2025-10-28 21:42:29 +00:00
|
|
|
version: '3'
|
|
|
|
|
|
2026-02-01 10:55:57 +00:00
|
|
|
vars:
|
2026-02-08 13:25:06 +00:00
|
|
|
# SemVer 2.0.0 build variables
|
|
|
|
|
SEMVER_TAG:
|
|
|
|
|
sh: git describe --tags --abbrev=0 2>/dev/null || echo "0.0.0"
|
|
|
|
|
SEMVER_VERSION:
|
|
|
|
|
sh: echo "{{.SEMVER_TAG}}" | sed 's/^v//'
|
|
|
|
|
SEMVER_COMMITS:
|
|
|
|
|
sh: git rev-list {{.SEMVER_TAG}}..HEAD --count 2>/dev/null || echo "0"
|
|
|
|
|
SEMVER_COMMIT:
|
|
|
|
|
sh: git rev-parse --short HEAD 2>/dev/null || echo "unknown"
|
|
|
|
|
SEMVER_DATE:
|
|
|
|
|
sh: date -u +%Y%m%d
|
|
|
|
|
SEMVER_PRERELEASE:
|
|
|
|
|
sh: '[ "{{.SEMVER_COMMITS}}" = "0" ] && echo "" || echo "dev.{{.SEMVER_COMMITS}}"'
|
|
|
|
|
# ldflags
|
2026-02-16 06:01:28 +00:00
|
|
|
PKG: "forge.lthn.ai/core/cli/pkg/cli"
|
2026-02-08 13:25:06 +00:00
|
|
|
LDFLAGS_BASE: >-
|
|
|
|
|
-X {{.PKG}}.AppVersion={{.SEMVER_VERSION}}
|
|
|
|
|
-X {{.PKG}}.BuildCommit={{.SEMVER_COMMIT}}
|
|
|
|
|
-X {{.PKG}}.BuildDate={{.SEMVER_DATE}}
|
|
|
|
|
-X {{.PKG}}.BuildPreRelease={{.SEMVER_PRERELEASE}}
|
2026-02-02 04:22:00 +00:00
|
|
|
# Development build: includes debug info
|
|
|
|
|
LDFLAGS: "{{.LDFLAGS_BASE}}"
|
|
|
|
|
# Release build: strips debug info and symbol table for smaller binary
|
|
|
|
|
LDFLAGS_RELEASE: "-s -w {{.LDFLAGS_BASE}}"
|
2026-02-08 13:25:06 +00:00
|
|
|
# Compat alias
|
|
|
|
|
VERSION:
|
|
|
|
|
sh: git describe --tags --exact-match 2>/dev/null || echo "dev"
|
2026-02-01 10:55:57 +00:00
|
|
|
|
2025-10-28 21:42:29 +00:00
|
|
|
tasks:
|
2026-01-30 22:29:20 +00:00
|
|
|
# --- CLI Management ---
|
2026-01-30 22:11:35 +00:00
|
|
|
cli:build:
|
2026-02-02 04:22:00 +00:00
|
|
|
desc: "Build core CLI to ./bin/core (dev build with debug info)"
|
2026-01-30 22:11:35 +00:00
|
|
|
cmds:
|
2026-02-01 10:55:57 +00:00
|
|
|
- go build -ldflags '{{.LDFLAGS}}' -o ./bin/core .
|
2026-01-30 22:11:35 +00:00
|
|
|
|
2026-02-02 04:22:00 +00:00
|
|
|
cli:build:release:
|
|
|
|
|
desc: "Build core CLI for release (smaller binary, no debug info)"
|
|
|
|
|
cmds:
|
|
|
|
|
- go build -ldflags '{{.LDFLAGS_RELEASE}}' -o ./bin/core .
|
|
|
|
|
|
2026-01-30 22:29:20 +00:00
|
|
|
cli:install:
|
2026-02-02 04:22:00 +00:00
|
|
|
desc: "Install core CLI to system PATH (dev build)"
|
2026-01-30 22:11:35 +00:00
|
|
|
cmds:
|
2026-02-01 10:55:57 +00:00
|
|
|
- go install -ldflags '{{.LDFLAGS}}' .
|
2026-01-30 22:11:35 +00:00
|
|
|
|
2026-02-02 04:22:00 +00:00
|
|
|
cli:install:release:
|
|
|
|
|
desc: "Install core CLI for release (smaller binary)"
|
|
|
|
|
cmds:
|
|
|
|
|
- go install -ldflags '{{.LDFLAGS_RELEASE}}' .
