syntaxmatrix 2.5.5.5__py3-none-any.whl → 2.5.6.1__py3-none-any.whl

syntaxmatrix/routes.py

@@ -35,7 +35,9 @@ from syntaxmatrix.settings.string_navbar import string_navbar_items
 from syntaxmatrix.settings.model_map import GPT_MODELS_LATEST, PROVIDERS_MODELS, MODEL_DESCRIPTIONS, PURPOSE_TAGS, EMBEDDING_MODELS
 from syntaxmatrix.project_root import detect_project_root
 from syntaxmatrix import generate_page as _genpage
-from syntaxmatrix import auth as _auth
+from syntaxmatrix import auth as _auth 
+from .auth import register_user, authenticate, login_required, admin_required, superadmin_required, update_password
+
 from syntaxmatrix import profiles as _prof
 from syntaxmatrix.gpt_models_latest import set_args, extract_output_text as _out
 from syntaxmatrix.agentic.agents import classify_ml_job_agent, refine_question_agent, text_formatter_agent
@@ -219,24 +221,30 @@ def setup_routes(smx):
           <meta name="viewport" content="width=device-width, initial-scale=1, viewport-fit=cover">
           <title>{smx.page}</title>
           <style>
+            /* ----- HTML/BODY ----------------------------------- */
+            html {{ 
+              font-size: clamp(12px, 1.7vw, 18px); 
+              /* scrollbar-gutter: stable both-edges; */
+            }}
             body {{
-              font-family: 'Helvetica Neue', Helvetica, Arial, sans-serif;
-              margin: 0 20px;
               padding: 0;
+              margin: 0;
               background: {smx.theme["background"]};
               color: {smx.theme["text_color"]};
             }}
-            /* Responsive typography using clamp */
-            html {{
-              font-size: clamp(12px, 1.7vw, 18px);
-            }}
+            html, body {{ scroll-behavior: auto; }}
+            .admin-grid, .admin-shell .card {{ min-width: 0; }}
+            html, body, .admin-shell {{ overflow-x: visible !important;  }}
+          </style>
+          <style>
+            /* ----- NAVBAR -------------------------------- */
             /* Desktop Navbar */
             nav {{
               display: flex;
               justify-content: space-between;
               align-items: center;
               background: {smx.theme["nav_background"]};
-              padding: 10px 20px;
+              padding: 10px 24px;
               position: fixed;
               top: 0;
               left: 0;
@@ -246,19 +254,36 @@ def setup_routes(smx):
             .nav-left {{
               display: flex;
               align-items: center;
-            }}
-            .nav-left .logo {{
-              font-size: clamp(1.3rem, 2vw, 1.5rem);
-              font-weight: bold;
               color: {smx.theme["nav_text"]};
-              margin-right: 20px;
+              gap: 8px;
             }}
-            .nav-left .nav-links a {{
-              font-size: clamp(1rem, 1.2vw, 1.2rem);
+            .nav-left .logo {{               
+              align-items: center;     
+              font-weight: bold;    
+              font-size: clamp(1.4rem, 1.8vw, 1.8rem);  
+              margin-right: 0;         
+            }}
+            .logo img {{
+              display: block;
+              width: clamp(1.4rem, 1.8vw, 1.8rem);
+            }}
+            .nav-left a {{
               color: {smx.theme["nav_text"]};
               text-decoration: none;
               margin-right: 15px;
             }}
+            
+            .nav-left .nav-links a.active,
+              .nav-left .nav-links a.active:hover,
+              #mobile-nav a.active,
+              #mobile-nav a.active:hover {{
+                background-color: var(--nav-bg) !important;   /* keep the same base */
+                box-shadow: inset 0 0 0 9999px rgba(0,0,0,.52); /* darken ~52% */
+                border-radius: 6px;
+                padding: 2px 8px;
+                color:cyan;
+              }}
+            
             .nav-right a {{
               font-size: clamp(1rem, 1.2vw, 1.2rem);
               color: {smx.theme["nav_text"]};
@@ -289,7 +314,7 @@ def setup_routes(smx):
               display: flex;
               flex-direction: column;
