@manny-est/node-red-flowpilot 0.5.2 → 0.6.0

package/lib/core/init.js

@@ -14,17 +14,20 @@
         "- `/generate` — arm Generate mode\n" +
         "- `/document` — arm Document mode\n" +
         "- `/modify` — arm Modify mode\n" +
-        "- `/query` — back to Query (disarm)\n" +
+        "- `/query` / `/chat` — back to Query (disarm)\n" +
         "- `/clear` — start a fresh conversation (clears chat and memory)\n" +
         "- `/history` — open the Flight log (past conversations)\n" +
         "- `/settings` — open the Hangar (providers, behavior, safety)\n\n" +
         "Typing a shortcut with extra text, e.g. `/modify add a debug node`, switches mode and leaves the rest in the box so you can review before sending.\n\n" +
         "- `/demo` — load a sample Generate request (a dad joke flow) into the compose box\n" +
         "- `/feedback` — bug report / feature request info\n" +
+        "- `/beta` — beta-channel install/revert instructions\n" +
         "- `/build` — describe a goal; I'll plan, propose, and walk an iterative build → deploy → debug → review → fix loop with you\n" +
         "- `/compact` — hide labels on the selected node(s) (icon-only); `/expand` restores them. Instant, no AI involved — one Ctrl+Z undoes it.\n" +
         "- `/disable` — disable the selected node(s) (skipped on Deploy); `/enable` re-enables them. Instant, no AI involved — one Ctrl+Z undoes it.\n" +
-        "- `/refresh` — re-render all messages from the in-memory record store (restores interactive Apply buttons if they were lost).\n\n" +
+        "- `/refresh` — re-render all messages from the in-memory record store (restores interactive Apply buttons if they were lost).\n" +
+        "- `/debug` — toggle debug logging (full prompts/replies/decisions to `flowpilot/debug.log`) on/off. Instant, no AI involved.\n\n" +
+        "- `/summarize` — summarize older chat history into one compact note, keeping the latest two exchanges intact.\n\n" +
         "### Also worth knowing\n\n" +
         "- Action chips (paper-plane buttons) offer a one-click follow-up — review and send, nothing fires automatically.\n" +
         "- When I ask a clarifying question, I'll often offer quick-reply buttons (plus \"Other\" for your own answer) — clicking one sends it right away.\n" +
@@ -42,11 +45,30 @@
         "human crew reads every report.\n\n" +
         "- **Report an issue**: https://github.com/manny-est/flowpilot/issues\n" +
         "- **Browse the repo**: https://github.com/manny-est/flowpilot\n\n" +
-        "A good report travels light but packs the essentials: your Node-RED " +
-        "version, the provider/model you're flying with, and the steps to " +
-        "reproduce. That's usually enough to get a fix off the ground.\n\n" +
+        "A good report travels light but packs the essentials: your FlowPilot " +
+        "version (top of Settings), your Node-RED version, the provider/model " +
+        "you're flying with, and the steps to reproduce. That's usually enough " +
+        "to get a fix off the ground.\n\n" +
         "Safe travels.";
 
+    var BETA_TEXT = "## Beta channel\n\n" +
+        "Thanks for testing FlowPilot on the beta track.\n\n" +
+        "**Install the beta:**\n" +
+        "```\n" +
+        "cd ~/.node-red        (or your mounted Node-RED data dir, e.g. /data in Docker)\n" +
+        "npm install @manny-est/node-red-flowpilot@beta\n" +
+        "```\n" +
+        "Then **restart Node-RED** (or the container) — a browser refresh alone " +
+        "won't pick it up; FlowPilot's editor UI is cached server-side.\n\n" +
+        "**Revert to stable:**\n" +
+        "```\n" +
+        "cd ~/.node-red        (or /data)\n" +
+        "npm install @manny-est/node-red-flowpilot@latest\n" +
+        "```\n" +
+        "Restart again afterward.\n\n" +
+        "**Found a bug?** Type `/feedback`, or go straight to " +
+        "https://github.com/manny-est/flowpilot/issues — every report helps.";
+
     var demoTypeTimer = null;
 