|
|
|
|
|
|
2026-01-30 22:29:20 +00:00
|
|
|
# --- Development ---
|
2025-10-28 21:42:29 +00:00
|
|
|
test:
|
2026-01-30 22:29:20 +00:00
|
|
|
desc: "Run all tests"
|
2025-10-28 21:42:29 +00:00
|
|
|
cmds:
|
2026-01-30 22:29:20 +00:00
|
|
|
- core test
|
2025-10-30 14:18:37 +00:00
|
|
|
|
2026-01-30 22:29:20 +00:00
|
|
|
test:verbose:
|
|
|
|
|
desc: "Run all tests with verbose output"
|
2025-10-30 14:18:37 +00:00
|
|
|
cmds:
|
2026-01-30 22:29:20 +00:00
|
|
|
- core test --verbose
|
2025-10-30 14:18:37 +00:00
|
|
|
|
2026-01-30 22:29:20 +00:00
|
|
|
test:run:
|
|
|
|
|
desc: "Run specific test (use: task test:run -- TestName)"
|
2025-10-30 14:18:37 +00:00
|
|
|
cmds:
|
2026-01-30 22:29:20 +00:00
|
|
|
- core test --run {{.CLI_ARGS}}
|
2025-10-30 14:18:37 +00:00
|
|
|
|
2026-01-30 22:29:20 +00:00
|
|
|
cov:
|
|
|
|
|
desc: "Run tests with coverage report"
|
2025-10-30 14:18:37 +00:00
|
|
|
cmds:
|
2026-01-30 22:29:20 +00:00
|
|
|
- core go cov
|
2025-10-30 14:18:37 +00:00
|
|
|
|
feat: BugSETI app, WebSocket hub, browser automation, and MCP tools (#336)
* feat: add security logging and fix framework regressions
This commit implements comprehensive security event logging and resolves critical regressions in the core framework.
Security Logging:
- Enhanced `pkg/log` with a `Security` level and helper.
- Added `log.Username()` to consistently identify the executing user.
- Instrumented GitHub CLI auth, Agentic configuration, filesystem sandbox, MCP handlers, and MCP TCP transport with security logs.
- Added `SecurityStyle` to the CLI for consistent visual representation of security events.
UniFi Security (CodeQL):
- Refactored `pkg/unifi` to remove hardcoded `InsecureSkipVerify`, resolving a high-severity alert.
- Added a `--verify-tls` flag and configuration option to control TLS verification.
- Updated command handlers to support the new verification parameter.
Framework Fixes:
- Restored original signatures for `MustServiceFor`, `Config()`, and `Display()` in `pkg/framework/core`, which had been corrupted during a merge.
- Fixed `pkg/framework/framework.go` and `pkg/framework/core/runtime_pkg.go` to match the restored signatures.
- These fixes resolve project-wide compilation errors caused by the signature mismatches.
I encountered significant blockers due to a corrupted state of the `dev` branch after a merge, which introduced breaking changes in the core framework's DI system. I had to manually reconcile these signatures with the expected usage across the codebase to restore build stability.
* feat(mcp): add RAG tools (query, ingest, collections)
Add vector database tools to the MCP server for RAG operations:
- rag_query: Search for relevant documentation using semantic similarity
- rag_ingest: Ingest files or directories into the vector database
- rag_collections: List available collections
Uses existing internal/cmd/rag exports (QueryDocs, IngestDirectory, IngestFile)
and pkg/rag for Qdrant client access. Default collection is "hostuk-docs"
with topK=5 for queries.
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
* feat(mcp): add metrics tools (record, query)
Add MCP tools for recording and querying AI/security metrics events.
The metrics_record tool writes events to daily JSONL files, and the
metrics_query tool provides aggregated statistics by type, repo, and agent.
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
* feat: add 'core mcp serve' command
Add CLI command to start the MCP server for AI tool integration.
- Create internal/cmd/mcpcmd package with serve subcommand
- Support --workspace flag for directory restriction
- Handle SIGINT/SIGTERM for clean shutdown
- Register in full.go build variant
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
* feat(ws): add WebSocket hub package for real-time streaming
Add pkg/ws package implementing a hub pattern for WebSocket connections:
- Hub manages client connections, broadcasts, and channel subscriptions
- Client struct represents connected WebSocket clients
- Message types: process_output, process_status, event, error, ping/pong
- Channel-based subscription system (subscribe/unsubscribe)
- SendProcessOutput and SendProcessStatus for process streaming integration
- Full test coverage including concurrency tests
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
* feat(mcp): add process management and WebSocket MCP tools
Add MCP tools for process management:
- process_start: Start a new external process
- process_stop: Gracefully stop a running process
- process_kill: Force kill a process
- process_list: List all managed processes
- process_output: Get captured process output
- process_input: Send input to process stdin
Add MCP tools for WebSocket:
- ws_start: Start WebSocket server for real-time streaming
- ws_info: Get hub statistics (clients, channels)
Update Service struct with optional process.Service and ws.Hub fields,
new WithProcessService and WithWSHub options, getter methods, and
Shutdown method for cleanup.
