ciregenz
6092fc0966
apps: canvas-chat App Builder seeds + sync meta.json + stale-approval filter
...
App Builder launched from canvas chat now seeds the React template and
registers an Output row tied to the session id, so the Apps sidebar
lights up immediately. Adds a post-session-complete sync that reads
meta.json from the workspace folder and updates the Output row's name
and description, ending the 'Untitled App' problem. Also adds a stale-
approval filter to the WS replay: resolved approvals no longer
resurrect as dead cards when the user navigates back to a chat.
2026-05-20 02:09:03 -07:00
ciregenz
ab0c265d7e
chat: dismissable MCP suggestion banner + auto-clear on activate + jump to /actions on unknown_server
...
Adds an × button to the integration-suggestion banner so it doesn't
linger after the user dismisses it. On successful MCP activate, clears
the banner so the user gets visual confirmation the click did
something. On unknown_server response (not yet connected), navigate to
/actions so the user can finish OAuth there.
2026-05-20 02:06:26 -07:00
ciregenz
0ba7d86fef
agent: block claude.ai partner MCPs in prompt + at SDK layer
...
claude_code preset auto-attaches the user's claude.ai-connected partner
MCPs (mcp__claude_ai_*). They bypass MCPActivate, don't share OAuth
state with OpenSwarm's Gmail/Drive/Calendar connectors, and confuse
the model into picking the partner shim instead of our vetted server.
Hard-block via disallowed_tools + add a system-prompt rule.
2026-05-20 02:03:22 -07:00
ciregenz
178a6060eb
gmail: route OAuth refresh through cloud rotation-pool proxy
...
google-workspace-mcp's gauth.py hardcodes token_uri to oauth2.googleapis.com
and uses local CLIENT_ID/SECRET on every refresh. OAuth runs through a
rotation pool on the cloud side, so the refresh_token is bound to the
pool slot that minted it, not the single client baked into the DMG, and
direct refreshes return unauthorized_client. Redirect spawn through a
shim that monkey-patches get_credentials to point token_uri at a local
proxy (/api/tools/google-oauth-token), which forwards the refresh to
api.openswarm.com/api/oauth/google/refresh (pool-aware). Unblocks every
Gmail/Drive/Calendar query for users on the cloud OAuth pool.
2026-05-20 01:58:59 -07:00
ciregenz
a1fefa0ae8
[eric] approvals: trust patterns for action approvals + smarter sensitive-file gating
2026-05-20 01:56:38 -07:00
ciregenz
9001cb8e38
[eric] DMG/EXE slim ~445 MB: drop legacy onboarding videos, per-arch node + lipo-thin uv, electronLanguages=[en], exclude backend/data + uv-bin
...
from bundle rsync (closes dev auth.token / install_id leak), strip pip + Tcl/Tk + pydoc_data + _pyrepl, both platforms
2026-05-20 01:52:47 -07:00
ciregenz
a5277cb732
[eric] ci: skip gitleaks scan when new-branch push has no commits ahead of main
...
Workflow's new-branch fallback fell through to a full repo scan whenever
merge-base with main equaled HEAD (empty range). That re-flagged every
historical secret a prior PR had already cleared. Now: empty range means
nothing new to scan, log + exit clean. Genuine no-shared-history case
still falls through to full scan.
2026-05-20 01:51:57 -07:00
ciregenz
fa6a8f0f1d
bump version to 1.1.37
2026-05-19 22:10:55 -07:00
ciregenz
49e0ed3d2f
experimental updates: opt-in prerelease channel via settings toggle + semver-suffix auto-detect in publish
2026-05-19 22:10:22 -07:00
ciregenz
03e995b6f0
[eric] 1.0.37 hotfix: roll back to 1.0.35 codebase
2026-05-19 16:10:17 -07:00
ciregenz
490a3047cf
[eric] production push 1.0.35
2026-05-15 22:13:20 -07:00
ciregenz
51a4b5dcaa
[eric] frontend perf: instant collapses, lazy app editor, stale-id reap
2026-05-15 21:43:55 -07:00
ciregenz
9078326268
[eric] smooth bits-anim placeholder + retry on Vite cold-start + restore dashboard right-click
2026-05-15 17:04:58 -07:00
ciregenz
058cb0c52f
[eric] frontend perf: streaming slice + canvas coalescing + lazy paths
2026-05-15 16:11:58 -07:00
ciregenz
1c3aab08dd
[eric] trackpad navigation optimizaton for ux
2026-05-15 10:13:22 -07:00
ciregenz
09e0174139
[eric] canvas lag optimizations
2026-05-14 22:27:45 -07:00
ciregenz
abf4f9ba0b
[eric] production push 1.0.34
2026-05-14 18:37:45 -07:00
ciregenz
1455ccef11
[eric] desktop carries a tag now
2026-05-14 11:55:48 -07:00
ciregenz
5d3cfcec2d
[eric] Mac publish fixes: NODE_OPTIONS heap + rsync excludes for user-state and template_cache
2026-05-14 01:42:31 -07:00
ciregenz
531e3df28f
[eric] retag 1.0.33
2026-05-13 19:41:47 -07:00
ciregenz
e840b1b7f0
[eric] sub bug fix
2026-05-13 19:05:04 -07:00
ciregenz
ae54680635
[eric] WIP polish — app builder runtime + react-vite template tweaks, dashboard toolbar/card refinements, PixelBlast accent, runtime-preview hook,
...
