125 commits

This branch

This branch

All branches

Author	SHA1	Message	Date
KeiSei84	2873474486	style(kei): brand splash colors (голубой logo + жёлтый values), bump v0.16→v0.38 ... Splash was cyan; rebrand to the blue/yellow palette: sky-blue (38;5;39) logo + dim-blue separators, gold (38;5;220) brand line + field values. Version string was stale (v0.16 → v0.38). Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>	2026-05-22 13:49:44 +08:00
KeiSei84	6d68a3f1ad	fix(onboarding): no crash on text input, Claude Code default, explanations ... Three issues a real curl|bash user hit: 1. CRASH: typing a word (e.g. "claude") at any menu → $((ans-1)) treats it as a variable in bash arithmetic → "unbound variable" under set -u → install dies. Added _onb_read_choice (numeric+range validation, re-prompt) for all 4 menus. 2. No Claude under subscription: the kit installs into Claude Code yet the wizard offered only OpenAI Codex under subscription. Added claude-code provider (bumped kei-registries submodule c559065→b904993) + made subscription the default transport and claude-code the default provider — Enter,Enter,Enter lands on Claude Code (no API key). 3. install died at line 178 for any no-key provider (claude-code/codex/local): onboarding_run ended on a `&&` that is false when there are no auth keys → returned 1 → set -e aborted. Added explicit `return 0`. Plus per-step explanations (en+ru) and auto-select when a step has one option. Verified piped-under-pty: Enter-defaults → Claude Code, junk input → re-prompt (0 crashes), full install completes. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>	2026-05-22 12:42:50 +08:00
KeiSei84	15d50f1478	fix(web-install): don't hang after 'delegating' in interactive curl|bash ... curl|bash makes bash read THIS script byte-by-byte from the pipe. A bare `exec < /dev/tty` swapped stdin, then bash tried to read the NEXT line (the `exec ./bootstrap.sh`) from the keyboard → infinite hang after "delegating to bootstrap.sh", bootstrap never started, no profile/language menu. Fix: merge the redirect INTO the bootstrap exec (one command), so the process is replaced the instant stdin is swapped and bash never reads another script byte from the (now-wrong) stdin. Verified: piped-under-pty buggy=HANG, fixed=bootstrap starts with stdin=tty. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>	2026-05-22 10:58:44 +08:00
KeiSei84	01d5aa510f	fix(install): run onboarding + profile wizard in curl|bash (gate on stdin, not stdout) ... web-install.sh tees stdout to a logfile (exec > >(tee) 2>&1), so -t 1 is false even in an interactive curl|bash. The /dev/tty fix reattached stdin but the wizard gates required BOTH -t 0 and -t 1, so onboarding (language select) and bootstrap's profile wizard were silently skipped on the primary install path. Prompts go to stderr and read from stdin — interactive stdin is the only real requirement (already the proven pattern in lib-plan.sh confirm screen). Gates now require interactive stdin only: bootstrap.sh profile wizard lib-onboarding.sh onboarding_should_run + preflight-continue prompt lib-preflight.sh CLI-install offer prompt lib-hooks.sh activate-hooks prompt Non-interactive (CI / </dev/null / no /dev/tty) still skips — verified. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>	2026-05-22 03:58:55 +08:00
denis	2fa348f467	feat(pet): comprehensive language map (60+)	2026-05-21 18:31:05 +00:00
denis	4e62e921e9	feat(pet): comprehensive reflection (60+ langs, all agents, errors)	2026-05-21 18:30:01 +00:00
denis	e8df152549	feat(pet): show session tokens + context% from statusLine stdin	2026-05-21 17:50:47 +00:00
denis	6d8f07ab90	refactor(pet): read kit agent tracking (SSoT), drop duplicate	2026-05-21 17:15:07 +00:00
denis	752654f049	refactor(pet): read kit agent tracking (SSoT), drop duplicate	2026-05-21 17:14:55 +00:00
denis	13e536ec1c	refactor(pet): read kit agent tracking (SSoT), drop duplicate	2026-05-21 17:14:17 +00:00
denis	a965ad3b7c	fix(pet): token extraction via jq totalTokens + persist token total	2026-05-21 17:05:48 +00:00
denis	ac1f0ebaec	fix(pet): token extraction via jq totalTokens + persist token total	2026-05-21 17:04:38 +00:00
denis	3c67914788	feat(pet): agent emojis + multi-agent display + plan emoji + language icons	2026-05-21 12:21:00 +00:00
denis	ac6a020612	feat(pet): agent emojis + multi-agent display + plan emoji + language icons	2026-05-21 12:20:47 +00:00
denis	e129745319	feat(pet): agent emojis + multi-agent display + plan emoji + language icons	2026-05-21 12:20:45 +00:00
denis	cb694cc96a	fix(web-install): tolerate missing /dev/tty in non-interactive curl|bash	2026-05-21 10:53:21 +00:00
denis	305787fae3	fix(install): make fresh install complete + ship tamagotchi (#1)	2026-05-20 18:50:09 +00:00
