503 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
sarman	17de277e77	Merge pull request 'chore: bump version to 1.0.8 in Cargo.toml and tauri.conf.json' (#67) from fix/version-1.0.8 into master ... Reviewed-on: #67	2026-06-05 16:18:07 +00:00
Shaun Arman	2a0d1f42e6	chore: bump version to 1.0.8 in Cargo.toml and tauri.conf.json ... Update version in all project files to 1.0.8: - src-tauri/Cargo.toml: 0.3.0 → 1.0.8 - src-tauri/tauri.conf.json: 0.3.0 → 1.0.8 - package.json: already updated to 1.0.8 - Update Cargo.lock This ensures auto-tag workflow creates correct v1.0.8 release tag. Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>	2026-06-05 10:56:35 -05:00
gitea-actions[bot]	75daa03936	chore: update CHANGELOG.md for v0.3.12 [skip ci]	2026-06-05 15:31:54 +00:00
sarman	74f56b6a17	Merge pull request 'Backport: Agentic Shell Command Execution (v1.0.0 → v1.0.8)' (#66) from feature/agentic-shell-commands into master ... Reviewed-on: #66	2026-06-05 15:30:27 +00:00
Shaun Arman	8c96bfcba2	fix: add missing @testing-library/dom dependency and fix clippy warning ... - Add @testing-library/dom ^10.4.1 to devDependencies (required by @testing-library/react) - Fix clippy::uninlined_format_args warning in shell.rs (use inline format) Resolves CI test failures in frontend tests and rust-clippy job. Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>	2026-06-05 10:11:41 -05:00
Shaun Arman	276fdae104	fix: address valid PR review findings ... Fix two valid issues identified in automated code review: 1. Fix OAuth callback AppState to preserve pending_approvals - Clone existing pending_approvals instead of creating empty HashMap - Prevents loss of shell approval requests during OAuth flow 2. Add validation to activate_kubeconfig - Check that kubeconfig ID exists before activation - Return error if ID not found to prevent silent failure Invalid findings clarified: - Ollama retry logic is correct (anyhow::bail exits immediately) - systemctl classification already handles subcommands correctly (lines 230-239: status/is-active/is-enabled are Tier 1) Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>	2026-06-05 09:04:28 -05:00
Shaun Arman	b0961e7a60	fix(ci): fix YAML syntax error in test.yml ... Quote shell:: argument to fix YAML parsing error at line 121. The double colon was being interpreted as a YAML mapping value. Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>	2026-06-05 09:01:16 -05:00
Shaun Arman	496177b9ec	chore: trigger CI workflows ... Empty commit to re-trigger test.yml workflow in PR #66. Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>	2026-06-05 08:56:04 -05:00
Shaun Arman	57fff0c8a2	style: run cargo fmt to fix formatting ... Fix formatting in integrations.rs and ollama/installer.rs per cargo fmt. Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>	2026-06-05 08:43:50 -05:00
Shaun Arman	9b8f4fffe2	chore: update assets and version to 1.0.8 ... Updated icons, banner, version bump, changelog configuration. - Update icon.png (336KB, updated design) - Add new_banner.png (4MB promotional banner) - Bump package.json version to 1.0.8 - Update package-lock.json - Add cliff.toml for git-cliff changelog generation Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>	2026-06-05 08:36:57 -05:00
Shaun Arman	71ff71833d	ci: add shell module tests to Gitea Actions ... Update test workflow with shell module tests. - Add dedicated shell module test step to .gitea/workflows/test.yml - Tests run with --test-threads=1 for consistency Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>	2026-06-05 08:26:44 -05:00
Shaun Arman	7b5f727da9	test: add shell execution and tool calling detection tests ... Unit tests for shell classifier, executor, tool calling detection, and frontend components. - Add detectToolCalling.test.ts (136 lines) - Add aiProvidersOllamaDropdown.test.tsx (129 lines) - Add selectDropdownViewport.test.tsx (124 lines) Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>	2026-06-05 08:26:22 -05:00
Shaun Arman	1400f43d7a	feat: add kubectl binary bundling for cross-platform support ... Download and package kubectl v1.30.0 binaries for Linux (amd64/arm64), Windows, macOS. - Add scripts/download-kubectl.sh for kubectl binary management - Update Cargo.toml dependencies (http 1.4, thiserror 2, rand 0.8) - Add ollama/installer::start_ollama_service() and find_ollama_binary() - Fix rand API deprecation (thread_rng deprecated in favor of rng in 0.8) - Fix AppState initialization in integrations.rs (add pending_approvals) - Configure kubectl as Tauri sidecar (currently empty array for dev) Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>	2026-06-05 08:22:54 -05:00
