1088 Commits
Author SHA1 Message Date
Abhimanyu Saharan 6d57d4a1c7 Archive OpenClaw Mission Control and redirect to Wardn AI
Archived the OpenClaw Mission Control project and directed users to migrate to Wardn AI, detailing the reasons for the archive and providing links for further information.
2026-08-06 12:33:56 +05:30
Abhimanyu Saharan 75eb8b0894 Merge pull request #322 from abhi1693/copilot/fix-gateway-offline-issue
fix: replace hardcoded "platform": "python" with host OS in gateway connect handshake
2026-04-04 20:45:02 +05:30
copilot-swe-agent[bot]andabhi1693 4df25a3d27 fix: replace hardcoded platform python with host OS in gateway_rpc connect params
Agent-Logs-Url: https://github.com/abhi1693/openclaw-mission-control/sessions/594e3cb4-df31-4e4a-972e-8e89f6a6ef24

Co-authored-by: abhi1693 <5083532+abhi1693@users.noreply.github.com>
2026-04-04 14:14:11 +00:00
copilot-swe-agent[bot] 48215644dc Initial plan 2026-04-04 14:10:45 +00:00
Abhimanyu Saharan 94a7da42b0 Merge pull request #314 from abhi1693/dependabot/npm_and_yarn/frontend/npm_and_yarn-bf05dc1ecf
chore(deps): bump the npm_and_yarn group across 1 directory with 1 update
2026-03-28 21:56:48 +05:30
dependabot[bot] 71ddc77fdc chore(deps): bump the npm_and_yarn group across 1 directory with 1 update
Bumps the npm_and_yarn group with 1 update in the /frontend directory: [picomatch](https://github.com/micromatch/picomatch).


Updates `picomatch` from 4.0.3 to 4.0.4
- [Release notes](https://github.com/micromatch/picomatch/releases)
- [Changelog](https://github.com/micromatch/picomatch/blob/master/CHANGELOG.md)
- [Commits](https://github.com/micromatch/picomatch/compare/4.0.3...4.0.4)

Updates `picomatch` from 2.3.1 to 2.3.2
- [Release notes](https://github.com/micromatch/picomatch/releases)
- [Changelog](https://github.com/micromatch/picomatch/blob/master/CHANGELOG.md)
- [Commits](https://github.com/micromatch/picomatch/compare/4.0.3...4.0.4)

---
updated-dependencies:
- dependency-name: picomatch
  dependency-version: 4.0.4
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: picomatch
  dependency-version: 2.3.2
  dependency-type: indirect
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-03-26 13:41:29 +00:00
Abhimanyu Saharan 6a66e463c4 Merge pull request #303 from abhi1693/dependabot/npm_and_yarn/frontend/npm_and_yarn-e5a595f223
chore(deps-dev): bump flatted from 3.3.3 to 3.4.2 in /frontend in the npm_and_yarn group across 1 directory
2026-03-21 02:32:42 +05:30
Abhimanyu Saharan 8bae49d95e Merge pull request #302 from ailuvu-art/fix/assignee-auto-online-on-mission-start
fix(tasks): auto-wake assignee online on assignment/in_progress
2026-03-21 00:40:29 +05:30
dependabot[bot] b747118ffd chore(deps-dev): bump flatted
Bumps the npm_and_yarn group with 1 update in the /frontend directory: [flatted](https://github.com/WebReflection/flatted).


Updates `flatted` from 3.3.3 to 3.4.2
- [Commits](https://github.com/WebReflection/flatted/compare/v3.3.3...v3.4.2)

---
updated-dependencies:
- dependency-name: flatted
  dependency-version: 3.4.2
  dependency-type: indirect
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-03-19 17:52:15 +00:00
Abhimanyu Saharan 1cac7fe277 Merge pull request #295 from abhi1693/dependabot/npm_and_yarn/frontend/npm_and_yarn-229c191f58
chore(deps): bump next from 16.1.6 to 16.1.7 in /frontend in the npm_and_yarn group across 1 directory
2026-03-19 23:20:21 +05:30
openclaw-bot 48bc1eacc8 fix(tasks): allow lead to set inbox→in_progress when assigning agent
The _lead_apply_status gate was too strict: it only permitted leads to
change task status when the task was already in .  This broke
the assignment-and-start shortcut introduced in the wake-assignee
feature, where a lead assigns a worker and simultaneously sets
 from .