Denis Parfionovich	53ada048b2	fix(install): backup_file mv→cp -a, install --activate-hooks больше не падает ... gx10 fail при первой установке (фото юзера 2026-05-18): jq: error: Could not open file /home/keisei/.claude/settings.json [error] jq-merge produced invalid output; ... unchanged [error] install failed at line 126; rolled back Root cause: backup_file() (install/lib-backup.sh:56) делал `mv target backup`, затем activate_hooks() → _jq_merge_hooks() пыталась читать оригинал target'а через jq — но оригинал уже унесён mv'ом, открыть нечего. jq fail → rollback всей установки. Fix: cp -a вместо mv (как уже сделано в backup_path() для директорий). Атомарный безопасный бэкап; оригинал остаётся для jq, потом _jq_merge_hooks атомарно переписывает его mv tmp → target.	2026-05-18 14:33:22 +08:00
Denis Parfionovich	fc0758d2bb	chore: версия 0.38.0 единая + warning-fixes + mold для release-job ... 1. Версии npm-пакетов приведены к 0.38.0 (был зоопарк 0.14.0/0.14.6): _ts_packages/{,packages/{gmail,grok,mcp-server,recall,telegram,youtube}-adapter} 2. Rust warnings (cargo check workspace): - kei-cortex: deprecated validate_path → validate_path_lexical, удалён orphan-wrapper в read.rs, struct Input → pub(crate) - frustration-matrix: #[allow(dead_code)] на confusion_* поля EvalReport + train_from_dir (будущий CLI) 3. CI release.yml job 'release' падал на Build kei-changelog: clang invalid linker '-fuse-ld=mold' — в .cargo/config.toml жёстко прописан mold для linux. Добавлен Install mold шаг (как уже сделано в build-release matrix).	2026-05-18 13:41:37 +08:00
Denis Parfionovich	d1cbdd8892	fix(ci): vendored openssl-sys для cross-compile x86_64-apple-darwin ... CI run 26014515768 — `x86_64-apple-darwin` упал на webauthn-attestation-ca → openssl-sys 0.9.115: pkg-config не настроен для cross-compile (macos-latest = arm64, target = x86_64). Фикс: добавлен прямой dep `openssl-sys = { version = "0.9", features = ["vendored"] }` в kei-auth-webauthn — компилит openssl из исходников, не требует системного. Транзитивно достаточно одного объявления feature во всём workspace (Cargo unifies features).	2026-05-18 13:08:40 +08:00
Denis Parfionovich	5f6b4f2620	fix(ci): regenerate bun.lock — sync с package.json для CI release ... CI v0.38.0 mcp-server билды все 5 упали на `bun install --frozen-lockfile` с «lockfile had changes, but lockfile is frozen». В lockfile отставали: - @keisei/mcp-server 0.14.0 → 0.14.6 - ajv 8.18.0 → 8.20.0 - express-rate-limit 8.3.2 → 8.4.1 - hono 4.12.14 → 4.12.16 Пересоздан `rm bun.lock && bun install` под bun 1.3.14 (тот же что в CI).	2026-05-18 13:01:36 +08:00
Denis Parfionovich	a8101b8f60	fix: install audit 2026-05-18 — cortex profile + TTY in web-install ... audit-2026-05-18 (соседняя сессия на gx10, 3 бага из 5 подтверждены): #1 [HIGH] cortex profile сломан — kei-cortex depends on kei-router path-dep'ом, а kei-router → kei-model. kei-model не было в profile list, cargo build падал с «failed to read kei-model/ Cargo.toml». Добавил kei-model в cortex profile. #3 [HIGH] cortex-ui отсутствует в репо — был в profile list, но исходника нет ни в _primitives/_rust/, ни в _ts_packages/. Удалил из profile. #4 [MEDIUM] web-install.sh теряет /dev/tty — exec | tee + curl|bash делают stdin pipe, wizard'у read нечего читать, onboarding падает на первом prompt. Переподключаю stdin к /dev/tty перед exec bootstrap.sh, если /dev/tty доступен. #2 (linux-arm64 prebuild) — tag v0.38.0 не запушен на github, CI release.yml не сработал. Требует RULE 0.1 triple-confirm. #5 (non-TTY default = minimal) — уже корректно, install.sh:141 `PROFILE="${PROFILE:-minimal}"` + lib-menu.sh skip on non-TTY.	2026-05-18 12:38:35 +08:00
Denis Parfionovich	1d958b3587	fix(security): patent-leak + classical-safety audit fixes ... PATENT-LEAK (HIGH): - hooks/no-python-without-approval.sh: genesis-verify пример → my-project - docs/encyclopedia/rust-crates-H-N.md: убран термин «Genesis IP, ITAR» PATENT-LEAK (MEDIUM): - CHANGELOG: project-vortex → reduced scope - _blocks/registries (submodule bump): убраны имена приватных project-specialists из комментария agent-profiles.toml - docs/encyclopedia/skills-and-agents.md: ML/RL/CfC → ML/RL CLASSICAL-SAFETY (MEDIUM): - install/lib-preflight.sh: eval "$version_cmd" → bash -c "..." (защита от инъекции если providers.toml расширят) - _primitives/provision-{vultr,hetzner}.sh: /tmp/$$ → mktemp (устраняет symlink TOCTOU race) - web-install.sh: chmod 600 + umask 077 на ~/.keisei-install.log (Forgejo admin creds + токены в логе) - scripts/regen-counts.sh: eval "$1" → bash -c NOT FIXED (требуют действий юзера): - HIGH: @keisei scope не зарегистрирован на npmjs.org — typosquat возможен пока не задан NPM_TOKEN и не сделан publish - HIGH: install.keisei.app DNS не настроен — DNS-hijack возможен - LOW: parfionovich@keilab.io в SECURITY.md, plugin.json, ~40 Cargo файлах — intentional contact, оставлен Локальный git author установлен на parfionovich@keilab.io вместо parfionovichd@icloud.com (только для будущих коммитов в этом репо).	2026-05-18 12:05:25 +08:00
