Commit Graph
277 Commits
Author SHA1 Message Date
Devika Verma 5cbd3249d2 OPE-130: scope read-only session grants to the session's folders 2026-08-22 09:16:01 +05:30
Devika Verma 0b5294ac41 Merge branch 'main' of https://github.com/andrewyng/openworker into feature/permission-modes
# Conflicts:
#	coworker/agent.py
#	coworker/connectors/tool_defs.py
#	coworker/engine.py
#	coworker/permissions.py
#	coworker/personas/manifest.py
#	coworker/server/manager.py
#	surfaces/gui/src/App.tsx
#	surfaces/gui/src/types.ts
#	tests/test_connectors.py
#	tests/test_send_target_resolution.py
2026-08-22 08:11:32 +05:30
Devika Verma 42da42512c Mark every permission-mode change in the transcript 2026-08-22 07:48:01 +05:30
Devika Verma 81ca80c97d Auto-Approve banner spans the transcript column 2026-08-22 07:38:33 +05:30
Devika Verma 76e9174ef9 Explain Auto-Approve once per session 2026-08-22 07:24:47 +05:30
Rohit Prasad 83ab5bdedd Merge pull request #532 from andrewyng/rp/postmerge-fixes
Post-merge fixes: MCP notices, rail defaults, viewer header, access footer
2026-08-21 14:12:45 -07:00
Rohit C Prasad e7bd499f40 Right rail: hidden by default, toggle persists per-device
Deep links (artifact/board chips, Access) force-show transiently without touching the pref.
Topbar Artifacts chip drops its cowork-only gate (artifacts are universal now).
2026-08-21 13:59:38 -07:00
Rohit C Prasad 3a81c49ede build_dmg: document the venv prereqs a fresh worktree needs 2026-08-21 13:44:56 -07:00
Rohit C Prasad fd1eb65547 Viewer header: breadcrumb back, labeled action menu, close; Access footer one row (UX-038)
Copy contents is the primary copy; path/open/reveal live in the labeled menu.
Access footer: '+ Add a source · Manage →'; mute explainer moves to the toggle tooltip.
2026-08-21 13:35:22 -07:00
Rohit C Prasad 4eefc09a84 Sidebar expand sticks while the artifact viewer is open
Auto-collapse is edge-triggered now: stable callback identity + the rail notifies
only on real open/close transitions, so a manual toggle is never fought.
2026-08-21 12:52:00 -07:00
Rohit C Prasad a6a73419d3 MCP failure notice fires on state change, not every session
First session after a server breaks (or breaks differently) gets the transcript notice;
unchanged-broken stays quiet (Connectors carries it). Personas declaring the server keep
the every-session notice. Dedupe persists across restarts; recovery re-arms it.
2026-08-21 12:30:44 -07:00
Rohit Prasad 2af919c448 Merge pull request #531 from andrewyng/rp/multiple-efforts
Multiple changes - Coworkers, MCP fixes, Teams foundations, UI changes.
2026-08-21 12:23:14 -07:00
Rohit C Prasad b4d1a01faa Remove MCP server: also shut down the live connection and purge OAuth tokens/DCR 2026-08-21 12:02:53 -07:00
Rohit C Prasad 476032e603 MCP Test on a live server actually tests: round-trip + tool refresh, visible receipt
verify() replaces cached-yes ensure for explicit tests; dead connections tear down and reconnect.
Connected rows show 'tested ⟨when⟩' so the click has a visible result.
2026-08-21 11:58:28 -07:00
Rohit C Prasad 87245498cc MCP OAuth: silent refresh actually works across restarts
Storage reports remaining token lifetime (issued_at persisted) and blanks stale access
tokens so the SDK refreshes before the request; discovered AS metadata is persisted and
seeded so refresh targets the real token endpoint, not <origin>/token.
2026-08-21 11:44:23 -07:00
Rohit C Prasad 4ac1e59370 MCP Test: flag authorizing before the background connect; notice copy says Connectors
The GUI's fast poll keyed off a status the task hadn't set yet, so a failing Test
looked dead until the 5s tick.
2026-08-21 10:43:16 -07:00
Rohit C Prasad 76e7276f7a Merge rp/mcp-add-test: custom MCP add/test flow, single Connectors page 2026-08-21 10:28:47 -07:00
Rohit C Prasad d88a196172 Right drawer: retire the More fold — all sections list flat, collapsed by default 2026-08-21 10:14:01 -07:00
Rohit C Prasad 2c9fb7490b Toolset dedup: one windowed reader, sleep_until only, browser trim/rename
files capability adopts the numbered read_file; per-turn Now: line feeds absolute scheduling.
browser_get_text/browser_read_url dropped; browser_snapshot renamed browser_read_page.
2026-08-20 23:06:36 -07:00
Rohit C Prasad 1e564d56eb request_tool: non-catalog names never raise the install card
Fast-fail with a shell steer before any prompt; docstring names the closed catalog
and stops citing semgrep (pip/brew, deliberately unmanaged) as an example.
2026-08-20 22:14:02 -07:00
Rohit C Prasad 3fc782edd7 Security personas: report pages go to the scratch directory, not the audited repo 2026-08-20 21:59:24 -07:00
Rohit C Prasad 4406068629 Files explorer over session roots (UX-037)
More fold gains a Files section listing workspace/scratch/granted roots.
Roots open in the artifact viewer (Files breadcrumb); folder click-through was already there.
2026-08-20 21:56:09 -07:00
Rohit C Prasad ebb97d7643 Root promotion: request_directory gains primary; granted folder can become the workspace
One-way, once, scratch-primary sessions only; consent card says workspace.
Live roots + shell repoint, persisted; engine rebuilds fully anchored after the turn.
