colana 1.0.0-beta.78 → 1.0.0-beta.79

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "colana",
-  "version": "1.0.0-beta.78",
+  "version": "1.0.0-beta.79",
   "description": "Agent-First. Multiplied. Multi-agent command center for AI coding agents.",
   "type": "module",
   "main": "server/index.js",

package/public/app.js

@@ -2130,6 +2130,14 @@ function handleWebSocketMessage(message) {
       }
       renderPersonalStrip();
 
+      // Show update banner if server already detected an available update
+      if (message.updateInfo && message.updateInfo.updateAvailable) {
+        if (!state.updateInfo || state.updateInfo.latestVersion !== message.updateInfo.latestVersion) {
+          state.updateInfo = { ...message.updateInfo };
+        }
+        renderUpdateBanner();
+      }
+
       // Auto-start personal agent if setting enabled.
       // Delay 5s (not 2s) so server-side auto-resume (3s) completes first.
       // Debounce: clear any pending timer so only one auto-start attempt runs,
@@ -9286,6 +9294,8 @@ document.getElementById('btn-close-integration-modal')?.addEventListener('click'
 async function loadServerStatus() {
   const el = $('#server-status-info');
   const restartBtn = $('#btn-server-restart');
+  const serviceToggleBtn = $('#btn-service-toggle');
+  const serviceToggleText = $('#btn-service-toggle-text');
   if (!el) return;
   try {
     const info = await api('/server/status');
@@ -9304,6 +9314,28 @@ async function loadServerStatus() {
         : (info?.restart?.message || 'Restart unavailable in manual mode');
     }
 
+    // Service toggle button
+    if (serviceToggleBtn && serviceToggleText) {
+      serviceToggleText.textContent = serviceInstalled ? 'Disable Auto-Start' : 'Enable Auto-Start';
+      serviceToggleBtn.title = serviceInstalled
+        ? 'Remove background service (stop auto-starting on login)'
+        : 'Install background service (auto-start on login)';
+      serviceToggleBtn.onclick = async () => {
+        const action = serviceInstalled ? 'uninstall' : 'install';
+        serviceToggleBtn.disabled = true;
+        serviceToggleText.textContent = serviceInstalled ? 'Removing...' : 'Installing...';
+        try {
+          const result = await api(`/server/service/${action}`, { method: 'POST' });
+          showToast(result.message || `Service ${action} completed`, result.success ? 'success' : 'error');
+          await loadServerStatus();
+        } catch (err) {
+          showToast(err.message || `Failed to ${action} service`, 'error');
+          serviceToggleBtn.disabled = false;
+          serviceToggleText.textContent = serviceInstalled ? 'Disable Auto-Start' : 'Enable Auto-Start';
+        }
+      };
+    }
+
     const portBits = (info?.port && info?.preferredPort)
       ? ` &middot; Port: <strong>${info.port}</strong>${info.fallbackPort ? ` (preferred <strong>${info.preferredPort}</strong> busy)` : ''}`
       : '';
@@ -9311,9 +9343,11 @@ async function loadServerStatus() {
     const serviceBits = ` &middot; Service: <strong>${serviceInstalled ? (serviceRunning ? 'running' : 'installed, not running') : 'not installed'}</strong>`;
     const restartBits = ` &middot; Restart: <strong>${restartAvailable ? 'available' : 'blocked (manual mode)'}</strong>`;
 
+    // All values come from server-controlled data (uptime, memory, client counts, port numbers) — safe for innerHTML
     el.innerHTML = `Uptime: <strong>${uptimeStr}</strong> &middot; Memory: <strong>${info.memory} MB</strong> &middot; Clients: <strong>${info.connectedClients}</strong> &middot; Active agents: <strong>${info.activeAgents}</strong>${serviceBits}${restartBits}${portBits}`;
   } catch {
     if (restartBtn) restartBtn.disabled = true;
+    if (serviceToggleBtn) serviceToggleBtn.disabled = true;
     el.textContent = 'Could not fetch server status';
   }
 }

package/public/index.html

@@ -976,6 +976,12 @@
                 </svg>
                 Restart Server
               </button>
+              <button type="button" class="btn btn-secondary" id="btn-service-toggle" title="Install or remove background service (auto-start on login)">
+                <svg xmlns="http://www.w3.org/2000/svg" width="14" height="14" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" style="vertical-align: -2px;">
+                  <path d="M12 2v4M12 18v4M4.93 4.93l2.83 2.83M16.24 16.24l2.83 2.83M2 12h4M18 12h4M4.93 19.07l2.83-2.83M16.24 7.76l2.83-2.83"/>
+                </svg>
+                <span id="btn-service-toggle-text">Enable Auto-Start</span>
+              </button>
             </div>
             <p class="form-hint">Restart clears cached state and reconnects all clients. Available when co:lana runs as an installed background service.</p>
           </div>

package/server/config.js

@@ -233,6 +233,9 @@ const config = {
   toolResultPreviewLen: envInt(process.env.TOOL_RESULT_PREVIEW_LEN, 500),
   maxResumableSessions: envInt(process.env.MAX_RESUMABLE_SESSIONS, 5),
 
