Writing-07-31-2025-9:40PM

app.py

@@ -10,39 +10,68 @@ import urllib.parse
 
 
 # Configuration
-SPACE_NAME = "'AI Assistant'"
-SPACE_DESCRIPTION = "'A customizable AI assistant'"
+SPACE_NAME = 'AI Assistant'
+SPACE_DESCRIPTION = 'A customizable AI assistant'
 
-# Default configuration values
-DEFAULT_SYSTEM_PROMPT = """You are a sentence-level writing and composition assistant specializing in micro-writing pedagogy. Work with student submissions of single sentences to one paragraph maximum, providing focused feedback on sentence structure, word choice, clarity, and flow. Guide students through incremental, single-paragraph improvements rather than wholesale rewrites and emphasize the building blocks of process-based writing and the rhetorical grammar of subject-verb relationships, citational practice, transitions and signposting, prosody and rhythm. Focus on sentence structure clarity and variety, precise word choice, transitional logic between ideas, concrete specificity over vague generalizations and genre-specific tone and voice. Frequently offer 1-2 specific, actionable suggestions per submission, celebrate what's working before suggesting improvements. Briefly unpack the **why** behind suggestions and ask at least one simple follow-up question to facilitate the next cycle. Maintain high fidelity to existing versions as a rule of thumb,  and expect to complete the response in less than 400 tokens."""
-DEFAULT_TEMPERATURE = 0.5
-DEFAULT_MAX_TOKENS = 450
+# Default configuration values (used only if config.json is missing)
+DEFAULT_CONFIG = {
+    'name': SPACE_NAME,
+    'description': SPACE_DESCRIPTION,
+    'system_prompt': "You are a sentence-level writing and composition assistant specializing in micro-writing pedagogy. Work with student submissions of single sentences to one paragraph maximum, providing focused feedback on sentence structure, word choice, clarity, and flow. Guide students through incremental, single-paragraph improvements rather than wholesale rewrites and emphasize the building blocks of process-based writing and the rhetorical grammar of subject-verb relationships, citational practice, transitions and signposting, prosody and rhythm. Focus on sentence structure clarity and variety, precise word choice, transitional logic between ideas, concrete specificity over vague generalizations and genre-specific tone and voice. Frequently offer 1-2 specific, actionable suggestions per submission, celebrate what's working before suggesting improvements. Briefly unpack the **why** behind suggestions and ask at least one simple follow-up question to facilitate the next cycle. Maintain high fidelity to existing versions as a rule of thumb,  and expect to complete the response in less than 400 tokens.",
+    'temperature': 0.5,
+    'max_tokens': 450,
+    'model': 'anthropic/claude-3.5-sonnet',
+    'api_key_var': 'API_KEY',
+    'theme': 'Ocean',
+    'grounding_urls': ["https://owl.purdue.edu/owl/general_writing/index.html", "https://en.wikipedia.org/wiki/Academic_writing", "https://en.wikipedia.org/wiki/Essay"],
+    'enable_dynamic_urls': True,
+    'examples': ['Can you help me improve my thesis statement?', 'How should I structure my argumentative essay?', 'What makes a good academic paragraph?'],
+    'locked': False
+}
 
-# Try to load configuration from file (if modified by faculty)
-try:
-    with open('config.json', 'r') as f:
-        saved_config = json.load(f)
-        SYSTEM_PROMPT = saved_config.get('system_prompt', DEFAULT_SYSTEM_PROMPT)
-        temperature = saved_config.get('temperature', DEFAULT_TEMPERATURE)
-        max_tokens = saved_config.get('max_tokens', DEFAULT_MAX_TOKENS)
-        print("✅ Loaded configuration from config.json")
-except:
-    # Use defaults if no config file or error
-    SYSTEM_PROMPT = DEFAULT_SYSTEM_PROMPT
-    temperature = DEFAULT_TEMPERATURE
-    max_tokens = DEFAULT_MAX_TOKENS
-    print("ℹ️ Using default configuration")
+# Load configuration from file - this is the single source of truth
+def load_config():
+    """Load configuration from config.json with fallback to defaults"""
+    try:
+        with open('config.json', 'r') as f:
+            config = json.load(f)
+            print("✅ Loaded configuration from config.json")
+            return config
+    except FileNotFoundError:
+        print("ℹ️ No config.json found, using default configuration")
+        # Save default config for future use
+        try:
+            with open('config.json', 'w') as f:
+                json.dump(DEFAULT_CONFIG, f, indent=2)
+            print("✅ Created config.json with default values")
+        except:
+            pass
+        return DEFAULT_CONFIG
+    except Exception as e:
+        print(f"⚠️ Error loading config.json: {e}, using defaults")
+        return DEFAULT_CONFIG
+
+# Load configuration
+config = load_config()
+
+# Initial load of configuration values
+SPACE_NAME = config.get('name', DEFAULT_CONFIG['name'])
+SPACE_DESCRIPTION = config.get('description', DEFAULT_CONFIG['description'])
+SYSTEM_PROMPT = config.get('system_prompt', DEFAULT_CONFIG['system_prompt'])
+temperature = config.get('temperature', DEFAULT_CONFIG['temperature'])
+max_tokens = config.get('max_tokens', DEFAULT_CONFIG['max_tokens'])
+MODEL = config.get('model', DEFAULT_CONFIG['model'])
+THEME = config.get('theme', DEFAULT_CONFIG['theme'])
+GROUNDING_URLS = config.get('grounding_urls', DEFAULT_CONFIG['grounding_urls'])
+ENABLE_DYNAMIC_URLS = config.get('enable_dynamic_urls', DEFAULT_CONFIG['enable_dynamic_urls'])
 
-MODEL = "'anthropic/claude-3.5-sonnet'"
-THEME = "Ocean"  # Gradio theme name
-GROUNDING_URLS = ["https://owl.purdue.edu/owl/general_writing/index.html", "https://en.wikipedia.org/wiki/Academic_writing", "https://en.wikipedia.org/wiki/Essay"]
 # Get access code from environment variable for security
 # If ACCESS_CODE is not set, no access control is applied
 ACCESS_CODE = os.environ.get("ACCESS_CODE")
-ENABLE_DYNAMIC_URLS = True
 
