406 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
sarman	0c366180fa	Merge pull request 'fix(ci): replace tea CLI with curl; honour Cargo.toml version for tags' (#54) from fix/ci-auto-tag-tea into master	2026-05-23 22:39:23 +00:00
Shaun Arman	28f579a1ae	fix: bump tauri.conf.json version to 0.3.0 ... Cargo.toml was updated to 0.3.0 for the MCP feature but tauri.conf.json was missed. Bundle artifact filenames are derived from tauri.conf.json, so all builds were producing files named 0.2.68.	2026-05-23 17:36:38 -05:00
sarman	047772d719	fix(ci): replace tea with curl, honour Cargo.toml version [skip ci]	2026-05-23 22:31:45 +00:00
Shaun Arman	75f8a006ea	fix(ci): replace tea CLI with curl in changelog steps; read Cargo.toml for version ... tea is not available in alpine:latest containers. Replace both tea calls with curl API requests against the Gitea releases endpoint. Also: auto-tag now reads src-tauri/Cargo.toml version first. If it is ahead of the latest git tag (major/minor bump), that version is used directly instead of incrementing the patch.	2026-05-23 17:30:41 -05:00
sarman	ea7f484ce6	Merge pull request 'feat(mcp): add MCP Server Support' (#53) from feature/mcp-server-support into master ... Reviewed-on: #53	2026-05-23 22:15:10 +00:00
Shaun Arman	28cfcf1ef4	fix(mcp): add timeouts, delete audit log, OAuth state nonce; improve PR review prompt ... - call_tool: 30s hard timeout via tokio::time::timeout - discover_server: 60s hard timeout wrapping full connect+discover sequence - delete_mcp_server: write_audit_event before cascade delete, capturing server name, tool count, and resource count - initiate_mcp_oauth: append cryptographically random state nonce for CSRF - pr-review.yml: rewrite prompt to require line-quoted evidence for every finding and eliminate hallucinated false positives	2026-05-23 17:08:23 -05:00
Shaun Arman	8e1145ec7a	fix(ci): use qwen3-coder-next model for PR review	2026-05-23 16:54:26 -05:00
Shaun Arman	a779756e48	style(mcp): apply rustfmt formatting	2026-05-23 16:48:26 -05:00
Shaun Arman	3588399dfd	feat(mcp): add MCP Server Support with TDD implementation ... Adds full Model Context Protocol (MCP) server management, enabling the AI assistant to discover and call tools from external MCP servers during triage conversations. Backend (Rust): - rmcp 1.7.0 dependency (client + stdio + Streamable HTTP transports) - Migration 018: mcp_servers, mcp_tools, mcp_resources tables with CHECK constraints for transport_type, auth_type, discovery_status - src/mcp/ module: models, store, client, adapter, discovery, commands, transport/{stdio,http} - AppState gains mcp_connections: Arc<TokioMutex<HashMap<...>>> - .setup() hook auto-discovers enabled servers at startup - 8 new Tauri commands wired into invoke_handler - execute_mcp_tool_call: PII scan + mandatory audit_log before execution - Auth values encrypted at rest via integrations::auth::encrypt_token(); scrubbed before any frontend response Frontend: - MCPServers.tsx settings page (/settings/mcp) with server list, status badges, Discover Now, Add/Edit modal, enable/disable toggle - tauriCommands.ts: McpServer, McpTool, McpServerStatus types + 8 cmds - App.tsx: Plug icon, /settings/mcp route, sidebar nav entry Tests (TDD): 15 new tests, all green - 5 migration tests (written before migration, red → green) - 5 store CRUD + encryption tests - 5 adapter sanitization + conversion tests Verification: 185/185 Rust, 94/94 Vitest, clippy -D warnings: 0	2026-05-23 16:23:48 -05:00
Shaun Arman	85c67cfbe9	docs: update CHANGELOG.md for v0.2.71	2026-04-29 21:37:16 -05:00
Shaun Arman	43099f9706	fix(auto-tag): use tea CLI instead of hardcoded tokens	2026-04-29 21:32:47 -05:00
sarman	ba3ae80b7d	chore: update CHANGELOG.md for v0.2.66 [skip ci]	2026-04-30 02:16:42 +00:00
Shaun Arman	4380830052	Merge origin/master - keep local CHANGELOG with v0.2.66-0.2.71	2026-04-29 21:15:02 -05:00
Shaun Arman	2b0aeec340	docs: update CHANGELOG.md for v0.2.69-v0.2.71	2026-04-29 21:14:13 -05:00
sarman	78d450b5b1	chore: update CHANGELOG.md for v0.2.66 [skip ci]	2026-04-30 02:06:31 +00:00
Shaun Arman	cb185e1e0d	docs: update CHANGELOG.md for v0.2.68	2026-04-29 21:04:16 -05:00
sarman	f29dd03207	chore: update CHANGELOG.md for v0.2.66 [skip ci]	2026-04-30 02:00:35 +00:00
Shaun Arman	e043da8b89	fix(auto-tag): use correct tag range for release notes	2026-04-29 20:59:40 -05:00
sarman	c53835ec9b	chore: update CHANGELOG.md for v0.2.66 [skip ci]	2026-04-30 01:36:41 +00:00
