ciregenz
0ba7d86fef
agent: block claude.ai partner MCPs in prompt + at SDK layer
...
claude_code preset auto-attaches the user's claude.ai-connected partner
MCPs (mcp__claude_ai_*). They bypass MCPActivate, don't share OAuth
state with OpenSwarm's Gmail/Drive/Calendar connectors, and confuse
the model into picking the partner shim instead of our vetted server.
Hard-block via disallowed_tools + add a system-prompt rule.
2026-05-20 02:03:22 -07:00
ciregenz
178a6060eb
gmail: route OAuth refresh through cloud rotation-pool proxy
...
google-workspace-mcp's gauth.py hardcodes token_uri to oauth2.googleapis.com
and uses local CLIENT_ID/SECRET on every refresh. OAuth runs through a
rotation pool on the cloud side, so the refresh_token is bound to the
pool slot that minted it, not the single client baked into the DMG, and
direct refreshes return unauthorized_client. Redirect spawn through a
shim that monkey-patches get_credentials to point token_uri at a local
proxy (/api/tools/google-oauth-token), which forwards the refresh to
api.openswarm.com/api/oauth/google/refresh (pool-aware). Unblocks every
Gmail/Drive/Calendar query for users on the cloud OAuth pool.
2026-05-20 01:58:59 -07:00
ciregenz
a1fefa0ae8
[eric] approvals: trust patterns for action approvals + smarter sensitive-file gating
2026-05-20 01:56:38 -07:00
ciregenz
9001cb8e38
[eric] DMG/EXE slim ~445 MB: drop legacy onboarding videos, per-arch node + lipo-thin uv, electronLanguages=[en], exclude backend/data + uv-bin
...
from bundle rsync (closes dev auth.token / install_id leak), strip pip + Tcl/Tk + pydoc_data + _pyrepl, both platforms
2026-05-20 01:52:47 -07:00
ciregenz
a5277cb732
[eric] ci: skip gitleaks scan when new-branch push has no commits ahead of main
...
Workflow's new-branch fallback fell through to a full repo scan whenever
merge-base with main equaled HEAD (empty range). That re-flagged every
historical secret a prior PR had already cleared. Now: empty range means
nothing new to scan, log + exit clean. Genuine no-shared-history case
still falls through to full scan.
2026-05-20 01:51:57 -07:00
ciregenz
fa6a8f0f1d
bump version to 1.1.37
2026-05-19 22:10:55 -07:00
ciregenz
49e0ed3d2f
experimental updates: opt-in prerelease channel via settings toggle + semver-suffix auto-detect in publish
2026-05-19 22:10:22 -07:00
ciregenz
03e995b6f0
[eric] 1.0.37 hotfix: roll back to 1.0.35 codebase
2026-05-19 16:10:17 -07:00
ciregenz
490a3047cf
[eric] production push 1.0.35
2026-05-15 22:13:20 -07:00
ciregenz
51a4b5dcaa
[eric] frontend perf: instant collapses, lazy app editor, stale-id reap
2026-05-15 21:43:55 -07:00
ciregenz
9078326268
[eric] smooth bits-anim placeholder + retry on Vite cold-start + restore dashboard right-click
2026-05-15 17:04:58 -07:00
ciregenz
058cb0c52f
[eric] frontend perf: streaming slice + canvas coalescing + lazy paths
2026-05-15 16:11:58 -07:00
ciregenz
1c3aab08dd
[eric] trackpad navigation optimizaton for ux
2026-05-15 10:13:22 -07:00
ciregenz
09e0174139
[eric] canvas lag optimizations
2026-05-14 22:27:45 -07:00
ciregenz
abf4f9ba0b
[eric] production push 1.0.34
2026-05-14 18:37:45 -07:00
ciregenz
1455ccef11
[eric] desktop carries a tag now
2026-05-14 11:55:48 -07:00
ciregenz
5d3cfcec2d
[eric] Mac publish fixes: NODE_OPTIONS heap + rsync excludes for user-state and template_cache
2026-05-14 01:42:31 -07:00
ciregenz
531e3df28f
[eric] retag 1.0.33
2026-05-13 19:41:47 -07:00
ciregenz
e840b1b7f0
[eric] sub bug fix
2026-05-13 19:05:04 -07:00
ciregenz
ae54680635
[eric] WIP polish — app builder runtime + react-vite template tweaks, dashboard toolbar/card refinements, PixelBlast accent, runtime-preview hook,
...
