mosaicstack/stack
21
0
Fork 1
Code Issues 338 Pull Requests 13 Actions Packages Projects Releases 15 Wiki Activity
973 Commits 384 Branches 35 Tags
75d46d4e828db3cd4d36fbd0d8ef2f0f13df4fde
Commit Graph
93 Commits
Author SHA1 Message Date
jason.woltje c23c33b0c5 fix(api): use TRUSTED_ORIGINS for socket.io gateway CORS (#628) 
Co-authored-by: Jason Woltje <[email protected]>
Co-committed-by: Jason Woltje <[email protected]>
 2026-03-01 20:13:13 +00:00
jason.woltje c5253e9d62 feat(web): add project detail page (#627) 
Co-authored-by: Jason Woltje <[email protected]>
Co-committed-by: Jason Woltje <[email protected]>
 2026-03-01 20:09:52 +00:00
jason.woltje e898551814 fix(web): correct Add Provider form to match fleet-settings DTO (#626) 
Co-authored-by: Jason Woltje <[email protected]>
Co-committed-by: Jason Woltje <[email protected]>
 2026-03-01 20:00:50 +00:00
jason.woltje 861eff4686 fix(web): correct Add Provider form DTO field mapping (#623) 
Co-authored-by: Jason Woltje <[email protected]>
Co-committed-by: Jason Woltje <[email protected]>
 2026-03-01 19:19:04 +00:00
jason.woltje 66d401461c feat(web): fleet settings UI (MS22-P1h) (#617) 
Co-authored-by: Jason Woltje <[email protected]>
Co-committed-by: Jason Woltje <[email protected]>
 2026-03-01 16:22:22 +00:00
jason.woltje 01ae164b61 feat(web): onboarding wizard (MS22-P1f) (#616) 
Co-authored-by: Jason Woltje <[email protected]>
Co-committed-by: Jason Woltje <[email protected]>
 2026-03-01 16:07:22 +00:00
jason.woltje 6521f655a8 feat(web): add teams page and RBAC navigation/route gating (MS21-UI-005, RBAC-001, RBAC-002) (#595) 
Co-authored-by: Jason Woltje <[email protected]>
Co-committed-by: Jason Woltje <[email protected]>
 2026-03-01 04:54:25 +00:00
jason.woltje 7106512fa9 feat(web): add user edit/invite dialogs and workspace member management (MS21-UI-002, MS21-UI-004) (#592) 
Co-authored-by: Jason Woltje <[email protected]>
Co-committed-by: Jason Woltje <[email protected]>
 2026-03-01 03:54:32 +00:00
jason.woltje b57f549d39 test(web): add API client tests for admin, workspaces, teams (MS21-TEST-004) (#581) 
Co-authored-by: Jason Woltje <[email protected]>
Co-committed-by: Jason Woltje <[email protected]>
 2026-02-28 23:26:36 +00:00
jason.woltje e93e7ffaa9 feat(web): wire workspace member management UI (MS21-UI-004) (#577) 
Co-authored-by: Jason Woltje <[email protected]>
Co-committed-by: Jason Woltje <[email protected]>
 2026-02-28 22:12:05 +00:00
jason.woltje 307639eca0 feat(web): add teams settings page (MS21-UI-005) (#576) 
Co-authored-by: Jason Woltje <[email protected]>
Co-committed-by: Jason Woltje <[email protected]>
 2026-02-28 22:12:04 +00:00
jason.woltje 5cd6b8622d feat(web): add admin users settings page (MS21-UI-001) (#573) 
Co-authored-by: Jason Woltje <[email protected]>
Co-committed-by: Jason Woltje <[email protected]>
 2026-02-28 20:50:11 +00:00
jason.woltje 20c9e68e1b feat(web): wire workspaces settings page to real API (MS21-UI-003) (#574) 
Co-authored-by: Jason Woltje <[email protected]>
Co-committed-by: Jason Woltje <[email protected]>
 2026-02-28 20:48:24 +00:00
jason.woltje ffc10c9a45 feat(api): add MS21 user fields for admin, local auth, and invitations (#553) 
Co-authored-by: Jason Woltje <[email protected]>
Co-committed-by: Jason Woltje <[email protected]>
 2026-02-28 17:47:03 +00:00
jason.woltje 128431ba58 fix(api,web): separate workspace context from auth session (#551) 
Co-authored-by: Jason Woltje <[email protected]>
Co-committed-by: Jason Woltje <[email protected]>
 2026-02-28 15:14:29 +00:00
jason.woltje 66fe475fa1 fix(web): convert favicon.ico to RGBA format for Turbopack (#544) 
Co-authored-by: Jason Woltje <[email protected]>
Co-committed-by: Jason Woltje <[email protected]>
 2026-02-27 11:10:38 +00:00
jason.woltje c38bfae16c fix(web): fix personalities page dark mode theming and wire to API (#540) 
Co-authored-by: Jason Woltje <[email protected]>
