132 commits

This branch

This branch

All branches

Author	SHA1	Message	Date
KeiSei84	3aff00290f	fix: pre-public audit — critical install regression + 7 blockers ... CRITICAL: lib-hooks.sh had an apostrophe ("user's") inside the jq program's bash single-quote, closing the quote and producing a parse error so EVERY install aborted at source time (install.sh:71). Caught by a full minimal e2e (rc=2 then rc=0 after fix). Reworded the jq comment to drop the apostrophe. Audit blockers fixed: - MANIFEST: drop cortex-ui (no such primitive) from 4 profiles + block; lib-menu desc no longer references it. Profile resolution verified clean. - lib-dev-hub-forgejo / -zoekt: source lib-launchd.sh (register_launchd was undefined, so full-hub dev-hub install would fail at runtime). - kei-message: portable 16-digit id. BSD date prints literal "N" for %N; fall back to /dev/urandom. Verified numeric in both code paths. - bootstrap non-TTY default cortex to minimal (matches install.sh; avoids divergent curl-bash vs direct-install behaviour and 105-crate surprise). - install.sh stamps ~/.claude/.kei-profile; bin/kei reads it (splash showed "profile: ?" before, since .installed holds only primitive names). - README hook count 38 to 54 (real: ls hooks star dot sh). - web-install warns before it discards local edits in the managed clone. Verified: 106 shell files bash -n clean; minimal e2e rc=0 (38 agents, 57 hooks, 69 skills, profile stamped, mailbox present). Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>	2026-05-24 10:48:06 +08:00
KeiSei84	c347f329aa	feat(kei message): persistent inter-session mailbox + pull-inbox hook ... Any Claude Code session can now message any other (not just Agent-Teams teammates), without tmux. Append-only jsonl bus + a UserPromptSubmit hook that pulls unread into each session's context per turn. - scripts/kei-message.sh: `kei message send [--to <name|all>] <text>` / inbox / list / channels. Identity = basename(cwd); broadcast channel "all". - hooks/mailbox-inject.sh: UserPromptSubmit. Injects messages addressed to this session (cwd-basename) or "all", since last turn; per-session cursor dedup; first turn sets baseline (no history dump); never echoes own messages. - bin/kei: `kei message ...` dispatch before splash. - lib-scaffold: copy ALL scripts/*.sh on install (picks up kei-message.sh). - settings-snippet: wire mailbox-inject under UserPromptSubmit. Store: ~/.claude/mailbox/messages.jsonl. Bypass: KEI_MAILBOX_BYPASS=1. Verified: addressed delivery, broadcast, first-turn no-dump, cursor dedup, no self-echo (2-session simulation). Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>	2026-05-23 15:00:10 +08:00
KeiSei84	d34a375da7	feat(install): first-run is a full guided onboarding (agents + sleep + cortex) ... Sleep/cortex setup were left as separate things the user had to discover. Make the SessionStart first-run hook a single ordered post-install checklist that Claude walks the user through: (1) /onboard projects → per-project agents, (2) /sleep-setup → nightly REM (recommend local-only, no remote git needed), (3) /cortex-setup (only if the cortex daemon primitive is installed). Confirm + run each, skippable. Fires once (marker), then silent. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>	2026-05-22 21:27:01 +08:00
KeiSei84	582b51155f	feat(install): first-run nudge to /onboard projects after bundle install ... After install the user got no guidance to set up project agents — the summary only mentioned /new-agent (single), never /onboard (scan all projects → create a specialist per project). The installer is bash and can't launch a skill, so: - New SessionStart hook first-run-onboard.sh: on the FIRST Claude Code session after install, injects context nudging the user/Claude to run `/onboard ~/Projects/*` (scan stack + create per-project agent, delegates to /new-agent). Fires once (marker ~/.claude/.kei-firstrun-shown), then silent. Reset: rm the marker. - settings-snippet.json: wire the hook under SessionStart (matcher "*"). - lib-summary.sh next-steps: lead with `/onboard ~/Projects/*`, then /new-agent. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>	2026-05-22 19:05:00 +08:00
