cowork-os 0.3.23 → 0.3.27

package/README.md

@@ -29,10 +29,35 @@ Your AI needs a secure home. CoWork OS provides the runtime, security layers, an
 | **20+ AI Providers** | Claude, OpenAI, Gemini, Bedrock, OpenRouter, Ollama (free/local), Groq, xAI, Kimi, Mistral, Cerebras, MiniMax, Qwen, Copilot, and more |
 | **14 Messaging Channels** | WhatsApp, Telegram, Discord, Slack, Teams, Google Chat, iMessage, Signal, Mattermost, Matrix, Twitch, LINE, BlueBubbles, Email |
 | **8 Enterprise Connectors** | Salesforce, Jira, HubSpot, Zendesk, ServiceNow, Linear, Asana, Okta |
-| **6 Cloud Storage** | Notion, Box, OneDrive, Google Drive, Dropbox, SharePoint |
-| **Security-First** | 1800+ unit tests, configurable guardrails, approval workflows |
+| **6 Cloud Storage** | Notion, Box, OneDrive, Google Workspace (Drive/Gmail/Calendar), Dropbox, SharePoint |
+| **Security-First** | 2350+ unit tests, configurable guardrails, approval workflows |
 | **Local-First** | Your data stays on your machine. BYOK (Bring Your Own Key) |
 
+### Feature Comparison (CoWork OS vs OpenClaw vs Claude Cowork)
+
+| Feature | CoWork OS | OpenClaw | Claude Cowork |
+|---|---|---|---|
+| Model providers / BYOK | 20+ providers (Claude, OpenAI, Gemini, Bedrock, OpenRouter, Ollama, Groq, xAI, Kimi, Mistral, Cerebras, MiniMax, Qwen, Copilot, and more); BYOK | Any model supported; OAuth + API keys (Anthropic/OpenAI listed) | Claude plans (Pro/Max/Team/Enterprise); other providers not mentioned |
+| Local-first data control | Data stays on your machine; BYOK | Run on your own devices; local-first gateway | Runs locally in an isolated VM; choose folders/connectors; local history for Team/Enterprise |
+| Desktop platforms | macOS (cross-platform planned) | macOS, Linux, Windows (via WSL2) | macOS only (research preview) |
+| Messaging channels | 14 channels: WhatsApp, Telegram, Discord, Slack, Teams, Google Chat, iMessage, Signal, Mattermost, Matrix, Twitch, LINE, BlueBubbles, Email | Multi-channel inbox: WhatsApp, Telegram, Slack, Discord, Google Chat, Signal, BlueBubbles, iMessage, Teams, Matrix, Zalo, WebChat, macOS, iOS/Android | Not stated (desktop app + connectors) |
+| Enterprise connectors | Salesforce, Jira, HubSpot, Zendesk, ServiceNow, Linear, Asana, Okta | Not stated | Connectors supported; examples include Slack, Notion, GitHub, Linear |
+| Cloud storage connectors | Notion, Box, OneDrive, Google Workspace, Dropbox, SharePoint | Not stated | Not stated |
+| Mobile companions | iOS + Android companion apps (local network) | iOS/Android nodes + macOS menu bar app | Not stated (macOS only) |
+| Scheduling / cron | Recurring tasks via cron expressions | Cron + wakeups | Not stated |
+| Remote access | Tailscale or SSH tunnels | Tailscale Serve/Funnel or SSH tunnels | Not stated |
+| WebSocket API / control plane | WebSocket API for custom integrations | Gateway WebSocket control plane | Not stated |
+| Browser automation | Playwright automation | Browser control (Chrome/Chromium) | Browser access via Chrome connector |
+| Skills / plugins | 75+ bundled skills | Skills platform (bundled, managed, workspace skills) | Not stated |
+| MCP support | Yes | Not stated | Not stated |
+| Guardrails (token/cost/iteration limits) | Configurable guardrails | Not stated | Not stated |
+| Approval workflows | Required for destructive operations | Not stated | Human approval before significant actions |
+| Access control (pairing/allowlists) | Pairing codes + per-channel allowlists | DM pairing + allowlists | Folder/connector access controls |
+| Sandbox isolation | macOS sandbox-exec or Docker | Not stated | Runs locally in an isolated VM |
+| Encrypted credential storage | OS keychain + AES-256 fallback | Not stated | Not stated |
+
+_Sources: [OpenClaw README](https://github.com/openclaw/openclaw), [OpenClaw docs](https://docs.openclaw.ai), and the [Claude Cowork product page](https://claude.com/product/cowork). “Not stated” means not documented in public materials._
+
 > **Status**: macOS desktop app (cross-platform support planned)
 
