171 Commits

Author	SHA1	Message	Date
Gan, Jimmy	971cf34087	fix: serialize datetime objects in agent dict before JSON encoding in create_agent_execution	2026-04-02 21:55:13 +08:00
Gan, Jimmy	bdeaa7ccea	fix: serialize datetime objects before JSON encoding in create_agent_execution	2026-04-02 21:20:10 +08:00
Gan, Jimmy	8c08ae32cc	fix: create agent execution when moving assigned task to in_progress	2026-04-02 21:14:27 +08:00
Gan, Jimmy	d457edab17	debug: add more logging at start of move_task function	2026-04-02 21:03:29 +08:00
Gan, Jimmy	9fcbeca264	debug: add logging to move endpoint to trace execution creation	2026-04-02 10:33:48 +08:00
Gan, Jimmy	2c8f4fcd5c	fix: auto-assign tasks to PM agent when moved to in_progress, fix datetime serialization in WebSocket, add executor logging	2026-04-02 10:22:15 +08:00
Gan, Jimmy	e1fc23981f	fix: update test imports from auth to auth_service	2026-04-02 09:12:48 +08:00
Gan, Jimmy	a4782ecb1c	fix: don't await executor.start() as it's an infinite loop - create task instead	2026-04-02 09:01:06 +08:00
Gan, Jimmy	a31000d8ad	debug: add print statements to track executor initialization	2026-04-02 08:59:06 +08:00
Gan, Jimmy	7b466e3980	fix: store executor and monitor tasks to prevent garbage collection	2026-04-02 08:49:12 +08:00
Gan, Jimmy	949838c5f2	fix: use lifespan context manager instead of deprecated on_event for startup	2026-04-02 02:04:59 +08:00
Gan, Jimmy	1663535beb	fix: handle datetime serialization in update_task and move endpoint	2026-04-02 01:47:33 +08:00
Gan, Jimmy	9f2cd7cab2	fix: convert datetime objects to ISO strings before JSON serialization in task history	2026-04-02 01:38:08 +08:00
Gan, Jimmy	f2b490e2e8	fix: strip timezone from datetime fields in task update endpoint	2026-04-02 01:28:18 +08:00
Gan, Jimmy	5d7d774ca1	fix: strip timezone from due_date to match TIMESTAMP column type	2026-04-02 01:27:18 +08:00
Gan, Jimmy	1b769bca1d	fix: rename auth module to auth_service to resolve circular import	2026-04-02 01:02:45 +08:00
Gan, Jimmy	2b3e5d6e7c	fix: rename auth router import to auth_router to avoid namespace conflict	2026-04-02 00:49:53 +08:00
Gan, Jimmy	6cffc1f9ff	fix: update OPC routers to use request.state.user instead of Depends(_inject_user)	2026-04-02 00:45:26 +08:00
Gan, Jimmy	5cfb92cfc6	fix: revert to original _inject_user in main.py, ensure it runs before require_page	2026-04-02 00:34:25 +08:00
Gan, Jimmy	ab5f824fea	fix: remove duplicate _inject_user from main.py, use the one from rbac module	2026-04-02 00:30:37 +08:00
Gan, Jimmy	e46003711b	fix: make RBAC dependencies properly chain _inject_user for OPC authorization	2026-04-02 00:25:32 +08:00
Gan, Jimmy	213d0e897c	fix: add Authelia groups to RBAC role mapping for OPC access	2026-04-02 00:02:26 +08:00
Gan, Jimmy	2112d84051	fix: correct import paths and syntax in frontend tests	2026-03-31 19:05:13 +08:00
Gan, Jimmy	7b82f7aa25	fix: add GITEA_DB_PASSWORD env var for OPC database connection	2026-03-31 18:17:00 +08:00
Gan, Jimmy	263c518b70	fix: correct _inject_user signature to avoid circular import	2026-03-31 17:55:54 +08:00
Gan, Jimmy	e8f1373b41	fix: add _inject_user to rbac module for OPC routers	2026-03-31 16:40:40 +08:00
Gan, Jimmy	252b94aece	feat: complete Phase 1 MVP - add agent panel, email notifications, and PDF invoicing ... Agent Panel UI: - Visual dashboard showing all agents with status (idle/working) - Agent cards with stats: total tasks, completed tasks - Capabilities display for each agent - Execution log showing recent agent activity - Real-time updates (refreshes every 10 seconds) - Click agent to filter execution log - Status indicators: pending, running, completed, failed, pending_approval Email Notifications: - SMTP email service with HTML templates - Task assignment notifications - Agent approval request emails with action details - Agent completion notifications - Configurable via environment variables (SMTP_HOST, SMTP_USER, SMTP_PASSWORD, SMTP_TO) - Integrated with agent executor service PDF Invoice Generation: - Professional PDF invoices using ReportLab - Generate from time entries by project - Client information and company branding - Itemized time entries with hours, rates, amounts - Automatic totals calculation - Download as PDF attachment - API endpoints: /api/opc/invoices/generate - Projects and clients management endpoints Additional Features: - Projects CRUD API - Clients CRUD API - Project time tracking summary - Billable vs non-billable hours tracking Phase 1 MVP 100% Complete: ✅ PostgreSQL database with full schema ✅ Task CRUD API with automatic time tracking ✅ Kanban board with drag-and-drop ✅ Agent executor service with LLM integration ✅ WebSocket real-time updates ✅ 3 core agents (PM, CTO, COO) ✅ Agent panel UI with execution logs ✅ Email notifications (Telegram + Email) ✅ PDF invoice generation All 12 tasks completed!	2026-03-31 14:52:42 +08:00
