neoagent 3.0.0 → 3.0.1-beta.0

package/flutter_app/lib/main_controller.dart

@@ -367,6 +367,15 @@ class NeoAgentController extends ChangeNotifier {
     notifyListeners();
   }
 
+  void clearPendingApprovalForRun(String runId) {
+    if (pendingApproval?.runId != runId) return;
+    _SecurityNotificationService.cancelApprovalNotification(
+      pendingApproval?.approvalId ?? '',
+    );
+    pendingApproval = null;
+    notifyListeners();
+  }
+
   bool get desktopFloatingToolbarPopupRequested =>
       _desktopFloatingToolbarPopupRequested;
 
@@ -7349,6 +7358,7 @@ class NeoAgentController extends ChangeNotifier {
     socket.on('run:stopped', (dynamic data) {
       final payload = _jsonMap(data);
       final runId = payload['runId']?.toString() ?? '';
+      clearPendingApprovalForRun(runId);
       if (_voiceRunIds.remove(runId)) {
         return;
       }
@@ -7369,6 +7379,30 @@ class NeoAgentController extends ChangeNotifier {
       unawaited(refreshRunsOnly());
       notifyListeners();
     });
+    socket.on('run:interrupted', (dynamic data) {
+      final payload = _jsonMap(data);
+      final runId = payload['runId']?.toString() ?? '';
+      clearPendingApprovalForRun(runId);
+      if (_voiceRunIds.remove(runId)) {
+        return;
+      }
+      if (_backgroundRunIds.remove(runId)) {
+        unawaited(refreshRunsOnly());
+        unawaited(refreshMemory());
+        notifyListeners();
+        return;
+      }
+      streamingAssistant = '';
+      isSendingMessage = false;
+      if (activeRun?.runId == runId) {
+        activeRun = activeRun!.copyWith(
+          phase: 'Interrupted',
+          pendingSteeringCount: 0,
+        );
+      }
+      unawaited(refreshRunsOnly());
+      notifyListeners();
+    });
     socket.on('run:error', (dynamic data) {
       final payload = _jsonMap(data);
       final runId = payload['runId']?.toString();

package/flutter_app/lib/main_security.dart

@@ -103,6 +103,13 @@ const _kCategoryInfo = <String, _CategoryInfo>{
     color: Color(0xFFFB8C00),
     riskLevel: 'medium',
   ),
+  'external': _CategoryInfo(
+    label: 'External & MCP Tools',
+    subtitle: 'Tools not built into NeoAgent, including connected MCP servers and custom tool providers.',
+    icon: Icons.hub_rounded,
+    color: Color(0xFF6D4C41),
+    riskLevel: 'high',
+  ),
 };
 
 _CategoryInfo _categoryInfo(String category) {
@@ -732,6 +739,18 @@ class _ToolApprovalSheetState extends State<ToolApprovalSheet>
         toolArgs: widget.request.toolArgs,
       );
       widget.controller.clearPendingApproval();
+    } on BackendException catch (error) {
+      if (error.statusCode == 410) {
+        widget.controller.clearPendingApproval();
+        if (mounted) {
+          ScaffoldMessenger.of(context).showSnackBar(
+            SnackBar(
+              content: Text(error.message),
+              backgroundColor: _warning,
+            ),
+          );
+        }
+      }
     } catch (_) {
       // timeout will fire server-side; safe to dismiss
     }