Parfii-bot	170c850ca0	fix(install): public install via keigit.com (Vultr) — no github needed ... Что меняется: - README.md: git clone instruction → https://keigit.com/keisei/KeiSeiKit-1.0.git (был приватный github, внешний clone падал 404) - .gitmodules: kei-registries submodule → keigit.com/keisei/kei-registries.git (был приватный github, --recurse-submodules падал) - web-install.sh: KEISEI_REPO default → https://keigit.com/keisei/... (был git@github.com:KeiSeiLab/...) - install.sh: NO_EXECUTE check ПЕРЕД check_prereqs, чтобы --no-execute работал без установленных зависимостей. - install/lib-args.sh: новый флаг --skip-prereqs (SKIP_PREREQS) — для CI и dry-run сценариев. - marketplace.json + plugin.json: новые манифесты (version=0.38.0 из git tag) для Claude Code /plugin marketplace add + install. На keigit.com (45.77.41.204, публичный) залиты публичные репо keisei/KeiSeiKit-1.0 + keisei/kei-registries. Anonymous git clone работает. GitHub mirror (KeiSeiLab/*) остаётся приватным как backup.	2026-05-18 11:47:13 +08:00
Parfii-bot	5b8e066888	refactor(install): production-ready финальный круг ... 1. lib-onboarding.sh раскидан на 3 куба (Constructor Pattern <200 LOC): - lib-onboarding-registry.sh (79 LOC) — парсеры providers/models.toml + onboarding_fallback_providers (14 провайдеров) + onboarding_auth_env_for_provider helper (был inline в collect_auth) - lib-onboarding-ui.sh (189 LOC) — pick_language/transport/provider/model + collect_auth (whiptail/bash select) - lib-onboarding-state.sh (57 LOC) — write_secrets + write_config + user-model-override.toml для kei-model-router - lib-onboarding.sh (95 LOC) — тонкий оркестратор: should_run + run Сам lib-onboarding.sh source'ит 3 подкуба автоматически. Глобалы (ONBOARDING_*, REGISTRY_*, ONBOARDED_FLAG, etc.) объявлены в оркестраторе, подкубы их используют через имена. 2. lib-menu.sh локализован: - whiptail title + radiolist prompt через ${STR_MENU_TITLE} + ${STR_MENU_SUBSTRATE} + ${STR_MENU_PROFILE_PROMPT}. - Plain heading тоже использует словарь. - 12 коротких имён профилей (minimal/core/dev/...) — оставлены EN как стабильные id (не переводятся). 3. _blocks/build-index.sh — детерминированная регенерация INDEX.md. Группировка по 14 категорийным префиксам + "Прочие" для остальных. Безопасно перезапускать. INDEX.md обновлён через этот скрипт (минимальный diff — добавлена ссылка на build-index.sh в шапке). Проверено: bash -n чисто, unit тесты onboarding_list_providers/ transports/models OK, non-TTY smoke ./install.sh --profile=minimal --no-execute проходит.	2026-05-17 23:57:23 +08:00
Parfii-bot	5327befef6	docs(_blocks): INDEX.md — реестр 84 блоков для assembler ... Авто-сгенерирован из _blocks/*.md по категориям префикса: API / AUTH / CI / DB / DEPLOY / DOCS / DOMAIN / MODE / OBS / PATH / RULE / SCRAPER / SECURITY / STACK / TEST + прочие. Каждая запись: `name` — первая H1-строка файла. Использование в _manifests/<agent>.toml: blocks = ["baseline", "rule-pre-dev-gate", "api-anthropic", ...] Assembler читает блоки из _blocks/, склеивает в финальный _generated/<agent>.md. Новый блок = просто .md в _blocks/. Регенерация INDEX.md — TODO build-index.sh скрипт (сейчас сгенерирован вручную bash циклом).	2026-05-17 20:39:06 +08:00
Parfii-bot	33f1376ee1	feat(i18n): расширил язык-набор с 2 до 16 ... Новые словари: uk Українська de Deutsch fr Français es Español pt Português it Italiano tr Türkçe ar العربية hi हिन्दी zh 简体中文 ja 日本語 ko 한국어 id Bahasa Indonesia vi Tiếng Việt Каждый файл — 17 STR_* ключей (тот же контракт что en.sh + ru.sh). lib-i18n.sh::i18n_available_languages — единый список (en + 15) для меню выбора в мастере. i18n_load_lang упрощён: всегда грузит английский как fallback, потом поверх — словарь языка (отсутствующий ключ остаётся английским). onboarding_pick_language теперь генерирует whiptail/bash select из i18n_available_languages динамически — добавление нового языка = один файл `install/i18n/<код>.sh` + одна строка в available_languages, дальше всё подхватится автоматически. Перевод формальный, без излишеств. Welcome баннер всегда EN (юзер ещё не выбрал на момент показа). Проверено: bash -n всех 16 словарей чисто, roundtrip всех языков работает (i18n_load_lang en/ru/uk/de/fr/es/pt/it/tr/ar/hi/zh/ja/ko/id/vi выдают локализованные STR_DONE_TITLE + STR_TR_DIRECT_API), non-TTY smoke install --no-execute проходит.	2026-05-17 16:51:44 +08:00
Parfii-bot	305140f20b	fix(install): close MEDIUM/LOW from RULE 0.26 audit ... - preflight failure handling: вместо `|| true` (молчаливое продолжение при упавшем preflight) — явный prompt «продолжить? [y/N]» с return 1 при отказе. Без TTY печатает warning и продолжает. Это закрывает HIGH bug-9: «.onboarded флаг выставляется при нерабочей конфигурации». - lib-preflight.sh::preflight_check_cli — общий helper (command -v + offer-install + version echo). Убирает 6-file boilerplate (хотя сами per-provider файлы пока не переписаны под него — это отдельный шаг). - onboarding_fallback_providers: расширен с 3 до 14 провайдеров, покрывает все 7 транспортов. Был дрейф vs providers.toml (14 vs 3), юзер без submodule видел только anthropic+openai+ollama. - STR_PICK_PROVIDER plural mismatch: whiptail и plain ветки теперь используют один fallback "Provider within" (раньше plain имел "Providers within", whiptail — "Provider within"). - STR_DONE_NEXT удалён из en.sh + ru.sh (мёртвый ключ). - Новые ключи: STR_MENU_* (для lib-menu.sh) + STR_PREFLIGHT_FAILED + STR_PREFLIGHT_CONTINUE. lib-menu.sh начал использовать STR_MENU_TITLE / STR_MENU_SUBSTRATE (частичная локализация, остальное меню — отдельной задачей). Тесты: bash -n чисто, i18n round-trip EN/RU работает, non-TTY smoke install --no-execute проходит.	2026-05-17 16:37:28 +08:00