Gan, Jimmy	1422cc9bc8	feat: complete Phase 1 MVP - add agent executor and WebSocket real-time updates ... Agent Executor Service: - BaseAgent class with LLM integration via LiteLLM proxy - AgentExecutor service that processes pending executions every 5 seconds - Action execution: create_subtask, update_status, send_notification, add_comment - Approval workflow: CxO level agents require user approval before execution - Telegram notifications for approvals and completions - Error handling and execution status tracking WebSocket Real-Time Updates: - WebSocket endpoint at /ws/opc for real-time task updates - ConnectionManager for broadcasting to all connected clients - Frontend WebSocket client with auto-reconnect - Live updates for task create/update/move/delete actions - Agent execution status broadcasts Integration: - Agent executor starts on dashboard startup - Task router broadcasts WebSocket updates on all mutations - Frontend OPC page subscribes to WebSocket and updates UI in real-time - Agents (PM, CTO, COO) can now execute tasks autonomously Phase 1 MVP Complete: ✅ PostgreSQL database with full schema ✅ Task CRUD API with automatic time tracking ✅ Kanban board with drag-and-drop ✅ Agent executor service with LLM integration ✅ WebSocket real-time updates ✅ 3 core agents ready to execute Next: Agent panel UI, email notifications, PDF invoicing	2026-03-31 14:46:44 +08:00
Gan, Jimmy	fc0bb2979b	fix: use lazy initialization for Docker clients in cc_connect and security routers	2026-03-31 14:32:47 +08:00
Gan, Jimmy	1ca019fa48	feat: add OPC (One Person Company) management system with Kanban board ... Phase 1 MVP implementation: - PostgreSQL database schema for tasks, agents, executions, time tracking - Backend API: task CRUD, agent management, automatic time tracking - Frontend: Kanban board with drag-and-drop (Parking Lot → In Progress → Done) - Task modal for creating/editing tasks with tags, priority, assignee - 3 core agents seeded: PM, CTO, COO - Agent approval workflow: CxO level requires approval, others auto-execute - Automatic time tracking: starts on in_progress, stops on done - RBAC integration: OPC page accessible to admin/member roles Features: - Drag-and-drop tasks between columns - Assign tasks to humans or AI agents - Priority badges (low, medium, high, urgent) - Tags and due dates - Task history tracking - Time entry tracking with automatic timer - Agent execution records with approval workflow Next steps: - Initialize OPC database on NAS - Implement agent executor service - Add WebSocket for real-time updates - Add email notifications - Add PDF invoice generation	2026-03-31 14:31:31 +08:00
Gan, Jimmy	3169185999	fix: use lazy initialization for Docker client to prevent hanging in test environment	2026-03-31 11:57:14 +08:00
Gan, Jimmy	01344e8b2d	test: add basic diagnostic tests to validate CI environment	2026-03-31 11:38:44 +08:00
Gan, Jimmy	8431920d26	feat: add comprehensive unit and integration testing infrastructure ... - Backend: pytest with unit tests (auth, rbac, config) and integration tests (auth flow, docker, files) - Frontend: vitest with unit tests (api client) and component tests (login) - CI: Gitea Actions workflow for automated testing with coverage reports - Documentation: TESTING.md guide with setup, usage, and best practices - Coverage goals: 80%+ backend, 70%+ frontend	2026-03-30 11:11:39 +08:00
Gan, Jimmy	0c45efc0ca	fix: terminal auth — skip pre-emptive refresh, always refresh on app load for fresh cookies	2026-03-20 01:04:14 +08:00