package/lib/schema_migrations.js

@@ -191,6 +191,187 @@ function migrateMemoryEmbeddingMetadata(db) {
   }
 }
 
+function migrateMemoryExactHashUniqueness(db) {
+  const columns = new Set(
+    db.prepare('PRAGMA table_info(memories)').all().map((column) => column.name),
+  );
+  if (!columns.has('memory_hash')) return;
+
+  const groups = db.prepare(
+    `SELECT
+       user_id,
+       COALESCE(agent_id, '') AS agent_key,
+       memory_hash,
+       COALESCE(scope_type, 'agent') AS scope_type_key,
+       COALESCE(scope_id, '') AS scope_id_key,
+       COUNT(*) AS duplicate_count
+     FROM memories
+     WHERE archived = 0
+       AND memory_hash IS NOT NULL
+       AND trim(memory_hash) <> ''
+     GROUP BY
+       user_id,
+       COALESCE(agent_id, ''),
+       memory_hash,
+       COALESCE(scope_type, 'agent'),
+       COALESCE(scope_id, '')
+     HAVING COUNT(*) > 1`
+  ).all();
+
+  const selectGroupRows = db.prepare(
+    `SELECT id, importance, confidence, access_count
+     FROM memories
+     WHERE user_id = ?
+       AND COALESCE(agent_id, '') = ?
+       AND memory_hash = ?
+       AND COALESCE(scope_type, 'agent') = ?
+       AND COALESCE(scope_id, '') = ?
+       AND archived = 0
+     ORDER BY updated_at DESC, created_at DESC, id DESC`
+  );
+
+  const archiveDuplicates = db.transaction(() => {
+    for (const group of groups) {
+      const rows = selectGroupRows.all(
+        group.user_id,
+        group.agent_key,
+        group.memory_hash,
+        group.scope_type_key,
+        group.scope_id_key,
+      );
+      if (rows.length < 2) continue;
+
+      const winner = rows[0];
+      const mergedImportance = Math.max(...rows.map((row) => Number(row.importance || 0)));
+      const mergedConfidence = Math.max(...rows.map((row) => Number(row.confidence || 0)));
+      const mergedAccessCount = rows.reduce(
+        (sum, row) => sum + Math.max(0, Number(row.access_count || 0)),
+        0,
+      );
+
+      db.prepare(
+        `UPDATE memories
+         SET importance = MAX(importance, ?),
+             confidence = MAX(confidence, ?),
+             access_count = ?,
+             updated_at = datetime('now')
+         WHERE id = ?`
+      ).run(
+        mergedImportance,
+        Math.min(1, mergedConfidence),
+        mergedAccessCount,
+        winner.id,
+      );
+
+      const duplicateIds = rows.slice(1).map((row) => row.id);
+      if (!duplicateIds.length) continue;
+      const placeholders = duplicateIds.map(() => '?').join(', ');
+      db.prepare(
+        `UPDATE memories
+         SET archived = 1,
+             updated_at = datetime('now')
+         WHERE id IN (${placeholders})`
+      ).run(...duplicateIds);
+    }
+  });
+  archiveDuplicates();
+
+  db.exec(`
+    CREATE UNIQUE INDEX IF NOT EXISTS idx_memories_hash_unique
+      ON memories(
+        user_id,
+        COALESCE(agent_id, ''),
+        memory_hash,
+        COALESCE(scope_type, 'agent'),
+        COALESCE(scope_id, '')
+      )
+      WHERE archived = 0 AND memory_hash IS NOT NULL
+  `);
+}
+
+function migrateSkillOwnership(db) {
+  const tableInfo = db.prepare("PRAGMA table_info(skills)").all();
+  if (!tableInfo.length) return;
+
+  const skillsSql = db.prepare(
+    "SELECT sql FROM sqlite_master WHERE type='table' AND name='skills'",
+  ).get()?.sql || '';
+  const hasUserIdColumn = tableInfo.some((column) => column.name === 'user_id');
+  const hasLegacyNameUniqueConstraint = /\bname\s+TEXT\s+UNIQUE\b/i.test(skillsSql);
+
+  if (!hasUserIdColumn || hasLegacyNameUniqueConstraint) {
+    db.exec(`
+      DROP TABLE IF EXISTS skills_v2;
+      CREATE TABLE IF NOT EXISTS skills_v2 (
+        id INTEGER PRIMARY KEY AUTOINCREMENT,
+        user_id INTEGER NOT NULL DEFAULT 0,
+        name TEXT NOT NULL,
+        description TEXT,
+        file_path TEXT NOT NULL,
+        metadata TEXT DEFAULT '{}',
+        enabled INTEGER DEFAULT 1,
+        auto_created INTEGER DEFAULT 0,
+        created_at TEXT DEFAULT (datetime('now')),
+        updated_at TEXT DEFAULT (datetime('now'))
+      );
+    `);
+
+    if (hasUserIdColumn) {
+      db.exec(`
+        INSERT INTO skills_v2 (
+          id, user_id, name, description, file_path, metadata,
+          enabled, auto_created, created_at, updated_at
+        )
+        SELECT
+          id,
+          COALESCE(user_id, 0),
+          name,
+          description,
+          file_path,
+          COALESCE(metadata, '{}'),
+          COALESCE(enabled, 1),
+          COALESCE(auto_created, 0),
+          created_at,
+          updated_at
+        FROM skills
+      `);
+    } else {
+      db.exec(`
+        INSERT INTO skills_v2 (
+          id, user_id, name, description, file_path, metadata,
+          enabled, auto_created, created_at, updated_at
+        )
+        SELECT
+          id,
+          0,
+          name,
+          description,
+          file_path,
+          COALESCE(metadata, '{}'),
+          COALESCE(enabled, 1),
+          COALESCE(auto_created, 0),
+          created_at,
+          updated_at
+        FROM skills
+      `);
+    }
+
+    db.exec(`
+      DROP TABLE skills;
+      ALTER TABLE skills_v2 RENAME TO skills;
+    `);
+  } else {
+    db.exec('UPDATE skills SET user_id = 0 WHERE user_id IS NULL');
+  }
+
+  db.exec(`
+    CREATE UNIQUE INDEX IF NOT EXISTS idx_skills_user_name
+      ON skills(user_id, name);
+    CREATE INDEX IF NOT EXISTS idx_skills_user_enabled
+      ON skills(user_id, enabled, name);
+  `);
+}
+
 function migrateToolPermissions(db) {
   db.exec(`
     CREATE TABLE IF NOT EXISTS tool_policies (
@@ -217,6 +398,43 @@ function migrateToolPermissions(db) {
   `);
 }
 