               gap: 10px;
-              z-index: 900;
+              z-index: 1000;
               color: {mobile_text_color};
             }}
             #mobile-nav a {{
@@ -308,24 +333,29 @@ def setup_routes(smx):
             /* Responsive adjustments for mobile */
             @media (max-width: 768px) {{
               .nav-left .nav-links, .nav-right {{
-                display: none;
+                  display: none;
               }}
               #hamburger-btn {{
                 display: block;
               }}
-             
+              body {{
+                padding: 0 10px;
+              }}
             }}
-            /* Sidebar styles */
+          </style>
+
+          <style>
+            /* ----- SIDEBAR ---------------------------------------------------------- */
             #sidebar {{
               position: fixed;
               top: 40px;
-              left: -240px;
+              left: -260px;
               width: var(--sidebar-w);
-              height: calc(100% - 10px);
+              height: calc(100% - 2px);
               background: {smx.theme["sidebar_background"]};
               overflow-y: auto;
               padding: 10px; 5px;
-              font-size: 1.2rem;
+              font-size: clamp(1.2rem, 1.4vw, 1.6rem); 
               gap: 10px;
               box-shadow: 2px 0 5px rgba(0,0,0,0.3);
               transition: left 0.3s ease;
@@ -334,7 +364,7 @@ def setup_routes(smx):
             }}
             #sidebar a {{
               color: {get_contrast_color(smx.theme["sidebar_background"])};
-              margin:3px;
+              padding:3px;
               text-decoration: none;
             }}
             #sidebar.open {{
@@ -359,18 +389,28 @@ def setup_routes(smx):
               background-color: rgba(0, 0, 0, 0.05);
               transform: scale(1.2);
             }}
+          </style>
+          <style>
+            /* ----- CHAT HISTORY ---------------------------------------------------- */
             #chat-history {{
               width: 100%;
               max-width: 980px;
-              margin: 50px auto 10px auto;
-              padding: 10px 5px;
               background: {smx.theme["chat_background"]};
               border-radius: 20px;
               overflow-y: auto;
               min-height: 360px;
+              margin: 50px auto 10px auto;
+              padding: 10px 5px 0 5px;
+              padding-bottom: calc(var(--composer-h, 104px) + 78);        
             }}
+            #chat-history .chat-message {{
+              scroll-margin-bottom: calc(var(--composer-h, 104px) + 78);
+            }}
+            #chat-history, #widget-container {{ overflow-anchor: none; }}
+            
              #chat-history-default {{
               width: 100%;
+              max-width: 100%;
               margin: 45px auto 10px auto;
               padding: 10px 5px;
               background: {smx.theme["chat_background"]};
@@ -384,13 +424,13 @@ def setup_routes(smx):
                 transform:scale(1.2);
                 transition: all 0.3s ease;
             }}
+      
+            { _chat_css() }
+
             #widget-container {{
-              max-width: 850px;
+              max-width: 100%;
               margin: 0 auto 40px auto;
             }}
-
-            { _chat_css() }
-
             .closeable-div {{
               position: relative;
               padding: 20px;
@@ -410,27 +450,20 @@ def setup_routes(smx):
             .close-btn:hover {{
               color: #ff0000;
             }}
-          </style>
-          <style>
+
             @keyframes spin {{
               0% {{ transform: rotate(0deg); }}
               100% {{ transform: rotate(360deg); }}
             }}
-            
-          </style>
-          <style>
             .dropdown:hover .dropdown-content {{
                 display: block;
             }}
-          </style>
-          <style>
             /* Keep the shift amount equal to the actual sidebar width */
              :root {{ --sidebar-w: 16vw; --nav-bg: {{smx.theme["nav_background"]}}; }}
           
