bkinnightskytw
/
agent-orchestrator
mirror of https://github.com/ComposioHQ/agent-orchestrator.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
agent-orchestrator/packages/web/CHANGELOG.md

23 KiB
Raw Permalink Blame History

@aoagents/ao-web

0.9.1

Patch Changes

  • 2d4c457: Fix canary nightly to include all publishable packages and fix Next.js import.meta.url build path issue
  • Updated dependencies [2d4c457]
    • @aoagents/ao-core@0.9.1
    • @aoagents/ao-plugin-agent-claude-code@0.9.1
    • @aoagents/ao-plugin-agent-codex@0.9.1
    • @aoagents/ao-plugin-agent-cursor@0.9.1
    • @aoagents/ao-plugin-agent-grok@0.1.2
    • @aoagents/ao-plugin-agent-kimicode@0.9.1
    • @aoagents/ao-plugin-agent-opencode@0.9.1
    • @aoagents/ao-plugin-runtime-process@0.9.1
    • @aoagents/ao-plugin-runtime-tmux@0.9.1
    • @aoagents/ao-plugin-scm-github@0.9.1
    • @aoagents/ao-plugin-tracker-github@0.9.1
    • @aoagents/ao-plugin-tracker-linear@0.9.1
    • @aoagents/ao-plugin-workspace-worktree@0.9.1

0.9.0

Minor Changes

  • 73bed33: Wire activity events into webhook ingress and the mux WebSocket terminal server (sub-issue of #1511, follows #1620).

    • api.webhook_unverified (warn) — signature verification failed; data includes slug, remoteAddr, candidateCount (never the failed signature)
    • api.webhook_rejected (warn) — payload exceeded maxBodyBytes; data includes counts and maxBodyBytes (never the body)
    • api.webhook_received (info|warn) — accepted webhook; data includes projectIds, matchedSessions, parseErrorCount, lifecycleErrorCount (never the body)
    • api.webhook_failed (error) — outer pipeline crash with errorMessage
    • ui.terminal_connected / ui.terminal_disconnected — one event per mux WS connection lifecycle
    • ui.terminal_heartbeat_lost (warn) — fires once on 3 missed pongs (was console-only)
    • ui.terminal_pty_lost (warn) — fires when PTY exits with subscribers attached (distinguishes "PTY died" from "user closed browser")
    • ui.terminal_protocol_error (warn) — invalid mux client message
    • ui.session_broadcast_failed (warn) — emitted on the healthy→failing transition only (re-arms after a successful poll), so a long outage produces one event, not 20/min

    api.webhook_unverified is the security-audit event; treat 401s on webhooks as a signal worth retaining for the full 7-day window.

  • 94981dc: feat: "Launch Orchestrator (clean context)" action on the orchestrator session page

    Adds a Relaunch (clean) action on the orchestrator session page that replaces the project's canonical orchestrator with a fresh one — killing the existing orchestrator, deleting its metadata, and spawning a new session with no carryover state. Backed by a new SessionManager.relaunchOrchestrator(config) method that ignores orchestratorSessionStrategy. Removes the now-redundant Orchestrator Selector page (/orchestrators?project=X) — there is only ever one orchestrator per project, so a selector page is no longer meaningful. Closes #1900 and #1080.

Patch Changes

  • ee3fb5d: Fix Done/Terminated section on the dashboard not scrolling. The dashboard body now scrolls as a single page — kanban above, Done/Terminated below — so older terminated sessions are reachable when many accumulate. Restores the pre-Warm-Terminal-refresh behavior by dropping the flex: 1 that was making .kanban-board-wrap greedily consume all remaining body height and defeat the body's overflow-y: auto.

  • 2980570: Add the notifier test harness, dashboard notifications, and desktop notifier setup.

  • 07c9099: fix(web): show Restore button for every exited session, including pr_merged

    The Restore button was hidden for sessions exited with pr_merged reason (legacy
    status cleanup) on the dashboard kanban and absent altogether from the
    session-detail "Terminal ended" panel. The core isRestorable() helper already
    allowed restoring these sessions; the dashboard helpers were out of sync. Fixes
    #1907.