sign-in gate + settings updates
2026-05-13 18:30:55 -07:00
ciregenz
ea55dbe53a
[eric] App Builder skill: duplicate-React crash fix recipe
2026-05-13 14:12:51 -07:00
ciregenz
db38311a8d
[eric] fix prod regressions: __import__ scrub broke imports + Windows path gate
2026-05-13 13:20:19 -07:00
ciregenz
ccec204bc7
[eric] security: gate Write/Edit on sensitive paths + restore HOME/PATH for force-mode Outputs
2026-05-13 11:49:33 -07:00
ciregenz
afe11b6f37
[eric] outputs: HITL preview for risky backend.py + workspace path-traversal hardening
2026-05-13 10:50:15 -07:00
ciregenz
1b0e6c35eb
[eric] App Builder polish + onboarding fix
2026-05-13 00:24:51 -07:00
ciregenz
91508c87b1
[eric] onboarding bug fix and ux op
2026-05-12 22:36:22 -07:00
ciregenz
c0c52e33d6
[eric] App Builder saves to sidebar on seed + onboarding fallbacks (auto-skip rules, fallback prompts, retry popup)
2026-05-12 13:11:56 -07:00
ciregenz
a84aec257b
[eric] App Builder uses real React/Vite scaffold + onboarding polish (auto sidebar expand, bigger pill, video crop), onboarding bugs / edgecases
2026-05-11 23:23:59 -07:00
ciregenz
2e2e8c7728
[eric] webapp-template standardization (React + Vite + FastAPI new-app starter) + swarm-debug built-in skill + stale-session recovery
2026-05-11 18:40:27 -07:00
ciregenz
dfdd11a271
[eric] onboarding — auto-detect collapsed sidebar and walk user through expanding it before targeting sidebar items; AC popup/cursor polish + step
...
3-6 fixes
2026-05-11 15:31:57 -07:00
ciregenz
573f4a1ed4
[eric] App Builder skill as editable built-in (Skills page, undeletable) + onboarding step 1 unsticks after Claude Max / ChatGPT Pro / Gemini /
...
custom-provider connect (subscription state moved to Redux)
2026-05-11 14:54:07 -07:00
ciregenz
3417a2f7fb
[eric] runtime: fix missing asyncio import in main.py + right-click Hard Reload on the App Builder reload button
2026-05-11 13:56:08 -07:00
ciregenz
1988435466
[eric] fix runtime-logs WS — missing top-level asyncio import in main.py
2026-05-11 13:51:41 -07:00
ciregenz
b4b7042af2
[eric] persistent app-backend runtime + Terminal tab (replaces one-shot execute + Console panel)
2026-05-11 13:47:55 -07:00
ciregenz
c670033238
eric] fix app builder cross-agent chat leak via draftLaunchMap (drop activeSessionId fallback)
2026-05-11 11:28:48 -07:00
ciregenz
741fea5c89
[eric] reset history button (replaces dead View Changes) + thumbnail capture path fix
2026-05-11 10:19:36 -07:00
ciregenz
3342c71ed1
[eric] app builder — drop manual Save button (auto-save stays)
2026-05-11 09:28:44 -07:00
ciregenz
d20ff7d16c
[eric] app builder cleanup — remove Auto Run, Test Input, RenderOutput tool + Outputs activation gate
2026-05-11 09:05:45 -07:00
ciregenz
3ff586db52
[eric] 1.0.32 production push
2026-05-11 00:34:24 -07:00
ciregenz
2cc7e0f080
[eric] 1.0.32 — fix blank onboarding videos (./ instead of / under file://)
2026-05-11 00:03:08 -07:00
ciregenz
56d99be9cc
[eric] 1.0.31 production push
2026-05-10 23:32:07 -07:00
ciregenz
294a16ada0
[eric] system prompt: direct mcp__openswarm-web__WebSearch/WebFetch hint when web MCP is active (fixes 2-minute ToolSearch thrash on small Ollama
...
models)
2026-05-10 19:09:49 -07:00
ciregenz
54be1e8ba1
[eric] onboarding 1.0.31 + Settings draft persistence + LM Studio fix
2026-05-10 17:57:01 -07:00
ciregenz
443327d4bd
[eric] onboarding fixes — auto fit-to-view before drag select, scroll-aware move_to, robust celebration timer, no-flash app preview, openrouter / custom model integration bug fixes (windows)
2026-05-10 11:06:04 -07:00
ciregenz
89cbfe9749
[eric] onboarding polish + perf — humanized AC popups, batched /submit (1 POST/sec vs 100s), group-meta dedup,
...
sidebar auto-expand, cursor offset fixes
2026-05-09 23:34:40 -07:00
ciregenz
fa693452d4
[eric] gpt-5.x api keys
2026-05-09 09:06:01 -07:00
ciregenz
41812c5ca2
[eric] tune onboarding popup streaming speed and revert popup hold-time gating
2026-05-09 02:08:24 -07:00
ciregenz
0c841bdad4
[eric] onboarding revamp — agentic cursor walks users through 8 setup steps, WIP fixes: Gemini schema scrub, OpenAI GPT-5 routing, websearch cascade, gpt-5 is still a bit flaky...
2026-05-09 01:40:37 -07:00
ciregenz
c539bf8115
[eric] 1.0.30 production push
2026-05-08 00:15:03 -07:00
ciregenz
a0dc8dce11
[eric] 1.0.30 production push
2026-05-07 23:41:43 -07:00
ciregenz