Parfii-bot	a3ffaed374	fix(install,router): close 5 HIGH audit findings ... 1. HIGH-1: onboarding ↔ kei-model-router связка До: onboarding мастер писал ~/.claude/config/onboarding.toml, но router его не читал — выбор провайдера декоративный. После: lib-onboarding.sh::onboarding_write_config доп. пишет ~/.claude/config/user-model-override.toml; registry.rs::Registry получил load_user_override() возвращающий UserModelOverride. Приоритет: --pinned > user-override > agent-profiles default_model_ref. 2 новых теста (round-trip TOML, optional transport). 2. HIGH-2: eval "$install_cmd" → bash -c "$install_cmd" До: lib-preflight.sh::preflight_offer_install делал eval. После: bash -c с явным subshell + печать команды юзеру до запуска. 3. HIGH-3: codex.sh regex false-pass До: grep -qiE "logged.in|active" пропускал "not logged in" как pass. После: сначала negative-pattern (not logged|signed out|please log in), потом positive (\blogged in\b|status: active|auth: yes). 4. HIGH-4: path traversal в source preflight До: lib-preflight.sh::preflight_run делал source без валидации provider id — `../../../evil` сработал бы. После: whitelist regex ^[a-z0-9][a-z0-9_-]{0,63}$ + realpath проверка что resolved путь не вышел за PREFLIGHT_DIR. 5. HIGH-5: curl|sh без verification ollama-local.sh + google-vertex.sh теперь печатают предупреждение что Linux-установка тянет shell-скрипт с внешнего сервера без проверки хэша/подписи, и предлагают альтернативу. MEDIUM попутно: - anthropic-bedrock.sh: один вызов aws sts get-caller-identity вместо двух (экономит 1-3с), различает cred-error от network по тексту stderr, маскирует account ID в ARN перед печатью. - mlx-local.sh: pip install --user mlx-lm вместо global pip install (не требует sudo, не загрязняет system Python). Тесты: cargo test --lib 80/80, bash -n всех изменённых файлов чисто.	2026-05-17 16:28:33 +08:00
Parfii-bot	0a8c93561f	feat(install): preflight модуль — проверка CLI по выбранному провайдеру ... Добавлен шаг между выбором модели и сбором ключей: для провайдеров требующих внешний CLI/daemon — проверка наличия, инструкция по установке, опциональный авто-install (TTY only). install/lib-preflight.sh — диспетчер: preflight_run <provider-id> - ищет install/preflight/<id>.sh, source'ит, вызывает preflight_check_<sanitized_id> - функция возвращает 0/1, печатает инструкцию в stderr - non-TTY: только печать, без вопросов preflight_offer_install <cli> <install-cmd>: - TTY: спрашивает [y/N/skip], выполняет install-cmd - non-TTY: печатает и пропускает install/preflight/ — 6 файлов (только для провайдеров с CLI): anthropic-bedrock.sh — aws CLI + sts get-caller-identity google-vertex.sh — gcloud CLI + project config codex.sh — codex CLI (npm) + login status ollama-local.sh — ollama binary + 127.0.0.1:11434 daemon mlx-local.sh — mlx_lm.server (arm64 only) + 127.0.0.1:8080 lmstudio-local.sh — порт 127.0.0.1:1234 (desktop app) Direct-api провайдеры (anthropic, openai, xai, deepseek, google) + proxy (litellm, openrouter) + openai-azure — preflight-файла нет, диспетчер тихо пропускает, ключ собирается обычно. Тесты: bash -n чисто на всех 8 файлах, unit dispatcher показывает silent-pass для anthropic, warn+exit-1 для bedrock без aws на PATH.	2026-05-17 15:57:54 +08:00
Parfii-bot	ab260f429e	feat(install): i18n модуль + welcome banner ... Структура локализации: install/i18n/en.sh — английский словарь (дефолт, fallback) install/i18n/ru.sh — русский словарь install/lib-i18n.sh — лоадер + welcome banner Поток: 1. install.sh source'ит lib-i18n.sh и зовёт i18n_load_default → все строки на английском. 2. Если onboarding нужен — печатается welcome banner ASCII-рамка на английском (язык ещё не выбран). 3. onboarding_pick_language — единственный двуязычный шаг ("Choose language / Выберите язык"). По выбору вызывает i18n_load_lang ru|en — перегружает словарь. 4. Все последующие шаги (transport / provider / model / auth / completion) идут на выбранном языке. Fallback: если ru-словарь не имеет ключа — используется английское значение (load_default вызывается до загрузки ru.sh, переменные перезаписываются поверх). lib-onboarding.sh переведён со смешанных hardcoded строк на ${STR_*} placeholders. Тесты: bash -n всех 5 файлов чисто, i18n loader unit-тест показывает EN/RU перегрузку, non-TTY smoke install --no-execute проходит.	2026-05-17 15:35:10 +08:00