KeiSei84	d89ddf0c74	fix(install): normalize null hook matcher → "" on merge (Claude Code /doctor) ... Users with pre-kit hooks that have no `matcher` field end up with matcher:null, which Claude Code /doctor rejects ("Expected string, but received null") and skips the whole settings file. The jq merge preserved null as-is, so every reinstall re-surfaced the error. Now map(.matcher //= "") before group_by → null/absent collapses to "" (match-all), one group per matcher. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>	2026-05-22 16:53:27 +08:00
KeiSei84	9866d716d7	style(install): KeiSei brand colors + ASCII banner in installer output ... - KEISEI ASCII logo (голубой) shown at install start via kei_banner(). - `[install]` prefix → тёмно-жёлтый (38;5;178); primitive names → голубой (38;5;39) in both the plan and the per-primitive install lines. - Language menu: code голубой, native name тёмно-жёлтый. - lib-log COLOR now enables under curl|bash too: detect terminal via `[ -t 1 ] || /dev/tty` (web-install tees stdout → -t 1 false → colors were silently off). This is color detection, not an interactivity gate (pairs with no -t 0 — does not violate tty-interactivity-gate rule). Verified piped-under-pty: banner + gold [install] + blue/gold language menu all render through the tee logfile. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>	2026-05-22 16:01:33 +08:00
KeiSei84	7a2f6568b3	fix(install): wire PATH in curl|bash — gate pathway on stdin, not stdout ... The PATH-wiring step (~/.claude/bin, where the `kei` entry-point lives) was gated on `[ -t 0 ] && [ -t 1 ]`. curl|bash tees stdout to a logfile so -t 1 is false → pathway_install was skipped → `kei: command not found` after install. Same tee/-t1 trap as the onboarding gates (this one lived in the top-level install.sh, missed by the earlier variant grep which only scanned install/). Eradicated the pattern across the tree: install.sh pathway gate → [ -t 0 ] lib-menu.sh profile-menu gate → [ -t 0 ] lib-wizard.sh sleep-wizard gate → [ -t 0 ] Verified piped-under-pty with /dev/tty reattach: .zshrc gets the kei-substrate block (~/.claude/bin on PATH); non-interactive still skips. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>	2026-05-22 14:12:14 +08:00
KeiSei84	2873474486	style(kei): brand splash colors (голубой logo + жёлтый values), bump v0.16→v0.38 ... Splash was cyan; rebrand to the blue/yellow palette: sky-blue (38;5;39) logo + dim-blue separators, gold (38;5;220) brand line + field values. Version string was stale (v0.16 → v0.38). Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>	2026-05-22 13:49:44 +08:00
KeiSei84	6d68a3f1ad	fix(onboarding): no crash on text input, Claude Code default, explanations ... Three issues a real curl|bash user hit: 1. CRASH: typing a word (e.g. "claude") at any menu → $((ans-1)) treats it as a variable in bash arithmetic → "unbound variable" under set -u → install dies. Added _onb_read_choice (numeric+range validation, re-prompt) for all 4 menus. 2. No Claude under subscription: the kit installs into Claude Code yet the wizard offered only OpenAI Codex under subscription. Added claude-code provider (bumped kei-registries submodule c559065→b904993) + made subscription the default transport and claude-code the default provider — Enter,Enter,Enter lands on Claude Code (no API key). 3. install died at line 178 for any no-key provider (claude-code/codex/local): onboarding_run ended on a `&&` that is false when there are no auth keys → returned 1 → set -e aborted. Added explicit `return 0`. Plus per-step explanations (en+ru) and auto-select when a step has one option. Verified piped-under-pty: Enter-defaults → Claude Code, junk input → re-prompt (0 crashes), full install completes. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>	2026-05-22 12:42:50 +08:00
