feat: agent YAML parsing, engine API fixes & AIOX cockpit enhancements

.dockerignore

@@ -0,0 +1,21 @@
+node_modules
+dist
+dist-ssr
+.env
+.env.*
+!.env.example
+engine/node_modules
+engine/data
+engine/.workspace
+packages/cli/node_modules
+test-results
+coverage
+playwright-report
+storybook-static
+audit-screenshots
+.squads-design
+.codex
+.claude
+.git
+.DS_Store
+*.log

.env.deploy.example

@@ -0,0 +1,39 @@
+# ============================================================
+# AIOS Platform — Production .env for Docker Compose
+# ============================================================
+# Copy this file to .env on your VPS:
+#   cp .env.deploy.example .env
+#
+# Docker Compose reads .env automatically.
+# ============================================================
+
+# ─── REQUIRED ─────────────────────────────────────────────
+
+# Encryption key for the secrets vault. Generate with:
+#   openssl rand -hex 32
+ENGINE_SECRET=CHANGE_ME_GENERATE_WITH_openssl_rand_hex_32
+
+# ─── DOMAIN & SSL ─────────────────────────────────────────
+
+# Your domain (used by the VPS setup script)
+DOMAIN=aios.your-domain.com
+
+# ─── CORS (optional) ─────────────────────────────────────
+
+# Comma-separated allowed origins. Leave empty for same-origin.
+# CORS_ORIGINS=https://aios.your-domain.com
+
+# ─── OPTIONAL SERVICES ───────────────────────────────────
+
+# Telegram bot
+# TELEGRAM_BOT_TOKEN=123456789:ABCdefGHIjklMNOpqrsTUVwxyz
+# TELEGRAM_WEBHOOK_URL=https://aios.your-domain.com/telegram/webhook
+
+# Google OAuth
+# GOOGLE_CLIENT_ID=your-client-id.apps.googleusercontent.com
+# GOOGLE_CLIENT_SECRET=your-client-secret
+
+# WhatsApp (WAHA) — enable with: docker compose --profile messaging up
+# WHATSAPP_PROVIDER=waha
+# WAHA_API_KEY=your-waha-key
+# WAHA_SESSION=default

.env.example

@@ -0,0 +1,40 @@
+# ============================================================
+# AIOS Platform — Environment Variables
+# ============================================================
+# Copy this file to .env.development (local) or .env.production (cloud)
+#   cp .env.example .env.development
+# NEVER commit .env files with real credentials!
+#
+# Legend:
+#   REQUIRED  = must be set for the feature to work
+#   OPTIONAL  = has sensible defaults or enables extra functionality
+#   INTERNAL  = set automatically in Docker; ignore for local dev
+# ============================================================
+
+
+# ─── Core: Engine API ─────────────────────────── REQUIRED ──
+# The AIOS execution engine (Bun + Hono). Start with: npm run engine:dev
+VITE_ENGINE_URL=http://localhost:4002
+
+# ─── Core: Supabase ───────────────────────────── OPTIONAL ──
+# Persistent task storage & realtime. Without it, data stays in localStorage.
+# Get from: https://app.supabase.com → Project Settings → API
+VITE_SUPABASE_URL=
+VITE_SUPABASE_ANON_KEY=
+
+# ─── Core: Monitor ────────────────────────────── OPTIONAL ──
+# Standalone monitor service (port 4001). Not required for basic usage.
+# VITE_MONITOR_URL=http://localhost:4001
+
+# ─── Relay (cloud mode) ───────────────────────── OPTIONAL ──
+# WebSocket relay for remote engine access. Only for cloud deployments.
+# VITE_RELAY_URL=ws://localhost:8080
+# VITE_RELAY_HTTP_URL=http://localhost:8080
+
+# ─── WhatsApp ──────────────────────────────────── OPTIONAL ──
+# SSE event stream from engine. Enable after configuring WhatsApp on engine.
+# VITE_WHATSAPP_SSE_URL=/engine/whatsapp/events
+
+# ─── GitHub OAuth ──────────────────────────────── OPTIONAL ──
+# For GitHub integration features.
+# VITE_AUTH_GITHUB_CLIENT_ID=your-github-client-id

.env.local.example

@@ -0,0 +1,4 @@
+# Local development with relay server running locally
+VITE_MONITOR_URL=http://localhost:4001
+VITE_RELAY_URL=ws://localhost:8080
+VITE_RELAY_HTTP_URL=http://localhost:8080

