Added a way for organizations to prohibit providers (#1105)

app/MindWork AI Studio/Components/ChatComponent.razor

@@ -157,7 +157,7 @@
 
             @if (!this.ChatThread.IsLLMProviderAllowed(this.Provider))
             {
-                <MudTooltip Text="@T("The selected provider is not allowed in this chat due to data security or confidence-level requirements.")" Placement="@TOOLBAR_TOOLTIP_PLACEMENT">
+                <MudTooltip Text="@(this.SettingsManager.IsProviderProhibited(this.Provider.UsedLLMProvider) ? T("The use of this provider has been prohibited by your organization. Please select a different provider.") : T("The selected provider is not allowed in this chat due to data security or confidence-level requirements."))" Placement="@TOOLBAR_TOOLTIP_PLACEMENT">
                     <MudIconButton Icon="@Icons.Material.Filled.Error" Color="Color.Error"/>
                 </MudTooltip>
             }

app/MindWork AI Studio/Components/ProviderSelection.razor.cs

@@ -76,21 +76,25 @@ public partial class ProviderSelection : MSGComponentBase
     /// Says why there is nothing to choose from, or nothing at all when that is not the user's doing.
     /// </summary>
     /// <remarks>
-    /// An empty list has two causes the user can act on, and they lead to different places in the
-    /// settings: there is no provider yet, or none of the configured ones reaches the confidence
-    /// this component asks for. Naming the wrong one sends the user looking in the wrong place --
-    /// a first start has nobody to blame for a confidence level it never set. A missing or invalid
-    /// component is a third case and neither of those: it is a defect, it was logged as one, and
-    /// any explanation offered to the user here would be a guess.
+    /// An empty list has three causes the user can act on, and they lead to different places in the
+    /// settings: there is no provider yet, the organization prohibited all of them, or none of the
+    /// configured ones reaches the confidence this component asks for. Naming the wrong one sends
+    /// the user looking in the wrong place -- a first start has nobody to blame for a confidence
+    /// level it never set. A missing or invalid component is another case and none of those: it is
+    /// a defect, it was logged as one, and any explanation offered to the user here would be a guess.
     /// </remarks>
     private string? GetEmptySelectionHint()
     {
         if (this.Component is null or Tools.Components.NONE)
             return null;
 
-        if (!this.SettingsManager.GetAllProviders().Any(x => x.UsedLLMProvider is not LLMProviders.NONE))
+        var configuredProviders = this.SettingsManager.GetAllProviders().Where(x => x.UsedLLMProvider is not LLMProviders.NONE).ToList();
+        if (configuredProviders.Count == 0)
             return this.T("No LLM providers are configured yet. Add a provider in the app settings.");
 
+        if (configuredProviders.All(x => this.SettingsManager.IsProviderProhibited(x.UsedLLMProvider)))
+            return this.T("The use of all your LLM providers has been prohibited by your organization. Add a different provider in the app settings.");
+
         return this.T("No LLM providers meet the confidence requirements. Configure an eligible provider in the app settings.");
     }
 
@@ -166,6 +170,17 @@ public partial class ProviderSelection : MSGComponentBase
                 await this.ProviderSettingsChanged.InvokeAsync(updatedProvider);
             }
 
+            //
+            // A configuration may also take our provider out of reach, e.g., when the organization
+            // prohibits it or raises the minimum confidence. The list already leaves it out, so the
+            // selection must not keep showing it either:
+            //
+            if (this.Component is not (null or Tools.Components.NONE) && this.ProviderSettings != AIStudio.Settings.Provider.NONE && !this.GetAvailableProviders().Contains(this.ProviderSettings))
+            {
+                this.ProviderSettings = AIStudio.Settings.Provider.NONE;
+                await this.ProviderSettingsChanged.InvokeAsync(AIStudio.Settings.Provider.NONE);
+            }
+
             this.StateHasChanged();
         }
     }

app/MindWork AI Studio/Components/Settings/SettingsPanelApp.razor.cs

@@ -105,7 +105,7 @@ public partial class SettingsPanelApp : SettingsPanelBase
         var minimumLevel = this.SettingsManager.GetMinimumConfidenceLevel(Tools.Components.APP_SETTINGS);
         foreach (var provider in this.SettingsManager.GetAllTranscriptionProviders())
         {
-            if (provider.UsedLLMProvider.GetConfidence(this.SettingsManager).Level >= minimumLevel)
+            if (this.SettingsManager.IsProviderUsable(provider.UsedLLMProvider, minimumLevel))
                 yield return new(provider.Name, provider.Id);
         }
     }

