Spaces:
Runtime error
Runtime error
Commit History
-
feat: add first-time setup wizard and zero-config startup
NykEliminate friction for new users by adding a web-based setup wizard, auto-generating infrastructure secrets, and providing actionable feedback when no admin account exists. - Add /setup page with visual progress steps for admin account creation - Add /api/setup route (GET: check status, POST: create admin + auto-login) - Auto-generate AUTH_SECRET and API_KEY when not set (persisted to .data/) - Add docker-entrypoint.sh for zero-config Docker startup - Login page auto-redirects to /setup when no users exist - Login API returns NO_USERS error code with setup guidance - Remove insecure defaults from .env.example - Update README Quick Start for zero-config Docker and web setup - Add CLAUDE.md for AI agent discoverability943fe08
-
feat(auth): add trusted reverse proxy / header authentication (#306)
Unverified signatureAdds MC_PROXY_AUTH_HEADER env var. When configured, getUserFromRequest reads the named header for the authenticated username and resolves (or optionally auto-provisions) the MC user without requiring a password. This enables SSO via a trusted gateway such as Envoy OIDC — the gateway injects preferred_username as a header from the validated JWT claim, and MC maps it to an existing user, skipping the local login form entirely. New env vars: MC_PROXY_AUTH_HEADER — header name to read username from MC_PROXY_AUTH_DEFAULT_ROLE — role for auto-provisioned users (optional) Auto-provisioned users receive a random unusable password so they cannot bypass the proxy and log in locally. Closes #305 Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com>8b5f37d
-
fix: resolve open docker and gateway-optional regressions (#291)
nykUnverified signature6060dbd -
feat(refactor): ready for manual QA after main sync (#274)
nyk +1: Claude Opus 4.6Unverified signature* fix: preserve gateway token query in websocket URLs * fix: classify secure-context device identity handshake errors * fix: normalize trailing dot in host allowlist checks * fix: support proxied gateway websocket paths and tailnet host normalization * fix: auto-connect startup to primary configured gateway * fix: keep gateway tokens server-side only * fix: allow authenticated viewers to resolve gateway connect credentials * fix: identify mission control as operator gateway client * fix: redirect remote http sessions to https for gateway auth * fix: support URL-style gateway hosts in health probes * fix: resolve primary gateway credentials from detected openclaw runtime * fix: hide duplicate gateway connection summary when managed * refactor: remove super admin and workspaces panels from UI navigation * fix: treat configured gateways as full-mode capability * refactor: move promo banner copy into subtle footer note * fix: stabilize gateway websocket connect protocol dete…b6ecafa
-
feat: add configurable PORT for dev and start servers (#179)
PatrickUnverified signature- package.json: dev and start scripts now use ${PORT:-3000} - Dockerfile: healthcheck uses ${PORT:-3000}, ENV PORT=3000 as default - docker-compose.yml: passes PORT env to container, maps MC_PORT to PORT - .env.example: documents PORT variable Set PORT=<number> to change the listening port. Defaults to 3000. Previously dev used Next.js default (3000) and start hardcoded 3005.c6eb9fa -
fix: macOS compatibility for status commands and gateway client id
Unverified signatureReplace Linux-only commands (uptime -s, free -m, df --output=pcent) with cross-platform alternatives using process.platform detection and Node.js os module. Rename gateway client ID from control-ui to openclaw-control-ui. Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>be80b82
-
fix: add OpenClaw 3.2 compatibility for spawn and gateway health
Nyke7f2128 -
fix: support AUTH_PASS_B64 for seeded admin password
Nyk2b182b0
-
docs: clarify OPENCLAW_MEMORY_DIR for memory browser
rezero-householdOpenClaw does not create a memory/ subdirectory under OPENCLAW_HOME. Agent memory markdown files (daily logs, MEMORY.md, etc.) live in each agent's workspace directory, not in ~/.openclaw/memory/. Without OPENCLAW_MEMORY_DIR set, the memory browser falls back to OPENCLAW_HOME, which only contains .sqlite session indices — not the human-readable markdown files users expect to see. Document the correct value and add an inline note to .env.example.81fda2e -
fix: scrub deployment-specific data from public repo
Nyk- Replace hardcoded Telegram bot integrations (Jarv/Forge/Nefes/Ops) with a single generic Telegram entry - Remove 'forge' agent from hardcoded UI color themes - Replace /home/openclaw/ paths in .env.example with /path/to/ - Fix default port in scripts: 3005 → 3000 (matches docs) - Replace 'Jarvis' placeholder with generic 'my-agent' - Rename 'Forge' → 'Builder' in agent identity registry2d79c1a
-
feat: initial open-source release
NykOpenClaw Mission Control — agent orchestration dashboard. Built with Next.js 16, React 19, TypeScript, SQLite, and Tailwind CSS. MIT License.bbbc03f