@swarmclawai/swarmclaw 0.5.2 → 0.6.0

package/README.md

@@ -20,6 +20,7 @@ Inspired by [OpenClaw](https://github.com/openclaw).
 - Always use the access key authentication (generated on first run)
 - Never expose port 3456 without a reverse proxy + TLS
 - Review agent system prompts before giving them shell or browser tools
+- Repeated failed access key attempts are rate-limited to slow brute-force attacks
 
 ## Features
 
@@ -39,7 +40,10 @@ Inspired by [OpenClaw](https://github.com/openclaw).
 - **Loop Runtime Controls** — Switch between bounded and ongoing loops with configurable step caps, runtime guards, heartbeat cadence, and timeout budgets
 - **Session Run Queue** — Per-session queued runs with followup/steer/collect modes, collect coalescing for bursty inputs, and run-state APIs
 - **Chat Iteration Workflow** — Edit-and-resend user turns, fork a new session from any message, bookmark key messages, use contextual follow-up suggestion chips, and auto-continue after tool access grants
+- **Agent Chatrooms** — Multi-agent room conversations with `@mention` routing, chained agent replies, reactions, and file/image-aware chat context
 - **Live Chat Telemetry** — Thinking/tool/responding stream phases, live main-loop status badges, connector activity presence, tone indicator, and optional sound notifications
+- **Global Search Palette** — `Cmd/Ctrl+K` search across agents, tasks, sessions, schedules, webhooks, and skills from anywhere in the app
+- **Notification Center** — Real-time in-app notifications for task/schedule/daemon events with unread tracking, mark-all/clear-read controls, and optional action links
 - **Preview-Rich Chat UI** — Side preview panel for tool outputs (image/browser/html/code), inline code/PDF previews for attachments, and image lightbox support
 - **Voice Settings** — Per-instance ElevenLabs API key + voice ID for TTS replies, plus configurable speech recognition language for chat input
 - **Chat Connectors** — Bridge agents to Discord, Slack, Telegram, WhatsApp, BlueBubbles (iMessage), Signal, Microsoft Teams, Google Chat, Matrix, and OpenClaw with media-aware inbound handling
@@ -48,6 +52,7 @@ Inspired by [OpenClaw](https://github.com/openclaw).
 - **Context Management** — Auto-compaction of conversation history when approaching context limits, with manual `context_status` and `context_summarize` tools for agents
 - **Memory** — Per-agent and per-session memory with hybrid FTS5 + vector embeddings search, relevance-based memory recall injected into runs, and periodic auto-journaling for durable execution context
 - **Cost Tracking** — Per-message token counting and cost estimation displayed in the chat header
+- **Provider Health Metrics** — Usage dashboard surfaces provider request volume, success rates, models used, and last-used timestamps
 - **Model Failover** — Automatic key rotation on rate limits and auth errors with configurable fallback credentials
 - **Plugin System** — Extend agent behavior with JS plugins (hooks: beforeAgentStart, afterAgentComplete, beforeToolExec, afterToolExec, onMessage)
 - **Secrets Vault** — Encrypted storage for API keys and service tokens
@@ -81,7 +86,7 @@ curl -fsSL https://raw.githubusercontent.com/swarmclawai/swarmclaw/main/install.
 ```
 
 The installer resolves the latest stable release tag and installs that version by default.
-To pin a version: `SWARMCLAW_VERSION=v0.5.2 curl ... | bash`
+To pin a version: `SWARMCLAW_VERSION=v0.6.0 curl ... | bash`
 
 Or run locally from the repo (friendly for non-technical users):
 
@@ -97,6 +102,8 @@ npm run quickstart
 - Prepare `.env.local` and `data/`
 - Start the app at `http://localhost:3456`
 
+`postinstall` rebuilds `better-sqlite3` natively. If you install with `--ignore-scripts`, run `npm rebuild better-sqlite3` manually.
+
 On first launch, SwarmClaw will:
 1. Generate an **access key** and display it in the terminal
 2. Save it to `.env.local`
@@ -161,8 +168,10 @@ src/
 │   ├── agents/       # Agent builder UI
 │   ├── auth/         # Access key gate + user picker
 │   ├── chat/         # Message rendering, streaming, code blocks
+│   ├── chatrooms/    # Multi-agent chatroom UI
 │   ├── connectors/   # Discord/Slack/Telegram/WhatsApp config
 │   ├── layout/       # App shell, sidebar, mobile header
+│   ├── memory/       # Memory browser and maintenance UI
 │   ├── providers/    # Provider management
 │   ├── schedules/    # Cron scheduler
 │   ├── skills/       # Skills manager
@@ -171,7 +180,7 @@ src/
 ├── lib/
 │   ├── providers/    # LLM provider implementations
 │   └── server/       # Storage, orchestrator, connectors, tools
-├── stores/           # Zustand state (app store, chat store)
+├── stores/           # Zustand state (app store, chat store, chatroom store)
 └── types/            # TypeScript interfaces
 ```
 
