@growthub/cli 0.14.0 → 0.14.2

package/assets/worker-kits/growthub-custom-workspace-starter-v1/apps/workspace/app/data-model/components/AgentSwarmPanel.jsx

@@ -1,8 +1,19 @@
 "use client";
 
 import { useMemo } from "react";
-import { Plus, Trash2 } from "lucide-react";
+import { Check, Plus, Trash2 } from "lucide-react";
 import { HOST_AUTH_CATALOG } from "@/lib/sandbox-agent-host-catalog";
+import { SandboxAgentAuthPanel } from "./SandboxAgentAuthPanel.jsx";
+import { isSandboxLocalAgentHost } from "@/lib/sandbox-agent-auth-eligibility";
+
+const EMPTY_AGENT_AUTH_PATCH = {
+  agentAuthStatus: "",
+  agentAuthProvider: "",
+  agentAuthLastChecked: "",
+  agentAuthLastExitCode: "",
+  agentAuthLastMessage: "",
+  agentAuthLastLoginUrl: ""
+};
 
 function getHostOptions() {
   return Object.entries(HOST_AUTH_CATALOG || {}).map(([slug, host]) => ({
@@ -11,31 +22,74 @@ function getHostOptions() {
   }));
 }
 
-function patchOrchestrator(graph, patch) {
+function nodeSandboxRecordRef(objectId, rowName, nodeId) {
+  return {
+    objectId: String(objectId || "").trim(),
+    rowName: String(rowName || "").trim(),
+    nodeId: String(nodeId || "").trim()
+  };
+}
+
+function withRecordRef(patch, objectId, rowName, nodeId) {
+  return {
+    ...patch,
+    sandboxRecordRef: nodeSandboxRecordRef(objectId, rowName, nodeId)
+  };
+}
+
+function buildSubagentAuthDraft(sandboxRow, config) {
+  const agentHost = String(config?.agentHost || sandboxRow?.agentHost || "").trim();
+  if (!agentHost) return null;
+  return {
+    ...(sandboxRow || {}),
+    runLocality: "local",
+    adapter: "local-agent-host",
+    agentHost
+  };
+}
+
+function WorkflowCheckbox({ checked, disabled, onChange, children, title }) {
+  return (
+    <label className="dm-orchestration-config__field dm-orchestration-config__field-inline dm-workflow-check" title={title}>
+      <input
+        type="checkbox"
+        checked={checked}
+        disabled={disabled}
+        onChange={(event) => onChange?.(event.target.checked)}
+      />
+      <span className="dm-workflow-check__box" aria-hidden="true">
+        {checked ? <Check size={13} strokeWidth={2.4} /> : null}
+      </span>
+      <span>{children}</span>
+    </label>
+  );
+}
+
+function patchOrchestrator(graph, patch, objectId, rowName) {
   const nodes = Array.isArray(graph?.nodes) ? graph.nodes : [];
   return {
     ...graph,
     nodes: nodes.map((node) =>
       node?.type === "thinAdapter"
-        ? { ...node, config: { ...(node.config || {}), ...patch } }
+        ? { ...node, config: { ...(node.config || {}), ...withRecordRef(patch, objectId, rowName, node.id) } }
         : node
     )
   };
 }
 
-function patchSynthesis(graph, patch) {
+function patchSynthesis(graph, patch, objectId, rowName) {
   const nodes = Array.isArray(graph?.nodes) ? graph.nodes : [];
   return {
     ...graph,
     nodes: nodes.map((node) =>
       node?.type === "tool-result"
-        ? { ...node, config: { ...(node.config || {}), ...patch } }
+        ? { ...node, config: { ...(node.config || {}), ...withRecordRef(patch, objectId, rowName, node.id) } }
         : node
     )
   };
 }
 
-function patchSubagent(graph, nodeId, patch) {
+function patchSubagent(graph, nodeId, patch, objectId, rowName) {
   const nodes = Array.isArray(graph?.nodes) ? graph.nodes : [];
   return {
     ...graph,
@@ -44,7 +98,7 @@ function patchSubagent(graph, nodeId, patch) {
         ? {
             ...node,
             label: patch.role != null ? String(patch.role) : node.label,
-            config: { ...(node.config || {}), ...patch }
+            config: { ...(node.config || {}), ...withRecordRef(patch, objectId, rowName, node.id) }
           }
         : node
     )
@@ -107,7 +161,7 @@ function patchSwarmConfig(graph, patch) {
   return { ...graph, swarm: { ...base, ...patch } };
 }
 