 # Get API key from environment - customizable variable name with validation
-API_KEY = os.environ.get("'API_KEY'")
+API_KEY_VAR = config.get('api_key_var', DEFAULT_CONFIG['api_key_var'])
+API_KEY = os.environ.get(API_KEY_VAR)
 if API_KEY:
     API_KEY = API_KEY.strip()  # Remove any whitespace
     if not API_KEY:  # Check if empty after stripping
@@ -53,21 +82,21 @@ def validate_api_key():
     """Validate API key configuration with detailed logging"""
     if not API_KEY:
         print(f"⚠️  API KEY CONFIGURATION ERROR:")
-        print(f"   Variable name: 'API_KEY'")
+        print(f"   Variable name: {API_KEY_VAR}")
         print(f"   Status: Not set or empty")
-        print(f"   Action needed: Set ''API_KEY'' in HuggingFace Space secrets")
+        print(f"   Action needed: Set '{API_KEY_VAR}' in HuggingFace Space secrets")
         print(f"   Expected format: sk-or-xxxxxxxxxx")
         return False
     elif not API_KEY.startswith('sk-or-'):
         print(f"⚠️  API KEY FORMAT WARNING:")
-        print(f"   Variable name: 'API_KEY'")
-        print(f"   Current value: {API_KEY[:10]}..." if len(API_KEY) > 10 else API_KEY)
+        print(f"   Variable name: {API_KEY_VAR}")
+        print(f"   Current value: {API_KEY[:10]}..." if len(API_KEY) > 10 else "{API_KEY}")
         print(f"   Expected format: sk-or-xxxxxxxxxx")
         print(f"   Note: OpenRouter keys should start with 'sk-or-'")
         return True  # Still try to use it
     else:
         print(f"✅ API Key configured successfully")
-        print(f"   Variable: 'API_KEY'")
+        print(f"   Variable: {API_KEY_VAR}")
         print(f"   Format: Valid OpenRouter key")
         return True
 
@@ -124,12 +153,13 @@ def fetch_url_content(url):
         
         # Smart truncation - try to end at sentence boundaries
         if len(text) > 4000:
-            truncated = text[:4000]
-            last_period = truncated.rfind('.')
-            if last_period > 3000:  # If we can find a reasonable sentence break
-                text = truncated[:last_period + 1]
+            truncated_text = text[:4000]
+            # Try to find the last complete sentence
+            last_period = truncated_text.rfind('.')
+            if last_period > 3500:  # Only if we have a reasonably long truncation
+                text = truncated_text[:last_period + 1]
             else:
-                text = truncated + "..."
+                text = truncated_text + "..."
         
         return text if text.strip() else "No readable content found at this URL"
         
@@ -142,7 +172,6 @@ def fetch_url_content(url):
 
 def extract_urls_from_text(text):
     """Extract URLs from text using regex with enhanced validation"""
-    import re
     url_pattern = r'https?://[^\s<>"{}|\\^`\[\]"]+'
     urls = re.findall(url_pattern, text)
     
@@ -162,18 +191,26 @@ _url_content_cache = {}
 
 def get_grounding_context():
     """Fetch context from grounding URLs with caching"""
-    if not GROUNDING_URLS:
+    # Handle both string and list formats for grounding_urls
+    urls = GROUNDING_URLS
+    if isinstance(urls, str):
+        try:
+            urls = json.loads(urls)
+        except:
+            urls = []
+    
+    if not urls:
         return ""
     
     # Create cache key from URLs
-    cache_key = tuple(sorted([url for url in GROUNDING_URLS if url and url.strip()]))
+    cache_key = tuple(sorted([url for url in urls if url and url.strip()]))
     
     # Check cache first
     if cache_key in _url_content_cache:
         return _url_content_cache[cache_key]
     
     context_parts = []
-    for i, url in enumerate(GROUNDING_URLS, 1):
+    for i, url in enumerate(urls, 1):
         if url.strip():
             content = fetch_url_content(url.strip())
             # Add priority indicators
@@ -224,7 +261,7 @@ Generated on: {datetime.now().strftime('%Y-%m-%d %H:%M:%S')}
     return markdown_content
 
 
-def generate_response(message, history):
+def generate_response(message, history, files=None):
     """Generate response using OpenRouter API"""
     
     # Enhanced API key validation with helpful messages
@@ -233,30 +270,42 @@ def generate_response(message, history):
         error_msg += f"Please configure your OpenRouter API key:\n"
         error_msg += f"1. Go to Settings (⚙️) in your HuggingFace Space\n"
         error_msg += f"2. Click 'Variables and secrets'\n"
-        error_msg += f"3. Add secret: **'API_KEY'**\n"
+        error_msg += f"3. Add secret: **{API_KEY_VAR}**\n"
         error_msg += f"4. Value: Your OpenRouter API key (starts with `sk-or-`)\n\n"
         error_msg += f"Get your API key at: https://openrouter.ai/keys"
-        print(f"❌ API request failed: No API key configured for 'API_KEY'")
+        print(f"❌ API request failed: No API key configured for {API_KEY_VAR}")
         return error_msg
     
     # Get grounding context
     grounding_context = get_grounding_context()
     
+    # Process uploaded files if any
+    file_context = ""
+    if files:
+        file_contents = []
+        for file_obj in files:
+            if file_obj is not None:
+                try:
+                    file_content = extract_file_content(file_obj.name)
+                    file_contents.append(file_content)
+                except Exception as e:
+                    file_contents.append(f"Error processing file: {str(e)}")
         
+        if file_contents:
+            file_context = "\n\n[UPLOADED FILES]\n" + "\n\n".join(file_contents) + "\n"
+    
     # If dynamic URLs are enabled, check message for URLs to fetch
     if ENABLE_DYNAMIC_URLS:
         urls_in_message = extract_urls_from_text(message)
         if urls_in_message:
-            # Fetch content from URLs mentioned in the message
-            dynamic_context_parts = []
+            dynamic_context = ""
             for url in urls_in_message[:3]:  # Limit to 3 URLs per message
                 content = fetch_url_content(url)
-                dynamic_context_parts.append(f"\n\nDynamic context from {url}:\n{content}")
-            if dynamic_context_parts:
-                grounding_context += "\n".join(dynamic_context_parts)
+                dynamic_context += f"\n\n[DYNAMIC] Context from {url}:\n{content}"
+            grounding_context += dynamic_context
     