KeiSei84	15d50f1478	fix(web-install): don't hang after 'delegating' in interactive curl|bash ... curl|bash makes bash read THIS script byte-by-byte from the pipe. A bare `exec < /dev/tty` swapped stdin, then bash tried to read the NEXT line (the `exec ./bootstrap.sh`) from the keyboard → infinite hang after "delegating to bootstrap.sh", bootstrap never started, no profile/language menu. Fix: merge the redirect INTO the bootstrap exec (one command), so the process is replaced the instant stdin is swapped and bash never reads another script byte from the (now-wrong) stdin. Verified: piped-under-pty buggy=HANG, fixed=bootstrap starts with stdin=tty. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>	2026-05-22 10:58:44 +08:00
KeiSei84	01d5aa510f	fix(install): run onboarding + profile wizard in curl|bash (gate on stdin, not stdout) ... web-install.sh tees stdout to a logfile (exec > >(tee) 2>&1), so -t 1 is false even in an interactive curl|bash. The /dev/tty fix reattached stdin but the wizard gates required BOTH -t 0 and -t 1, so onboarding (language select) and bootstrap's profile wizard were silently skipped on the primary install path. Prompts go to stderr and read from stdin — interactive stdin is the only real requirement (already the proven pattern in lib-plan.sh confirm screen). Gates now require interactive stdin only: bootstrap.sh profile wizard lib-onboarding.sh onboarding_should_run + preflight-continue prompt lib-preflight.sh CLI-install offer prompt lib-hooks.sh activate-hooks prompt Non-interactive (CI / </dev/null / no /dev/tty) still skips — verified. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>	2026-05-22 03:58:55 +08:00
denis	2fa348f467	feat(pet): comprehensive language map (60+)	2026-05-21 18:31:05 +00:00
denis	4e62e921e9	feat(pet): comprehensive reflection (60+ langs, all agents, errors)	2026-05-21 18:30:01 +00:00
denis	e8df152549	feat(pet): show session tokens + context% from statusLine stdin	2026-05-21 17:50:47 +00:00
denis	6d8f07ab90	refactor(pet): read kit agent tracking (SSoT), drop duplicate	2026-05-21 17:15:07 +00:00
denis	752654f049	refactor(pet): read kit agent tracking (SSoT), drop duplicate	2026-05-21 17:14:55 +00:00
denis	13e536ec1c	refactor(pet): read kit agent tracking (SSoT), drop duplicate	2026-05-21 17:14:17 +00:00
denis	a965ad3b7c	fix(pet): token extraction via jq totalTokens + persist token total	2026-05-21 17:05:48 +00:00
denis	ac1f0ebaec	fix(pet): token extraction via jq totalTokens + persist token total	2026-05-21 17:04:38 +00:00
denis	3c67914788	feat(pet): agent emojis + multi-agent display + plan emoji + language icons	2026-05-21 12:21:00 +00:00
denis	ac6a020612	feat(pet): agent emojis + multi-agent display + plan emoji + language icons	2026-05-21 12:20:47 +00:00
denis	e129745319	feat(pet): agent emojis + multi-agent display + plan emoji + language icons	2026-05-21 12:20:45 +00:00
denis	cb694cc96a	fix(web-install): tolerate missing /dev/tty in non-interactive curl|bash	2026-05-21 10:53:21 +00:00
denis	305787fae3	fix(install): make fresh install complete + ship tamagotchi (#1)	2026-05-20 18:50:09 +00:00
Denis Parfionovich	53ada048b2	fix(install): backup_file mv→cp -a, install --activate-hooks больше не падает ... gx10 fail при первой установке (фото юзера 2026-05-18): jq: error: Could not open file /home/keisei/.claude/settings.json [error] jq-merge produced invalid output; ... unchanged [error] install failed at line 126; rolled back Root cause: backup_file() (install/lib-backup.sh:56) делал `mv target backup`, затем activate_hooks() → _jq_merge_hooks() пыталась читать оригинал target'а через jq — но оригинал уже унесён mv'ом, открыть нечего. jq fail → rollback всей установки. Fix: cp -a вместо mv (как уже сделано в backup_path() для директорий). Атомарный безопасный бэкап; оригинал остаётся для jq, потом _jq_merge_hooks атомарно переписывает его mv tmp → target.	2026-05-18 14:33:22 +08:00
Denis Parfionovich	fc0758d2bb	chore: версия 0.38.0 единая + warning-fixes + mold для release-job ... 1. Версии npm-пакетов приведены к 0.38.0 (был зоопарк 0.14.0/0.14.6): _ts_packages/{,packages/{gmail,grok,mcp-server,recall,telegram,youtube}-adapter} 2. Rust warnings (cargo check workspace): - kei-cortex: deprecated validate_path → validate_path_lexical, удалён orphan-wrapper в read.rs, struct Input → pub(crate) - frustration-matrix: #[allow(dead_code)] на confusion_* поля EvalReport + train_from_dir (будущий CLI) 3. CI release.yml job 'release' падал на Build kei-changelog: clang invalid linker '-fuse-ld=mold' — в .cargo/config.toml жёстко прописан mold для linux. Добавлен Install mold шаг (как уже сделано в build-release matrix).	2026-05-18 13:41:37 +08:00