 ---
@@ -65,7 +90,7 @@ Your AI needs a secure home. CoWork OS provides the runtime, security layers, an
 - **Dangerous command blocking**: Built-in patterns + custom regex rules
 - **Approval workflows**: User consent required for destructive operations
 - **Pairing & allowlists**: Control who can access your AI via messaging channels
-- **1800+ tests**: Comprehensive test coverage for access control and policies
+- **2350+ tests**: Comprehensive test coverage for access control and policies
 
 ### Your Data, Your Control
 
@@ -218,6 +243,18 @@ All channels support:
 - Session management
 - Rate limiting
 
+### Visual Theme System
+
+Customize the app appearance with multiple theme options.
+
+| Theme | Description |
+|-------|-------------|
+| **System** | Follows your macOS light/dark mode preference |
+| **Light** | Clean light interface |
+| **Dark** | Dark mode for reduced eye strain |
+
+Configure in **Settings** > **Appearance**.
+
 ### Agent Capabilities
 
 - **Task-Based Workflow**: Multi-step execution with plan-execute-observe loops
@@ -226,6 +263,7 @@ All channels support:
 - **75+ Built-in Skills**: GitHub, Slack, Notion, Spotify, Apple Notes, and more
 - **Document Creation**: Excel, Word, PDF, PowerPoint with professional formatting
 - **Persistent Memory**: Cross-session context with privacy-aware observation capture
+- **Workspace Recency**: Workspaces ordered by last used time for quick access
 
 ### Voice Mode (NEW)
 
@@ -1377,7 +1415,13 @@ Access CoWork OS from your iPhone, iPad, or Android device via the local network
 
 ## Web Search Integration
 
-Multi-provider web search for research tasks.
+Multi-provider web search for research tasks with automatic retry and fallback.
+
+### Features
+
+- **Automatic Retry**: Transient errors (rate limits, timeouts) trigger automatic retry with exponential backoff
+- **Provider Fallback**: If one provider fails, automatically tries the next configured provider
+- **Graceful Degradation**: Returns helpful error messages instead of failing silently
 
 ### Supported Providers
 
@@ -1410,6 +1454,8 @@ Claude Code-style tools for developers.
 → grep pattern="TODO:" glob="*.ts"
 ```
 
+**Smart Document Detection**: Automatically detects document-heavy workspaces (PDF/DOCX) and provides helpful guidance to use `read_file` instead, since grep only searches text files.
+
 ### edit_file - Surgical Editing
 
 ```
@@ -1553,25 +1599,47 @@ onedrive_action({
 
 ---
 
-## Google Drive Integration
+## Google Workspace Integration
 
-Configure in **Settings > Integrations > Google Drive**. Use `google_drive_action` to search, read, and manage Google Drive files and folders. Write actions (create, upload, delete) require approval.
+Configure in **Settings > Integrations > Google Workspace**. Unified access to Gmail, Google Calendar, and Google Drive with shared OAuth authentication.
 