+  // --- Update Checker ---
+  updateCheckIntervalMs: envInt(process.env.UPDATE_CHECK_INTERVAL_MS, 6 * 60 * 60 * 1000), // 6 hours
+
   // --- Log Retention ---
   logRetentionDays: envInt(process.env.LOG_RETENTION_DAYS, 0),
   logRetentionIntervalMs: envInt(process.env.LOG_RETENTION_INTERVAL_MS, 24 * 60 * 60 * 1000),

package/server/index.js

@@ -58,7 +58,7 @@ import { createWizardRoutes } from './wizard-routes.js';
 import { checkForUpdate } from './updater.js';
 import { getSystemInfo } from './system-info.js';
 import { autoResumeInterruptedSessions } from './auto-resume.js';
-import { getServiceStatus } from './service-manager.js';
+import { getServiceStatus, installService, uninstallService } from './service-manager.js';
 import { registerServerControlRoutes } from './server-control-routes.js';
 import { registerPersonalAgentRoutes } from './personal-agent-routes.js';
 import { registerIntegrationRoutes } from './integration-routes.js';
@@ -117,6 +117,7 @@ let runtimePort = null;
 let preferredPort = config.startPort;
 let isFallbackPort = false;
 let runtimeServiceManaged = false;
+let _lastUpdateCheck = null;
 
 // --- M8: Per-IP WebSocket connection limit ---
 const WS_MAX_PER_IP = parseInt(process.env.WS_MAX_CONNECTIONS_PER_IP, 10) || 10;
@@ -217,6 +218,23 @@ if (ptyManager) {
   ptyManager.setBroadcastCallback(broadcastFn);
 }
 
+// --- Update checker (cached + periodic) ---
+let _updateCheckerInterval = null;
+function startUpdateChecker() {
+  if (_updateCheckerInterval) return; // already running — guard against duplicate calls from port-retry path
+  const runCheck = () => {
+    checkForUpdate().then(update => {
+      _lastUpdateCheck = update;
+      if (update.updateAvailable) {
+        console.log(`  ${c.info}Update available: v${update.latestVersion}${c.reset}${update.allowed ? '' : ' (subscription expired)'}`);
+        broadcastFn({ eventType: 'updateAvailable', ...update });
+      }
+    }).catch(() => {});
+  };
+  runCheck();
+  _updateCheckerInterval = setInterval(runCheck, config.updateCheckIntervalMs);
+}
+
 // Dashboard WebSocket connection handling
 wss.on('connection', async (ws) => {
   console.log('WebSocket client connected');
@@ -272,6 +290,7 @@ wss.on('connection', async (ws) => {
       },
       systemInfo,
       personalAgentStatus,
+      updateInfo: _lastUpdateCheck,
     }));
   } catch (e) { /* client disconnected before init could be sent */ }
 
@@ -623,6 +642,9 @@ registerServerControlRoutes(app, {
     fallbackPort: isFallbackPort,
     serviceManagedRuntime: runtimeServiceManaged,
   }),
+  sensitiveLimiter,
+  installServiceFn: installService,
+  uninstallServiceFn: uninstallService,
 });
 
 // ============================================
@@ -640,11 +662,12 @@ app.use((err, _req, res, _next) => {
 function shutdown(signal) {
   console.log(`\n${signal} received. Shutting down gracefully...`);
 
-  // Stop heartbeat intervals
+  // Stop heartbeat and background intervals
   clearInterval(wsHeartbeatInterval);
   clearInterval(terminalHeartbeatInterval);
   if (logRetentionInterval) clearInterval(logRetentionInterval);
   if (logRetentionTimeout) clearTimeout(logRetentionTimeout);
+  if (_updateCheckerInterval) clearInterval(_updateCheckerInterval);
 