Co-committed-by: Jason Woltje <[email protected]>
 2026-02-27 10:59:04 +00:00
jason.woltje dd0568cf15 fix(web): add workspace context to domain and project creation (#536) 
Co-authored-by: Jason Woltje <[email protected]>
Co-committed-by: Jason Woltje <[email protected]>
 2026-02-27 10:28:40 +00:00
jason.woltje edcff6a0e0 fix(api,web): add workspace context to widgets and auto-detect workspace ID (#532) 
Co-authored-by: Jason Woltje <[email protected]>
Co-committed-by: Jason Woltje <[email protected]>
 2026-02-27 04:53:07 +00:00
jason.woltje e3cba37e8c fix(api,web): resolve RLS context SQL error, workspace guard crash, and projects response unwrapping (#531) 
Co-authored-by: Jason Woltje <[email protected]>
Co-committed-by: Jason Woltje <[email protected]>
 2026-02-27 04:18:35 +00:00
jason.woltje 7de0e734b0 feat(web): implement SSE chat streaming with real-time token rendering (#516) 
Co-authored-by: Jason Woltje <[email protected]>
Co-committed-by: Jason Woltje <[email protected]>
 2026-02-26 02:39:43 +00:00
jason.woltje cc56f2cbe1 feat(web): migrate dashboard to WidgetGrid with layout persistence (#497) 
Co-authored-by: Jason Woltje <[email protected]>
Co-committed-by: Jason Woltje <[email protected]>
 2026-02-24 00:50:24 +00:00
jason.woltje 05b1a93ccb feat(web): add logs and telemetry page with filtering and auto-refresh (#480) 
Co-authored-by: Jason Woltje <[email protected]>
Co-committed-by: Jason Woltje <[email protected]>
 2026-02-23 04:38:15 +00:00
jason.woltje a78a8b88e1 feat(web): add project workspace page with tasks and agent sessions (#479) 
Co-authored-by: Jason Woltje <[email protected]>
Co-committed-by: Jason Woltje <[email protected]>
 2026-02-23 04:29:39 +00:00
jason.woltje 172ed1d40f feat(web): add kanban board page with drag-and-drop (#478) 
Co-authored-by: Jason Woltje <[email protected]>
Co-committed-by: Jason Woltje <[email protected]>
 2026-02-23 04:26:25 +00:00
jason.woltje ee2ddfc8b8 feat(web): add projects page with CRUD operations (#477) 
Co-authored-by: Jason Woltje <[email protected]>
Co-committed-by: Jason Woltje <[email protected]>
 2026-02-23 04:13:26 +00:00
jason.woltje 5a6d00a064 feat(web): wire knowledge pages to real API data (#476) 
Co-authored-by: Jason Woltje <[email protected]>
Co-committed-by: Jason Woltje <[email protected]>
 2026-02-23 04:12:14 +00:00
jason.woltje f97be2e6a3 feat(web): wire calendar page to real API data (#474) 
Co-authored-by: Jason Woltje <[email protected]>
Co-committed-by: Jason Woltje <[email protected]>
 2026-02-23 03:51:15 +00:00
jason.woltje 97606713b5 feat(web): wire tasks page to real API data (#473) 
Co-authored-by: Jason Woltje <[email protected]>
Co-committed-by: Jason Woltje <[email protected]>
 2026-02-23 03:51:08 +00:00
jason.woltje 7581d26567 Phase 2: Task Ingestion Pipeline (#459) (#460) 
Co-authored-by: Jason Woltje <[email protected]>
Co-committed-by: Jason Woltje <[email protected]>
 2026-02-23 00:54:55 +00:00
jason.woltje 1b66417be5 fix(web): restore login page design and add runtime config injection (#435) 
Co-authored-by: Jason Woltje <[email protected]>
Co-committed-by: Jason Woltje <[email protected]>
 2026-02-21 23:16:02 +00:00
jason.woltje af299abdaf debug(auth): log session cookie source 2026-02-18 21:36:01 -06:00
Jason Woltje ab902250f8 feat(web-hud): seed default layout with orchestration widgets 2026-02-17 16:07:09 -06:00
Jason WoltjeandClaude Opus 4.6 9d3a673e6c fix(#411): resolve CI lint errors — prettier, unused directives, no-base-to-string 
- auth.config.ts: collapse multiline template literal to single line
- auth.controller.ts: add eslint-disable for intentional no-unnecessary-condition
- auth.service.ts: remove 5 unused eslint-disable directives (Node 24 resolves
  BetterAuth types), fix prettier formatting, fix no-base-to-string
- login/page.tsx: remove unnecessary String() wrapper
- auth-context.test.tsx: fix prettier line length

