* feat(home+news): state-aware /home + /news + admin-edited news section
Squash of the vr/home-page feature work for clean rebase onto main.
Original 18-commit history preserved in branch backup/vr-home-page-pre-rebase.
What's in this PR:
**State-aware /home page**
- New `/home` route with hero + auto-mode + connectors (Asana / GWS /
Atlassian) + lookarounds. Onboarded vs not-onboarded state-machine
branches a single template (`home_not_onboarded.html`); the install
steps, "Setup a new Claude Code" CTA (90-day PAT mint), and per-
connector setup prompts hide once `users.onboarded=TRUE`. A
completion badge replaces them.
- "Mark me as offboarded" button reverses the flag without an SQL UPDATE.
- `users.onboarded BOOLEAN` column added; default FALSE; flipped by the
CLI's `agnes init` post-success POST and the `/admin/users` API.
- Connector setup prompts pre-check whether the tool is already
installed/connected before re-running setup.
- GWS scope set widened to include Google Chat (`chat.spaces`,
`chat.messages`).
**Single template + design tokens**
- `dashboard.html` now extends `base.html` via the new
`{% block layout %}` opt-out (full-width pages skip the 800px
`.container`). Net: every page shares one shell.
- `style-custom.css` `:root` extended with `--space-{7,9,10,12}`,
`--radius-2xl`, `--shadow-{card,elevated}`, `--text-{muted,disabled}`,
`--focus-ring`, `--transition-*`, `--width-{narrow,app,wide}` so
inline page styles can migrate incrementally.
**Auth redirects honor AGNES_HOME_ROUTE**
- `safe_next_path` resolves the configured home route when no `default=`
is passed; OAuth callbacks, magic-link clicks, password form, and
LOCAL_DEV_MODE shortcuts now land on `/home` (or whatever the operator
picked) instead of always /dashboard.
**News section + /news permalink + /admin/news editor**
- Schema-bumped `news_template` table (single versioned entity, draft +
publish gate). `published BOOLEAN` distinguishes draft from public;
monotonically-increasing `version` per save; rows >30d pruned on
save except the currently-displayed published version.
- `/home` bottom-of-page renders the latest published intro with a
"Read more →" link to `/news` (which renders the full body).
- `/admin/news` editor with sandboxed live preview, versions table,
per-row Unpublish, Format-help cheatsheet.
- `agnes admin news show / draft / edit / publish / unpublish /
versions / export` (CLI). Talks to the live server via the
`/api/admin/news/*` endpoints (PAT-authed) — no direct DB access
so it coexists with a running uvicorn.
- **Optimistic-lock guard**: `agnes admin news publish --version N` and
PUT/PATCH endpoints accept `expected_version` and 409 with structured
`{error: "version_conflict", expected, actual, actual_by}` when a
concurrent admin replaced the draft. Edit refuses to overwrite a
draft authored by someone else without `--force` or
`--expect-version`.
- nh3 (Rust-backed ammonia) HTML sanitizer; iframe pre-pass strips
any iframe whose src is not on the YouTube/Vimeo/Loom allowlist;
javascript:/data: schemes blocked everywhere.
- Author CSS vocabulary: `.news-hero` (blue gradient hero block),
`.callout`/`.callout-{info,warn,success,danger}`,
`.video-embed`, `.news-section`, `.news-grid-{2,3}`, `.news-cta` —
all consolidated in `style-custom.css` under "News content
vocabulary (shared)" so /home perex, /news body, and /admin/news
preview share one source of styling.
- Code-inside-`<pre>` contrast fix (was unreadable amber-on-silver).
- `.news-content` table styling (border, header band, row-hover).
