* feat(home+news): state-aware /home + /news + admin-edited news section
Squash of the vr/home-page feature work for clean rebase onto main.
Original 18-commit history preserved in branch backup/vr-home-page-pre-rebase.
What's in this PR:
**State-aware /home page**
- New `/home` route with hero + auto-mode + connectors (Asana / GWS /
Atlassian) + lookarounds. Onboarded vs not-onboarded state-machine
branches a single template (`home_not_onboarded.html`); the install
steps, "Setup a new Claude Code" CTA (90-day PAT mint), and per-
connector setup prompts hide once `users.onboarded=TRUE`. A
completion badge replaces them.
- "Mark me as offboarded" button reverses the flag without an SQL UPDATE.
- `users.onboarded BOOLEAN` column added; default FALSE; flipped by the
CLI's `agnes init` post-success POST and the `/admin/users` API.
- Connector setup prompts pre-check whether the tool is already
installed/connected before re-running setup.
- GWS scope set widened to include Google Chat (`chat.spaces`,
`chat.messages`).
**Single template + design tokens**
- `dashboard.html` now extends `base.html` via the new
`{% block layout %}` opt-out (full-width pages skip the 800px
`.container`). Net: every page shares one shell.
- `style-custom.css` `:root` extended with `--space-{7,9,10,12}`,
`--radius-2xl`, `--shadow-{card,elevated}`, `--text-{muted,disabled}`,
`--focus-ring`, `--transition-*`, `--width-{narrow,app,wide}` so
inline page styles can migrate incrementally.
**Auth redirects honor AGNES_HOME_ROUTE**
- `safe_next_path` resolves the configured home route when no `default=`
is passed; OAuth callbacks, magic-link clicks, password form, and
LOCAL_DEV_MODE shortcuts now land on `/home` (or whatever the operator
picked) instead of always /dashboard.
**News section + /news permalink + /admin/news editor**
- Schema-bumped `news_template` table (single versioned entity, draft +
publish gate). `published BOOLEAN` distinguishes draft from public;
monotonically-increasing `version` per save; rows >30d pruned on
save except the currently-displayed published version.
- `/home` bottom-of-page renders the latest published intro with a
"Read more →" link to `/news` (which renders the full body).
- `/admin/news` editor with sandboxed live preview, versions table,
per-row Unpublish, Format-help cheatsheet.
- `agnes admin news show / draft / edit / publish / unpublish /
versions / export` (CLI). Talks to the live server via the
`/api/admin/news/*` endpoints (PAT-authed) — no direct DB access
so it coexists with a running uvicorn.
- **Optimistic-lock guard**: `agnes admin news publish --version N` and
PUT/PATCH endpoints accept `expected_version` and 409 with structured
`{error: "version_conflict", expected, actual, actual_by}` when a
concurrent admin replaced the draft. Edit refuses to overwrite a
draft authored by someone else without `--force` or
`--expect-version`.
- nh3 (Rust-backed ammonia) HTML sanitizer; iframe pre-pass strips
any iframe whose src is not on the YouTube/Vimeo/Loom allowlist;
javascript:/data: schemes blocked everywhere.
- Author CSS vocabulary: `.news-hero` (blue gradient hero block),
`.callout`/`.callout-{info,warn,success,danger}`,
`.video-embed`, `.news-section`, `.news-grid-{2,3}`, `.news-cta` —
all consolidated in `style-custom.css` under "News content
vocabulary (shared)" so /home perex, /news body, and /admin/news
preview share one source of styling.
- Code-inside-`<pre>` contrast fix (was unreadable amber-on-silver).
- `.news-content` table styling (border, header band, row-hover).
**`scripts/dev/run-local.sh`** — local uvicorn launcher. Pulls Google
OAuth client id/secret from GCP Secret Manager
(`AGNES_OAUTH_GCP_PROJECT`-driven, no vendor defaults), points
`AGNES_CLI_DIST_DIR` at `./dist` so the wheel endpoint resolves, and
`--dev` flips `LOCAL_DEV_MODE=1` + `AGNES_HOME_ROUTE=/home` for one-
command iteration. `LOCAL_DEV_MODE=1` also enables the FastAPI debug
toolbar.
**CLAUDE.md "Run tests before every push" section** codifies
`pytest tests/ -n auto -q` as non-negotiable before each push.
**Tests**: 51 + 14 + 8 = 73 new tests across news-template repo,
sanitizer, API, web, CLI; plus updated home/auth/template tests for
the new shared-shell architecture.
