Files
Claw3D/docs/desk-progression-spec.md
GordoCursor AgentLuke The DevElias PfefferClaude Sonnet 4.6copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>Greg Clarkiamlukethedev
4e552967d9 [PRIORITY][FEAT] merge runtime profiles, office systems, doctor, and vera lane convergence (#109)
* fix: include kanbanImmersive in immersiveOverlayActive calculation

When Kanban board is open, HUD elements (camera preset buttons, edit toolbar, overlays) should be suppressed. The kanbanImmersive flag was defined but not included in the immersiveOverlayActive condition, causing HUD elements to remain visible.

This fix adds kanbanImmersive to the immersiveOverlayActive calculation so HUD elements are properly hidden when the Kanban board is open.

Co-authored-by: Luke The Dev <iamlukethedev@users.noreply.github.com>

* Fix: Hide mini status bar when Kanban immersive overlay is open

Wraps the bottom-left mini status bar (showing agent stats, vibe score, and
control hints) with !immersiveOverlayActive check to match the behavior of
other HUD elements like camera controls and toolbar.

This ensures the status bar is properly hidden when the Kanban board or any
other immersive overlay is active, maintaining a clean immersive experience.

Co-authored-by: Luke The Dev <iamlukethedev@users.noreply.github.com>

* chore: drop unrelated package-lock line from branch

Co-authored-by: Luke The Dev <iamlukethedev@users.noreply.github.com>

* universal-backend-plan

* backend-neutral runtime seam

* package.json update

* feat: add Hermes gateway adapter as alternative to OpenClaw

Adds a WebSocket adapter that lets Claw3D connect to a Hermes AI agent
runtime without any changes to the frontend. The adapter implements the
full Claw3D gateway protocol and bridges it to the Hermes HTTP API.

Changes:
- server/hermes-gateway-adapter.js: WebSocket bridge implementing the
  Claw3D gateway protocol against the Hermes HTTP API. Supports all
  core methods (agents, sessions, chat streaming, cron, config, files,
  approvals) and multi-agent orchestration via spawn_agent/delegate_task
  tools. Persists conversation history to ~/.hermes/clawd3d-history.json.
- scripts/clawd3d-start.sh: All-in-one startup script that launches
  Hermes, the adapter, and the Next.js dev server with auto port
  conflict resolution. Alias as `claw3d` for convenience.
- src/features/office/hooks/useCronAgents.ts: Hook that polls the
  gateway for cron-scheduled agents and surfaces them in the 3D office.
- package.json: adds `hermes-adapter` npm script
- .env.example: documents Hermes config vars
- docs/hermes-gateway.md: setup guide and protocol reference

Usage:
  npm run hermes-adapter   # start adapter (connect to http://localhost:8642)
  npm run dev              # start Claw3D, point browser at localhost:3000
  # or: bash scripts/clawd3d-start.sh  (starts everything automatically)

Both OpenClaw and Hermes are supported simultaneously — the gateway URL
in NEXT_PUBLIC_GATEWAY_URL determines which backend Claw3D connects to.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

* feat: add read_agent_context tool for cross-agent coordination

Agents can now read each other's conversation history via the
read_agent_context tool, enabling the orchestrator to check what
a sub-agent has done before re-delegating work.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

* feat: wire Hermes office UX and role-aware runtime updates

* feature update - demomode & hermes adapter

* fix lint blockers

* lintfix #2

* fix: stabilize retro office camera preset callbacks

* Initial plan

* fix: stabilize retro office overview preset hooks

Agent-Logs-Url: https://github.com/gsknnft/Claw3D/sessions/9cc71555-591e-44cf-aec4-25affbdcb405

Co-authored-by: gsknnft <123185582+gsknnft@users.noreply.github.com>

* feat: add truthful backend selection, Hermes adapter hardening, and demo gateway mode