+function migrateApprovalPersistence(db) {
+  db.exec(`
+    CREATE TABLE IF NOT EXISTS pending_approvals (
+      id             TEXT PRIMARY KEY,
+      user_id        INTEGER NOT NULL REFERENCES users(id) ON DELETE CASCADE,
+      run_id         TEXT REFERENCES agent_runs(id) ON DELETE CASCADE,
+      tool_name      TEXT NOT NULL,
+      tool_args_json TEXT,
+      category       TEXT,
+      status         TEXT NOT NULL CHECK(status IN ('pending','approved','denied','timeout','expired')),
+      scope          TEXT CHECK(scope IN ('once','session','always')),
+      expires_at     TEXT NOT NULL,
+      decided_at     TEXT,
+      created_at     TEXT DEFAULT (datetime('now')),
+      updated_at     TEXT DEFAULT (datetime('now'))
+    );
+
+    CREATE INDEX IF NOT EXISTS idx_pending_approvals_user
+      ON pending_approvals(user_id, status, created_at DESC);
+    CREATE INDEX IF NOT EXISTS idx_pending_approvals_run
+      ON pending_approvals(run_id, status, expires_at);
+
+    CREATE TABLE IF NOT EXISTS approval_session_grants (
+      user_id    INTEGER NOT NULL REFERENCES users(id) ON DELETE CASCADE,
+      run_id     TEXT NOT NULL,
+      tool_name  TEXT NOT NULL,
+      expires_at TEXT NOT NULL,
+      created_at TEXT DEFAULT (datetime('now')),
+      updated_at TEXT DEFAULT (datetime('now')),
+      PRIMARY KEY (user_id, run_id, tool_name)
+    );
+
+    CREATE INDEX IF NOT EXISTS idx_approval_session_grants_expiry
+      ON approval_session_grants(expires_at);
+  `);
+}
+
 function migrateToolPoliciesAllowAlways(db) {
   // SQLite doesn't support ALTER COLUMN — recreate the table to add 'allow_always'
   // to the CHECK constraint on existing installations.
@@ -246,7 +464,10 @@ function runSchemaMigrations(db) {
   migrateMemoryRelations(db);
   migrateMemoryRetrievalEvents(db);
   migrateMemoryEmbeddingMetadata(db);
+  migrateMemoryExactHashUniqueness(db);
+  migrateSkillOwnership(db);
   migrateToolPermissions(db);
+  migrateApprovalPersistence(db);
   migrateToolPoliciesAllowAlways(db);
 }
 