sarman	ffb8d15187	Merge pull request 'feat(ai): add devops-incident-responder agent with domain auto-detection' (#52) from feature/agent-system into master ... Reviewed-on: #52	2026-04-30 01:34:53 +00:00
Shaun Arman	0b7f1cd9ab	feat(ai): add devops-incident-responder agent with domain auto-detection ... - Implement AgentRegistry system with devops-incident-responder agent - Add domain detection based on conversation keywords - Inject devops-incident-responder as primary system prompt - Auto-switch domain prompts silently when context shifts - Fix version update script to handle JSON format correctly - Always display version in bottom-left corner - Add release notes fallback to git commits if CHANGELOG empty This implements the full devops-incident-responder agent as the primary system prompt, with domain-specific SME prompts layered on top based on conversation content analysis. The version display bug is fixed by removing the collapsed condition, and release notes now have a fallback mechanism.	2026-04-29 19:41:47 -05:00
sarman	c0d482ace7	chore: update CHANGELOG.md for v0.2.66 [skip ci]	2026-04-20 01:26:00 +00:00
sarman	5a12718566	Merge pull request 'fix(test): await async data in auditLog test' (#51) from fix/audit-log-test into master	2026-04-20 01:21:55 +00:00
Shaun Arman	4a0c7957ec	fix(test): await async data in auditLog test to prevent race condition	2026-04-19 20:21:37 -05:00
sarman	12a76b4dd8	chore: update CHANGELOG.md for v0.2.66 [skip ci]	2026-04-20 00:47:35 +00:00
Shaun Arman	0e6fd09455	chore: retrigger auto-tag pipeline	2026-04-19 19:46:34 -05:00
Shaun Arman	b7f348bf34	chore: retrigger build pipeline	2026-04-19 19:42:39 -05:00
Shaun Arman	7234704636	chore: trigger build pipeline	2026-04-19 19:40:02 -05:00
sarman	06b0c10b17	Merge pull request 'docs: add v0.2.66 changelog entry' (#50) from chore/trigger-build-2 into master	2026-04-20 00:34:55 +00:00
Shaun Arman	ab231b6564	docs: add v0.2.66 changelog entry	2026-04-19 19:33:52 -05:00
sarman	8b828fe4c3	Merge pull request 'docs: clarify changelog exclusion criteria' (#49) from chore/trigger-build into master ... Reviewed-on: #49	2026-04-20 00:29:55 +00:00
Shaun Arman	27193c91e6	docs: clarify changelog exclusion criteria	2026-04-19 19:20:57 -05:00
sarman	cb542d7f22	Merge pull request 'fix(ci): switch PR review to liteLLM + add push trigger to tests' (#46) from fix/litellm-pr-review into master ... Reviewed-on: #46	2026-04-19 23:56:22 +00:00
Shaun Arman	d066e71eeb	fix(ci): switch PR review from Ollama to liteLLM (qwen2.5-72b) ... Replace direct Ollama API calls with liteLLM proxy at 172.0.0.29:11434 using qwen2.5-72b (72B VLLM model). Increase timeouts to 300s for larger model inference. Reuses existing OLLAMA_API_KEY secret for liteLLM auth. Also add push-to-master trigger on test.yml so merges to master run the full CI suite (previously only pull_request events triggered).	2026-04-19 18:41:54 -05:00
sarman	257b2fb9c5	Merge pull request 'feat: incident response methodology + UTC timeline tracking' (#45) from feat/incident-response-timeline into master ... Reviewed-on: #45	2026-04-19 23:34:34 +00:00
Shaun Arman	d715ba0b25	docs: update wiki for timeline events and incident response methodology ... - Database.md: document timeline_events table (migration 017), event types, dual-write strategy, correct migration count to 17 - IPC-Commands.md: document get_timeline_events, updated add_timeline_event with metadata, chat_message system_prompt param - Architecture.md: document incident response methodology integration, 5-phase framework, system prompt injection, correct migration count	2026-04-19 18:26:21 -05:00
Shaun Arman	8b0cbc3ce8	fix: harden timeline event input validation and atomic writes ... Address security review findings: - Validate event_type against whitelist of 7 known types (M-3) - Validate metadata is valid JSON and under 10KB (M-2, M-4) - Include metadata in audit log details (M-2) - Wrap timeline insert + audit write + timestamp update in a SQLite transaction for atomicity (M-5) - Fix TypeScript TimelineEvent interface: add issue_id, metadata fields and correct created_at type to string (L-3) - Add timeline_events to IssueDetail TypeScript interface (L-4)	2026-04-19 18:25:53 -05:00