**`scripts/dev/run-local.sh`** — local uvicorn launcher. Pulls Google
OAuth client id/secret from GCP Secret Manager
(`AGNES_OAUTH_GCP_PROJECT`-driven, no vendor defaults), points
`AGNES_CLI_DIST_DIR` at `./dist` so the wheel endpoint resolves, and
`--dev` flips `LOCAL_DEV_MODE=1` + `AGNES_HOME_ROUTE=/home` for one-
command iteration. `LOCAL_DEV_MODE=1` also enables the FastAPI debug
toolbar.
**CLAUDE.md "Run tests before every push" section** codifies
`pytest tests/ -n auto -q` as non-negotiable before each push.
**Tests**: 51 + 14 + 8 = 73 new tests across news-template repo,
sanitizer, API, web, CLI; plus updated home/auth/template tests for
the new shared-shell architecture.
Origin docs (gitignored, customer-fork content):
docs/brainstorms/home-page-requirements.md,
docs/plans/2026-05-07-001-feat-home-page-plan.md.
* feat(cli): agnes onboarded {on,off,status} — self-scoped flag toggle
User-facing equivalent of the in-page "Mark me as (off)boarded" button
on /home. POSTs /api/me/onboarded with {onboarded, source}; --source
overrides the audit-log marker so flips made from the CLI vs the web
button vs agnes init automation stay distinguishable.
`status` reads via /api/me/profile (when present); falls back to a
quick body-marker scan of /home so the read path doesn't write an
audit_log row. PAT-authed via cli.client.api_post — same convention
as agnes admin news / agnes admin add-user etc.
Tests: 5 covering on/off/status round-trip, idempotency, and
audit-log source recording. Full suite holds at 12 pre-existing
failures (same set as before).
* ui(nav+home): primary nav reorg + green What's new band + /marketplace link fix
Primary nav (post-rebase audit + per-user feedback):
- Items: Home → Marketplace → Data Packages → Memory. Admin dropdown
for admins only. The "Dashboard" label was renamed Home — point still
resolves through `home_route` so customer instances on /dashboard
still land there.
- Activity Center moved into the Admin dropdown. Per-team adoption
analytics is admin-consumed in practice; the route still allows
any authed user for direct deep-links so existing /home tile +
bookmarks keep working.
- Memory link added (→ /corporate-memory) — was previously buried in
the /home "Look around" tiles.
- Setup local agent + My Stack dropped from main nav. Setup is the
/home install flow's home now; My Stack lives as a tab inside
/marketplace.
/home tweaks:
- Plugin marketplace tile now points at /marketplace (was /store —
legacy from before the marketplace rebrand landed in #230).
- "What's new" section header gets a green band (success-flavored
D1FAE5 background, A7F3D0 border, darker green title) so the
bottom-of-page news block visibly distinguishes from the blue
install-hero at the top. Header strip only — body stays white.
Test fix: test_home_route_resolution renamed `dashboard_link_uses_home_route`
→ `home_link_uses_home_route` and asserts `href="/home">Home` instead
of `href="/home">Dashboard` after the label change.
* fix(home): decouple Step 3 + Connect-tools collapse from server onboarded flag
The server-side `users.onboarded` flip happens through two paths:
1. Explicit user click on "Mark me as onboarded" or `agnes onboarded on`.
2. Implicit `agnes init` POST → /api/me/onboarded on success.
Path 2 produced a UX surprise: an analyst running `agnes init` mid-flow
reloaded /home and saw Step 3 (auto-mode) + Connect-your-tools auto-
collapse to summary bars. They were actively working through those
sections — the install POST never signalled "I'm done with the rest
of setup", just "Agnes itself is installed".
Decouple the section-collapse decision from the server flag:
- Step 1 + Step 2 install blocks: still hidden on `onboarded=TRUE`
(their completion is a hard server signal — Agnes IS installed).
- Step 3 + Connect-your-tools: render flat by default in BOTH states.
Wrapped in `<details class="setup-collapsible" open>` so the
browser's native disclosure handles per-section toggle without JS,
but the `<summary>` is CSS-hidden until the page-level
`data-setup-minimized="1"` attribute is set on `.home-mock`.
