Setup, end to end: pick a Bot, connect a model, prove it answers - #451

Merged

davidmckayv merged 273 commits into

mainfrom

s5-mastra-bot-kind

Sep 11, 2026

This pull request is big! We're only showing the most recent 250 commits

Commits on Sep 7, 2026

Give a signed-in ChatGPT plan the Codex model, and the store rather than a token
davidmckayv
committed
d8e077b
Empty the plan token this app has stopped writing
davidmckayv
committed
63eb698
End the install with a question the Bot has to answer
davidmckayv
committed
4825ccb
Keep credentials in the machine's own store, not in the .env
davidmckayv
committed
3079696
Give the secondary buttons the class the stylesheet actually defines
davidmckayv
committed
0ddba6f
Store a credential through the Keychain itself, not through the security command
davidmckayv
committed
af4ea71
Mint the generated secrets once per deployment, not once per start
davidmckayv
committed
f04fbe2
Stop the Bot that was picked, and stop refusing to start because of it
davidmckayv
committed
b358264
Make the ChatGPT sign-in work, and say what went wrong when it does not
davidmckayv
committed
f8776c1

Commits on Sep 8, 2026

Commits on Sep 9, 2026

Merge main
davidmckayv
committed
fb52a1b
Scope the Keychain's service name to the Keychain
davidmckayv
committed
5ea56ee
Fix credential migration purge ordering
davidmckayv
committed
3948d33
Fix picked harness run routes
davidmckayv
committed
03258a9
Verify Windows host identity before cleanup
davidmckayv
committed
cdd72dc
fix: load auth headers for remote mastra agents
davidmckayv
committed
0b01261
fix(desktop): fetch deployment before harness image resolution
davidmckayv
committed
c013a7d
Fix CrewAI Bot role preservation
davidmckayv
committed
a247f41
fix server mastra middleware cloning
davidmckayv
committed
db21e62
fix app proxy websocket session headers
davidmckayv
committed
7f9ad26
Normalize blank OpenAI base URL in Python harness
davidmckayv
committed
4b67736
fix: preserve openbot context for mastra runs
davidmckayv
committed
bda60a1
fix: keep failed channel history reads neutral
davidmckayv
committed
a762b15
fix anthropic picked harness provider config
davidmckayv
committed
d8e1b1b
fix: mount chatgpt token store directory
davidmckayv
committed
3af64e1
Fix provider-scoped plan sign-ins
davidmckayv
committed
cfb75f9
Fix Ask model recovery state
davidmckayv
committed
a99040c
test: isolate plugin-store audit refusal row
davidmckayv
committed
68d349c
test: update remote agent wrapper assertions
davidmckayv
committed
ffabbfc
fix: use native Mastra transport for desktop ask
davidmckayv
committed
b4908b5
test: isolate keychain regressions from real stores
davidmckayv
committed
fb57f00
fix desktop empty project retry
davidmckayv
committed
68b96ab
fix: split passive and interactive vault reads
davidmckayv
committed
f03216b
Fix Mastra receiver OpenBot instructions
davidmckayv
committed
bec2c9f
Add Python harness CI regressions
davidmckayv
committed
362dc8d
test: cover saved plan restoration
davidmckayv
committed
61962b9
fix(desktop): carry byo agent endpoint through setup
davidmckayv
committed
ba6914e
style(desktop): format saved credential notice
davidmckayv
committed
b14e6a8
test(desktop): isolate Rust temp roots
davidmckayv
committed
999b8b9
test(server): stub vertex provider in bun preload
davidmckayv
committed
5ca2f6b
test: satisfy vault cache clippy slice refs
davidmckayv
committed
8c4cb1b
fix desktop shutdown root retention
davidmckayv
committed
9046314
fix: isolate compatible endpoint api keys
davidmckayv
committed
be60fea
Reject missing saved model API keys
davidmckayv
committed
87b0566
Add saved key startup boundary fixture
davidmckayv
committed
06cc5e4
fix(desktop): scope saved setup state to root edits
davidmckayv
committed
d1cd03e
Fix compatible endpoint scheme validation
davidmckayv
committed
178368f
Repair engine readiness compose install
davidmckayv
committed
06eb6e2
fix: preserve ask body read errors
davidmckayv
committed
a5a417d
fix(desktop): read managed bot logs for fallback ask failures
davidmckayv
committed
004f07a
fix(desktop): validate compatible endpoint credentials
davidmckayv
committed
53e8071
fix(desktop): invalidate configured loads on root edits
davidmckayv
committed
eacdd13
fix(langgraph): preserve providers for colon-bearing model IDs
davidmckayv
committed
ce1461a
fix(desktop): omit API keys from plan choices
davidmckayv
committed
4f98e69
fix(desktop): detect IPv6-only port conflicts
davidmckayv
committed
d47ed7d
fix(desktop): reject invalid provider endpoint hosts
davidmckayv
committed
a5126b5
fix(desktop): require a usable BYO agent URL host
davidmckayv
committed
72ee1fc
fix(desktop): surface Windows setup detection failures
davidmckayv
committed
e6fc796
fix(desktop): protect Linux vault files before writing secrets