@@ -288,6 +297,7 @@ Agents with platform tools enabled can manage the SwarmClaw instance:
 | Manage Documents | Upload/search/get/delete indexed docs for lightweight RAG workflows |
 | Manage Webhooks | Register external webhook endpoints that trigger agent sessions |
 | Manage Connectors | Manage chat platform bridges |
+| Manage Chatrooms | Create/list/update chatrooms, manage members, and post room messages for multi-agent collaboration |
 | Manage Sessions | Enable `sessions_tool` for list/history/status/send/spawn/stop, plus `context_status` and `context_summarize` for context window management |
 | Manage Secrets | Store and retrieve encrypted reusable secrets |
 
@@ -313,6 +323,8 @@ Token usage and estimated costs are tracked per message for API-based providers
 
 The daemon auto-processes queued tasks from the scheduler on a 30-second interval. It also runs recurring health checks that detect stale heartbeat sessions and can send proactive WhatsApp alerts when issues are detected. Toggle the daemon from the sidebar indicator or via API.
 
+Daemon runtime also triggers memory consolidation (daily summary generation plus recurring dedupe/prune maintenance).
+
 - **API:** `GET /api/daemon` (status), `POST /api/daemon` with `{"action": "start"}` or `{"action": "stop"}`
 - Auto-starts on first authenticated runtime traffic (`/api/auth` or `/api/daemon`) unless `SWARMCLAW_DAEMON_AUTOSTART=0`
 
@@ -327,7 +339,7 @@ For autonomous long-running missions, enable the **Main Loop** on a session. Thi
   - `autonomous`: Agent executes safe actions without confirmation, only asks when blocked by permissions/credentials
   - `assist`: Agent asks before irreversible external actions (sending messages, purchases, account mutations)
 - **API:** `POST /api/sessions/[id]/main-loop` with `{"tick":true}` to trigger a mission tick
-- **CLI:** `swarmclaw sessions main-loop --session-id <id>` (via daemon schedule)
+- **CLI:** `swarmclaw sessions main-loop <id>` to inspect loop state, or `swarmclaw sessions main-loop-action <id> --data '{"action":"nudge"}'` to control it
 
 Use this for background agents that should "keep working" on a goal until blocked or complete.
 
@@ -530,7 +542,7 @@ git push origin main --follow-tags
 ```
 
 On `v*` tags, GitHub Actions will:
-1. Run CI checks
+1. Run release gates (`npm run test:cli`, `npm run test:openclaw`, `npm run build:ci`)
 2. Create a GitHub Release
 3. Build and publish Docker images to `ghcr.io/swarmclawai/swarmclaw` (`:vX.Y.Z`, `:latest`, `:sha-*`)
 
@@ -556,9 +568,18 @@ swarmclaw [global-options] <group> <command> [command-options]
 
 | Flag | Description |
 |-|-|
-| `-u, --url <url>` | SwarmClaw base URL (default: `http://localhost:3456`) |
-| `-k, --key <key>` | Access key (or set `SWARMCLAW_ACCESS_KEY`) |
-| `--raw` | Print compact JSON output |
+| `--base-url <url>` | API base URL (default: `http://localhost:3456`) |
+| `--access-key <key>` | Access key override (else `SWARMCLAW_API_KEY` or `platform-api-key.txt`) |
+| `--data <json\|@file\|->` | Request JSON body |
+| `--query key=value` | Query parameter (repeatable) |
+| `--header key=value` | Extra HTTP header (repeatable) |
+| `--json` | Compact JSON output |
+| `--wait` | Wait for run/task completion when IDs are returned |
+| `--timeout-ms <ms>` | Request/wait timeout (default `300000`) |
+| `--interval-ms <ms>` | Poll interval for `--wait` (default `2000`) |
+| `--out <file>` | Write binary response to file |
+
+Routing note: `swarmclaw` uses a hybrid router. Some legacy rich commands still support `-u/--url`, `-k/--key`, and `--raw`; mapped API commands use the options above.
 
 ### Command Groups
 
@@ -570,7 +591,9 @@ Notable setup/operations groups include:
 | `setup` | Setup helpers like provider checks and `doctor` diagnostics |
 | `version` | Version status and update helpers |
 | `sessions` | Session lifecycle, chat, browser/devserver controls, mailbox |
+| `chatrooms` | Multi-agent chatrooms (members, reactions, streamed room chat) |
 | `memory` | Memory CRUD and maintenance utilities |
+| `notifications` | In-app notification listing and read-state controls |
 
 ### Examples
 
@@ -592,6 +615,18 @@ swarmclaw setup init --provider openai --api-key "$OPENAI_API_KEY"
 
 # run memory maintenance analysis
 swarmclaw memory maintenance
+
+# list chatrooms
+swarmclaw chatrooms list
+
+# send a room message and stream agent replies
+swarmclaw chatrooms chat <chatroomId> --data '{"text":"@all status update?"}'
+
+# react to a room message
+swarmclaw chatrooms react <chatroomId> --data '{"messageId":"<messageId>","emoji":"👍"}'
+
+# pin/unpin a room message
+swarmclaw chatrooms pin <chatroomId> --data '{"messageId":"<messageId>"}'
 ```
 