    • isDashboardSessionRestorable now gates on NON_RESTORABLE_STATUSES only,
      matching core's isRestorable. Merged-but-running sessions remain
      non-restorable (lifecycle isn't terminal).
    • DoneCard no longer hides Restore for merged sessions.
    • SessionEndedSummary exposes a prominent Restore session button next to
      Open PR / Back to dashboard, so users don't have to find the small
      header icon.

  • Updated dependencies [73bed33]

  • Updated dependencies [a610601]

  • Updated dependencies [8c71bde]

  • Updated dependencies [7d9b862]

  • Updated dependencies [6d48022]

  • Updated dependencies [fcedb25]

  • Updated dependencies [94981dc]

  • Updated dependencies [6d48022]

  • Updated dependencies [2980570]

  • Updated dependencies [d5d0f07]

    • @aoagents/ao-core@0.9.0
    • @aoagents/ao-plugin-agent-claude-code@0.9.0
    • @aoagents/ao-plugin-tracker-linear@0.9.0
    • @aoagents/ao-plugin-agent-codex@0.9.0
    • @aoagents/ao-plugin-agent-cursor@0.9.0
    • @aoagents/ao-plugin-agent-grok@0.1.1
    • @aoagents/ao-plugin-agent-kimicode@0.9.0
    • @aoagents/ao-plugin-agent-opencode@0.9.0
    • @aoagents/ao-plugin-runtime-process@0.9.0
    • @aoagents/ao-plugin-runtime-tmux@0.9.0
    • @aoagents/ao-plugin-scm-github@0.9.0
    • @aoagents/ao-plugin-tracker-github@0.9.0
    • @aoagents/ao-plugin-workspace-worktree@0.9.0

0.8.0

Patch Changes

  • Updated dependencies
    • @aoagents/ao-core@0.8.0
    • @aoagents/ao-plugin-agent-claude-code@0.8.0
    • @aoagents/ao-plugin-agent-codex@0.8.0
    • @aoagents/ao-plugin-agent-opencode@0.8.0
    • @aoagents/ao-plugin-agent-cursor@0.8.0
    • @aoagents/ao-plugin-agent-kimicode@0.8.0
    • @aoagents/ao-plugin-runtime-process@0.8.0
    • @aoagents/ao-plugin-runtime-tmux@0.8.0
    • @aoagents/ao-plugin-scm-github@0.8.0
    • @aoagents/ao-plugin-tracker-github@0.8.0
    • @aoagents/ao-plugin-tracker-linear@0.8.0
    • @aoagents/ao-plugin-workspace-worktree@0.8.0

0.7.0

Minor Changes

  • 0f5ae0b: feat: native Windows support

    AO now runs natively on Windows. The default runtime on Windows is process
    (ConPTY via node-pty + named pipes — no tmux, no WSL); the dashboard,
    agents (claude-code, codex, kimicode, aider, opencode, cursor), ao doctor,
    and ao update all work out of the box. Each session gets a small detached
    pty-host helper that wraps a ConPTY behind \\.\pipe\ao-pty-<sessionId>,
    registered so ao stop can reach it.

    A new cross-platform abstraction layer (packages/core/src/platform.ts)
    centralises every platform branch behind helpers like isWindows(),
    getDefaultRuntime(), getShell(), killProcessTree(), findPidByPort(),
    and getEnvDefaults(). Path comparison uses pathsEqual /
    canonicalCompareKey to handle NTFS case-insensitivity. PATH wrappers for
    agent plugins (gh, git) ship as .cjs + .cmd shims on Windows;
    script-runner runs .ps1 siblings of .sh scripts via PowerShell. New
    ao-doctor.ps1 / ao-update.ps1 shipped.

    ao open is now cross-platform: it sources sessions from sm.list()
    instead of tmux list-sessions (so runtime-process sessions on Windows
    appear), and the open action branches per OS — open-iterm-tab stays the
    macOS path, native handling on Windows and Linux.

    Behaviour on macOS and Linux is unchanged. Every Windows path is gated
    behind isWindows(); runtime-tmux and the bash hook flows are untouched.