@@ -256,7 +477,10 @@ module.exports = {
   migrateMemoryRelations,
   migrateMemoryRetrievalEvents,
   migrateMemoryEmbeddingMetadata,
+  migrateMemoryExactHashUniqueness,
+  migrateSkillOwnership,
   migrateToolPermissions,
+  migrateApprovalPersistence,
   migrateToolPoliciesAllowAlways,
   runSchemaMigrations,
 };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "neoagent",
-  "version": "3.0.0",
+  "version": "3.0.1-beta.0",
   "description": "Self-hosted AI agent for long-running tasks, automation, messaging, device control, and local memory",
   "license": "AGPL-3.0-only",
   "main": "server/index.js",

package/server/admin/admin.css

@@ -36,6 +36,35 @@
 
   --font-sans:     'Geist', 'Inter', -apple-system, BlinkMacSystemFont, 'Segoe UI', sans-serif;
   --font-mono:     'Geist Mono', 'JetBrains Mono', 'Fira Code', 'Menlo', monospace;
+
+  --row-hover:     rgba(224, 240, 224, 0.04);
+}
+
+/* ── Light theme override ───────────────────────────────────────────────── */
+[data-theme="light"] {
+  --bg:            #f3f6f1;
+  --bg-sidebar:    #ffffff;
+  --bg-card:       #ffffff;
+  --bg-secondary:  #eaeee6;
+  --bg-input:      #ffffff;
+  --border:        rgba(20, 40, 24, 0.12);
+  --border-light:  rgba(20, 40, 24, 0.20);
+
+  --accent:        #b8861f;
+  --accent-hover:  #9a6f14;
+  --accent-alt:    #3f8a47;
+  --accent-muted:  rgba(184, 134, 31, 0.14);
+
+  --text:          #1a211b;
+  --text-secondary:#4a544a;
+  --text-muted:    #717b6f;
+
+  --success:       #2f8a3c;
+  --warning:       #b07a18;
+  --danger:        #c0492f;
+  --info:          #2f7d72;
+
+  --row-hover:     rgba(20, 40, 24, 0.05);
 }
 
 /* ── Base ────────────────────────────────────────────────────────────────── */

package/server/admin/admin.js

@@ -16,10 +16,31 @@ function showPage(page, btn) {
   if (btn) btn.classList.add('active');
   currentPage = page;
 
-  const loaders = { overview: loadHealth, logs: loadLogs, updates: loadVersion, config: loadConfig, providers: loadProviders, models: loadModels, analytics: loadAnalytics, users: loadUsers, sql: loadSql, access: loadAccess };
+  const loaders = { overview: loadHealth, logs: loadLogs, issues: loadIssues, updates: loadVersion, config: loadConfig, providers: loadProviders, models: loadModels, analytics: loadAnalytics, users: loadUsers, sql: loadSql, access: loadAccess };
   loaders[page]?.();
 }
 
+// ── Theme ──────────────────────────────────────────────────────────────────
+
+function applyTheme(theme) {
+  const isLight = theme === 'light';
+  document.documentElement.setAttribute('data-theme', isLight ? 'light' : 'dark');
+  const label = document.getElementById('theme-toggle-label');
+  if (label) label.textContent = isLight ? 'Dark mode' : 'Light mode';
+}
+
+function toggleTheme() {
+  const next = document.documentElement.getAttribute('data-theme') === 'light' ? 'dark' : 'light';
+  try { localStorage.setItem('admin-theme', next); } catch {}
+  applyTheme(next);
+}
+
+function initTheme() {
+  let stored = 'dark';
+  try { stored = localStorage.getItem('admin-theme') || 'dark'; } catch {}
+  applyTheme(stored);
+}
+
 async function signOut() {
   await fetch('/admin/api/logout', { method: 'POST' }).catch(() => {});
   window.location.replace('/admin/login');
@@ -130,6 +151,62 @@ function copyLogs() {
   navigator.clipboard.writeText(text).catch(() => {});
 }
 