Co-Authored-By: Claude Opus 4.6 <[email protected]>
 2026-02-16 17:00:01 -06:00
Jason WoltjeandClaude Opus 4.6 d7de20e586 fix(#411): classifyAuthError — return null for normal 401/session-expired instead of 'backend' 
Normal authentication failures (401 Unauthorized, 403 Forbidden, session
expired) are not backend errors — they simply mean the user isn't logged in.
Previously these fell through to the `instanceof Error` catch-all and returned
"backend", causing a misleading "having trouble connecting" banner.

Now classifyAuthError explicitly checks for invalid_credentials and
session_expired codes from parseAuthError and returns null, so the UI shows
the logged-out state cleanly without an error banner.

Co-Authored-By: Claude Opus 4.6 <[email protected]>
 2026-02-16 15:42:44 -06:00
Jason WoltjeandClaude Opus 4.6 b675db1324 test(#411): QA-015 — add credentials fallback test + fix refreshSession test name 
Add test for non-string error.message fallback in handleCredentialsLogin.
Rename misleading refreshSession test to match actual behavior.

Co-Authored-By: Claude Opus 4.6 <[email protected]>
 2026-02-16 14:05:30 -06:00
Jason WoltjeandClaude Opus 4.6 e0d6d585b3 test(#411): QA-014 — add verifySession non-Error thrown value tests 
Verify verifySession returns null when getSession throws non-Error
values (strings, objects) rather than crashing.

Co-Authored-By: Claude Opus 4.6 <[email protected]>
 2026-02-16 14:03:08 -06:00
Jason WoltjeandClaude Opus 4.6 df495c67b5 fix(#411): QA-012 — clamp RetryOptions to sensible ranges 
fetchWithRetry now clamps maxRetries>=0, baseDelayMs>=100,
backoffFactor>=1 to prevent infinite loops or zero-delay hammering.

Co-Authored-By: Claude Opus 4.6 <[email protected]>
 2026-02-16 13:53:29 -06:00
Jason WoltjeandClaude Opus 4.6 3e2c1b69ea fix(#411): QA-009 — fix .env.example OIDC vars and test assertion 
Update .env.example to list all 4 required OIDC vars (was missing OIDC_REDIRECT_URI).
Fix test assertion to match username->email rename in signInWithCredentials.

Co-Authored-By: Claude Opus 4.6 <[email protected]>
 2026-02-16 13:51:13 -06:00
Jason WoltjeandClaude Opus 4.6 27c4c8edf3 fix(#411): QA-010 — fix minor JSDoc and comment issues across auth files 
Fix response.ok JSDoc (2xx not 200), remove stale token refresh claim,
remove non-actionable comment, fix CSRF comment placement, add 403 mapping rationale.

Co-Authored-By: Claude Opus 4.6 <[email protected]>
 2026-02-16 13:50:04 -06:00
Jason WoltjeandClaude Opus 4.6 08e32d42a3 fix(#411): QA-008 — derive KNOWN_CODES from ERROR_MESSAGES keys 
Eliminates manual duplication of AuthErrorCode values in KNOWN_CODES
by deriving from Object.keys(ERROR_MESSAGES).

Co-Authored-By: Claude Opus 4.6 <[email protected]>
 2026-02-16 13:40:48 -06:00
Jason WoltjeandClaude Opus 4.6 752e839054 fix(#411): QA-005 — production logging, error classification, session-expired state 
logAuthError now always logs (not dev-only). Replaced isBackendError with
parseAuthError-based classification. signOut uses proper error type.
Session expiry sets explicit session_expired state. Login page logs in prod.
Fixed pre-existing lint violations in auth package (campsite rule).