- New "Minimize setup view" toggle inside the blue install-hero,
rendered only when onboarded. Click flips the data-attr on
`.home-mock` AND removes the `open` attribute from each
`<details>`. State persists in `localStorage["agnes_home_setup_minimized"]`
so the choice survives reloads but is per-device.
- "Show full setup view" (the same button when minimized) re-opens
both `<details>` and clears localStorage.
When minimized, each `<details>` still has its own native expand/
collapse — click the gray summary bar to peek at one section without
toggling the page-level minimize off.
Tests:
- test_step3_and_connectors_render_flat_when_onboarded_by_default —
asserts `<details class="setup-collapsible" ... open>` for both
sections post-onboarding and the absence of any server-rendered
`data-setup-minimized` attribute on the `.home-mock` root.
- test_minimize_toggle_visible_only_when_onboarded — toggle button
rendered only when onboarded.
Full pytest holds at 12 pre-existing failures (same set).
248 lines
9.2 KiB
Django/Jinja
248 lines
9.2 KiB
Django/Jinja
{# Shared "Setup a new Claude Code" behaviour.
|
|
|
|
Provides the JS + CSS that drives any page's "Setup a new Claude Code"
|
|
button. The button itself is rendered by the consuming page (because
|
|
each page wraps it in its own card chrome — dashboard's blue CTA card,
|
|
/home's hero, /install's section). The contract is:
|
|
|
|
- A button with `onclick="setupNewClaude(this)"` and ideally id
|
|
`setupClaudeBtn` so the visible-state transitions read sensibly.
|
|
- Optional `<div id="setupClaudeError">` for inline error reporting.
|
|
If absent, errors fall back to `alert()`.
|
|
|
|
The clipboard payload is single-sourced through
|
|
`_claude_setup_instructions.jinja` (preview_mode=False), which emits
|
|
`SETUP_INSTRUCTIONS_TEMPLATE` + `renderSetupInstructions(server, token)`.
|
|
|
|
Pages that ALSO render the read-only preview (e.g. via
|
|
`{% include "_claude_setup_instructions.jinja" %}` with preview_mode=True
|
|
in their own template tree) just show the same lines under
|
|
`<pre class="setup-preview-pre">`. The JS here doesn't touch that pre.
|
|
#}
|
|
<style>
|
|
.setup-fallback-overlay {
|
|
position: fixed;
|
|
inset: 0;
|
|
background: rgba(0, 0, 0, 0.45);
|
|
display: flex;
|
|
align-items: center;
|
|
justify-content: center;
|
|
z-index: 1000;
|
|
}
|
|
.setup-fallback-modal {
|
|
background: var(--surface, #fff);
|
|
border-radius: 12px;
|
|
padding: 20px;
|
|
max-width: 720px;
|
|
width: calc(100% - 32px);
|
|
max-height: calc(100vh - 64px);
|
|
display: flex;
|
|
flex-direction: column;
|
|
gap: 12px;
|
|
box-shadow: 0 20px 48px rgba(0, 0, 0, 0.3);
|
|
}
|
|
.setup-fallback-modal h4 {
|
|
margin: 0;
|
|
font-size: 15px;
|
|
color: var(--text-primary, #111827);
|
|
}
|
|
.setup-fallback-modal p {
|
|
margin: 0;
|
|
font-size: 13px;
|
|
color: var(--text-secondary, #6B7280);
|
|
}
|
|
.setup-fallback-modal textarea {
|
|
flex: 1;
|
|
min-height: 260px;
|
|
font-family: var(--font-mono, ui-monospace, "SF Mono", Consolas, monospace);
|
|
font-size: 12px;
|
|
padding: 10px;
|
|
border: 1px solid var(--border, #E5E7EB);
|
|
border-radius: 8px;
|
|