davidmckayv
committed
be4c781
fix(app): contain static paths within the dist directory
davidmckayv
committed
82ea997
fix(app): refuse malformed static URL encodings
davidmckayv
committed
85f33fb
fix(desktop): block disabled Virtual Machine Platform
davidmckayv
committed
1b7bbf9
fix(app): wait for upstream websocket handshake
davidmckayv
committed
b5e6383
fix(desktop): give administrators actionable WSL setup instructions
davidmckayv
committed
e57a5df
fix(desktop): recognize localized WSL kernel versions
davidmckayv
committed
d8685b3
fix(app): refresh channel history notices after Bot activity
davidmckayv
committed
fc36eeb
fix(desktop): keep passive credential hydration out of protected storage
davidmckayv
committed
e71040b
fix(server): report unavailable connected-vendor guidance
davidmckayv
committed
37fe316
test(crewai): restore role test authentication token after teardown
davidmckayv
committed
1ef13d0
fix(desktop): use the OpenBot orb for app and tray icons
davidmckayv
committed
8160810
fix(desktop): reject incomplete DPAPI stdin writes
davidmckayv
committed
176bc27
fix(server): report standing instruction read failures
davidmckayv
committed
eee1860
fix(desktop): restore hidden window on macOS reopen
davidmckayv
committed
d7b965e
fix(desktop): preserve unreadable settings files
davidmckayv
committed
3c6ca95
fix(desktop): restore second instances outside the async listener
davidmckayv
committed
c66e4e1
fix(server): report skill selection read failures
davidmckayv
committed
99bb943
fix(mastra): default blank model identifiers
davidmckayv
committed
d093f06
fix(desktop): report Linux credential read failures
davidmckayv
committed
d6464ee
fix(agent-mastra): validate mastra listen port
davidmckayv
committed
ab1e239
fix(server): diagnose discovery audit write failures
davidmckayv
committed
02ff9a4
fix: normalize crewai blank model config
davidmckayv
committed
e4e416d
fix(desktop): fail closed on compose service inspection errors
davidmckayv
committed
b9669ad
fix(desktop): harden compose service inspection proofs
davidmckayv
committed
d369733
fix: validate configured ChatGPT auth file
davidmckayv
committed
1380d07
test(server): restore tool selection model env
davidmckayv
committed
1409407
test(server): prove tool selection env restoration
davidmckayv
committed
a189d25
test(server): harden tool selection env proof
davidmckayv
committed
0fd77de
fix(agent-crewai): project provider chat messages
davidmckayv
committed
96bbaf9
fix: route google provider through google genai
davidmckayv
committed
6ea30d8
fix(server): reject spoofed mastra governance context
davidmckayv
committed
13e62bf
fix(agent-crewai): forward caller tools to litellm
davidmckayv
committed
ec170c9
fix: pass anthropic base url to picked harness
davidmckayv
committed
0f145dc
test(server): clean up custom server upsert credential
davidmckayv
committed
dd699c5
fix(server): restrict tombstones to live channels
davidmckayv
committed
2cf94e3
fix: surface process cleanup failures
davidmckayv
committed
8953582
fix: propagate cleanup command failures
davidmckayv
committed
9ca933b
test: verify every secret-bearing compose port binding
davidmckayv
committed
c8012da
test(server): prove the current tool refusal audit payload
davidmckayv
committed
2671ec6
fix: reject unavailable Windows cleanup evidence
davidmckayv
committed
ceeb34c
fix: retain Windows pidfile after incomplete cleanup
davidmckayv
committed
2a5bbd5
fix: persist host pidfiles with strict atomic replacement
davidmckayv
committed
e4cc50c
test(server): restore borrowed Notion client credentials
davidmckayv
committed
9de5989
fix(desktop): verify Unix process ownership before cleanup
davidmckayv
committed
b632108
fix(server): preserve deleted Bot refusal through runtime clones
davidmckayv
committed
5f14d29
fix(app): validate built serving ports with shared contract
davidmckayv
committed
d33de26
fix(app): retain failed mount history notice
davidmckayv
committed
998c0bf
fix(app): restore durable history around shared message anchors
davidmckayv
committed
18996f9
fix(desktop): suppress credential authorization UI during normal actions
davidmckayv
committed
21348b0
fix(desktop): preserve existing installation encryption keys
davidmckayv
committed
76ca4ee
fix(langgraph): default blank providers before model routing
davidmckayv
committed
6d11512
fix(app): restore readable channel history on mount
davidmckayv
committed
d7ffe55
test(server): bind plugin audit assertions to each invocation
davidmckayv
committed
7712289
fix(desktop): recover one refused Keychain operation
davidmckayv
committed
54c51fa
fix(desktop): restore noninteractive Windows vault invocation
davidmckayv
committed
f851411
fix(langgraph): select defaults for the configured provider
davidmckayv
committed
ee1651e