* fix: address bugbot review and finalize backend selection

* fixed - onboarding and hermes calls

* office systems roadmap

* feat specs in docs

* specs ready

* feat: continue custom runtime seam and gateway alignment

* custom lane wired

* feat: add custom runtime provider path and office runtime alignment

* office_sys prep

* tighten multi-floor runtime spec

* multi-floor v1 implementation

* moved floor nav

* runtime architecture specs

* claw3doctor specs

* feat: add first pass claw3doctor diagnostics

* docs: align roadmap with runtime profiles and office systems priorities

* feat: expand claw3doctor provider diagnostics and json output

* feat: improve claw3doctor formatting and multi-runtime diagnostics

* feat: formalize runtime profile resolution

* feat: expand claw3doctor profile health diagnostics

* feat: polish claw3doctor output and tunnel remediation

* feat: add claw3doctor profile scoping and failure classification

* docs: define claw3doctor v1 boundary and v2 backlog

* test: fix stale claw3doctor branch expectations

* test: fix stale expectations on claw3doctor branch

* fix(claw3doctor): scope provider-specific checks to --profile / --all-profiles flags

PR #101 finding:
- Medium: --profile <adapter> and --all-profiles only scoped the profile health
  probe loop; OpenClaw/Hermes/Demo/Custom check blocks still ran based on the
  selected adapter type in runtimeContext, making CLI output misleading.

Fix: introduce adapterInScope(adapterType, defaultBehavior) helper in main().
  - --profile <adapter>  -> only that adapter's checks run
  - --all-profiles       -> all adapter checks run
  - no flag              -> falls back to existing shouldRun* predicate (unchanged)

Also:
- Export parseDoctorArgs from claw3doctor-core.mjs (removed duplicate in script)
- Add test suites: parseDoctorArgs flag parsing (6 cases) and
  adapterInScope scoping semantics (4 cases) — 10 new tests, all green

* fix(office): persist per-floor selectedAgentId on focusLocalAgent + wire officeFloors runtime state

PR #96 findings:
- Medium #1: focusLocalAgent now writes selectedAgentId back to floorRosterCache
  so handleSelectFloor restores the agent the user last picked on each floor
  rather than snapping back to the hydration-time suggestion.
- Medium #2: Add useEffect that calls settingsCoordinator.schedulePatch with
  officeFloors[activeFloorId] patch on every status/gatewayUrl change, writing
  status, gatewayUrl, lastKnownGoodAt, lastErrorCode, and lastErrorMessage so
  the persisted floor runtime state actually tracks live connection transitions.

* fix unkept changes

* fix audit findings - cross-floor misattribution & officefloors silent drops

* pushed changes

* multi-agentic runtime & chat bubble fix

* partial parity with office-sys-next

* claw3doctor parity

* partial parity with v_lane

* merged feat/office-systems-next -> merge_sys

* parity across PR branches

* rm *.orig postmerge

* full parity across unmerged PRs & main

* fix lukes findings

* fix findings - bigger chatbox

* real local upload path

* fixed file upload, MIME integgration

* minor fix

* fix lukess findings

* deleted *.orig

* three bugs fixed - gatewayclient, coord, claw3doctor

* address findings

* fix lukes findings

* fix findings #2

* fix: ignore temporary skill-agent names during identity recovery

* fix: preserve stable identity names during temp-name recovery

* fix(gateway): correct disconnect race and token-blanking on adapter switch

- disconnect() now checks actual connection status rather than selectedAdapterType,
  which may already reflect the target adapter when the effect fires. Prevents stale
  WebSocket clients from persisting after switching to local/claw3d/custom backends.
- setSelectedAdapterType() falls back to loadedGatewaySettings.current.profiles token
  when the in-memory adapterProfiles entry has an empty token (sanitized API form).
  Prevents saved tokens from being cleared when switching between backends.

Closes Luke findings: High (stale gateway on floor switch), Medium (token blanking).

Authored-By: GSKNNFT

* feat(gateway): loopback bypass, control-ui remap, operator.read scope, 75ms connect

Cherry-picked clean additions from pr/gsknnft-2 (fix/reduce-gateway-connect-delay):

- proxy-url.ts: resolveStudioProxyGatewayUrl() now accepts optional upstreamGatewayUrl;
  loopback hosts (localhost/127.0.0.1/::1) bypass the Studio proxy and connect directly
- gateway-proxy.js: remap unauthenticated openclaw-control-ui connections to webchat-ui
  client ID so OpenClaw doesn't reject them as unknown clients
- GatewayBrowserClient.ts + nodeGatewayClient.ts: add operator.read scope to both
  browser and Node gateway clients for expanded access control
- GatewayBrowserClient.ts: reduce socket open→connect delay from 750ms to 75ms