Shaun Arman	b23ba4430a	docs: add v1.0.7 and v1.0.8 release notes ... Release notes with sanitized content. Update CHANGELOG.md with merged changes. - Add v1.0.7-summary.md (Ollama function calling) - Add v1.0.8-summary.md (Ollama reliability, auto-detection) - Update CHANGELOG.md with release history Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>	2026-06-05 08:19:16 -05:00
Shaun Arman	40074b4202	docs: update wiki with shell execution, Ollama function calling, and CI/CD changes ... Comprehensive wiki updates with sanitized content. Add new Shell-Execution guide. - Add Shell-Execution.md guide (665 lines, sanitized) - Update AI-Providers.md with Ollama function calling - Update Architecture.md with shell execution system - Update IPC-Commands.md with shell commands - Update Database.md with new tables - Update CICD-Pipeline.md for Gitea Actions Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>	2026-06-05 08:17:19 -05:00
Shaun Arman	dd9e6c0d3d	feat: add shell execution and kubeconfig management UI ... Real-time approval modal, settings pages, tool calling auto-detect button, and IPC command wrappers. - Add ShellApprovalModal component for Tier 2 command approvals - Add ShellExecution settings page - Add KubeconfigManager settings page - Update AIProviders page with tool calling detection button - Add shell command wrappers to tauriCommands.ts - Add routes for new settings pages Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>	2026-06-05 08:14:03 -05:00
Shaun Arman	117ab390a2	feat: add Ollama function calling and tool calling auto-detection ... Enable Ollama models to execute shell commands. Add detection command for provider capability testing. - Replace ai/ollama.rs with function calling support (180s timeout, retry logic) - Update ai/openai.rs with tool calling improvements - Add detect_tool_calling_support() command to commands/ai.rs Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>	2026-06-05 08:13:51 -05:00
Shaun Arman	e5593cbfe2	docs: add ADRs for shell safety, MCP transport, kubectl bundling ... Architecture decision records with sanitized content (proprietary references removed). - ADR-007: Three-Tier Shell Safety Classification - ADR-008: MCP Protocol Integration (HTTP transport) - ADR-009: Bundled kubectl Binary rationale Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>	2026-06-05 08:12:19 -05:00
Shaun Arman	ad2d1ced84	feat: add shell execution database migrations (migrations #24-28) ... Add database schema for shell command execution, kubeconfig management, and approval tracking. - Migration 024: shell_commands table with tier classification - Migration 025: kubeconfig_files table for encrypted kubeconfig storage - Migration 026: command_executions table for execution audit trail - Migration 027: approval_decisions table for session-based approval tracking - Migration 028: supports_tool_calling column for AI provider capabilities Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>	2026-06-05 08:00:12 -05:00
Shaun Arman	ea170ab340	feat: add three-tier shell execution with kubectl support ... Introduce shell classifier, executor, kubeconfig manager, and kubectl binary management. Integrates with existing commands/agentic.rs primitives. - Add shell/classifier.rs: Three-tier safety classification (Tier 1: auto-execute, Tier 2: approve, Tier 3: deny) - Add shell/executor.rs: Command executor with approval gates - Add shell/kubeconfig.rs: kubeconfig parsing and management - Add shell/kubectl.rs: kubectl binary management - Add commands/shell.rs: Tauri IPC commands for shell execution - Update state.rs: Add pending_approvals field for approval flow - Update lib.rs: Register shell module and commands Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>	2026-06-05 07:59:04 -05:00
sarman	f8bae30e58	chore: update CHANGELOG.md for v0.2.66 [skip ci]	2026-06-04 22:22:34 -05:00
sarman	b5254952f7	chore: update CHANGELOG.md for v0.2.66 [skip ci]	2026-06-04 22:22:34 -05:00
Shaun Arman	e32bc047a1	chore: retrigger auto-tag pipeline	2026-06-04 22:22:34 -05:00
Shaun Arman	14c9d9d2cc	chore: retrigger build pipeline	2026-06-04 22:22:34 -05:00
Shaun Arman	3d864efa77	chore: trigger build pipeline	2026-06-04 22:22:34 -05:00
sarman	afc0b3ce28	chore: update CHANGELOG.md for v0.2.53 [skip ci]	2026-06-04 22:22:34 -05:00
Shaun Arman	4e7cd3927d	chore: trigger release with fix	2026-06-04 22:22:34 -05:00
