34 Commits

Author	SHA1	Message	Date
devops	4633e570e8	fix(agents): finish sanitized config migration — GatewayClient also reads agents-sanitized.json ... The previous commit f4bee44 updated AgentService.cs but missed OpenClawGatewayClient.cs which also reads agent IDs and model config from the raw openclaw.json. Both LoadAgentIdsFromConfig() and GetAvailableModels() now default to /etc/nexus/agents-sanitized.json. This completes the P4 migration: Nexus no longer needs read access to openclaw.json for any code path.	2026-07-12 14:09:31 +02:00
devops	f4bee442db	feat: sanitized agent config — Nexus no longer reads secrets from openclaw.json ... - Mount agents-sanitized.json (agents key only, no secrets) instead of full openclaw.json - Update AgentService default path from /home/node/.openclaw/openclaw.json to /etc/nexus/agents-sanitized.json - Add AgentConfigPath env var to compose for explicit path configuration - Generate sanitized file in deploy-nexus.sh before each deploy using Python extraction - Add agents-sanitized.json to .gitignore Eliminates the fragile ACL on openclaw.json (uid 1654) that causes 500 errors on the Board endpoint when lost.	2026-07-12 13:08:43 +02:00
devops	aef76d5f45	feat(board): master-task board, non-destructive stall watchdog, review flow ... Board is now a clean master-task view: - GetBoardAsync returns only top-level (master) tasks; child-tasks render nested inside their parent card instead of as separate column cards, so a big task split into many sub-tasks stays one card (orphans treated as master) - New DoneChildTaskCount on the DTO for real progress bars - Child/detail consumers (GetChildren endpoint, TaskBridgeService) query children directly instead of scraping the flat board Stall watchdog (replaces destructive auto-reset): - StaleTaskRecoveryService.FlagStalledInProgressTasksAsync marks In-progress tasks with no activity past the threshold as stalled (activity event + Iris notification) WITHOUT resetting the column — no work is discarded. Idempotent: a task is not re-flagged until real progress happens - BackgroundService now runs this watchdog (TaskRecovery:StalledMinutes=40, interval 10m); hard reset kept only on the explicit manual endpoint Review flow (Bao/Iris only): - POST tasks/{id}/approve (Review -> Done) - POST tasks/{id}/request-changes (Review -> target, mandatory comment, ExpectedFrom=iris, notifies Iris) Frontend: - BoardCard component: master card with ball chip (who has it), progress from children, expand to show children grouped by agent with per-child state + stalled marker, stalled chip on the master, review action buttons - Request-changes modal; tasks store approveReview/requestChanges actions Tests: watchdog flag/idempotency + review threshold; 135 backend tests green. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>	2026-07-10 22:26:50 +02:00
devops	f564ecfbc7	feat: unified rail shell, robust live sync, task board performance ... Shell: - One shared NexusLayout for ALL routes (dashboard + pages): compact 68px icon rail with hover-expand overlay, replaces both old sidebars + topbars - Single flat nav source (railNav) — same menu everywhere incl. Settings - Removed dead shell components (AppSidebar, AppHeader, Topbar, NavGroup, NavItem, ModuleView) and dead nav routes; App.vue is now just RouterView Live updates: - Fix SSE loop in DashboardController: PeriodicTimer.WaitForNextTickAsync and ChannelReader.ReadAsync were re-invoked while pending — every published update threw InvalidOperationException and killed ALL live streams - liveSync store: treat graceful stream close as disconnect (was stuck connected=true with polling stopped -> page frozen until manual reload), fast first retry, heartbeat watchdog (65s), reconnect on online/visibility - One app-wide SSE connection owned by the layout instead of per-view connect/disconnect churn; removed duplicate live-sync.ts store Performance: - Board endpoint: drop nested childTasks duplication (counts stay) — payload 104KB -> 65KB; SSE snapshots shrink equally - nginx: gzip for JSON/JS/CSS (board 18KB, bundle 95KB over the wire); text/event-stream excluded to keep SSE unbuffered Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>	2026-07-10 13:25:26 +02:00