-export function AgentSwarmPanel({ graph, onGraphChange, disabled }) {
+export function AgentSwarmPanel({ graph, objectId, rowName, sandboxRow, onSandboxRowPatch, onGraphChange, disabled }) {
   const hostOptions = useMemo(getHostOptions, []);
   if (!graph || typeof graph !== "object") return null;
 
@@ -122,6 +176,21 @@ export function AgentSwarmPanel({ graph, onGraphChange, disabled }) {
     onGraphChange?.(updater);
   }
 
+  function patchSubagentHost(nodeId, agentHost) {
+    const nextHost = String(agentHost || "").trim();
+    patchGraph((g) => patchSubagent(g, nodeId, {
+      agentHost: nextHost,
+      ...(nextHost ? { adapter: "local-agent-host" } : {})
+    }, objectId, rowName));
+    if (nextHost && typeof onSandboxRowPatch === "function") {
+      onSandboxRowPatch({
+        adapter: "local-agent-host",
+        agentHost: nextHost,
+        ...EMPTY_AGENT_AUTH_PATCH
+      });
+    }
+  }
+
   return (
     <div className="dm-orchestration-config dm-agent-swarm-panel">
       <div className="dm-orchestration-config__pane">
@@ -133,7 +202,7 @@ export function AgentSwarmPanel({ graph, onGraphChange, disabled }) {
               rows={3}
               value={orchestrator?.config?.prompt || ""}
               disabled={disabled || !orchestrator}
-              onChange={(e) => patchGraph((g) => patchOrchestrator(g, { prompt: e.target.value }))}
+              onChange={(e) => patchGraph((g) => patchOrchestrator(g, { prompt: e.target.value }, objectId, rowName))}
             />
           </label>
         </div>
@@ -155,6 +224,7 @@ export function AgentSwarmPanel({ graph, onGraphChange, disabled }) {
           )}
           {subagents.map((node) => {
             const cfg = node.config || {};
+            const subagentAuthDraft = buildSubagentAuthDraft(sandboxRow, cfg);
             return (
               <div key={node.id} className="dm-agent-swarm-panel__subagent">
                 <div className="dm-agent-swarm-panel__row">
@@ -163,7 +233,7 @@ export function AgentSwarmPanel({ graph, onGraphChange, disabled }) {
                     placeholder="Role"
                     value={cfg.role || node.label || ""}
                     disabled={disabled}
-                    onChange={(e) => patchGraph((g) => patchSubagent(g, node.id, { role: e.target.value }))}
+                    onChange={(e) => patchGraph((g) => patchSubagent(g, node.id, { role: e.target.value }, objectId, rowName))}
                   />
                   <button
                     type="button"
@@ -181,7 +251,7 @@ export function AgentSwarmPanel({ graph, onGraphChange, disabled }) {
                     placeholder="One-sentence charter"
                     value={cfg.description || ""}
                     disabled={disabled}
-                    onChange={(e) => patchGraph((g) => patchSubagent(g, node.id, { description: e.target.value }))}
+                    onChange={(e) => patchGraph((g) => patchSubagent(g, node.id, { description: e.target.value }, objectId, rowName))}
                   />
                 </label>
                 <label className="dm-orchestration-config__field">
@@ -190,7 +260,7 @@ export function AgentSwarmPanel({ graph, onGraphChange, disabled }) {
                     rows={2}
                     value={cfg.taskPrompt || ""}
                     disabled={disabled}
-                    onChange={(e) => patchGraph((g) => patchSubagent(g, node.id, { taskPrompt: e.target.value }))}
+                    onChange={(e) => patchGraph((g) => patchSubagent(g, node.id, { taskPrompt: e.target.value }, objectId, rowName))}
                   />
                 </label>
                 <label className="dm-orchestration-config__field">
@@ -201,7 +271,7 @@ export function AgentSwarmPanel({ graph, onGraphChange, disabled }) {
                     disabled={disabled}
                     onChange={(e) => patchGraph((g) => patchSubagent(g, node.id, {
                       tools: e.target.value.split(",").map((t) => t.trim()).filter(Boolean)
-                    }))}
+                    }, objectId, rowName))}
                   />
                 </label>