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
* feat(webview): add browser automation package via Chrome DevTools Protocol
Add pkg/webview package for browser automation:
- webview.go: Main interface with Connect, Navigate, Click, Type, QuerySelector, Screenshot, Evaluate
- cdp.go: Chrome DevTools Protocol WebSocket client implementation
- actions.go: DOM action types (Click, Type, Hover, Scroll, etc.) and ActionSequence builder
- console.go: Console message capture and filtering with ConsoleWatcher and ExceptionWatcher
- angular.go: Angular-specific helpers for router navigation, component access, and Zone.js stability
Add MCP tools for webview:
- webview_connect/disconnect: Connection management
- webview_navigate: Page navigation
- webview_click/type/query/wait: DOM interaction
- webview_console: Console output capture
- webview_eval: JavaScript execution
- webview_screenshot: Screenshot capture
Add documentation:
- docs/mcp/angular-testing.md: Guide for Angular application testing
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
* docs: document new packages and BugSETI application
- Update CLAUDE.md with documentation for:
- pkg/ws (WebSocket hub for real-time streaming)
- pkg/webview (Browser automation via CDP)
- pkg/mcp (MCP server tools: process, ws, webview)
- BugSETI application overview
- Add comprehensive README for BugSETI with:
- Installation and configuration guide
- Usage workflow documentation
- Architecture overview
- Contributing guidelines
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
* feat(bugseti): add BugSETI system tray app with auto-update
BugSETI - Distributed Bug Fixing like SETI@home but for code
Features:
- System tray app with Wails v3
- GitHub issue fetching with label filters
- Issue queue with priority management
- AI context seeding via seed-agent-developer skill
- Automated PR submission flow
- Stats tracking and leaderboard
- Cross-platform notifications
- Self-updating with stable/beta/nightly channels
Includes:
- cmd/bugseti: Main application with Angular frontend
- internal/bugseti: Core services (fetcher, queue, seeder, submit, config, stats, notify)
- internal/bugseti/updater: Auto-update system (checker, downloader, installer)
- .github/workflows/bugseti-release.yml: CI/CD for all platforms
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
* fix: resolve import cycle and code duplication
- Remove pkg/log import from pkg/io/local to break import cycle
(pkg/log/rotation.go imports pkg/io, creating circular dependency)
- Use stderr logging for security events in sandbox escape detection
- Remove unused sync/atomic import from core.go
- Fix duplicate LogSecurity function declarations in cli/log.go
- Update workspace/service.go Crypt() call to match interface
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
* fix: update tests for new function signatures and format code
- Update core_test.go: Config(), Display() now panic instead of returning error
- Update runtime_pkg_test.go: sr.Config() now panics instead of returning error
- Update MustServiceFor tests to use assert.Panics
- Format BugSETI, MCP tools, and webview packages with gofmt