-### List files
+### Available Tools
+
+| Service | Tool | Actions |
+|---------|------|---------|
+| **Drive** | `google_drive_action` | list_files, search, upload_file, download_file, delete_file |
+| **Gmail** | `gmail_action` | list_messages, search, send_email, read_email, create_draft |
+| **Calendar** | `google_calendar_action` | list_events, create_event, update_event, delete_event |
+
+### Gmail - Send an email
 
 ```ts
-google_drive_action({
-  action: "list_files",
-  page_size: 20
+gmail_action({
+  action: "send_email",
+  to: "recipient@example.com",
+  subject: "Weekly Report",
+  body: "Please find the attached report..."
 });
 ```
 
-### Upload a file
+### Calendar - Create an event
+
+```ts
+google_calendar_action({
+  action: "create_event",
+  title: "Team Standup",
+  start_time: "2025-02-10T09:00:00",
+  end_time: "2025-02-10T09:30:00",
+  attendees: ["team@example.com"]
+});
+```
+
+### Drive - List files
 
 ```ts
 google_drive_action({
-  action: "upload_file",
-  file_path: "reports/summary.pdf"
+  action: "list_files",
+  page_size: 20
 });
 ```
 
@@ -1876,7 +1944,7 @@ Users must comply with their model provider's terms:
 - [x] Tailscale and SSH remote access
 - [x] Personality system
 - [x] 75+ bundled skills
-- [x] 1800+ unit tests
+- [x] 2350+ unit tests
 - [x] Docker-based sandboxing (cross-platform)
 - [x] Per-context security policies (DM vs group)
 - [x] Enhanced pairing code UI with countdown
@@ -1885,6 +1953,13 @@ Users must comply with their model provider's terms:
 - [x] Voice Mode with ElevenLabs and OpenAI integration
 - [x] Enterprise MCP Connectors (Salesforce, Jira, HubSpot, Zendesk, ServiceNow, Linear, Asana, Okta)
 - [x] Cloud Storage Integrations (Notion, Box, OneDrive, Google Drive, Dropbox, SharePoint)
+- [x] Visual Theme System (Light/Dark/System modes)
+- [x] Workspace recency ordering
+- [x] Web search retry with exponential backoff
+- [x] Google Workspace Integration (Gmail, Calendar, Drive with shared OAuth)
+- [x] Gateway channel cleanup and enhanced security (Matrix direct rooms, Slack groups)
+- [x] Agent transient error retry logic for improved reliability
+- [x] Smart parameter inference for document creation tools
 
 ### Planned
 

package/dist/electron/electron/agent/custom-skill-loader.js

@@ -359,7 +359,7 @@ class CustomSkillLoader {
      * Expand a skill's prompt template with parameter values
      */
     expandPrompt(skill, parameterValues) {
-        let prompt = skill.prompt;
+        let prompt = this.expandBaseDir(skill.prompt, skill);
         // Replace {{param}} placeholders with values
         if (skill.parameters) {
             for (const param of skill.parameters) {
@@ -372,6 +372,36 @@ class CustomSkillLoader {
         prompt = prompt.replace(/\{\{[^}]+\}\}/g, '');
         return prompt.trim();
     }
+    /**
+     * Expand {baseDir} placeholders to the resolved skill base directory.
+     */
+    expandBaseDir(prompt, skill) {
+        if (!prompt.includes('{baseDir}')) {
+            return prompt;
+        }
+        const baseDir = this.resolveBaseDir(skill);
+        return prompt.replace(/\{baseDir\}/g, baseDir);
+    }
+    resolveBaseDir(skill) {
+        const fileDir = skill.filePath ? path.dirname(skill.filePath) : this.bundledSkillsDir;
+        const candidates = [
+            fileDir,
+            this.bundledSkillsDir,
+            this.managedSkillsDir,
+            this.workspaceSkillsDir || '',
+        ].filter(Boolean);
+        for (const dir of candidates) {
+            try {
+                if (fs.existsSync(path.join(dir, 'scripts'))) {
+                    return dir;
+                }
+            }
+            catch {
+                // ignore and continue
+            }
+        }
+        return fileDir;
+    }
     /**
      * Get eligible skills (those that meet all requirements)
      */

