2026-03-13 00:18:14 +00:00
{% extends "base.html" %}
{% block title %}Manage Projects — Ontoref{% endblock title %}
{% block content %}
< div class = "mb-6 flex items-center justify-between" >
< h1 class = "text-xl font-bold" > Manage Projects< / h1 >
feat: unified auth model, project onboarding, install pipeline, config management
The full scope across this batch: POST /sessions key→token exchange, SessionStore dual-index with revoke_by_id, CLI Bearer injection (ONTOREF_TOKEN), ontoref setup
--gen-keys, install scripts, daemon config form roundtrip, ADR-004/005, on+re self-description update (fully-self-described), and landing page refresh.
2026-03-13 20:56:31 +00:00
< div class = "flex items-center gap-2" >
{% if daemon_admin_enabled %}
< a href = "/ui/manage/logout" class = "btn btn-xs btn-ghost gap-1 text-base-content/40 hover:text-error" >
< svg class = "w-3.5 h-3.5" fill = "none" stroke = "currentColor" viewBox = "0 0 24 24" >
< path stroke-linecap = "round" stroke-linejoin = "round" stroke-width = "2"
d="M17 16l4-4m0 0l-4-4m4 4H7m6 4v1a3 3 0 01-3 3H6a3 3 0 01-3-3V7a3 3 0 013-3h4a3 3 0 013 3v1"/>
< / svg >
logout
< / a >
{% endif %}
< / div >
2026-03-13 00:18:14 +00:00
< / div >
2026-03-29 08:32:50 +01:00
< div id = "manage-error" class = "{% if error %}alert alert-error mb-4 text-sm{% endif %}" >
{% if error %}< span > {{ error }}< / span > {% endif %}
2026-03-13 00:18:14 +00:00
< / div >
feat: #[onto_mcp_tool] catalog, OCI credential vault layer, validate ADR-018 mode hierarchy
ontoref-derive: #[onto_mcp_tool] attribute macro registers MCP tool unit-structs in
the catalog at link time via inventory::submit!; annotated item is emitted unchanged,
ToolBase/AsyncTool impls stay on the struct. All 34 tools migrated from manual wiring
(net +5: ontoref_list_projects, ontoref_search, ontoref_describe,
ontoref_list_ontology_extensions, ontoref_get_ontology_extension).
validate modes (ADR-018): reads level_hierarchy from workflow.ncl and checks every
.ncl mode for level declared, strategy declared, delegate chain coherent, compose
extends valid. mode resolve <id> shows which hierarchy level handles a mode and why.
--self-test generates synthetic fixtures in a temp dir for CI smoke-testing.
validate run-cargo: two-step Cargo.toml resolution — workspace layout first
(crates/<check.crate>/Cargo.toml), single-crate fallback by package name or repo
basename. Lets the same ADR constraint shape apply to workspace and single-crate repos.
ontology/schemas/manifest.ncl: registry_topology_type contract — multi-registry
coordination, push targets, participant scopes, per-namespace capability.
reflection/requirements/base.ncl: oras ≥1.2.0, cosign ≥2.0.0, sops ≥3.9.0, age
≥1.1.0, restic declared as Hard/Soft requirements with version_min, check_cmd, and
install_hint (ADR-017 toolchain surface).
ADR-019: per-file recipient routing for tenant isolation without multi-vault. Schema
additions: sops.recipient_groups + sops.recipient_rules in ontoref-project.ncl.
secrets-bootstrap generates .sops.yaml from project.ncl in declarative mode. Three
new secrets-audit checks: recipient-routing-coherent, recipient-routing-coverage,
no-multi-vault. Adoption templates: single-team/, multi-tenant/, agent-first/.
Integration templates: domain-producer/, mode-producer/, mode-consumer/.
UI: project_picker surfaces registry badge (⟳ participant) and vault badge
(⛁ vault_id · N, green=declarative / amber=legacy) per project card. Expanded panel
adds collapsible Registry section with namespace, endpoint, and push/pull capability.
manage.html gains Runtime Services card — MCP and GraphQL toggleable without restart
via HTMX POST /ui/manage/services/{service}/toggle.
describe.nu: capabilities JSON includes registry_topology and vault_state per project.
sync.nu: drift check extended to detect //! absence on newly registered crates.
qa.ncl: six entries — credential-vault-best-practice (layered data-flow diagram),
credential-vault-templates (paths A/B/C), credential-vault-troubleshooting (15 named
errors), integration-what-and-why (ADR-042 OCI federation), integration-how-to-implement,
integration-troubleshooting.
on+re: core.ncl + manifest.ncl updated to reflect OCI, MCP, and mode-hierarchy nodes.
Deleted stale presentation assets (2026-02 slides + voice notes).
