471 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
dtoro	04677fdf4b	tool timeline in sidebar + compact chat tools + scroll fixes ... - SessionDigest now includes live tool timeline, plan steps, knowledge - ToolCallGroup compact: single-line with collapsible names only (no JSON) - Activity bar moved to bottom of messages, smart scroll respects user position - setGoal now sets status=executing (removed stuck planning state) - PlanProgress merged into SessionDigest, removed from TaskContextPanel - New toolTimeline derived store in chat.ts	2026-07-14 11:45:36 +02:00
dtoro	cc6bcdceaa	scroll fixes + activity bar position ... - Activity bar moved to bottom of message list (before messagesEnd) - Smart scroll: auto-scroll only during streaming or when near bottom - Scrolling up pauses auto-scroll until next send - Removed duplicate $effect block - Plan: tool timeline in sidebar (plans/2026-07-14-tool-timeline-sidebar.md)	2026-07-14 11:37:52 +02:00
dtoro	5b403141ea	fix: VERSION file resolution in Docker build context ... - Dockerfile now copies VERSION into /build/web/VERSION for vite - vite.config.ts tries ../VERSION (local dev) then ./VERSION (Docker)	2026-07-14 11:13:58 +02:00
dtoro	7847cdffd6	add version display in UI sidebar + version bump rules ... - VERSION file at repo root (0.3.0) - vite.config.ts reads VERSION at build time, injects __OIKOS_VERSION__ - App.svelte shows version in sidebar tooltip + subtle text below logo - AGENTS.md §9: every commit to main MUST bump VERSION (patch=bugfix, minor=new features, major=breaking changes)	2026-07-14 11:11:53 +02:00
dtoro	dce19bd258	fix: PlanProgress template syntax error — multi-statement inline expression	2026-07-14 11:04:47 +02:00
dtoro	60effcb2fe	session reliability: reconnect, knowledge loop, retire request_execution ... Phase 1 — crash recovery: SSE auto-reconnect + backoff, polling gate during disconnect, connection banner with retry button, empty-response retry 3x, non-terminal resume on empty response, persistent error cards. Phase 2/4 — visibility + continuation: custom ExecutionStatus renderer, approvals extracted on every tool_result (not just done), activity bar with status/goal, SessionDigest live polling, Continue button. Phase 3 — cleanup: complete_task auto-cancels orphaned approvals, deletes assent/destructive window keys, propose_plan marks pending steps as replaced, plan step seq-order enforcement. Phase 5 — knowledge loop: list_lxcs state filter (active/destroyed), SOUL.md unmissable writeback section, propose_plan validation nudge, complete_task writeback check, upsert_knowledge about array support, plan generation grouping in frontend, session approval count badge. Retire request_execution — all mutations now route through run. Updated SOUL.md, AGENTS.md, CLIENTS.md, skills, and agent system notes. Migration 020: plan step generation column, audit_log session_id index, nomos_plan_executions pending-approval index.	2026-07-14 11:03:23 +02:00
dtoro	b446909ea5	Tray icon: white logo, 10% smaller, rsvg-convert rendering	2026-07-14 09:06:42 +02:00
dtoro	dd27630be3	Tray icons: use rsvg-convert for proper SVG rendering with transparency	2026-07-14 09:04:53 +02:00
dtoro	e78a3e9048	Tray icons: strip white bg from qlmanage render, use actual SVG logo	2026-07-14 09:01:19 +02:00
dtoro	5e3e4eaf07	Tray icons: extract logo from app .icns, proper transparency	2026-07-14 08:58:41 +02:00
dtoro	7087d1ffea	Tray icon: use app .icns (matches Dock icon)	2026-07-14 08:57:12 +02:00
dtoro	6c7631d425	Tray icon: use original .icns file (native macOS icon format)	2026-07-14 08:55:37 +02:00
dtoro	c4ac0cb935	Tray icon: black for light mode, white for dark mode	2026-07-14 08:52:24 +02:00
dtoro	6090ef71d4	Tray: icon only (no label), transparent bg for template icon	2026-07-14 08:46:47 +02:00
dtoro	06c6f4eb8c	Fix window close: use RegisterHook to hide instead of destroy ... RegisterHook + e.Cancel() prevents Wails from destroying the WebView when the window is closed. The app now hides to the system tray. Left- click on the tray icon correctly restores the window.	2026-07-14 00:34:01 +02:00
dtoro	7063c90898	Rename app to Oikos (was oikos-desktop) ... - Binary: oikos-desktop → Oikos - Bundle: oikos-desktop.app → Oikos.app - Install path: /Applications/Oikos.app - Auto-update paths updated - CI Linux binary renamed	2026-07-14 00:31:05 +02:00