Shaun Arman	13c4969e31	feat: wire incident response methodology into AI and record triage events ... Add INCIDENT_RESPONSE_FRAMEWORK to domainPrompts.ts and append it to all 17 domain prompts via getDomainPrompt(). Add system_prompt param to chat_message command so frontend can inject domain expertise. Record UTC timeline events (triage_started, log_uploaded, why_level_advanced, root_cause_identified, rca_generated, postmortem_generated, document_exported) at key moments with non-blocking calls. Update tauriCommands.ts with getTimelineEventsCmd, optional metadata on addTimelineEventCmd, and systemPrompt on chatMessageCmd. 12 new frontend tests (9 domain prompts, 3 timeline events).	2026-04-19 18:13:47 -05:00
Shaun Arman	79a623dbb2	feat: populate RCA and postmortem docs with real timeline data ... Add format_event_type() and calculate_duration() helpers to convert raw timeline events into human-readable tables and metrics. RCA now includes an Incident Timeline section and Incident Metrics (event count, duration, time-to-root-cause). Postmortem replaces placeholder timeline rows with real events, calculates impact duration, and auto-populates What Went Well from evidence. 10 new Rust tests covering timeline rendering, duration calculation, and event type formatting.	2026-04-19 18:13:30 -05:00
Shaun Arman	107fee8853	feat: add timeline_events table, model, and CRUD commands ... - Add migration 017_create_timeline_events with indexes - Update TimelineEvent struct with issue_id, metadata, UTC string timestamps - Add TimelineEvent::new() constructor with UUIDv7 - Add timeline_events field to IssueDetail - Rewrite add_timeline_event to write to new table + audit_log (dual-write) - Add get_timeline_events command for ordered retrieval - Update get_issue to load timeline_events - Update delete_issue to clean up timeline_events - Register get_timeline_events in generate_handler - Add migration tests for table, indexes, and cascade delete - Fix flaky derive_aes_key test (env var race condition in parallel tests)	2026-04-19 18:02:38 -05:00
sarman	6d105a70ad	chore: update CHANGELOG.md for v0.2.66 [skip ci]	2026-04-15 02:11:31 +00:00
sarman	ca56b583c5	Merge pull request 'feat: implement dynamic versioning from Git tags' (#42) from fix/version-dynamic-build into master ... Reviewed-on: #42	2026-04-15 02:10:10 +00:00
Shaun Arman	8c35e91aef	Merge branch 'master' into fix/version-dynamic-build	2026-04-14 21:09:11 -05:00
Shaun Arman	1055841b6f	fix: remove invalid --locked flag from cargo commands and fix format string ... - Remove --locked flag from cargo fmt, clippy, and test commands in CI - Update build.rs to use Rust 2021 direct variable interpolation in format strings	2026-04-14 20:50:47 -05:00
sarman	f38ca7e2fc	chore: update CHANGELOG.md for v0.2.63 [skip ci]	2026-04-15 01:45:29 +00:00
sarman	a9956a16a4	Merge pull request 'feat(integrations): implement query expansion for semantic search' (#44) from feature/integration-search-expansion into master ... Reviewed-on: #44	2026-04-15 01:44:42 +00:00
Shaun Arman	bc50a78db7	fix: correct WIQL syntax and escape_wiql implementation ... - Replace CONTAINS with ~ operator (correct WIQL syntax for text matching) - Remove escaping of ~, *, ? which are valid WIQL wildcards - Update tests to reflect correct escape_wiql behavior	2026-04-14 20:38:21 -05:00
Shaun Arman	e6d1965342	security: address all issues from automated PR review ... - Add missing CQL escaping for &, |, +, - characters - Improve escape_wiql() to escape more dangerous characters: ", \, (, ), ~, *, ?, ;, = - Sanitize HTML in excerpts using strip_html_tags() to prevent XSS - Add unit tests for escape_wiql, escape_cql, canonicalize_url functions - Document expand_query() behavior (always returns at least original query) - All tests pass (158/158), cargo fmt and clippy pass	2026-04-14 20:26:05 -05:00
Shaun Arman	708e1e9c18	security: fix query expansion issues from PR review ... - Use MAX_EXPANDED_QUERIES constant in confluence_search.rs instead of hardcoded 3 - Improve escape_wiql() to escape more dangerous characters: ", \, (, ), ~, *, ?, ;, = - Fix logging to show expanded_query instead of search_url in confluence_search.rs All tests pass (142/142), cargo fmt and clippy pass.	2026-04-14 20:07:59 -05:00
Shaun Arman	5b45c6c418	fix(integrations): security and correctness improvements ... - Add url canonicalization for deduplication (strip fragments/query params) - Add WIQL injection escaping for Azure DevOps work item searches - Add CQL injection escaping for Confluence searches - Add MAX_EXPANDED_QUERIES constant for consistency - Fix logging to show expanded_query instead of search_url - Add input validation for empty queries - Add url crate dependency for URL parsing All 142 tests pass.	2026-04-14 19:55:32 -05:00