2026-05-12 04:46:15 +01:00
<!-- Runtime Services -->
< div class = "card bg-base-200 border border-base-content/10 mb-6" >
< div class = "card-body p-5" >
< h2 class = "card-title text-sm font-semibold" > Runtime Services< / h2 >
< p class = "text-xs text-base-content/40 -mt-1" > Toggle optional services without restarting the daemon.< / p >
< div class = "flex flex-wrap gap-3 mt-3" >
{% if mcp_active is defined %}
< div class = "flex items-center gap-2 bg-base-300 rounded-lg px-3 py-2" >
< span class = "text-xs font-mono font-semibold" > MCP< / span >
< span id = "mcp-badge" class = "{% if mcp_active %}badge badge-success badge-sm{% else %}badge badge-error badge-sm{% endif %}" >
{% if mcp_active %}enabled{% else %}disabled{% endif %}
< / span >
< button
class="btn btn-xs btn-ghost ml-1"
hx-post="/ui/manage/services/mcp/toggle"
hx-target="#mcp-badge"
hx-swap="outerHTML"
title="Toggle MCP">
< svg class = "w-3.5 h-3.5" fill = "none" stroke = "currentColor" viewBox = "0 0 24 24" >
< path stroke-linecap = "round" stroke-linejoin = "round" stroke-width = "2" d = "M4 4v5h.582m15.356 2A8.001 8.001 0 004.582 9m0 0H9m11 11v-5h-.581m0 0a8.003 8.003 0 01-15.357-2m15.357 2H15" / >
< / svg >
< / button >
< / div >
{% endif %}
{% if graphql_active is defined %}
< div class = "flex items-center gap-2 bg-base-300 rounded-lg px-3 py-2" >
< span class = "text-xs font-mono font-semibold" > GraphQL< / span >
< span id = "graphql-badge" class = "{% if graphql_active %}badge badge-success badge-sm{% else %}badge badge-error badge-sm{% endif %}" >
{% if graphql_active %}enabled{% else %}disabled{% endif %}
< / span >
< button
class="btn btn-xs btn-ghost ml-1"
hx-post="/ui/manage/services/graphql/toggle"
hx-target="#graphql-badge"
hx-swap="outerHTML"
title="Toggle GraphQL">
< svg class = "w-3.5 h-3.5" fill = "none" stroke = "currentColor" viewBox = "0 0 24 24" >
< path stroke-linecap = "round" stroke-linejoin = "round" stroke-width = "2" d = "M4 4v5h.582m15.356 2A8.001 8.001 0 004.582 9m0 0H9m11 11v-5h-.581m0 0a8.003 8.003 0 01-15.357-2m15.357 2H15" / >
< / svg >
< / button >
< / div >
{% endif %}
< / div >
< / div >
< / div >
2026-03-13 00:18:14 +00:00
<!-- Registered Projects -->
2026-03-29 08:32:50 +01:00
< div class = "mb-6" id = "manage-projects-section" >
{% include "partials/manage_projects_section.html" %}
2026-03-13 00:18:14 +00:00
< / div >
<!-- Add Project Form -->
< div class = "card bg-base-200 border border-base-content/10" >
< div class = "card-body p-5" >
< h2 class = "card-title text-sm font-semibold" > Add Project< / h2 >
feat: unified auth model, project onboarding, install pipeline, config management
The full scope across this batch: POST /sessions key→token exchange, SessionStore dual-index with revoke_by_id, CLI Bearer injection (ONTOREF_TOKEN), ontoref setup
--gen-keys, install scripts, daemon config form roundtrip, ADR-004/005, on+re self-description update (fully-self-described), and landing page refresh.
2026-03-13 20:56:31 +00:00
< p class = "text-xs text-base-content/40 -mt-1" > Slug and import paths are read from < code > .ontoref/project.ncl< / code > . Change is persisted to < code > ~/.config/ontoref/projects.ncl< / code > .< / p >
2026-03-29 08:32:50 +01:00
< form hx-post = "/ui/manage/add"
hx-target="#manage-projects-section"
hx-swap="innerHTML"
hx-on::after-request="if(event.detail.successful)this.reset()"
class="flex flex-col sm:flex-row gap-3 mt-2">
2026-03-13 00:18:14 +00:00
< div class = "form-control flex-1" >
< label class = "label py-1" >
< span class = "label-text text-xs text-base-content/60" > Absolute root path< / span >
< / label >
< input type = "text" name = "root" required placeholder = "/path/to/project"
class="input input-bordered input-sm font-mono">
< / div >
< div class = "flex items-end" >
< button type = "submit" class = "btn btn-sm btn-primary" > Add< / button >
< / div >
< / form >
< / div >
< / div >
{% endblock content %}