neoagent 2.4.1-beta.44 → 2.4.1-beta.46

package/flutter_app/lib/main_shared.dart

@@ -639,6 +639,53 @@ class _PageTitle extends StatelessWidget {
   }
 }
 
+IconData _runPhaseIcon(String phase) {
+  switch (phase.toLowerCase()) {
+    case 'thinking':
+      return Icons.psychology_outlined;
+    case 'analyzing':
+      return Icons.analytics_outlined;
+    case 'planning':
+      return Icons.list_alt_outlined;
+    case 'verifying':
+      return Icons.fact_check_outlined;
+    case 'streaming':
+    case 'responding':
+      return Icons.chat_outlined;
+    case 'awaiting approval':
+      return Icons.lock_clock_outlined;
+    case 'incorporating steering':
+      return Icons.tune_outlined;
+    case 'completed':
+      return Icons.check_circle_outline_rounded;
+    case 'stopped':
+    case 'stopping':
+      return Icons.stop_circle_outlined;
+    default:
+      return Icons.sync_outlined;
+  }
+}
+
+Color _runPhaseColor(String phase) {
+  switch (phase.toLowerCase()) {
+    case 'thinking':
+    case 'analyzing':
+    case 'planning':
+      return _info;
+    case 'verifying':
+      return _accentAlt;
+    case 'awaiting approval':
+      return _warning;
+    case 'completed':
+      return _success;
+    case 'stopped':
+    case 'stopping':
+      return _textSecondary;
+    default:
+      return _accent;
+  }
+}
+
 class _RunStatusPanel extends StatelessWidget {
   const _RunStatusPanel({required this.run, required this.tools});
 
@@ -650,6 +697,9 @@ class _RunStatusPanel extends StatelessWidget {
     final runningCount = tools.where((tool) => tool.status == 'running').length;
     final helperCount = tools.where((tool) => tool.isHelperRelated).length;
     final webCount = tools.where((tool) => tool.isWebRelated).length;
+    final phase = run?.phase ?? '';
+    final phaseColor = _runPhaseColor(phase);
+    final isDeepRun = (run?.iteration ?? 0) >= 8;
 
     return Card(
       child: Padding(
@@ -659,6 +709,30 @@ class _RunStatusPanel extends StatelessWidget {
           children: <Widget>[
             Row(
               children: <Widget>[
+                if (phase.isNotEmpty) ...<Widget>[
+                  _PulseHalo(
+                    color: phaseColor,
+                    animate: phase.toLowerCase() != 'completed' &&
+                        phase.toLowerCase() != 'stopped',
+                    child: Container(
+                      width: 30,
+                      height: 30,
+                      decoration: BoxDecoration(
+                        color: phaseColor.withValues(alpha: 0.14),
+                        shape: BoxShape.circle,
+                        border: Border.all(
+                          color: phaseColor.withValues(alpha: 0.28),
+                        ),
+                      ),
+                      child: Icon(
+                        _runPhaseIcon(phase),
+                        size: 16,
+                        color: phaseColor,
+                      ),
+                    ),
+                  ),
+                  const SizedBox(width: 12),
+                ],
                 Expanded(
                   child: Column(
                     crossAxisAlignment: CrossAxisAlignment.start,
@@ -670,7 +744,7 @@ class _RunStatusPanel extends StatelessWidget {
                           fontWeight: FontWeight.w700,
                         ),
                       ),
-                      const SizedBox(height: 6),
+                      const SizedBox(height: 4),
                       Text(
                         run == null
                             ? 'Waiting for run events...'
@@ -679,7 +753,12 @@ class _RunStatusPanel extends StatelessWidget {
                                 if (run!.pendingSteeringCount > 0)
                                   '${run!.pendingSteeringCount} steering ${run!.pendingSteeringCount == 1 ? 'update' : 'updates'} queued',
                               ].join(' · '),
-                        style: TextStyle(color: _textSecondary),
+                        style: TextStyle(
+                          color: phase.isNotEmpty
+                              ? phaseColor.withValues(alpha: 0.8)
+                              : _textSecondary,
+                          fontSize: 12.5,
+                        ),
                       ),
                     ],
                   ),
@@ -714,6 +793,12 @@ class _RunStatusPanel extends StatelessWidget {
                       label: '$helperCount helpers',
                       icon: Icons.account_tree_outlined,
                     ),
+                  if (isDeepRun)
+                    _MetaPill(
+                      label: 'deep run · step ${run!.iteration}',
+                      icon: Icons.warning_amber_outlined,
+                      color: _warning,
+                    ),
                 ],
               ),
               const SizedBox(height: 14),
@@ -1479,10 +1564,15 @@ class _EmptyState extends StatelessWidget {
 }
 
 class _ChatBubble extends StatelessWidget {
-  const _ChatBubble({required this.entry, this.onLoadRunDetail});
+  const _ChatBubble({
+    required this.entry,
+    this.onLoadRunDetail,
+    this.onSendMessage,
+  });
 
   final ChatEntry entry;
   final Future<RunDetailSnapshot> Function(String runId)? onLoadRunDetail;
+  final void Function(String)? onSendMessage;
 