Commits on Sep 10, 2026

fix(desktop): retire failed starts before retry cleanup
davidmckayv
committed
9cf899b
Merge main while preserving desktop recovery and audit handling
davidmckayv
committed
c9994ac
Use root-scoped file credential storage
davidmckayv
committed
6c42d0d
Add credential root boundary proof tests
davidmckayv
committed
9cd428e
test(server): prove fixture listener teardown
davidmckayv
committed
62a851c
fix(server): preserve handoff initiator through delivery
davidmckayv
committed
bd16f2d
test(server): bind handoff delivery signer proof
davidmckayv
committed
79a201a
fix(desktop): retain selected root for menu stop
davidmckayv
committed
5e2750d
fix(langgraph): bind and execute forwarded tools
davidmckayv
committed
fefcf15
fix app bot default to picked harness
davidmckayv
committed
a77b902
test: tighten bot default route fixture
davidmckayv
committed
db1b680
test: document bot route wiring cast
davidmckayv
committed
3de6105
fix(app): ignore self echoed channel activity
davidmckayv
committed
91a0e6f
fix(app): treat malformed thread history as unavailable
davidmckayv
committed
80e4c09
fix(server): filter reserved mastra context fields
davidmckayv
committed
100ab38
fix(app): reject decoded nul static paths
davidmckayv
committed
a8e77d4
fix(server): preload EventSource for production loader
davidmckayv
committed
e325294
test(server): accept windows loader db boundary
davidmckayv
committed
f6d8ad8
fix(scripts): stop legacy server on restart
davidmckayv
committed
ce81d08
fix(langgraph): preserve parallel tool call stream lifecycles
davidmckayv
committed
8d645f9
fix(app): bound stalled thread history reads
davidmckayv
committed
583efc6
style(server): wrap loader boundary assertion
davidmckayv
committed
9efe9d0
fix landing default agent selection
davidmckayv
committed
a0ef1b6
fix(computer): skip unavailable optional SPIRE sockets
davidmckayv
committed
cc148a4
fix(desktop): validate BYO harness URLs before persistence
davidmckayv
committed
61bd557
fix desktop start on dead compose services
davidmckayv
committed
623f0d7
fix(desktop): select bundled bot services by provider
davidmckayv
committed
d0eab4f
fix(desktop): report unreadable DPAPI credential files
davidmckayv
committed
9597a1a
fix(desktop): distinguish DPAPI read diagnostics
davidmckayv
committed
617d542
fix(desktop): clear saved model intent for no model
davidmckayv
committed
722c649
fix(desktop): preserve private storage file boundaries
davidmckayv
committed
4e5d0a4
fix(desktop): detect localized WSL1 status
davidmckayv
committed
d62ec47
fix(desktop): parse WSL default version label precisely
davidmckayv
committed
a84882b
fix(desktop): read WSL default version from registry
davidmckayv
committed
b694161
fix(desktop): fail loud on WSL registry read errors
davidmckayv
committed
ee7a73f
fix(desktop): keep WSL registry probe strict and readable
davidmckayv
committed
20edb11
docs(desktop): clarify WSL registry version probe
davidmckayv
committed
111e992
fix(desktop): fail loud on Windows MSI cleanup errors
davidmckayv
committed
863d1c2
test(desktop): gate MSI process proof to Unix
davidmckayv
committed
3fae77b
fix(desktop): keep Podman command failure evidence
davidmckayv
committed
7fb063a
test(desktop): gate Podman process fixture import
davidmckayv
committed
670e801
fix(desktop): reject line breaks in dotenv settings
davidmckayv
committed
bfaa26c
fix(compose): map selected harness callback host
davidmckayv
committed
ac99ffb
fix(desktop): fail closed on partial Windows host ownership
davidmckayv
committed
4e82aa5
fix(desktop): retire host children after ownership record failure
davidmckayv
committed
79a5a6d
fix(desktop): retain host ownership when cleanup fails
davidmckayv
committed
60da529
fix(desktop): verify root ownership before adopting running stack
davidmckayv
committed
fa5e2a4
fix(desktop): require Unix server port ownership before adoption
davidmckayv
committed
dfe5bac
fix(desktop): restore endpoint-scoped saved model credentials
davidmckayv
committed
61094c5
fix(app): report bot roster load failures
davidmckayv
committed
025f12c
fix bot route hidden agent detail lookup
davidmckayv
committed
409d696
fix bot route detail cache collision
davidmckayv
committed
a38c3e1
fix channel new agent load errors
davidmckayv
committed
69d94bd
fix channel new stale detail error state
davidmckayv
committed
24652e3
fix(server): cancel pending agent builds on Stop
davidmckayv
committed
504a764
fix home fallback agent selection
