506 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
Shaun Arman	19f277b6ec	chore: pin all loose npm version ranges to locked minor versions ... Replace "latest", "^2", "^3" etc. with explicit ^x.y.z ranges matching what was already pinned in package-lock.json. Also aligns @tauri-apps/cli to 2.11.0 to match the rest of the Tauri package family. No functional change — lockfile already resolved these exact versions.	2026-06-05 13:28:09 -05:00
Shaun Arman	093efbd200	fix: pin plugin-stronghold npm version to match Rust crate (2.3.1) ... Address automated review finding: "^2" was overly permissive and inconsistent with other plugin version pins added in this PR.	2026-06-05 13:26:06 -05:00
Shaun Arman	fc6af60495	fix: align Tauri npm packages with Rust crate versions ... Bump @tauri-apps/api 2.10.1→2.11.0, @tauri-apps/plugin-dialog 2.6.0→2.7.1, and @tauri-apps/plugin-fs 2.4.5→2.5.1 to match the installed Rust crates and resolve the tauri-cli version mismatch build failure.	2026-06-05 12:54:09 -05:00
sarman	17de277e77	Merge pull request 'chore: bump version to 1.0.8 in Cargo.toml and tauri.conf.json' (#67) from fix/version-1.0.8 into master ... Reviewed-on: #67	2026-06-05 16:18:07 +00:00
Shaun Arman	2a0d1f42e6	chore: bump version to 1.0.8 in Cargo.toml and tauri.conf.json ... Update version in all project files to 1.0.8: - src-tauri/Cargo.toml: 0.3.0 → 1.0.8 - src-tauri/tauri.conf.json: 0.3.0 → 1.0.8 - package.json: already updated to 1.0.8 - Update Cargo.lock This ensures auto-tag workflow creates correct v1.0.8 release tag. Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>	2026-06-05 10:56:35 -05:00
gitea-actions[bot]	75daa03936	chore: update CHANGELOG.md for v0.3.12 [skip ci]	2026-06-05 15:31:54 +00:00
sarman	74f56b6a17	Merge pull request 'Backport: Agentic Shell Command Execution (v1.0.0 → v1.0.8)' (#66) from feature/agentic-shell-commands into master ... Reviewed-on: #66	2026-06-05 15:30:27 +00:00
Shaun Arman	8c96bfcba2	fix: add missing @testing-library/dom dependency and fix clippy warning ... - Add @testing-library/dom ^10.4.1 to devDependencies (required by @testing-library/react) - Fix clippy::uninlined_format_args warning in shell.rs (use inline format) Resolves CI test failures in frontend tests and rust-clippy job. Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>	2026-06-05 10:11:41 -05:00
Shaun Arman	276fdae104	fix: address valid PR review findings ... Fix two valid issues identified in automated code review: 1. Fix OAuth callback AppState to preserve pending_approvals - Clone existing pending_approvals instead of creating empty HashMap - Prevents loss of shell approval requests during OAuth flow 2. Add validation to activate_kubeconfig - Check that kubeconfig ID exists before activation - Return error if ID not found to prevent silent failure Invalid findings clarified: - Ollama retry logic is correct (anyhow::bail exits immediately) - systemctl classification already handles subcommands correctly (lines 230-239: status/is-active/is-enabled are Tier 1) Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>	2026-06-05 09:04:28 -05:00
Shaun Arman	b0961e7a60	fix(ci): fix YAML syntax error in test.yml ... Quote shell:: argument to fix YAML parsing error at line 121. The double colon was being interpreted as a YAML mapping value. Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>	2026-06-05 09:01:16 -05:00
Shaun Arman	496177b9ec	chore: trigger CI workflows ... Empty commit to re-trigger test.yml workflow in PR #66. Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>	2026-06-05 08:56:04 -05:00
Shaun Arman	57fff0c8a2	style: run cargo fmt to fix formatting ... Fix formatting in integrations.rs and ollama/installer.rs per cargo fmt. Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>	2026-06-05 08:43:50 -05:00
Shaun Arman	9b8f4fffe2	chore: update assets and version to 1.0.8 ... Updated icons, banner, version bump, changelog configuration. - Update icon.png (336KB, updated design) - Add new_banner.png (4MB promotional banner) - Bump package.json version to 1.0.8 - Update package-lock.json - Add cliff.toml for git-cliff changelog generation Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>	2026-06-05 08:36:57 -05:00
Shaun Arman	71ff71833d	ci: add shell module tests to Gitea Actions ... Update test workflow with shell module tests. - Add dedicated shell module test step to .gitea/workflows/test.yml - Tests run with --test-threads=1 for consistency Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>	2026-06-05 08:26:44 -05:00
