fix: 5 GUI issues — people 500, modal backdrop, device UX, audit

Issue #4: Fix People page 500 error — add ::timestamptz cast to
consent_grants query and use .isoformat() on datetime parameter.

Issue #5: Audit page verified working (200 OK) — no crash found.

Issue #3: Add .modal-overlay CSS with dark backdrop for action/memory/event
modals. Add .modal-close button styles.

Issue #1: Add collapsible 'Launch Agent Worker' setup guide to device
registration success card with copy-pasteable commands.

Issue #2: Add 'Next Steps — Using Your Device' section to device detail
page explaining device capabilities and linking to related pages.

Author: iamh2o

functions/hub_api/app.py

@@ -1902,9 +1902,9 @@ def gui_people(request: Request) -> Response:
                 SELECT consent_type, expires_at
                 FROM consent_grants
                 WHERE person_id = :person_id::uuid AND revoked_at IS NULL
-                  AND (expires_at IS NULL OR expires_at > :now)
+                  AND (expires_at IS NULL OR expires_at > :now::timestamptz)
             """,
-                {"person_id": person_id, "now": datetime.now(timezone.utc)},
+                {"person_id": person_id, "now": datetime.now(timezone.utc).isoformat()},
             )
 
             voice_consent = None

functions/hub_api/static/css/marvain.css

@@ -626,6 +626,41 @@ pre {
   border-top: 1px solid var(--color-gray-600);
 }
 
+/* Modal overlay — used by actions.html and other inline modals */
+.modal-overlay {
+  position: fixed;
+  inset: 0;
+  display: flex;
+  align-items: center;
+  justify-content: center;
+  background: rgba(0, 0, 0, 0.7);
+  z-index: 1000;
+}
+
+.modal-overlay .modal {
+  position: relative;
+  background: var(--color-gray-800);
+  border-radius: var(--radius-lg);
+  width: 100%;
+  max-height: 90vh;
+  overflow: auto;
+  box-shadow: var(--shadow-lg);
+}
+
+.modal-close {
+  background: none;
+  border: none;
+  color: var(--color-gray-400);
+  font-size: 1.5rem;
+  cursor: pointer;
+  line-height: 1;
+  padding: 0;
+}
+
+.modal-close:hover {
+  color: var(--color-white);
+}
+
 /* ==================== Page Header ==================== */
 .page-header {
   display: flex;

functions/hub_api/templates/device_detail.html

@@ -142,7 +142,24 @@ <h4 style="margin-bottom: var(--spacing-sm);">3. Run the Satellite Daemon</h4>
   --device-token YOUR_DEVICE_TOKEN</code></pre>
 
         <h4 style="margin-bottom: var(--spacing-sm);">4. Verify</h4>
-        <p style="color: var(--color-gray-300);">Once the daemon connects, this device's status will change to <span class="badge badge-success" style="font-size: 0.75rem;"><i class="fas fa-circle"></i> Online</span> and the <strong>Ping Device</strong> button above will receive a response.</p>
+        <p style="color: var(--color-gray-300); margin-bottom: var(--spacing-md);">Once the daemon connects, this device's status will change to <span class="badge badge-success" style="font-size: 0.75rem;"><i class="fas fa-circle"></i> Online</span> and the <strong>Ping Device</strong> button above will receive a response.</p>
+
+        <h4 style="margin-bottom: var(--spacing-sm);">5. Next Steps — Using Your Device</h4>
+        <p style="color: var(--color-gray-300); margin-bottom: var(--spacing-sm);">
+          Devices are satellite nodes in the Marvain agent hub. Once online, a device can:
+        </p>
+        <ul style="margin-left: var(--spacing-lg); margin-bottom: var(--spacing-md); color: var(--color-gray-300);">
+          <li><strong>Receive commands</strong> — The hub sends real-time instructions via WebSocket (e.g., play audio, capture data)</li>
+          <li><strong>Emit events</strong> — The daemon pushes events (sensor data, voice transcripts, presence changes) back to the hub</li>
+          <li><strong>Execute actions</strong> — Approved actions on the <a href="/actions" style="color: var(--color-highlight);">Actions</a> page can target this device</li>
+        </ul>
+        <p style="color: var(--color-gray-300); margin-bottom: var(--spacing-sm);"><strong>Explore further:</strong></p>
+        <ul style="margin-left: var(--spacing-lg); color: var(--color-gray-300);">
+          <li><a href="/events" style="color: var(--color-highlight);"><i class="fas fa-bolt"></i> Events</a> — View events emitted by this device</li>
+          <li><a href="/actions" style="color: var(--color-highlight);"><i class="fas fa-cogs"></i> Actions</a> — Create actions that target this device</li>
+          <li><a href="/memories" style="color: var(--color-highlight);"><i class="fas fa-brain"></i> Memories</a> — Browse memories derived from device interactions</li>
+          <li><a href="/livekit-test" style="color: var(--color-highlight);"><i class="fas fa-microphone"></i> LiveKit Test</a> — Test voice interaction with the agent</li>
+        </ul>
       </div>
     </details>
     {% endif %}