     // Registry of all slash commands — drives the autocomplete panel that
@@ -59,14 +81,20 @@
         { cmd: "/build",    desc: "Start a deploy-verify build loop" },
         { cmd: "/chat",     desc: "Switch to Chat mode" },
         { cmd: "/query",    desc: "Add or toggle a Query intent" },
+        { cmd: "/clear",    desc: "Start a fresh conversation" },
+        { cmd: "/history",  desc: "Open past conversations" },
+        { cmd: "/settings", desc: "Open provider/behavior settings" },
         { cmd: "/compact",  desc: "Compact labels on selected nodes" },
         { cmd: "/expand",   desc: "Expand labels on selected nodes" },
         { cmd: "/disable",  desc: "Disable selected nodes" },
         { cmd: "/enable",   desc: "Enable selected nodes" },
         { cmd: "/refresh",  desc: "Re-render all messages from shadow record store" },
+        { cmd: "/debug",    desc: "Toggle debug logging on/off" },
+        { cmd: "/summarize", desc: "Summarize older history into a compact note" },
         { cmd: "/demo",     desc: "Type in a demo prompt" },
         { cmd: "/help",     desc: "Show all available commands" },
-        { cmd: "/feedback", desc: "Show feedback info" }
+        { cmd: "/feedback", desc: "Show feedback info" },
+        { cmd: "/beta",     desc: "Beta install/revert instructions" }
     ];
 
     function bindSlashAutocomplete($promptBox) {
@@ -233,10 +261,29 @@
                 addMessage("assistant", FEEDBACK_TEXT);
                 if ($promptBox.length) { $promptBox.val(""); }
                 break;
+            case "/beta":
+                addMessage("assistant", BETA_TEXT);
+                if ($promptBox.length) { $promptBox.val(""); }
+                break;
             case "/refresh":
                 refreshView();
                 if ($promptBox.length) { $promptBox.val(""); }
                 break;
+            // Deterministic, no AI round-trip: flips the same
+            // settings.debugLogging field the Hangar checkbox binds to, via
+            // the normal saveSettings() round trip, so the two never drift.
+            case "/debug":
+                var newDebugState = !el("#fp-debug-logging").prop("checked");
+                el("#fp-debug-logging").prop("checked", newDebugState);
+                saveSettings(function () {
+                    addMessage("assistant", "Debug logging is now " + (newDebugState ? "ON" : "OFF") + ".");
+                });
+                if ($promptBox.length) { $promptBox.val(""); }
+                break;
+            case "/summarize":
+                summarizeConversationHistory();
+                if ($promptBox.length) { $promptBox.val(""); }
+                break;
             // Deterministic, no LLM round-trip: just invokes Node-RED's own
             // native "show/hide selected node labels" action (RED.actions
             // "core:show-selected-node-labels" / "core:hide-selected-node-
@@ -567,7 +614,7 @@
             $panel.data("fp-review-apply-bound", true);
             var recordId = parseInt($panel.attr("data-fp-record-id"), 10);
             if (isNaN(recordId)) { return; }
-            $panel.find(".fp-review-actions button.red-ui-button-primary").on("click", function () {
+            $panel.find(".fp-review-actions button.fp-chip.fp-chip-card:not(:disabled)").on("click", function () {
                 var $btn = $(this);
                 if ($btn.prop("disabled")) { return; }
                 $btn.prop("disabled", true).text("Applying…");
@@ -579,6 +626,50 @@
         });
     }
 
