with open(env_path, "w") as f:
+                f.writelines(updated_lines)
+            
+            st.success("✅ Settings saved! Restart DocIntel for changes to take effect.")
+    else:
+        # Show masked API status in demo
+        st.subheader("🔑 API Status")
+        st.success("✅ Groq API: **Connected** (Key hidden for security)")
+    
+    # Database Management - Disabled in demo
     st.divider()
     st.subheader("🗄️ Database Management")
     
     col1, col2 = st.columns(2)
     
     with col1:
-        if st.button("🧹 Clear Vector Database", use_container_width=True):
-            ChromaClient().delete_all()
-            st.success("Vector database cleared!")
+        if is_demo:
+            st.button("🧹 Clear Vector Database", use_container_width=True, disabled=True)
+            st.caption("🔒 Disabled in live demo")
+        else:
+            if st.button("🧹 Clear Vector Database", use_container_width=True):
+                ChromaClient().delete_all()
+                st.success("Vector database cleared!")
     
     with col2:
         if st.button("📊 Database Stats", use_container_width=True):
@@ -155,6 +175,7 @@ def render_settings():
         - **Platform**: {os.sys.platform}
         - **Working Directory**: {os.getcwd()}
         - **Environment**: {'🐳 Docker' if os.path.exists('/.dockerenv') else '🖥️ Local'}
+        - **Mode**: {'🔒 Live Demo (Read-Only)' if is_demo else '🔧 Full Access'}
         """)
     
     # About