             /* Messages slide; composer doesn't stay shifted */
-            #chat-history,
-            #widget-container {{ transition: transform .45s ease; }}
-
+            #chat-history, #widget-container {{ transition: transform .45s ease; }}
+            
             /* Messages move fully clear of the sidebar */
             body.sidebar-open #chat-history {{ transform: translateX(calc(var(--sidebar-w) * 0.30)); }}
 
@@ -447,56 +480,23 @@ def setup_routes(smx):
             #widget-container, #smx-widgets {{
               position: sticky;
               bottom: 0;
-              z-index: 1100;          /* > sidebar (999) */
+              z-index: 1100;  
               background: inherit;
             }}
-            #chat-history{{
-              padding-bottom: calc(var(--composer-h, 104px) + 78);
-            }}
-            #chat-history .chat-message {{
-              scroll-margin-bottom: calc(var(--composer-h, 104px) + 78);
-            }}
-            /* Stop browser scroll-anchoring from fighting our autoscroll */
-            #chat-history,
-            #widget-container {{
-              overflow-anchor: none;
-            }}
-
-            /* Reduce visual “jump” when the scrollbar appears/disappears */
-            html {{
-              scrollbar-gutter: stable both-edges;
-            }}
-
-            /* Avoid unexpected smooth scrolling that can look like a jerk */
-            html, body {{
-              scroll-behavior: auto;
-            }}
-    
+           
             /* Textarea bounds */
             .chat-composer {{ min-width:0; max-height:12vh; }}
-            @media (max-width:900px){{
+            @media (max-width:1200px){{
               .chat-composer {{ 
                 min-height:56px; 
                 line-height:1.4; 
                 white-space: pre-wrap;
-                padding: 10px 10px 16px 24px;
-                font-size: 16px;       /* prevents iOS zoom + improves legibility */
-                overflow-y: auto;      /* scroll after cap */
+                padding: 10px 10px 16px 12px;
+                font-size: 16px;       
+                overflow-y: auto;      
                 box-sizing: border-box;
               }}
             }}
-            
-           .nav-left .nav-links a.active,
-            .nav-left .nav-links a.active:hover,
-            #mobile-nav a.active,
-            #mobile-nav a.active:hover {{
-              background-color: var(--nav-bg) !important;   /* keep the same base */
-              box-shadow: inset 0 0 0 9999px rgba(0,0,0,.52); /* darken ~52% */
-              border-radius: 6px;
-              padding: 2px 8px;
-              color:cyan;
-            }}
-
           </style>
          
           <!-- Add MathJax -->
@@ -513,7 +513,7 @@ def setup_routes(smx):
           }});
           </script>
           <script>
-            /** Turn the latest bot <p> into fade-in “lines” and reveal them sequentially */
+            // Turn the latest bot <p> into fade-in “lines” and reveal them sequentially 
             function splitToLines(node){{
               // If there are list items, animate them item-by-item.
               const lis = node.querySelectorAll('li');
@@ -629,10 +629,13 @@ def setup_routes(smx):
                 '</form>'
             )
         else:
+            # Only show Register link if the consumer app explicitly enabled it.
+            reg_link = ""
+            if getattr(smx, "registration_enabled", False):
+                reg_link = f'|<a href="{url_for("register")}" class="nav-link">Register</a>'
             auth_links = (
                 f'<a href="{url_for("login")}" class="nav-link">Login</a>'
-                '|'
-                f'<a href="{url_for("register")}" class="nav-link">Register</a>'
+                f'{reg_link}'
             )
 