app/MindWork AI Studio/Components/Settings/SettingsPanelConfidence.razor

@@ -39,9 +39,15 @@
                     </MudTd>
                     <MudTd>
                         <MudMarkdown Value="@context.GetConfidence(this.SettingsManager).Description" MarkdownPipeline="Markdown.SAFE_MARKDOWN_PIPELINE"/>
+                        @if (this.SettingsManager.IsProviderProhibited(context))
+                        {
+                            <MudAlert Severity="Severity.Warning" Dense="@true" Class="mt-2">
+                                @T("The use of this provider has been prohibited by your organization. Therefore, it is untrusted, and you cannot change its confidence level.")
+                            </MudAlert>
+                        }
                     </MudTd>
                     <MudTd Style="vertical-align: top;">
-                        <MudMenu StartIcon="@Icons.Material.Filled.Security" EndIcon="@Icons.Material.Filled.KeyboardArrowDown" Label="@this.GetCurrentConfidenceLevelName(context)" Variant="Variant.Filled" Style="@this.SetCurrentConfidenceLevelColorStyle(context)" Disabled="@this.IsCustomConfidenceSchemeLocked()">
+                        <MudMenu StartIcon="@Icons.Material.Filled.Security" EndIcon="@Icons.Material.Filled.KeyboardArrowDown" Label="@this.GetCurrentConfidenceLevelName(context)" Variant="Variant.Filled" Style="@this.SetCurrentConfidenceLevelColorStyle(context)" Disabled="@this.IsConfidenceLevelLocked(context)">
                             @foreach (var confidenceLevel in Enum.GetValues<ConfidenceLevel>().OrderBy(n => n))
                             {
                                 if(confidenceLevel is ConfidenceLevel.NONE or ConfidenceLevel.UNKNOWN)

app/MindWork AI Studio/Components/Settings/SettingsPanelConfidence.razor.cs

@@ -7,30 +7,51 @@ public partial class SettingsPanelConfidence : SettingsPanelBase
 {
     private string GetCurrentConfidenceLevelName(LLMProviders llmProvider)
     {
-        if (this.SettingsManager.ConfigurationData.Confidence.CustomConfidenceScheme.TryGetValue(llmProvider, out var level))
+        if (this.TryGetShownConfidenceLevel(llmProvider, out var level))
             return level.GetName();
 
         return T("Not yet configured");
     }
-    
+
     private string SetCurrentConfidenceLevelColorStyle(LLMProviders llmProvider)
     {
-        if (this.SettingsManager.ConfigurationData.Confidence.CustomConfidenceScheme.TryGetValue(llmProvider, out var level))
+        if (this.TryGetShownConfidenceLevel(llmProvider, out var level))
             return $"background-color: {level.GetColor(this.SettingsManager)};";
 
         return $"background-color: {ConfidenceLevel.UNKNOWN.GetColor(this.SettingsManager)};";
     }
 
+    /// <summary>
+    /// Determines the confidence level the table shows for a provider.
+    /// </summary>
+    /// <remarks>
+    /// A prohibited provider is untrusted, whatever level was chosen for it, see
+    /// SettingsManager.GetConfiguredConfidenceLevel. The chosen level stays stored, so the table
+    /// shows it again once the prohibition ends.
+    /// </remarks>
+    private bool TryGetShownConfidenceLevel(LLMProviders llmProvider, out ConfidenceLevel level)
+    {
+        if (this.SettingsManager.IsProviderProhibited(llmProvider))
+        {
+            level = ConfidenceLevel.UNTRUSTED;
+            return true;
+        }
+
+        return this.SettingsManager.ConfigurationData.Confidence.CustomConfidenceScheme.TryGetValue(llmProvider, out level);
+    }
+
     private bool IsCustomConfidenceSchemeLocked()
     {
         return ManagedConfiguration.TryGet(x => x.Confidence, x => x.CustomConfidenceScheme, out var meta) && meta.IsLocked;
     }
 