-    # Build enhanced system prompt with grounding context
-    enhanced_system_prompt = SYSTEM_PROMPT + grounding_context
+    # Build enhanced system prompt with grounding context and file content
+    enhanced_system_prompt = SYSTEM_PROMPT + grounding_context + file_context
     
     # Build messages array for the API
     messages = [{"role": "system", "content": enhanced_system_prompt}]
@@ -264,15 +313,10 @@ def generate_response(message, history):
     # Add conversation history - handle both modern messages format and legacy tuples
     for chat in history:
         if isinstance(chat, dict):
-            # Modern format: {"role": "user", "content": "..."} or {"role": "assistant", "content": "..."}
             messages.append(chat)
         elif isinstance(chat, (list, tuple)) and len(chat) >= 2:
-            # Legacy format: ["user msg", "assistant msg"] or ("user msg", "assistant msg")
-            user_msg, assistant_msg = chat[0], chat[1]
-            if user_msg:
-                messages.append({"role": "user", "content": user_msg})
-            if assistant_msg:
-                messages.append({"role": "assistant", "content": assistant_msg})
+            messages.append({"role": "user", "content": chat[0]})
+            messages.append({"role": "assistant", "content": chat[1]})
     
     # Add current message
     messages.append({"role": "user", "content": message})
@@ -288,14 +332,14 @@ def generate_response(message, history):
             headers={
                 "Authorization": f"Bearer {API_KEY}",
                 "Content-Type": "application/json",
-                "HTTP-Referer": "https://huggingface.co",  # Required by some providers
-                "X-Title": "HuggingFace Space"  # Helpful for tracking
+                "HTTP-Referer": "https://huggingface.co",
+                "X-Title": "HuggingFace Space"
             },
             json={
                 "model": MODEL,
                 "messages": messages,
-                "temperature": 0.5,
-                "max_tokens": 450
+                "temperature": temperature,
+                "max_tokens": max_tokens
             },
             timeout=30
         )
@@ -305,40 +349,26 @@ def generate_response(message, history):
         if response.status_code == 200:
             try:
                 result = response.json()
-                
-                # Enhanced validation of API response structure
-                if 'choices' not in result or not result['choices']:
-                    print(f"⚠️  API response missing choices: {result}")
-                    return "API Error: No response choices available"
-                elif 'message' not in result['choices'][0]:
-                    print(f"⚠️  API response missing message: {result}")
-                    return "API Error: No message in response"
-                elif 'content' not in result['choices'][0]['message']:
-                    print(f"⚠️  API response missing content: {result}")
-                    return "API Error: No content in message"
-                else:
-                    content = result['choices'][0]['message']['content']
-                    
-                    # Check for empty content
-                    if not content or content.strip() == "":
-                        print(f"⚠️  API returned empty content")
-                        return "API Error: Empty response content"
-                    
-                    print(f"✅ API request successful")
-                    return content
-                    
+                return result['choices'][0]['message']['content']
             except (KeyError, IndexError, json.JSONDecodeError) as e:
-                print(f"❌ Failed to parse API response: {str(e)}")
-                return f"API Error: Failed to parse response - {str(e)}"
+                error_msg = f"❌ **Response Parsing Error**\n\n"
+                error_msg += f"Received response from API but couldn't parse it properly.\n"
+                error_msg += f"Error: {str(e)}\n\n"
+                error_msg += f"**Troubleshooting:**\n"
+                error_msg += f"1. Check OpenRouter service status\n"
+                error_msg += f"2. Try again in a few moments\n"
+                error_msg += f"3. Try a different model if available"
+                print(f"❌ Response parsing error: {str(e)}")
+                return error_msg
         elif response.status_code == 401:
-            error_msg = f"🔐 **Authentication Error**\n\n"
+            error_msg = f"🔑 **Authentication Error**\n\n"
             error_msg += f"Your API key appears to be invalid or expired.\n\n"
             error_msg += f"**Troubleshooting:**\n"
-            error_msg += f"1. Check that your **'API_KEY'** secret is set correctly\n"
-            error_msg += f"2. Verify your API key at: https://openrouter.ai/keys\n"
-            error_msg += f"3. Ensure your key starts with `sk-or-`\n"
-            error_msg += f"4. Check that you have credits on your OpenRouter account"
-            print(f"❌ API authentication failed: {response.status_code} - {response.text[:200]}")
+            error_msg += f"1. Check that your **{API_KEY_VAR}** secret is set correctly\n"
+            error_msg += f"2. Verify your OpenRouter API key at https://openrouter.ai/keys\n"
+            error_msg += f"3. Make sure the key starts with `sk-or-`\n"
+            error_msg += f"4. Check if you have sufficient credits"
+            print(f"❌ Authentication failed: Invalid API key")
             return error_msg
         elif response.status_code == 429:
             error_msg = f"⏱️ **Rate Limit Exceeded**\n\n"
@@ -346,31 +376,26 @@ def generate_response(message, history):
             error_msg += f"**Troubleshooting:**\n"
             error_msg += f"1. Wait 30-60 seconds before trying again\n"
             error_msg += f"2. Check your OpenRouter usage limits\n"
-            error_msg += f"3. Consider upgrading your OpenRouter plan"
-            print(f"❌ Rate limit exceeded: {response.status_code}")
+            print(f"❌ Rate limit exceeded")
             return error_msg
         elif response.status_code == 400:
-            try:
-                error_data = response.json()
-                error_message = error_data.get('error', {}).get('message', 'Unknown error')
-            except:
-                error_message = response.text
-            
-            error_msg = f"⚠️ **Request Error**\n\n"
-            error_msg += f"The API request was invalid:\n"
-            error_msg += f"`{error_message}`\n\n"
-            if "model" in error_message.lower():
-                error_msg += f"**Model Issue:** The model `{MODEL}` may not be available.\n"
-                error_msg += f"Try switching to a different model in your Space configuration."
-            print(f"❌ Bad request: {response.status_code} - {error_message}")
+            error_msg = f"📝 **Request Error**\n\n"
+            error_msg += f"There was a problem with the request format.\n"
+            error_msg += f"Response: {response.text[:500]}\n\n"
+            error_msg += f"**Troubleshooting:**\n"
+            error_msg += f"1. Try a shorter message\n"
+            error_msg += f"2. Check for special characters in your message\n"
+            error_msg += f"3. Try a different model"
+            print(f"❌ Bad request: {response.status_code} - {response.text[:200]}")
             return error_msg
         else:
-            error_msg = f"🚫 **API Error {response.status_code}**\n\n"
-            error_msg += f"An unexpected error occurred. Please try again.\n\n"
-            error_msg += f"If this persists, check:\n"
-            error_msg += f"1. OpenRouter service status\n"
-            error_msg += f"2. Your API key and credits\n"
-            error_msg += f"3. The model availability"
+            error_msg = f"🌐 **API Error {response.status_code}**\n\n"
+            error_msg += f"An unexpected error occurred.\n"
+            error_msg += f"Response: {response.text[:500]}\n\n"
+            error_msg += f"**Troubleshooting:**\n"
+            error_msg += f"1. Try again in a few moments\n"
+            error_msg += f"2. Check OpenRouter service status\n"
+            error_msg += f"3. Contact support if this persists"
             print(f"❌ API error: {response.status_code} - {response.text[:200]}")
             return error_msg
             
