* fix: include kanbanImmersive in immersiveOverlayActive calculation When Kanban board is open, HUD elements (camera preset buttons, edit toolbar, overlays) should be suppressed. The kanbanImmersive flag was defined but not included in the immersiveOverlayActive condition, causing HUD elements to remain visible. This fix adds kanbanImmersive to the immersiveOverlayActive calculation so HUD elements are properly hidden when the Kanban board is open. Co-authored-by: Luke The Dev <iamlukethedev@users.noreply.github.com> * Fix: Hide mini status bar when Kanban immersive overlay is open Wraps the bottom-left mini status bar (showing agent stats, vibe score, and control hints) with !immersiveOverlayActive check to match the behavior of other HUD elements like camera controls and toolbar. This ensures the status bar is properly hidden when the Kanban board or any other immersive overlay is active, maintaining a clean immersive experience. Co-authored-by: Luke The Dev <iamlukethedev@users.noreply.github.com> * chore: drop unrelated package-lock line from branch Co-authored-by: Luke The Dev <iamlukethedev@users.noreply.github.com> * universal-backend-plan * backend-neutral runtime seam * package.json update * feat: add Hermes gateway adapter as alternative to OpenClaw Adds a WebSocket adapter that lets Claw3D connect to a Hermes AI agent runtime without any changes to the frontend. The adapter implements the full Claw3D gateway protocol and bridges it to the Hermes HTTP API. Changes: - server/hermes-gateway-adapter.js: WebSocket bridge implementing the Claw3D gateway protocol against the Hermes HTTP API. Supports all core methods (agents, sessions, chat streaming, cron, config, files, approvals) and multi-agent orchestration via spawn_agent/delegate_task tools. Persists conversation history to ~/.hermes/clawd3d-history.json. - scripts/clawd3d-start.sh: All-in-one startup script that launches Hermes, the adapter, and the Next.js dev server with auto port conflict resolution. Alias as `claw3d` for convenience. - src/features/office/hooks/useCronAgents.ts: Hook that polls the gateway for cron-scheduled agents and surfaces them in the 3D office. - package.json: adds `hermes-adapter` npm script - .env.example: documents Hermes config vars - docs/hermes-gateway.md: setup guide and protocol reference Usage: npm run hermes-adapter # start adapter (connect to http://localhost:8642) npm run dev # start Claw3D, point browser at localhost:3000 # or: bash scripts/clawd3d-start.sh (starts everything automatically) Both OpenClaw and Hermes are supported simultaneously — the gateway URL in NEXT_PUBLIC_GATEWAY_URL determines which backend Claw3D connects to. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> * feat: add read_agent_context tool for cross-agent coordination Agents can now read each other's conversation history via the read_agent_context tool, enabling the orchestrator to check what a sub-agent has done before re-delegating work. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> * feat: wire Hermes office UX and role-aware runtime updates * feature update - demomode & hermes adapter * fix lint blockers * lintfix #2 * fix: stabilize retro office camera preset callbacks * Initial plan * fix: stabilize retro office overview preset hooks Agent-Logs-Url: https://github.com/gsknnft/Claw3D/sessions/9cc71555-591e-44cf-aec4-25affbdcb405 Co-authored-by: gsknnft <123185582+gsknnft@users.noreply.github.com> * feat: add truthful backend selection, Hermes adapter hardening, and demo gateway mode * fix: address bugbot review and finalize backend selection * fixed - onboarding and hermes calls * office systems roadmap * feat specs in docs * specs ready * feat: continue custom runtime seam and gateway alignment * custom lane wired * feat: add custom runtime provider path and office runtime alignment * office_sys prep * tighten multi-floor runtime spec * multi-floor v1 implementation * moved floor nav * runtime architecture specs * claw3doctor specs * feat: add first pass claw3doctor diagnostics * docs: align roadmap with runtime profiles and office systems priorities * feat: expand claw3doctor provider diagnostics and json output * feat: improve claw3doctor formatting and multi-runtime diagnostics * feat: formalize runtime profile resolution * feat: expand claw3doctor profile health diagnostics * feat: polish claw3doctor output and tunnel remediation * feat: add claw3doctor profile scoping and failure