2 commits

Author	SHA1	Message	Date
Claude	15c3c96fbb	feat(agentci): Clotho orchestrator and security hardening ... Adds the Clotho dual-run verification system and hardens the entire agent dispatch pipeline against command injection, token exposure, and SSH MitM attacks. Breaks the agentci→handlers circular dependency. Security: - SanitizePath (regex whitelist + filepath.Base) for all dispatch inputs - EscapeShellArg for shell argument safety - SecureSSHCommand (StrictHostKeyChecking=yes, BatchMode=yes) - ForgeToken removed from ticket JSON, transferred via .env with 0600 - ssh-keyscan on agent add populates known_hosts before first connection Clotho: - Spinner orchestrator determines Standard vs Dual execution mode - Config-driven via ClothoConfig (strategy, validation_threshold) - Agent runner supports claude/codex/gemini backends with dual-run - Divergence detection compares thread outputs via git diff API: - LoadActiveAgents() returns map[string]AgentConfig (no handlers import) - LoadClothoConfig() reads clotho section from config - Forge helpers: AssignIssue, EnsureLabel, AddIssueLabels 32 tests pass (19 agentci + 13 dispatch). Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-02-10 03:08:16 +00:00
Claude	d9f3b726f2	feat(agentci): package dispatch system for multi-agent deployment ... Config-driven agent targets replace hardcoded map so new agents can be added via CLI instead of recompiling. Includes setup script for bootstrapping agent machines and CLI commands for management. - Add pkg/agentci with config types and CRUD (LoadAgents, SaveAgent, etc.) - Add CLI: core ai agent {add,list,status,logs,setup,remove} - Add scripts/agent-setup.sh (SSH bootstrap: dirs, cron, prereq check) - Headless loads agents from ~/.core/config.yaml - Dispatch ticket includes forgejo_user for dynamic clone URLs - agent-runner.sh reads username from ticket JSON, not hardcoded Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-02-09 10:36:23 +00:00