@@ -393,10 +418,10 @@ def generate_response(message, history):
         print(f"❌ Connection error to OpenRouter API")
         return error_msg
     except Exception as e:
-        error_msg = f"❌ **Unexpected Error**\n\n"
-        error_msg += f"An unexpected error occurred:\n"
+        error_msg = "❌ **Unexpected Error**\n\n"
+        error_msg += "An unexpected error occurred:\n"
         error_msg += f"`{str(e)}`\n\n"
-        error_msg += f"Please try again or contact support if this persists."
+        error_msg += "Please try again or contact support if this persists."
         print(f"❌ Unexpected error: {str(e)}")
         return error_msg
 
@@ -409,38 +434,40 @@ def verify_access_code(code):
     global _access_granted_global
     if ACCESS_CODE is None:
         _access_granted_global = True
-        return gr.update(visible=False), gr.update(visible=True), gr.update(value=True)
+        return gr.update(value="No access code required.", style={"color": "green"}), gr.update(visible=True), True
     
     if code == ACCESS_CODE:
         _access_granted_global = True
-        return gr.update(visible=False), gr.update(visible=True), gr.update(value=True)
+        return gr.update(value="✅ Access granted!", style={"color": "green"}), gr.update(visible=True), True
     else:
         _access_granted_global = False
-        return gr.update(visible=True, value="❌ Incorrect access code. Please try again."), gr.update(visible=False), gr.update(value=False)
+        return gr.update(value="❌ Invalid access code. Please try again.", style={"color": "red"}), gr.update(visible=False), False
 
-def protected_generate_response(message, history):
+def protected_generate_response(message, history, files=None):
     """Protected response function that checks access"""
     # Check if access is granted via the global variable
     if ACCESS_CODE is not None and not _access_granted_global:
         return "Please enter the access code to continue."
-    return generate_response(message, history)
+    return generate_response(message, history, files)
 
 # Global variable to store chat history for export
 chat_history_store = []
 
-def store_and_generate_response(message, history):
+def store_and_generate_response(message, history, files=None):
     """Wrapper function that stores history and generates response"""
     global chat_history_store
     
     # Generate response using the protected function
-    response = protected_generate_response(message, history)
+    response = protected_generate_response(message, history, files)
     
     # Convert current history to the format we need for export
     # history comes in as [["user1", "bot1"], ["user2", "bot2"], ...]
     chat_history_store = []
     if history:
         for exchange in history:
-            if isinstance(exchange, (list, tuple)) and len(exchange) >= 2:
+            if isinstance(exchange, dict):
+                chat_history_store.append(exchange)
+            elif isinstance(exchange, (list, tuple)) and len(exchange) >= 2:
                 chat_history_store.append({"role": "user", "content": exchange[0]})
                 chat_history_store.append({"role": "assistant", "content": exchange[1]})
     
@@ -471,144 +498,205 @@ def export_conversation(history):
     
     markdown_content = export_conversation_to_markdown(history)
     
-    # Create logical filename: conversation_YYYYMMDD_HHMMSS.md
-    filename = create_safe_filename("conversation", suffix=".md", include_timestamp=True)
-    
-    # Save to temporary file with logical name
-    import tempfile
-    import os
-    temp_dir = tempfile.gettempdir()
-    temp_file = os.path.join(temp_dir, filename)
-    
-    with open(temp_file, 'w', encoding='utf-8') as f:
+    # Save to temporary file
+    with tempfile.NamedTemporaryFile(mode='w', suffix='.md', delete=False, encoding='utf-8') as f:
         f.write(markdown_content)
+        temp_file = f.name
     
     return gr.update(value=temp_file, visible=True)
 
 # Configuration status display
 def get_configuration_status():
-    """Generate a configuration status message for display"""
+    """Generate a clean configuration status message for display"""
     status_parts = []
     
-    # API Key status
-    status_parts.append("### 🔑 API Configuration")
-    if API_KEY_VALID:
-        status_parts.append("✅ **API Key:** Ready")
+    # Basic configuration info (without redundant "Configuration:" header)
+    status_parts.append(f"**Name:** {SPACE_NAME}")
+    status_parts.append(f"**Model:** {MODEL}")
+    status_parts.append(f"**Theme:** {THEME}")
+    status_parts.append(f"**Temperature:** {temperature}")
+    status_parts.append(f"**Max Response Tokens:** {max_tokens}")
+    status_parts.append("")
+    
+    # Example prompts
+    status_parts.append("")
+    examples_list = config.get('examples', [])
+    if isinstance(examples_list, str):
+        try:
+            import ast
+            examples_list = ast.literal_eval(examples_list)
+        except:
+            examples_list = []
+    
+    if examples_list and len(examples_list) > 0:
+        status_parts.append("**Example Prompts:**")
+        for example in examples_list[:5]:  # Show first 5 examples
+            status_parts.append(f"• {example}")
+        if len(examples_list) > 5:
+            status_parts.append(f"• ... and {len(examples_list) - 5} more")
     else:
-        status_parts.append("❌ **API Key:** Not configured")
-        status_parts.append("   Set `'API_KEY'` in Space secrets")
-    
-    # Model and parameters
-    status_parts.append("")  # Blank line
-    status_parts.append("### 🤖 Model Settings")
-    status_parts.append(f"**Model:** {MODEL.split('/')[-1]}")
-    status_parts.append(f"**Temperature:** 0.5")
-    status_parts.append(f"**Max Tokens:** 450")
+        status_parts.append("**Example Prompts:** No example prompts configured")
     