Parfii-bot	c844524f68	fix(kei-buddy): close 3 HIGH audit findings from session multi-critic swarm ... 1. OID-check в parse_x25519_pkcs8_pem До: брался последний 32-байтный slice любого PKCS#8 DER, OID не проверялся. RSA/EC/Ed25519 ключ молча давал 32 неправильных байта → decrypt падал с generic "wrong key" без объяснения. После: строгая проверка длины (48 байт) + OID 1.3.101.110 (X25519, byte slice 9..12 = 0x2b,0x65,0x6e). Внешний openssl ключ другого алгоритма теперь даёт явную ошибку с указанием реального OID. Константы X25519_OID + X25519_PKCS8_DER_LEN. RFC 8410 §3 + §7 ссылка в doc-комментарии. 2. x25519-dalek feature `zeroize` До: features=["static_secrets"] — StaticSecret хранил priv-ключ в куче без затирания при Drop. Локальный priv_raw.zeroize() стирал только стек-копию, оригинал в куче оставался до GC. После: features=["static_secrets","zeroize"] — StaticSecret сам реализует ZeroizeOnDrop, ключ затирается при выходе из scope. 3. Два новых теста: - parse_rejects_wrong_length_der — 32-байтный DER (вместо 48) отклоняется с сообщением про "48 bytes" - parse_rejects_wrong_oid — DER с OID Ed25519 (0x2b,0x65,0x70) отклоняется с сообщением про "X25519" 8/8 тестов модуля проходят, cargo check workspace чисто. Старая 0.14.5 mcp-server (с source maps содержавшими /Users/ denisparfionovich/...) удалена с keigit.com отдельной операцией через Forgejo DELETE API.	2026-05-17 13:41:18 +08:00
Parfii-bot	9c6df65ae2	feat(install): onboarding wizard — transport→provider→model→keys ... Новый интерактивный мастер при первой установке: 1. Язык интерфейса (RU/EN) 2. Транспорт (direct-api / aws-bedrock / azure-openai / google-vertex / local / proxy / subscription) 3. Провайдер внутри транспорта (14 вариантов суммарно) 4. Модель из выбранного провайдера (3 моделей Anthropic, и т.д.) 5. Ключи/креды (silent read, пишет в ~/.claude/secrets/.env chmod 600) Skip-логика: - флаг ~/.claude/.onboarded - env KEISEI_SKIP_ONBOARD=1 - не-TTY запуск Запись: ~/.claude/config/onboarding.toml — выбор lang/transport/provider/model ~/.claude/secrets/.env — ключи провайдера ~/.claude/.onboarded — флаг прохождения Парсер toml — pure awk (без зависимостей). Реестры из submodule _blocks/registries. Submodule bumped до afe0c6f с новым полем transport. Fallback если submodule не подтянут: anthropic + sonnet.	2026-05-17 02:24:50 +08:00
Parfii-bot	35136a9840	feat(npm-publish): keigit as primary registry, npmjs reserved for future ... - _ts_packages/tsconfig.base.json: sourceMap=false, declarationMap=false (source maps leaked absolute dev paths in published tarballs). - All 6 @keisei/* packages: publishConfig.registry = keigit.com. mcp-server bumped 0.14.5 -> 0.14.6 (republished without maps). - .github/workflows/release.yml split into two jobs: npm-publish-keigit: primary. Activates on KEIGIT_NPM_TOKEN + KEIGIT_NPM_USER secrets. Publishes via direct curl PUT (Forgejo requires Basic auth; npm CLI sends Bearer). npm-publish-npmjs: reserved for future. Activates on NPM_TOKEN secret. Currently no token -> job skipped gracefully. End-to-end verified: clean dir + scope @keisei -> keigit + npm install pulls 145 deps, no leaked paths, no .map files in any of 6 packages.	2026-05-17 00:18:44 +08:00
Denis Parfionovich	3c06e98092	feat(web-install): curl-pipeable bootstrapper at install.keisei.app ... Thin wrapper (88 LOC) that lets a fresh machine install KeiSeiKit with one line, no prior clone: curl -fsSL https://install.keisei.app | bash curl -fsSL https://install.keisei.app | bash -s -- --profile=dev --yes ## Why a third install entry point Existing install path required `git clone` + `cd` + `./bootstrap.sh` — three commands the user has to type, plus they must already have the repo URL handy. For private repos with SSH auth this is real friction. `web-install.sh` is meant to be served as a static file (Cloudflare Pages / nginx) at install.keisei.app. It does ONE thing: prereq → clone → delegate to ./bootstrap.sh. Single source of truth — no duplicated install logic. ## What it does 1. Splash + log to ~/.keisei-install.log 2. Hard prereq: git (the one thing bootstrap.sh cannot self-install) 3. SSH auth probe for git@github.com — clear error message if key missing 4. Clone/pull KeiSeiLab/KeiSeiKit-1.0 to $KEISEI_ROOT (default ~/.local/share/keisei) 5. git submodule update --init (pulls kei-registries) 6. exec ./bootstrap.sh "$@" — pass-through all flags ## Env overrides - KEISEI_ROOT — install location - KEISEI_REPO — git URL - KEISEI_REF — branch/tag/sha ## Hosting Push this file to install.keisei.app (Cloudflare Pages, S3+CF, nginx static — anything that serves a single .sh over HTTPS). ## README updated Quick start section now shows the curl one-liner as the recommended path. Repo URL corrected from KeiSei84 → KeiSeiLab org. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>	2026-05-16 16:44:26 +08:00