background: var(--background, #F9FAFB);
|
|
color: var(--text-primary, #111827);
|
|
resize: vertical;
|
|
}
|
|
.setup-fallback-actions {
|
|
display: flex;
|
|
justify-content: flex-end;
|
|
gap: 8px;
|
|
}
|
|
.setup-fallback-actions button {
|
|
font-family: var(--font-primary, "Inter", -apple-system, BlinkMacSystemFont, sans-serif);
|
|
font-size: 13px;
|
|
font-weight: 500;
|
|
padding: 8px 16px;
|
|
border-radius: 6px;
|
|
border: 1px solid var(--border, #E5E7EB);
|
|
background: var(--surface, #fff);
|
|
color: var(--text-primary, #111827);
|
|
cursor: pointer;
|
|
}
|
|
.setup-fallback-actions button.primary {
|
|
background: var(--primary, #0073D1);
|
|
color: #FFF;
|
|
border-color: var(--primary, #0073D1);
|
|
}
|
|
|
|
.setup-error {
|
|
margin-top: 12px;
|
|
padding: 10px 14px;
|
|
background: rgba(234, 88, 12, 0.12);
|
|
border-left: 3px solid #EA580C;
|
|
border-radius: 6px;
|
|
color: #FFF;
|
|
font-size: 13px;
|
|
}
|
|
</style>
|
|
|
|
<script>
|
|
(function () {
|
|
if (window.__setupCtaWired) return;
|
|
window.__setupCtaWired = true;
|
|
|
|
{% include "_claude_setup_instructions.jinja" %}
|
|
|
|
function copyToClipboard(text) {
|
|
if (navigator.clipboard && window.isSecureContext) {
|
|
return navigator.clipboard.writeText(text);
|
|
}
|
|
var ta = document.createElement('textarea');
|
|
ta.value = text;
|
|
ta.style.position = 'fixed';
|
|
ta.style.left = '-9999px';
|
|
ta.style.top = '-9999px';
|
|
document.body.appendChild(ta);
|
|
ta.focus();
|
|
ta.select();
|
|
return new Promise(function (resolve, reject) {
|
|
document.execCommand('copy') ? resolve() : reject();
|
|
document.body.removeChild(ta);
|
|
});
|
|
}
|
|
|
|
function defaultTokenName() {
|
|
var stamp = new Date().toISOString().slice(0, 16).replace("T", " ");
|
|
return "Claude Code — " + stamp;
|
|
}
|
|
|
|
function showSetupFallback(instructions) {
|
|
var overlay = document.createElement('div');
|
|
overlay.className = 'setup-fallback-overlay';
|
|
overlay.innerHTML =
|
|
'<div class="setup-fallback-modal" role="dialog" aria-modal="true" aria-labelledby="setupFallbackTitle">' +
|
|
'<h4 id="setupFallbackTitle">Copy these setup instructions</h4>' +
|
|
'<p>Your browser blocked automatic clipboard access. Select all, copy, then paste into Claude Code.</p>' +
|
|
'<textarea readonly></textarea>' +
|
|
'<div class="setup-fallback-actions">' +
|
|
'<button type="button" data-action="close">Close</button>' +
|
|
'<button type="button" class="primary" data-action="select">Select all</button>' +
|
|
'</div>' +
|
|
'</div>';
|
|
document.body.appendChild(overlay);
|
|
var ta = overlay.querySelector('textarea');
|
|
ta.value = instructions;
|
|
ta.focus();
|
|
ta.select();
|
|
overlay.addEventListener('click', function (ev) {
|
|
if (ev.target === overlay) { document.body.removeChild(overlay); }
|
|
});
|
|
overlay.querySelector('[data-action="close"]').addEventListener('click', function () {
|
|
document.body.removeChild(overlay);
|
|
});
|
|
overlay.querySelector('[data-action="select"]').addEventListener('click', function () {
|
|
ta.focus();
|
|
ta.select();
|
|
});
|
|
}
|
|
|
|
async function setupNewClaude(btn) {
|
|