    See docs/CROSS_PLATFORM.md for the developer reference (helper inventory,
    EPERM-vs-ESRCH gotcha, PowerShell-vs-bash differences, pre-merge checklist).
    The Windows runtime architecture (pty-host, pipe protocol, registry, sweep,
    mux WS Windows branch) is documented in docs/ARCHITECTURE.md.

  • 7c46dc9: feat(release): weekly release train — channels, onboarding, dashboard banner, cron

    Ships the full release pipeline described in release-process.html:

    • Cron-driven nightly canary. .github/workflows/canary.yml triggers via
      schedule: '0 18 * * 5,6,0,1,2' (23:30 IST Fri–Tue) plus workflow_dispatch.
      Bake window (Wed–Thu) pauses scheduled nightlies; the captain re-cuts via
      workflowdispatch when a fix lands. Stable release.yml publishes via
      changesets/action. .changeset/config.json adds the snapshot template
      ({tag}-{commit}). @aoagents/ao-web stays in the linked group and ships
      alongside @aoagents/ao-cli (it's a workspace:       runtime dep, so marking it
      private would 404 every npm install -g @aoagents/ao after publish).
      scripts/check-publishable-deps.mjs runs in both release.yml and canary.yml
      before the publish step and fails CI if a publishable package depends on a
      private: true package via workspace:_.
    • Update channels. New updateChannel field in the global config schema
      (stable | nightly | manual, default manual so existing users see no
      surprise installs). update-check.ts reads dist-tags[channel] from the
      npm registry, compares prerelease versions segment-by-segment so SHA-suffixed
      nightlies sort correctly, and skips notices entirely on manual.
    • Soft auto-install + active-session guard. On stable/nightly, ao update
      skips the confirm prompt and just installs. Before installing it lists
      sessions and refuses with N session(s) active. Run \ao stop` first.if any are inworking/idle/needs_input/stuck. Same guard duplicated in POST /api/update` so the dashboard returns a structured 409.
    • Onboarding question. ao start prompts once for the channel if unset;
      dismissal persists manual. ao config set updateChannel <value> (and
      installMethod) lets users change it later.
    • Dashboard banner. GET /api/version reads the same cache file as the
      CLI. UpdateBanner (Tailwind only, var(--color-*) tokens) appears at the
      top of the dashboard when isOutdated. Click POSTs to /api/update;
      dismissal persists per-version in localStorage.
    • Bun + Homebrew detection. New install-method classifiers for
      ~/.bun/install/global/ (auto-installs bun add -g @aoagents/ao@<channel>)
      and /Cellar/ao/ (notice only — brew upgrade ao to avoid clobbering
      brew's symlinks). installMethod config field overrides path detection.

    Supersedes #1525 (incorporates the canary + release infrastructure with the
    cron / no-stale-SHA-guard / no-merged-PR-comment modifications called out in
    the design doc).

  • 71326bc: Add inline rename for worker sessions in the sidebar. Each worker row now shows a small pencil button on hover; clicking it swaps the label for an input pre-filled with the current title. Enter persists via PATCH /api/sessions/:id, Escape cancels, and an empty value reverts the session to its default title. The rename is written to the existing displayName metadata field and is now the highest-priority signal in getSessionTitle, so a user-chosen label always beats PR/issue titles. The session ID (ao-N) remains the canonical identifier — only display surfaces change. (#1647)

Patch Changes

  • 845fffd: Tmux sessions no longer die when the agent process inside them exits. When you Ctrl-C the agent in a web terminal, the pane now drops to an interactive $SHELL in the workspace dir instead of nuking the tmux session and leaving the dashboard in a phantom "runtime lost" state. The lifecycle manager still detects the agent exit (via agent.isProcessRunning) and transitions the session to agent_process_exited, but the runtime stays usable so you can run shell commands or manually re-launch the agent.