Allow the transition  when the lead is also
supplying an  in the same PATCH.  All other
non-review status changes remain forbidden.

Fixes test_lead_assignment_and_in_progress_wakes_assignee_once.
2026-03-19 16:44:20 +00:00
Abhimanyu Saharan 4e21b5cbc3 Merge pull request #300 from Qquanwei/feature/improve-onboarding
feat: objective & Success metrics required when board type is goal
2026-03-19 21:20:29 +05:30
openclaw-bot d77e426603 style(tasks): format wake activity messages for black 2026-03-19 15:28:37 +00:00
openclaw-bot dd5e6efcf8 fix(tasks): address PR review for assignee wake behavior 2026-03-19 14:07:29 +00:00
openclaw-bot 5aeee300ba fix(tasks): wake assignee online on assignment and in-progress 2026-03-19 10:51:27 +00:00
QuanweiLi 548e8c2377 feat: objective & Success metrics required when board type is goal 2026-03-19 18:24:48 +08:00
dependabot[bot] 6facfb5ab0 chore(deps): bump next
Bumps the npm_and_yarn group with 1 update in the /frontend directory: [next](https://github.com/vercel/next.js).


Updates `next` from 16.1.6 to 16.1.7
- [Release notes](https://github.com/vercel/next.js/releases)
- [Changelog](https://github.com/vercel/next.js/blob/canary/release.js)
- [Commits](https://github.com/vercel/next.js/compare/v16.1.6...v16.1.7)

---
updated-dependencies:
- dependency-name: next
  dependency-version: 16.1.7
  dependency-type: direct:production
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-03-17 21:46:14 +00:00
Abhimanyu SaharanandClaude 010bac0005 fix(deploy): provide BASE_URL in docker bootstrap
Populate BASE_URL in the root compose environment and wire it into
the backend and webhook worker so docker-mode installs start cleanly
even when backend/.env is missing or still at example defaults.

Document the docker deployment requirement so manual compose setup and
the installer generate the same public backend origin consistently.

Co-Authored-By: Claude <noreply@anthropic.com>
2026-03-14 03:47:27 +05:30
Abhimanyu Saharan 73b01fcb25 Merge pull request #261 from AndrewNLauder/feat/macos-support
feat: macOS support, run at boot (systemd/launchd), and auth token re-sync
2026-03-10 14:56:19 +05:30
Claude Thebot 7bca8c1ca2 fix: address PR #261 review – remove DOCUMENTATION.md, fix systemd docs and install.sh
- Remove DOCUMENTATION.md (owner request)
- systemd README: fix sed example (use redirection, not -o); add note on user units vs boot (loginctl enable-linger); document REPO_ROOT must not contain spaces
- deployment README: clarify macOS LaunchAgents run at login, not boot; mention LaunchDaemons for true boot
- install.sh: capture install_systemd_services exit; die when --install-service requested and install fails; add REPO_ROOT space check; only print success message on success

Made-with: Cursor
2026-03-09 23:23:30 -07:00
Claude Thebot efee334843 feat: run at boot (systemd/launchd) and auth token re-sync docs
- Add systemd unit examples and README for local install (Linux)
- Extend deployment README with Run at boot (local install) and merge upstream
- Add Re-syncing auth tokens subsection to gateway provisioning troubleshooting
- install.sh: add --install-service to install systemd user units (Linux)
- DOCUMENTATION.md: session notes

