Commit Graph

51 Commits

Author SHA1 Message Date
Hugh Brown
b4bbe1c657 fix: chain Alembic migrations to avoid multiple heads
Set a9b1c2d3e4f7.down_revision = "a1b2c3d4e5f6" so the activity_events
migration depends on the webhook_secret migration, creating a linear
chain instead of two heads from the same parent.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-03-07 23:35:10 +05:30
Hugh Brown
528a2483b7 feat: add configurable signature_header for webhook HMAC verification
Not all webhook providers use X-Hub-Signature-256 or X-Webhook-Signature.
Add an optional signature_header field so users can specify which header
carries the HMAC signature. When set, that exact header is checked;
when unset, the existing auto-detect fallback is preserved. The custom
header is also excluded from stored/exposed payload headers.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-03-07 23:35:10 +05:30
Hugh Brown
3a00636ceb Update backend/migrations/versions/a1b2c3d4e5f6_add_webhook_secret.py
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
2026-03-07 23:35:10 +05:30
Hugh Brown
4d1dbb4098 security: add HMAC signature verification to webhook ingest
Webhook ingest endpoint was completely unauthenticated. Add an optional
`secret` field to BoardWebhook. When configured, inbound requests must
include a valid HMAC-SHA256 signature in X-Hub-Signature-256 or
X-Webhook-Signature headers. Uses hmac.compare_digest for timing safety.
Includes migration to add the secret column.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-03-07 23:35:10 +05:30
Abhimanyu Saharan
bdc9fc3f01 redesigned dashboard page 2026-03-04 16:01:56 +05:30
Abhimanyu Saharan
6b21ea6f99 feat(boards): add 'comment_required_for_review' rule and update related logic 2026-02-26 00:31:47 +05:30
Abhimanyu Saharan
0795f78eff feat: implement unified agent lifecycle orchestration and metadata tracking 2026-02-25 00:34:04 +05:30
Abhimanyu Saharan
d37f230eb3 feat: add allow_insecure_tls column to gateways 2026-02-22 20:07:30 +05:30
Abhimanyu Saharan
374d5a0c37 Merge branch 'master' into copilot/feature-allow-self-signed-tls
# Conflicts:
#	backend/app/api/gateways.py
#	backend/app/schemas/gateways.py
#	backend/app/services/openclaw/admin_service.py
#	backend/app/services/openclaw/gateway_resolver.py
#	backend/app/services/openclaw/gateway_rpc.py
#	backend/app/services/openclaw/provisioning.py
#	backend/app/services/openclaw/provisioning_db.py
#	frontend/src/api/generated/model/gatewayCreate.ts
#	frontend/src/api/generated/model/gatewayRead.ts
#	frontend/src/api/generated/model/gatewayUpdate.ts
2026-02-22 19:51:27 +05:30
Abhimanyu Saharan
3dfb70cd90 feat: add disable_device_pairing option to gateway configuration 2026-02-22 19:19:26 +05:30
copilot-swe-agent[bot]
520e128777 feat: Add allow_insecure_tls field to gateway model and UI
- Added allow_insecure_tls boolean field to Gateway model and schemas
- Created database migration for the new field
- Updated GatewayConfig to include allow_insecure_tls parameter
- Modified openclaw_call to create SSL context that disables verification when allow_insecure_tls is true
- Updated all GatewayConfig instantiations throughout the backend
- Added checkbox to frontend gateway form (create and edit pages)
- Updated API endpoints to handle the new field