classification * docs: define claw3doctor v1 boundary and v2 backlog * test: fix stale claw3doctor branch expectations * test: fix stale expectations on claw3doctor branch * fix(claw3doctor): scope provider-specific checks to --profile / --all-profiles flags PR #101 finding: - Medium: --profile <adapter> and --all-profiles only scoped the profile health probe loop; OpenClaw/Hermes/Demo/Custom check blocks still ran based on the selected adapter type in runtimeContext, making CLI output misleading. Fix: introduce adapterInScope(adapterType, defaultBehavior) helper in main(). - --profile <adapter> -> only that adapter's checks run - --all-profiles -> all adapter checks run - no flag -> falls back to existing shouldRun* predicate (unchanged) Also: - Export parseDoctorArgs from claw3doctor-core.mjs (removed duplicate in script) - Add test suites: parseDoctorArgs flag parsing (6 cases) and adapterInScope scoping semantics (4 cases) — 10 new tests, all green * fix(office): persist per-floor selectedAgentId on focusLocalAgent + wire officeFloors runtime state PR #96 findings: - Medium #1: focusLocalAgent now writes selectedAgentId back to floorRosterCache so handleSelectFloor restores the agent the user last picked on each floor rather than snapping back to the hydration-time suggestion. - Medium #2: Add useEffect that calls settingsCoordinator.schedulePatch with officeFloors[activeFloorId] patch on every status/gatewayUrl change, writing status, gatewayUrl, lastKnownGoodAt, lastErrorCode, and lastErrorMessage so the persisted floor runtime state actually tracks live connection transitions. * fix unkept changes * fix audit findings - cross-floor misattribution & officefloors silent drops * pushed changes * multi-agentic runtime & chat bubble fix * partial parity with office-sys-next * claw3doctor parity * partial parity with v_lane * merged feat/office-systems-next -> merge_sys * parity across PR branches * rm *.orig postmerge * full parity across unmerged PRs & main * fix lukes findings * fix findings - bigger chatbox * real local upload path * fixed file upload, MIME integgration * minor fix * fix lukess findings * deleted *.orig * three bugs fixed - gatewayclient, coord, claw3doctor * address findings * fix lukes findings * fix findings #2 * fix: ignore temporary skill-agent names during identity recovery * fix: preserve stable identity names during temp-name recovery * fix(gateway): correct disconnect race and token-blanking on adapter switch - disconnect() now checks actual connection status rather than selectedAdapterType, which may already reflect the target adapter when the effect fires. Prevents stale WebSocket clients from persisting after switching to local/claw3d/custom backends. - setSelectedAdapterType() falls back to loadedGatewaySettings.current.profiles token when the in-memory adapterProfiles entry has an empty token (sanitized API form). Prevents saved tokens from being cleared when switching between backends. Closes Luke findings: High (stale gateway on floor switch), Medium (token blanking). Authored-By: GSKNNFT * feat(gateway): loopback bypass, control-ui remap, operator.read scope, 75ms connect Cherry-picked clean additions from pr/gsknnft-2 (fix/reduce-gateway-connect-delay): - proxy-url.ts: resolveStudioProxyGatewayUrl() now accepts optional upstreamGatewayUrl; loopback hosts (localhost/127.0.0.1/::1) bypass the Studio proxy and connect directly - gateway-proxy.js: remap unauthenticated openclaw-control-ui connections to webchat-ui client ID so OpenClaw doesn't reject them as unknown clients - GatewayBrowserClient.ts + nodeGatewayClient.ts: add operator.read scope to both browser and Node gateway clients for expanded access control - GatewayBrowserClient.ts: reduce socket open→connect delay from 750ms to 75ms GatewayClient.ts rewrites from that PR were intentionally excluded — they would regress our disconnect-race fix, token-blanking fix, broken-regex fix, local/claw3d adapter support, adapterProfiles type export, and private envelope path. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> * fix(floor-nav): show only available floors per active adapter; block hang on unconfigured runtime - floors.ts: add paperclip to FloorProvider; add listAvailableFloorsForAdapter() — lobby always visible, runtime floors only shown when their provider matches the active adapter, so demo-only users only see Lobby - OfficeFloorNav: accept activeAdapterType prop, filter floor list via listAvailableFloorsForAdapter(); fall back displayActiveFloorId to lobby if current floor is no longer in the available set - OfficeScreen: pass selectedAdapterType to OfficeFloorNav; add guard in handleSelectFloor — bail back to lobby immediately when a runtime floor has no gateway URL configured, preventing the connect-hang limbo state Authored-By: GSKNNFT * hardening: drop unsafe-eval in production CSP; add TRUSTED_PROXY IP resolution next.config.ts: - unsafe-eval removed from production script-src (Next.js dev/HMR needs it, but production build does not; React and Three.js make no use of eval) - connect-src intentionally kept broad with note: gateway URLs are user-configured at runtime, cannot be enumerated at build time server/access-gate.js: - Add resolveClientIp() helper: when TRUSTED_PROXY=1 env var is set, prefer the first value of X-Forwarded-For for rate-limiter keying (correct behavior behind nginx/Caddy/Vercel edge). Without the flag, remoteAddress is used (safe default for direct exposure — prevents X-Forwarded-For spoofing by untrusted clients). Authored-By: GSKNNFT * fix(security): remove upstream tokens from browser API; propagate abort to custom runtime HIGH — /api/studio: strip gatewayPrivate and localGatewayDefaultsPrivate from GET and PUT responses. Upstream tokens must not cross the browser API boundary. The Studio proxy (server/gateway-proxy.js) already injects the server-side token into connect frames when the browser sends an empty token, so the browser never needed raw tokens. GatewayClient.ts and OfficeScreen.tsx updated to work from sanitized public settings only. MEDIUM — /api/runtime/custom route: pass request.signal to the upstream fetch() call. Client abort (e.g. hitting Stop) now cancels the upstream runtime request instead of leaving it running after the browser fetch resolves. Authored By: GSKNNFT * fix(security): preserve stored token through empty-token UI state; handle non-JSON health responses GatewayClient.ts — autosave effects no longer overwrite persisted gateway tokens with empty strings. When the in-memory token is empty (proxy handles auth server-side), the patch omits the token field (undefined) so mergeGatewaySettings/mergeGatewayProfiles treats it as "leave unchanged". adapterProfiles updater also preserves the existing stored token when the new token is empty, preventing floor-switch from erasing tokens. runtime/custom/http.ts — requestCustomRuntime() checks the response Content-Type before calling response.json(). Non-JSON responses (e.g. plain-text /health "OK") are returned as-is instead of throwing a JSON parse error, making the custom/local/claw3d health probe path reliable for runtimes that return plain text. Authored By: GSKNNFT * fix(bug): avoid overwriting stored tokens with an empty UI value GatewayClient.ts:944 → token: "" || undefined = undefined → omitted from patch mergeGatewayConnectionState: patch.token === undefined → patchedToken = undefined → nextToken = undefined || current?.token ?? "" = "abc123" ✓ scenarionn- user explicitly clears token (empty string patch): mergeGatewayConnectionState: patchedToken = "" → nextToken = "" || current?.token ?? "" = falls back to existing stored token Authored By: GSKNNFT * fix ongoing findings issue * test: update gateway connection persistence expectations Co-authored-by: Luke The Dev <iamlukethedev@users.noreply.github.com> * fix: tighten ts.net hostname matching in doctor Co-authored-by: Luke The Dev <iamlukethedev@users.noreply.github.com> * chore(release): prepare v0.1.4 Pin in-repo app version to 0.1.4 to match the planned GitHub release tag, and document the convergence release in CHANGELOG.md with verified 0.1.3 and 0.1.4 entries covering runtime profiles, multi-floor offices, remote messaging/handoffs, file uploads, security hardening, and the claw3doctor diagnostics CLI. Made-with: Cursor --------- Co-authored-by: Cursor Agent <cursoragent@cursor.com> Co-authored-by: Luke The Dev <iamlukethedev@users.noreply.github.com> Co-authored-by: Elias Pfeffer <eliaspfeffer@gmail.com> Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com> Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com> Co-authored-by: Greg Clark <greg.clark@gmail.com> Co-authored-by: iamlukethedev <lucas.guilherme@smartwayslfl.com>
8.4 KiB
Desk Progression Spec
Fifth concrete office-system feature for Claw3D, connecting visible office presence to role maturity, permissions, and capability growth.