   @override
   Widget build(BuildContext context) {
@@ -1604,6 +1694,15 @@ class _ChatBubble extends StatelessWidget {
                         onLoadRunDetail: onLoadRunDetail,
                       ),
                     ],
+                    if (!isUser &&
+                        entry.richPayload != null &&
+                        onSendMessage != null) ...<Widget>[
+                      const SizedBox(height: 12),
+                      _QuickReplyBar(
+                        payload: entry.richPayload!,
+                        onSelected: onSendMessage!,
+                      ),
+                    ],
                     const SizedBox(height: 10),
                     Text(
                       entry.createdAtLabel,
@@ -3757,6 +3856,42 @@ String _summarizeToolResult(dynamic raw) {
   return text.length > 140 ? '${text.substring(0, 140)}…' : text;
 }
 
+class _QuickReplyBar extends StatelessWidget {
+  const _QuickReplyBar({required this.payload, required this.onSelected});
+
+  final ChatRichPayload payload;
+  final void Function(String value) onSelected;
+
+  @override
+  Widget build(BuildContext context) {
+    return Wrap(
+      spacing: 8,
+      runSpacing: 8,
+      children: payload.options.map((option) {
+        return GestureDetector(
+          onTap: () => onSelected(option.value),
+          child: Container(
+            padding: const EdgeInsets.symmetric(horizontal: 14, vertical: 8),
+            decoration: BoxDecoration(
+              color: _accentMuted,
+              borderRadius: BorderRadius.circular(999),
+              border: Border.all(color: _accent.withValues(alpha: 0.4)),
+            ),
+            child: Text(
+              option.label,
+              style: TextStyle(
+                fontSize: 13,
+                color: _accent,
+                fontWeight: FontWeight.w600,
+              ),
+            ),
+          ),
+        );
+      }).toList(growable: false),
+    );
+  }
+}
+
 String _titleCase(String value) {
   final normalized = value.trim();
   if (normalized.isEmpty) {

package/flutter_app/lib/main_unified.dart

@@ -2,7 +2,7 @@ part of 'main.dart';
 
 enum _ToolsPageTab { integrations, mcp, skills }
 
-enum _RunsPageTab { runs, logs }
+enum _RunsPageTab { runs }
 
 enum _SettingsWorkspaceSection { app, account, security }
 
@@ -126,76 +126,7 @@ class RunsAndLogsPanel extends StatefulWidget {
   State<RunsAndLogsPanel> createState() => _RunsAndLogsPanelState();
 }
 