+// ── Issues ─────────────────────────────────────────────────────────────────
+
+// Distil the raw log stream down to critical, actionable issues: error-level
+// entries grouped by message so a repeated failure shows up once with a count.
+function groupIssues(logs) {
+  const groups = new Map();
+  for (const entry of logs) {
+    if ((entry.type || 'log') !== 'error') continue;
+    const message = String(entry.message || '').trim();
+    if (!message) continue;
+    const existing = groups.get(message);
+    if (existing) {
+      existing.count += 1;
+      if (entry.timestamp && entry.timestamp > existing.last) existing.last = entry.timestamp;
+    } else {
+      groups.set(message, { message, count: 1, last: entry.timestamp || '' });
+    }
+  }
+  return Array.from(groups.values()).sort((a, b) => String(b.last).localeCompare(String(a.last)));
+}
+
+function renderIssues(issues) {
+  const table = document.getElementById('issue-table');
+  const count = document.getElementById('issue-count');
+  const badge = document.getElementById('issues-badge');
+  if (count) count.textContent = `${issues.length} issue${issues.length === 1 ? '' : 's'}`;
+  if (badge) {
+    if (issues.length) { badge.hidden = false; badge.textContent = String(issues.length); }
+    else { badge.hidden = true; }
+  }
+  if (!table) return;
+  if (!issues.length) { table.innerHTML = '<div class="empty">No critical issues 🎉</div>'; return; }
+  table.innerHTML = issues.map((i) => `
+    <div class="issue-row">
+      <div class="issue-msg">${esc(i.message)}</div>
+      <div class="issue-meta">
+        ${i.count > 1 ? `<span class="issue-count">×${i.count}</span><br>` : ''}
+        ${esc(fmtTime(i.last))}
+      </div>
+    </div>`).join('');
+}
+
+async function loadIssues() {
+  try {
+    const data = await api('/admin/api/logs').then((r) => r.json());
+    localLogs = data.logs || localLogs;
+    renderIssues(groupIssues(localLogs));
+    setTs('issues-ts', 'Updated');
+  } catch (err) {
+    if (err.message !== 'unauthorized') {
+      const table = document.getElementById('issue-table');
+      if (table) table.innerHTML = '<div class="empty">Failed to load issues</div>';
+    }
+  }
+}
+
 // ── Updates ────────────────────────────────────────────────────────────────
 
 async function loadVersion() {
@@ -626,12 +703,14 @@ async function saveEnabledModels(btn) {
 function startPolling() {
   setInterval(() => { if (currentPage === 'overview') loadHealth();  }, 30_000);
   setInterval(() => { if (currentPage === 'logs' && !logsCleared) loadLogs(); }, 5_000);
+  setInterval(() => { if (currentPage === 'issues') loadIssues(); }, 10_000);
   setInterval(() => { if (currentPage === 'updates') loadVersion();  }, 10_000);
 }
 
 // ── Init ───────────────────────────────────────────────────────────────────
 
 (async function init() {
+  initTheme();
   try {
     const res = await fetch('/admin/api/version');
     if (res.status === 401) { window.location.replace('/admin/login'); return; }
@@ -639,5 +718,6 @@ function startPolling() {
     // server unreachable — still render; API calls will fail gracefully
   }
   loadHealth();
+  loadIssues();
   startPolling();
 }());

package/server/admin/index.html

@@ -6,6 +6,12 @@
   <title>NeoAgent Admin</title>
   <link rel="icon" href="/admin/logo.svg" type="image/svg+xml">
   <link rel="stylesheet" href="/admin/admin.css">
+  <script>
+    // Set theme before first paint to avoid a flash of the wrong palette.
+    try {
+      document.documentElement.setAttribute('data-theme', localStorage.getItem('admin-theme') || 'dark');
+    } catch (_) { document.documentElement.setAttribute('data-theme', 'dark'); }
+  </script>
   <style>
     /* ── Layout ────────────────────────────────────────────────────── */
     body {
@@ -62,7 +68,7 @@
       text-decoration: none;
     }
 
-    .nav-item:hover { background: rgba(224,240,224,0.05); color: var(--text); }
+    .nav-item:hover { background: var(--row-hover); color: var(--text); }
 
