feat: ship agent-first mission control v0.2.57
This commit is contained in:
AzuTear
@@ -0,0 +1,93 @@
|
||||
# Nexus Core Route Evaluation
|
||||
|
||||
**Stand:** 2026-07-28
|
||||
**Bewertungsziel:** Wie nah ist jede Seite an einer agent-first Mission Control,
|
||||
die tägliche OpenClaw-Bedienung ersetzt?
|
||||
|
||||
## Zusammenfassung
|
||||
|
||||
The core route set is now coherent and functionally connected, but Nexus is not
|
||||
yet complete OpenClaw parity.
|
||||
|
||||
| Dimension | Reife | Bewertung |
|
||||
|---|---:|---|
|
||||
| Browser -> Nexus -> OpenClaw trust boundary | 9/10 | Correct architectural boundary; no provider secrets in the browser |
|
||||
| Gateway protocol foundation | 7/10 | Protocol v4, states, scopes and reconnect exist; remote device pairing and live interop proof remain |
|
||||
| Runtime visibility | 8/10 | Tasks, sessions, agents, approvals, cron, models and events are visible |
|
||||
| Safe runtime mutations | 5/10 | Cancel, abort, model patch, approval and run-now work; lifecycle coverage is incomplete |
|
||||
| Agent-first operator workflow | 6/10 | Iris, Run Control and contextual recovery work; start/resume/retry/artifacts are incomplete |
|
||||
| Full daily OpenClaw replacement | 4/10 | Tools, config, nodes, channels, complete scheduler and recovery are still missing |
|
||||
| Production proof | 3/10 | Contract/browser QA is green; credentialed OpenClaw/OpenAI E2E is not yet recorded |
|
||||
|
||||
**Overall:** solid functional control-plane foundation, not yet a production
|
||||
claim of “OpenClaw is no longer needed for normal operation.”
|
||||
|
||||
## Route-by-route evaluation
|
||||
|
||||
| Route | Current functional state | OpenClaw integration | Highest-value next improvement |
|
||||
|---|---|---|---|
|
||||
| `/login` | Owner login, rotating refresh path and return-to-route work; overlapping refresh race fixed | Indirect: protects every facade route | Add passkeys/2FA, device/session management and explicit recovery |
|
||||
| `/dashboard` | Live orchestration dominates the workspace; Iris chat is an on-demand modal; model change works | Agents, sessions, tasks, activity, Gateway health and chat are real Nexus-facade data | Add streaming chat, stop/retry, live usage/cost and run-start intent |
|
||||
| `/runs` | Functional work graph, inspector, tasks, sessions, approvals, cron and recent activity | Strongest integrated surface; cancel, abort, approve/deny and run-now are wired | Add start/resume/retry/branch, durable run deep links, tool trace and artifact output |
|
||||
| `/agents` | Runtime inventory with status, model and workspace-safe metadata | Live `agents.list` plus session state | Add create/import, enable/disable, restart, capability/tool policy and drift |
|
||||
| `/agents/:id` | Agent identity, activity and config workspace render; dashboard model selection patches a session | Live agents, sessions, activity and `sessions.patch` | Add session explorer, lifecycle controls, tools, budget, effective permissions and evals |
|
||||
| `/projects` | Functional Nexus portfolio and create flow | Shared connection/recovery context; project remains correctly Nexus-owned | Correlate active OpenClaw runs, agents, approvals, usage and artifacts per project |
|
||||
| `/projects/:id` | Project detail, progress and task list work | Same explicit runtime boundary | Add “delegate to Iris”, run start, project automation, budget and artifact timeline |
|
||||
| `/tasks` | Parent/child task board works and opens real details; horizontal board scrolling is intentional | Shared OpenClaw status and Run Control handoff | Persist task <-> session/run correlation and add retry/resume/cancel at the task |
|
||||
| `/tasks/:id` | Detail, children, activity and task mutations work | Runtime boundary is visible, but the Nexus task remains the domain record | Add linked session/run, approvals, tool calls, artifacts and replay |