    Also: the mux-websocket re-attach loop now checks tmux has-session before retrying after a PTY exit. When the tmux session is genuinely gone (e.g. ao stop), it skips the three doomed attach-session spawns from #1640 and notifies the dashboard immediately. (#1756)

  • Updated dependencies [845fffd]

  • Updated dependencies [0f5ae0b]

  • Updated dependencies [fe33bb7]

  • Updated dependencies [7c46dc9]

  • Updated dependencies [a33b2ba]

    • @aoagents/ao-plugin-runtime-tmux@0.7.0
    • @aoagents/ao-core@0.7.0
    • @aoagents/ao-plugin-runtime-process@0.7.0
    • @aoagents/ao-plugin-agent-claude-code@0.7.0
    • @aoagents/ao-plugin-agent-codex@0.7.0
    • @aoagents/ao-plugin-agent-opencode@0.7.0
    • @aoagents/ao-plugin-workspace-worktree@0.7.0
    • @aoagents/ao-plugin-tracker-github@0.7.0
    • @aoagents/ao-plugin-tracker-linear@0.7.0
    • @aoagents/ao-plugin-scm-github@0.7.0
    • @aoagents/ao-plugin-agent-cursor@0.7.0
    • @aoagents/ao-plugin-agent-kimicode@0.7.0

0.6.0

Patch Changes

  • Drop = prefix from set-option invocation in mux-websocket so tmux accepts the option without erroring out (#1715).
  • Bound the PTY re-attach loop with a grace-period counter reset to prevent runaway reconnect attempts (#1640).
  • Disable xterm scrollback to prevent terminal right-side clipping (#1678).
  • Updated dependencies
  • Updated dependencies [40aeb78]
  • Updated dependencies
  • Updated dependencies
    • @aoagents/ao-core@0.6.0
    • @aoagents/ao-plugin-runtime-tmux@0.6.0
    • @aoagents/ao-plugin-agent-claude-code@0.6.0
    • @aoagents/ao-plugin-agent-codex@0.6.0
    • @aoagents/ao-plugin-agent-cursor@0.1.4
    • @aoagents/ao-plugin-agent-kimicode@0.1.3
    • @aoagents/ao-plugin-agent-opencode@0.6.0
    • @aoagents/ao-plugin-scm-github@0.6.0
    • @aoagents/ao-plugin-tracker-github@0.6.0
    • @aoagents/ao-plugin-tracker-linear@0.6.0
    • @aoagents/ao-plugin-workspace-worktree@0.6.0

0.5.0

Patch Changes

  • dd07b6b: Fix direct terminal attach and keep mux routing project-scoped. Switches resolveExactTmuxName from execFileSync to a promisified execFile so slow tmux calls no longer stall the WebSocket message handler, and propagates async through TerminalManager.open / subscribe and the pty onExit reattach path. Also drops a duplicate .kanban-board grid rule in globals.css.
  • dd07b6b: Render an empty-state in the project sidebar when no projects are configured. Fresh-install users previously saw a blank sidebar with no way to open the Add Project modal; the sidebar now shows a small empty-state with the + button wired up.
  • Updated dependencies [dd07b6b]
    • @aoagents/ao-core@0.5.0
    • @aoagents/ao-plugin-agent-claude-code@0.5.0
    • @aoagents/ao-plugin-agent-codex@0.5.0
    • @aoagents/ao-plugin-agent-cursor@0.1.3
    • @aoagents/ao-plugin-agent-kimicode@0.1.2
    • @aoagents/ao-plugin-agent-opencode@0.5.0
    • @aoagents/ao-plugin-runtime-tmux@0.5.0
    • @aoagents/ao-plugin-scm-github@0.5.0
    • @aoagents/ao-plugin-tracker-github@0.5.0
    • @aoagents/ao-plugin-tracker-linear@0.5.0
    • @aoagents/ao-plugin-workspace-worktree@0.5.0

0.4.0

Patch Changes

  • b0d0994: Improve Claude Code and Codex session cost estimates to account for cached-token spend, make Codex restore commands fall back to approval prompts for worker sessions instead of blindly reusing dangerous bypass flags, and register the Codex plugin in the web dashboard so native activity detection works there.

  • 0cf0190: Make session detail agent reports collapsible and add explicit audit attribution for the session, actor, and report source command.

  • e1bb51f: Fix restore behavior across AO session recovery flows.