                 <label className="dm-orchestration-config__field">
@@ -212,7 +282,7 @@ export function AgentSwarmPanel({ graph, onGraphChange, disabled }) {
                     placeholder="0 = inherit"
                     value={cfg.maxTokens || 0}
                     disabled={disabled}
-                    onChange={(e) => patchGraph((g) => patchSubagent(g, node.id, { maxTokens: Math.max(0, Number(e.target.value) || 0) }))}
+                    onChange={(e) => patchGraph((g) => patchSubagent(g, node.id, { maxTokens: Math.max(0, Number(e.target.value) || 0) }, objectId, rowName))}
                   />
                 </label>
                 <label className="dm-orchestration-config__field">
@@ -220,7 +290,7 @@ export function AgentSwarmPanel({ graph, onGraphChange, disabled }) {
                   <select
                     value={cfg.agentHost || ""}
                     disabled={disabled}
-                    onChange={(e) => patchGraph((g) => patchSubagent(g, node.id, { agentHost: e.target.value }))}
+                    onChange={(e) => patchSubagentHost(node.id, e.target.value)}
                   >
                     <option value="">Inherit</option>
                     {hostOptions.map((opt) => (
@@ -228,27 +298,30 @@ export function AgentSwarmPanel({ graph, onGraphChange, disabled }) {
                     ))}
                   </select>
                 </label>
-                <label className="dm-orchestration-config__field dm-orchestration-config__field-inline">
-                  <input
-                    type="checkbox"
-                    checked={cfg.required !== false}
-                    disabled={disabled}
-                    onChange={(e) => patchGraph((g) => patchSubagent(g, node.id, { required: e.target.checked }))}
+                {subagentAuthDraft && isSandboxLocalAgentHost(subagentAuthDraft) && (
+                  <SandboxAgentAuthPanel
+                    objectId={objectId}
+                    rowName={rowName}
+                    draft={subagentAuthDraft}
+                    disabled={disabled || typeof onSandboxRowPatch !== "function"}
+                    onPatchDraft={onSandboxRowPatch}
                   />
-                  <span>Required</span>
-                </label>
-                <label
-                  className="dm-orchestration-config__field dm-orchestration-config__field-inline"
+                )}
+                <WorkflowCheckbox
+                  checked={cfg.required !== false}
+                  disabled={disabled}
+                  onChange={(checked) => patchGraph((g) => patchSubagent(g, node.id, { required: checked }, objectId, rowName))}
+                >
+                  Required
+                </WorkflowCheckbox>
+                <WorkflowCheckbox
+                  checked={cfg.networkAccess === true}
+                  disabled={disabled}
                   title="Network is granted only when both this and the row's networkAllow are on."
+                  onChange={(checked) => patchGraph((g) => patchSubagent(g, node.id, { networkAccess: checked }, objectId, rowName))}
                 >
-                  <input
-                    type="checkbox"
-                    checked={cfg.networkAccess === true}
-                    disabled={disabled}
-                    onChange={(e) => patchGraph((g) => patchSubagent(g, node.id, { networkAccess: e.target.checked }))}
-                  />
-                  <span>Network</span>
-                </label>
+                  Network
+                </WorkflowCheckbox>
               </div>
             );
           })}
@@ -315,7 +388,7 @@ export function AgentSwarmPanel({ graph, onGraphChange, disabled }) {
                 rows={2}
                 value={synthesis?.config?.outcomePrompt || ""}
                 disabled={disabled}
-                onChange={(e) => patchGraph((g) => patchSynthesis(g, { outcomePrompt: e.target.value }))}
+                onChange={(e) => patchGraph((g) => patchSynthesis(g, { outcomePrompt: e.target.value }, objectId, rowName))}
               />
             </label>
           </div>