Parfii-bot	86834b82af	feat(kei-buddy): provision_decrypt — VPS-side blob decryption ... Mirrors keisei-marketplace/src/lib/crypto-box.ts::sealBoxToVps. Two new subcommands on kei-buddy bin: - genkeys --key <path> → writes PKCS#8 PEM x25519 priv, prints standard-base64 pub (44 char) - decrypt-and-export --vps-key <pem> --blob <json> --env-out <env> → ECDH(vps_priv, ephPub) → HKDF-SHA256 info=keibuddy-token-v1 → XChaCha20-Poly1305 decrypt → append BOT_TOKEN/TELEGRAM_BOT_TOKEN to env file (replaces stale, keeps other lines) Cloud-init in hetzner.ts already calls these. Without this commit the VPS could decode its own pubkey but had no way to recover the sealed bot-token blob — the bot would never log into Telegram. Crypto stack (mirror of @noble in TS): - x25519-dalek 2 (static_secrets feature) - chacha20poly1305 0.10 (XChaCha20Poly1305) - hkdf 0.12, sha2 0.10 - base64 0.22 (accepts URL_SAFE_NO_PAD + STANDARD) - zeroize 1 for priv-key wipe Tests (6/6 pass): - roundtrip_seal_then_decrypt — re-implement marketplace sealing in Rust, verify our decryption recovers plaintext - decrypt_and_export_writes_env_file — full e2e through CLI surface - decrypt_and_export_replaces_existing_token — stale BOT_TOKEN replaced, other env lines preserved - decrypt_rejects_wrong_key — XChaCha20 AEAD tag fails on wrong key - pem_roundtrip — write_pkcs8 + parse_pkcs8 round-trip - b64decode_accepts_urlsafe_and_standard — handles both encodings Cross-verified end-to-end: $ node marketplace_seal.mjs <pub> <token> → /tmp/blob.json $ kei-buddy decrypt-and-export --vps-key ... → BOT_TOKEN matches input Constructor Pattern: 1 file (provision_decrypt.rs, 344 LOC), 1 module, 1 responsibility (token-blob decryption + key generation). === STATUS-TRUTH MARKER === shipped: functional stubs: 0 cargo-check: PASS behaviour-verified: yes (e2e marketplace-seal → kei-buddy-decrypt round-trip) follow-up-required: - none	2026-05-15 17:49:59 +08:00
Parfii-bot	e9b0debec3	merge: feat/agent-dna-three-layer — agent_shell_dna cube + registry submodule + audit closures	2026-05-14 15:16:26 +08:00
Parfii-bot	40a5c2e55f	fix(audit-r2): HIGH+MEDIUM closures from second round audit ... HIGH-1: submodule URL ssh → https + shallow (DNS spoofing surface, both repos) HIGH-3: docs/DNA-MIGRATION.md — two-format coexistence policy (4-seg legacy task-class vs 5-seg agent-shell marketplace) HIGH-5: agent_shell_dna doc — explicit consumer = marketplace, planned ledger integration; module-doc clarification MEDIUM: Haiku model id pinned to claude-haiku-4-5-20251001 across pricing.rs::from_slug + ::name + escalate.rs tests + select_posterior fixture + kei-registries submodule (pushed c39e528→7aaa6a7)	2026-05-14 13:18:14 +08:00
Parfii-bot	d01649b355	chore: registries → submodule from KeiSeiLab/kei-registries ... Closes audit HIGH-1 (SSoT drift between KSK and marketplace). _blocks/registries/ now tracks the single canonical kei-registries repo; marketplace consumes the same submodule.	2026-05-14 01:59:36 +08:00
Parfii-bot	7281e7ecea	fix(registries+router): MEDIUM/LOW audit batch ... closes MEDIUM/LOW from feat/agent-dna-three-layer audit: - models.toml: cache_write_1h_per_mtok_micro added to all 11 entries (Anthropic: 200M/600M/1000M micro = $2/$6/$10 per MTok per pricing page; other providers: 0 placeholder) - main.rs (kei-model-router): WAL pragma + busy_timeout errors now logged to stderr instead of silently dropped (previously .ok() swallowed both) - models.toml: Haiku id pin TODO documented (router still hardcodes alias)	2026-05-14 00:04:18 +08:00
Parfii-bot	7cd74071a1	feat(kei-model-router): agent_shell_dna parser for 5-segment marketplace DNA ... Adds `agent_shell_dna` cube parsing the new agent-shell::<p>:<m>:<c>::<scope>::<body>-<nonce> format emitted by keisei-marketplace/src/lib/cryptoid.ts::agentDna. Companion to legacy 4-segment `dna_class` (untouched per RULE Don't-Rewrite). Accepts both 8-hex (legacy) and 16-hex (current) lengths for forward-compat. - new file: src/agent_shell_dna.rs (235 LOC, 13 tests all pass) - lib.rs: pub mod agent_shell_dna + module doc Closes HIGH-2 (dna-three-layer audit).	2026-05-13 23:54:35 +08:00
Parfii-bot	766504d345	fix(kei-model-router): close 2 HIGH regressions from re-audit ... Re-audit (codex + critic-bug) on commit 18766171 confirmed all 10 original findings closed, but flagged 2 HIGH regressions the fix itself introduced. NEW-1 fix — non-Claude profile no longer falls back to Opus - main.rs::build_select_input: when Model::from_slug returns None (any non-Anthropic provider — codex/xai/deepseek/google/local), cmd_select bypasses posterior+kernel entirely and prints (provider, model_id) directly with reason="profile_default_non_claude". - Posterior machinery stays Claude-only by design — RULE 0.20 escalation ladder operates on Anthropic family. Cross-provider routing is registry-driven, not enum-driven. - Test non_claude_profile_triggers_provider_bypass: pick("codex-reviewer") = ("codex","gpt-5-codex"); Model::from_slug("gpt-5-codex") = None — assertion locks behaviour. NEW-2 fix — no-ledger path preserves profile-resolved fallback - print_decision_no_ledger signature changed from (dna, prompt) to (input: &DecisionInput, dna). Uses input.fallback.slug() so the Sonnet/Haiku selected by profile resolution survives instead of being overwritten with constructor-default Opus. - Test decision_input_preserves_set_fallback verifies the round-trip. Verification (orchestrator-side): - cargo check → clean - cargo test --release → 65 passed / 0 failed (was 63 → +2 regression tests) - Constructor Pattern → all files ≤ 200 LOC (main.rs 197 at limit) DNA-INDEX.md regenerated by kei-registry hook (cosmetic). === STATUS-TRUTH MARKER === shipped: functional stubs: 0 cargo-check: PASS behaviour-verified: yes follow-up-required: - CLI stdout for non-Claude profiles gains a "reason: profile_default_non_claude" line; downstream parsers must handle the new variant.	2026-05-13 22:44:00 +08:00