    • restore the latest dead-but-restorable orchestrator on ao start instead of silently spawning a new orchestrator when tmux is gone
    • make worker session orchestrator navigation prefer the most recently active live orchestrator for the project
    • make permissionless Codex restores preserve dangerous bypass semantics so resumed workers behave like fresh permissionless launches

  • 08667c8: Keep closed-unmerged sessions actionable in the dashboard by removing them from the done lane unless the runtime actually ended, and hide restore controls for merged sessions that are intentionally non-restorable.

  • eca3001: Fix DirectTerminal "can't find session" when the project uses a wrapped storageKey. ao-core names tmux sessions as {storageKey}-{sessionId}, where storageKey can be either a bare 12-char hash or the legacy wrapped form {hash}-{projectName} (e.g. 361287ebbad1-smx-foundation). The web resolver only handled the bare-hash form, so lookups for sessions like sf-orchestrator-1 against the tmux name 361287ebbad1-smx-foundation-sf-orchestrator-1 always returned null and the terminal never attached (#1486).

    The resolver now looks up the owning storageKey on disk (from the session record at ~/.agent-orchestrator/{storageKey}/sessions/{sessionId}) and asks tmux for the exact {storageKey}-{sessionId} name. The on-disk record is the authoritative disambiguator, so sessions whose IDs happen to be suffixes of other session IDs (e.g. looking up app-1 while my-app-1 exists in the same project) cannot be falsely matched. If the on-disk record is missing, the resolver still recovers bare-hash sessions via the tmux session listing as a fallback.

  • f674422: Make project orchestrators deterministic and idempotent.

    • ensure each project uses the canonical {prefix}-orchestrator session instead of creating numbered main orchestrators
    • make ao start, the dashboard, and the orchestrator API reuse or restore the canonical session
    • keep legacy numbered orchestrators visible as stale sessions without treating them as the main orchestrator

  • ca8c4cc: Model activity evidence explicitly across lifecycle inference and dashboard rendering so missing or failed probes cannot spuriously produce idle or stuck interpretations. This also stabilizes repeated polls by preserving stronger prior lifecycle states when the only new evidence is weak or unavailable.

  • c8af50f: Make ProjectConfig.repo optional to support projects without a configured remote.

    Migration: ProjectConfig.repo is now string | undefined instead of string.
    External plugins that access project.repo directly (e.g. project.repo.split("/")) must
    add a null check first. Use a guard like if (!project.repo) return null; or a helper that
    throws with a descriptive error.

  • bcdda4b: Tighten the session lifecycle review follow-ups by debouncing report-watcher reactions, restoring the shared Geist/JetBrains font setup, wiring recovery validation to real agent activity probes, adding direct coverage for ao report, activity-signal classification, and dashboard lifecycle audit panels, fixing the remaining lifecycle-state regressions around legacy merged-session rehydration and malformed canonical payload parsing, making agent-report metadata writes atomic, persisting canonical payloads for legacy sessions on read, stabilizing detecting evidence hashes, and removing the remaining inline-style cleanup debt from the session detail view. Follow-on fixes also split the Session Detail view into smaller components, harden PR URL parsing and wrapper capture for GitHub Enterprise and GitLab-style hosts, redact sensitive observability payload fields, bound on-disk audit logs, and align cleanup wording with the current merged-session lifecycle policy.

  • eb7314b: Refactor SessionDetail.tsx by extracting the topbar header, PR card, and unresolved comment thread into dedicated components. The previously-orphaned SessionDetailPRCard, session-detail-utils, and session-detail-agent-actions modules are now wired in. All files are under the 400-line component limit.

  • 1cbf657: Split orchestrator-only detail views from worker detail views, add an auditable history for ao acknowledge / ao report, and preserve canonical needs_input / stuck lifecycle states when polling only has weak or unchanged evidence.

  • a45eb32: Decouple canonical session state from PR state so workers stay idle while waiting on reviews or merged/closed PR decisions, stop cleanup from auto-killing merged PR sessions, and make the dashboard/rendered labels follow canonical PR truth instead of inferring it from legacy lifecycle aliases.

