### Overview Currently, all workspaces use a hardcoded `ai-train=yes, search=yes, ai-input=yes` Content-Signal policy. This section outlines the roadmap for making these settings user-configurable. ### Phase 1: Database Schema Changes Add three new columns to the `users` table to store default preferences: ```sql -- Add to database/schema.sql ALTER TABLE users ADD COLUMN ai_train TEXT DEFAULT 'yes'; ALTER TABLE users ADD COLUMN search TEXT DEFAULT 'yes'; ALTER TABLE users ADD COLUMN ai_input TEXT DEFAULT 'yes'; -- Add check constraints to ensure only 'yes' or 'no' ALTER TABLE users ADD COLUMN ai_train TEXT DEFAULT 'yes' CHECK(ai_train IN ('yes', 'no')); ALTER TABLE users ADD COLUMN search TEXT DEFAULT 'yes' CHECK(search IN ('yes', 'no')); ALTER TABLE users ADD COLUMN ai_input TEXT DEFAULT 'yes' CHECK(ai_input IN ('yes', 'no')); ``` **Note:** These are user-level defaults. Per-workspace overrides can be added in a future phase by adding these same columns to the `workspaces` table. ### Phase 2: Update Auth::currentUser() Modify the `Auth` class to include the new Content-Signal preferences in the user session: ```php // In cowork-src/Auth.php, modify the currentUser() method public static function currentUser(): ?array { self::startSession(); if (!isset($_SESSION['user'])) { return null; } $userStorage = StorageFactory::user(); $user = $userStorage->load($_SESSION['user']['id']); // Ensure Content-Signal fields exist with defaults $user['ai_train'] = $user['ai_train'] ?? 'yes'; $user['search'] = $user['search'] ?? 'yes'; $user['ai_input'] = $user['ai_input'] ?? 'yes'; return $user; } ``` ### Phase 3: Add "Agent Access" Tab to Settings Add a new tab to the Settings modal in `/cowork-templates/sidebar.php`: **Location:** After the "Backup" tab (around line 426) **Implementation:** ```php ``` ### Phase 4: Update content_signal_policy() Function Modify the function to use user preferences: ```php function content_signal_policy(array $workspace, ?array $user = null): string { // If user preferences are available, use them if ($user && isset($user['ai_train'])) { $ai_train = $user['ai_train']; $search = $user['search']; $ai_input = $user['ai_input']; } else { // Default to permissive for anonymous/public access $ai_train = 'yes'; $search = 'yes'; $ai_input = 'yes'; } // Future: Check for workspace-level overrides here // if (isset($workspace['ai_train'])) { $ai_train = $workspace['ai_train']; } return "ai-train={$ai_train}, search={$search}, ai-input={$ai_input}"; } ``` ### Phase 5: Add API Endpoint for Saving Settings Add a new action to `/cowork-public/api/user.php`: ```php if ($action === 'update_agent_access') { if (!Auth::isLoggedIn()) { header('HTTP/1.1 403 Forbidden'); echo json_encode(['status' => 'error', 'message' => 'Unauthorized']); exit; } $input = json_decode(file_get_contents('php://input'), true); // Validate inputs $valid_values = ['yes', 'no']; $ai_train = in_array($input['ai_train'] ?? 'yes', $valid_values) ? $input['ai_train'] : 'yes'; $search = in_array($input['search'] ?? 'yes', $valid_values) ? $input['search'] : 'yes'; $ai_input = in_array($input['ai_input'] ?? 'yes', $valid_values) ? $input['ai_input'] : 'yes'; $userStorage = StorageFactory::user(); $user = Auth::currentUser(); // Update user record $userStorage->updateAgentAccessSettings($user['id'], $ai_train, $search, $ai_input); header('Content-Type: application/json'); echo json_encode(['status' => 'success']); exit; } ``` Add the corresponding method to user storage classes: ```php // In cowork-src/SQLiteUserStorage.php public function updateAgentAccessSettings(string $userId, string $ai_train, string $search, string $ai_input): bool { $stmt = $this->db->prepare( 'UPDATE users SET ai_train = ?, search = ?, ai_input = ? WHERE id = ?' ); return $stmt->execute([$ai_train, $search, $ai_input, $userId]); } // Similar method for FlatFileUserStorage.php ``` ---

AI Content Usage Permissions