     # URL Context if configured
-    if GROUNDING_URLS:
-        status_parts.append("")  # Blank line
-        status_parts.append("### 🔗 Context Sources")
-        status_parts.append(f"**URLs Configured:** {len(GROUNDING_URLS)}")
-        for i, url in enumerate(GROUNDING_URLS[:2], 1):
-            status_parts.append(f"  {i}. {url[:50]}{'...' if len(url) > 50 else ''}")
-        if len(GROUNDING_URLS) > 2:
-            status_parts.append(f"  ... and {len(GROUNDING_URLS) - 2} more")
-    
-    # Access control
-    if ACCESS_CODE is not None:
-        status_parts.append("")  # Blank line
-        status_parts.append("### 🔐 Access Control")
-        status_parts.append("**Status:** Password protected")
-    
-    # System prompt
-    status_parts.append("")  # Blank line
-    status_parts.append("### 📝 System Prompt")
-    # Show first 200 chars of system prompt
-    prompt_preview = SYSTEM_PROMPT[:200] + "..." if len(SYSTEM_PROMPT) > 200 else SYSTEM_PROMPT
-    status_parts.append(f"```\n{prompt_preview}\n```")
+    urls = GROUNDING_URLS
+    if isinstance(urls, str):
+        try:
+            import ast
+            urls = ast.literal_eval(urls)
+        except:
+            urls = []
+    
+    if urls and len(urls) > 0:
+        status_parts.append("")
+        status_parts.append("**Grounding URLs:**")
+        for i, url in enumerate(urls[:5], 1):  # Show first 5 URLs
+            status_parts.append(f"{i}. {url}")
+        if len(urls) > 5:
+            status_parts.append(f"... and {len(urls) - 5} more URLs")
+    
+    # System prompt at the end
+    status_parts.append("")
+    status_parts.append(f"**System Prompt:** {SYSTEM_PROMPT}")
+    
+    # API Key status (minimal, at the end)
+    status_parts.append("")
+    if not API_KEY_VALID:
+        status_parts.append(f"**Note:** API key ({API_KEY_VAR}) not configured in Space secrets")
     
     return "\n".join(status_parts)
 