.github/workflows/ci.yml

@@ -1,131 +1,98 @@
-name: CI
+name: Dashboard CI
 
 on:
   push:
     branches: [main, develop]
+    paths:
+      - 'dashboard/**'
+      - '.github/workflows/ci.yml'
   pull_request:
     branches: [main, develop]
+    paths:
+      - 'dashboard/**'
+      - '.github/workflows/ci.yml'
 
 env:
   NODE_VERSION: '20'
 
 jobs:
   # ─── Next.js Dashboard ──────────────────────────────────
-  nextjs-typecheck:
-    name: 'Next.js: TypeCheck'
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-node@v4
-        with:
-          node-version: ${{ env.NODE_VERSION }}
-          cache: 'npm'
-      - run: npm ci
-      - run: npx tsc --noEmit
-
-  nextjs-build:
-    name: 'Next.js: Build'
+  nextjs-lint:
+    name: 'Dashboard: Lint'
     runs-on: ubuntu-latest
-    needs: [nextjs-typecheck]
     steps:
       - uses: actions/checkout@v4
       - uses: actions/setup-node@v4
         with:
           node-version: ${{ env.NODE_VERSION }}
           cache: 'npm'
       - run: npm ci
-      - run: npm run build
-
-  # ─── Vite SPA (aios-platform) ──────────────────────────
-  spa-lint:
-    name: 'SPA: Lint'
-    runs-on: ubuntu-latest
-    defaults:
-      run:
-        working-directory: aios-platform
-    steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-node@v4
-        with:
-          node-version: ${{ env.NODE_VERSION }}
-          cache: 'npm'
-          cache-dependency-path: aios-platform/package-lock.json
-      - run: npm ci
       - run: npm run lint
 
-  spa-typecheck:
-    name: 'SPA: TypeCheck'
+  nextjs-typecheck:
+    name: 'Dashboard: TypeCheck'
     runs-on: ubuntu-latest
-    defaults:
-      run:
-        working-directory: aios-platform
     steps:
       - uses: actions/checkout@v4
       - uses: actions/setup-node@v4
         with:
           node-version: ${{ env.NODE_VERSION }}
           cache: 'npm'
-          cache-dependency-path: aios-platform/package-lock.json
       - run: npm ci
-      - run: npx tsc --noEmit
+      - run: npm run typecheck
 
-  spa-test:
-    name: 'SPA: Test (2453 tests)'
+  nextjs-test:
+    name: 'Dashboard: Test'
     runs-on: ubuntu-latest
-    defaults:
-      run:
-        working-directory: aios-platform
     steps:
       - uses: actions/checkout@v4
       - uses: actions/setup-node@v4
         with:
           node-version: ${{ env.NODE_VERSION }}
           cache: 'npm'
-          cache-dependency-path: aios-platform/package-lock.json
       - run: npm ci
-      - run: npx vitest run --project unit --reporter=verbose
-      - name: Upload coverage
+      - run: npm run test -- --reporter=verbose
+      - name: Test summary
         if: always()
-        uses: actions/upload-artifact@v4
-        with:
-          name: spa-coverage
-          path: aios-platform/coverage/
-          retention-days: 7
+        run: |
+          echo "### Test Results" >> $GITHUB_STEP_SUMMARY
+          echo '```' >> $GITHUB_STEP_SUMMARY
+          npm run test -- --reporter=json 2>/dev/null | tail -1 | node -e "
+            const d=JSON.parse(require('fs').readFileSync('/dev/stdin','utf8'));
+            console.log('Tests: '+d.numTotalTests+' | Passed: '+d.numPassedTests+' | Failed: '+d.numFailedTests);
+          " >> $GITHUB_STEP_SUMMARY 2>/dev/null || echo "See logs above" >> $GITHUB_STEP_SUMMARY
+          echo '```' >> $GITHUB_STEP_SUMMARY
 
-  spa-build:
-    name: 'SPA: Build'
+  nextjs-build:
+    name: 'Dashboard: Build'
     runs-on: ubuntu-latest
-    needs: [spa-lint, spa-typecheck, spa-test]
-    defaults:
-      run:
-        working-directory: aios-platform
+    needs: [nextjs-lint, nextjs-typecheck, nextjs-test]
     steps:
       - uses: actions/checkout@v4
       - uses: actions/setup-node@v4
         with:
           node-version: ${{ env.NODE_VERSION }}
           cache: 'npm'
-          cache-dependency-path: aios-platform/package-lock.json
       - run: npm ci
       - run: npm run build
       - name: Build size report
         run: |
           echo "### Build Size" >> $GITHUB_STEP_SUMMARY
           echo '```' >> $GITHUB_STEP_SUMMARY
-          du -sh dist/ >> $GITHUB_STEP_SUMMARY
+          du -sh .next/ >> $GITHUB_STEP_SUMMARY
           echo '```' >> $GITHUB_STEP_SUMMARY
 