         desktop_nav = f"""
@@ -708,7 +711,7 @@ def setup_routes(smx):
           .chat-message.user {{
               background: #e4e8ed;
               float: right;
-              margin-right: 15px;
+              margin-right: 20px;
               border-top-right-radius: 2px;
           }}
           .chat-message.user::after {{
@@ -1501,33 +1504,7 @@ def setup_routes(smx):
     @smx.app.route("/", methods=["GET", "POST"])
     def home():
         smx.page = ""
-        # if not session.get("current_session"):
-        #     session["current_session"] = {"id": str(uuid.uuid4()), "title": "Current", "history": []}
-        #     session.setdefault("past_sessions", [])
-        #     session.setdefault("chat_history", [])
-        #     session["active_chat_id"] = session["current_session"]["id"]
-
-        # if session.pop("needs_end_chat", False):
-        #     current_history = session.get("chat_history", [])
-        #     current_session = session.get("current_session", {"id": str(uuid.uuid4()), "title": "Current", "history": []})
-        #     past_sessions = session.get("past_sessions", [])
-                                       
-        #     generated_title = smx.generate_contextual_title(current_history)              
-        #     current_session["title"] = generated_title
-        #     past_sessions.insert(0, {"id": current_session["id"], "title": current_session["title"]})
-                    
-        #     session["past_sessions"] = past_sessions
-        #     session["current_session"] = {"id": str(uuid.uuid4()), "title": "Current", "history": []}
-        #     session["active_chat_id"] = session["current_session"]["id"]
-        #     session["chat_history"] = []
-            
-        #     session["user_query"] = ""
-        #     session["app_token"] = smx.app_token
-
-        #     cur = session.get("current_session")
-        #     if cur and cur.get("id") and session.get("active_chat_id") != cur["id"]:
-        #         session["active_chat_id"] = cur["id"]
-
+      
         if not session.get("current_session"):
             # metadata only: id + title
             session["current_session"] = {"id": str(uuid.uuid4()), "title": "Current"}
@@ -2397,31 +2374,18 @@ def setup_routes(smx):
         home_page_html = f"""      
         {head_html()}
           <meta name="viewport" content="width=device-width, initial-scale=1" />
+          
           <style>
-            /* Match /dashboard font scale */
-            :root{{
-              --smx-font: -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, "Helvetica Neue",
-                          Arial, "Noto Sans", "Apple Color Emoji","Segoe UI Emoji","Segoe UI Symbol","Noto Color Emoji";
-              --smx-font-size: 16px;   /* >=16px prevents iOS zoom */
-              --smx-line: 1.55;
-            }}
-            html{{ -webkit-text-size-adjust: 100%; }}
-            body{{ font-family: var(--smx-font); font-size: var(--smx-font-size); line-height: var(--smx-line); }}
-          </style>
-          <style>
-            /* Container sizing & equal gutters */
             .chat-container{{
               max-width: 820px;
               margin-inline: auto;
               padding-inline: 12px;
               box-sizing: border-box;
             }}
-
-            /* Bubbles never overflow the viewport width */
             .chat-messages{{
               overflow-wrap: anywhere;
               word-break: break-word;
-              padding-bottom: 84px; /* room for sticky footer input */
+              padding-bottom: 84px; 
             }}
 
             /* Sticky footer input area (safe on iOS address-bar) */
@@ -2466,8 +2430,7 @@ def setup_routes(smx):
             @supports (-webkit-touch-callout: none){{
               .chat-footer textarea{{ resize: none; }}
             }}
-          </style>
-          <style>
+         
             /* Desktop: push chat-history a little more than the base shift */
             body.sidebar-open #chat-history{{
               transform: translateX(calc(var(--sidebar-shift, var(--sidebar-w)) - 90px));
@@ -2499,10 +2462,9 @@ def setup_routes(smx):
             }}
             /* Typewriter look during streaming only */
             .chat-message.bot.streaming .stream-target{{
-              font-family: ui-monospace, SFMono-Regular, Menlo, Consolas, "Liberation Mono", monospace;
               font-variant-ligatures: none;
               white-space: pre-wrap;      /* keep line breaks as they stream */
-              letter-spacing: 0.01em;     /* subtle spacing for “typed” feel */
+              letter-spacing: 0.02em;     /* subtle spacing for “typed” feel */
             }}
 