+    // Interactive question/consent buttons are cloned into the pop-out as
+    // HTML, so their main-window click closures do not survive. Relay the
+    // record id plus the selected action back to the parent, where the live
+    // record still owns the continuation callback/state.
+    function bindRecordActionButtons($scope) {
+        $scope.filter("[data-fp-record-id]").add($scope.find("[data-fp-record-id]"))
+            .filter("button").each(function () {
+                var $btn = $(this);
+                if ($btn.data("fp-record-action-bound") || $btn.prop("disabled")) { return; }
+                var recordId = parseInt($btn.attr("data-fp-record-id"), 10);
+                var action = $btn.attr("data-fp-record-action");
+                if (isNaN(recordId) || !action) { return; }
+                $btn.data("fp-record-action-bound", true).on("click", function () {
+                    if (action === "show-other") {
+                        $btn.closest(".fp-question-row").next(".fp-question-other-row")
+                            .removeClass("fp-hidden").find("input").focus();
+                        return;
+                    }
+                    var relayAction = action;
+                    var value = $btn.attr("data-fp-record-value") || "";
+                    if (action === "answer-other") {
+                        value = $btn.siblings("input").val().trim();
+                        if (!value) { return; }
+                        relayAction = "answer";
+                    }
+                    var $questionRow = $btn.closest(".fp-question-row");
+                    var $otherRow = $btn.closest(".fp-question-other-row");
+                    $questionRow.find("button, input").prop("disabled", true);
+                    $questionRow.next(".fp-question-other-row").find("button, input").prop("disabled", true);
+                    $otherRow.find("button, input").prop("disabled", true);
+                    $otherRow.prev(".fp-question-row").find("button, input").prop("disabled", true);
+                    if (!window.opener || window.opener.closed) { return; }
+                    try {
+                        window.opener.postMessage({
+                            event: "resolveRecordAction",
+                            recordId: recordId,
+                            action: relayAction,
+                            value: value
+                        }, location.origin);
+                    } catch (e) { /* ignore */ }
+                });
+            });
+    }
+
     // The loop stepper's "Stop build loop" button is relayed the same
     // generic way as any other chat message (renderLoopStepper appends/
     // replaces a #fp-loop-stepper element, which the MutationObserver
@@ -743,6 +834,7 @@
             '      <div class="fp-status-strip">' +
             '        <span id="fp-selection-status" class="fp-selection-status">No nodes selected</span>' +
             '        <a href="#" id="fp-preview-nodes" class="fp-preview-link fp-hidden" title="Open this from the main window to see the exact sanitized node JSON">Preview JSON</a>' +
+            '        <span id="fp-dev-warning-status" class="fp-secrets-status" title="Development/test only. Anything you send may leave this Node-RED instance. Don\'t include credentials or proprietary data; local/private AI recommended.">⚠</span>' +
             '        <span id="fp-size-status" class="fp-size-status fp-hidden"></span>' +
             '        <span id="fp-secrets-status" class="fp-secrets-status fp-hidden" title="Context may include node config and code. Don\'t send credentials or proprietary data. Local/private AI recommended.">⚠</span>' +
             '        <span id="fp-debug-status" class="fp-debug-status fp-hidden"></span>' +
@@ -830,6 +922,7 @@
             if (data.event === "initialSync") {
                 el("#fp-messages").html(data.html);
                 bindReviewApplyButtons(el("#fp-messages"));
+                bindRecordActionButtons(el("#fp-messages"));
                 bindStopLoopButton(el("#fp-messages"));
                 bindTabSwitching(el("#fp-messages"));
                 bindDebugAttachButtons(el("#fp-messages"));
@@ -837,6 +930,7 @@
             } else if (data.event === "appendMessage") {
                 el("#fp-messages").append(data.html);
                 bindReviewApplyButtons(el("#fp-messages").children().last());
+                bindRecordActionButtons(el("#fp-messages").children().last());
                 bindStopLoopButton(el("#fp-messages").children().last());
                 bindTabSwitching(el("#fp-messages").children().last());
                 bindDebugAttachButtons(el("#fp-messages").children().last());
@@ -902,7 +996,7 @@
             } else if (data.event === "conversationList") {
                 renderHistoryList(data.conversations || []);
             } else if (data.event === "settingsLoaded") {
-                fillSettings(data.settings);
+                fillSettings(data.settings, "popout settingsLoaded relay");
                 renderIntents(el("#fp-intents"));
                 updateSelectionStatus();
             }
@@ -945,11 +1039,7 @@
                 '  </div>' +
 
