fix: drawer nav highlight froze on the first route ...

GnNavList captures $route as a one-shot snapshot in setup; vue-router 4
replaces the route object on navigation, so the kit's isRouteActive kept
the stale path and Dashboard stayed highlighted everywhere. Compute the
active flag ourselves from a reactive useRoute() and let the kit render
from item.active; links still SPA-navigate via onSelect + router.push.
Dev proxy retargeted to the demo (8022).

Co-Authored-By: Claude Code <noreply@anthropic.com>

fix: webhook route — verify+parse via ctx parts, not GAuthClient method ...

verify_and_parse_webhook exists only on GAuthClient; the route holds
HmacWebhookVerifier + JsonWebhookParser directly, so call verify() and
parse() separately (signature itself was always fine — the AttributeError
landed in the 401 bucket).

Co-Authored-By: Claude Code <noreply@anthropic.com>

chore: demo port 8022 in .env.example ...

Co-Authored-By: Claude Code <noreply@anthropic.com>

feat: new logo for the Verdant design — dashboard bars on a screen tile ...

Co-Authored-By: Claude Code <noreply@anthropic.com>

feat: close the panel behind gnexus-auth (OAuth PKCE) ...

Auth off by default (client_id empty). When GHARD_AUTH_CLIENT_ID is set,
the web UI gets a creds-style sign-in gate: splash -> /me -> login screen
(OAuth starts from the click, not page load). Sessions and OAuth state
live in SQLite (survive restarts); webhook endpoint applies global_logout/
profile updates. Scripts/MCP keep working with the Bearer token, agents
keep X-Server-Key ingest. Includes compose env passthrough, README guide.

Co-Authored-By: Claude Code <noreply@anthropic.com>

feat: upgrade to gnexus-ui-kit 1.0, adopt Verdant color theme ...

Kit 0.4.0 → 1.0.0 (git dep pinned to master): rounded panels, softer
accents, tabs as segment switcher, page-header scan animation removed
by the kit itself. Custom overrides dropped where the kit now handles
them (48px topbar brand).

Theme: kit-verdant.css import (exports map only whitelists kit.css in
1.0 — theme file resolved through a vite alias until the kit ships
theme exports). Chart palette rebuilt for Verdant and re-validated
(L 0.48–0.67, chroma, CVD, contrast on #1E2522). Logo/favicon
recolored to the Verdant hues. allow-git=git.gnexus.space in .npmrc
for npm 12 git dependencies.

Co-Authored-By: Claude Code <noreply@anthropic.com>

feat: network storage section — panel probes mounted shares itself ...

Backend: shares + share_samples tables, background probe loop
(os.statvfs every GHARD_SHARE_INTERVAL, 7-day retention, ok=0 when
the mount is unreachable), CRUD + samples API, instant first sample
on create/update, shares in MCP panel_overview.

Frontend: /storage page — share cards with status badge/progress/
used-free-total, 24h fill chart, add/delete via modal + confirm.
ChartLine shows a visible point while there are fewer than 3 samples.

README: CIFS/NFS mount + fstab examples, GHARD_SHARE_INTERVAL row.

Co-Authored-By: Claude Code <noreply@anthropic.com>

feat: MCP server at /mcp — AI agents read server state from the panel ...

Streamable HTTP, stateless, JSON responses (proxy-friendly). Tools:
panel_overview (fleet summary), server_details (full current state),
server_history (downsampled metrics history). ASGI endpoint registered
directly on FastAPI routes (Mount misses exact /mcp) and the MCP session
manager runs in the app lifespan. mcp SDK pinned >=1.10,<2. README:
tool table, claude mcp add example, token caveat.

Co-Authored-By: Claude Code <noreply@anthropic.com>

feat: deploy.sh — one-command agent rollout over SSH (+ README guide) ...

deploy.sh per host: create panel server entry (reuse existing,
--recreate for a fresh key) -> scp agent files -> install.sh via sudo ->
wait for first packet. Non-interactive and idempotent, designed for
AI-agent-driven deploys; README includes a ready-made prompt.

Co-Authored-By: Claude Code <noreply@anthropic.com>

feat: English UI, no-login API, logo/favicon, layout fixes ...

- UI fully translated to English (dashboard, server page, toasts, formatters)
- login removed: GHARD_ADMIN_TOKEN is optional now (unset = open API);
  agent key auth untouched; README/.env.example updated
- SVG logo + favicon (monitor with pulse, kit-style)
- reactivity: dashboard poll 5s, server 5s, history 10s
- layout: metric cards full-row flex, metric value nowrap,
  info/note 50/50 grid, topbar logo 48x48, server card max-width 420px,
  uptime on its own line, delete confirmed via GnConfirmDialog
- docker: ca-certificates for npm git dependency

Co-Authored-By: Claude Code <noreply@anthropic.com>

feat: stage 3 — Vue web UI (dashboard, server page, charts) + docker build ...

Frontend (Vue 3 + Vite, gnexus-ui-kit, chart.js):
- login by admin token (localStorage, Bearer)
- dashboard: server cards with status, CPU/RAM/disk progress, net MB/s, note
- server page: metric cards, info (hostname/os/kernel/ips), editable note,
  history charts (1ч/6ч/24ч/7д), tabs: overview/disks/net/processes/docker
- create-server flow with one-time key display + install command

Backend: serve built SPA from panel/backend/static (assets mount + fallback)

Docker: multi-stage build (node:22 → npm ci/build → static into python image),
build context moved to repo root, .dockerignore added

Co-Authored-By: Claude Code <noreply@anthropic.com>

docs: full deployment guide in README (panel, agent, proxy, update, backup) ...

Co-Authored-By: Claude Code <noreply@anthropic.com>

feat: stage 2 — hard-monitor agent with install.sh and systemd unit ...

- hard_monitor.py: stateless collector (psutil + requests) — identity
  (hostname/os/kernel/ips with virtual interfaces filtered), cpu/load,
  memory, disks, net counters, top processes by cpu, docker containers,
  temps into extra; --once and --dry-run modes, .env parser
- install.sh: root install into /opt/hard-monitor (venv, .env 600,
  systemd unit enable --now, idempotent)
- tested end-to-end: real agent -> panel ingest -> dashboard summary
  with net rates computed from counter deltas

Co-Authored-By: Claude Code <noreply@anthropic.com>

feat: stage 1 — panel skeleton (FastAPI + SQLite) and ingest API ...

- FastAPI backend: config (pydantic-settings, GHARD_* env), aiosqlite + WAL
- SQLite schema: servers, metrics, events
- POST /api/v1/ingest: auth by X-Server-Key (sha256 hash), net rates in MB/s
  computed on panel from raw counter deltas, server card upsert
- Servers API: create (key shown once), list with dashboard summary,
  detail, PATCH name/note, delete, metrics history
- Dockerfile + docker-compose with persistent volume

Co-Authored-By: Claude Code <noreply@anthropic.com>