-  # ─── Engine (Bun/Hono) ─────────────────────────────────
-  engine-test:
-    name: 'Engine: Test (98 tests)'
+  # ─── Quality Metrics Gate ────────────────────────────────
+  metrics-gate:
+    name: 'Dashboard: Metrics Gate'
     runs-on: ubuntu-latest
-    defaults:
-      run:
-        working-directory: aios-platform/engine
+    needs: [nextjs-lint, nextjs-typecheck, nextjs-test]
     steps:
       - uses: actions/checkout@v4
-      - uses: oven-sh/setup-bun@v2
+      - uses: actions/setup-node@v4
         with:
-          bun-version: latest
-      - run: bun install
-      - run: bun test tests/unit/
+          node-version: ${{ env.NODE_VERSION }}
+          cache: 'npm'
+      - run: npm ci
+      - name: Run metrics check
+        run: node scripts/metrics.mjs --ci

.github/workflows/deploy.yml

@@ -0,0 +1,110 @@
+name: Deploy
+
+on:
+  push:
+    branches:
+      - main
+      - develop
+  workflow_dispatch:
+    inputs:
+      environment:
+        description: 'Deployment environment'
+        required: true
+        default: 'staging'
+        type: choice
+        options:
+          - staging
+          - production
+
+env:
+  NODE_VERSION: '20'
+
+jobs:
+  build:
+    name: Build
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+
+      - name: Setup Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: ${{ env.NODE_VERSION }}
+          cache: 'npm'
+
+      - name: Install dependencies
+        run: npm ci
+
+      - name: Run tests
+        run: npm run test:run
+
+      - name: Build application
+        run: npm run build
+        env:
+          VITE_API_URL: ${{ secrets.VITE_API_URL }}
+          VITE_APP_ENV: ${{ github.ref == 'refs/heads/main' && 'production' || 'staging' }}
+
+      - name: Upload build artifacts
+        uses: actions/upload-artifact@v4
+        with:
+          name: build-${{ github.sha }}
+          path: dist/
+          retention-days: 7
+
+  deploy-staging:
+    name: Deploy to Staging
+    needs: build
+    runs-on: ubuntu-latest
+    if: github.ref == 'refs/heads/develop' || (github.event_name == 'workflow_dispatch' && github.event.inputs.environment == 'staging')
+    environment:
+      name: staging
+      url: ${{ vars.STAGING_URL }}
+    steps:
+      - name: Download build artifacts
+        uses: actions/download-artifact@v4
+        with:
+          name: build-${{ github.sha }}
+          path: dist/
+
+      - name: Deploy to staging
+        run: |
+          echo "Deploying to staging environment..."
+          # Add your deployment commands here
+          # Example: aws s3 sync dist/ s3://${{ secrets.STAGING_BUCKET }} --delete
+          # Example: netlify deploy --dir=dist --site=${{ secrets.NETLIFY_SITE_ID }}
+          echo "Deployment completed!"
+
+  deploy-production:
+    name: Deploy to Production
+    needs: build
+    runs-on: ubuntu-latest
+    if: github.ref == 'refs/heads/main' || (github.event_name == 'workflow_dispatch' && github.event.inputs.environment == 'production')
+    environment:
+      name: production
+      url: ${{ vars.PRODUCTION_URL }}
+    steps:
+      - name: Download build artifacts
+        uses: actions/download-artifact@v4
+        with:
+          name: build-${{ github.sha }}
+          path: dist/
+
+      - name: Deploy to production
+        run: |
+          echo "Deploying to production environment..."
+          # Add your deployment commands here
+          # Example: aws s3 sync dist/ s3://${{ secrets.PRODUCTION_BUCKET }} --delete
+          # Example: netlify deploy --dir=dist --site=${{ secrets.NETLIFY_SITE_ID }} --prod
+          echo "Deployment completed!"
+
+  notify:
+    name: Notify
+    needs: [deploy-staging, deploy-production]
+    if: always() && (needs.deploy-staging.result == 'success' || needs.deploy-production.result == 'success')
+    runs-on: ubuntu-latest
+    steps:
+      - name: Send notification
+        run: |
+          echo "Deployment notification sent!"
+          # Add notification logic here (Slack, Discord, email, etc.)