functions/hub_api/templates/devices.html

@@ -333,6 +333,49 @@ <h3 class="card-title" style="color: white;"><i class="fas fa-check-circle"></i>
         </div>
       </div>
 
+      <details style="margin-top: 1.5rem; background: var(--color-gray-700); border-radius: var(--radius-md); padding: 0;">
+        <summary style="cursor: pointer; color: var(--color-highlight); font-weight: 600; padding: var(--spacing-md); list-style: none; display: flex; align-items: center; gap: 0.5rem;">
+          <i class="fas fa-rocket"></i> Launch Agent Worker — Full Setup Guide
+          <i class="fas fa-chevron-down" style="margin-left: auto; font-size: 0.75rem;"></i>
+        </summary>
+        <div style="padding: 0 var(--spacing-md) var(--spacing-md);">
+          <h4 style="margin-bottom: var(--spacing-sm); margin-top: var(--spacing-sm);">1. Prerequisites</h4>
+          <ul style="margin-left: var(--spacing-lg); margin-bottom: var(--spacing-md); color: var(--color-gray-300);">
+            <li>Python 3.11+ with the <code>marvain</code> conda environment</li>
+            <li>LiveKit and OpenAI credentials configured in AWS Secrets Manager</li>
+            <li>Network access to the Hub WebSocket endpoint</li>
+          </ul>
+
+          <h4 style="margin-bottom: var(--spacing-sm);">2. Activate Environment</h4>
+          <div class="input-group" style="margin-bottom: var(--spacing-md);">
+            <textarea class="form-control" readonly id="device-env-cmd" rows="2"
+                      style="font-family: 'JetBrains Mono', monospace; font-size: 0.85rem; resize: none; background: var(--color-gray-900);">cd /path/to/marvain
+source marvain_activate</textarea>
+            <button type="button" class="btn btn-outline" onclick="copyToClipboard('device-env-cmd', 'Env command')">
+              <i class="fas fa-copy"></i>
+            </button>
+          </div>
+
+          <h4 style="margin-bottom: var(--spacing-sm);">3. Start the Satellite Daemon</h4>
+          <div class="input-group" style="margin-bottom: var(--spacing-md);">
+            <textarea class="form-control" readonly id="device-daemon-cmd" rows="3"
+                      style="font-family: 'JetBrains Mono', monospace; font-size: 0.85rem; resize: none; background: var(--color-gray-900);">python apps/remote_satellite/daemon.py \\
+  --hub-ws-url {{ ws_url }} \\
+  --device-token ${result.token}</textarea>
+            <button type="button" class="btn btn-outline" onclick="copyToClipboard('device-daemon-cmd', 'Daemon command')">
+              <i class="fas fa-copy"></i>
+            </button>
+          </div>
+
+          <h4 style="margin-bottom: var(--spacing-sm);">4. Verify Connection</h4>
+          <p style="color: var(--color-gray-300); margin-bottom: var(--spacing-sm);">
+            Once the daemon connects, the device status will change to
+            <span class="badge badge-success" style="font-size: 0.75rem;"><i class="fas fa-circle"></i> Online</span>
+            on this page. You can also use the <strong>Ping Device</strong> button on the device detail page to confirm connectivity.
+          </p>
+        </div>
+      </details>
+
       <div style="margin-top: 1.5rem; text-align: right;">
         <button type="button" class="btn btn-primary" onclick="dismissTokenResult()">
           <i class="fas fa-check"></i> Done - I've Copied the Token