package/dist/electron/electron/agent/daemon.js

@@ -40,6 +40,9 @@ const fs = __importStar(require("fs"));
 const crypto = __importStar(require("crypto"));
 const repositories_1 = require("../database/repositories");
 const ActivityRepository_1 = require("../activity/ActivityRepository");
+const AgentRoleRepository_1 = require("../agents/AgentRoleRepository");
+const MentionRepository_1 = require("../agents/MentionRepository");
+const agent_dispatch_1 = require("../agents/agent-dispatch");
 const types_1 = require("../../shared/types");
 const executor_1 = require("./executor");
 const queue_manager_1 = require("./queue-manager");
@@ -63,6 +66,10 @@ class AgentDaemon extends events_1.EventEmitter {
         this.pendingApprovals = new Map();
         // Activity throttle: Map<taskId:eventType, lastTimestamp>
         this.activityThrottle = new Map();
+        this.pendingRetries = new Map();
+        this.retryCounts = new Map();
+        this.maxTaskRetries = 2;
+        this.retryDelayMs = 30 * 1000;
         const db = dbManager.getDatabase();
         this.taskRepo = new repositories_1.TaskRepository(db);
         this.eventRepo = new repositories_1.TaskEventRepository(db);
@@ -70,6 +77,8 @@ class AgentDaemon extends events_1.EventEmitter {
         this.approvalRepo = new repositories_1.ApprovalRepository(db);
         this.artifactRepo = new repositories_1.ArtifactRepository(db);
         this.activityRepo = new ActivityRepository_1.ActivityRepository(db);
+        this.agentRoleRepo = new AgentRoleRepository_1.AgentRoleRepository(db);
+        this.mentionRepo = new MentionRepository_1.MentionRepository(db);
         // Initialize queue manager with callbacks
         this.queueManager = new queue_manager_1.TaskQueueManager({
             startTaskImmediate: (task) => this.startTaskImmediate(task),
@@ -173,6 +182,7 @@ class AgentDaemon extends events_1.EventEmitter {
                 error: error.message || 'Failed to initialize task executor',
                 completedAt: Date.now(),
             });
+            this.clearRetryState(task.id);
             this.logEvent(task.id, 'error', { error: error.message });
             // Notify queue manager so it can start next task
             this.queueManager.onTaskFinished(task.id);
@@ -195,6 +205,7 @@ class AgentDaemon extends events_1.EventEmitter {
                 error: error.message,
                 completedAt: Date.now(),
             });
+            this.clearRetryState(task.id);
             this.logEvent(task.id, 'error', { error: error.message });
             this.activeTasks.delete(task.id);
             // Notify queue manager so it can start next task
@@ -250,6 +261,123 @@ class AgentDaemon extends events_1.EventEmitter {
         await this.startTask(task);
         return task;
     }
+    buildPlanSummary(plan) {
+        if (!plan)
+            return undefined;
+        const lines = [];
+        if (plan.description) {
+            lines.push(`Plan: ${plan.description}`);
+        }
+        if (plan.steps && plan.steps.length > 0) {
+            lines.push('Steps:');
+            const stepLines = plan.steps
+                .slice(0, 7)
+                .map((step) => `- ${step.description}`);
+            lines.push(...stepLines);
+            if (plan.steps.length > 7) {
+                lines.push(`- …and ${plan.steps.length - 7} more steps`);
+            }
+        }
+        return lines.length > 0 ? lines.join('\n') : undefined;
+    }
+    emitActivityEvent(activity) {
+        const windows = electron_1.BrowserWindow.getAllWindows();
+        windows.forEach(window => {
+            try {
+                if (!window.isDestroyed() && window.webContents && !window.webContents.isDestroyed()) {
+                    window.webContents.send(types_1.IPC_CHANNELS.ACTIVITY_EVENT, { type: 'created', activity });
+                }
+            }
+            catch (error) {
+                console.error('[AgentDaemon] Error sending activity IPC:', error);
+            }
+        });
+    }
+    emitMentionEvent(mention) {
+        const windows = electron_1.BrowserWindow.getAllWindows();
+        windows.forEach(window => {
+            try {
+                if (!window.isDestroyed() && window.webContents && !window.webContents.isDestroyed()) {
+                    window.webContents.send(types_1.IPC_CHANNELS.MENTION_EVENT, { type: 'created', mention });
+                }
+            }
