91 Commits

Author	SHA1	Message	Date
Jason Woltje	ff5a09c3fb	feat(web): add widget config dialog and layout management controls (#499) ... Co-authored-by: Jason Woltje <jason@diversecanvas.com> Co-committed-by: Jason Woltje <jason@diversecanvas.com>	2026-02-24 01:11:47 +00:00
Jason Woltje	f93fa60fff	feat(web): add widget picker drawer for dashboard customization (#498) ... Co-authored-by: Jason Woltje <jason@diversecanvas.com> Co-committed-by: Jason Woltje <jason@diversecanvas.com>	2026-02-24 00:59:45 +00:00
Jason Woltje	cc56f2cbe1	feat(web): migrate dashboard to WidgetGrid with layout persistence (#497) ... Co-authored-by: Jason Woltje <jason@diversecanvas.com> Co-committed-by: Jason Woltje <jason@diversecanvas.com>	2026-02-24 00:50:24 +00:00
Jason Woltje	90c3bbccdf	feat(web): add theme selection UI in Settings > Appearance (#495) ... Co-authored-by: Jason Woltje <jason@diversecanvas.com> Co-committed-by: Jason Woltje <jason@diversecanvas.com>	2026-02-23 14:18:16 +00:00
Jason Woltje	37cf813b88	fix(web): update calendar and knowledge tests for real API integration (#483) ... Co-authored-by: Jason Woltje <jason@diversecanvas.com> Co-committed-by: Jason Woltje <jason@diversecanvas.com>	2026-02-23 05:04:55 +00:00
Jason Woltje	3d5b50af11	feat(web): add profile page with user info and preferences (#482) ... Co-authored-by: Jason Woltje <jason@diversecanvas.com> Co-committed-by: Jason Woltje <jason@diversecanvas.com>	2026-02-23 04:50:44 +00:00
Jason Woltje	f30c2f790c	feat(web): add file manager page with list/grid views (#481) ... Co-authored-by: Jason Woltje <jason@diversecanvas.com> Co-committed-by: Jason Woltje <jason@diversecanvas.com>	2026-02-23 04:39:19 +00:00
Jason Woltje	05b1a93ccb	feat(web): add logs and telemetry page with filtering and auto-refresh (#480) ... Co-authored-by: Jason Woltje <jason@diversecanvas.com> Co-committed-by: Jason Woltje <jason@diversecanvas.com>	2026-02-23 04:38:15 +00:00
Jason Woltje	a78a8b88e1	feat(web): add project workspace page with tasks and agent sessions (#479) ... Co-authored-by: Jason Woltje <jason@diversecanvas.com> Co-committed-by: Jason Woltje <jason@diversecanvas.com>	2026-02-23 04:29:39 +00:00
Jason Woltje	172ed1d40f	feat(web): add kanban board page with drag-and-drop (#478) ... Co-authored-by: Jason Woltje <jason@diversecanvas.com> Co-committed-by: Jason Woltje <jason@diversecanvas.com>	2026-02-23 04:26:25 +00:00
Jason Woltje	ee2ddfc8b8	feat(web): add projects page with CRUD operations (#477) ... Co-authored-by: Jason Woltje <jason@diversecanvas.com> Co-committed-by: Jason Woltje <jason@diversecanvas.com>	2026-02-23 04:13:26 +00:00
Jason Woltje	5a6d00a064	feat(web): wire knowledge pages to real API data (#476) ... Co-authored-by: Jason Woltje <jason@diversecanvas.com> Co-committed-by: Jason Woltje <jason@diversecanvas.com>	2026-02-23 04:12:14 +00:00
Jason Woltje	ffda74ec12	test(web): update tasks page tests for real API integration (#475) ... Co-authored-by: Jason Woltje <jason@diversecanvas.com> Co-committed-by: Jason Woltje <jason@diversecanvas.com>	2026-02-23 03:59:56 +00:00
Jason Woltje	f97be2e6a3	feat(web): wire calendar page to real API data (#474) ... Co-authored-by: Jason Woltje <jason@diversecanvas.com> Co-committed-by: Jason Woltje <jason@diversecanvas.com>	2026-02-23 03:51:15 +00:00
Jason Woltje	97606713b5	feat(web): wire tasks page to real API data (#473) ... Co-authored-by: Jason Woltje <jason@diversecanvas.com> Co-committed-by: Jason Woltje <jason@diversecanvas.com>	2026-02-23 03:51:08 +00:00
Jason Woltje	d0c720e6da	feat(web): add custom 404 pages for global and authenticated routes (#472) ... Co-authored-by: Jason Woltje <jason@diversecanvas.com> Co-committed-by: Jason Woltje <jason@diversecanvas.com>	2026-02-23 03:43:55 +00:00