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
---------
Co-authored-by: Snider <631881+Snider@users.noreply.github.com>
Co-authored-by: Claude <developers@lethean.io>
Co-authored-by: Claude Opus 4.5 <noreply@anthropic.com>
2026-02-05 17:22:05 +00:00
|
|
|
cov-view:
|
|
|
|
|
desc: "Open HTML coverage report"
|
|
|
|
|
cmds:
|
|
|
|
|
- core go cov --open
|
|
|
|
|
|
2026-01-30 22:29:20 +00:00
|
|
|
fmt:
|
|
|
|
|
desc: "Format Go code"
|
|
|
|
|
cmds:
|
|
|
|
|
- core go fmt
|
|
|
|
|
|
|
|
|
|
lint:
|
|
|
|
|
desc: "Run linter"
|
|
|
|
|
cmds:
|
|
|
|
|
- core go lint
|
|
|
|
|
|
|
|
|
|
mod:tidy:
|
|
|
|
|
desc: "Run go mod tidy"
|
|
|
|
|
cmds:
|
|
|
|
|
- core go mod tidy
|
|
|
|
|
|
|
|
|
|
# --- Quality Assurance ---
|
|
|
|
|
qa:
|
|
|
|
|
desc: "Run QA: fmt, vet, lint, test"
|
|
|
|
|
cmds:
|
|
|
|
|
- core go qa
|
|
|
|
|
|
|
|
|
|
qa:quick:
|
|
|
|
|
desc: "Quick QA: fmt, vet, lint only"
|
2025-10-30 14:18:37 +00:00
|
|
|
cmds:
|
2026-01-30 22:29:20 +00:00
|
|
|
- core go qa quick
|
2025-10-30 14:18:37 +00:00
|
|
|
|
2026-01-30 22:29:20 +00:00
|
|
|
qa:full:
|
|
|
|
|
desc: "Full QA: + race, vuln, security"
|
2025-10-30 14:18:37 +00:00
|
|
|
cmds:
|
2026-01-30 22:29:20 +00:00
|
|
|
- core go qa full
|
2026-01-30 13:11:58 +00:00
|
|
|
|
2026-01-30 22:29:20 +00:00
|
|
|
qa:fix:
|
|
|
|
|
desc: "QA with auto-fix"
|
|
|
|
|
cmds:
|
|
|
|
|
- core go qa --fix
|
|
|
|
|
|
|
|
|
|
# --- Build ---
|
|
|
|
|
build:
|
|
|
|
|
desc: "Build project with auto-detection"
|
|
|
|
|
cmds:
|
|
|
|
|
- core build
|
|
|
|
|
|
|
|
|
|
build:ci:
|
|
|
|
|
desc: "Build for CI (all targets, checksums)"
|
|
|
|
|
cmds:
|
|
|
|
|
- core build --ci
|
|
|
|
|
|
|
|
|
|
# --- Environment ---
|
|
|
|
|
doctor:
|
|
|
|
|
desc: "Check development environment"
|
|
|
|
|
cmds:
|
|
|
|
|
- core doctor
|
|
|
|
|
|
|
|
|
|
doctor:verbose:
|
|
|
|
|
desc: "Check environment with details"
|
|
|
|
|
cmds:
|
|
|
|
|
- core doctor --verbose
|
|
|
|
|
|
|
|
|
|
# --- Code Review ---
|
|
|
|
|
review:
|
|
|
|
|
desc: "Run CodeRabbit review"
|
|
|
|
|
cmds:
|
|
|
|
|
- coderabbit review --prompt-only
|
|
|
|
|
|
|
|
|
|
check:
|
|
|
|
|
desc: "Tidy, test, and review"
|
|
|
|
|
cmds:
|
|
|
|
|
- task: mod:tidy
|
|
|
|
|
- task: test
|
|
|
|
|
- task: review
|
|
|
|
|
|
|
|
|
|
# --- i18n ---
|
2026-01-30 13:11:58 +00:00
|
|
|
i18n:generate:
|
2026-01-30 22:29:20 +00:00
|
|
|
desc: "Regenerate i18n key constants"
|
2026-01-30 13:11:58 +00:00
|
|
|
cmds:
|
|
|
|
|
- go generate ./pkg/i18n/...
|
2026-01-30 13:18:58 +00:00
|
|
|
|
|
|
|
|
i18n:validate:
|
2026-01-30 22:29:20 +00:00
|
|
|
desc: "Validate i18n key usage"
|
2026-01-30 13:18:58 +00:00
|
|
|
cmds:
|
2026-01-30 22:11:35 +00:00
|
|
|
- go run ./internal/tools/i18n-validate ./...
|
2026-01-30 22:29:20 +00:00
|
|
|
|
2026-02-06 22:50:18 +00:00
|
|
|
# --- Core IDE (Wails v3) ---
|
|
|
|
|
ide:dev:
|
|
|
|
|
desc: "Run Core IDE in Wails dev mode"
|
|
|
|
|
dir: cmd/core-ide
|
|
|
|
|
cmds:
|
|
|
|
|
- cd frontend && npm install && npm run build
|
|
|
|
|
- wails3 dev
|
|
|
|
|
|
|
|
|
|
ide:build:
|
|
|
|
|
desc: "Build Core IDE production binary"
|
|
|
|
|
dir: cmd/core-ide
|
|
|
|
|
cmds:
|
|
|
|
|