-class _RunsAndLogsPanelState extends State<RunsAndLogsPanel>
-    with SingleTickerProviderStateMixin {
-  late final TabController _tabController;
-  bool _syncingFromController = false;
-
-  @override
-  void initState() {
-    super.initState();
-    _tabController = TabController(
-      length: _RunsPageTab.values.length,
-      vsync: this,
-      initialIndex: _tabForSection(widget.controller.selectedSection).index,
-    )..addListener(_handleTabChanged);
-  }
-
-  @override
-  void didUpdateWidget(covariant RunsAndLogsPanel oldWidget) {
-    super.didUpdateWidget(oldWidget);
-    final selectedSection = widget.controller.selectedSection;
-    if (selectedSection != oldWidget.controller.selectedSection &&
-        (selectedSection == AppSection.runs ||
-            selectedSection == AppSection.logs)) {
-      final targetIndex = _tabForSection(selectedSection).index;
-      if (_tabController.index != targetIndex) {
-        _syncingFromController = true;
-        _tabController.index = targetIndex;
-        _syncingFromController = false;
-      }
-    }
-  }
-
-  @override
-  void dispose() {
-    _tabController.removeListener(_handleTabChanged);
-    _tabController.dispose();
-    super.dispose();
-  }
-
-  void _handleTabChanged() {
-    if (_syncingFromController || _tabController.indexIsChanging) {
-      return;
-    }
-    _selectSectionForTabIndex(_tabController.index);
-  }
-
-  void _selectSectionForTabIndex(int index) {
-    final section = _sectionForTab(_RunsPageTab.values[index]);
-    if (widget.controller.selectedSection != section) {
-      widget.controller.setSelectedSection(section);
-    }
-  }
-
-  _RunsPageTab _tabForSection(AppSection section) {
-    switch (section) {
-      case AppSection.logs:
-        return _RunsPageTab.logs;
-      default:
-        return _RunsPageTab.runs;
-    }
-  }
-
-  AppSection _sectionForTab(_RunsPageTab tab) {
-    switch (tab) {
-      case _RunsPageTab.logs:
-        return AppSection.logs;
-      case _RunsPageTab.runs:
-        return AppSection.runs;
-    }
-  }
-
+class _RunsAndLogsPanelState extends State<RunsAndLogsPanel> {
   @override
   Widget build(BuildContext context) {
     final controller = widget.controller;
@@ -204,38 +135,12 @@ class _RunsAndLogsPanelState extends State<RunsAndLogsPanel>
       child: Column(
         children: <Widget>[
           const _PageTitle(
-            title: 'Runs & Logs',
-            subtitle:
-                'Inspect execution history, failures, tool traces, and diagnostics from one workspace.',
-          ),
-          const SizedBox(height: 12),
-          Container(
-            decoration: BoxDecoration(
-              color: _bgSecondary,
-              borderRadius: BorderRadius.circular(14),
-              border: Border.all(color: _border),
-            ),
-            child: TabBar(
-              controller: _tabController,
-              dividerColor: _border,
-              indicatorSize: TabBarIndicatorSize.tab,
-              labelStyle: const TextStyle(fontWeight: FontWeight.w700),
-              onTap: _selectSectionForTabIndex,
-              tabs: <Widget>[
-                Tab(text: 'Runs (${controller.recentRuns.length})'),
-                Tab(text: 'Logs (${controller.logs.length})'),
-              ],
-            ),
+            title: 'Runs',
+            subtitle: 'Inspect execution history, failures, and tool traces.',
           ),
           const SizedBox(height: 12),
           Expanded(
-            child: TabBarView(
-              controller: _tabController,
-              children: <Widget>[
-                RunsPanel(controller: controller, embedded: true),
-                LogsPanel(controller: controller, embedded: true),
-              ],
-            ),
+            child: RunsPanel(controller: controller, embedded: true),
           ),
         ],
       ),

package/lib/manager.js

@@ -222,6 +222,14 @@ function removeEnvValue(key) {
   return true;
 }
 
+function readAdminCredentials() {
+  const env = Object.fromEntries(parseEnv(readEnvFileRaw()).entries());
+  return {
+    username: env.ADMIN_USERNAME || 'admin',
+    password: env.ADMIN_PASSWORD || '(not set — run `neoagent setup`)',
+  };
+}
+
 function maskEnvValue(key, value) {
   if (!/(KEY|TOKEN|SECRET|PASSWORD)/i.test(key)) return value;
   const text = String(value || '');
@@ -768,6 +776,11 @@ async function cmdSetup() {
     origins ? `ALLOWED_ORIGINS=${origins}` : ''
   ].filter(Boolean);
 
+  const adminUsername = current.ADMIN_USERNAME || 'admin';
+  const adminPassword = current.ADMIN_PASSWORD || crypto.randomBytes(16).toString('hex');
+  lines.push(`ADMIN_USERNAME=${adminUsername}`);
+  lines.push(`ADMIN_PASSWORD=${adminPassword}`);
+
   fs.writeFileSync(ENV_FILE, `${lines.join('\n')}\n`, { mode: 0o600 });
   logOk(`Wrote ${ENV_FILE}`);
 }
@@ -1590,6 +1603,12 @@ async function cmdInstall() {
   printInstallActionItems();
   heading('Ready');
   logInfo(`Open http://localhost:${port} or run \`neoagent status\` for a health check.`);
+  const adminCreds = readAdminCredentials();
+  heading('Admin Dashboard');
+  logOk(`URL:      http://localhost:${port}/admin`);
+  logInfo(`Username: ${adminCreds.username}`);
+  logInfo(`Password: ${adminCreds.password}`);
+  logWarn('Save these credentials — stored in .env and shown again with `neoagent admin`');
 }
 
 function cmdStart() {
@@ -1965,6 +1984,10 @@ function printHelp() {
   row('login grok-oauth',    'Authenticate Grok (xAI OAuth)');
   console.log('');
 