Jason Woltje	64e817cfb8	feat(web): add settings root index page with category cards (#471) ... Co-authored-by: Jason Woltje <jason@diversecanvas.com> Co-committed-by: Jason Woltje <jason@diversecanvas.com>	2026-02-23 03:42:01 +00:00
Jason Woltje	8957904ea9	Phase 4: Deploy + Smoke Test (#463) (#464) ... Co-authored-by: Jason Woltje <jason@diversecanvas.com> Co-committed-by: Jason Woltje <jason@diversecanvas.com>	2026-02-23 02:09:43 +00:00
Jason Woltje	458cac7cdd	Phase 3: Agent Cycle Visibility (#461) (#462) ... Co-authored-by: Jason Woltje <jason@diversecanvas.com> Co-committed-by: Jason Woltje <jason@diversecanvas.com>	2026-02-23 01:07:29 +00:00
Jason Woltje	7581d26567	Phase 2: Task Ingestion Pipeline (#459) (#460) ... Co-authored-by: Jason Woltje <jason@diversecanvas.com> Co-committed-by: Jason Woltje <jason@diversecanvas.com>	2026-02-23 00:54:55 +00:00
Jason Woltje	07f5225a76	Phase 1: Dashboard Polish + Theming (#457) (#458) ... Co-authored-by: Jason Woltje <jason@diversecanvas.com> Co-committed-by: Jason Woltje <jason@diversecanvas.com>	2026-02-23 00:16:45 +00:00
Jason Woltje	b43e860c40	feat(web): Phase 3 — Dashboard Page (#450) (#453) ... Co-authored-by: Jason Woltje <jason@diversecanvas.com> Co-committed-by: Jason Woltje <jason@diversecanvas.com>	2026-02-22 21:18:50 +00:00
Jason Woltje	a5ed260fbd	feat(web): MS15 Phase 1 — Design System & App Shell (#451) ... Co-authored-by: Jason Woltje <jason@diversecanvas.com> Co-committed-by: Jason Woltje <jason@diversecanvas.com>	2026-02-22 20:57:06 +00:00
Jason Woltje	17144b1c42	style(ui): refine login card shape and divider spacing (#439) ... Co-authored-by: Jason Woltje <jason@diversecanvas.com> Co-committed-by: Jason Woltje <jason@diversecanvas.com>	2026-02-22 06:19:23 +00:00
Jason Woltje	06e54328d5	fix(web): force dynamic rendering for runtime env injection (#437) ... Co-authored-by: Jason Woltje <jason@diversecanvas.com> Co-committed-by: Jason Woltje <jason@diversecanvas.com>	2026-02-22 03:54:12 +00:00
Jason Woltje	1b66417be5	fix(web): restore login page design and add runtime config injection (#435) ... Co-authored-by: Jason Woltje <jason@diversecanvas.com> Co-committed-by: Jason Woltje <jason@diversecanvas.com>	2026-02-21 23:16:02 +00:00
Jason Woltje	af299abdaf	debug(auth): log session cookie source	2026-02-18 21:36:01 -06:00
Jason Woltje	dedc1af080	fix(auth): restore BetterAuth OIDC flow across api/web/compose	2026-02-17 23:37:49 -06:00
Jason Woltje	9d9a01f5f7	feat(web): add orchestrator readiness badge and resilient events parsing	2026-02-17 16:20:03 -06:00
Jason Woltje	4d089cd020	feat(orchestrator): add recent events API and monitor script	2026-02-17 15:44:43 -06:00
Jason Woltje	3258cd4f4d	feat(orchestrator): add SSE events, queue controls, and mosaic rails sync	2026-02-17 15:39:15 -06:00
Jason Woltje	758b2a839b	fix(web-tests): stabilize async auth and usage page assertions	2026-02-17 15:15:54 -06:00
Jason Woltje	cab8d690ab	fix(#411): complete 2026-02-17 remediation sweep ... Apply RLS context at task service boundaries, harden orchestrator/web integration and session startup behavior, re-enable targeted frontend tests, and lock vulnerable transitive dependencies so QA and security gates pass cleanly.	2026-02-17 14:19:15 -06:00
Jason Woltje	c917a639c4	fix(#411): wrap login page useSearchParams in Suspense boundary ... Next.js 16 requires useSearchParams() to be inside a <Suspense> boundary for static prerendering. Extracted LoginPageContent inner component and wrapped it in Suspense with a loading fallback that matches the existing loading spinner UI. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-02-16 17:07:18 -06:00