dtoro	aca6b8bcc2	Update plan status with final iteration details	2026-07-14 00:28:13 +02:00
dtoro	eeb78ed3c6	docs: update CONTRIBUTING, remove wails3 CLI dependency ... - Makefile desktop target uses go build directly (no wails3 required) - CI workflow simplified: go build instead of wails3 build - CONTRIBUTING: add make install, desktop auth docs, auto-update docs - CONTRIBUTING: add file listing for icon.png, icon.icns, Taskfile, plist	2026-07-14 00:28:00 +02:00
dtoro	bcef4e6456	Add manual update check to tray menu, /update/check endpoint ... - Tray 'Check for Updates' now checks immediately and shows dialog - Dialog has 'Install' and 'Later' buttons - /update/check endpoint on local server for SPA to query	2026-07-14 00:25:35 +02:00
dtoro	23535eac25	Auto-update: download + install + restart ... - CheckForUpdates binding returns version string if newer available - InstallUpdate binding downloads zip, extracts, replaces app, restarts - checkUpdates goroutine polls every 6h, shows dialog with version - make install copies .app to /Applications - Update script: quit app → sleep → replace .app → relaunch	2026-07-14 00:22:15 +02:00
dtoro	bcf2b265c5	Pass apiUrl through OIDC redirect so SPA has it on return ... The apiUrl configured on the Config page was lost when the webview navigated away to localhost and back. Now it's included in the return URL as ?desktop=1&apiUrl=...&token=...	2026-07-14 00:18:21 +02:00
dtoro	cea67ccd15	Remove accidentally committed binary	2026-07-14 00:13:20 +02:00
dtoro	2bd7de355b	Desktop OIDC: full page nav to localhost, meta redirect back ... SPA navigates to 127.0.0.1:18901/oidc/start, passing ret URL. Go opens browser, waits for callback, saves token, returns HTML with <meta refresh> back to Wails app with ?desktop=1&token=TOKEN. main.ts extracts token from URL on reload.	2026-07-14 00:13:01 +02:00
dtoro	8b3fe02a10	Desktop OIDC: non-blocking fetch + poll, don't leave webview ... SPA fetches /oidc/open (returns session ID immediately), then polls /oidc/result every 500ms. Go server opens browser in a goroutine. Webview never leaves the Wails origin. Token is saved to keychain and returned through the poll response.	2026-07-14 00:09:46 +02:00
dtoro	c8ef3793d7	Keep trailing slash on authorize endpoint URL	2026-07-14 00:06:56 +02:00
dtoro	d7197c1952	Desktop OIDC: redirect webview to local server, Go opens browser ... The webview navigates to http://127.0.0.1:18901/oidc/open?apiUrl=... The Go server opens the system browser to Authentik, waits for callback, exchanges code for token, saves to keychain, then redirects the webview back with ?desktop=1&token=TOKEN. main.ts extracts the token from URL.	2026-07-14 00:04:49 +02:00
dtoro	cac5524402	Detect desktop via URL param not config	2026-07-14 00:02:12 +02:00
dtoro	56e509d506	Desktop OIDC: open in system browser via window.open, revert to copy-paste ... The local HTTP server approach (fetch to 127.0.0.1) doesn't work in the Wails webview. Simplify: use window.open() to launch OIDC in the real browser. After authentication, the callback page at the server shows the token. User copies and pastes into the Token tab. Also fix: SetSize before app.Run() crashes with nil pointer — use WebviewWindowOptions width/height directly from restored state.	2026-07-14 00:00:24 +02:00
dtoro	68011f9a06	Add OIDC server startup logging	2026-07-13 23:56:33 +02:00
dtoro	a395771960	Fix doubled /authorize/ in OIDC auth URL	2026-07-13 23:54:19 +02:00
dtoro	5664a4bf29	OIDC: local HTTP server instead of Wails bindings ... The Wails runtime isn't reliably loading for IPC calls. Replace the binding-based StartOIDCLogin with a local HTTP server on 127.0.0.1:18901: - /oidc/login?apiUrl=... — opens system browser, waits for token - /oidc/callback — Authentik redirect target, exchanges code - /oidc/config?apiUrl=... — fetches OIDC provider config - SPA detects desktop via ?desktop=1 URL param - SPA calls localhost directly via fetch() instead of Wails IPC	2026-07-13 23:52:08 +02:00
dtoro	ff6608f9ea	Use default Wails asset handler + GetStoredConfig binding ... - Remove custom asset handler — it broke Wails IPC routing - Use application.AssetFileServerFS(distFS) so Wails serves its own runtime - Add GetStoredConfig binding: SPA calls it on startup to retrieve keychain config - main.ts: loadDesktopConfig() fetches stored creds before mounting - Remove runtime.js embed (Wails serves it internally)	2026-07-13 23:45:54 +02:00