     .nav-item.active {
       background: rgba(225, 176, 82, 0.12);
@@ -78,6 +84,51 @@
 
     .nav-item.active svg { opacity: 1; }
 
+    .nav-badge {
+      margin-left: auto;
+      min-width: 18px;
+      padding: 1px 6px;
+      border-radius: 999px;
+      background: var(--danger);
+      color: #fff;
+      font-size: 11px;
+      font-weight: 600;
+      line-height: 1.4;
+      text-align: center;
+    }
+
+    .issue-row {
+      display: grid;
+      grid-template-columns: 1fr auto;
+      gap: 12px;
+      align-items: start;
+      padding: 10px 14px;
+      border-bottom: 1px solid var(--border);
+    }
+    .issue-row:last-child { border-bottom: none; }
+    .issue-msg {
+      font-family: var(--font-mono);
+      font-size: 12.5px;
+      color: var(--danger);
+      white-space: pre-wrap;
+      word-break: break-word;
+    }
+    .issue-meta {
+      font-size: 11px;
+      color: var(--text-muted);
+      text-align: right;
+      white-space: nowrap;
+    }
+    .issue-count {
+      display: inline-block;
+      margin-bottom: 3px;
+      padding: 1px 7px;
+      border-radius: 999px;
+      background: var(--accent-muted);
+      color: var(--accent);
+      font-weight: 600;
+    }
+
     .sidebar-footer {
       padding: 10px;
       border-top: 1px solid var(--border);
@@ -202,12 +253,12 @@
     .log-row {
       display: grid;
       grid-template-columns: 80px 46px 1fr;
-      border-bottom: 1px solid rgba(224,240,224,0.04);
+      border-bottom: 1px solid var(--border);
     }
 
     .log-row:last-child { border-bottom: none; }
 
-    .log-row:hover { background: rgba(224,240,224,0.03); }
+    .log-row:hover { background: var(--row-hover); }
 
     .log-cell {
       padding: 6px 10px;
@@ -426,12 +477,12 @@
 
     .analytics-table td {
       padding: 9px 8px;
-      border-bottom: 1px solid rgba(224,240,224,0.04);
+      border-bottom: 1px solid var(--border);
       color: var(--text-secondary);
     }
 
     .analytics-table tr:last-child td { border-bottom: none; }
-    .analytics-table tr:hover td { background: rgba(224,240,224,0.025); }
+    .analytics-table tr:hover td { background: var(--row-hover); }
 
     .cell-truncate {
       max-width: 280px;
@@ -504,12 +555,12 @@
 
     .users-table td {
       padding: 10px 8px;
-      border-bottom: 1px solid rgba(224,240,224,0.04);
+      border-bottom: 1px solid var(--border);
       vertical-align: middle;
     }
 
     .users-table tr:last-child td { border-bottom: none; }
-    .users-table tr:hover td { background: rgba(224,240,224,0.025); }
+    .users-table tr:hover td { background: var(--row-hover); }
 
     .gdpr-note {
       font-size: 11px;
@@ -593,7 +644,7 @@
 
     .sql-result-table td {
       padding: 6px 12px;
-      border-bottom: 1px solid rgba(224,240,224,0.04);
+      border-bottom: 1px solid var(--border);
       color: var(--text-secondary);
       white-space: nowrap;
       max-width: 320px;
@@ -602,7 +653,7 @@
     }
 
     .sql-result-table tr:last-child td { border-bottom: none; }
-    .sql-result-table tr:hover td { background: rgba(224,240,224,0.03); }
+    .sql-result-table tr:hover td { background: var(--row-hover); }
 
     .sql-error {
       padding: 12px 14px;
@@ -821,6 +872,14 @@
         Logs
       </button>
 