devops	aaec3eb4ed	feat: complete Nexus mission-control workflows	2026-07-09 23:40:36 +02:00
devops	873c5d586c	fix: repair agent model converter build	2026-06-24 01:26:56 +02:00
devops	95495a8332	feat: complete task board workflow gates	2026-06-24 01:23:49 +02:00
devops	a2272c5df6	fix: harden owner bootstrap and auth persistence	2026-06-24 01:22:55 +02:00
devops	df94ed3cd4	feat: board-first orchestration with Gateway Bridge, live-update, and flow-board ... - GatewayBridgeController: MCP-artiger Kommando-Adapter für Agent-zu-Backend - TaskBridgeService + LiveUpdateService: SSE Live-Sync + Bridge-Kommandos - FlowBoard.vue: Board-first orchestration dashboard panel - live-sync.ts store + live.ts service: SSE-basierte Live-Updates - Nullability-Warnung in HealthController.cs gefixt - nginx.conf: SSE-Proxy + CORS für Bridge-Endpunkte - .gitignore: pnpm/corepack local caches ausgeschlossen - docs: architecture-board-first-orchestration.md hinzugefügt - README: Backend Bridge API dokumentiert	2026-06-22 19:56:45 +02:00
devops	ac131f7f53	feat: Parent-Child TaskFlow — Delegated durch sichtbare Child-Tasks ersetzt ... - Delegated State aus Board, Entities, DTOs, Frontend-Spalten und Tests entfernt - Parent-Tasks bleiben InProgress waehrend delegierter Agentenarbeit - Child-Tasks laufen sichtbar mit normalen States und parentTaskId - Doku: README, Phase 3, Changelog, Controller-Kommentare angepasst - openclaw-task-board-flow.md als Referenzdoku hinzugefuegt - 73/73 Backend-Tests gruen, Frontend-Build gruen	2026-06-21 21:30:52 +02:00
devops	adae7ba26d	feat: ship agent progress visibility	2026-06-20 20:22:54 +02:00
devops	06eac66baa	fix: postgres WAL corruption recovery + memory bump + researcher/executor ... - Postgres memory: 256M→384M limits, 64M→96M reservations - Added pg_resetwal -f pre-deploy step to recover from corrupt WAL ('PANIC: could not locate a valid checkpoint record' caused by force-killed postgres during --force-recreate) - Added data-checksums initdb arg for future corruption detection - api→postgres and web→api depends_on: service_healthy→service_started - Deploy wait loop: fail fast on unhealthy, wait on starting (180s) - Added researcher/executor to ValidAssignees and frontend dropdowns	2026-06-20 18:56:11 +02:00
devops	83e072bc27	feat: Bao/Iris-Statusrechte + Bao→Iris-Notifications + Agent-Workflow-Übersicht ... - Bao darf jetzt Status ändern (neben Iris), Sub-Agents weiterhin nicht - CanEditContent für Inhaltsbearbeitung durch alle bekannten Caller - Bao-Content-Änderungen triggern task_content_changed-Notification an Iris - Bao-Status-Änderungen triggern task_status_changed-Notification an Iris - Iris-Status-Änderungen triggern task_status_changed-Notification an Bao - Neue WorkTask-Felder: IsAgentTask (bool), ExpectedFrom (string) - Agent-Workflow-API: CreateAgentTask, WaitingTasks, AgentOverview - Frontend: Agent-Task-Badge, Iris-Overview-Panel, isBao-Getter - Login-Rate-Limiter mit strukturiertem JSON-Fehlermeldungs-Body - Volume-Name: nexus-postgres → postgres-data (Standardisierung)	2026-06-20 18:43:05 +02:00
devops	e4091eee80	feat: Multi-User/Admin usermanagement + Galaxy Login/Settings + Task detail improvements ... - Backend: NEW AdminController with user CRUD (GET/POST/DELETE /api/v1/admin/users) - Backend: NEW GET /api/dashboard/tasks/{id} single task endpoint - Backend: NEW POST /api/dashboard/tasks/{id}/activity comment endpoint - Backend: IUserRepository + UserRepository extended with GetAllAsync, DeleteAsync - Backend: Admin DTOs (AdminUserInfo, AdminCreateUserRequest, AdminUpdateRoleRequest) - Frontend: NEW TaskDetailView.vue — URL-based (/tasks/:id) Galaxy-themed task detail with subtask create/edit/delete, activity with comments, property sidebar - Frontend: LoginView.vue — полностью Galaxy theme redesign with GalaxyBackground, glass-morphism card, password toggle, consistent brand - Frontend: SettingsView.vue — Galaxy theme redesign with glass cards, admin user management section (create/list users, visible only to owner role) - Frontend: TaskBoardView.vue — added "Full View" link to URL-based detail page - Frontend: Router — added /tasks/:id route for TaskDetailView - Frontend: App.vue — added TaskDetail to standaloneViews whitelist - Frontend: tasks store — stable Auth: Admin creates accounts, users log in with existing /api/v1/auth/login. Login/Settings deliver visible Galaxy-consistent design with nexus-tokens.css tokens.	2026-06-20 14:24:40 +02:00