var errEl = document.getElementById('setupClaudeError');
|
|
if (errEl) { errEl.style.display = 'none'; errEl.textContent = ''; }
|
|
var origText = btn.textContent;
|
|
btn.disabled = true;
|
|
btn.textContent = 'Generating token…';
|
|
try {
|
|
var resp = await fetch('/auth/tokens', {
|
|
method: 'POST',
|
|
credentials: 'include',
|
|
headers: { 'Content-Type': 'application/json' },
|
|
body: JSON.stringify({
|
|
name: defaultTokenName(),
|
|
expires_in_days: 90,
|
|
}),
|
|
});
|
|
if (resp.status === 401) {
|
|
window.location.href = '/login?next=' + encodeURIComponent(window.location.pathname);
|
|
return;
|
|
}
|
|
if (!resp.ok) {
|
|
var detail = 'HTTP ' + resp.status;
|
|
try {
|
|
var body = await resp.json();
|
|
if (body && body.detail) { detail = body.detail; }
|
|
} catch (_) { /* non-JSON */ }
|
|
throw new Error(detail);
|
|
}
|
|
var data = await resp.json();
|
|
if (!data || !data.token) {
|
|
throw new Error('Server did not return a token.');
|
|
}
|
|
var serverUrl = window.location.origin;
|
|
var instructions = renderSetupInstructions(serverUrl, data.token);
|
|
|
|
// Replace the inline preview's placeholder with the real token so
|
|
// users can see what got copied (and re-copy by hand if the
|
|
// clipboard write failed). The placeholder span lives inside the
|
|
// shared `_claude_setup_instructions.jinja` preview-mode block;
|
|
// not every page renders that block, so guard for absence.
|
|
var placeholders = document.querySelectorAll('.placeholder-token');
|
|
placeholders.forEach(function (span) {
|
|
span.textContent = data.token;
|
|
span.classList.remove('placeholder-token');
|
|
span.classList.add('token-revealed');
|
|
span.setAttribute(
|
|
'aria-label',
|
|
'Generated personal access token — already copied to your clipboard'
|
|
);
|
|
// Intentionally do NOT auto-open the parent <details>. The
|
|
// primary path is "Copied! Paste into Claude Code"; the
|
|
// manual-paste preview is a secondary affordance and should
|
|
// stay collapsed unless the user opens it themselves.
|
|
});
|
|
|
|
try {
|
|
await copyToClipboard(instructions);
|
|
btn.textContent = 'Copied! Paste into Claude Code';
|
|
btn.classList.add('copied');
|
|
setTimeout(function () {
|
|
btn.textContent = origText;
|
|
btn.classList.remove('copied');
|
|
btn.disabled = false;
|
|
}, 3000);
|
|
} catch (clipErr) {
|
|
btn.textContent = origText;
|
|
btn.disabled = false;
|
|
showSetupFallback(instructions);
|
|
}
|
|
} catch (err) {
|
|
btn.textContent = origText;
|
|
btn.disabled = false;
|
|
if (errEl) {
|
|
errEl.textContent = 'Setup failed: ' + (err && err.message ? err.message : err);
|
|
errEl.style.display = 'block';
|
|
} else {
|
|
alert('Setup failed: ' + (err && err.message ? err.message : err));
|
|
}
|
|
}
|
|
}
|
|
|
|
// Expose globally so inline onclick handlers can reach them.
|
|
window.copyToClipboard = copyToClipboard;
|
|
window.defaultTokenName = defaultTokenName;
|
|
window.showSetupFallback = showSetupFallback;
|
|
window.setupNewClaude = setupNewClaude;
|
|
window.renderSetupInstructions = renderSetupInstructions;
|
|
window.SETUP_INSTRUCTIONS_TEMPLATE = SETUP_INSTRUCTIONS_TEMPLATE;
|
|
})();
|
|
</script>
|