3 commits

Author	SHA1	Message	Date
Claude	23b82482f2	refactor: rename module from github.com/host-uk/core to forge.lthn.ai/core/cli ... Move module identity to our own Forgejo instance. All import paths updated across 434 Go files, sub-module go.mod files, and go.work. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-02-16 05:53:52 +00:00
Claude	e0619280fb	fix(agentci): resolve agents by Forgejo username, not config key ... Adds FindByForgejoUser() to Spinner so dispatch matches issues assigned to Forgejo users (Virgil, Claude, Charon) even when the agent config key differs (e.g. Hypnos → forgejo_user: Claude). Searches config key first (direct match), then ForgejoUser field. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-02-10 03:08:17 +00:00
Claude	15c3c96fbb	feat(agentci): Clotho orchestrator and security hardening ... Adds the Clotho dual-run verification system and hardens the entire agent dispatch pipeline against command injection, token exposure, and SSH MitM attacks. Breaks the agentci→handlers circular dependency. Security: - SanitizePath (regex whitelist + filepath.Base) for all dispatch inputs - EscapeShellArg for shell argument safety - SecureSSHCommand (StrictHostKeyChecking=yes, BatchMode=yes) - ForgeToken removed from ticket JSON, transferred via .env with 0600 - ssh-keyscan on agent add populates known_hosts before first connection Clotho: - Spinner orchestrator determines Standard vs Dual execution mode - Config-driven via ClothoConfig (strategy, validation_threshold) - Agent runner supports claude/codex/gemini backends with dual-run - Divergence detection compares thread outputs via git diff API: - LoadActiveAgents() returns map[string]AgentConfig (no handlers import) - LoadClothoConfig() reads clotho section from config - Forge helpers: AssignIssue, EnsureLabel, AddIssueLabels 32 tests pass (19 agentci + 13 dispatch). Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-02-10 03:08:16 +00:00