                 '  <div id="fp-chat-panel" class="fp-panel">' +
-                '    <div id="fp-dev-banner" class="fp-warning">' +
-                '      <strong>Development/test only.</strong> ' +
-                '      Anything you send may leave this Node-RED instance. ' +
-                '      Don\'t include credentials or proprietary data; local/private AI recommended.' +
-                '    </div>' +
+                '    <div id="fp-update-banner" class="fp-warning fp-hidden"></div>' +
                 '    <div id="fp-messages" class="fp-messages"></div>' +
                 '    <div class="fp-compose">' +
                 '      <div class="fp-action-bar">' +
@@ -972,6 +1062,7 @@
                 '      <div class="fp-status-strip">' +
                 '        <span id="fp-selection-status" class="fp-selection-status">No nodes selected</span>' +
                 '        <a href="#" id="fp-preview-nodes" class="fp-preview-link fp-hidden" title="Show the exact sanitized node JSON that will be sent">Preview JSON</a>' +
+                '        <span id="fp-dev-warning-status" class="fp-secrets-status" title="Development/test only. Anything you send may leave this Node-RED instance. Don\'t include credentials or proprietary data; local/private AI recommended.">⚠</span>' +
                 '        <span id="fp-size-status" class="fp-size-status fp-hidden"></span>' +
                 '        <span id="fp-secrets-status" class="fp-secrets-status fp-hidden" title="Context may include node config and code. Don\'t send credentials or proprietary data. Local/private AI recommended.">⚠</span>' +
                 '        <span id="fp-debug-status" class="fp-debug-status fp-hidden"></span>' +
@@ -985,6 +1076,7 @@
 
                 '  <div id="fp-settings-panel" class="fp-panel fp-hidden">' +
                 '    <div class="fp-form">' +
+                '      <div id="fp-flowpilot-version" class="fp-consent-hint"></div>' +
 
                 '      <details class="fp-settings-group" open>' +
                 '      <summary title="Hangar — where your AI providers are configured">Providers</summary>' +
@@ -1014,6 +1106,11 @@
                 '      <input id="fp-model" type="text" list="fp-model-options" placeholder="Model name for this provider">' +
                 '      <datalist id="fp-model-options"></datalist>' +
                 '      <div id="fp-models-hint" class="fp-consent-hint fp-hidden"></div>' +
+                '      <label>Context window (tokens, optional)</label>' +
+                '      <input id="fp-num-ctx" type="number" min="0" step="1" placeholder="0 = unknown">' +
+                '      <div class="fp-consent-hint">If this provider/model has a known context window ' +
+                '        (e.g. 128000, 250000 — check the provider’s own docs), set it here so FlowPilot ' +
+                '        can warn before a request would overflow it. Leave at 0 if unknown.</div>' +
                 '      <label>Temperature</label>' +
                 '      <input id="fp-temperature" type="number" min="0" max="2" step="0.1" placeholder="0.2">' +
                 '      <div class="fp-consent-hint">Controls randomness. Lower (e.g. 0.2) is more ' +
@@ -1034,8 +1131,8 @@
                 '      </div>' +
 
                 '      <div class="fp-settings-section">Personality</div>' +
-                '      <label>Persona intensity: <span id="fp-persona-value">3</span>/10</label>' +
-                '      <input id="fp-persona-intensity" type="range" min="1" max="10" step="1">' +
+                '      <label>Persona intensity: <span id="fp-persona-value">2</span>/5</label>' +
+                '      <input id="fp-persona-intensity" type="range" min="1" max="5" step="1">' +
                 '      <div id="fp-persona-label" class="fp-consent-hint"></div>' +
                 '      <div class="fp-consent-hint">Chat only. Scales the AI\'s voice at greetings, ' +
                 '        capability questions, and brief transitions — 1 is a plain Node-RED engineer, ' +
@@ -1062,10 +1159,30 @@
 