             /* Blinking caret visible only while streaming */
@@ -2525,8 +2487,7 @@ def setup_routes(smx):
               0%, 100% {{ opacity: 0; }}
               50%      {{ opacity: 1; }}
             }}
-          </style>
-          <style id="smx-structured-style">
+         
             /* Container for structured bot content */
             .chat-message.bot .smx-structured {{
               margin-top: 4px;
@@ -2540,10 +2501,11 @@ def setup_routes(smx):
               margin: 8px 0 4px;
               font-weight: 700;
             }}
-            .chat-message.bot .smx-structured h1 {{ font-size: 1.15rem; }}
-            .chat-message.bot .smx-structured h2 {{ font-size: 1.06rem; }}
-            .chat-message.bot .smx-structured h3 {{ font-size: 1.0rem; }}
-
+            
+            .chat-message.bot .smx-structured h1 {{ font-size: 1.3rem; }}
+            .chat-message.bot .smx-structured h2 {{ font-size: 1.2rem; }}
+            .chat-message.bot .smx-structured h3 {{ font-size: 1.1rem; }}
+            
             /* Paragraphs */
             .chat-message.bot .smx-structured p {{
               margin: 6px 0;
@@ -2563,15 +2525,13 @@ def setup_routes(smx):
               padding: 8px 10px;
               border-radius: 8px;
               overflow: auto;
-              font-family: ui-monospace, SFMono-Regular, Menlo, Consolas, "Liberation Mono", monospace;
             }}
 
-            /* While streaming we still use a live typing box */
+            /* While streaming, still use a live typing box */
             .chat-message.bot.streaming .stream-target {{
               white-space: pre-wrap;   /* so newlines render during typing */
             }}
-          </style>
-          <style>
+          
             /* --- Stop-in-a-ring spinner --- */
             #submit-button.stop {{
               display: inline-flex;
@@ -2611,8 +2571,7 @@ def setup_routes(smx):
             @keyframes smxSpin {{
               to {{ transform: rotate(360deg); }}
             }}
-          </style>
-          <style>
+        
             /* Force strict top→bottom stacking and align sides without floats */
             #chat-history{{
               display: flex;
@@ -2661,6 +2620,14 @@ def setup_routes(smx):
             body {{
               padding-bottom:0;
             }}
+
+            html, body {{
+              margin: 0;
+              padding: 0;
+              width: 100%;
+              height: 100%; /* If you want it to be full height too */
+              overflow-x: hidden; /* Optional: Prevents horizontal scrollbar appearing if a slight overflow */
+            }}
           </style>
 
         <body>
@@ -3396,17 +3363,11 @@ def setup_routes(smx):
             box-sizing: border-box;
             max-width: 100%;
           }
-          @media (max-width: 768px) {
+          @media (max-width: 1200px) {
             body {
               padding-top: 0;
             }
           }
-          /* undo the mobile overflow clamp on large screens */
-          html, body, .admin-shell{ overflow-x: visible !important; }
-          /* guard against grid items forcing overflow */
-          .admin-grid, .admin-shell .card { min-width: 0; }
-          }
-
           /* Section demarcation */
           .section{
             background: var(--section-bg);
@@ -3522,10 +3483,6 @@ def setup_routes(smx):
             /* force all grid items to stack */
             .span-3, .span-4, .span-6, .span-8, .span-12 { grid-column: span 12; }
           }
-
-          /* Global overflow guards (safe, won’t hide useful content inside lists) */
-          html, body, .admin-shell { overflow-x: hidden; }
-
           /* Prevent any inner block from insisting on a width that causes overflow */
           .admin-shell .card, .admin-grid { min-width: 0; }
 
@@ -3820,6 +3777,34 @@ def setup_routes(smx):
                     )
                     flash(f"Role '{name}' created.", "info") if ok else flash("Could not create role (reserved/exists/invalid).", "error")
 