 ## Credits

package/bin/swarmclaw.js

@@ -4,28 +4,88 @@
 const path = require('node:path')
 const { spawnSync } = require('node:child_process')
 
-// Route 'server' and 'update' subcommands to CJS scripts (no TS dependency)
-if (process.argv[2] === 'server') {
-  require('./server-cmd.js')
-} else if (process.argv[2] === 'update') {
-  require('./update-cmd.js')
-} else {
-  const cliPath = path.join(__dirname, '..', 'src', 'cli', 'index.ts')
+// Legacy TS CLI groups/actions that provide richer, command-specific options.
+const TS_CLI_ACTIONS = Object.freeze({
+  agents: new Set(['list', 'get']),
+  tasks: new Set(['list', 'get', 'create', 'update', 'delete', 'archive']),
+  schedules: new Set(['list', 'get', 'create']),
+  runs: new Set(['list', 'get']),
+  sessions: new Set(['list', 'get', 'create', 'update', 'delete', 'history', 'mailbox', 'stop']),
+  memory: new Set(['get', 'search', 'store', 'maintenance']),
+  'memory-images': new Set(['get']),
+  setup: new Set(['init', 'check-provider', 'doctor', 'openclaw-device']),
+  connectors: new Set(['list', 'get', 'create', 'update', 'delete', 'start', 'stop', 'repair']),
+  webhooks: new Set(['list', 'get', 'create', 'update', 'delete', 'trigger']),
+})
+
+function shouldUseLegacyTsCli(argv) {
+  const group = argv[0]
+  const action = argv[1]
+
+  // Default to mapped CLI for top-level help/version and unknown groups.
+  if (!group || group.startsWith('-')) return false
 
+  const actions = TS_CLI_ACTIONS[group]
+  if (!actions) return false
+
+  // Prefer mapped CLI for group help so all API-backed actions are discoverable.
+  if (!action || action === 'help' || action.startsWith('-')) return false
+
+  return actions.has(action)
+}
+
+function runLegacyTsCli(argv) {
+  const cliPath = path.join(__dirname, '..', 'src', 'cli', 'index.ts')
   const child = spawnSync(
     process.execPath,
-    ['--no-warnings', '--experimental-strip-types', cliPath, ...process.argv.slice(2)],
-    {
-      stdio: 'inherit',
-    },
+    ['--no-warnings', '--experimental-strip-types', cliPath, ...argv],
+    { stdio: 'inherit' },
   )
 