+  cliSection('Admin');
+  row('admin',               'Show admin dashboard URL and credentials');
+  console.log('');
+
   cliSection('Maintenance');
   row('migrate',             'Migrate from another agent installation');
   row('migrate dry-run',     'Preview what would be migrated');
@@ -2021,6 +2044,15 @@ async function runCLI(argv) {
     case 'login':
       await cmdLogin(argv.slice(1));
       break;
+    case 'admin': {
+      cliBanner('Admin Dashboard', 'credentials');
+      const adminCreds = readAdminCredentials();
+      const port = loadEnvPort();
+      logOk(`URL:      http://localhost:${port}/admin`);
+      logInfo(`Username: ${adminCreds.username}`);
+      logInfo(`Password: ${adminCreds.password}`);
+      break;
+    }
     case 'version':
     case '--version':
     case '-V':

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "neoagent",
-  "version": "2.4.1-beta.44",
+  "version": "2.4.1-beta.46",
   "description": "Proactive personal AI agent with no limits",
   "license": "AGPL-3.0-only",
   "main": "server/index.js",

package/runtime/paths.js

@@ -246,5 +246,7 @@ module.exports = {
   ensureRuntimeDirs,
   ensureSecureRuntimeEnv,
   getDefaultVmBaseImageUrl,
-  migrateLegacyRuntime
+  migrateLegacyRuntime,
+  upsertEnvValue,
+  readEnvFileRaw,
 };