- cd frontend && npm install && npm run build
|
|
|
|
|
- wails3 build
|
|
|
|
|
|
|
|
|
|
ide:frontend:
|
|
|
|
|
desc: "Build Core IDE frontend only"
|
|
|
|
|
dir: cmd/core-ide/frontend
|
|
|
|
|
cmds:
|
|
|
|
|
- npm install
|
|
|
|
|
- npm run build
|
|
|
|
|
|
|
|
|
|
# --- Core App (FrankenPHP + Wails v3) ---
|
|
|
|
|
app:setup:
|
|
|
|
|
desc: "Install PHP-ZTS build dependency for Core App"
|
|
|
|
|
cmds:
|
|
|
|
|
- brew tap shivammathur/php 2>/dev/null || true
|
|
|
|
|
- brew install shivammathur/php/php@8.4-zts
|
|
|
|
|
|
|
|
|
|
app:composer:
|
|
|
|
|
desc: "Install Laravel dependencies for Core App"
|
|
|
|
|
dir: cmd/core-app/laravel
|
|
|
|
|
cmds:
|
|
|
|
|
- composer install --no-dev --optimize-autoloader --no-interaction
|
|
|
|
|
|
|
|
|
|
app:build:
|
|
|
|
|
desc: "Build Core App (FrankenPHP + Laravel desktop binary)"
|
|
|
|
|
dir: cmd/core-app
|
|
|
|
|
env:
|
|
|
|
|
CGO_ENABLED: "1"
|
|
|
|
|
CGO_CFLAGS:
|
|
|
|
|
sh: /opt/homebrew/opt/php@8.4-zts/bin/php-config --includes
|
|
|
|
|
CGO_LDFLAGS:
|
|
|
|
|
sh: "echo -L/opt/homebrew/opt/php@8.4-zts/lib $(/opt/homebrew/opt/php@8.4-zts/bin/php-config --ldflags) $(/opt/homebrew/opt/php@8.4-zts/bin/php-config --libs)"
|
|
|
|
|
cmds:
|
|
|
|
|
- go build -tags nowatcher -o ../../bin/core-app .
|
|
|
|
|
|
|
|
|
|
app:dev:
|
|
|
|
|
desc: "Build and run Core App"
|
|
|
|
|
dir: cmd/core-app
|
|
|
|
|
env:
|
|
|
|
|
CGO_ENABLED: "1"
|
|
|
|
|
CGO_CFLAGS:
|
|
|
|
|
sh: /opt/homebrew/opt/php@8.4-zts/bin/php-config --includes
|
|
|
|
|
CGO_LDFLAGS:
|
|
|
|
|
sh: "echo -L/opt/homebrew/opt/php@8.4-zts/lib $(/opt/homebrew/opt/php@8.4-zts/bin/php-config --ldflags) $(/opt/homebrew/opt/php@8.4-zts/bin/php-config --libs)"
|
|
|
|
|
DYLD_LIBRARY_PATH: "/opt/homebrew/opt/php@8.4-zts/lib"
|
|
|
|
|
cmds:
|
|
|
|
|
- go build -tags nowatcher -o ../../bin/core-app .
|
|
|
|
|
- ../../bin/core-app
|
|
|
|
|
|
2026-02-09 02:49:01 +00:00
|
|
|
# --- BugSETI (Wails v3 System Tray) ---
|
|
|
|
|
bugseti:dev:
|
|
|
|
|
desc: "Build and run BugSETI (production binary with embedded frontend)"
|
|
|
|
|
dir: cmd/bugseti
|
|
|
|
|
cmds:
|
|
|
|
|
- cd frontend && npm install && npm run build
|
|
|
|
|
- go build -buildvcs=false -o ../../bin/bugseti .
|
|
|
|
|
- ../../bin/bugseti
|
|
|
|
|
|
|
|
|
|
bugseti:build:
|
|
|
|
|
desc: "Build BugSETI production binary"
|
|
|
|
|
dir: cmd/bugseti
|
|
|
|
|
cmds:
|
|
|
|
|
- cd frontend && npm install && npm run build
|
|
|
|
|
- go build -trimpath -buildvcs=false -ldflags="-w -s" -o ../../bin/bugseti .
|
|
|
|
|
|
|
|
|
|
bugseti:frontend:
|
|
|
|
|
desc: "Build BugSETI frontend only"
|
|
|
|
|
dir: cmd/bugseti/frontend
|
|
|
|
|
cmds:
|
|
|
|
|
- npm install
|
|
|
|
|
- npm run build
|
|
|
|
|
|
2026-01-30 22:29:20 +00:00
|
|
|
# --- Multi-repo (when in workspace) ---
|
|
|
|
|
dev:health:
|
|
|
|
|
desc: "Check health of all repos"
|
|
|
|
|
cmds:
|
|
|
|
|
- core dev health
|
|
|
|
|
|
|
|
|
|
dev:work:
|
|
|
|
|
desc: "Full workflow: status, commit, push"
|
|
|
|
|
cmds:
|
|
|
|
|
- core dev work
|
|
|
|
|
|
|
|
|
|
dev:status:
|
|
|
|
|
desc: "Show status of all repos"
|
|
|
|
|
cmds:
|
|
|
|
|
- core dev work --status
|