GatewayClient.ts rewrites from that PR were intentionally excluded — they would
regress our disconnect-race fix, token-blanking fix, broken-regex fix, local/claw3d
adapter support, adapterProfiles type export, and private envelope path.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

* fix(floor-nav): show only available floors per active adapter; block hang on unconfigured runtime

- floors.ts: add paperclip to FloorProvider; add listAvailableFloorsForAdapter() —
  lobby always visible, runtime floors only shown when their provider matches the
  active adapter, so demo-only users only see Lobby
- OfficeFloorNav: accept activeAdapterType prop, filter floor list via
  listAvailableFloorsForAdapter(); fall back displayActiveFloorId to lobby if current
  floor is no longer in the available set
- OfficeScreen: pass selectedAdapterType to OfficeFloorNav; add guard in
  handleSelectFloor — bail back to lobby immediately when a runtime floor has no
  gateway URL configured, preventing the connect-hang limbo state

Authored-By: GSKNNFT

* hardening: drop unsafe-eval in production CSP; add TRUSTED_PROXY IP resolution

next.config.ts:
- unsafe-eval removed from production script-src (Next.js dev/HMR needs it, but
  production build does not; React and Three.js make no use of eval)
- connect-src intentionally kept broad with note: gateway URLs are user-configured
  at runtime, cannot be enumerated at build time

server/access-gate.js:
- Add resolveClientIp() helper: when TRUSTED_PROXY=1 env var is set, prefer the
  first value of X-Forwarded-For for rate-limiter keying (correct behavior behind
  nginx/Caddy/Vercel edge). Without the flag, remoteAddress is used (safe default
  for direct exposure — prevents X-Forwarded-For spoofing by untrusted clients).

Authored-By: GSKNNFT

* fix(security): remove upstream tokens from browser API; propagate abort to custom runtime

HIGH — /api/studio: strip gatewayPrivate and localGatewayDefaultsPrivate from GET and
PUT responses. Upstream tokens must not cross the browser API boundary. The Studio
proxy (server/gateway-proxy.js) already injects the server-side token into connect
frames when the browser sends an empty token, so the browser never needed raw tokens.
GatewayClient.ts and OfficeScreen.tsx updated to work from sanitized public settings only.

MEDIUM — /api/runtime/custom route: pass request.signal to the upstream fetch() call.
Client abort (e.g. hitting Stop) now cancels the upstream runtime request instead of
leaving it running after the browser fetch resolves.

Authored By: GSKNNFT

* fix(security): preserve stored token through empty-token UI state; handle non-JSON health responses

GatewayClient.ts — autosave effects no longer overwrite persisted gateway tokens with
empty strings. When the in-memory token is empty (proxy handles auth server-side),
the patch omits the token field (undefined) so mergeGatewaySettings/mergeGatewayProfiles
treats it as "leave unchanged". adapterProfiles updater also preserves the existing
stored token when the new token is empty, preventing floor-switch from erasing tokens.

runtime/custom/http.ts — requestCustomRuntime() checks the response Content-Type before
calling response.json(). Non-JSON responses (e.g. plain-text /health "OK") are returned
as-is instead of throwing a JSON parse error, making the custom/local/claw3d health
probe path reliable for runtimes that return plain text.

Authored By: GSKNNFT

* fix(bug): avoid overwriting stored tokens with an empty UI value

GatewayClient.ts:944 → token: "" || undefined = undefined → omitted from patch
mergeGatewayConnectionState: patch.token === undefined → patchedToken = undefined → nextToken = undefined || current?.token ?? "" = "abc123" ✓

scenarionn- user explicitly clears token (empty string patch):

mergeGatewayConnectionState: patchedToken = "" → nextToken = "" || current?.token ?? "" = falls back to existing stored token

Authored By: GSKNNFT

* fix ongoing findings issue

* test: update gateway connection persistence expectations

Co-authored-by: Luke The Dev <iamlukethedev@users.noreply.github.com>

* fix: tighten ts.net hostname matching in doctor

Co-authored-by: Luke The Dev <iamlukethedev@users.noreply.github.com>

* chore(release): prepare v0.1.4

Pin in-repo app version to 0.1.4 to match the planned GitHub release
tag, and document the convergence release in CHANGELOG.md with verified
0.1.3 and 0.1.4 entries covering runtime profiles, multi-floor offices,
remote messaging/handoffs, file uploads, security hardening, and the
claw3doctor diagnostics CLI.