Parfii-bot	187661714f	fix(kei-model-router): close 10 audit-blocker findings ... Codex CRITICAL + 4 HIGH + 5 MEDIUM/LOW from RULE 0.23 dual-review and RULE 0.25 multi-critic swarm — all closed. CRITICAL fix - Model::slug() ledger compatibility: posterior.rs + select_kernel.rs query `WHERE model = ?2 OR model = ?3`, binding canonical + legacy slug pair via new `Model::legacy_slug()`. Production ledger rows written under "haiku"/"sonnet"/"opus" remain visible to posterior aggregation. Regression test ledger_legacy_slug_counted. HIGH fixes - cmd_select(): no longer early-returns on profile match. Profile's default_model_ref now becomes DecisionInput.fallback; select() always runs, posterior/kernel evidence wins if present. RULE 0.20 cost optimisation restored for all 18 registered agents. - Registry pricing SSoT: DecisionInput now carries Option<Arc<Registry>>. estimated_cost() tries registry first; hardcoded match is documented fallback only. select_posterior.rs no longer duplicates models.toml constants. - registry.rs portability: include_str!() embeds the three TOMLs at compile time. load_embedded() new; disk path tried first via KEI_REGISTRIES_DIR, embedded as fallback. `cargo install`d binaries now find registries unconditionally. embedded_registry_matches_disk test ensures embedded ≡ disk source. - next_model() ambiguity: replaced Option<&Model> with EscalationResult enum (Next(&Model) / AtTop / NotFound). Callers can distinguish typo from ceiling. 5 new tests. MEDIUM fixes - posterior.rs u32 overflow: `(n_plus + n_minus) as u32` → `u32::try_from(n_plus.saturating_add(n_minus)).unwrap_or(u32::MAX)`. overflow_guard_on_huge_n test with i64::MAX. - pick() unknown-model: now returns None when default_model_ref's model is absent from registry. Inverted the deprecation guard. - HOME unset: disk_registries_dir() returns None on empty HOME and falls through to embedded registries. open_ledger() logs warning and returns None instead of opening at malformed path. - SQLite WAL + busy_timeout: applied to ledger connection in open_ledger() — concurrent CLI invocations no longer SQLITE_BUSY. LOW fixes - impl Model consolidation: next_tier() moved to pricing.rs. escalate.rs uses current.next_tier() instead of duplicating logic. - complexity.rs: removed duplicate "ml-implementer" in HEAVY_ROLES. - dna_class.rs: role("") now returns None instead of Some(""). Verification (orchestrator-side, RULE 0.13 §Verify-before-commit): - cargo check → clean - cargo test --release → 63 passed / 0 failed (was 58 → +5 new tests cover legacy-slug, EscalationResult, overflow, unknown-model, embedded) - Constructor Pattern → all files ≤ 200 LOC (max registry.rs 196) - Largest fn from_ledger 28 LOC / limit 30 DNA-INDEX.md regenerated by kei-registry hook (cosmetic). === STATUS-TRUTH MARKER === shipped: functional stubs: 0 cargo-check: PASS behaviour-verified: yes follow-up-required: - (none from this commit; next audit pass before merge to main)	2026-05-13 22:09:19 +08:00
Parfii-bot	4d79049eff	feat(kei-model-router): registry-driven, three-layer DNA ... Removes hardcoded Claude-only Model enum. Pricing constants now read from _blocks/registries/models.toml at startup; provider/model lookup goes through a typed Registry returned by registry.rs. New API surface: - Registry::load(dir) → (providers, models, profiles) - pick(profile_id, &Registry) → Result<(provider_id, model_id)> - cost_micro_cents(model_id, in, out, &Registry) → Option<u64> - next_model(model_id, &Registry) → Option<&Model> (ascending cost, same provider, skip deprecated) Files: - registry_types.rs new 107 LOC (Provider/Model/Profile structs) - registry.rs new 152 LOC (TOML load + lookups) - pricing.rs rew 127 LOC (registry-backed, no constants) - escalate.rs rew 181 LOC (registry-backed ladder + skip deprecated) - select.rs rew 131 LOC - select_kernel.rs new 74 LOC (Constructor-Pattern split) - select_posterior.rs new 178 LOC (Constructor-Pattern split) - posterior.rs rew 197 LOC - calibrate.rs rew 175 LOC - lib.rs rew 53 LOC - main.rs rew 163 LOC (CLI updated to new API) - Cargo.toml dep added toml 0.8 Verification (orchestrator-side, RULE 0.13 §Verify-before-commit): - cargo check → clean - cargo test --release → 58 passed / 0 failed / 0 ignored - LOC limit (Constructor) → max 197 / limit 200 - largest fn cmd_select → ~27 LOC / limit 30 DNA-INDEX.md regenerated by kei-registry hook (primitive count 144 → 150 reflects the 6 new/split modules). === STATUS-TRUTH MARKER === shipped: functional stubs: 0 cargo-check: PASS behaviour-verified: yes follow-up-required: - select.rs `estimated_cost` still embeds inline cost constants mirroring models.toml; if non-Anthropic providers need dynamic pricing in select-time estimation, thread Registry through. - External callers of old `cost_micro_cents(Model, ...)` signature will break — intentional, no external callers in this workspace.	2026-05-13 21:23:53 +08:00