+            elif action == "create_user":
+                viewer_role = (session.get("role") or "").lower()
+                if viewer_role not in ("admin", "superadmin"):
+                    flash("You don't have permission to create users.", "error")
+                else:
+                    email = (request.form.get("email") or "").strip()
+                    username = (request.form.get("username") or "").strip()
+                    temp_password = request.form.get("password") or ""
+                    role = (request.form.get("role") or "user").strip().lower()
+
+                    if not email or not temp_password:
+                        flash("Email and password are required to create a user.", "error")
+                    elif role not in ("user", "employee"):
+                        flash("Invalid role for new user.", "error")
+                    else:
+                        ok = register_user(email, username, temp_password, role)
+                        if ok:
+                            # Force this new account to change password on first login
+                            _auth.set_must_reset_by_email(email, must_reset=True)
+                            flash(
+                                "User created. They must change the temporary password on first login.",
+                                "success",
+                            )
+                        else:
+                            flash("Could not create user (email or username already in use).", "error")
+
+                return redirect(url_for("admin_panel")) 
+
             elif action == "set_user_role":
                 actor_role = (session.get("role") or "").lower()
                 actor_id = session.get("user_id")
@@ -4382,14 +4367,45 @@ def setup_routes(smx):
             """
 
         employees_card = f"""
-          <div class="card span-12">
-            <h4>Employees</h4>
-            <ul class="catalog-list">
-              {''.join(emp_items) or "<li>No employees yet.</li>"}
-            </ul>
-            {add_form}
-          </div>
+        <div class="card span-12">
+          <h4>Employees</h4>
+          <ul class="catalog-list">
+            {''.join(emp_items) or "<li>No employees yet.</li>"}
+          </ul>
+          {add_form}
+        </div>
         """
+        # Admin-only: create users directly (useful when public registration is disabled)
+        create_user_card = ""
+        if viewer_role in ("admin", "superadmin"):
+            create_user_card = """
+              <div class="card span-4">
+                <h4>Create User</h4>
+                <form method="post" class="form-vertical">
+                  <input type="hidden" name="action" value="create_user">
+                  <label>Email</label>
+                  <input type="email" name="email" required>
+
+                  <label>Username (optional)</label>
+                  <input type="text" name="username" placeholder="e.g. jsmith">
+
+                  <label>Temporary password</label>
+                  <input type="password" name="password" required>
+
+                  <label>Role</label>
+                  <select name="role">
+                    <option value="user">User</option>
+                    <option value="employee">Employee</option>
+                  </select>
+
+                  <button type="submit" style="margin-top:.5rem;">Create User</button>
+                </form>
+                <p style="font-size:.75rem;opacity:.7;margin-top:.5rem;">
+                  Share the temporary password securely and ask the user to change it after first login.
+                </p>
+              </div>
+            """
+            
         from datetime import datetime, timedelta
         # Audit (always its own row)
         audit_card = ""
@@ -4528,6 +4544,7 @@ def setup_routes(smx):
             <div class="admin-grid">
               {roles_card}
               {employees_card}
+              {create_user_card}
             </div>
           </section>
         """
@@ -5214,7 +5231,6 @@ def setup_routes(smx):
           <title>Edit Page - {{ page_name }}</title>
           <style>
             body {
-                font-family: 'Helvetica Neue', Helvetica, Arial, sans-serif;
                 background: #f4f7f9;
                 padding: 20px;
             }
@@ -5279,20 +5295,25 @@ def setup_routes(smx):
     # ----Register ---------------------------------------
     @smx.app.route("/register", methods=["GET", "POST"])
     def register():
+        
+        # If the consumer app has not enabled registration, redirect to login.
+        if not getattr(smx, "registration_enabled", False):
+            return redirect(url_for("login"))
+
         if request.method == "POST":
-          email = request.form["email"].strip()
-          username = request.form["username"].strip()
-          password = request.form["password"]
-          role = request.form.get("role", "user")
-          if not email or not password:
-              flash("email and password required.")
-          else:
-              success = register_user(email, username, password, role)
-              if success:
-                  flash("Registration successful—please log in.")
-                  return redirect(url_for("login"))
-              else:
-                  flash("Email already taken.")
+            email = request.form["email"].strip()
+            username = request.form["username"].strip()
+            password = request.form["password"]
+            role = request.form.get("role", "user")
+            if not email or not password:
+                flash("email and password required.")
+            else:
+                success = register_user(email, username, password, role)
+                if success:
+                    flash("Registration successful—please log in.")
+                    return redirect(url_for("login"))
+                else:
+                    flash("Email already taken.")
         return render_template("register.html")
 