Made-with: Cursor

---------

Co-authored-by: Cursor Agent <cursoragent@cursor.com>
Co-authored-by: Luke The Dev <iamlukethedev@users.noreply.github.com>
Co-authored-by: Elias Pfeffer <eliaspfeffer@gmail.com>
Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com>
Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Co-authored-by: Greg Clark <greg.clark@gmail.com>
Co-authored-by: iamlukethedev <lucas.guilherme@smartwayslfl.com>
2026-04-23 18:29:20 -05:00

8.4 KiB
Raw Permalink Blame History

Desk Progression Spec

Fifth concrete office-system feature for Claw3D, connecting visible office presence to role maturity, permissions, and capability growth.

Goal

Add a desk progression system so agents visibly grow from limited office members into more capable contributors.

Desk progression should connect:

  • role maturity
  • workspace/tool access
  • permissions
  • office identity
  • visible progression in the environment

The goal is not just cosmetics.

The goal is to make office growth legible and meaningful.

Product Position

Desk progression should be the physical expression of organizational state.

It answers questions like:

  • is this agent an intern or a fully trusted contributor?
  • what tools can they use?
  • how much autonomy do they have?
  • how much context or responsibility should they carry?

In other words:

  • desk progression = visible capability ladder

Why This Feature Matters

Without progression, all agents tend to feel flat.

Desk progression creates:

  • visible hierarchy without requiring a complex org chart first
  • a natural path for permissions and access
  • stronger office storytelling
  • motivation for role specialization and promotion systems later

It also gives you a much cleaner bridge between:

  • abstract policy
  • physical office layout
  • agent identity

Core Principle

Do not start with fake game stats.

Start with operational capability tiers that can later gain more playful flavor.

That means progression should first affect:

  • tool access
  • workspace access
  • review requirements
  • ability to spawn/delegate
  • context budget or workload tolerance

The visual office layer should reflect those operational differences.

Example Role Ladder

Recommended initial tiers:

  • intern
  • probation
  • employee
  • senior
  • lead
  • contractor

These are examples, not hard-coded lore.

Intern

Characteristics:

  • limited tools
  • limited workspace access
  • small or shared desk
  • requires close oversight

Probation

Characteristics:

  • basic desk
  • restricted autonomy
  • still under review for sensitive actions

Employee

Characteristics:

  • normal desk
  • normal task ownership
  • standard office access

Senior

Characteristics:

  • stronger autonomy
  • wider task scope
  • can mentor or review others

Lead

Characteristics:

  • can coordinate others
  • can trigger certain meetings
  • can manage or route work more broadly

Contractor

Characteristics:

  • useful specialist
  • limited long-term authority
  • constrained workspace and access model

Suggested Capability Model

V1 should describe progression in terms of clear capability flags.

Example:

type DeskTier =
  | "intern"
  | "probation"
  | "employee"
  | "senior"
  | "lead"
  | "contractor";

type DeskCapabilityProfile = {
  tier: DeskTier;
  canUseFileTools: boolean;
  canUseWebTools: boolean;
  canInstallSkills: boolean;
  canRequestApprovalsDirectly: boolean;
  canReviewOthers: boolean;
  canTriggerMeetings: boolean;
  canCreateTasks: boolean;
  canDelegateTasks: boolean;
  workspaceAccess: "none" | "limited" | "standard" | "extended";
  contextBudgetClass: "small" | "normal" | "large";
};

The exact values can evolve, but the idea should remain:

  • tier drives visible access differences

Visual Expression

Each tier should map to a clear desk/environment feel.