|
||||
| `/memory` | Search, list, selected-file and empty states work | Connection/recovery is explicit; data remains Nexus/workspace-owned | Add OpenClaw ingestion status, scope, provenance, freshness, retention and retrieval evals |
|
||||
| `/docs` | Category/search/list/reader and empty states work | Same safe boundary as Memory | Add upload/import, versioning, citations, sync status and approval |
|
||||
| `/models` | Live catalog, provider filter, availability reasons and detail dialog work | Direct typed `models.list`; no hardcoded UI catalog | Add OpenAI auth-profile status, primary/alias/fallback policy, limits, budgets and test run |
|
||||
| `/activity` | Search, type/source filters and event details work | OpenClaw runtime events and Nexus events share one surface | Add durable correlation ID, actor/diff, pagination, export, retention and trace links |
|
||||
| `/calendar` | Live schedule list, next/last run and owner-confirmed run-now work | `cron.list` and admin-scoped `cron.run` | Add create/edit/enable/pause/delete, timezone editor, run history, retry and delivery |
|
||||
| `/security` | Real Nexus JWT settings and OpenClaw trust/pairing boundary are visible | Connection, version and trust posture are no longer invented | Add effective scope/policy audit, 2FA/passkeys, sessions/devices, secret rotation and remediation |
|
||||
| `/incidents` | Incident list/detail selection and Run Control recovery link work | Runtime status is visible; incident content remains Nexus-owned | Add create/ack/assign/escalate/resolve, event correlation, remediation and postmortem |
|
||||
| `/notifications` | Unread state, target routing, mark-read and mark-all work; OpenClaw approvals are summarized | Live approval queue is visible | Add inline decision, snooze, quiet hours, preference routing and incident actions |
|
||||
| `/settings` | Profile/password/users plus read-only Gateway diagnostics work | Endpoint, version, protocol, scopes and recovery are visible without secrets | Add paired-device setup, validated config forms, provider policy and controlled reload/rollback |
|
||||
|
||||
The old `/chat` page is intentionally removed. Iris is a contextual modal on
|
||||
the dashboard and a global entry links to that real destination.
|
||||
|
||||
## Capability gaps that still force OpenClaw or break-glass access
|
||||
|
||||
### P0
|
||||
|
||||
- paired device identity for remote/container Gateway access;
|
||||
- one real OpenAI-over-OpenClaw E2E proof with negative auth and reconnect;
|
||||
- start, resume, retry and durable deep link for a run/session;
|
||||
- durable Nexus task/project <-> OpenClaw run/session correlation;
|
||||
- audit/correlation/idempotency for every privileged mutation.
|
||||
|
||||
### P1
|
||||
|
||||
- agent lifecycle and effective tool permissions;
|
||||
- model/auth-profile/fallback/budget policy editing;
|
||||
- complete cron CRUD and history;
|
||||
- tool/approval trace and artifacts;
|
||||
- incident lifecycle and recovery actions;
|
||||
- knowledge ingestion, provenance and retrieval evaluation.
|
||||
|
||||
### P2
|
||||
|
||||
- channels, connectors and node inventory/pairing;
|
||||
- config schema forms, diff, backup, reload and rollback;
|
||||
- provider usage/cost/latency dashboards;
|
||||
- eval datasets, regression gates, export and retention.
|
||||
|
||||
## Recommendation
|
||||
|
||||
Do not broaden the navigation again yet. The highest-value next slice is one
|
||||
real, durable run:
|
||||
|
||||
```text
|
||||
Iris intent
|
||||
-> create/start OpenClaw run
|
||||
-> correlate Nexus project/task
|
||||
-> observe session and tool events
|
||||
-> owner approval
|
||||
-> artifact/result
|
||||
-> stop/retry/reload recovery
|
||||
```
|
||||
|
||||
That single path will close more of the “return to OpenClaw” gap than adding
|
||||
more read-only pages.
|
||||
Reference in New Issue
Block a user