+      <button class="nav-item" data-page="issues" onclick="showPage('issues',this)">
+        <svg viewBox="0 0 20 20" fill="currentColor" aria-hidden="true">
+          <path fill-rule="evenodd" d="M8.257 3.099c.765-1.36 2.722-1.36 3.486 0l5.58 9.92c.75 1.334-.213 2.98-1.742 2.98H4.42c-1.53 0-2.493-1.646-1.743-2.98l5.58-9.92zM11 13a1 1 0 11-2 0 1 1 0 012 0zm-1-8a1 1 0 00-1 1v3a1 1 0 002 0V6a1 1 0 00-1-1z" clip-rule="evenodd"/>
+        </svg>
+        Issues
+        <span class="nav-badge" id="issues-badge" hidden>0</span>
+      </button>
+
       <button class="nav-item" data-page="updates" onclick="showPage('updates',this)">
         <svg viewBox="0 0 20 20" fill="currentColor" aria-hidden="true">
           <path fill-rule="evenodd" d="M4 2a1 1 0 011 1v2.101a7.002 7.002 0 0111.601 2.566 1 1 0 11-1.885.666A5.002 5.002 0 005.999 7H9a1 1 0 010 2H4a1 1 0 01-1-1V3a1 1 0 011-1zm.008 9.057a1 1 0 011.276.61A5.002 5.002 0 0014.001 13H11a1 1 0 110-2h5a1 1 0 011 1v5a1 1 0 11-2 0v-2.101a7.002 7.002 0 01-11.601-2.566 1 1 0 01.61-1.276z" clip-rule="evenodd"/>
@@ -883,6 +942,12 @@
     </nav>
 
     <div class="sidebar-footer">
+      <button class="nav-item" id="theme-toggle" onclick="toggleTheme()" aria-label="Toggle light and dark theme">
+        <svg viewBox="0 0 20 20" fill="currentColor" aria-hidden="true">
+          <path d="M10 2a1 1 0 011 1v1a1 1 0 11-2 0V3a1 1 0 011-1zm4 8a4 4 0 11-8 0 4 4 0 018 0zm-.464 4.95l.707.707a1 1 0 001.414-1.414l-.707-.707a1 1 0 00-1.414 1.414zm2.12-10.607a1 1 0 010 1.414l-.706.707a1 1 0 11-1.414-1.414l.707-.707a1 1 0 011.414 0zM17 11a1 1 0 100-2h-1a1 1 0 100 2h1zm-7 4a1 1 0 011 1v1a1 1 0 11-2 0v-1a1 1 0 011-1zM5.05 6.464A1 1 0 106.465 5.05l-.708-.707a1 1 0 00-1.414 1.414l.707.707zm1.414 8.486l-.707.707a1 1 0 01-1.414-1.414l.707-.707a1 1 0 011.414 1.414zM4 11a1 1 0 100-2H3a1 1 0 000 2h1z"/>
+        </svg>
+        <span id="theme-toggle-label">Light mode</span>
+      </button>
       <button class="nav-item btn-danger" onclick="signOut()">
         <svg viewBox="0 0 20 20" fill="currentColor" aria-hidden="true">
           <path fill-rule="evenodd" d="M3 3a1 1 0 00-1 1v12a1 1 0 102 0V4a1 1 0 00-1-1zm10.293 9.293a1 1 0 001.414 1.414l3-3a1 1 0 000-1.414l-3-3a1 1 0 10-1.414 1.414L14.586 9H7a1 1 0 100 2h7.586l-1.293 1.293z" clip-rule="evenodd"/>
@@ -938,6 +1003,29 @@
       </div>
     </section>
 
+    <!-- Issues -->
+    <section id="page-issues" class="page" aria-label="Issues">
+      <div class="page-header">
+        <div>
+          <h1 class="page-title">Issues</h1>
+          <p class="page-subtitle">Critical errors from the log stream that should be addressed, grouped by message</p>
+        </div>
+        <span class="refresh-hint" id="issues-ts" aria-live="polite"></span>
+      </div>
+      <div class="content">
+        <div class="card">
+          <div class="toolbar">
+            <span class="toolbar-count" id="issue-count" aria-live="polite">0 issues</span>
+            <span class="spacer"></span>
+            <button class="btn btn-ghost" onclick="loadIssues()">Refresh</button>
+          </div>
+          <div class="log-table" id="issue-table" role="log" aria-label="Critical issues">
+            <div class="empty">No critical issues</div>
+          </div>
+        </div>
+      </div>
+    </section>
+
     <!-- Updates -->
     <section id="page-updates" class="page" aria-label="Updates">
       <div class="page-header">