package/assets/worker-kits/growthub-custom-workspace-starter-v1/apps/workspace/app/data-model/components/DataModelShell.jsx

@@ -42,6 +42,7 @@ import {
   Trash2,
   Type,
   Unlock,
+  Upload,
   Users,
   X,
   Zap,
@@ -646,6 +647,14 @@ function SandboxTraceFieldButton({ label, value, disabled, onOpen }) {
   );
 }
 
+// Human labels for the per-host browser lanes declared in the
+// local-agent-host catalog — surfaced so the operator's mental model matches
+// exactly what the adapter does under the hood when browserAccess is on.
+const BROWSER_LANE_LABELS = {
+  "native-flag": "browser enabled through the host CLI's first-party browser integration flags.",
+  "env-signal": "host receives GROWTHUB_SANDBOX_BROWSER_ACCESS=1 — its own configured browser integration honors this setting."
+};
+
 function SandboxRecordFields({
   draft,
   setDraft,
@@ -704,8 +713,21 @@ function SandboxRecordFields({
     return { ...fields, ...EMPTY_AGENT_AUTH_PATCH };
   }
 
+  function defaultSchedulerRegistryId() {
+    const objects = Array.isArray(workspaceConfig?.dataModel?.objects) ? workspaceConfig.dataModel.objects : [];
+    for (const object of objects) {
+      if (object?.objectType !== "api-registry") continue;
+      const row = (object.rows || []).find((r) => String(r?.integrationId || "").trim());
+      if (row) return String(row.integrationId || "").trim();
+    }
+    return "";
+  }
+
   function setRunLocality(next) {
     const fields = { runLocality: next };
+    if (next === "serverless") {
+      fields.schedulerRegistryId = String(draft.schedulerRegistryId || "").trim() || defaultSchedulerRegistryId();
+    }
     if (next === "serverless" && ["local-agent-host", "local-intelligence"].includes(String(draft.adapter || "").trim())) {
       fields.adapter = "local-process";
       fields.agentHost = "";
@@ -723,6 +745,8 @@ function SandboxRecordFields({
   }
 
   const netOn = ["true", "1", "on", "yes"].includes(String(draft.networkAllow || "").trim().toLowerCase());
+  const browserOn = ["true", "1", "on", "yes"].includes(String(draft.browserAccess || "").trim().toLowerCase());
+  const browserHostMeta = (selectedAdapterMeta?.hostCatalog || []).find((h) => h.slug === String(draft.agentHost || "").trim());
 
   // Same cockpit interface + mental model as the API Registry lane, driven by
   // the serverless/scheduling/persistence derivation. Steps are status-only
@@ -734,6 +758,7 @@ function SandboxRecordFields({
     persistenceAdapters: serverlessSignals.persistenceAdapters,
     inlineEditing: true,
   });
+  const showServerlessUpgrade = String(draft.adapter || "").trim() !== "local-intelligence";
   function handleServerlessAction(action) {
     if (!action) return;
     if (action.id === "toggle-locality") setRunLocality(serverlessState.isServerless ? "local" : "serverless");
@@ -742,12 +767,14 @@ function SandboxRecordFields({
 
   return (
     <div className="dm-sandbox-config">
-      <ApiRegistryCreationCockpit
-        state={serverlessState}
-        onAction={handleServerlessAction}
-        disabled={!table.mutable || saving}
-        eyebrow={serverlessState.isServerless ? "Serverless workflow" : "Workflow runtime"}
-      />
+      {showServerlessUpgrade && (
+        <ApiRegistryCreationCockpit
+          state={serverlessState}
+          onAction={handleServerlessAction}
+          disabled={!table.mutable || saving}
+          eyebrow={serverlessState.isServerless ? "Serverless workflow" : "Workflow runtime"}
+        />
+      )}
       <DrawerSection title="Identity & Mode">
         <label className="dm-record-field">
           <span>Name</span>
@@ -790,7 +817,7 @@ function SandboxRecordFields({
           onChange={setRunLocality}
         />
         <p className="dm-cell-empty" style={{ fontSize: 11, marginTop: 6 }}>
-          Local uses process sandbox or Paperclip agent host on this machine. Serverless delegates to an API Registry URL (no local agent CLI).
+          Choose local execution or a scheduled serverless run.
         </p>
 
         {locality === "serverless" && table.objectId && (
@@ -882,7 +909,7 @@ function SandboxRecordFields({
             </label>
 
             <p className="dm-cell-empty" style={{ fontSize: 11, marginTop: 0 }}>
-              Uses <strong>Instructions</strong> + <strong>Command</strong> as the task payload. Tool intents in the JSON response are proposals only and are not executed by the workspace.
+              Uses <strong>Instructions</strong> + <strong>Command</strong> as the task payload. With browser access off, tool intents stay proposals. With browser access on, browser tool intents execute through the local browser bridge before the final JSON response is returned.
             </p>
           </div>
         )}
@@ -920,10 +947,12 @@ function SandboxRecordFields({
         </div>
 