davidmckayv
committed
6c0d8b1
fix same-timestamp activity refresh
davidmckayv
committed
0955c6b
fix LangGraph test imports from repository root
davidmckayv
committed
8c475b2
fix empty history refresh retry
davidmckayv
committed
63666d8
fix no-text run activity reporting
davidmckayv
committed
0c4b552
fix cached channel activity restore
davidmckayv
committed
87c0302
fix desktop Start for saved compatible endpoints
davidmckayv
committed
d7abeac
fix empty bot agent query default
davidmckayv
committed
8c31494
fix BYO startup to skip the local harness service
davidmckayv
committed
4a8dce3
fix bundled agent registry eligibility across provider changes
davidmckayv
committed
b9b110f
Support container endpoint override for compatible models
davidmckayv
committed
07ca566
fix(app): encode agent IDs in API paths
davidmckayv
committed
cf6ed14
fix(server): authenticate picked harness without bundled bot
davidmckayv
committed
05851c0
fix(server): abort wrapped remote agent runs
davidmckayv
committed
0f45454
fix(server): canonicalize managed endpoint identity
davidmckayv
committed
03f36bb
test(compose): verify compatible endpoint resolution
davidmckayv
committed
934d61c
fix(desktop): retain ownership after partial host launch
davidmckayv
committed
c41342b
fix(server): scope tenant package grant cleanup
davidmckayv
committed
c20838b
fix(server): protect tenant package channel ownership
davidmckayv
committed
20b580c
fix(desktop): scope computer shutdown to deployment namespace
davidmckayv
committed
49327cd
fix(server): use selected compatible model for built-in agents
davidmckayv
committed
868ee21
test(supervisor): isolate health-capable Docker lifecycle fixtures
davidmckayv
committed
03ac0f5
fix(server): honor explicit openai compatible model
davidmckayv
committed
b84dc36
fix(desktop): restore only the selected owned deployment
davidmckayv
committed
577b463
fix(desktop): verify app listener ownership before adoption
davidmckayv
committed
e10ec5f
fix(desktop): keep Quit responsive during cleanup
davidmckayv
committed
3cd7f80
fix(desktop): cancel initial startup when Stop retires its run
davidmckayv
committed
7f9c8f3
fix(desktop): verify Windows parent process creation order
davidmckayv
committed
bc3925c
test(desktop): make native fixtures portable and isolate their environment
davidmckayv
committed
364c2a6
fix(desktop): confirm Unix descendants exit before stopping ancestors
davidmckayv
committed
6026fde
fix(desktop): stop Windows process trees without stale port sweeps
davidmckayv
committed
cee491b
fix(desktop): retry frozen dependency installs after partial failures
davidmckayv
committed
cf22437
fix(desktop): stop supervisor before snapshotting computers
davidmckayv
committed
2f6869d
fix(desktop): parse every Compose published port row
davidmckayv
committed
932d21a
fix(desktop): require current API readiness before startup succeeds
davidmckayv
committed
1a86b40
style(desktop): remove blank-comment trailing whitespace
davidmckayv
committed
b74ab27
test(desktop): preserve PowerShell in restricted Windows fixtures
davidmckayv
committed
463de36
test(desktop): serve readiness fixtures on both loopbacks
davidmckayv
committed
d4add44
fix(desktop): resolve setup navigation from Tauri configuration
davidmckayv
committed
6191732
test(desktop): name native fixture crates explicitly
davidmckayv
committed
0e16787
test(desktop): use platform local origin for mock IPC
davidmckayv
committed
5ef4199
ci(desktop): run library and shell regressions on every platform
davidmckayv
committed
d89b8bc
fix(desktop): include IPv6 listeners in Windows port ownership
davidmckayv
committed
07dbb75
fix(desktop): dispatch Stop shutdown on a blocking worker
davidmckayv
committed
26819da
fix(desktop): retain unresolved legacy Windows PID evidence
davidmckayv
committed
92360db
fix(desktop): preserve supervision through failed Start preflight
davidmckayv
committed
b823ade
fix(desktop): clean up owned listener test fixture
davidmckayv
committed
156bfc4
fix(desktop): record Windows supervisor replacements before success
davidmckayv
committed
5499c8d
fix(desktop): retain container ownership across failed Start retries
davidmckayv
committed
047fc55
fix(desktop): attribute empty answers to the selected endpoint
davidmckayv
committed
6d4cd41
fix(desktop): quiesce Unix launchers before descendant cleanup
davidmckayv
committed
47ff912
fix(desktop): retain runtime affinity for container cleanup
davidmckayv
committed
824e228