+# HuggingFace Authentication Utility
+def verify_hf_token_access():
+    """Verify HF_TOKEN has write access to the space"""
+    hf_token = os.environ.get("HF_TOKEN")
+    space_id = os.environ.get("SPACE_ID")
+    
+    if not hf_token or not space_id:
+        return False, "Missing HF_TOKEN or SPACE_ID environment variables"
+    
+    try:
+        from huggingface_hub import HfApi
+        api = HfApi(token=hf_token)
+        # Test access by getting space info
+        api.space_info(space_id)
+        return True, "Authenticated successfully"
+    except Exception as e:
+        return False, f"Authentication failed: {str(e)}"
+
 # Create interface with access code protection
 # Dynamically set theme based on configuration
 theme_class = getattr(gr.themes, THEME, gr.themes.Default)
 with gr.Blocks(title=SPACE_NAME, theme=theme_class()) as demo:
-    gr.Markdown(f"# {SPACE_NAME}")
-    gr.Markdown(SPACE_DESCRIPTION)
-    
-    # Access code section (shown only if ACCESS_CODE is set)
-    with gr.Column(visible=(ACCESS_CODE is not None)) as access_section:
-        gr.Markdown("### 🔐 Access Required")
-        gr.Markdown("Please enter the access code provided by your instructor:")
-        
-        access_input = gr.Textbox(
-            label="Access Code",
-            placeholder="Enter access code...",
-            type="password"
-        )
-        access_btn = gr.Button("Submit", variant="primary")
-        access_error = gr.Markdown(visible=False)
-    
-    # Main chat interface (hidden until access granted)
-    with gr.Column(visible=(ACCESS_CODE is None)) as chat_section:
-        chat_interface = gr.ChatInterface(
-            fn=store_and_generate_response,  # Use wrapper function to store history
-            title="",  # Title already shown above
-            description="",  # Description already shown above
-            examples=['Can you help me improve my thesis statement?', 'How should I structure my argumentative essay?', 'What makes a good academic paragraph?'],
-            type="messages"  # Use modern message format for better compatibility
-        )
-        
-        # Export functionality
-        with gr.Row():
-            export_btn = gr.Button("📥 Export Conversation", variant="secondary", size="sm")
-        export_file = gr.File(label="Download", visible=False)
-        
-        # Connect export functionality
-        export_btn.click(
-            export_current_conversation,
-            outputs=[export_file]
-        )
-        
-    
-    # Connect access verification
-    if ACCESS_CODE is not None:
-        access_btn.click(
-            verify_access_code,
-            inputs=[access_input],
-            outputs=[access_error, chat_section, access_granted]
-        )
-        access_input.submit(
-            verify_access_code,
-            inputs=[access_input],
-            outputs=[access_error, chat_section, access_granted]
-        )
-
-    # Faculty Configuration Section - appears at the bottom with password protection
-    with gr.Accordion("🔧 Faculty Configuration", open=False, visible=True) as faculty_section:
-        gr.Markdown("**Faculty Only:** Edit assistant configuration. Requires CONFIG_CODE secret.")
-        
-        # Check if faculty password is configured
-        FACULTY_PASSWORD = os.environ.get("CONFIG_CODE", "").strip()
-        
-        if FACULTY_PASSWORD:
-            faculty_auth_state = gr.State(False)
-            
-            # Authentication row
-            with gr.Column() as faculty_auth_row:
-                with gr.Row():
-                    faculty_password_input = gr.Textbox(
-                        label="Faculty Password",
-                        type="password",
-                        placeholder="Enter faculty configuration password",
-                        scale=3
+    # Check if HF_TOKEN is configured to determine configuration panel availability
+    HF_TOKEN = os.environ.get("HF_TOKEN", "").strip()
+    SPACE_ID = os.environ.get("SPACE_ID", "").strip()
+    
+    # Verify actual HuggingFace API access
+    HF_ACCESS_VALID, HF_ACCESS_MESSAGE = verify_hf_token_access()
+    
+    # Always use tabs structure, Configuration tab visible only with HF_TOKEN
+    with gr.Tabs() as main_tabs:
+        with gr.Tab("Chat U/I"):
+                gr.Markdown(f"# {SPACE_NAME}")
+                gr.Markdown(SPACE_DESCRIPTION)
+                
+                # Access code section (shown only if ACCESS_CODE is set)
+                with gr.Column(visible=(ACCESS_CODE is not None)) as access_section:
+                    gr.Markdown("### 🔐 Access Required")
+                    gr.Markdown("Please enter the access code provided by your instructor:")
+                    
+                    access_input = gr.Textbox(
+                        label="Access Code",
+                        placeholder="Enter access code...",
+                        type="password"
+                    )
+                    access_btn = gr.Button("Submit", variant="primary")
+                    access_error = gr.Markdown(visible=False)
+                
+                # Main chat interface (hidden until access granted)
+                with gr.Column(visible=(ACCESS_CODE is None)) as chat_section:
+                    # Get examples from config
+                    examples = config.get('examples', [])
+                    if isinstance(examples, str):
+                        try:
+                            import ast
+                            examples = ast.literal_eval(examples)
+                        except:
+                            examples = []
+                    
+                    # Format examples for ChatInterface with additional_inputs
+                    # When additional_inputs are present, examples must be list of lists
+                    # where each inner list contains [message, *additional_input_values]
+                    formatted_examples = None
+                    if examples:
+                        # Check if examples are already formatted correctly (list of lists)
+                        if examples and isinstance(examples[0], list):
+                            # Already formatted, use as-is
+                            formatted_examples = examples
+                        else:
+                            # Format as [message, file_input] where file_input=None for examples
+                            formatted_examples = [[example, None] for example in examples]
+                    
+                    chat_interface = gr.ChatInterface(
+                        fn=store_and_generate_response,  # Use wrapper function to store history
+                        title="",  # Title already shown above
+                        description="",  # Description already shown above
+                        examples=formatted_examples,
+                        type="messages",  # Use modern message format for better compatibility
+                        additional_inputs=[
+                            gr.File(
+                                label="📎",
+                                file_types=None,  # Accept all file types
+                                file_count="multiple",
+                                visible=True
+                            )
+                        ]
+                    )
+                    
+                    # Export functionality
+                    with gr.Row():
+                        export_btn = gr.Button("📥 Export Conversation", variant="secondary", size="sm")
+                    export_file = gr.File(label="Download", visible=False)
+                    
+                    # Connect export functionality
+                    export_btn.click(
+                        export_current_conversation,
+                        outputs=[export_file]
                     )
-                    faculty_auth_btn = gr.Button("Unlock Configuration", variant="primary", scale=1)
-                faculty_auth_status = gr.Markdown("")
+                    
+                    # Configuration status
+                    with gr.Accordion("Configuration", open=False):
+                        gr.Markdown(get_configuration_status())
+                
+                # Connect access verification within tab context
+                if ACCESS_CODE is not None:
+                    access_btn.click(
+                        verify_access_code,
+                        inputs=[access_input],
+                        outputs=[access_error, chat_section, access_granted]
+                    )
+                    access_input.submit(
+                        verify_access_code,
+                        inputs=[access_input],
+                        outputs=[access_error, chat_section, access_granted]
+                    )
+            
+        # Add Configuration tab (only visible with valid HF_TOKEN)
+        with gr.Tab("Configuration", visible=HF_ACCESS_VALID) as config_tab:
+            gr.Markdown("## Configuration Management")
             
-            # Configuration editor (hidden until authenticated)
-            with gr.Column(visible=False) as faculty_config_section:
+            # Show authentication status
+            if HF_ACCESS_VALID:
+                gr.Markdown(f"✅ **Authenticated** - {HF_ACCESS_MESSAGE}")
+                gr.Markdown("Configuration changes will be saved to the HuggingFace repository and the Space will restart automatically.")
+                faculty_auth_state = gr.State(True)
+            else:
+                gr.Markdown(f"❌ **Not Available** - {HF_ACCESS_MESSAGE}")
+                gr.Markdown("Set HF_TOKEN and SPACE_ID in Space secrets to enable configuration management.")
+                faculty_auth_state = gr.State(False)
+            
+            # Configuration editor (visible if HF authentication is valid)
+            with gr.Column(visible=HF_ACCESS_VALID) as faculty_config_section:
                 gr.Markdown("### Edit Assistant Configuration")
                 gr.Markdown("⚠️ **Warning:** Changes will affect all users immediately.")
                 
@@ -617,29 +705,11 @@ with gr.Blocks(title=SPACE_NAME, theme=theme_class()) as demo:
                     with open('config.json', 'r') as f:
                         current_config = json.load(f)
                 except:
-                    current_config = {
-                        'system_prompt': SYSTEM_PROMPT,
-                        'temperature': 0.5,
-                        'max_tokens': 450,
-                        'locked': False
-                    }
-                
-                # Editable fields - Order matches the Configuration tab
-                # 1. Assistant Identity
-                edit_name = gr.Textbox(
-                    label="Assistant Name",
-                    value=current_config.get('name', SPACE_NAME),
-                    placeholder="My AI Assistant"
-                )
-                
-                edit_description = gr.Textbox(
-                    label="Assistant Description",
-                    value=current_config.get('description', SPACE_DESCRIPTION),
-                    lines=2,
-                    placeholder="A helpful AI assistant for..."
-                )
+                    # Use DEFAULT_CONFIG as fallback
+                    current_config = DEFAULT_CONFIG.copy()
                 