Examples:

Intern Desk

  • minimal desk
  • no dedicated computer or weaker setup
  • fewer personal objects
  • close to a shared area or support station

Probation Desk

  • basic computer
  • little customization
  • modest footprint

Employee Desk

  • normal workstation
  • standard office setup
  • stable identity in the room

Senior Desk

  • expanded desk
  • more equipment / screens / references
  • visually established presence

Lead Desk

  • premium workstation
  • visibility within the office
  • closer proximity to planning or meeting surfaces

Contractor Desk

  • temporary station
  • portable or isolated feel
  • clearly functional but not deeply embedded

Relationship To Existing Systems

Desk progression should integrate with real Claw3D systems rather than sit beside them.

Permissions

Claw3D already has permission and approval surfaces.

Desk progression should act as a higher-level office policy layer that influences:

  • what defaults an agent gets
  • whether sensitive actions need review
  • what tools or flows are emphasized

Important:

This does not need to replace existing permission logic.

It should help explain and structure it.

Workspace Access

Agents already have real workspaces.

Desk progression should help determine:

  • how much workspace freedom an agent gets
  • whether they operate in restricted or normal modes
  • whether some installs or edits require higher tiers

QA Department

More mature agents can naturally interact differently with QA.

Examples:

  • interns more often route into review
  • seniors can participate in review
  • leads can mark certain work as ready for higher-level signoff

Meeting Room

Meeting behavior can reflect progression.

Examples:

  • leads can call planning meetings
  • seniors can present or facilitate review
  • interns may attend but not control outcomes

Bulletin Board / Whiteboard

More mature tiers may:

  • author higher-priority office notes
  • post official announcements
  • create planning documents for others

Again, this should be treated as office behavior, not roleplay for its own sake.

Promotion / Progression Logic

V1 does not need automatic leveling.

Start with:

  • manual assignment
  • explicit promotion/demotion
  • visible tier on the agent profile

Later, progression can be influenced by:

  • successful task completion
  • review outcomes
  • reliability
  • blockers created vs resolved
  • trust level

Suggested Data Model

Example V1 shape:

type AgentDeskProfile = {
  agentId: string;
  tier: DeskTier;
  assignedDeskUid?: string | null;
  promotedAt?: string | null;
  notes?: string | null;
};

Office-level data:

type OfficePreference = {
  deskProgression?: {
    byAgentId: Record<string, AgentDeskProfile>;
    updatedAt?: string;
  };
};

Human Interaction Model

The human should be able to:

  • view an agents desk tier
  • promote or demote an agent
  • reassign desk placement
  • understand what the tier changes operationally

This should be clear and reversible.

Do not hide progression behind mystery rules.

Agent Interaction Model

Agents may later:

  • request promotion
  • request better tools
  • recommend another agent for a role upgrade
  • be restricted from actions based on tier

But V1 should not depend on autonomous progression requests.

V1 Scope

Recommended V1 scope:

  • define desk tiers
  • persist per-agent desk tier
  • show desk tier in UI
  • apply visual desk differentiation
  • connect tier to a small number of capability differences

Good first capability differences:

  • review / approval expectations
  • delegation rights
  • desk computer presence

Out of Scope For V1

Do not include these initially:

  • hidden progression XP systems
  • complex morale simulation
  • salary/economy systems
  • automatic performance scoring
  • punitive systems that make agents unusable

Keep V1 understandable and operational.

Implementation Strategy

Recommended order:

  1. Define desk tier model and profile storage.
  2. Add UI for viewing and assigning tier.
  3. Add retro-office visual differences by tier.
  4. Connect tier to a small capability profile.
  5. Surface tier in agent details and office presence.

Existing Code Seams

This feature should likely align with:

  • office desk assignment systems
  • agent settings / permissions UI
  • approval and policy surfaces
  • retro office desk rendering
  • office preferences persistence

This matters because progression should feel native to the office, not bolted on.

Success Criteria

V1 is successful if:

  • desk tier is visible and understandable
  • the office reflects agent maturity visually
  • tier differences have real operational meaning
  • the user can promote/demote intentionally
  • the system reinforces office identity instead of distracting from it

Future Extensions

Once V1 is stable, later systems can add:

  • promotion ceremonies or office events
  • hierarchy-aware desk placement
  • department-specific workstation styles
  • probation rules
  • contractor/offsite variants
  • context / workload tuning by tier

Summary

Desk progression should turn office growth into something visible and operational.

It is the cleanest way to connect hierarchy, permissions, workspace access, and office identity without jumping straight into heavy simulation.