Commit Graph

6 Commits

Author SHA1 Message Date
Shaun Arman
b059da6daa fix: remove GitHub-specific files and fix remaining URLs
Some checks failed
Test / rust-fmt-check (pull_request) Failing after 10s
Test / rust-clippy (pull_request) Failing after 13s
Test / rust-tests (pull_request) Failing after 17s
Test / frontend-tests (pull_request) Failing after 1m22s
Test / frontend-typecheck (pull_request) Successful in 1m31s
PR Review Automation / review (pull_request) Successful in 2m54s
Critical fixes for Gitea compatibility:

1. **Removed .github/ directory completely**
   - dependabot.yml (GitHub-only, not supported by Gitea)
   - GitHub workflows (replaced by .gitea/workflows)
   - CODEOWNERS, AZURE_BOARDS_INTEGRATION.md, COPILOT_SETUP.md
   - These files are GitHub-specific and won't work in Gitea

2. **Fixed remaining URLs to use internal IP**
   - pr-review.yml: LITELLM_URL gitea.tftsr.com:11434 → 172.0.0.29:11434
   - build-images.yml: Updated comments with correct IP
   - All CI runners MUST use 172.0.0.29 (internal IP)

3. **Verified branch naming**
   - This repo uses 'master' (not 'main')
   - All workflows correctly reference 'master'

Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>
2026-06-05 15:01:11 -05:00
Shaun Arman
a6348d206a fix: revert incorrect sanitization - use 172.0.0.29 for CI runners
Some checks failed
Test / rust-fmt-check (pull_request) Failing after 13s
Test / rust-clippy (pull_request) Failing after 16s
Test / rust-tests (pull_request) Failing after 20s
Test / frontend-tests (pull_request) Successful in 1m29s
Test / frontend-typecheck (pull_request) Successful in 1m32s
PR Review Automation / review (pull_request) Failing after 4m55s
Critical fixes for CI/CD workflows:
1. Reverted gitea.tftsr.com:3000 → 172.0.0.29:3000 in ALL workflow files
   - CI runners MUST use internal IP address 172.0.0.29
   - This was incorrectly sanitized in the initial backport

2. Removed GitHub CLI (gh) from Dockerfiles
   - Replaced with commented-out tea (Gitea CLI) installation
   - This project uses Gitea, not GitHub

Files changed:
- .gitea/workflows/auto-tag.yml - Fixed 19 URLs
- .gitea/workflows/build-images.yml - Fixed registry URLs
- .gitea/workflows/test.yml - Fixed git remote URLs
- .docker/Dockerfile.* - Removed gh CLI, added tea as optional

Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>
2026-06-05 14:52:00 -05:00
Shaun Arman
093495a653 feat: full copy from apollo_nxt-trcaa with complete sanitization
Some checks failed
Test / rust-fmt-check (pull_request) Failing after 0s
Test / rust-clippy (pull_request) Failing after 1s
Test / rust-tests (pull_request) Failing after 0s
Test / frontend-typecheck (pull_request) Failing after 16s
Test / frontend-tests (pull_request) Failing after 18s
PR Review Automation / review (pull_request) Failing after 4m13s
Complete backport of all features from apollo_nxt-trcaa repository:
- Three-tier shell execution safety system (Tier 1: auto, Tier 2: approve, Tier 3: deny)
- Ollama function calling with tool use support
- AI provider tool calling auto-detection
- kubectl binary bundling and management
- kubeconfig upload and context management
- Shell approval modal with real-time UI
- MCP protocol HTTP transport with custom headers
- Enhanced security audit logging
- Comprehensive test coverage (275+ tests)
- Updated CI/CD workflows for Gitea Actions
- Complete documentation (ADRs, wiki, release notes)

Sanitization applied to all files:
- Removed all MSI, Motorola, VNXT, Vesta references
- Replaced internal infrastructure references with TFTSR equivalents
- Updated all URLs and API endpoints
- Sanitized commit history references in documentation

Technical changes:
- New modules: shell/classifier, shell/executor, shell/kubectl, shell/kubeconfig
- Enhanced AI providers: ollama.rs, openai.rs with function calling
- New Tauri commands: shell execution, kubeconfig management, tool calling detection
- Database migrations: shell_execution_audit table
- Frontend: ShellApprovalModal, ShellExecution, KubeconfigManager pages
- CI/CD: kubectl bundling, multi-platform builds, Gitea Actions integration

Version: 1.0.8

Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>
2026-06-05 14:12:43 -05:00
Shaun Arman
decd1fe5cf fix(ci): replace docker:24-cli with alpine + docker-cli in build-images
act_runner v0.3.1 has special-case handling for images named docker:*:
it automatically adds /var/run/docker.sock to the container's bind
mounts. The runner's own global config already mounts the socket, so
the two entries collide and the container fails to start with
"Duplicate mount point: /var/run/docker.sock".

Fix: use alpine:latest (no special handling) and install docker-cli
via apk alongside git in each Checkout step. The docker socket is
still available via the runner's global bind — we just stop triggering
the duplicate.
2026-04-12 20:16:32 -05:00
Shaun Arman
f54d1aa6a8 fix(ci): remove explicit docker.sock mount — act_runner mounts it automatically 2026-04-05 21:18:11 -05:00
Shaun Arman
eb8a0531e6 feat(ci): add persistent pre-baked Docker builder images
Add three Dockerfiles under .docker/ and a build-images.yml workflow that
pushes them to the local Gitea container registry (172.0.0.29:3000).

Each image pre-installs all system deps, Node.js 22, and the Rust cross-
compilation target so release builds can skip apt-get entirely:

  trcaa-linux-amd64:rust1.88-node22   — webkit2gtk, gtk3, all Tauri deps
  trcaa-windows-cross:rust1.88-node22 — mingw-w64, nsis, Windows target
  trcaa-linux-arm64:rust1.88-node22   — arm64 multiarch dev libs, Rust 1.88

build-images.yml triggers automatically when .docker/ changes on master
and supports workflow_dispatch for manual/first-time builds.

auto-tag.yml is NOT changed in this commit — switch it to use the new
images in the follow-up PR (after images are pushed to the registry).

One-time server setup required before first use:
  echo '{"insecure-registries":["172.0.0.29:3000"]}' \
    | sudo tee /etc/docker/daemon.json && sudo systemctl restart docker
2026-04-05 21:07:17 -05:00