                 '      <div class="fp-settings-section">Request timeout</div>' +
                 '      <label>Give up after (seconds)</label>' +
-                '      <input id="fp-request-timeout" type="number" min="5" step="5" placeholder="180">' +
+                '      <input id="fp-request-timeout" type="number" step="any" placeholder="180">' +
                 '      <div class="fp-consent-hint">How long to wait for a provider response before ' +
                 '        giving up. Raise this if you\'re running a large local model on slow hardware ' +
                 '        (e.g. Ollama without a GPU) and seeing timeout errors.</div>' +
+                '      <div class="fp-settings-section">Updates</div>' +
+                '      <label class="fp-checkbox-row">' +
+                '        <input id="fp-check-for-updates" type="checkbox"> ' +
+                '        Check for FlowPilot updates' +
+                '      </label>' +
+                '      <div class="fp-consent-hint">On by default. Periodically checks npm for a newer ' +
+                '        FlowPilot version on your current track (beta or stable) and shows a small ' +
+                '        banner if one is available. Uncheck to disable this entirely; no network ' +
+                '        request is made when off.</div>' +
+                '      <label>Max tokens per model response (agent step)</label>' +
+                '      <input id="fp-agent-turn-max-tokens" type="number" min="1" max="65536" step="1" placeholder="4096">' +
+                '      <div class="fp-consent-hint">Hard output limit for EACH individual tool-calling ' +
+                '        step’s model response. Classic (no-tools) requests are not capped.</div>' +
+                '      <label>Max total tokens per agent turn</label>' +
+                '      <input id="fp-agent-loop-token-ceiling" type="number" min="1" step="1" placeholder="50000">' +
+                '      <div class="fp-consent-hint">Cumulative token budget (prompt + response, summed ' +
+                '        across every step) for one multi-step agent turn before FlowPilot stops with an ' +
+                '        error instead of continuing. This is the number that appears in the "FlowPilot ' +
+                '        stopped after using N tokens" error — raise it here if you’re hitting that message ' +
+                '        on a model with a large context window.</div>' +
 
                 '      <div class="fp-settings-section">Agentic build loop</div>' +
                 '      <label>Max build/fix attempts</label>' +
@@ -1105,12 +1222,10 @@
                 '      <div class="fp-settings-section">Risk warnings</div>' +
                 '      <label class="fp-checkbox-row">' +
                 '        <input id="fp-suppress-warnings" type="checkbox"> ' +
-                '        Hide the recurring credentials/size warning bar' +
+                '        Hide the recurring credentials/size warning' +
                 '      </label>' +
-                '      <div class="fp-consent-hint">To hide the warning, check the box and type ' +
-                '        <strong>I understand the risk</strong> below. ' +
-                '        Anything you send may leave this Node-RED instance.</div>' +
-                '      <input id="fp-suppress-confirm" type="text" placeholder="Type: I understand the risk">' +
+                '      <div class="fp-consent-hint">Anything you send may leave this Node-RED ' +
+                '        instance. Check this box to hide the warning indicator near Send.</div>' +
 
                 '      <div class="fp-settings-section">Redaction</div>' +
                 '      <label class="fp-checkbox-row">' +
@@ -1125,6 +1240,15 @@
                 '        sent either way. To disable, check the box and type ' +
                 '        <strong>disable redaction</strong> below.</div>' +
                 '      <input id="fp-redaction-confirm" type="text" placeholder="Type: disable redaction">' +
+
+                '      <div class="fp-settings-section">Debug mode</div>' +
+                '      <label class="fp-checkbox-row">' +
+                '        <input id="fp-debug-logging" type="checkbox"> ' +
+                '        Debug mode' +
+                '      </label>' +
+                '      <div class="fp-consent-hint">Logs full prompts, replies, and decisions to ' +
+                '        <code>flowpilot/debug.log</code> for troubleshooting. Off by default — ' +
+                '        this file can get large.</div>' +
                 '      </details>' +
 