Jason Woltje	9d3a673e6c	fix(#411): resolve CI lint errors — prettier, unused directives, no-base-to-string ... - auth.config.ts: collapse multiline template literal to single line - auth.controller.ts: add eslint-disable for intentional no-unnecessary-condition - auth.service.ts: remove 5 unused eslint-disable directives (Node 24 resolves BetterAuth types), fix prettier formatting, fix no-base-to-string - login/page.tsx: remove unnecessary String() wrapper - auth-context.test.tsx: fix prettier line length Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-02-16 17:00:01 -06:00
Jason Woltje	5328390f4c	fix(#411): sanitize login error messages through parseAuthError — prevent raw error leakage ... Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-02-16 15:45:40 -06:00
Jason Woltje	b675db1324	test(#411): QA-015 — add credentials fallback test + fix refreshSession test name ... Add test for non-string error.message fallback in handleCredentialsLogin. Rename misleading refreshSession test to match actual behavior. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-02-16 14:05:30 -06:00
Jason Woltje	e600cfd2d0	fix(#411): QA-007 — explicit error state on login config fetch failure ... Login page now shows error state with retry button when /auth/config fetch fails, instead of silently falling back to email-only config. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-02-16 13:44:01 -06:00
Jason Woltje	752e839054	fix(#411): QA-005 — production logging, error classification, session-expired state ... logAuthError now always logs (not dev-only). Replaced isBackendError with parseAuthError-based classification. signOut uses proper error type. Session expiry sets explicit session_expired state. Login page logs in prod. Fixed pre-existing lint violations in auth package (campsite rule). Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-02-16 13:37:49 -06:00
Jason Woltje	9696e45265	fix(#411): remediate frontend review findings — wire fetchWithRetry, fix error handling ... - Wire fetchWithRetry into login page config fetch (was dead code) - Remove duplicate ERROR_CODE_MESSAGES, use parseAuthError from auth-errors.ts - Fix OAuth sign-in fire-and-forget: add .catch() with PDA error + loading reset - Fix credential login catch: use parseAuthError for better error messages - Add user feedback when auth config fetch fails (was silent degradation) - Fix sign-out failure: use logAuthError and set authError state - Enable fetchWithRetry production logging for retry visibility Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-02-16 12:33:25 -06:00
Jason Woltje	d9a3eeb9aa	feat(#416): responsive layout + accessibility for login page ... - Mobile-first responsive classes (p-4 sm:p-8, text-2xl sm:text-4xl) - WCAG 2.1 AA: role=status on loading spinner, aria-labels, focus management - Loading spinner has role=status and aria-label - All interactive elements keyboard-accessible - Added 10 new tests for responsive layout and accessibility Refs #416 Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-02-16 11:56:13 -06:00
Jason Woltje	077bb042b7	feat(#416): add error display from URL query params on login page ... Maps error codes to PDA-friendly messages (no alarming language). Dismissible error banner with URL param cleanup. Refs #416 Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-02-16 11:50:33 -06:00
Jason Woltje	2020c15545	feat(#416): redesign login page with dynamic provider rendering ... Fetches GET /auth/config on mount and renders OAuth + email/password forms based on backend-advertised providers. Falls back to email-only if config fetch fails. Refs #416 Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-02-16 11:45:44 -06:00