devops	dcc8450c62	feat: Phase 2 — Delegated State, Auth, Review-Gate, Notifications, Zombie-Reset	2026-06-18 23:47:41 +02:00
devops	5e7d074593	feat: Linear-style Task Board mit Drag&Drop	2026-06-18 21:34:07 +02:00
reviewer	45a39d319f	Fix operations CI and snapshots	2026-06-14 09:14:24 +02:00
reviewer	4ad0f9e493	refactor: SOLID architecture — backend service layer + frontend V2 components ... ## Backend — Service Layer & Repository Refactoring ### Neue Services (21 neue Dateien) **Interfaces & Implementierungen:** - `IOpenClawGatewayClient` — Interface für OpenClawGatewayClient (DIP-Fix: DashboardController hing an konkreter Klasse) - `IAgentConfigService` / `AgentConfigService` — Agent-Config-File-I/O aus AgentsController extrahiert - `IProjectService` / `ProjectService` — Projekt-CRUD + Activity-Logging (SRP) - `ITaskService` / `TaskService` — Task-State-Machine, Approve/Reject, Dashboard-Operationen (eliminiert Duplikation zwischen TasksController und DashboardController) - `IDashboardService` / `DashboardService` — Queue-Aggregation, Priority-Normalisierung, Gateway-Delegation - `IOperationsService` / `OperationsService` — Metriken-Berechnung aus OperationsController - `ITeamService` / `TeamService` — IDENTITY.md-Lesen aus TeamController - `IMemoryService` / `MemoryService` — File-I/O aus MemoryController - `IIncidentService` / `IncidentService` — File-Parsing (Regex-Source-Generatoren) aus IncidentsController - `IDocService` / `DocService` — Directory-Scan aus DocsController - `ICalendarService` / `CalendarService` — Gateway-HTTP-Calls + Fallback-Daten aus CalendarController ### Repository-Fixes **IUserRepository / UserRepository:** - `SaveChangesAsync` entfernt (leaky abstraction — Caller sollten nie SaveChanges steuern) - `RevokeTokenAsync(tokenHash)` — atomares Token-Revoke inkl. SaveChanges - `RevokeFamilyAsync(familyId)` — Batch-Revoke einer Token-Familie inkl. SaveChanges - `RemoveExpiredTokensAsync` speichert jetzt selbst (war vorher dependent auf nachfolgenden Save) ### AuthService-Fixes - `GetUserAsync`: unnötiges `Task.Run` entfernt → direkt `_users.GetByIdAsync().AsTask()` - `RevokeAsync`: delegiert jetzt an `IUserRepository.RevokeTokenAsync` - `RefreshAsync`: Token-Reuse-Detection delegiert an `IUserRepository.RevokeFamilyAsync` ### Bug-Fix - `OpenClawGatewayClient.ReadAgentGoalAsync`: pre-existing `CS1656` behoben (`reader` war `using`-Variable und wurde neu zugewiesen — in `reader2` umbenannt) ### Controller (16 Stück — alle slim) Alle Controller reduziert auf: Input validieren → Service aufrufen → HTTP-Result zurückgeben. Kein Business-Logic, kein File-I/O, keine direkte Repository-Nutzung (außer AgentsController für Activity-Log). **Program.cs — neue Registrierungen:** - `AddHttpClient<IOpenClawGatewayClient, OpenClawGatewayClient>` (war vorher konkrete Klasse) - Scoped: IDashboardService, IProjectService, ITaskService, IOperationsService, ITeamService, ICalendarService - Singleton: IAgentConfigService, IMemoryService, IIncidentService, IDocService --- ## Frontend — Dashboard V2 Components **AgentDetailModal.vue, IrisChat.vue, TaskStrip.vue:** - V2 Design-System: Dark Space Theme, Glass-Panels, Gradient-Akzente - Stores (agents, chat, tasks) nutzen Service + Mapper-Pattern - NexusLayout, FlowBoard, Topbar — Layoutfixes für fullHeight-Route-Meta Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-06-14 08:34:58 +02:00
developer	1a7bf8ca11	revert: remove Claude models (API not working)	2026-06-11 18:11:02 +02:00