   if (child.error) {
     process.stderr.write(`${child.error.message}\n`)
-    process.exitCode = 1
-  } else if (typeof child.status === 'number') {
-    process.exitCode = child.status
-  } else {
-    process.exitCode = 1
+    return 1
+  }
+  if (typeof child.status === 'number') return child.status
+  return 1
+}
+
+async function runMappedCli(argv) {
+  const cliPath = path.join(__dirname, '..', 'src', 'cli', 'index.js')
+  const cliModule = await import(cliPath)
+  const runCli = cliModule.runCli || (cliModule.default && cliModule.default.runCli)
+  if (typeof runCli !== 'function') {
+    throw new Error('Unable to load API-mapped CLI runtime')
   }
+  return runCli(argv)
+}
+
+async function main() {
+  const argv = process.argv.slice(2)
+  const top = argv[0]
+
+  // Route 'server' and 'update' subcommands to CJS scripts (no TS dependency).
+  if (top === 'server') {
+    require('./server-cmd.js')
+    return
+  }
+  if (top === 'update') {
+    require('./update-cmd.js')
+    return
+  }
+
+  const code = shouldUseLegacyTsCli(argv)
+    ? runLegacyTsCli(argv)
+    : await runMappedCli(argv)
+
+  process.exitCode = typeof code === 'number' ? code : 1
+}
+
+if (require.main === module) {
+  void main()
+}
+
+module.exports = {
+  TS_CLI_ACTIONS,
+  shouldUseLegacyTsCli,
 }

package/next.config.ts

@@ -11,6 +11,11 @@ function getGitSha(): string {
 
 const nextConfig: NextConfig = {
   output: 'standalone',
+  turbopack: {
+    // Pin workspace root to the project directory so a stale lockfile
+    // in a parent folder (e.g. ~/) doesn't confuse native module resolution.
+    root: process.cwd(),
+  },
   experimental: {
     // Disable Turbopack persistent cache — concurrent HMR writes cause
     // "Another write batch or compaction is already active" errors
@@ -36,9 +41,14 @@ const nextConfig: NextConfig = {
     '0.0.0.0',
   ],
   async rewrites() {
+    const views = 'agents|chatrooms|schedules|memory|tasks|secrets|providers|skills|connectors|webhooks|mcp-servers|knowledge|plugins|usage|runs|logs|settings|projects|activity'
     return [
       {
-        source: '/:view(agents|schedules|memory|tasks|secrets|providers|skills|connectors|webhooks|mcp-servers|knowledge|plugins|usage|runs|logs|settings|projects)',
+        source: `/:view(${views})`,
+        destination: '/',
+      },
+      {
+        source: `/:view(${views})/:id`,
         destination: '/',
       },
     ]

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@swarmclawai/swarmclaw",
-  "version": "0.5.2",
+  "version": "0.6.0",
   "description": "Self-hosted AI agent orchestration dashboard — manage LLM providers, orchestrate agent swarms, schedule tasks, and bridge agents to chat platforms.",
   "license": "MIT",
   "repository": {
@@ -27,6 +27,7 @@
     "bin/",
     "src/",
     "public/",
+    "scripts/postinstall.mjs",
     "next.config.ts",
     "tsconfig.json",
     "postcss.config.mjs",
@@ -50,7 +51,8 @@
     "lint:baseline:update": "node ./scripts/lint-baseline.mjs update",
     "cli": "node ./bin/swarmclaw.js",
     "test:cli": "node --test src/cli/index.test.js",
-    "test:openclaw": "tsx --test src/lib/server/connectors/openclaw.test.ts src/lib/openclaw-endpoint.test.ts src/lib/server/gateway/protocol.test.ts src/lib/server/tool-capability-policy.test.ts"
+    "test:openclaw": "tsx --test src/lib/server/connectors/openclaw.test.ts src/lib/openclaw-endpoint.test.ts src/lib/server/gateway/protocol.test.ts src/lib/server/tool-capability-policy.test.ts",
+    "postinstall": "node ./scripts/postinstall.mjs"
   },
   "dependencies": {
     "@huggingface/transformers": "^3.8.1",

package/scripts/postinstall.mjs

@@ -0,0 +1,18 @@
+#!/usr/bin/env node
+
+import { spawnSync } from 'node:child_process'
+
+const result = spawnSync('npm', ['rebuild', 'better-sqlite3', '--silent'], {
+  stdio: 'ignore',
+})
+
+if (result.error) {
+  // Ignore optional native rebuild failures for install resilience.
+}
+
+if (!process.env.CI) {
+  process.stdout.write('\n')
+  process.stdout.write('Thanks for installing SwarmClaw.\n')
+  process.stdout.write('If it helps you, please star the repo: https://github.com/swarmclawai/swarmclaw\n')
+  process.stdout.write('\n')
+}