Origin docs (gitignored, customer-fork content):
docs/brainstorms/home-page-requirements.md,
docs/plans/2026-05-07-001-feat-home-page-plan.md.
* feat(cli): agnes onboarded {on,off,status} — self-scoped flag toggle
User-facing equivalent of the in-page "Mark me as (off)boarded" button
on /home. POSTs /api/me/onboarded with {onboarded, source}; --source
overrides the audit-log marker so flips made from the CLI vs the web
button vs agnes init automation stay distinguishable.
`status` reads via /api/me/profile (when present); falls back to a
quick body-marker scan of /home so the read path doesn't write an
audit_log row. PAT-authed via cli.client.api_post — same convention
as agnes admin news / agnes admin add-user etc.
Tests: 5 covering on/off/status round-trip, idempotency, and
audit-log source recording. Full suite holds at 12 pre-existing
failures (same set as before).
* ui(nav+home): primary nav reorg + green What's new band + /marketplace link fix
Primary nav (post-rebase audit + per-user feedback):
- Items: Home → Marketplace → Data Packages → Memory. Admin dropdown
for admins only. The "Dashboard" label was renamed Home — point still
resolves through `home_route` so customer instances on /dashboard
still land there.
- Activity Center moved into the Admin dropdown. Per-team adoption
analytics is admin-consumed in practice; the route still allows
any authed user for direct deep-links so existing /home tile +
bookmarks keep working.
- Memory link added (→ /corporate-memory) — was previously buried in
the /home "Look around" tiles.
- Setup local agent + My Stack dropped from main nav. Setup is the
/home install flow's home now; My Stack lives as a tab inside
/marketplace.
/home tweaks:
- Plugin marketplace tile now points at /marketplace (was /store —
legacy from before the marketplace rebrand landed in #230).
- "What's new" section header gets a green band (success-flavored
D1FAE5 background, A7F3D0 border, darker green title) so the
bottom-of-page news block visibly distinguishes from the blue
install-hero at the top. Header strip only — body stays white.
Test fix: test_home_route_resolution renamed `dashboard_link_uses_home_route`
→ `home_link_uses_home_route` and asserts `href="/home">Home` instead
of `href="/home">Dashboard` after the label change.
* fix(home): decouple Step 3 + Connect-tools collapse from server onboarded flag
The server-side `users.onboarded` flip happens through two paths:
1. Explicit user click on "Mark me as onboarded" or `agnes onboarded on`.
2. Implicit `agnes init` POST → /api/me/onboarded on success.
Path 2 produced a UX surprise: an analyst running `agnes init` mid-flow
reloaded /home and saw Step 3 (auto-mode) + Connect-your-tools auto-
collapse to summary bars. They were actively working through those
sections — the install POST never signalled "I'm done with the rest
of setup", just "Agnes itself is installed".
Decouple the section-collapse decision from the server flag:
- Step 1 + Step 2 install blocks: still hidden on `onboarded=TRUE`
(their completion is a hard server signal — Agnes IS installed).
- Step 3 + Connect-your-tools: render flat by default in BOTH states.
Wrapped in `<details class="setup-collapsible" open>` so the
browser's native disclosure handles per-section toggle without JS,
but the `<summary>` is CSS-hidden until the page-level
`data-setup-minimized="1"` attribute is set on `.home-mock`.
- New "Minimize setup view" toggle inside the blue install-hero,
rendered only when onboarded. Click flips the data-attr on
`.home-mock` AND removes the `open` attribute from each
`<details>`. State persists in `localStorage["agnes_home_setup_minimized"]`
so the choice survives reloads but is per-device.
- "Show full setup view" (the same button when minimized) re-opens
both `<details>` and clears localStorage.
When minimized, each `<details>` still has its own native expand/
collapse — click the gray summary bar to peek at one section without
toggling the page-level minimize off.
Tests:
- test_step3_and_connectors_render_flat_when_onboarded_by_default —
asserts `<details class="setup-collapsible" ... open>` for both
sections post-onboarding and the absence of any server-rendered
`data-setup-minimized` attribute on the `.home-mock` root.
- test_minimize_toggle_visible_only_when_onboarded — toggle button
rendered only when onboarded.
Full pytest holds at 12 pre-existing failures (same set).