developer	3907548a1d	feat(models): add Claude Sonnet 4.6 + Opus 4.8, mount openclaw.json in API container	2026-06-11 17:11:59 +02:00
developer	b1888bd8ef	feat(dashboard): AgentModal live working feed & thinking stream	2026-06-11 16:13:28 +02:00
developer	c29740a466	feat(dashboard): dynamic agent metrics + model list from config, no more hardcoded data	2026-06-11 16:01:33 +02:00
developer	5fb62bef8a	feat(queue): erweiterte Queue mit Cron-Jobs + Tasks, Prioritäten, Delete/Priority API	2026-06-11 15:58:12 +02:00
developer	97b8588dc3	feat(dashboard): multi-agent operations feed aggregating all agent sessions	2026-06-11 15:54:32 +02:00
developer	6a1366b472	feat(dashboard): dynamic agent data from gateway sessions instead of hardcoded list	2026-06-11 15:48:33 +02:00
developer	b7b44494f0	fix(shadcn): isolate Nexus CSS vars with --nx- prefix + admin password reset endpoint	2026-06-11 10:06:58 +02:00
developer	51d1917a7b	fix: GetSessionHistory parst content[] blocks korrekt ... - Messages aus result.details.messages extrahieren - Content = Array von {type, text} blocks → nur text extrahieren - Thinking-Blocks + REPLY_SKIP + ANNOUNCE_SKIP herausfiltern	2026-06-10 01:14:08 +02:00
developer	e1d6b1eeb3	fix: Chat via agentId statt sessionKey + reply aus details parsen ... - SendChatMessageAsync: sessions_send nutzt agentId (nicht sessionKey) - Reply parsen aus result.details.reply (sessions_send Antwort-Struktur) - ChatRequest.Model: SessionKey → AgentId - Controller default: 'iris' → Agent-ID (nicht Session-Key)	2026-06-10 00:58:04 +02:00
developer	dd509a75be	fix: Agents hartcodiert mit File-Activity-Detection ... - Tools/invoke Visibility scoped auf agent:main → keine Iris-Sessions sichtbar - Hardcoded 6 Agenten mit korrekten Models - Activity: checkt /mnt/workspace-{id}/memory Dateizeitstempel	2026-06-10 00:33:49 +02:00
developer	c120155170	fix: GatewayClient robuste Response-Parsing + Isolierte Try/Catch ... - ExtractToolData: unwraps content[0].text JSON + details - GetStatusAsync: separates try/catch per step (ping, session, agents, queue) - GetAgentsAsync: parses gateway agents[] array from sessions_list - GetQueueAsync: extracts from cron response data.jobs - gatewayOk no longer overridden by downstream tool errors	2026-06-10 00:30:36 +02:00
developer	889af65ae7	fix: GatewayClient Tool-Namen + Response-Unwrapping ... - sub_agents_list → subagents (action: list) - cron_list → cron (action: list) - Ping / → /health - Unwrap {ok, result} envelope in InvokeToolAsync	2026-06-10 00:26:22 +02:00
developer	f707dceb98	feat: Dashboard Backend Proxy – OpenClaw Gateway Integration ... - DashboardController: /api/dashboard/status, agents, operations, chat/send, chat/messages, queue - OpenClawGatewayClient: typed HttpClient mit Gateway tools/invoke - Dashboard DTOs: DashboardAgentInfo, ChatRequest, ChatResponse, FeedEntry, QueueItem - Gateway auth: Bearer-Password via Integrations:OpenClaw:Password - Gateway-Down → graceful degradation (HTTP 200, leere Daten) - Build: 0 errors, Tests: 3/3 passed	2026-06-10 00:20:49 +02:00
iris	a79d8282dc	refactor: Clean Architecture mit Repository Pattern, Controllern und DTOs ... - 15 Controller-Klassen ersetzen Minimal APIs in Program.cs - Repository Pattern mit Interfaces + Implementierungen (Project, Task, Activity, User) - AuthService verwendet jetzt IUserRepository statt direktem DbContext-Zugriff - SecurityHeadersMiddleware als eigenständige Middleware-Klasse - PathSecurityHelper als gemeinsamer Helper für Pfadvalidierung - DTOs in eigenem Namespace Nexus.Api.DTOs - EF-Entities in Nexus.Api.Data (vorher Nexus.Api.Domain) - Program.cs auf DI-Registrierung + Middleware reduziert - Alle 43 Endpoints unverändert erhalten - Build + 3/3 Tests erfolgreich	2026-06-09 19:52:58 +02:00
bao	eeb6174de0	Initial commit: Nexus Mission Control Platform ... - ASP.NET Core 10 Backend (JWT Auth, Agent config API) - Vue 3 Frontend (Dashboard, Team, Agents, Config Editor) - PostgreSQL Database - Docker Compose setup - Mission Control Dashboard redesign	2026-06-09 16:31:56 +02:00