sarman	c75d286990	chore: update CHANGELOG.md for v0.2.53 [skip ci]	2026-06-04 22:22:34 -05:00
Shaun Arman	532b0b897f	chore: trigger changelog update for AppImage removal	2026-06-04 22:22:34 -05:00
sarman	3d54d4a69d	chore: update CHANGELOG.md for v0.2.53 [skip ci]	2026-06-04 22:22:34 -05:00
Shaun Arman	4f7dd086d5	chore: trigger changelog update for latest fixes	2026-06-04 22:22:34 -05:00
sarman	efe8d4caf0	chore: update CHANGELOG.md for v0.2.53 [skip ci]	2026-06-04 22:22:34 -05:00
sarman	3e4b044f7d	chore: update CHANGELOG.md for v0.2.53 [skip ci]	2026-06-04 22:22:34 -05:00
Shaun Arman	620d597cbb	ci: final test run — arm64 runner labels fixed (linux-arm64 only)	2026-06-04 22:22:34 -05:00
Shaun Arman	d918596c5b	ci: retrigger after amd64 runner config fix (CONFIG_FILE env var)	2026-06-04 22:22:34 -05:00
Shaun Arman	e753df8eac	ci: retrigger after runner capacity=1 fix	2026-06-04 22:22:34 -05:00
Shaun Arman	f2f622bcd0	ci: retrigger after act_runner host network fix	2026-06-04 22:22:34 -05:00
Shaun Arman	5d56a2dd94	ci: retrigger after making repo public	2026-06-04 22:22:34 -05:00
Shaun Arman	6a36e01f7b	ci: retrigger test pipeline after act_runner network fix	2026-06-04 22:22:34 -05:00
gitea-actions[bot]	6105f5af2b	chore: update CHANGELOG.md for v0.3.11 [skip ci]	2026-06-01 18:29:28 +00:00
sarman	590fec7dd4	Merge pull request 'fix(mcp): add environment variable support for stdio MCP servers' (#62) from bug/mcp-env-vars-support into master ... Reviewed-on: #62	2026-06-01 18:27:58 +00:00
Shaun Arman	e5d3ff42f5	docs(wiki): update MCP-Servers.md with env var support, PATH requirement, and new schema column	2026-06-01 13:21:09 -05:00
Shaun Arman	7cc4f0f689	fix(mcp): treat missing resources/list as non-fatal for servers that don't implement it	2026-06-01 13:19:34 -05:00
gitea-actions[bot]	eb45551a8f	chore: update CHANGELOG.md for v0.3.10 [skip ci]	2026-06-01 17:48:26 +00:00
sarman	02b97134d5	Merge pull request 'bug/mcp-env-vars-support' (#61) from bug/mcp-env-vars-support into master ... Reviewed-on: #61	2026-06-01 17:46:52 +00:00
Shaun Arman	7c2452e3f7	fix(mcp): fix test_allows_safe_env_vars test failure ... The test was trying to spawn a process which requires a Tokio runtime. Changed the test to only verify validation logic by checking that safe environment variables don't trigger 'Dangerous environment variable' errors. Uses /usr/bin/nonexistent as command so spawn will fail (command not found) but validation will pass for safe env vars like DEBUG, API_KEY, PATH, etc. All 243 tests now passing.	2026-06-01 12:41:26 -05:00
Shaun Arman	0469f121b1	fix(mcp): add validation to block dangerous environment variables ... Add defense-in-depth security validation for stdio transport to reject environment variables that could be used for privilege escalation attacks. Blocks the following dangerous variables (case-insensitive): - LD_PRELOAD (Linux) - LD_LIBRARY_PATH (Linux) - DYLD_INSERT_LIBRARIES (macOS) - DYLD_LIBRARY_PATH (macOS) - DYLD_FRAMEWORK_PATH (macOS) - DYLD_FALLBACK_LIBRARY_PATH (macOS) These variables can inject malicious libraries into spawned processes and should never be user-configurable for MCP servers. Add comprehensive tests: - test_rejects_relative_path: Verify existing path validation - test_rejects_dangerous_env_vars: Test all blocked variables - test_rejects_dangerous_env_vars_case_insensitive: Verify lowercase variants blocked - test_allows_safe_env_vars: Verify legitimate vars (DEBUG, PATH, API_KEY) allowed All tests passing.	2026-06-01 12:16:11 -05:00
Shaun Arman	922f90a794	fix(mcp): change plaintext env input to type=text ... Change plaintext_env input field from type='password' to type='text' since this field is explicitly for non-sensitive values (DEBUG, LOG_LEVEL, etc.). Using password type for plaintext config was misleading and prevented copy/paste of legitimate non-sensitive configuration. Only the encrypted_env and http_headers fields remain as type='password' for sensitive values like API keys and tokens.	2026-06-01 12:06:04 -05:00
sarman	ed49de1edd	Update README.md	2026-06-01 17:02:03 +00:00
Shaun Arman	d264e6b09d	fix(mcp): improve UX clarity for encrypted env vars during edit ... Add clearer placeholder and helper text to explain that encrypted environment variables are never displayed for security reasons. When editing an existing server, the encrypted_env field shows a placeholder explaining that leaving it blank will preserve existing values. Also apply cargo fmt formatting fixes to store.rs.	2026-06-01 11:58:52 -05:00