Co-authored-by: abhi1693 <5083532+abhi1693@users.noreply.github.com>
2026-02-22 05:28:37 +00:00
Abhimanyu Saharan
aebd487270 refactor: add agent_id to various interfaces and improve field organization 2026-02-15 13:36:57 +05:30
Abhimanyu Saharan
f945d86025 feat(api): track previous in_progress_at during task status transitions 2026-02-15 03:37:19 +05:30
Abhimanyu Saharan
ae711909ff feat(boards): add max_agents field to board models and enforce limits 2026-02-14 19:43:16 +05:30
Abhimanyu Saharan
40dcf50f4b feat(skills): add metadata and branch fields to skill packs and marketplace skills 2026-02-14 12:26:45 +05:30
Abhimanyu Saharan
5b9e81aa6d migrations: update down_revision for skills marketplace tables 2026-02-14 11:34:15 +05:30
Abhimanyu Saharan
2bcbf767e3 Merge branch 'master' into skills 2026-02-14 11:33:12 +05:30
Abhimanyu Saharan
42a41f64bc migrations: update down_revision for activity_events event_type index 2026-02-14 11:30:49 +05:30
Abhimanyu Saharan
501ed88faf migrations: merge heads after skills marketplace 2026-02-13 22:25:23 +00:00
Abhimanyu Saharan
10748f71a8 feat: add skill packs management with support for category, risk, and source fields 2026-02-13 22:23:47 +00:00
Abhimanyu Saharan
da6cc2544b feat: implement cascading delete for gateway and associated installed skills 2026-02-13 22:23:47 +00:00
Abhimanyu Saharan
a7e1e5cbf4 feat: add skill pack management features including creation, editing, and syncing 2026-02-13 22:23:47 +00:00
Abhimanyu Saharan
88565f4d69 feat: add conditional creation of skills marketplace and gateway installed skills tables with index checks 2026-02-13 22:23:47 +00:00
Abhimanyu Saharan
e7b5df0bce feat: implement skills marketplace API with CRUD operations and gateway integration 2026-02-13 22:23:47 +00:00
Abhimanyu Saharan
24eaa5df54 migrations: merge alembic heads (installer CI unblock) 2026-02-13 21:43:08 +00:00
Abhimanyu Saharan
2766f271f0 Merge pull request #113 from abhi1693/perf/activity-events-eventtype-createdat
perf(db): index activity_events by (event_type, created_at)
2026-02-14 02:55:37 +05:30
Abhimanyu Saharan
277bfcb33a feat: add custom-fields 2026-02-13 21:24:36 +05:30
Abhimanyu Saharan
3a15a2759e migrations: merge heads after board lead rule 2026-02-13 11:02:37 +00:00
Abhimanyu Saharan
7cee3a6084 Merge remote-tracking branch 'origin/master' into perf/activity-events-eventtype-createdat 2026-02-13 11:01:56 +00:00
Abhimanyu Saharan
aa121474c6 migrations: merge heads after activity_events index 2026-02-13 10:57:53 +00:00
Abhimanyu Saharan
ebb9c659d2 feat: add lead-only status change rule for boards and update related logic 2026-02-13 16:22:06 +05:30
Abhimanyu Saharan
de47174a2c Merge branch 'master' into perf/activity-events-eventtype-createdat 2026-02-13 16:18:43 +05:30
Abhimanyu Saharan
c7872c40c0 Merge branch 'master' into perf/activity-events-eventtype-createdat 2026-02-13 15:07:15 +05:30
Abhimanyu Saharan
426326e2af ci(migrations): enforce graph + reversible cycle checks; fix FK downgrade naming 2026-02-13 09:05:21 +00:00
Abhimanyu Saharan
2e4739300c feat: add board webhook configuration and payload models 2026-02-13 00:31:36 +05:30
Abhimanyu Saharan
855885afaf feat: add board rule toggles for approval and review requirements 2026-02-12 23:05:37 +05:30
Abhimanyu Saharan
032b77afb8 feat(approvals): enhance approval model with task titles and confidence as float 2026-02-12 19:57:04 +05:30
Abhimanyu Saharan
4601ddc0e9 perf(db): index activity_events by (event_type, created_at) 2026-02-12 14:13:54 +00:00
Abhimanyu Saharan
8d7d9da4e9 feat(tags): add tag management interfaces and update related schemas 2026-02-12 18:35:48 +05:30
Abhimanyu Saharan
2ebdead95b chore: update generated files to orval v8.3.0 and adjust related interfaces 2026-02-12 18:04:35 +05:30
Abhimanyu Saharan
72ffa0b11b Merge pull request #105 from abhi1693/perf/memory-comment-indexes
perf(db): index board memory listing + task comments
2026-02-12 14:38:35 +05:30
Abhimanyu Saharan
a97fbc1e1d perf(db): index board_memory lists and task comments 2026-02-12 08:13:40 +00:00
Abhimanyu Saharan
d5f4762341 backend: add composite task listing indexes 2026-02-12 07:55:17 +00:00
Abhimanyu Saharan
af8a263c27 feat: add approval-task links model and related functionality for task associations 2026-02-11 20:27:07 +05:30
Abhimanyu Saharan
c6417bcffb feat: add description field to boards and update related components for onboarding 2026-02-11 18:19:29 +05:30
Abhimanyu Saharan
dcdc0a25b1 refactor: add gateway_id to agents and remove main_session_key from gateways 2026-02-10 15:55:26 +05:30
Abhimanyu Saharan
3326100205 refactor: update Clerk authentication integration and improve organization handling 2026-02-09 23:55:52 +05:30
Abhimanyu Saharan
f5d592f61a refactor: standardize runtime annotation types across multiple files 2026-02-09 17:24:21 +05:30
Abhimanyu Saharan
7ca1899d9f refactor: update module docstrings for clarity and consistency 2026-02-09 15:49:50 +05:30
Abhimanyu Saharan
e19e47106b feat: add sign-out redirect URL and enhance sign-in redirect handling 2026-02-09 01:07:36 +05:30