   // Track app_stopped and stop analytics scheduler
   try { trackEvent('app_stopped', { uptimeSeconds: Math.round(process.uptime()) }); } catch { /* best-effort */ }
@@ -1050,12 +1073,7 @@ async function startServer() {
             // Background tasks
             scheduleLogRetention();
             backgroundRevalidate().catch(() => {});
-            checkForUpdate().then(update => {
-              if (update.updateAvailable) {
-                console.log(`  ${c.info}Update available: v${update.latestVersion}${c.reset}${update.allowed ? '' : ' (subscription expired)'}`);
-                broadcastFn({ eventType: 'updateAvailable', ...update });
-              }
-            }).catch(() => {});
+            startUpdateChecker();
 
             // Auto-start OpenClaw gateway (same as primary listen block)
             if (ptyManager) {
@@ -1132,14 +1150,8 @@ async function startServer() {
         trackEvent('license_tier', { tier: startupLicense.tier || 'free' });
       } catch { /* best-effort */ }
 
-      // Check for updates (non-blocking)
-      checkForUpdate().then(update => {
-        if (update.updateAvailable) {
-          console.log(`  ${c.info}Update available: v${update.latestVersion}${c.reset}${update.allowed ? '' : ' (subscription expired)'}`);
-          // Broadcast to connected clients
-          broadcastFn({ eventType: 'updateAvailable', ...update });
-        }
-      }).catch(() => {});
+      // Check for updates (non-blocking, cached + periodic)
+      startUpdateChecker();
 
       // Auto-start OpenClaw gateway so the Personal Agent is immediately available
       if (ptyManager) {

package/server/server-control-routes.js

@@ -1,15 +1,19 @@
 import { getServiceStatus } from './service-manager.js';
 import { evaluateRestartMode } from './runtime-policy.js';
+import logger from './logger.js';
 
 /**
- * Register server control endpoints (restart + status).
+ * Register server control endpoints (restart + status + service management).
  *
  * @param {import('express').Express} app
  * @param {{
  *   onRestart: (signal: string) => void,
  *   getStatusSnapshot: () => Record<string, unknown>,
  *   getServiceStatusFn?: () => any,
- *   allowManualRestart?: boolean
+ *   allowManualRestart?: boolean,
+ *   sensitiveLimiter?: import('express').RequestHandler,
+ *   installServiceFn?: () => { success: boolean, message: string },
+ *   uninstallServiceFn?: () => { success: boolean, message: string },
  * }} deps
  */
 export function registerServerControlRoutes(app, deps) {
@@ -18,6 +22,9 @@ export function registerServerControlRoutes(app, deps) {
     getStatusSnapshot,
     getServiceStatusFn = getServiceStatus,
     allowManualRestart = process.env.COLANA_ALLOW_MANUAL_RESTART === 'true',
+    sensitiveLimiter,
+    installServiceFn,
+    uninstallServiceFn,
   } = deps;
 
   if (typeof onRestart !== 'function') {
@@ -27,6 +34,8 @@ export function registerServerControlRoutes(app, deps) {
     throw new Error('registerServerControlRoutes: getStatusSnapshot must be a function');
   }
 
+  const limiterMiddleware = sensitiveLimiter || ((req, res, next) => next());
+
   app.post('/api/server/restart', (req, res) => {
     let service = null;
     try {
@@ -84,9 +93,38 @@ export function registerServerControlRoutes(app, deps) {
       },
     });
   });
+
+  // --- Service install/uninstall (OS-level auto-start) ---
+
+  app.post('/api/server/service/install', limiterMiddleware, (req, res) => {
+    if (typeof installServiceFn !== 'function') {
+      return res.status(501).json({ success: false, error: 'Service management not available' });
+    }
+    try {
+      const result = installServiceFn();
+      logger.info('server', 'Service install requested', { success: result.success });
+      res.json(result);
+    } catch (err) {
+      logger.error('server', 'Service install failed', { error: err.message });
+      res.status(500).json({ success: false, error: err.message || 'Service install failed' });
+    }
+  });
+
+  app.post('/api/server/service/uninstall', limiterMiddleware, (req, res) => {
+    if (typeof uninstallServiceFn !== 'function') {
+      return res.status(501).json({ success: false, error: 'Service management not available' });
+    }
+    try {
+      const result = uninstallServiceFn();
+      logger.info('server', 'Service uninstall requested', { success: result.success });
+      res.json(result);
+    } catch (err) {
+      logger.error('server', 'Service uninstall failed', { error: err.message });
+      res.status(500).json({ success: false, error: err.message || 'Service uninstall failed' });
+    }
+  });
 }
 
 export default {
   registerServerControlRoutes,
 };
-