+            catch (error) {
+                console.error('[AgentDaemon] Error sending mention IPC:', error);
+            }
+        });
+    }
+    /**
+     * Dispatch mentioned agent roles after the main plan is created.
+     * This avoids starting sub-agents before the task is clearly defined.
+     */
+    async dispatchMentionedAgents(taskId, plan) {
+        const task = this.taskRepo.findById(taskId);
+        if (!task || task.parentTaskId)
+            return;
+        const mentionedRoleIds = (task.mentionedAgentRoleIds || []).filter(Boolean);
+        if (mentionedRoleIds.length === 0)
+            return;
+        const activeRoles = this.agentRoleRepo.findAll(false).filter(role => role.isActive);
+        const mentionedRoles = activeRoles.filter(role => mentionedRoleIds.includes(role.id));
+        if (mentionedRoles.length === 0)
+            return;
+        const existingChildren = this.taskRepo.findByParent(taskId);
+        const assignedRoleIds = new Set(existingChildren
+            .map(child => child.assignedAgentRoleId)
+            .filter((id) => typeof id === 'string' && id.length > 0));
+        const rolesToDispatch = mentionedRoles.filter(role => !assignedRoleIds.has(role.id));
+        if (rolesToDispatch.length === 0)
+            return;
+        const planSummary = this.buildPlanSummary(plan);
+        for (const role of rolesToDispatch) {
+            const childPrompt = (0, agent_dispatch_1.buildAgentDispatchPrompt)(role, { title: task.title, prompt: task.prompt }, planSummary ? { planSummary } : undefined);
+            const childTask = await this.createChildTask({
+                title: `@${role.displayName}: ${task.title}`,
+                prompt: childPrompt,
+                workspaceId: task.workspaceId,
+                parentTaskId: task.id,
+                agentType: 'sub',
+                agentConfig: {
+                    ...(role.modelKey ? { modelKey: role.modelKey } : {}),
+                    ...(role.personalityId ? { personalityId: role.personalityId } : {}),
+                    retainMemory: false,
+                },
+            });
+            this.taskRepo.update(childTask.id, {
+                assignedAgentRoleId: role.id,
+                boardColumn: 'todo',
+            });
+            const dispatchActivity = this.activityRepo.create({
+                workspaceId: task.workspaceId,
+                taskId: task.id,
+                agentRoleId: role.id,
+                actorType: 'system',
+                activityType: 'agent_assigned',
+                title: `Dispatched to ${role.displayName}`,
+                description: childTask.title,
+            });
+            this.emitActivityEvent(dispatchActivity);
+            const mention = this.mentionRepo.create({
+                workspaceId: task.workspaceId,
+                taskId: task.id,
+                toAgentRoleId: role.id,
+                mentionType: 'request',
+                context: `New task: ${task.title}`,
+            });
+            this.emitMentionEvent(mention);
+            const mentionActivity = this.activityRepo.create({
+                workspaceId: task.workspaceId,
+                taskId: task.id,
+                agentRoleId: role.id,
+                actorType: 'user',
+                activityType: 'mention',
+                title: `@${role.displayName} mentioned`,
+                description: mention.context,
+                metadata: { mentionId: mention.id, mentionType: mention.mentionType },
+            });
+            this.emitActivityEvent(mentionActivity);
+        }
+    }
     /**
      * Cancel a running or queued task
      */
@@ -257,6 +385,7 @@ class AgentDaemon extends events_1.EventEmitter {
         // Check if task is queued (not yet started)
         if (this.queueManager.cancelQueuedTask(taskId)) {
             this.taskRepo.update(taskId, { status: 'cancelled', completedAt: Date.now() });
+            this.clearRetryState(taskId);
             this.logEvent(taskId, 'task_cancelled', {
                 message: 'Task removed from queue',
             });
@@ -272,10 +401,54 @@ class AgentDaemon extends events_1.EventEmitter {
         // (handles orphaned tasks that are in runningTaskIds but have no executor)
         this.queueManager.onTaskFinished(taskId);
         // Always emit cancelled event so UI updates
+        this.clearRetryState(taskId);
         this.logEvent(taskId, 'task_cancelled', {