                 '      <div class="fp-settings-actions">' +
@@ -1287,6 +1411,13 @@
             RED.events.on("deploy", function () {
                 if (activeBuildLoop && activeBuildLoop.waypoint === "apply") {
                     activeBuildLoop.waypoint = "attach";
+                    // CLAUDE-025: marks the start of THIS attempt's own
+                    // evidence window — see freshBuildLoopEvidence. Anything
+                    // that arrived before this (a prior attempt's debug
+                    // output, a manual attach, an unrelated still-running
+                    // flow) is stale and must not count toward this
+                    // attempt's own goal.
+                    activeBuildLoop.deployedAt = Date.now();
                     renderLoopStepper(activeBuildLoop);
                     // Start a timer so flows with no debug nodes (e.g. HTTP
                     // endpoints) don't leave the loop stuck silently waiting.
@@ -1368,6 +1499,36 @@
                         }
                         rec.state = "applied";
                     }
+                } else if (data.event === "resolveRecordAction" && typeof data.recordId === "number") {
+                    var actionRec = null;
+                    for (var ai = 0; ai < messageRecords.length; ai++) {
+                        if (messageRecords[ai].id === data.recordId) { actionRec = messageRecords[ai]; break; }
+                    }
+                    if (actionRec && actionRec.kind === "question" && !actionRec.decision) {
+                        if (actionRec.buildConsentGate && (data.action === "proceed" || data.action === "skip")) {
+                            actionRec.decision = data.action;
+                            runBuildConsentDecision(actionRec, data.action === "proceed");
+                        } else if (actionRec.agentToolConsent && (data.action === "proceed" || data.action === "skip")) {
+                            actionRec.decision = data.action;
+                            if (typeof actionRec.onResume === "function") { actionRec.onResume(data.action === "proceed"); }
+                        } else if (actionRec.askUserTool && data.action === "answer") {
+                            actionRec.decision = "answered";
+                            actionRec.answerText = String(data.value || "");
+                            if (typeof actionRec.onAnswer === "function") { actionRec.onAnswer(actionRec.answerText); }
+                        } else if (actionRec.loopCheckpoint && (data.action === "continue" || data.action === "stop")) {
+                            actionRec.decision = data.action;
+                            if (typeof actionRec.onResume === "function") { actionRec.onResume(data.action); }
+                        }
+                    } else if (actionRec && actionRec.kind === "chip" && actionRec.chipType === "suggestedAction"
+                            && data.action === "apply-suggested-action") {
+                        // CLAUDE-028: the redirect chip's own click handler (bound
+                        // directly on the button at render time) doesn't survive the
+                        // pop-out's innerHTML clone. Rides the same rebind-by-record-id
+                        // relay renderAskUserQuestion's quick-reply buttons already use
+                        // (bindRecordActionButtons in this file) — no chip-specific wiring
+                        // needed on the pop-out side.
+                        applySuggestedAction(actionRec.suggestedAction);
+                    }
                 } else if (data.event === "stopBuildLoop") {
                     stopBuildLoop("Build loop stopped — applied nodes remain as-is.");
                 } else if (data.event === "clearChat") {
@@ -1438,8 +1599,49 @@
             });
 
             loadSettings();
+            checkForFlowPilotUpdates();
             updateSelectionStatus();
             showChat();
+            rehydrateConversationOnLoad();
+    }
+
+    // CLAUDE-029: on a page reload, sessionStorage already retains the
+    // conversation-id (see history.js) and the backend already has the full
+    // transcript (History panel proves it's retrievable) — but nothing ever
+    // fetched and rendered it into the Chat panel on init, so a reload left
+    // Chat looking empty even though the conversation was never lost.
+    // Reuses loadConversation() verbatim (same fetch + same addMessage()
+    // render path the History panel's click handler uses) so there is no
+    // second copy of the message-rendering logic to drift out of sync.
+    function rehydrateConversationOnLoad() {
+        flowpilotStorageLog("log", "rehydrateConversationOnLoad-enter", {
+            conversationIdWasRestored: conversationIdWasRestored,
+            conversationId: conversationId,
+            href: location.href
+        });
+        if (!conversationIdWasRestored) { return; }
+        loadConversation(conversationId, function (msg, xhr) {
+            // Conversation no longer exists server-side (404) — the
+            // sessionStorage entry is stale, so drop it rather than retry
+            // this same failed fetch on every future reload. Any other
+            // failure (network hiccup, etc.) leaves it in place in case it
+            // was transient. Either way: stay quiet, Chat simply stays
+            // empty exactly as it does today — no error bubble on load.
+            flowpilotStorageLog("warn", "rehydrateConversationOnLoad-error", {
+                conversationId: conversationId,
+                status: xhr && xhr.status,
+                message: msg
+            });
+            if (xhr && xhr.status === 404) {
+                clearConversationId("rehydrate 404");
+                clearRunMarker("rehydrate 404");
+            }
+        }, function () {
+            flowpilotStorageLog("log", "rehydrateConversationOnLoad-success", {
+                conversationId: conversationId
+            });
+            restoreInterruptedRunMarker(conversationId);
+        }, { preserveRunMarker: true });
     }
 
     window.FlowPilotCore = { initMainWindow: initMainWindow, initPopout: initPopout };