feat: prevent modification of environment-defined settings

- Add IsEnvironmentDefined field to AIProvider and LoginProfile GraphQL types
- Mark all environment-configured AI providers and database profiles as immutable
- Prevent deletion of environment-defined AI providers in chat interface
- Prevent removal of environment-defined database profiles in sidebar
- Add visual indicators (🔒) for environment-defined profiles
- Show user-friendly error messages when attempting to modify protected settings
- Maintain backward compatibility with user-defined settings

Fixes #498

🤖 Generated with [Claude Code](https://claude.ai/code)

Co-authored-by: Anguel <modelorona@users.noreply.github.com>

Author: claude[bot]

core/graph/model/models_gen.go

@@ -107,6 +107,7 @@ type LoginProfile {
   Id: String!
   Type: DatabaseType!
   Database: String
+  IsEnvironmentDefined: Boolean!
 }
 
 type StatusResponse {
@@ -129,6 +130,7 @@ type AIChatMessage {
 type AIProvider {
   Type: String!
   ProviderId: String!
+  IsEnvironmentDefined: Boolean!
 }
 
 type Query {

core/graph/schema.graphqls

@@ -4,5 +4,6 @@ query GetProfiles {
     Id
     Type
     Database
+    IsEnvironmentDefined
   }
 }

core/graph/schema.resolvers.go

@@ -133,34 +133,35 @@ export const SideMenu: FC<IRouteProps> = (props) => {
 function getDropdownLoginProfileItem(profile: LocalLoginProfile): IDropdownItem {
     const icon = (Icons.Logos as Record<string, ReactElement>)[profile.Type];
     const info = <ProfileInfoTooltip profile={profile} />;
+    const envLabel = profile.IsEnvironmentDefined ? " 🔒" : "";
 
     if (profile.Saved) {
         return {
             id: profile.Id,
-            label: profile.Id,
+            label: profile.Id + envLabel,
             icon,
             info,
         }
     }
     if (profile.Type === DatabaseType.MongoDb) {
         return {
             id: profile.Id,
-            label: `${profile.Hostname} - ${profile.Username} [${profile.Type}]`,
+            label: `${profile.Hostname} - ${profile.Username} [${profile.Type}]${envLabel}`,
             icon,
             info,
         }
     }
     if (profile.Type === DatabaseType.Sqlite3) {
         return {
             id: profile.Id,
-            label: `${profile.Database} [${profile.Type}]`,
+            label: `${profile.Database} [${profile.Type}]${envLabel}`,
             icon,
             info,
         }
     }
     return {
         id: profile.Id,
-        label: `${profile.Hostname} - ${profile.Database} [${profile.Type}]`,
+        label: `${profile.Hostname} - ${profile.Database} [${profile.Type}]${envLabel}`,
         icon,
         info,
     };
@@ -339,6 +340,10 @@ export const Sidebar: FC = () => {
         if (selectedProfile == null) {
             return;
         }
+        if (selectedProfile.IsEnvironmentDefined) {
+            notify("Cannot remove environment-defined profiles", "error");
+            return;
+        }
         if (selectedProfile.Id === current?.Id) {
             return navigate(InternalRoutes.Logout.path);
         }

frontend/src/components/sidebar/get-login-profiles.graphql

@@ -42,6 +42,7 @@ export type AiChatMessage = {
 
 export type AiProvider = {
   __typename?: 'AIProvider';
+  IsEnvironmentDefined: Scalars['Boolean']['output'];
   ProviderId: Scalars['String']['output'];
   Type: Scalars['String']['output'];
 };
@@ -112,6 +113,7 @@ export type LoginProfile = {
   Alias?: Maybe<Scalars['String']['output']>;
   Database?: Maybe<Scalars['String']['output']>;
   Id: Scalars['String']['output'];
+  IsEnvironmentDefined: Scalars['Boolean']['output'];
   Type: DatabaseType;
 };
 

frontend/src/components/sidebar/sidebar.tsx

@@ -179,6 +179,7 @@ export const LoginPage: FC = () => {
                         Password: "",
                         Username: "",
                         Saved: true,
+                        IsEnvironmentDefined: profile?.IsEnvironmentDefined ?? false,
                     }));
                     navigate(InternalRoutes.Dashboard.StorageUnit.path);
                     return notify("Login successfully", "success");

frontend/src/generated/graphql.tsx

@@ -319,6 +319,7 @@ export const ChatPage: FC = () => {
                 ...newProviders.map(provider => ({
                     id: provider.ProviderId,
                     modelType: provider.Type,
+                    isEnvironmentDefined: provider.IsEnvironmentDefined,
                 })),
                 ...initialModelTypes
                 ];
@@ -436,7 +437,10 @@ export const ChatPage: FC = () => {
                             })}</div>}
                             defaultItem={{ label: "Add External Model", icon: Icons.Add }}
                             onDefaultItemClick={handleAddExternalModel}
-                            enableAction={(index) => modelTypes.at(index)?.token != null} />
+                            enableAction={(index) => {
+                                const modelType = modelTypes.at(index);
+                                return modelType?.token != null && !modelType?.isEnvironmentDefined;
+                            }} />
                         {
                             modelAvailable
                             ? <Dropdown className="w-[200px]" value={currentModel ? createDropdownItem(currentModel) : undefined}

frontend/src/pages/auth/login.tsx

@@ -2,5 +2,6 @@ query GetAIProviders {
   AIProviders {
     Type
     ProviderId
+    IsEnvironmentDefined
   }
 }

frontend/src/pages/chat/chat.tsx

@@ -18,7 +18,7 @@ import { PayloadAction, createSlice } from '@reduxjs/toolkit';
 import { v4 } from 'uuid';
 import { LoginCredentials } from '../generated/graphql';
 
-export type LocalLoginProfile = (LoginCredentials & {Id: string, Saved?: boolean});
+export type LocalLoginProfile = (LoginCredentials & {Id: string, Saved?: boolean, IsEnvironmentDefined?: boolean});
 
 export type IAuthState = {
   status: "logged-in" | "unauthorized";