-                # 2. System Prompt
+                # Editable fields
+                # System Prompt
                 edit_system_prompt = gr.Textbox(
                     label="System Prompt",
                     value=current_config.get('system_prompt', SYSTEM_PROMPT),
@@ -661,8 +731,8 @@ with gr.Blocks(title=SPACE_NAME, theme=theme_class()) as demo:
                     ],
                     value=current_config.get('model', MODEL)
                 )
-                
-                # 4. Example Prompts
+            
+                # 4. Example prompts field
                 examples_value = current_config.get('examples', [])
                 if isinstance(examples_value, list):
                     examples_text_value = "\n".join(examples_value)
@@ -682,18 +752,18 @@ with gr.Blocks(title=SPACE_NAME, theme=theme_class()) as demo:
                         label="Temperature",
                         minimum=0,
                         maximum=2,
-                        value=current_config.get('temperature', 0.5),
+                        value=current_config.get('temperature', 0.7),
                         step=0.1
                     )
                     edit_max_tokens = gr.Slider(
                         label="Max Tokens",
                         minimum=50,
                         maximum=4096,
-                        value=current_config.get('max_tokens', 450),
+                        value=current_config.get('max_tokens', 750),
                         step=50
                     )
                 
-                # 6. URL Grounding
+                # URL Grounding fields
                 gr.Markdown("### URL Grounding")
                 grounding_urls_value = current_config.get('grounding_urls', [])
                 if isinstance(grounding_urls_value, str):
@@ -720,39 +790,23 @@ with gr.Blocks(title=SPACE_NAME, theme=theme_class()) as demo:
                 )
                 
                 with gr.Row():
-                    save_config_btn = gr.Button("💾 Save Configuration", variant="primary")
-                    reset_config_btn = gr.Button("↩️ Reset to Defaults", variant="secondary")
+                    save_config_btn = gr.Button("Save Configuration", variant="primary")
+                    reset_config_btn = gr.Button("Reset to Defaults", variant="secondary")
                 
                 config_status = gr.Markdown("")
             
-            # Faculty authentication function
-            def verify_faculty_password(password):
-                if password == FACULTY_PASSWORD:
-                    return (
-                        gr.update(value="✅ Authentication successful!"),
-                        gr.update(visible=False),  # Hide auth row
-                        gr.update(visible=True),    # Show config section
-                        True  # Update auth state
-                    )
-                else:
-                    return (
-                        gr.update(value="❌ Invalid password"),
-                        gr.update(visible=True),   # Keep auth row visible
-                        gr.update(visible=False),  # Keep config hidden
-                        False  # Auth failed
-                    )
             
             # Save configuration function
-            def save_configuration(new_name, new_description, new_prompt, new_model, new_examples, new_temp, new_tokens, *url_values, lock_config, is_authenticated):
+            def save_configuration(is_authenticated, new_prompt, new_model, new_examples, new_temp, new_tokens, *url_values):
                 if not is_authenticated:
-                    return "❌ Not authenticated"
+                    return "Not authenticated"
                 
                 # Check if configuration is already locked
                 try:
                     with open('config.json', 'r') as f:
                         existing_config = json.load(f)
                         if existing_config.get('locked', False):
-                            return "🔒 Configuration is locked and cannot be modified"
+                            return "Configuration is locked and cannot be modified"
                 except:
                     pass
                 
@@ -761,8 +815,8 @@ with gr.Blocks(title=SPACE_NAME, theme=theme_class()) as demo:
                     with open('config.json', 'r') as f:
                         current_full_config = json.load(f)
                 except:
-                    # If config.json doesn't exist, use global config
-                    current_full_config = config.copy()
+                    # If config.json doesn't exist, use default configuration
+                    current_full_config = DEFAULT_CONFIG.copy()
                 
                 # Process example prompts
                 examples_list = [ex.strip() for ex in new_examples.split('\n') if ex.strip()]
@@ -773,10 +827,27 @@ with gr.Blocks(title=SPACE_NAME, theme=theme_class()) as demo:
                 # Filter out empty URLs
                 grounding_urls = [url.strip() for url in urls if url.strip()]
                 
+                # Create backup before making changes
+                try:
+                    # Create backups directory if it doesn't exist
+                    os.makedirs('config_backups', exist_ok=True)
+                    
+                    # Create timestamped backup
+                    backup_filename = f"config_backups/config_{datetime.now().strftime('%Y%m%d_%H%M%S')}.json"
+                    with open(backup_filename, 'w') as backup_file:
+                        json.dump(current_full_config, backup_file, indent=2)
+                    
+                    # Keep only last 10 backups
+                    backups = sorted([f for f in os.listdir('config_backups') if f.endswith('.json')])
+                    if len(backups) > 10:
+                        for old_backup in backups[:-10]:
+                            os.remove(os.path.join('config_backups', old_backup))
+                except Exception as backup_error:
+                    print(f"Warning: Could not create backup: {backup_error}")
+                    # Continue with save even if backup fails
+                
                 # Update all editable fields while preserving everything else
                 current_full_config.update({
-                    'name': new_name,
-                    'description': new_description,
                     'system_prompt': new_prompt,
                     'model': new_model,
                     'examples': examples_list,
@@ -792,17 +863,52 @@ with gr.Blocks(title=SPACE_NAME, theme=theme_class()) as demo:
                     with open('config.json', 'w') as f:
                         json.dump(current_full_config, f, indent=2)
                     
-                    # Reload all configuration values
-                    reload_config_values()
+                    # Optional: Auto-commit to HuggingFace if token is available
+                    hf_token = os.environ.get("HF_TOKEN")
+                    space_id = os.environ.get("SPACE_ID") 
                     
