colana 1.0.0-beta.26 → 1.0.0-beta.28

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "colana",
-  "version": "1.0.0-beta.26",
+  "version": "1.0.0-beta.28",
   "description": "Agent-First. Multiplied. Multi-agent command center for AI coding agents.",
   "type": "module",
   "main": "server/index.js",

package/public/app.js

@@ -6960,6 +6960,102 @@ async function loadOpenClawModelConfig() {
     currentRow.appendChild(value);
     container.appendChild(currentRow);
 
+    // If no models available (fresh install, no API keys), show quick-setup for entering a key
+    const hasModels = Array.isArray(data.allModels) && data.allModels.length > 0;
+    if (!hasModels) {
+      const providerEnvMap = data.providerEnvMap || {};
+      const quickSetup = document.createElement('div');
+      quickSetup.className = 'openclaw-quick-setup';
+      quickSetup.style.cssText = 'margin-top:12px;padding:14px;background:var(--bg-secondary,#1a1a2e);border:1px solid var(--border-color,#2a2a4a);border-radius:8px;';
+
+      const heading = document.createElement('div');
+      heading.style.cssText = 'font-size:0.9em;font-weight:600;margin-bottom:10px;color:var(--text-primary,#e0e0e0);';
+      heading.textContent = 'Quick Setup — Enter an API key to get started';
+      quickSetup.appendChild(heading);
+
+      const desc = document.createElement('div');
+      desc.style.cssText = 'font-size:0.82em;color:var(--text-muted,#888);margin-bottom:12px;';
+      desc.textContent = 'Paste an API key for any provider. Models will appear automatically once authenticated.';
+      quickSetup.appendChild(desc);
+
+      // Provider buttons
+      const commonProviders = [
+        { id: 'anthropic', label: 'Anthropic', placeholder: 'sk-ant-...' },
+        { id: 'openai', label: 'OpenAI', placeholder: 'sk-...' },
+        { id: 'google', label: 'Google', placeholder: 'AIza...' },
+        { id: 'groq', label: 'Groq', placeholder: 'gsk_...' },
+        { id: 'xai', label: 'xAI', placeholder: 'xai-...' },
+        { id: 'mistral', label: 'Mistral', placeholder: 'Paste key...' },
+      ];
+
+      const providerRow = document.createElement('div');
+      providerRow.style.cssText = 'display:flex;flex-wrap:wrap;gap:6px;margin-bottom:10px;';
+
+      let selectedProvider = commonProviders[0];
+
+      for (const p of commonProviders) {
+        const chip = document.createElement('button');
+        chip.type = 'button';
+        chip.className = 'btn btn-sm' + (p === selectedProvider ? ' btn-primary' : '');
+        chip.textContent = p.label;
+        chip.style.cssText = 'font-size:0.8em;padding:4px 10px;';
+        chip.onclick = () => {
+          selectedProvider = p;
+          providerRow.querySelectorAll('button').forEach(b => b.classList.remove('btn-primary'));
+          chip.classList.add('btn-primary');
+          keyInput.placeholder = p.placeholder;
+          envLabel.textContent = providerEnvMap[p.id] || `${p.label} API Key`;
+        };
+        providerRow.appendChild(chip);
+      }
+      quickSetup.appendChild(providerRow);
+
+      const envLabel = document.createElement('div');
+      envLabel.style.cssText = 'font-size:0.78em;color:var(--text-muted,#888);margin-bottom:4px;';
+      envLabel.textContent = providerEnvMap[selectedProvider.id] || 'API Key';
+      quickSetup.appendChild(envLabel);
+
+      const inputRow = document.createElement('div');
+      inputRow.style.cssText = 'display:flex;gap:8px;';
+
+      const keyInput = document.createElement('input');
+      keyInput.type = 'password';
+      keyInput.placeholder = selectedProvider.placeholder;
+      keyInput.style.cssText = 'flex:1;padding:7px 10px;border-radius:6px;border:1px solid var(--border-color,#2a2a4a);background:var(--bg-primary,#0d0d1a);color:var(--text-primary,#e0e0e0);font-size:0.85em;';
+
+      const saveBtn = document.createElement('button');
+      saveBtn.type = 'button';
+      saveBtn.className = 'btn btn-sm btn-primary';
+      saveBtn.textContent = 'Save Key';
+      saveBtn.onclick = async () => {
+        const keyValue = keyInput.value.trim();
+        if (!keyValue) { showToast('Enter an API key', 'error'); return; }
+        saveBtn.disabled = true;
+        saveBtn.textContent = 'Saving...';
+        try {
+          await api('/openclaw/models/auth', {
+            method: 'POST',
+            body: JSON.stringify({ provider: selectedProvider.id, apiKey: keyValue }),
+          });
+          showToast(`API key saved for ${selectedProvider.label}. Reloading models...`, 'success');
+          // Reload model config to show newly available models
+          setTimeout(() => loadOpenClawModelConfig(), 1500);
+        } catch (err) {
+          showToast('Failed to save: ' + err.message, 'error');
+        } finally {
+          saveBtn.disabled = false;
+          saveBtn.textContent = 'Save Key';
+        }
+      };
+
+      inputRow.appendChild(keyInput);
+      inputRow.appendChild(saveBtn);
+      quickSetup.appendChild(inputRow);
+
+      container.appendChild(quickSetup);
+      return; // Don't render the empty model selector
+    }
+
     // Build grouped <select> from allModels
     const inputGroup = document.createElement('div');
     inputGroup.className = 'openclaw-model-input-group';

package/server/diagnostics-routes.js

@@ -193,7 +193,8 @@ export function createDiagnosticsRoutes(app, { clients, ptyManager, ptyAvailable
 
     // OpenClaw security audit (async, graceful fallback)
     try {
-      const { stdout } = await execFileAsync('openclaw', ['security', 'audit', '--json'], { timeout: 20000 });
+      const execOpts = { timeout: 20000, ...(process.platform === 'win32' && { shell: true }) };
+      const { stdout } = await execFileAsync('openclaw', ['security', 'audit', '--json'], execOpts);
       const audit = JSON.parse(stdout);
       const critical = audit.summary?.critical || 0;
       const warn = audit.summary?.warn || 0;

package/server/personal-agent-routes.js

@@ -291,7 +291,12 @@ export function registerPersonalAgentRoutes(app, { sensitiveLimiter }) {
    */
   function runOpenClawCli(args, timeoutMs = 8000) {
     return new Promise((resolve, reject) => {
-      const child = execFile('openclaw', args, { timeout: timeoutMs }, (err, stdout, stderr) => {
+      // Windows: openclaw is a .cmd shim — execFile needs shell:true to resolve it
+      const opts = {
+        timeout: timeoutMs,
+        ...(process.platform === 'win32' && { shell: true }),
+      };
+      const child = execFile('openclaw', args, opts, (err, stdout, stderr) => {
         if (err) return reject(err);
         resolve({ stdout: stdout.trim(), stderr: stderr.trim() });
       });