201 lines
7.2 KiB
Python
201 lines
7.2 KiB
Python
"""agnes — CLI tool for AI Data Analyst.
|
|
|
|
Primary interface for AI agents. Install: uv tool install agnes-the-ai-analyst
|
|
"""
|
|
|
|
import sys
|
|
from importlib.metadata import PackageNotFoundError
|
|
from importlib.metadata import version as _pkg_version
|
|
|
|
import typer
|
|
|
|
# Force UTF-8 on Windows stdout/stderr at import time. The default Windows
|
|
# console codepage (cp1250 on cs-CZ, cp1252 on en-US, …) cannot encode the
|
|
# Braille spinner glyphs Rich uses for `agnes pull` progress, nor the
|
|
# em-dash / accented chars that show up in skill markdown via
|
|
# `agnes skills list`. Both crash with UnicodeEncodeError /
|
|
# UnicodeDecodeError before any command-level code runs. `reconfigure` is
|
|
# a no-op on non-TextIOWrapper streams (pytest capture, pipes wrapped by
|
|
# other tooling) — swallow the AttributeError there.
|
|
if sys.platform == "win32":
|
|
try:
|
|
sys.stdout.reconfigure(encoding="utf-8", errors="replace")
|
|
sys.stderr.reconfigure(encoding="utf-8", errors="replace")
|
|
except (AttributeError, OSError):
|
|
pass
|
|
|
|
from cli.commands.auth import auth_app
|
|
from cli.commands.init import init_app
|
|
from cli.commands.onboarded import onboarded_app
|
|
from cli.commands.pull import pull_app
|
|
from cli.commands.push import push_app
|
|
from cli.commands.refresh_marketplace import refresh_marketplace_app
|
|
from cli.commands.query import query_command
|
|
from cli.commands.status import status_app
|
|
from cli.commands.admin import admin_app
|
|
from cli.commands.diagnose import diagnose_app
|
|
from cli.commands.skills import skills_app
|
|
from cli.commands.self_upgrade import self_upgrade_app
|
|
from cli.commands.setup import setup_app
|
|
from cli.commands.server import server_app
|
|
from cli.commands.explore import explore_app
|
|
from cli.commands.catalog import catalog_app
|
|
from cli.commands.schema import schema_app
|
|
from cli.commands.describe import describe
|
|
from cli.commands.snapshot import snapshot_app
|
|
from cli.commands.disk_info import disk_info_app
|
|
from cli.commands.store import store_app
|
|
from cli.commands.my_stack import my_stack_app
|
|
|
|
|
|
def _cli_version() -> str:
|
|
"""Return the installed CLI version from package metadata.
|
|
|
|
Falls back to `"unknown"` when the package is not installed (e.g. running
|
|
from a source checkout without `uv pip install -e .`). Deliberately does
|
|
not read pyproject.toml at runtime — that file is not shipped with the
|
|
wheel and the metadata lookup is the canonical source.
|
|
"""
|
|
try:
|
|
return _pkg_version("agnes-the-ai-analyst")
|
|
except PackageNotFoundError:
|
|
return "unknown"
|
|
|
|
|
|
def _version_callback(value: bool) -> None:
|
|
if value:
|
|
typer.echo(f"agnes {_cli_version()}")
|
|
raise typer.Exit()
|
|
|
|
|
|
app = typer.Typer(
|
|
name="agnes",
|
|
help="Agnes — AI Data Analyst CLI",
|
|
no_args_is_help=True,
|
|
)
|
|
|
|
|
|
@app.callback()
|
|
def _root(
|
|
version: bool = typer.Option(
|
|
None,
|
|
"--version",
|
|
"-V",
|
|
callback=_version_callback,
|
|
is_eager=True,
|
|
help="Show the CLI version and exit.",
|
|
),
|
|
) -> None:
|
|
"""Root callback — carries the --version option and fires the auto-update check.
|
|
|
|
Update check runs before subcommand dispatch but after the --version flag
|
|
(which exits early). It's best-effort: any failure is swallowed so a bad
|
|
network never blocks a working `agnes` command. Disable with
|
|
`AGNES_NO_UPDATE_CHECK=1`.
|
|
"""
|
|
_maybe_warn_outdated()
|
|
|
|
|
|
def _maybe_warn_outdated() -> None:
|
|
"""Hit /cli/latest on the configured server (cached 24h) and emit a
|
|
one-line stderr warning if the installed CLI is older. Never raises."""