-                    return f"✅ Configuration saved successfully at {datetime.now().strftime('%Y-%m-%d %H:%M:%S')}"
+                    if hf_token and space_id:
+                        try:
+                            from huggingface_hub import HfApi, CommitOperationAdd, restart_space
+                            api = HfApi(token=hf_token)
+                            
+                            # Create commit operation to upload config.json
+                            operations = [
+                                CommitOperationAdd(
+                                    path_or_fileobj="config.json",
+                                    path_in_repo="config.json"
+                                )
+                            ]
+                            
+                            # Create commit with updated configuration
+                            api.create_commit(
+                                repo_id=space_id,
+                                operations=operations,
+                                commit_message=f"Update configuration by faculty at {datetime.now().strftime('%Y-%m-%d %H:%M:%S')}",
+                                commit_description="Faculty configuration update through web interface",
+                                repo_type="space",
+                                token=hf_token
+                            )
+                            
+                            # Automatic restart
+                            try:
+                                restart_space(space_id, token=hf_token)
+                                return f"✅ Configuration saved and committed at {datetime.now().strftime('%Y-%m-%d %H:%M:%S')}\n\n🔄 **Space is restarting automatically!**\n\nThe page will refresh in about 30 seconds. Your changes will be applied."
+                            except Exception as restart_error:
+                                print(f"Could not auto-restart: {restart_error}")
+                                return f"✅ Configuration saved and committed at {datetime.now().strftime('%Y-%m-%d %H:%M:%S')}\n\n🔄 **Please restart manually** (auto-restart failed)\n\n1. Go to Settings (⚙️)\n2. Click 'Factory reboot'\n3. Wait ~30 seconds"
+                        except Exception as commit_error:
+                            print(f"Note: Could not auto-commit to repository: {commit_error}")
+                            return f"✅ Configuration saved locally at {datetime.now().strftime('%Y-%m-%d %H:%M:%S')}\n\n🔄 **Manual Restart Required**\nFor changes to take effect:\n1. Go to Settings (⚙️)\n2. Click 'Factory reboot'\n3. Wait ~30 seconds for restart"
+                    else:
+                        return f"✅ Configuration saved at {datetime.now().strftime('%Y-%m-%d %H:%M:%S')}\n\n🔄 **Manual Restart Required**\nFor changes to take effect:\n1. Go to Settings (⚙️)\n2. Click 'Factory reboot'\n3. Wait ~30 seconds for restart"
                 except Exception as e:
                     return f"❌ Error saving configuration: {str(e)}"
             
             # Reset configuration function
             def reset_configuration(is_authenticated):
                 if not is_authenticated:
-                    updates = ["❌ Not authenticated"] + [gr.update() for _ in range(16)]  # 1 status + 16 fields
+                    updates = ["Not authenticated"] + [gr.update() for _ in range(14)]  # 1 status + 14 fields (prompt, model, examples, temp, tokens + 10 urls)
                     return tuple(updates)
                 
                 # Check if locked
@@ -810,7 +916,7 @@ with gr.Blocks(title=SPACE_NAME, theme=theme_class()) as demo:
                     with open('config.json', 'r') as f:
                         existing_config = json.load(f)
                         if existing_config.get('locked', False):
-                            updates = ["🔒 Configuration is locked"] + [gr.update() for _ in range(16)]
+                            updates = ["Configuration is locked"] + [gr.update() for _ in range(14)]
                             return tuple(updates)
                 except:
                     pass
@@ -822,25 +928,25 @@ with gr.Blocks(title=SPACE_NAME, theme=theme_class()) as demo:
                 else:
                     examples_text = ""
                 
-                # Get default URLs
+                # Get default URLs - parse from JSON string if needed
                 default_urls = DEFAULT_CONFIG.get('grounding_urls', [])
                 if isinstance(default_urls, str):
                     try:
-                        import ast
-                        default_urls = ast.literal_eval(default_urls)
+                        import json
+                        default_urls = json.loads(default_urls)
                     except:
                         default_urls = []
+                elif not isinstance(default_urls, list):
+                    default_urls = []
                 
                 # Reset to original default values
                 updates = [
-                    "✅ Reset to default values",
-                    gr.update(value=DEFAULT_CONFIG.get('name', SPACE_NAME)),
-                    gr.update(value=DEFAULT_CONFIG.get('description', SPACE_DESCRIPTION)),
+                    "Reset to default values",
                     gr.update(value=DEFAULT_CONFIG.get('system_prompt', SYSTEM_PROMPT)),
                     gr.update(value=DEFAULT_CONFIG.get('model', MODEL)),
                     gr.update(value=examples_text),
-                    gr.update(value=DEFAULT_CONFIG.get('temperature', 0.5)),
-                    gr.update(value=DEFAULT_CONFIG.get('max_tokens', 450))
+                    gr.update(value=DEFAULT_CONFIG.get('temperature', temperature)),
+                    gr.update(value=DEFAULT_CONFIG.get('max_tokens', max_tokens))
                 ]
                 
                 # Add URL updates
@@ -850,33 +956,19 @@ with gr.Blocks(title=SPACE_NAME, theme=theme_class()) as demo:
                 
                 return tuple(updates)
             
-            # Connect authentication
-            faculty_auth_btn.click(
-                verify_faculty_password,
-                inputs=[faculty_password_input],
-                outputs=[faculty_auth_status, faculty_auth_row, faculty_config_section, faculty_auth_state]
-            )
-            
-            faculty_password_input.submit(
-                verify_faculty_password,
-                inputs=[faculty_password_input],
-                outputs=[faculty_auth_status, faculty_auth_row, faculty_config_section, faculty_auth_state]
-            )
             
             # Connect configuration buttons
             save_config_btn.click(
                 save_configuration,
-                inputs=[edit_name, edit_description, edit_system_prompt, edit_model, edit_examples, edit_temperature, edit_max_tokens] + url_fields + [config_locked, faculty_auth_state],
+                inputs=[faculty_auth_state, edit_system_prompt, edit_model, edit_examples, edit_temperature, edit_max_tokens] + url_fields + [config_locked],
                 outputs=[config_status]
             )
             
             reset_config_btn.click(
                 reset_configuration,
                 inputs=[faculty_auth_state],
-                outputs=[config_status, edit_name, edit_description, edit_system_prompt, edit_model, edit_examples, edit_temperature, edit_max_tokens] + url_fields
+                outputs=[config_status, edit_system_prompt, edit_model, edit_examples, edit_temperature, edit_max_tokens] + url_fields
             )
-        else:
-            gr.Markdown("ℹ️ Faculty configuration is not enabled. Set CONFIG_CODE in Space secrets to enable.")
 
 if __name__ == "__main__":
     demo.launch()