  • 7072143: Expose split session, PR, and runtime lifecycle truth in dashboard API payloads, render that truth directly in session cards and detail views, and extend lifecycle observability with structured transition evidence, reasons, and recovery context while preserving legacy metadata compatibility.

  • e518562: Add a dashboard control to copy observability diagnostics and page context to the clipboard for support and issue reports.

  • fed25d5: Show GitHub compare and copy-branch actions on session PR detail when the PR has merge conflicts.

  • Updated dependencies [2306078]

  • Updated dependencies [b0d0994]

  • Updated dependencies [faaddb1]

  • Updated dependencies [f330a1e]

  • Updated dependencies [a862327]

  • Updated dependencies [331f1ce]

  • Updated dependencies [e465a47]

  • Updated dependencies [703d584]

  • Updated dependencies [e1bb51f]

  • Updated dependencies [f674422]

  • Updated dependencies [62353eb]

  • Updated dependencies [bd36c7b]

  • Updated dependencies [e7ad928]

  • Updated dependencies [ca8c4cc]

  • Updated dependencies [7b82374]

  • Updated dependencies [4701122]

  • Updated dependencies [c8af50f]

  • Updated dependencies [bcdda4b]

  • Updated dependencies [a8bc746]

  • Updated dependencies [a8bc746]

  • Updated dependencies [1cbf657]

  • Updated dependencies [c447c7c]

  • Updated dependencies [a45eb32]

  • Updated dependencies [7072143]

  • Updated dependencies [a8bc746]

  • Updated dependencies [ed2dcea]

    • @aoagents/ao-core@0.4.0
    • @aoagents/ao-plugin-agent-codex@0.4.0
    • @aoagents/ao-plugin-agent-claude-code@0.4.0
    • @aoagents/ao-plugin-agent-opencode@0.4.0
    • @aoagents/ao-plugin-scm-github@0.4.0
    • @aoagents/ao-plugin-tracker-github@0.4.0
    • @aoagents/ao-plugin-agent-cursor@0.1.2
    • @aoagents/ao-plugin-agent-kimicode@0.1.1
    • @aoagents/ao-plugin-runtime-tmux@0.4.0
    • @aoagents/ao-plugin-tracker-linear@0.4.0
    • @aoagents/ao-plugin-workspace-worktree@0.4.0

0.2.2

Patch Changes

  • 5315e4e: Fix runtime terminal websocket connectivity for npm-installed/prebuilt runs and harden project validation across API routes.
    • add runtime terminal config endpoint (/api/runtime/terminal) so the browser can read runtime-selected ports
    • make direct terminal client resolve websocket target from runtime config before connect/reconnect
    • add AbortController (1.5s) to runtime config fetch so a slow endpoint cannot block WebSocket connection
    • prevent repeated runtime config fetches on reconnect when the endpoint is unavailable
    • centralize project existence check via validateConfiguredProject (uses Object.hasOwn to avoid prototype-chain bypass)
    • apply semantic project validation to /api/spawn, /api/issues, /api/verify, and /api/orchestrators
    • return deterministic 404 Unknown project from all routes for non-configured project IDs
    • normalize dashboard project filter to configured project IDs to prevent invalid query state propagation

0.2.0

Minor Changes

  • 3a650b0: Zero-friction onboarding: ao start auto-detects project, generates config, and launches dashboard — no prompts, no manual setup. Renamed npm package to @composio/ao. Made @composio/ao-web publishable with production entry point. Cross-platform agent detection. Auto-port-finding. Permission auto-retry in shell scripts.

Patch Changes

  • Updated dependencies [3a650b0]
    • @composio/ao-core@0.2.0
    • @composio/ao-plugin-agent-claude-code@0.2.0
    • @composio/ao-plugin-agent-opencode@0.2.0
    • @composio/ao-plugin-runtime-tmux@0.2.0
    • @composio/ao-plugin-scm-github@0.2.0
    • @composio/ao-plugin-tracker-github@0.2.0
    • @composio/ao-plugin-tracker-linear@0.2.0
    • @composio/ao-plugin-workspace-worktree@0.2.0