+    private bool IsConfidenceLevelLocked(LLMProviders llmProvider) => this.IsCustomConfidenceSchemeLocked() || this.SettingsManager.IsProviderProhibited(llmProvider);
+
     private async Task ChangeCustomConfidenceLevel(LLMProviders llmProvider, ConfidenceLevel level)
     {
-        if (this.IsCustomConfidenceSchemeLocked())
+        if (this.IsConfidenceLevelLocked(llmProvider))
             return;
-        
+
         this.SettingsManager.ConfigurationData.Confidence.CustomConfidenceScheme[llmProvider] = level;
         await this.SettingsManager.StoreSettings();
         await this.MessageBus.SendMessage<bool>(this, Event.CONFIGURATION_CHANGED);

app/MindWork AI Studio/Components/Settings/SettingsPanelEmbeddings.razor

@@ -44,6 +44,12 @@
 
                 <MudTd>
                     <MudStack Row="true" Class="mb-2 mt-2" Spacing="1" Wrap="Wrap.Wrap">
+                        @if (this.SettingsManager.IsProviderProhibited(context.UsedLLMProvider))
+                        {
+                            <MudTooltip Text="@T("The use of this embedding provider has been prohibited by your organization.")">
+                                <MudIconButton Color="Color.Error" Icon="@Icons.Material.Filled.Block" Disabled="true"/>
+                            </MudTooltip>
+                        }
                         @if (context.IsTrustedForDataSourceSecurityChecks(this.SettingsManager))
                         {
                             <MudTooltip Text="@(context.IsSelfHosted ? T("This self-hosted embedding provider is trusted for data source security checks. Local data can be sent to it without security warnings.") : T("This embedding provider is trusted by your organization for data source security checks. Local data can be sent to it without security warnings."))">
@@ -62,7 +68,7 @@
                                 <MudIconButton Color="Color.Info" Icon="@Icons.Material.Filled.Key" OnClick="@(() => this.EditEmbeddingProvider(context))"/>
                             </MudTooltip>
                             <MudTooltip Text="@T("Test")">
-                                <MudIconButton Color="Color.Info" Icon="@Icons.Material.Filled.Api" OnClick="@(() => this.TestEmbeddingProvider(context))"/>
+                                <MudIconButton Color="Color.Info" Icon="@Icons.Material.Filled.Api" OnClick="@(() => this.TestEmbeddingProvider(context))" Disabled="@this.SettingsManager.IsProviderProhibited(context.UsedLLMProvider)"/>
                             </MudTooltip>
                         }
                         else
@@ -78,7 +84,7 @@
                                 <MudIconButton Color="Color.Error" Icon="@Icons.Material.Filled.Delete" OnClick="@(() => this.DeleteEmbeddingProvider(context))"/>
                             </MudTooltip>
                             <MudTooltip Text="@T("Test")">
-                                <MudIconButton Color="Color.Info" Icon="@Icons.Material.Filled.Api" OnClick="@(() => this.TestEmbeddingProvider(context))"/>
+                                <MudIconButton Color="Color.Info" Icon="@Icons.Material.Filled.Api" OnClick="@(() => this.TestEmbeddingProvider(context))" Disabled="@this.SettingsManager.IsProviderProhibited(context.UsedLLMProvider)"/>
                             </MudTooltip>
                         }
                     </MudStack>

app/MindWork AI Studio/Components/Settings/SettingsPanelProviders.razor

@@ -36,6 +36,12 @@
             <MudTd>@this.GetLLMProviderModelName(context)</MudTd>
             <MudTd>
                 <MudStack Row="true" Class="mb-2 mt-2" Spacing="1" Wrap="Wrap.Wrap">
+                    @if (this.SettingsManager.IsProviderProhibited(context.UsedLLMProvider))
+                    {
+                        <MudTooltip Text="@T("The use of this provider has been prohibited by your organization.")">
+                            <MudIconButton Color="Color.Error" Icon="@Icons.Material.Filled.Block" Disabled="true"/>
+                        </MudTooltip>
+                    }
                     @if (context.IsTrustedForDataSourceSecurityChecks(this.SettingsManager))
                     {
                         <MudTooltip Text="@(context.IsSelfHosted ? T("This self-hosted provider is trusted for data source security checks.") : T("This provider is trusted by your organization for data source security checks."))">

app/MindWork AI Studio/Components/Settings/SettingsPanelTranscription.razor

@@ -41,6 +41,12 @@
 
                 <MudTd>
                     <MudStack Row="true" Class="mb-2 mt-2" Spacing="1" Wrap="Wrap.Wrap">
+                        @if (this.SettingsManager.IsProviderProhibited(context.UsedLLMProvider))
+                        {
+                            <MudTooltip Text="@T("The use of this transcription provider has been prohibited by your organization.")">
+                                <MudIconButton Color="Color.Error" Icon="@Icons.Material.Filled.Block" Disabled="true"/>
+                            </MudTooltip>
+                        }
                         @if (context.IsTrustedForDataSourceSecurityChecks(this.SettingsManager))
                         {
                             <MudTooltip Text="@(context.IsSelfHosted ? T("This self-hosted transcription provider is trusted for data source security checks.") : T("This transcription provider is trusted by your organization for data source security checks."))">