Commits on Sep 11, 2026

test(desktop): cover unavailable-engine shutdown recovery
davidmckayv
committed
f75ebb6
fix(desktop): retain recovery until the owned run is restored
davidmckayv
committed
988d564
test: preserve CI test stderr before exit
davidmckayv
committed
c6615e9
test: keep CI stderr regression deterministic
davidmckayv
committed
4bbf884
test: fix desktop ci fixture portability
davidmckayv
committed
880dc86
test: run ChatGPT token writer as host user
davidmckayv
committed
42faeed
test: fix inline podman runtime fixture
davidmckayv
committed
f058291
test: bind plugin audit JSON filters
davidmckayv
committed
a4b3c52
test: stop channel new mock leaks
davidmckayv
committed
7dabc51
ci: install desktop deps before root tests
davidmckayv
committed
ca054ea
chore: integrate current main for CI validation
davidmckayv
committed
0b729ec
fix: retain menu stop failures through setup navigation
davidmckayv
committed
d288cbc
test: repair merged plugin OAuth fixtures
davidmckayv
committed
5ef6d20
fix: preserve ChatGPT token store ownership on refresh
davidmckayv
committed
15b2ba3
fix: retain quit cleanup notice for setup recovery
davidmckayv
committed
496a31e
test(desktop): model local Podman fixture affinity
davidmckayv
committed
b4491f8