Co-Authored-By: Claude Opus 4.6 <[email protected]>
 2026-02-16 13:37:49 -06:00
Jason WoltjeandClaude Opus 4.6 110e181272 test(#411): add missing test coverage — getAccessToken, isAdmin, null cases, getClientIp 
- Add getAccessToken tests (5): null session, valid token, expired token, buffer window, undefined token
- Add isAdmin tests (4): null session, true, false, undefined
- Add getUserById/getUserByEmail null-return tests (2)
- Add getClientIp tests via handleAuth (4): single IP, comma-separated, array, fallback
- Fix pre-existing controller spec failure by adding better-auth vi.mock calls

Co-Authored-By: Claude Opus 4.6 <[email protected]>
 2026-02-16 12:37:11 -06:00
Jason WoltjeandClaude Opus 4.6 9696e45265 fix(#411): remediate frontend review findings — wire fetchWithRetry, fix error handling 
- Wire fetchWithRetry into login page config fetch (was dead code)
- Remove duplicate ERROR_CODE_MESSAGES, use parseAuthError from auth-errors.ts
- Fix OAuth sign-in fire-and-forget: add .catch() with PDA error + loading reset
- Fix credential login catch: use parseAuthError for better error messages
- Add user feedback when auth config fetch fails (was silent degradation)
- Fix sign-out failure: use logAuthError and set authError state
- Enable fetchWithRetry production logging for retry visibility

Co-Authored-By: Claude Opus 4.6 <[email protected]>
 2026-02-16 12:33:25 -06:00
Jason Woltje c233d97ba0 feat(#417): add fetchWithRetry with exponential backoff for auth 
Retries network and server errors up to 3 times with exponential
backoff (1s, 2s, 4s). Non-retryable errors fail immediately.

Refs #417
 2026-02-16 12:19:46 -06:00
Jason Woltje f1ee0df933 feat(#417): update auth-client.ts error messages to PDA-friendly 
Uses parseAuthError from auth-errors module for consistent
PDA-friendly error messages in signInWithCredentials.

Refs #417
 2026-02-16 12:15:25 -06:00
Jason Woltje 07084208a7 feat(#417): add session expiry detection to AuthProvider 
Adds sessionExpiring and sessionMinutesRemaining to auth context.
Checks session expiry every 60s, warns when within 5 minutes.

Refs #417
 2026-02-16 12:12:46 -06:00
Jason Woltje f500300b1f feat(#417): create auth-errors.ts with PDA error parsing and mapping 
Adds AuthErrorCode type, ParsedAuthError interface, parseAuthError() classifier,
and getErrorMessage() helper. All messages use PDA-friendly language.

Refs #417
 2026-02-16 12:02:57 -06:00
jason.woltjeandClaude Opus 4.6 444fa1116a fix(#410): align BetterAuth basePath and auth client with NestJS routing 
BetterAuth defaulted basePath to /api/auth but NestJS controller routes
to /auth/* (no global prefix). The auth client also pointed at the web
frontend origin instead of the API server, and LoginButton used a
nonexistent GET /auth/signin/authentik endpoint.

- Set basePath: "/auth" in BetterAuth server config
- Point auth client baseURL to API_BASE_URL with matching basePath
- Add genericOAuthClient plugin to auth client
- Use signIn.oauth2({ providerId: "authentik" }) in LoginButton

Co-Authored-By: Claude Opus 4.6 <[email protected]>
 2026-02-15 19:41:08 -06:00
jason.woltjeandClaude Opus 4.6 cf28efa880 merge: resolve conflicts with develop (M10-Telemetry + M12-MatrixBridge) 
Merge origin/develop into feature/m13-speech-services to incorporate
M10-Telemetry and M12-MatrixBridge changes. Resolved 4 conflicts:
- .env.example: Added speech config alongside telemetry + matrix config
- Makefile: Added speech targets alongside matrix targets
- app.module.ts: Import both MosaicTelemetryModule and SpeechModule
- docs/tasks.md: Combined all milestone task tracking sections

Co-Authored-By: Claude Opus 4.6 <[email protected]>
 2026-02-15 12:31:08 -06:00