dtoro	0271727709	Embed Wails runtime.js, serve it from custom asset handler ... The SPA needs /wails/runtime.js for window.wails to be available. Since we use a custom AssetOptions.Handler, Wails' internal routing doesn't serve it. Embed the runtime and serve it explicitly.	2026-07-13 23:40:50 +02:00
dtoro	c31978042f	Desktop OIDC: open system browser, capture callback on localhost ... ConfigService.StartOIDCLogin(): - Fetches OIDC config from the API - Generates PKCE params - Starts local HTTP server on 127.0.0.1:18901 - Opens system browser to Authentik - Captures callback directly (no copy-paste) - Exchanges code for token, saves to keychain - Returns token to SPA → auto-connects Config.svelte detects Wails environment and calls the binding.	2026-07-13 23:37:17 +02:00
dtoro	5699a3f758	Shrink logo 30% in app icon and tray icon	2026-07-13 23:32:53 +02:00
dtoro	44c0145683	App icon: white logo on black rounded-rectangle background	2026-07-13 23:31:27 +02:00
dtoro	de7eca8b6d	Regenerate icon.icns from SVG source with proper transparency ... The old icon.icns was copied from favicon.png which was actually a dark-background .icns file. Regenerated from favicon.svg via qlmanage → sips → iconutil to get white logo on transparent bg.	2026-07-13 23:29:17 +02:00
dtoro	f6e2079a61	Fix OIDC login in desktop: sync apiUrl before startLogin, add app icon ... - Config.svelte: call setConfig() before startLogin() so fetchConfig uses the user-entered server URL - Makefile: copy icon.icns into .app bundle Resources - Info.plist: add CFBundleIconFile entry	2026-07-13 23:27:12 +02:00
dtoro	515c9b9174	fix(web): stack auth options vertically in config screen	2026-07-13 23:16:50 +02:00
dtoro	f1ac82255a	Add OIDC desktop callback, app logo, rename to Oikos ... - Server: /oidc-callback HTML page exchanges Authentik code for token, displays it for user to copy into the desktop app's Token tab - oidc.ts: desktop mode uses apiUrl+/oidc-callback as redirect URI, encodes PKCE verifier in state parameter - Config.svelte: add Server URL field to OIDC tab for desktop UX - Caddy: add /oidc-callback to enroll bypass (no Authentik gate) - App: favicon.png as system tray icon, window title 'Oikos' - web/index.html: title 'Oikos'	2026-07-13 23:14:40 +02:00
dtoro	62a337f3cc	feat(web): redesign config screen with animated particle background and unified auth layout	2026-07-13 23:12:16 +02:00
dtoro	35ff3f37e1	Fix macOS packaging: create .app bundle manually ... wails3 build v3 alpha delegates to Taskfile; the go build produces a raw binary, not a .app. Package step now creates the bundle structure (Contents/MacOS, Info.plist) and zips it.	2026-07-13 23:03:16 +02:00
dtoro	8f121cfa1e	Drop -clean flag from wails3 build — not supported in v3 alpha	2026-07-13 23:00:45 +02:00
dtoro	1c3a800506	Drop macOS CI job — no macOS runner available. Single Linux build. ... macOS builds happen locally via 'make desktop-package' on the dev Mac.	2026-07-13 23:00:04 +02:00
dtoro	a429436903	Trigger desktop CI on every push to main, not just tags desktop-0.1.0	2026-07-13 22:54:00 +02:00
dtoro	07d67c8446	fix(oidc): strip trailing slash from redirect URI to match Authentik strict mode	2026-07-13 22:50:31 +02:00
dtoro	8b50753746	feat(chat): MCP tool apps — custom inline renderers for 12 tools ... 12 of 33 MCP tools now render as rich inline cards instead of raw JSON: EntityCard, HealthSummary, LXCList, EntityTable, KnowledgeResults, BlastRadius, ChangeLog, FleetSnapshot, MetricChart. Architecture: - Server: annotateJSONResult() wraps queryRows with __renderer hints - Registry: match/dispatch system maps tool names to Svelte components - Chat: inline dispatch with 5-card limit, overflow to collapsed group - ToolCallGroup: unmatched prop, hides when all matched, ARIA labels Tests: 3 new Go tests for annotateJSONResult (wrap, no-op, multi-row).	2026-07-13 22:46:56 +02:00
dtoro	680575e2cf	Remove unrelated plan file from stale branch	2026-07-13 22:41:50 +02:00
dtoro	6b52c1ae57	Move 2026-07-12-wails-desktop-app plan to done/ ... Phase 0 deployed 2026-07-12. Phases 1.0–1.4 implemented 2026-07-13. Plan complete.	2026-07-13 22:41:45 +02:00
dtoro	5d6d9e9040	Merge feature/wails-desktop-app into main	2026-07-13 22:40:40 +02:00