Commit Graph

86 Commits

Author SHA1 Message Date
Nyk a63ec39d3b chore: resolve merge conflict with main for PR #177 2026-03-05 12:27:51 +07:00
Nyk 0f8f0a87e4 fix(agents): enforce diagnostics self-scope and validation 2026-03-05 12:12:32 +07:00
nyk 0e14683a12
Merge pull request #201 from builderz-labs/fix/184-assignment-status-normalization
fix(tasks): auto-normalize assignment status transitions
2026-03-05 12:05:01 +07:00
nyk 32f1e4b48a
Merge pull request #200 from builderz-labs/fix/198-auth-ux-redirect
fix(auth): redirect unauthenticated panel requests to login
2026-03-05 12:04:43 +07:00
Nyk 99833f5c53 fix(websocket): declare ping support ref for type safety 2026-03-05 11:21:27 +07:00
Nyk 17b51623be fix(websocket): declare ping support ref for type safety 2026-03-05 11:16:52 +07:00
Nyk 4e3b52c06c fix(tasks): auto-normalize assignment status transitions 2026-03-05 11:13:48 +07:00
Nyk d2edc71861 fix(auth): redirect unauthenticated panel requests to login 2026-03-05 11:11:16 +07:00
ResistanceDown 41bfff8f79
Mission Control: Habi readiness wiring + office segmentation (#187)
* fix mission control wiring for habi memory/orchestration/retention

* feat office org-chart segmentation controls

---------

Co-authored-by: Jeremy Phelps <kokoro@Kokoro.local>
2026-03-05 11:00:54 +07:00
beeman 9d39e51f56
fix: prevent Live Feed sidebar from sliding in on page navigation (#181)
Only apply the slide-in-right animation when the user actively
re-expands the panel, not on initial mount. Also remove dead
duplicate files src/live-feed.tsx and src/page.tsx.
2026-03-05 11:00:44 +07:00
Bhavik Patel 298fbef562
fix: lock task comment author to authenticated user
- Remove manual Author text input from comment form (security concern)
- Use authenticated currentUser.username as comment author automatically
- Display 'Posting as <username>' read-only indicator
- Add inline documentation explaining comment vs broadcast semantics
- Document subscription model: auto-subscribed on create, assign, comment, @mention

Fixes #167
2026-03-05 10:58:53 +07:00
Bhavik Patel 4ab6f8a5a1
fix: improve workspace creation discoverability in super admin
- Add prominent '+ Add Workspace' button in the Super Admin header
  (always visible, next to Refresh)
- Replace hidden 'Show Create Client Instance' toggle with a clear
  'Create New Workspace' section with close (×) button
- Highlight the create form with primary border when open
- Improve instructional text for the creation workflow

Fixes #169
2026-03-05 10:58:49 +07:00
Bhavik Patel 0557bd7385
fix: restore @mention autocomplete visibility in task modal
- Increase MentionTextarea dropdown z-index to z-[60] so it renders
  above z-50 modals (was z-20, clipped by overflow-y-auto on modal)
- Replace plain textarea in broadcast section with MentionTextarea
  for consistent @mention support across all text inputs
- Add hint text to broadcast placeholder about @mention usage

Fixes #172
2026-03-05 10:58:47 +07:00
Bhavik Patel b130b881a0
docs: improve workspace and memory UX guidance
Issue #146 — How to add workspace:
- Add Workspace Management section to README with Super Admin panel docs
- Add Super Admin API endpoints to API overview table
- Add info banner in Settings panel (admin only) linking to Super Admin

Issue #143 — Memory tab in agent view:
- Add info banner in agent Memory tab clearly distinguishing agent
  working memory (DB scratchpad) from workspace memory files
- Add clickable link to Memory Browser page from agent Memory tab
- Improve subtitle text with WORKING.md storage detail

Fixes #146
Fixes #143
2026-03-05 10:58:45 +07:00
nyk ec9ba45628
feat: provision full OpenClaw workspaces from agent creation 2026-03-05 10:57:17 +07:00
fulgore d59b2e70a1
fix: macOS compatibility for status commands and gateway client id
Replace Linux-only commands (uptime -s, free -m, df --output=pcent) with
cross-platform alternatives using process.platform detection and Node.js
os module. Rename gateway client ID from control-ui to openclaw-control-ui.

Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>
2026-03-05 10:57:15 +07:00
Bhavikprit 047216dbe2 feat(#163): add Agent Self-Diagnostics API endpoint
New GET /api/agents/[id]/diagnostics endpoint enabling agents to
query their own performance data for self-optimization.

Sections (selectable via ?section= query param):
- summary: KPIs (throughput, error rate, activity count)
- tasks: completion breakdown by status/priority, throughput/day
- errors: error frequency by type, recent error details
- activity: activity breakdown with hourly timeline
- trends: current vs previous period comparison with auto-alerts
- tokens: token usage by model with cost totals

Features:
- Scoped to requesting agent only (no cross-agent data access)
- Configurable time window via ?hours= param (1-720h)
- Automatic trend alerts for error spikes, throughput drops, stalls
- Works with existing activities, tasks, and token_usage tables

Fixes #163
2026-03-04 23:10:19 +04:00
Nyk 79984702de feat: provision full OpenClaw workspaces from agent creation 2026-03-05 00:17:23 +07:00
nyk 4cb86bc80b
Merge pull request #168 from builderz-labs/fix/165-agent-modal-ui
feat: improve agent detail modal visual design
2026-03-05 00:14:23 +07:00
Nyk 2413ab22a0 feat: improve agent detail modal visual design 2026-03-05 00:10:49 +07:00
Nyk 13e91d3d33 fix: correct token costing and add provider subscription detection 2026-03-05 00:05:14 +07:00
Nyk 36d5891d85 feat: add validated @mentions for tasks and comments 2026-03-04 23:37:45 +07:00
nyk dc4a3c539c
Merge pull request #155 from builderz-labs/feat/issues-146-143-145
feat: workspace discoverability and multi-project task support
2026-03-04 23:25:06 +07:00
Nyk 914a6c4cd0 fix: unify agent config save across mission control and gateway 2026-03-04 23:18:23 +07:00
Nyk caf1dbf5ef merge: resolve PR conflicts and add OpenClaw offline E2E harness 2026-03-04 23:11:59 +07:00
nyk e3c33a6a0c
Merge pull request #139 from bhavikprit/feat/39-structured-logging
feat(#39): replace console.log/error/warn with structured client logger
2026-03-04 22:49:06 +07:00
Nyk a9df1a25a5 feat: add workspace discoverability and multi-project task support 2026-03-04 22:44:57 +07:00
nyk f866861eb4
Merge pull request #141 from telnyxpete/security-hardening
Fix XSS in memory-browser-panel
2026-03-04 22:28:16 +07:00
nyk e67350095b
Merge branch 'main' into feat/39-structured-logging 2026-03-04 22:27:52 +07:00
nyk e8229cd290
feat: add URL-based task deep links and agent task links 2026-03-04 22:26:06 +07:00
Nyk 4b3781c9cc feat: add task URL deep-linking and agent task links 2026-03-04 22:24:42 +07:00
Nyk d1d75b3b15 fix: resolve cron calendar and auth regressions from open issues 2026-03-04 22:18:57 +07:00
Nyk 0e01f5d4b3 fix: add OpenClaw 3.2 compatibility for spawn and gateway health 2026-03-04 21:59:20 +07:00
nyk a79a6c22dd
Merge branch 'main' into feat/39-structured-logging 2026-03-04 21:21:38 +07:00
nyk 6a49751599
Merge pull request #138 from bhavikprit/feat/40-accessibility
feat(#40): improve frontend accessibility (WCAG 2.1 AA)
2026-03-04 21:20:49 +07:00
Bhavik Patel 882fbcb74c
fix: enable editing identity, sandbox, and tools in agent config UI (#148)
* fix(#140): enable editing of identity, sandbox, and tools in agent config UI

The ConfigTab's structured view only showed read-only displays for
Identity, Sandbox, and Tools sections even when in edit mode. Added
inline editing controls:

- Identity: emoji, name, theme/role inputs + identity content textarea
- Sandbox: mode/workspace dropdowns + network input
- Tools: allow/deny lists with add/remove buttons and Enter key support

Also added helper functions (updateIdentityField, updateSandboxField,
addTool, removeTool) and state for new tool entries.