|
|
try:
|
|
from cli.config import get_server_url
|
|
from cli.update_check import check, format_outdated_notice
|
|
info = check(get_server_url())
|
|
if info and info.is_outdated():
|
|
typer.echo(format_outdated_notice(info), err=True)
|
|
except Exception:
|
|
pass # best-effort: never fail a command on the probe
|
|
|
|
# Register subcommands
|
|
app.add_typer(auth_app, name="auth")
|
|
app.add_typer(init_app, name="init")
|
|
app.add_typer(onboarded_app, name="onboarded")
|
|
app.add_typer(pull_app, name="pull")
|
|
app.add_typer(push_app, name="push")
|
|
app.add_typer(refresh_marketplace_app, name="refresh-marketplace")
|
|
app.command("query")(query_command)
|
|
app.add_typer(status_app, name="status")
|
|
app.add_typer(admin_app, name="admin")
|
|
app.add_typer(diagnose_app, name="diagnose")
|
|
app.add_typer(skills_app, name="skills")
|
|
app.add_typer(self_upgrade_app, name="self-upgrade")
|
|
app.add_typer(setup_app, name="setup")
|
|
app.add_typer(server_app, name="server")
|
|
app.add_typer(explore_app, name="explore")
|
|
app.add_typer(catalog_app, name="catalog")
|
|
app.add_typer(schema_app, name="schema")
|
|
app.command("describe")(describe)
|
|
app.add_typer(snapshot_app, name="snapshot")
|
|
app.add_typer(disk_info_app, name="disk-info")
|
|
app.add_typer(store_app, name="store")
|
|
app.add_typer(my_stack_app, name="my-stack")
|
|
|
|
|
|
def _capture_cli_exception(exc: BaseException, kind: str) -> None:
|
|
"""Best-effort PostHog forward for CLI-level errors. No-op when off."""
|
|
try:
|
|
from src.observability import get_posthog
|
|
argv = sys.argv[1:]
|
|
command = argv[0] if argv else "<no-command>"
|
|
get_posthog().capture_exception(
|
|
exc,
|
|
distinct_id="cli",
|
|
properties={
|
|
"component": "cli",
|
|
"command": command,
|
|
"argv": " ".join(argv)[:512],
|
|
"error_kind": kind,
|
|
},
|
|
)
|
|
get_posthog().shutdown()
|
|
except Exception:
|
|
pass # never replace the user-visible error with a tracing failure
|
|
|
|
|
|
def main() -> None:
|
|
"""Wrap ``app()`` so AgnesTransportError (and other typed CLI errors)
|
|
surface as a one-line message + exit, never as a Python traceback. The
|
|
full traceback is already logged to ``~/.config/agnes/last-error.log``
|
|
by the api_* helpers — operators read it from there for support
|
|
forwarding. Anything that escapes this wrapper IS a CLI bug worth
|
|
fixing — log + print "internal error" so the analyst doesn't see a
|
|
Pythonist's traceback either.
|
|
|
|
Also forwards captured exceptions to PostHog (no-op when disabled) so
|
|
operators can see CLI-level failures alongside server-side ones.
|
|
Normal control-flow exits (typer.Exit / SystemExit / KeyboardInterrupt)
|
|
are never reported.
|
|
|
|
Pavel's #185 Phase 3B: previously a `httpx.ReadTimeout` from an
|
|
`agnes query --remote` against a slow BQ view dumped a 30-frame
|
|
traceback to the analyst's terminal. Now: one clean line + a hint,
|
|
return code 1.
|
|
"""
|
|
from cli.client import AgnesTransportError, _log_traceback, _LOG_FILE
|
|
try:
|
|
app()
|
|
except AgnesTransportError as exc:
|
|
_capture_cli_exception(exc, kind="transport")
|
|
typer.echo(f"Error: {exc.user_message}", err=True)
|
|
if exc.hint:
|
|
typer.echo(exc.hint, err=True)
|
|
sys.exit(1)
|
|
except typer.Exit:
|
|
raise
|
|
except (KeyboardInterrupt, SystemExit):
|
|
raise
|
|
except Exception as exc: # last-resort net — escaped exceptions are bugs
|
|
_capture_cli_exception(exc, kind="unhandled")
|
|
log = _log_traceback(exc, context="unhandled at CLI top-level")
|
|
typer.echo(
|
|
f"Error: internal CLI error ({type(exc).__name__}). "
|
|
f"Full traceback logged to {log}.",
|
|
err=True,
|
|
)
|
|
sys.exit(1)
|
|
|
|
|
|
if __name__ == "__main__":
|
|
main()
|