Jason Woltje	a943ae139a	fix(#375): resolve lint errors in usage dashboard ... - Fix prettier formatting for Tooltip formatter props (single-line) - Fix no-base-to-string by using typed props instead of Record<string, unknown> - Fix restrict-template-expressions by wrapping number in String() Refs #375 Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-02-15 02:25:51 -06:00
Jason Woltje	8e27f73f8f	fix(#375): resolve recharts TypeScript strict mode type errors ... - Fix Tooltip formatter/labelFormatter type overload conflicts - Fix Pie label render props type mismatch - Fix telemetry.ts date split array access type Refs #375 Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-02-15 02:21:54 -06:00
Jason Woltje	a5ee974765	feat(#375): frontend token usage and cost dashboard ... - Install recharts for data visualization - Add Usage nav item to sidebar navigation - Create telemetry API service with data fetching functions - Build dashboard page with summary cards, charts, and time range selector - Token usage line chart, cost breakdown bar chart, task outcome pie chart - Loading and empty states handled - Responsive layout with PDA-friendly design - Add unit tests (14 tests passing) Refs #375 Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-02-15 02:10:22 -06:00
Jason Woltje	e8a9a3087a	fix(ci): fix pipeline #366 — web @mosaic/ui build, Dockerfile find bug, event handler types ... Three root causes resolved: 1. .woodpecker/web.yml: build-shared step was missing @mosaic/ui build, causing 10 test suite failures + 20 typecheck errors (TS2307) 2. apps/orchestrator/Dockerfile: find -o without parentheses only deleted last pattern's matches, leaving spec files with test fixture secrets that triggered 5 Trivy false positives (3 CRITICAL, 2 HIGH) 3. 9 web files had untyped event handler parameters (e) causing 49 lint errors and 19 typecheck errors — added React.ChangeEvent<T> types Verification: lint 0 errors, typecheck 0 errors, tests 73/73 suites pass Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-02-12 17:50:41 -06:00
Jason Woltje	6a5a4e4de8	feat(web): add credential management UI pages and components ... Add credentials settings page, audit log page, CRUD dialog components (create, view, edit, rotate), credential card, dialog UI component, and API client for the M7-CredentialSecurity feature. Refs #346 Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-02-10 09:42:41 -06:00
Jason Woltje	bfeea743f7	fix(CQ-WEB-10): Add loading/error states to pages with mock data ... Convert tasks, calendar, and dashboard pages from synchronous mock data to async loading pattern with useState/useEffect. Each page now shows a loading state via child components while data loads, and displays a PDA-friendly amber-styled message with a retry button if loading fails. This prepares these pages for real API integration by establishing the async data flow pattern. Child components (TaskList, Calendar, dashboard widgets) already handled isLoading props — now the pages actually use them. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-02-06 18:40:21 -06:00
Jason Woltje	1005b7969c	fix(SEC-WEB-37): Gate federation mock data behind NODE_ENV check ... Replace exported const mockConnections with getMockConnections() function that returns mock data only when NODE_ENV === "development". In production and test environments, returns an empty array as defense-in-depth alongside the existing ComingSoon page gate (SEC-WEB-4). Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-02-06 18:22:12 -06:00