Made-with: Cursor
2026-03-09 22:25:31 -07:00
Abhimanyu Saharan f7932d962a Merge pull request #252 from 0xjjjjjj/fix/mobile-responsive
fix: mobile-responsive layout, Bun builds, z-index fixes
2026-03-09 02:06:23 +05:30
0xjjjjjjandClaude Opus 4.6 7adadd5c88 fix: use data-cy selector for sidebar backdrop in e2e tests
The aria-hidden="true" selector matched 27 elements (icons, etc.)
causing cy.click() to fail. Add data-cy="sidebar-backdrop" to the
overlay div and target that specifically in tests.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-03-08 10:01:31 -07:00
0xjjjjjjandClaude Opus 4.6 fab19ed5aa fix: use correct DashboardMetrics shape in mobile sidebar e2e stubs
The dashboard page accesses metrics.throughput.primary.points which
requires the full DashboardMetrics type structure. The original stub
returned a flat object with wrong fields, causing TypeError in all
authenticated tests. Also adds stubs for boards, agents, activity,
gateways, and board-groups APIs that the dashboard and boards pages
query on load.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-03-08 09:41:49 -07:00
Abhimanyu Saharan 162b820880 Merge branch 'master' into fix/mobile-responsive 2026-03-08 12:58:59 +05:30
Abhimanyu Saharan fe6ff69d5c Merge pull request #253 from 0xjjjjjj/fix/dockerfile-chown-only
perf: replace chown -R with COPY --chown in Dockerfiles
2026-03-08 12:58:37 +05:30
0xjjjjjjandClaude Opus 4.6 fad1e99329 test: add Cypress e2e tests for mobile sidebar behavior
Cover auth negative, viewport responsiveness, toggle open/close,
backdrop dismiss, navigation auto-close, and Escape key dismiss.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-03-07 21:42:05 -08:00
0xjjjjjjandClaude Opus 4.6 3bc4dcaf55 fix: normalize sidebar width to 260px, add responsive padding to approvals
Align desktop sidebar width (was w-64/256px) with header column and
grid template (both 260px). Apply missing p-4 md:p-6 responsive
padding to the global approvals page.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-03-07 21:28:58 -08:00
0xjjjjjjandClaude Opus 4.6 74792593b2 fix: reset sidebar state on navigation to prevent ghost re-open
Use React's canonical "store info from previous renders" pattern:
conditional setState during render resets sidebar when pathname
changes, preventing the sidebar from re-opening on back-navigation.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-03-07 21:28:55 -08:00
0xjjjjjjandClaude Opus 4.6 2519af2395 fix: use derived state for sidebar close on navigation
Replace useRef-based previous pathname tracking (which violated
react-hooks/refs) with a derived state pattern. Sidebar state stores
{open, path} and sidebarOpen is computed as a pure expression,
avoiding both set-state-in-effect and refs-during-render lint errors.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-03-07 21:20:37 -08:00
0xjjjjjjandClaude Opus 4.6 9396be6fc0 fix: chown /app directory after user creation
Ensure the /app WORKDIR itself is owned by appuser (not just copied
files), preventing runtime failures if the app writes to /app directly.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-03-07 20:45:25 -08:00
0xjjjjjjandClaude Opus 4.6 42368f84bf perf: replace chown -R with COPY --chown in both Dockerfiles
Move user/group creation before COPY statements so --chown flag can
set ownership at copy time, avoiding the slow recursive chown on
overlay2 filesystems (docker/for-linux#388).