Goal
Add a desk progression system so agents visibly grow from limited office members into more capable contributors.
Desk progression should connect:
- role maturity
- workspace/tool access
- permissions
- office identity
- visible progression in the environment
The goal is not just cosmetics.
The goal is to make office growth legible and meaningful.
Product Position
Desk progression should be the physical expression of organizational state.
It answers questions like:
- is this agent an intern or a fully trusted contributor?
- what tools can they use?
- how much autonomy do they have?
- how much context or responsibility should they carry?
In other words:
- desk progression = visible capability ladder
Why This Feature Matters
Without progression, all agents tend to feel flat.
Desk progression creates:
- visible hierarchy without requiring a complex org chart first
- a natural path for permissions and access
- stronger office storytelling
- motivation for role specialization and promotion systems later
It also gives you a much cleaner bridge between:
- abstract policy
- physical office layout
- agent identity
Core Principle
Do not start with fake game stats.
Start with operational capability tiers that can later gain more playful flavor.
That means progression should first affect:
- tool access
- workspace access
- review requirements
- ability to spawn/delegate
- context budget or workload tolerance
The visual office layer should reflect those operational differences.
Example Role Ladder
Recommended initial tiers:
internprobationemployeeseniorleadcontractor
These are examples, not hard-coded lore.
Intern
Characteristics:
- limited tools
- limited workspace access
- small or shared desk
- requires close oversight
Probation
Characteristics:
- basic desk
- restricted autonomy
- still under review for sensitive actions
Employee
Characteristics:
- normal desk
- normal task ownership
- standard office access
Senior
Characteristics:
- stronger autonomy
- wider task scope
- can mentor or review others
Lead
Characteristics:
- can coordinate others
- can trigger certain meetings
- can manage or route work more broadly
Contractor
Characteristics:
- useful specialist
- limited long-term authority
- constrained workspace and access model
Suggested Capability Model
V1 should describe progression in terms of clear capability flags.
Example:
type DeskTier =
| "intern"
| "probation"
| "employee"
| "senior"
| "lead"
| "contractor";
type DeskCapabilityProfile = {
tier: DeskTier;
canUseFileTools: boolean;
canUseWebTools: boolean;
canInstallSkills: boolean;
canRequestApprovalsDirectly: boolean;
canReviewOthers: boolean;
canTriggerMeetings: boolean;
canCreateTasks: boolean;
canDelegateTasks: boolean;
workspaceAccess: "none" | "limited" | "standard" | "extended";
contextBudgetClass: "small" | "normal" | "large";
};
The exact values can evolve, but the idea should remain:
- tier drives visible access differences
Visual Expression
Each tier should map to a clear desk/environment feel.
Examples:
Intern Desk
- minimal desk
- no dedicated computer or weaker setup
- fewer personal objects
- close to a shared area or support station
Probation Desk
- basic computer
- little customization
- modest footprint
Employee Desk
- normal workstation
- standard office setup
- stable identity in the room
Senior Desk
- expanded desk
- more equipment / screens / references
- visually established presence
Lead Desk
- premium workstation
- visibility within the office
- closer proximity to planning or meeting surfaces
Contractor Desk
- temporary station
- portable or isolated feel
- clearly functional but not deeply embedded
Relationship To Existing Systems
Desk progression should integrate with real Claw3D systems rather than sit beside them.