Gan, Jimmy	b742ab8fef	fix: harden terminal WebSocket edge cases ... - Wrap tryRefreshSession in try-finally to ensure authRecoveryInFlight is always reset - Fix variable scope issue: use const tabState instead of reassigning d - Add error handling for process.stdin.write() to catch BrokenPipeError/OSError - Verify WebSocket instance before closing in ping timeout callback - Properly await conn.wait_closed() to prevent SSH connection leaks - Gracefully cancel and wait for read_task with 2s timeout These fixes prevent race conditions, resource leaks, and improve error recovery.	2026-03-15 23:18:20 +08:00
Gan, Jimmy	d69b744ae7	fix: resolve variable redeclaration in Terminal.svelte ... Change 'const d' to 'let d' to allow reassignment in nested scopes	2026-03-13 22:45:55 +08:00
Gan, Jimmy	7b17a53cab	fix: resolve terminal WebSocket auth failures and improve reconnection ... - Remove insecure query token parameter from backend (cookie-only auth) - Add detailed JWT error logging (expired, invalid, missing tokens) - Force token refresh before first WebSocket connection - Stop reconnection after 3 consecutive auth failures - Increase ping interval from 12s to 30s (reduce traffic) - Increase pong timeout from 5s to 10s (handle network latency) - Show attempt counter in reconnection error messages Root cause: Frontend was reconnecting with 6-day-old expired token, causing 403 rejections. Now ensures fresh cookies before connecting.	2026-03-13 22:26:22 +08:00
Gan, Jimmy	00b5d362e7	debug: add detailed logging for terminal WebSocket connections	2026-03-12 00:23:23 +08:00
Gan, Jimmy	e0f432bc39	fix: add pong/timeout detection to prevent silent connection hangs ... - Backend now responds to __ping__ with __pong__ - Frontend detects missing pong within 5s and closes connection - This triggers proper reconnect/auth recovery instead of hanging - Fixes 'keepalive ping timeout' issue where connection appears alive but is dead	2026-03-11 23:55:51 +08:00
Gan, Jimmy	74100c8882	fix: change WebAuthn RP_ID to jimmygan.com to support all subdomains	2026-03-11 01:43:19 +08:00
Gan, Jimmy	5c5baba3d4	debug: add step-by-step alerts to trace passkey registration flow	2026-03-11 01:30:12 +08:00
Gan, Jimmy	7277560856	debug: add alert to show WebAuthn errors on iPad ... - Add alert() to display full error details for debugging - Helps diagnose issues when browser console is unavailable	2026-03-11 01:25:36 +08:00
Gan, Jimmy	b98333db36	fix: correct WebAuthn RP_ID to match domain suffix ... - Change RP_ID from jimmygan.com to nas.jimmygan.com - RP_ID must be a valid suffix of the origin domain - Fixes WebAuthn failing silently on iOS/iPadOS	2026-03-11 01:15:36 +08:00
Gan, Jimmy	42c5693ede	fix: add WebAuthn environment variables to docker-compose ... - Set WEBAUTHN_RP_ID=jimmygan.com for both main and dev - Set WEBAUTHN_ORIGINS to match respective domains - Fixes passkey registration failing due to origin mismatch	2026-03-11 01:01:14 +08:00
Gan, Jimmy	2f8a5d84dc	fix: WebAuthn config typo and improve error handling ... - Fix WEBAUTHN_ORIGIN -> WEBAUTHN_ORIGINS env var name - Add null check for cancelled passkey creation - Use finally block to ensure loading state is always reset - Add console.error for better debugging	2026-03-11 00:53:28 +08:00
Gan, Jimmy	75cfafd388	chore: remove CI test comment	2026-03-11 00:47:22 +08:00
Gan, Jimmy	80ad5e9197	test: verify CI auto-trigger for dev branch	2026-03-11 00:41:07 +08:00
Gan, Jimmy	cc3e9dc6fa	fix: improve terminal robustness with exponential backoff and better keepalive ... - Backend: Add 10s connection timeout, improve SSH keepalive (15s × 8 retries) - Backend: Add detailed error logging for debugging - Frontend: Implement exponential backoff (1s → 30s max) instead of fixed 2s - Frontend: Reduce heartbeat to 12s (within 15s SSH keepalive window) - Frontend: Reset reconnect counter on successful connection - Frontend: Fix race condition in auth recovery after manual close	2026-03-11 00:24:17 +08:00
Gan, Jimmy	4201917e17	fix: harden dashboard RBAC and cookie auth flows ... Restrict Docker/Files writes to admins, move terminal websocket auth to cookie-first with temporary query fallback, and migrate refresh-token handling to httpOnly cookies for safer session persistence. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-03-09 23:44:23 +08:00
Gan, Jimmy	e72665c466	fix: refresh terminal websocket auth on reconnect ... Reuse the existing refresh-token flow before opening terminal websocket connections so reconnects can recover from expired access tokens without requiring a full dashboard reload. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-03-07 17:49:46 +08:00