sign-in gate + settings updates
2026-05-13 18:30:55 -07:00
ciregenz
ea55dbe53a
[eric] App Builder skill: duplicate-React crash fix recipe
2026-05-13 14:12:51 -07:00
ciregenz
db38311a8d
[eric] fix prod regressions: __import__ scrub broke imports + Windows path gate
2026-05-13 13:20:19 -07:00
ciregenz
ccec204bc7
[eric] security: gate Write/Edit on sensitive paths + restore HOME/PATH for force-mode Outputs
2026-05-13 11:49:33 -07:00
ciregenz
afe11b6f37
[eric] outputs: HITL preview for risky backend.py + workspace path-traversal hardening
2026-05-13 10:50:15 -07:00
ciregenz
1b0e6c35eb
[eric] App Builder polish + onboarding fix
2026-05-13 00:24:51 -07:00
ciregenz
91508c87b1
[eric] onboarding bug fix and ux op
2026-05-12 22:36:22 -07:00
ciregenz
c0c52e33d6
[eric] App Builder saves to sidebar on seed + onboarding fallbacks (auto-skip rules, fallback prompts, retry popup)
2026-05-12 13:11:56 -07:00
ciregenz
a84aec257b
[eric] App Builder uses real React/Vite scaffold + onboarding polish (auto sidebar expand, bigger pill, video crop), onboarding bugs / edgecases
2026-05-11 23:23:59 -07:00
ciregenz
2e2e8c7728
[eric] webapp-template standardization (React + Vite + FastAPI new-app starter) + swarm-debug built-in skill + stale-session recovery
2026-05-11 18:40:27 -07:00
ciregenz
dfdd11a271
[eric] onboarding — auto-detect collapsed sidebar and walk user through expanding it before targeting sidebar items; AC popup/cursor polish + step
...
3-6 fixes
2026-05-11 15:31:57 -07:00
ciregenz
573f4a1ed4
[eric] App Builder skill as editable built-in (Skills page, undeletable) + onboarding step 1 unsticks after Claude Max / ChatGPT Pro / Gemini /
...
custom-provider connect (subscription state moved to Redux)
2026-05-11 14:54:07 -07:00
ciregenz
3417a2f7fb
[eric] runtime: fix missing asyncio import in main.py + right-click Hard Reload on the App Builder reload button
2026-05-11 13:56:08 -07:00
ciregenz
1988435466
[eric] fix runtime-logs WS — missing top-level asyncio import in main.py
2026-05-11 13:51:41 -07:00
ciregenz
b4b7042af2
[eric] persistent app-backend runtime + Terminal tab (replaces one-shot execute + Console panel)
2026-05-11 13:47:55 -07:00
ciregenz
c670033238
eric] fix app builder cross-agent chat leak via draftLaunchMap (drop activeSessionId fallback)
2026-05-11 11:28:48 -07:00
ciregenz
741fea5c89
[eric] reset history button (replaces dead View Changes) + thumbnail capture path fix
2026-05-11 10:19:36 -07:00
ciregenz
3342c71ed1
[eric] app builder — drop manual Save button (auto-save stays)
2026-05-11 09:28:44 -07:00
ciregenz
d20ff7d16c
[eric] app builder cleanup — remove Auto Run, Test Input, RenderOutput tool + Outputs activation gate
2026-05-11 09:05:45 -07:00
ciregenz
3ff586db52
[eric] 1.0.32 production push
2026-05-11 00:34:24 -07:00
ciregenz
2cc7e0f080
[eric] 1.0.32 — fix blank onboarding videos (./ instead of / under file://)
2026-05-11 00:03:08 -07:00
ciregenz
56d99be9cc
[eric] 1.0.31 production push
2026-05-10 23:32:07 -07:00
ciregenz
294a16ada0
[eric] system prompt: direct mcp__openswarm-web__WebSearch/WebFetch hint when web MCP is active (fixes 2-minute ToolSearch thrash on small Ollama
...
models)
2026-05-10 19:09:49 -07:00
ciregenz
54be1e8ba1
[eric] onboarding 1.0.31 + Settings draft persistence + LM Studio fix
2026-05-10 17:57:01 -07:00
ciregenz
443327d4bd
[eric] onboarding fixes — auto fit-to-view before drag select, scroll-aware move_to, robust celebration timer, no-flash app preview, openrouter / custom model integration bug fixes (windows)
2026-05-10 11:06:04 -07:00
ciregenz
89cbfe9749
[eric] onboarding polish + perf — humanized AC popups, batched /submit (1 POST/sec vs 100s), group-meta dedup,
...
sidebar auto-expand, cursor offset fixes
2026-05-09 23:34:40 -07:00
ciregenz
fa693452d4
[eric] gpt-5.x api keys
2026-05-09 09:06:01 -07:00
ciregenz
41812c5ca2
[eric] tune onboarding popup streaming speed and revert popup hold-time gating
2026-05-09 02:08:24 -07:00
ciregenz
0c841bdad4
[eric] onboarding revamp — agentic cursor walks users through 8 setup steps, WIP fixes: Gemini schema scrub, OpenAI GPT-5 routing, websearch cascade, gpt-5 is still a bit flaky...
2026-05-09 01:40:37 -07:00
ciregenz