{% extends "base.html" %}
{% block title %}AI Config · AICAudit{% endblock %}
{% block page %}config{% endblock %}
{% block content %}
  <h1 class="page-title">AI configuration</h1>
  <p class="page-sub">
    Verdicts are evidence-grounded and fail-safe: unparseable or low-confidence answers become
    <span class="badge info">unverified</span>, never auto-confirmed.
  </p>

  <form id="config-form" class="card" style="max-width:640px">
    <input type="hidden" id="provider" value="relay">
    <div class="field">
      <label>Provider</label>
      <div class="chip-row">
        <span class="chip on" data-provider="relay" title="Any OpenAI-compatible endpoint">relay / 中转</span>
        <span class="chip" data-provider="openai">openai</span>
        <span class="chip" data-provider="claude">claude</span>
        <span class="chip" data-provider="openrouter">openrouter</span>
        <span class="chip" data-provider="ollama" title="Local models, no key needed">ollama (local)</span>
        <span class="chip" data-provider="mock">mock (off)</span>
      </div>
    </div>
    <div class="field">
      <label for="ai_key">API key</label>
      <input class="input" id="ai_key" placeholder="sk-…" autocomplete="off">
    </div>
    <div class="field">
      <label for="ai_base">Base URL (relay/ollama)</label>
      <input class="input" id="ai_base" placeholder="https://your-relay.com/v1" autocomplete="off">
    </div>
    <div class="field">
      <label for="ai_model">Model</label>
      <input class="input" id="ai_model" placeholder="gpt-4o-mini / glm-5.2 / llama3.2" autocomplete="off">
    </div>
    <button class="btn primary" type="submit">Save configuration</button>
  </form>

  <div class="card mt" style="max-width:640px">
    <div class="card-title">How verdicts work</div>
    <div class="small muted" style="line-height:2">
      The LLM sees the full enclosing function, the file's imports, and the engine-traced taint path.<br>
      Injections get dataflow instructions; policy findings (secrets / weak crypto / random) get usage-context instructions.<br>
      <span class="badge ok">confirmed</span> <span class="badge">false_positive</span> <span class="badge info">unverified</span>
      — findings are marked, never silently deleted.
    </div>
  </div>
{% endblock %}