Commit Graph

865 Commits

Author SHA1 Message Date
William Valentin 3f877db762 docs(plans): mark skill-safety-scanner completed 2026-02-15 11:07:13 -08:00
William Valentin 56e887a6bf feat(skills): audit scan results and block unroutable skills 2026-02-15 11:06:52 -08:00
William Valentin 83752d4e1c feat(skills): scan manifest spec and warn on missing permissions 2026-02-15 11:06:02 -08:00
William Valentin 6b4e7585b7 feat(skills): enforce scan during install 2026-02-15 11:03:13 -08:00
William Valentin 1f004e7d1b feat(skills): add static scanner and block unsafe skills 2026-02-15 11:02:11 -08:00
William Valentin a866073cd9 docs(plans): mark vercel-ai-gateway-provider completed 2026-02-15 10:54:21 -08:00
William Valentin 0d73d180da test(models): verify OpenAIClient baseURL wiring 2026-02-15 10:54:05 -08:00
William Valentin a624f5efb5 docs(cli): add Vercel provider to setup and doctor 2026-02-15 10:53:29 -08:00
William Valentin 87e942b4c5 feat(models): add Vercel AI Gateway provider 2026-02-15 10:52:03 -08:00
William Valentin a8307012f5 docs(plans): mark credential-system-v2 completed 2026-02-15 10:43:53 -08:00
William Valentin 60e30a8138 cli: improve doctor auth diagnostics 2026-02-15 10:43:21 -08:00
William Valentin 7627e6e630 daemon: enforce auth_mode for OpenAI and Anthropic 2026-02-15 10:39:53 -08:00
William Valentin fac740f362 docs(architecture): add trust-boundary system map diagram 2026-02-15 10:39:46 -08:00
William Valentin 7e390dd777 tui: extend /login for OpenAI key and Anthropic token 2026-02-15 10:32:13 -08:00
William Valentin 49c8ff620f cli: add openai-key and anthropic token flag 2026-02-15 10:29:31 -08:00
William Valentin 6375f56f67 auth: add Anthropic auth token storage 2026-02-15 10:27:32 -08:00
William Valentin bcf6c377d5 auth: add OpenAI API key storage 2026-02-15 10:26:19 -08:00
William Valentin 9755487793 config: add per-tier auth_mode 2026-02-15 10:23:03 -08:00
William Valentin f2cdd1abd2 docs: add safety docs and OpenClaw gap roadmap 2026-02-15 10:17:07 -08:00
William Valentin 28304ac397 feat(audit): add correlation ids and redaction 2026-02-15 10:16:58 -08:00
William Valentin 67058c8719 feat(security): harden tool provenance and skill isolation 2026-02-15 10:16:55 -08:00
William Valentin 3451df41b9 feat(tools): enforce skill capabilities and secret scopes 2026-02-15 10:16:51 -08:00
William Valentin 9900f41057 feat(skills): validate manifest permissions 2026-02-15 10:16:46 -08:00
William Valentin 892668cb2f docs(plan): OpenClaw-style personal agent without OpenClaw risks 2026-02-14 09:51:17 -08:00
William Valentin b9c752c9d8 docs: update OpenClaw gap analysis for synthetic provider 2026-02-14 09:39:20 -08:00
William Valentin 184ebe4480 models: add synthetic provider 2026-02-14 09:34:39 -08:00
William Valentin b22d6fa0ce feat(gateway): include audio + web_search in system.services 2026-02-14 09:27:42 -08:00
William Valentin 4bb4ad4fba fix(ui): show services in settings page 2026-02-14 09:19:57 -08:00
William Valentin 9475ca29f3 chore: ignore local whisper models directory 2026-02-14 00:44:34 -08:00
William Valentin 6212603821 fix(models): tighten audio capability + correct openai oauth content 2026-02-14 00:43:48 -08:00
William Valentin 4bb8c88fbe feat(auth): add anthropic api key storage and cli auth 2026-02-14 00:43:12 -08:00
William Valentin 0493660e7d feat(gateway): add system.services and dashboard services grid 2026-02-14 00:42:41 -08:00
William Valentin 4f3810ba4c Revert "Use local Whisper compose stack"
This reverts commit 5f833e84a6.
2026-02-13 23:28:49 -08:00
William Valentin 8fa2a6de9d Revert "Fix whisper compose healthcheck"
This reverts commit 93991dd685.
2026-02-13 23:28:46 -08:00
William Valentin 93991dd685 Fix whisper compose healthcheck 2026-02-13 22:52:44 -08:00
William Valentin 5f833e84a6 Use local Whisper compose stack 2026-02-13 22:22:04 -08:00
William Valentin 151b48310e orchestrator: recover from context overflow on fallback 2026-02-13 21:19:02 -08:00
William Valentin 944b2c916a routing: fast-path voice when transcription not configured 2026-02-13 18:35:04 -08:00
William Valentin 7df0569a39 feat(models): add Z.AI (GLM) credential integration and setup flow
Implement first-class Z.AI credential storage and authentication:

- New auth provider: src/auth/zai.ts for Z.AI API key management
- New CLI command: flynn zai-auth to store Z.AI API keys
- New TUI command: /login zai for interactive credential entry
- Modified src/auth/index.ts to register zai provider
- Modified src/cli/index.ts to register zai-auth command
- Modified src/cli/setup/providers.ts to include Z.AI in setup wizard
- Modified src/daemon/models.ts to support zhipuai use_oauth flag
- Modified src/daemon/clientFactory.test.ts to add Z.AI tests
- Modified src/frontends/tui/commands.ts to add login command
- Modified src/frontends/tui/minimal.ts to support credential prompts

This allows users to authenticate with Z.AI (GLM models) without
embedding secrets in config files. Credentials are stored securely in
~/.config/flynn/auth.json and resolved at runtime.

Updated state.json with new feature entry documenting the integration.
2026-02-13 16:23:49 -08:00
William Valentin 8a6cd7f559 docs: Add comprehensive documentation for production deployment and contribution
This commit adds 6 new documentation files to fill critical gaps:

- CONTRIBUTING.md: Developer onboarding guide with setup, workflow,
  code style, testing, and adding features

- TROUBLESHOOTING.md: Common issues and solutions for errors,
  model issues, tool issues, channel issues, gateway issues,
  configuration issues, and memory/database issues

- docs/api/PROTOCOL.md: Gateway JSON-RPC protocol documentation
  with connection, authentication, message format, methods,
  events, error codes, and example client implementation

- docs/api/TOOLS.md: Tools API documentation covering tool interface,
  input schema format, result format, tool patterns,
  tool registration, tool policy, execution flow, and
  builtin tools reference

- docs/deployment/PRODUCTION.md: Production deployment guide
  covering Docker deployment, systemd service, security,
  configuration, monitoring, backup & recovery, and
  performance tuning

- docs/performance/TUNING.md: Performance optimization guide
  covering context management, model routing, tool execution,
  memory & embeddings, session management, database
  performance, gateway performance, and resource usage

These files complement the existing excellent documentation
(README.md, AGENTS.md, ARCHITECTURE.md, STRUCTURE.md,
CONVENTIONS.md) to provide complete coverage for users,
developers, and operators.
2026-02-13 16:07:29 -08:00
William Valentin cc54b3a10c feat(webchat): support image attachments 2026-02-13 15:03:48 -08:00
William Valentin 955b9e28e0 feat: add OpenAI OAuth, strict model overrides, and Gmail pull mode 2026-02-13 14:55:40 -08:00
William Valentin 8f644d5e25 feat(skills): add rollout promotion contract and sync planning state 2026-02-13 08:51:19 -08:00
William Valentin 46099664f0 feat(gateway): wire safe-point runtime cancellation for agent.cancel 2026-02-13 08:51:14 -08:00
William Valentin 9f81c01603 feat(session): persist model tier overrides per session
Store per-session config in SQLite and route /model and /reset through command fast-paths so channel sessions keep independent model selection across reconnects and restarts.
2026-02-13 01:04:26 -08:00
William Valentin 3472a0b926 docs(plans): add openclaw analysis and rollout checklists 2026-02-12 22:47:28 -08:00
William Valentin 6e8984f788 feat(core): add command, intent, and routing primitives 2026-02-12 22:47:22 -08:00
William Valentin 7ae0fb51c2 feat(skills): add rollout status governance and promotion policy checks 2026-02-12 22:43:46 -08:00
William Valentin 43b584257f feat(skills): hash installer audit commands for shell runner telemetry 2026-02-12 22:20:14 -08:00
William Valentin d3647567ee test(skills): add edge-case receipt tests for partial/missing runner results 2026-02-12 21:12:15 -08:00