Parfii-bot	3aef8678c0	feat: three-layer agent registries (providers/models/profiles) ... Splits agent definition into stable provider + swappable model + role-bound profile. Adding a new LLM API is one row in providers.toml; new model is one row in models.toml; agent invocation picks any (provider, model) pair through agent-profiles.toml default_model_ref. - providers.toml: 10 providers — anthropic, openai, codex (OAuth), xai, deepseek, google, ollama-local, mlx-local, lmstudio-local, litellm-proxy - models.toml: 11 models with cost_*_per_mtok_micro + context_window + verified_at + deprecated_at - agent-profiles.toml: 18 representative profiles; manifest_path points to the canonical .md in ~/.claude/agents/ Three-layer DNA per the new architecture: agent-shell::<provider>:<model>:<caps>::<scope8>::<body8>-<nonce8> This commit only adds registries — kei-model-router still hardcodes the Claude-only Model enum. Wave 4 will rewire it to read TOML.	2026-05-13 20:51:04 +08:00
Parfii-bot	b87c7685c6	feat(install): add profile=buddy for marketplace 1-click bot provisioning ... Profile bundles the crates kei-buddy needs at runtime: kei-buddy, kei-telegram-webhook, kei-shared, kei-chat-store, kei-social-store, kei-memory-sqlite, kei-router, kei-llm-bridge-mlx. Used by keisei-marketplace cloud-init when user clicks 'хочу своего KeiBuddy' on /keibuddy/setup — Hetzner VPS spawn pulls KeiSeiKit and runs install.sh --profile=buddy --yes.	2026-05-13 10:29:40 +08:00
KeiSei87	e7f6c197ca	chore: dual-identity push smoke-test #2 (SSH key now on KeiSei87)	2026-05-12 23:11:02 +08:00
KeiSei87	4749e28d9b	chore: smoke-test push from KeiSei87 SSH identity ... Empty commit to verify dual-identity push setup: - Author: KeiSei87 <noreply email> - Push via dedicated SSH key ~/.ssh/id_ed25519_keisei87 After landing, GitHub Insights → Contributors should list KeiSei87 alongside KeiSei84.	2026-05-12 23:09:53 +08:00
Parfii-bot	b5d093fbec	fix(kei-cortex/test): serial_test on env-mutating openai tests + wiremock warm-up ... Previous wiremock conversion fixed the listener-lifecycle race but left the underlying problem unsolved: `ensure_env()` mutates the process-global ANTHROPIC_ENDPOINT, and parallel `cargo test` threads race on that write. Manifested as 502 / "error sending request for url …" on the first concurrent test pair under both macOS and Linux. Annotate every #[tokio::test] in openai_loop_wiring.rs + openai_compat.rs with `#[serial_test::serial]` — these are the only tests that touch ANTHROPIC_ENDPOINT via shared_mock_anthropic. serial_test enforces process-wide ordering so the env mutation + HTTP request pair is atomic per test. All other tests stay parallel. Stress: 5 parallel `cargo test` runs all green.	2026-05-12 22:26:42 +08:00
Parfii-bot	b103a9aa64	fix(kei-cortex/test): replace hand-rolled mock with wiremock — closes macOS CI flake ... Previous `tests/common/mod.rs` spawned a mock Anthropic upstream via hand-rolled axum + std:🧵:spawn + own current-thread tokio runtime bound to 127.0.0.1:0. Stable on Linux runner; flaked on macOS GitHub Actions runners: thread 'streaming_responses_runs_real_loop_not_stub' panicked at kei-cortex/tests/openai_loop_wiring.rs:277:5: no responses delta event in stream: event: response.error data: {"error":"model: anthropic request: error sending request for url (http://127.0.0.1:49312/v1/messages)"} Root cause traced to macOS-runner loopback / fd-limit pressure on the dedicated-thread current-thread runtime. wiremock crate runs a production-quality hyper-based mock server, manages its own listener lifecycle, and survives the macOS runner constraints. ## Change - `Cargo.toml`: add wiremock = workspace dev-dep (already 0.6 in workspace) - `tests/common/mod.rs::MockAnthropicServer` rebuilt over wiremock::MockServer - `build_mock(text)` mounts `POST /v1/messages → 200 + canned body` on a wiremock instance - `mock_anthropic_responding_with()` spins one per call on a parked helper thread (preserves `MockAnthropicServer: 'static` lifetime for `shared_mock_anthropic` `OnceLock` singleton) - `shared_mock_anthropic()` API unchanged; existing test sites in `tests/openai_loop_wiring.rs` + `tests/openai_compat.rs` continue to work without modification ## Verification `cargo test -p kei-cortex --test openai_loop_wiring`: 7/7 pass locally `cargo test -p kei-cortex`: full suite green (428 lib + integration) Also includes DNA-INDEX regenerate (auto-encyclopedia hook artefact; 0 vortex matches preserved).	2026-05-12 21:17:58 +08:00