     # ----- Login --------------------------------------------
@@ -5309,8 +5330,15 @@ def setup_routes(smx):
                 session["username"] = user["username"]
                 session["role"] = user["role"]
 
-                # ensure the just-logged-in user’s “Current” chat is closed on next GET
-                # session["needs_end_chat"] = True
+                # If this account was created with a temporary password,
+                # force them through the change-password flow first.
+                if _auth.user_must_reset_password(user["id"]):
+                    session["must_reset_password"] = True
+                    flash("Please set a new password before continuing.", "warning")
+                    return redirect(url_for("change_password"))
+
+                # Clear any stale flag for accounts that no longer need a reset
+                session.pop("must_reset_password", None)
                 
                 # — Load past chats from chats.db for this user —
                 chat_ids = SQLHistoryStore.list_chats(user["id"])
@@ -5341,7 +5369,40 @@ def setup_routes(smx):
                 flash("Invalid username or password.")
         return render_template("login.html")
 
-      # ----- Logout -------------------------------------------
+
+    @smx.app.route("/change_password", methods=["GET", "POST"])
+    @login_required
+    def change_password():
+        user_id = session.get("user_id")
+        if not user_id:
+            flash("Please log in again.", "error")
+            return redirect(url_for("login"))
+
+        if request.method == "POST":
+            current = (request.form.get("current_password") or "").strip()
+            new1 = (request.form.get("new_password") or "").strip()
+            new2 = (request.form.get("confirm_password") or "").strip()
+
+            if not new1:
+                flash("New password is required.", "error")
+            elif new1 != new2:
+                flash("New passwords do not match.", "error")
+            elif not _auth.verify_password(user_id, current):
+                flash("Current password is incorrect.", "error")
+            else:
+                # Update password + clear the mandatory-reset flag
+                _auth.update_password(user_id, new1)
+                _auth.clear_must_reset(user_id)
+                session.pop("must_reset_password", None)
+                flash("Password updated successfully.", "success")
+
+                next_url = request.args.get("next") or url_for("dashboard")
+                return redirect(next_url)
+
+        return render_template("change_password.html")
+
+
+    # ----- Logout -------------------------------------------
     @smx.app.route("/logout", methods=["POST"])
     def logout():
         """Clear session and return to login."""
@@ -5649,7 +5710,6 @@ def setup_routes(smx):
                           "<meta charset='utf-8'>"
                           "<title>Result</title>"
                           "<style>"
-                          "  body { font-family: system-ui, -apple-system, Segoe UI, Roboto, sans-serif; margin: 42px; padding:24 32; }"
                           "  img { max-width: 100%; height: auto; }"
                           "  table { border-collapse: collapse; margin: 16px 0; }"
                           "  th, td { border: 1px solid #ddd; padding: 6px 10px; }"
@@ -6453,6 +6513,7 @@ def setup_routes(smx):
                 cell["highlighted_code"] = Markup(_pygmentize(cell["code"]))
        
         highlighted_ai_code = _pygmentize(ai_code)
+        tasks = [tag.replace("_", " ").replace('"', '').capitalize() for tag in tags]
 
         return render_template(
           "dashboard.html",
@@ -6464,7 +6525,7 @@ def setup_routes(smx):
           highlighted_ai_code=highlighted_ai_code if ai_code else None,
           askai_question=smx.sanitize_rough_to_markdown_task(askai_question),  
           refined_question=refined_question,  
-          tasks=tags,
+          tasks=tasks,
           data_cells=data_cells,
           session_id=session_id,
           llm_usage=llm_usage