             message: 'Task was stopped by user',
         });
     }
+    /**
+     * Handle transient provider errors by scheduling a retry instead of failing.
+     * Returns true if a retry was scheduled, false if retries are exhausted.
+     */
+    handleTransientTaskFailure(taskId, reason, delayMs = this.retryDelayMs) {
+        const currentCount = this.retryCounts.get(taskId) ?? 0;
+        const nextCount = currentCount + 1;
+        if (nextCount > this.maxTaskRetries) {
+            return false;
+        }
+        this.retryCounts.set(taskId, nextCount);
+        if (this.pendingRetries.has(taskId)) {
+            return true;
+        }
+        // Mark as queued with a helpful message
+        this.taskRepo.update(taskId, {
+            status: 'queued',
+            error: `Transient provider error. Retry ${nextCount}/${this.maxTaskRetries} in ${Math.ceil(delayMs / 1000)}s.`,
+        });
+        this.logEvent(taskId, 'log', {
+            message: `Transient provider error detected. Scheduling retry ${nextCount}/${this.maxTaskRetries} in ${Math.ceil(delayMs / 1000)}s.`,
+            reason,
+        });
+        // Clear executor and free queue slot
+        this.activeTasks.delete(taskId);
+        this.queueManager.onTaskFinished(taskId);
+        const handle = setTimeout(async () => {
+            this.pendingRetries.delete(taskId);
+            const task = this.taskRepo.findById(taskId);
+            if (!task) {
+                this.retryCounts.delete(taskId);
+                return;
+            }
+            if (task.status !== 'queued')
+                return;
+            if (this.activeTasks.has(taskId) || this.queueManager.isRunning(taskId) || this.queueManager.isQueued(taskId)) {
+                return;
+            }
+            await this.startTask(task);
+        }, delayMs);
+        this.pendingRetries.set(taskId, handle);
+        return true;
+    }
     /**
      * Pause a running task
      */
@@ -677,19 +850,6 @@ class AgentDaemon extends events_1.EventEmitter {
                 return undefined;
         }
     }
-    emitActivityEvent(activity) {
-        const windows = electron_1.BrowserWindow.getAllWindows();
-        windows.forEach(window => {
-            try {
-                if (!window.isDestroyed() && window.webContents && !window.webContents.isDestroyed()) {
-                    window.webContents.send(types_1.IPC_CHANNELS.ACTIVITY_EVENT, { type: 'created', activity });
-                }
-            }
-            catch (error) {
-                console.error('[AgentDaemon] Error sending activity IPC:', error);
-            }
-        });
-    }
     /**
      * Register an artifact (file created during task execution)
      * This allows files like screenshots to be sent back to the user
@@ -753,6 +913,9 @@ class AgentDaemon extends events_1.EventEmitter {
      */
     updateTaskStatus(taskId, status) {
         this.taskRepo.update(taskId, { status });
+        if (status === 'completed' || status === 'failed' || status === 'cancelled') {
+            this.clearRetryState(taskId);
+        }
     }
     /**
      * Get task by ID
@@ -797,6 +960,14 @@ class AgentDaemon extends events_1.EventEmitter {
     updateTask(taskId, updates) {
         this.taskRepo.update(taskId, updates);
     }
+    clearRetryState(taskId) {
+        const pending = this.pendingRetries.get(taskId);
+        if (pending) {
+            clearTimeout(pending);
+            this.pendingRetries.delete(taskId);
+        }
+        this.retryCounts.delete(taskId);
+    }
     /**
      * Mark task as completed
      * Note: We keep the executor in memory for follow-up messages (with TTL-based cleanup)
@@ -806,6 +977,7 @@ class AgentDaemon extends events_1.EventEmitter {
             status: 'completed',
             completedAt: Date.now(),
         });
+        this.clearRetryState(taskId);
         // Mark executor as completed for TTL-based cleanup
         const cached = this.activeTasks.get(taskId);
         if (cached) {
@@ -925,6 +1097,7 @@ class AgentDaemon extends events_1.EventEmitter {
             status: 'failed',
             error: 'Task timed out - exceeded maximum allowed execution time',
         });
+        this.clearRetryState(taskId);
         // Emit timeout event
         this.logEvent(taskId, 'step_timeout', {
             message: 'Task exceeded maximum execution time and was automatically cancelled',