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-03-07 20:38:09 -08:00
0xjjjjjjandClaude Opus 4.6 f0ab3e315b fix: address Copilot review — z-index, Escape key, signed-out UX
- Raise header to z-50 so toggle button stays clickable above backdrop
- Use document keydown listener for Escape instead of onKeyDown on backdrop
- Only render hamburger toggle when signed in
- Make SignedOutPanel col-span responsive (col-span-1 on mobile)

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-03-07 20:19:39 -08:00
0xjjjjjjandClaude Opus 4.6 7a0eb7b24a fix: avoid setState in useEffect for sidebar close on navigation
Use ref-based previous pathname check instead of useEffect + setState,
which triggers the react-hooks/set-state-in-effect lint rule.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-03-07 20:18:08 -08:00
0xjjjjjjandClaude Opus 4.6 e85e714076 fix: bump mobile sidebar z-index above sticky page headers
Sidebar and backdrop were z-30, same as sticky page headers (live feed,
boards, etc.), causing the hamburger menu to render behind page content.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-03-07 20:11:22 -08:00
0xjjjjjjandClaude Opus 4.6 ea0149bd88 fix: mobile-responsive layout for dashboard and board views
Add hamburger menu with off-canvas sidebar drawer on mobile.
Responsive padding, full-width panels, and stacked layouts
for screens under 768px (md breakpoint).

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-03-07 20:11:22 -08:00
Abhimanyu Saharan fa445127d9 Merge pull request #242 from abhi1693/abhi1693/fix/security-review-hardening
fix(security): Replay PR 207 with follow-up fixes
2026-03-08 00:18:01 +05:30
Abhimanyu Saharan 793c8983cb fix(ci): sort rate limit test imports 2026-03-08 00:06:45 +05:30
Abhimanyu Saharan cc3024acc3 fix(security): Address PR review feedback 2026-03-08 00:01:23 +05:30
Abhimanyu Saharan b3cb604776 Merge branch 'master' into abhi1693/fix/security-review-hardening 2026-03-07 23:47:27 +05:30
Abhimanyu Saharan 6d2ff60a82 fix(security): Stop logging raw trusted proxy entries 2026-03-07 23:47:00 +05:30
Abhimanyu SaharanandClaude 46bc9a02c6 fix(security): Keep short agent token prefixes in logs
Restore the existing short token-prefix logging behavior for agent auth failures while keeping the optional bearer-path rate-limit fix. Update tests and docs so the replacement branch reflects the intended logging policy.

Co-Authored-By: Claude <noreply@anthropic.com>
2026-03-07 23:43:32 +05:30
Abhimanyu SaharanandClaude fb8a932923 fix(security): Close review follow-up gaps
Rate-limit the optional agent bearer path after user auth resolution so mixed user/agent routes no longer leave an unthrottled PBKDF2 path. Stop logging token prefixes on agent auth failures and require a locally supplied token for backend/.env.test instead of committing one.

Update tests and docs to cover agent bearer fallback, configurable webhook signature headers, and the operator-facing security settings added by the hardening work.

Co-Authored-By: Claude <noreply@anthropic.com>
2026-03-07 23:40:50 +05:30
Hugh BrownandCopilot 355bed1b40 Update backend/app/api/board_webhooks.py
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
2026-03-07 23:35:10 +05:30
Hugh BrownandCopilot 370256a4fd Update backend/.env.test
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
2026-03-07 23:35:10 +05:30
Hugh BrownandClaude Opus 4.6 e80cf9f3c8 fix: suppress mypy no-untyped-call for redis.asyncio.from_url
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-03-07 23:35:10 +05:30
Hugh BrownandClaude Opus 4.6 e053fd4a46 fix: share a single async Redis client per URL to avoid duplicate connection pools
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-03-07 23:35:10 +05:30
Hugh BrownandClaude Opus 4.6 a30b94c887 fix: redact credentials from Redis URL in rate-limit error messages
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-03-07 23:35:10 +05:30
Hugh BrownandClaude Opus 4.6 c5716897d7 fix: add BASE_URL to migration check env vars in Makefile
The BASE_URL validation added to Settings breaks the CI migration check
which only sets AUTH_MODE, LOCAL_AUTH_TOKEN, and DATABASE_URL.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-03-07 23:35:10 +05:30
Hugh Brown 5989adedea Apply ruff reformatting 2026-03-07 23:35:10 +05:30