package/server/admin/access.js

@@ -0,0 +1,198 @@
+'use strict';
+
+// ── Access Settings ────────────────────────────────────────────────────────
+
+let _revealedKey = null; // holds the API key shown after rotation (one-time)
+let _revealTimer  = null;
+
+async function loadAccess() {
+  const el = document.getElementById('access-content');
+  if (!el) return;
+  try {
+    const data = await api('/admin/api/settings').then((r) => r.json());
+    renderAccess(el, data);
+  } catch (err) {
+    if (err.message !== 'unauthorized') el.innerHTML = '<div class="empty">Failed to load settings</div>';
+  }
+}
+
+function renderAccess(el, { signupEnabled, apiKeyConfigured, apiKeyHint }) {
+  el.innerHTML = `
+    <!-- Signup -->
+    <div class="card">
+      <div class="card-title">User Signups</div>
+      <div class="access-row">
+        <div>
+          <div class="access-label">Allow new registrations</div>
+          <div class="access-desc">
+            When disabled, only existing users can log in. The first account can always be created regardless of this setting.
+          </div>
+        </div>
+        <label class="toggle" aria-label="Toggle signups">
+          <input type="checkbox" id="signup-toggle" ${signupEnabled ? 'checked' : ''}
+            onchange="setSignup(this.checked)">
+          <span class="toggle-track"></span>
+          <span class="toggle-thumb"></span>
+        </label>
+      </div>
+      <div id="signup-status" class="access-status"></div>
+    </div>
+
+    <!-- API key -->
+    <div class="card">
+      <div class="card-title">Admin API Key</div>
+      <div class="access-row">
+        <div>
+          <div class="access-label">Programmatic access</div>
+          <div class="access-desc">
+            Use <code>Authorization: Bearer &lt;key&gt;</code> to authenticate against any <code>/admin/api/*</code> endpoint from scripts or automation — without a browser session.
+          </div>
+        </div>
+        <span class="badge ${apiKeyConfigured ? 'badge-ok' : 'badge-idle'}">
+          ${apiKeyConfigured ? 'configured' : 'not set'}
+        </span>
+      </div>
+
+      ${apiKeyConfigured ? `
+        <div class="access-hint-row">
+          <code class="api-key-hint">${esc(apiKeyHint)}</code>
+          <span style="font-size:11px;color:var(--text-muted);">stored in .env — rotate to reveal</span>
+        </div>` : ''}
+
+      <div id="key-reveal-wrap" style="display:none;">
+        <div class="key-reveal-box">
+          <div style="font-size:11px;color:var(--text-muted);margin-bottom:6px;">
+            New API key — copy it now. It will not be shown again.
+          </div>
+          <div style="display:flex;align-items:center;gap:8px;">
+            <code id="key-reveal-value" class="api-key-full"></code>
+            <button class="btn btn-ghost" style="padding:5px 10px;font-size:11px;flex-shrink:0;"
+              onclick="copyApiKey()">Copy</button>
+          </div>
+          <div style="margin-top:8px;font-size:11px;color:var(--text-muted);" id="key-reveal-timer"></div>
+        </div>
+      </div>
+
+      <div class="access-actions">
+        <button class="btn btn-ghost" onclick="rotateApiKey(this)">
+          ${apiKeyConfigured ? 'Rotate key' : 'Generate key'}
+        </button>
+        ${apiKeyConfigured ? `
+          <button class="btn btn-danger" onclick="revokeApiKey(this)">Revoke key</button>` : ''}
+      </div>
+      <div id="apikey-status" class="access-status"></div>
+    </div>`;
+
+  // If we rotated in this page load, re-show the key
+  if (_revealedKey) showReveal(_revealedKey);
+}
+
+async function setSignup(enabled) {
+  const statusEl = document.getElementById('signup-status');
+  if (statusEl) statusEl.textContent = '';
+  try {
+    const res = await api('/admin/api/settings/signup', {
+      method: 'PUT',
+      headers: { 'Content-Type': 'application/json' },
+      body: JSON.stringify({ enabled }),
+    });
+    if (res.ok) {
+      showStatus('signup-status', enabled ? 'Signups enabled.' : 'Signups disabled.', false);
+    } else {
+      const b = await res.json().catch(() => ({}));
+      showStatus('signup-status', b.error || 'Failed to update', true);
+      // Revert the toggle
+      const toggle = document.getElementById('signup-toggle');
+      if (toggle) toggle.checked = !enabled;
+    }
+  } catch (err) {
+    if (err.message !== 'unauthorized') showStatus('signup-status', 'Network error', true);
+    const toggle = document.getElementById('signup-toggle');
+    if (toggle) toggle.checked = !enabled;
+  }
+}
+
+async function rotateApiKey(btn) {
+  if (!confirm(
+    'Rotate admin API key?\n\n' +
+    'The current key will stop working immediately.\n' +
+    'Any scripts using it must be updated.\n\n' +
+    'The new key will be shown once — copy it before leaving.'
+  )) return;
+  btn.disabled = true;
+  btn.textContent = 'Rotating…';
+  try {
+    const res = await api('/admin/api/settings/apikey/rotate', { method: 'POST' });
+    const data = await res.json();
+    if (res.ok && data.apiKey) {
+      _revealedKey = data.apiKey;
+      await loadAccess(); // re-render to show badge + hint
+    } else {
+      showStatus('apikey-status', data.error || 'Failed to rotate', true);
+      btn.disabled = false;
+      btn.textContent = 'Rotate key';
+    }
+  } catch (err) {
+    if (err.message !== 'unauthorized') showStatus('apikey-status', 'Network error', true);
+    btn.disabled = false;
+    btn.textContent = 'Rotate key';
+  }
+}
+
+async function revokeApiKey(btn) {
+  if (!confirm('Revoke admin API key?\n\nAll programmatic access using this key will stop immediately.')) return;
+  btn.disabled = true;
+  btn.textContent = 'Revoking…';
+  _revealedKey = null;
+  try {
+    const res = await api('/admin/api/settings/apikey', { method: 'DELETE' });
+    if (res.ok) {
+      await loadAccess();
+    } else {
+      const b = await res.json().catch(() => ({}));
+      showStatus('apikey-status', b.error || 'Failed', true);
+      btn.disabled = false;
+      btn.textContent = 'Revoke key';
+    }
+  } catch (err) {
+    if (err.message !== 'unauthorized') showStatus('apikey-status', 'Network error', true);
+    btn.disabled = false;
+    btn.textContent = 'Revoke key';
+  }
+}
+
+function copyApiKey() {
+  if (_revealedKey) navigator.clipboard.writeText(_revealedKey).catch(() => {});
+}
+
+function showReveal(key) {
+  const wrap  = document.getElementById('key-reveal-wrap');
+  const value = document.getElementById('key-reveal-value');
+  if (!wrap || !value) return;
+  value.textContent = key;
+  wrap.style.display = 'block';
+  // Auto-clear after 120 seconds
+  clearTimeout(_revealTimer);
+  let secs = 120;
+  const timerEl = document.getElementById('key-reveal-timer');
+  const tick = () => {
+    if (!timerEl) return;
+    if (secs <= 0) {
+      wrap.style.display = 'none';
+      _revealedKey = null;
+      return;
+    }
+    timerEl.textContent = `Hides in ${secs}s`;
+    secs--;
+    _revealTimer = setTimeout(tick, 1000);
+  };
+  tick();
+}
+
+function showStatus(id, msg, isError) {
+  const el = document.getElementById(id);
+  if (!el) return;
+  el.textContent = msg;
+  el.style.color = isError ? 'var(--danger)' : 'var(--success)';
+  setTimeout(() => { if (el) el.textContent = ''; }, 4000);
+}