2026-08-20 21:37:39 -07:00
Rohit C Prasad 65c568cd44 Universal scratch: every session gets a scratch root; Artifacts panel everywhere
Gated sessions run workspace+scratch dual-root; artifact listing scans scratch only.
Artifact chips resolve across workspace, scratch, and granted roots; request_directory registers for all sessions.
2026-08-20 21:28:52 -07:00
Rohit C Prasad 1299760400 Personas: requires_folder/subagents/scheduling traits replace family and the workspace enum
Manifest keeps a legacy family shim; telemetry wire fields unchanged.
No behavior change; spec in ocw-context/docs/workspace-scratch-design.md.
2026-08-20 21:19:56 -07:00
Rohit C Prasad 9735d0c6e7 e2e: repair specs broken by the shipping lineup
Folder-gate and picker specs drive Security Coworker (Code ships disabled).
Automations detail opens via the nav row (account-menu entry removed).
2026-08-20 21:19:50 -07:00
Rohit C Prasad f25fbd4036 Rail: solo sessions get Progress back (empty team object misread as lead); drop Gallery entry point 2026-08-20 18:44:35 -07:00
Rohit C Prasad f29e082c86 Coworkers list: group spacing, Default pill replaces star/toggle on the default row 2026-08-20 18:37:34 -07:00
Rohit C Prasad 78b0f488c4 Coworkers pages redesigned: grouped list, one toggle per row, detail overhaul
List groups General/Security with quiet disclosures for unshipped coworkers and the installer (native pickers for folder/zip); gallery is internal-build only.
Detail: markdown About with bundle screenshot carousel, one Connectors table (Status/Enable), tool calls collapsed under Advanced, management controls moved here.
2026-08-20 18:17:10 -07:00
Rohit C Prasad 19e10f0e76 Shipping lineup: remove Chat, ship Code disabled, gate unshipped personas
Manifests carry ships/group; release builds hide ships:false coworkers (OPENWORKER_UNSHIPPED=1 restores them).
Persona detail serves bundle media; staffing gate reads the registry, not the filtered list.
2026-08-20 17:59:48 -07:00
Rohit Prasad 735486ac14 Merge pull request #530 from andrewyng/rp/mcp-add-test
Custom MCP servers on the Connectors page, with add and test flow
2026-08-20 16:34:06 -07:00
Rohit C Prasad ff78ea9f35 Chrome cleanup: menu dedup, implicit cloud label, Context optimization section
Account menu drops Automations (sidebar nav has it) and the OpenWorker Cloud suffix.
Token savings + compaction move from Models to a new Settings - Context optimization tab.
Coworkers page loses its duplicate intro line.
2026-08-20 16:33:36 -07:00
Rohit C Prasad db4b31afb4 Drop local dev launch config from branch 2026-08-20 16:22:48 -07:00
Rohit C Prasad 2414b4a215 Retire MCP tab: custom servers live on the Connectors page
Custom - MCP group after Connected; Add custom server modal at top; per-server detail subpage with Test.
Status never claims connected for stdio: Live / Ready + persisted tested-at / Not tested / Needs sign-in / Error.
2026-08-20 16:22:41 -07:00
Rohit C Prasad 0f68852cbf Drop stray root vitest cache from branch 2026-08-20 13:50:23 -07:00
Rohit C Prasad 5ebaa376d7 Add MCP server flow: Remote URL + JSON tabs, Test connection
Explicit connect reports stderr tails; a 401 on an anonymous http probe becomes needs-sign-in with a one-click OAuth switch.
Test button probes any enabled server row without opening a session.
2026-08-20 13:50:13 -07:00
Rohit Prasad 8e71256ede Merge pull request #528 from andrewyng/rp/mcp-failure-surfacing
Surface MCP server startup failures
2026-08-20 13:05:47 -07:00
Rohit C Prasad ead7d9e2a6 Drop accidental node_modules symlink from branch 2026-08-20 12:53:00 -07:00
Rohit C Prasad b0d2bbd183 Surface MCP server startup failures
Capture stdio stderr tail; record generic connect errors for /v1/mcp (status=error);
persistent session notice via mcp_error; tests for client, manager, and GUI mapping.
2026-08-20 12:52:31 -07:00
Devika Verma 9ac59aafe3 Merge branch 'main' of https://github.com/andrewyng/openworker into feature/permission-modes
# Conflicts:
#	tests/test_openai_responses.py
2026-08-20 09:01:15 +05:30
Devika Verma 7be4cda8c7 Keep the reviewer corpus to rows the gate actually sends there 2026-08-19 21:53:26 +05:30
Devika Verma cba686a6b9 Gate contact-enrichment lookups as egress 2026-08-19 21:41:58 +05:30
Devika Verma 8e6a43f296 OPE-124: check the address a browser navigation actually lands on 2026-08-19 19:34:17 +05:30
Devika Verma 52060683d4 OPE-117: skills and scheduled tasks reach a human, never the reviewer 2026-08-19 19:20:09 +05:30
Devika Verma 8af72d9653 OPE-122: enforce granted roots in browser upload and screenshot 2026-08-19 19:00:50 +05:30
Devika Verma b24bb81f67 OPE-115: repoint corpus rows to real tools, add registry and schema guards 2026-08-19 18:46:21 +05:30
Devika Verma 3055a9ff3f Extend provenance to the layered corpus and guard the field-name clash 2026-08-19 18:33:57 +05:30
Devika Verma ab44e077df Add provenance corpus pair and wire it through the harness 2026-08-19 18:27:18 +05:30
Devika Verma 838eb6a783 Show file provenance on the approval card 2026-08-19 18:20:47 +05:30
Devika Verma b06a03b1b9 OPE-114: flag files the agent created or downloaded before running them 2026-08-19 18:20:47 +05:30