Fixes #140

* fix: align sandbox edit values with agent schema

---------

Co-authored-by: Nyk <0xnykcd@googlemail.com>
2026-03-04 17:00:25 +07:00
Pete Christianson e6ec050ec3 Fix XSS in memory-browser-panel
Replace dangerouslySetInnerHTML with React elements for inline
formatting (bold/italic). New renderInlineFormatting() helper returns
React nodes instead of raw HTML strings, eliminating XSS risk from
user-controlled memory content.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-03-04 00:42:08 -08:00
Bhavikprit 797799ae0b feat(#39): replace console.log/error/warn with structured client logger
Add src/lib/client-logger.ts and replace all 55+ console calls across 19 client files with scoped createClientLogger instances. Production suppresses debug+info. Fix variable shadowing in log-viewer-panel.tsx.

Addresses #39
2026-03-04 11:29:48 +04:00
Bhavikprit 971befe193 feat(#40): improve frontend accessibility (WCAG 2.1 AA)
- Add reusable useFocusTrap hook for modal focus management with
  Escape key support and focus restoration on close
- Task board: add role=region and aria-label to kanban columns,
  role=button and keyboard support (Enter/Space) to task cards,
  role=alert on error display, role=status on loading spinner
- Modals: add role=dialog, aria-modal, aria-labelledby, focus
  trapping, backdrop click to close, aria-label on close buttons
- Tab interface: add role=tablist/tab/tabpanel with aria-selected
  and aria-controls for task detail tabs
- Forms: add htmlFor/id associations on all modal form labels
- Layout: add skip-to-content link for keyboard navigation,
  id=main-content on main element

Addresses #40
2026-03-04 11:17:21 +04:00
Nyk 43a47ad886 fix: support AUTH_PASS_B64 for seeded admin password 2026-03-04 12:57:43 +07:00
Nyk 2287b46e25 feat: add service CTA and update promo links 2026-03-04 09:54:35 +07:00
Nyk 760e0a255f feat: add promo banner for nyk, DictX, and Flight Deck Pro 2026-03-04 09:52:21 +07:00
nyk 57dee2094a
feat: scope workflows and webhooks to workspace (#132) 2026-03-04 09:28:43 +07:00
nyk 3662ab0fe7
fix: stop gateway handshake retry spam and improve origin guidance (#131) 2026-03-04 08:41:41 +07:00
Bhavik Patel 90b712ea29
feat(#115): virtual office visualization for agents (#127)
- Create OfficePanel with Office floor plan and Org Chart view modes
- Desk-style cards with status glow, emoji indicators, pulse animation for busy agents
- Agent detail modal with task stats, activity, session info
- Auto-refresh every 10 seconds for real-time updates
- Status summary in header (working/idle/error/away counts)
- Add OfficeIcon and office nav item in CORE group
- Register office route in page.tsx

Closes #115

Co-authored-by: bhavikprit <petrobhakti@gmail.com>
2026-03-04 08:03:24 +07:00
Mark Liu 720872a391
security: reject known-insecure default passwords during admin seeding (#123)
The admin seeding function previously fell back to password 'admin' when
AUTH_PASS was unset, and accepted any value from .env.example including
the documented default 'change-me-on-first-login'. This meant a user who
copied .env.example without changing the password (or forgot to set
AUTH_PASS entirely) would have an instance running with publicly known
credentials.

The seeding function now:
- Skips seeding entirely if AUTH_PASS is not set (instead of defaulting
  to 'admin')
- Checks AUTH_PASS against a blocklist of known insecure values
  (admin, password, change-me-on-first-login, changeme, testpass123)
- Logs a clear warning explaining what to do in both cases

Existing instances that already have users in the database are not
affected — the seeding function only runs when the users table is empty.

Signed-off-by: Mark Liu <mark@prove.com.au>
2026-03-04 08:03:11 +07:00
nyk 498cb2f8d5
feat: phase 1 workspace isolation across auth and core APIs (#112)
* feat: add workspace-scoped auth sessions and core API filtering

* feat: extend workspace scoping to search status standup and messaging

* feat: scope agent connect github and alert workflows by workspace

* fix: scope status sync and session alerts by workspace

* feat: add phase2 workspace migration and scope chat pipeline alerts

* feat: add model selection for agents and cron jobs

* feat: add deterministic agent avatars to task and squad views

* feat: add read-only cron calendar and agenda views

* feat: render task descriptions with markdown
2026-03-04 00:27:47 +07:00
nyk d682395266
feat: improve agent config tab model editing and display 2026-03-03 21:07:12 +07:00
nyk 6cd5e3e534
feat: enrich agent config with workspace identity and tools 2026-03-03 21:07:02 +07:00
nyk e4594c7854
feat: aggregate token usage from db with stable agent grouping 2026-03-03 21:06:54 +07:00