Shaun Arman	7b5f727da9	test: add shell execution and tool calling detection tests ... Unit tests for shell classifier, executor, tool calling detection, and frontend components. - Add detectToolCalling.test.ts (136 lines) - Add aiProvidersOllamaDropdown.test.tsx (129 lines) - Add selectDropdownViewport.test.tsx (124 lines) Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>	2026-06-05 08:26:22 -05:00
Shaun Arman	1400f43d7a	feat: add kubectl binary bundling for cross-platform support ... Download and package kubectl v1.30.0 binaries for Linux (amd64/arm64), Windows, macOS. - Add scripts/download-kubectl.sh for kubectl binary management - Update Cargo.toml dependencies (http 1.4, thiserror 2, rand 0.8) - Add ollama/installer::start_ollama_service() and find_ollama_binary() - Fix rand API deprecation (thread_rng deprecated in favor of rng in 0.8) - Fix AppState initialization in integrations.rs (add pending_approvals) - Configure kubectl as Tauri sidecar (currently empty array for dev) Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>	2026-06-05 08:22:54 -05:00
Shaun Arman	b23ba4430a	docs: add v1.0.7 and v1.0.8 release notes ... Release notes with sanitized content. Update CHANGELOG.md with merged changes. - Add v1.0.7-summary.md (Ollama function calling) - Add v1.0.8-summary.md (Ollama reliability, auto-detection) - Update CHANGELOG.md with release history Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>	2026-06-05 08:19:16 -05:00
Shaun Arman	40074b4202	docs: update wiki with shell execution, Ollama function calling, and CI/CD changes ... Comprehensive wiki updates with sanitized content. Add new Shell-Execution guide. - Add Shell-Execution.md guide (665 lines, sanitized) - Update AI-Providers.md with Ollama function calling - Update Architecture.md with shell execution system - Update IPC-Commands.md with shell commands - Update Database.md with new tables - Update CICD-Pipeline.md for Gitea Actions Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>	2026-06-05 08:17:19 -05:00
Shaun Arman	dd9e6c0d3d	feat: add shell execution and kubeconfig management UI ... Real-time approval modal, settings pages, tool calling auto-detect button, and IPC command wrappers. - Add ShellApprovalModal component for Tier 2 command approvals - Add ShellExecution settings page - Add KubeconfigManager settings page - Update AIProviders page with tool calling detection button - Add shell command wrappers to tauriCommands.ts - Add routes for new settings pages Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>	2026-06-05 08:14:03 -05:00
Shaun Arman	117ab390a2	feat: add Ollama function calling and tool calling auto-detection ... Enable Ollama models to execute shell commands. Add detection command for provider capability testing. - Replace ai/ollama.rs with function calling support (180s timeout, retry logic) - Update ai/openai.rs with tool calling improvements - Add detect_tool_calling_support() command to commands/ai.rs Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>	2026-06-05 08:13:51 -05:00
Shaun Arman	e5593cbfe2	docs: add ADRs for shell safety, MCP transport, kubectl bundling ... Architecture decision records with sanitized content (proprietary references removed). - ADR-007: Three-Tier Shell Safety Classification - ADR-008: MCP Protocol Integration (HTTP transport) - ADR-009: Bundled kubectl Binary rationale Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>	2026-06-05 08:12:19 -05:00
Shaun Arman	ad2d1ced84	feat: add shell execution database migrations (migrations #24-28) ... Add database schema for shell command execution, kubeconfig management, and approval tracking. - Migration 024: shell_commands table with tier classification - Migration 025: kubeconfig_files table for encrypted kubeconfig storage - Migration 026: command_executions table for execution audit trail - Migration 027: approval_decisions table for session-based approval tracking - Migration 028: supports_tool_calling column for AI provider capabilities Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>	2026-06-05 08:00:12 -05:00
Shaun Arman	ea170ab340	feat: add three-tier shell execution with kubectl support ... Introduce shell classifier, executor, kubeconfig manager, and kubectl binary management. Integrates with existing commands/agentic.rs primitives. - Add shell/classifier.rs: Three-tier safety classification (Tier 1: auto-execute, Tier 2: approve, Tier 3: deny) - Add shell/executor.rs: Command executor with approval gates - Add shell/kubeconfig.rs: kubeconfig parsing and management - Add shell/kubectl.rs: kubectl binary management - Add commands/shell.rs: Tauri IPC commands for shell execution - Update state.rs: Add pending_approvals field for approval flow - Update lib.rs: Register shell module and commands Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>	2026-06-05 07:59:04 -05:00