Permissions
Claw3D already has permission and approval surfaces.
Desk progression should act as a higher-level office policy layer that influences:
- what defaults an agent gets
- whether sensitive actions need review
- what tools or flows are emphasized
Important:
This does not need to replace existing permission logic.
It should help explain and structure it.
Workspace Access
Agents already have real workspaces.
Desk progression should help determine:
- how much workspace freedom an agent gets
- whether they operate in restricted or normal modes
- whether some installs or edits require higher tiers
QA Department
More mature agents can naturally interact differently with QA.
Examples:
- interns more often route into review
- seniors can participate in review
- leads can mark certain work as ready for higher-level signoff
Meeting Room
Meeting behavior can reflect progression.
Examples:
- leads can call planning meetings
- seniors can present or facilitate review
- interns may attend but not control outcomes
Bulletin Board / Whiteboard
More mature tiers may:
- author higher-priority office notes
- post official announcements
- create planning documents for others
Again, this should be treated as office behavior, not roleplay for its own sake.
Promotion / Progression Logic
V1 does not need automatic leveling.
Start with:
- manual assignment
- explicit promotion/demotion
- visible tier on the agent profile
Later, progression can be influenced by:
- successful task completion
- review outcomes
- reliability
- blockers created vs resolved
- trust level
Suggested Data Model
Example V1 shape:
type AgentDeskProfile = {
agentId: string;
tier: DeskTier;
assignedDeskUid?: string | null;
promotedAt?: string | null;
notes?: string | null;
};
Office-level data:
type OfficePreference = {
deskProgression?: {
byAgentId: Record<string, AgentDeskProfile>;
updatedAt?: string;
};
};
Human Interaction Model
The human should be able to:
- view an agent’s desk tier
- promote or demote an agent
- reassign desk placement
- understand what the tier changes operationally
This should be clear and reversible.
Do not hide progression behind mystery rules.
Agent Interaction Model
Agents may later:
- request promotion
- request better tools
- recommend another agent for a role upgrade
- be restricted from actions based on tier
But V1 should not depend on autonomous progression requests.
V1 Scope
Recommended V1 scope:
- define desk tiers
- persist per-agent desk tier
- show desk tier in UI
- apply visual desk differentiation
- connect tier to a small number of capability differences
Good first capability differences:
- review / approval expectations
- delegation rights
- desk computer presence
Out of Scope For V1
Do not include these initially:
- hidden progression XP systems
- complex morale simulation
- salary/economy systems
- automatic performance scoring
- punitive systems that make agents unusable
Keep V1 understandable and operational.
Implementation Strategy
Recommended order:
- Define desk tier model and profile storage.
- Add UI for viewing and assigning tier.
- Add retro-office visual differences by tier.
- Connect tier to a small capability profile.
- Surface tier in agent details and office presence.
Existing Code Seams
This feature should likely align with:
- office desk assignment systems
- agent settings / permissions UI
- approval and policy surfaces
- retro office desk rendering
- office preferences persistence
This matters because progression should feel native to the office, not bolted on.
Success Criteria
V1 is successful if:
- desk tier is visible and understandable
- the office reflects agent maturity visually
- tier differences have real operational meaning
- the user can promote/demote intentionally
- the system reinforces office identity instead of distracting from it
Future Extensions
Once V1 is stable, later systems can add:
- promotion ceremonies or office events
- hierarchy-aware desk placement
- department-specific workstation styles
- probation rules
- contractor/offsite variants
- context / workload tuning by tier
Summary
Desk progression should turn office growth into something visible and operational.
It is the cleanest way to connect hierarchy, permissions, workspace access, and office identity without jumping straight into heavy simulation.