         <ToggleField
-          checked={netOn}
-          disabled={!table.mutable || saving}
+          checked={netOn || browserOn}
+          disabled={!table.mutable || saving || (browserOn && !netOn)}
           label="Network allow-list mode"
-          description="When enabled, local runs honor GROWTHUB_SANDBOX_NET_* and the allow list below."
+          description={browserOn && !netOn
+            ? "Network enabled by browser access — the run route grants it even though this row's networkAllow is off. Turn browser access off to control network independently."
+            : "When enabled, local runs honor GROWTHUB_SANDBOX_NET_* and the allow list below."}
           onChange={(on) => patchFields({ networkAllow: on ? "true" : "false" })}
         />
 
@@ -936,6 +965,21 @@ function SandboxRecordFields({
             onBlur={(event) => patchFields({ allowList: event.target.value })}
           />
         </label>
+
+        <ToggleField
+          checked={browserOn}
+          disabled={!table.mutable || saving}
+          label="Browser access"
+          description="Allows this sandbox to use a real browser. Also enables network. Local intelligence uses the Playwright browser bridge; Codex/Claude use their native browser modes."
+          onChange={(on) => patchFields(on
+            ? { browserAccess: "true", networkAllow: "true" }
+            : { browserAccess: "false" })}
+        />
+        {browserOn && String(draft.adapter || "").trim() === "local-agent-host" && browserHostMeta && (
+          <p className="dm-cell-empty" style={{ fontSize: 11, marginTop: 4 }}>
+            {browserHostMeta.label}: {BROWSER_LANE_LABELS[browserHostMeta.browserLane] || BROWSER_LANE_LABELS["env-signal"]}
+          </p>
+        )}
       </DrawerSection>
 
       <DrawerSection title="Prompt & Limits">
@@ -1843,7 +1887,9 @@ function DataModelRecordDrawer({
         <header className="dm-record-drawer-head">
           <div>
             <p>Record</p>
-            <h2>{draft.Name || draft.integrationId || draft.id || `Row ${rowIndex + 1}`}</h2>
+            <h2 title={draft.Name || draft.integrationId || draft.id || `Row ${rowIndex + 1}`}>
+              {draft.Name || draft.integrationId || draft.id || `Row ${rowIndex + 1}`}
+            </h2>
           </div>
           <div className="dm-record-drawer-actions">
             {isSandbox && sidecarMode !== "graph" && sidecarMode !== "trace" && (
@@ -1854,7 +1900,7 @@ function DataModelRecordDrawer({
                 onClick={runSandbox}
               >
                 <Play size={13} aria-hidden />
-                {sandboxRunning ? "Running…" : "Run sandbox"}
+                {sandboxRunning ? "Running…" : "Execute"}
               </button>
             )}
             {!isSandbox && sandboxToolFlow !== "draft" && (
@@ -2457,9 +2503,9 @@ function DataModelTableSurface({
               const a = document.createElement("a");
               a.href = url; a.download = `${table.source.replace(/\s+/g, "-").toLowerCase()}.csv`;
               a.click(); URL.revokeObjectURL(url);
-            }}>Export CSV</button>
+            }}><Download size={13} />Export CSV</button>
           )}
-          {table.mutable && <button type="button" className="dm-btn-ghost" onClick={() => setCsvOpen((open) => !open)}>Import CSV</button>}
+          {table.mutable && <button type="button" className="dm-btn-ghost" onClick={() => setCsvOpen((open) => !open)}><Upload size={13} />Import CSV</button>}
           {table.mutable && (
             <button type="button" className="dm-btn-primary-sm" disabled={saving} onClick={() => onSave((config) => addTableRow(config, table))}>
               <Plus size={13} />Add record
@@ -3544,6 +3590,17 @@ export default function DataModelShell() {
               router.push(`/?dashboard=${encodeURIComponent(target.dashboardId)}`);
             }
           }}
+          onOpenSwarmWorkflow={(target) => {
+            const objectId = String(target?.objectId || "").trim();
+            const rowName = String(target?.name || "").trim();
+            if (!objectId || !rowName) return;
+            const params = new URLSearchParams({
+              object: objectId,
+              row: rowName,
+              field: "orchestrationGraph"
+            });
+            router.push(`/workflows?${params.toString()}`);
+          }}
           onApplied={(updatedConfig) => {
             // Anchor the user on the most recently created/updated Data Model
             // object so a helper-driven object.create lands on the surface