sarman	f8bae30e58	chore: update CHANGELOG.md for v0.2.66 [skip ci]	2026-06-04 22:22:34 -05:00
sarman	b5254952f7	chore: update CHANGELOG.md for v0.2.66 [skip ci]	2026-06-04 22:22:34 -05:00
Shaun Arman	e32bc047a1	chore: retrigger auto-tag pipeline	2026-06-04 22:22:34 -05:00
Shaun Arman	14c9d9d2cc	chore: retrigger build pipeline	2026-06-04 22:22:34 -05:00
Shaun Arman	3d864efa77	chore: trigger build pipeline	2026-06-04 22:22:34 -05:00
sarman	afc0b3ce28	chore: update CHANGELOG.md for v0.2.53 [skip ci]	2026-06-04 22:22:34 -05:00
Shaun Arman	4e7cd3927d	chore: trigger release with fix	2026-06-04 22:22:34 -05:00
sarman	c75d286990	chore: update CHANGELOG.md for v0.2.53 [skip ci]	2026-06-04 22:22:34 -05:00
Shaun Arman	532b0b897f	chore: trigger changelog update for AppImage removal	2026-06-04 22:22:34 -05:00
sarman	3d54d4a69d	chore: update CHANGELOG.md for v0.2.53 [skip ci]	2026-06-04 22:22:34 -05:00
Shaun Arman	4f7dd086d5	chore: trigger changelog update for latest fixes	2026-06-04 22:22:34 -05:00
sarman	efe8d4caf0	chore: update CHANGELOG.md for v0.2.53 [skip ci]	2026-06-04 22:22:34 -05:00
sarman	3e4b044f7d	chore: update CHANGELOG.md for v0.2.53 [skip ci]	2026-06-04 22:22:34 -05:00
Shaun Arman	620d597cbb	ci: final test run — arm64 runner labels fixed (linux-arm64 only)	2026-06-04 22:22:34 -05:00
Shaun Arman	d918596c5b	ci: retrigger after amd64 runner config fix (CONFIG_FILE env var)	2026-06-04 22:22:34 -05:00
Shaun Arman	e753df8eac	ci: retrigger after runner capacity=1 fix	2026-06-04 22:22:34 -05:00
Shaun Arman	f2f622bcd0	ci: retrigger after act_runner host network fix	2026-06-04 22:22:34 -05:00
Shaun Arman	5d56a2dd94	ci: retrigger after making repo public	2026-06-04 22:22:34 -05:00
Shaun Arman	6a36e01f7b	ci: retrigger test pipeline after act_runner network fix	2026-06-04 22:22:34 -05:00
gitea-actions[bot]	6105f5af2b	chore: update CHANGELOG.md for v0.3.11 [skip ci]	2026-06-01 18:29:28 +00:00
sarman	590fec7dd4	Merge pull request 'fix(mcp): add environment variable support for stdio MCP servers' (#62) from bug/mcp-env-vars-support into master ... Reviewed-on: #62	2026-06-01 18:27:58 +00:00
Shaun Arman	e5d3ff42f5	docs(wiki): update MCP-Servers.md with env var support, PATH requirement, and new schema column	2026-06-01 13:21:09 -05:00
Shaun Arman	7cc4f0f689	fix(mcp): treat missing resources/list as non-fatal for servers that don't implement it	2026-06-01 13:19:34 -05:00
gitea-actions[bot]	eb45551a8f	chore: update CHANGELOG.md for v0.3.10 [skip ci]	2026-06-01 17:48:26 +00:00
sarman	02b97134d5	Merge pull request 'bug/mcp-env-vars-support' (#61) from bug/mcp-env-vars-support into master ... Reviewed-on: #61	2026-06-01 17:46:52 +00:00
Shaun Arman	7c2452e3f7	fix(mcp): fix test_allows_safe_env_vars test failure ... The test was trying to spawn a process which requires a Tokio runtime. Changed the test to only verify validation logic by checking that safe environment variables don't trigger 'Dangerous environment variable' errors. Uses /usr/bin/nonexistent as command so spawn will fail (command not found) but validation will pass for safe env vars like DEBUG, API_KEY, PATH, etc. All 243 tests now passing.	2026-06-01 12:41:26 -05:00
Shaun Arman	0469f121b1	fix(mcp): add validation to block dangerous environment variables ... Add defense-in-depth security validation for stdio transport to reject environment variables that could be used for privilege escalation attacks. Blocks the following dangerous variables (case-insensitive): - LD_PRELOAD (Linux) - LD_LIBRARY_PATH (Linux) - DYLD_INSERT_LIBRARIES (macOS) - DYLD_LIBRARY_PATH (macOS) - DYLD_FRAMEWORK_PATH (macOS) - DYLD_FALLBACK_LIBRARY_PATH (macOS) These variables can inject malicious libraries into spawned processes and should never be user-configurable for MCP servers. Add comprehensive tests: - test_rejects_relative_path: Verify existing path validation - test_rejects_dangerous_env_vars: Test all blocked variables - test_rejects_dangerous_env_vars_case_insensitive: Verify lowercase variants blocked - test_allows_safe_env_vars: Verify legitimate vars (DEBUG, PATH, API_KEY) allowed All tests passing.	2026-06-01 12:16:11 -05:00