Denis Parfionovich	d1cbdd8892	fix(ci): vendored openssl-sys для cross-compile x86_64-apple-darwin ... CI run 26014515768 — `x86_64-apple-darwin` упал на webauthn-attestation-ca → openssl-sys 0.9.115: pkg-config не настроен для cross-compile (macos-latest = arm64, target = x86_64). Фикс: добавлен прямой dep `openssl-sys = { version = "0.9", features = ["vendored"] }` в kei-auth-webauthn — компилит openssl из исходников, не требует системного. Транзитивно достаточно одного объявления feature во всём workspace (Cargo unifies features).	2026-05-18 13:08:40 +08:00
Denis Parfionovich	5f6b4f2620	fix(ci): regenerate bun.lock — sync с package.json для CI release ... CI v0.38.0 mcp-server билды все 5 упали на `bun install --frozen-lockfile` с «lockfile had changes, but lockfile is frozen». В lockfile отставали: - @keisei/mcp-server 0.14.0 → 0.14.6 - ajv 8.18.0 → 8.20.0 - express-rate-limit 8.3.2 → 8.4.1 - hono 4.12.14 → 4.12.16 Пересоздан `rm bun.lock && bun install` под bun 1.3.14 (тот же что в CI).	2026-05-18 13:01:36 +08:00
Denis Parfionovich	a8101b8f60	fix: install audit 2026-05-18 — cortex profile + TTY in web-install ... audit-2026-05-18 (соседняя сессия на gx10, 3 бага из 5 подтверждены): #1 [HIGH] cortex profile сломан — kei-cortex depends on kei-router path-dep'ом, а kei-router → kei-model. kei-model не было в profile list, cargo build падал с «failed to read kei-model/ Cargo.toml». Добавил kei-model в cortex profile. #3 [HIGH] cortex-ui отсутствует в репо — был в profile list, но исходника нет ни в _primitives/_rust/, ни в _ts_packages/. Удалил из profile. #4 [MEDIUM] web-install.sh теряет /dev/tty — exec | tee + curl|bash делают stdin pipe, wizard'у read нечего читать, onboarding падает на первом prompt. Переподключаю stdin к /dev/tty перед exec bootstrap.sh, если /dev/tty доступен. #2 (linux-arm64 prebuild) — tag v0.38.0 не запушен на github, CI release.yml не сработал. Требует RULE 0.1 triple-confirm. #5 (non-TTY default = minimal) — уже корректно, install.sh:141 `PROFILE="${PROFILE:-minimal}"` + lib-menu.sh skip on non-TTY.	2026-05-18 12:38:35 +08:00
Denis Parfionovich	1d958b3587	fix(security): patent-leak + classical-safety audit fixes ... PATENT-LEAK (HIGH): - hooks/no-python-without-approval.sh: genesis-verify пример → my-project - docs/encyclopedia/rust-crates-H-N.md: убран термин «Genesis IP, ITAR» PATENT-LEAK (MEDIUM): - CHANGELOG: project-vortex → reduced scope - _blocks/registries (submodule bump): убраны имена приватных project-specialists из комментария agent-profiles.toml - docs/encyclopedia/skills-and-agents.md: ML/RL/CfC → ML/RL CLASSICAL-SAFETY (MEDIUM): - install/lib-preflight.sh: eval "$version_cmd" → bash -c "..." (защита от инъекции если providers.toml расширят) - _primitives/provision-{vultr,hetzner}.sh: /tmp/$$ → mktemp (устраняет symlink TOCTOU race) - web-install.sh: chmod 600 + umask 077 на ~/.keisei-install.log (Forgejo admin creds + токены в логе) - scripts/regen-counts.sh: eval "$1" → bash -c NOT FIXED (требуют действий юзера): - HIGH: @keisei scope не зарегистрирован на npmjs.org — typosquat возможен пока не задан NPM_TOKEN и не сделан publish - HIGH: install.keisei.app DNS не настроен — DNS-hijack возможен - LOW: parfionovich@keilab.io в SECURITY.md, plugin.json, ~40 Cargo файлах — intentional contact, оставлен Локальный git author установлен на parfionovich@keilab.io вместо parfionovichd@icloud.com (только для будущих коммитов в этом репо).	2026-05-18 12:05:25 +08:00
Parfii-bot	170c850ca0	fix(install): public install via keigit.com (Vultr) — no github needed ... Что меняется: - README.md: git clone instruction → https://keigit.com/keisei/KeiSeiKit-1.0.git (был приватный github, внешний clone падал 404) - .gitmodules: kei-registries submodule → keigit.com/keisei/kei-registries.git (был приватный github, --recurse-submodules падал) - web-install.sh: KEISEI_REPO default → https://keigit.com/keisei/... (был git@github.com:KeiSeiLab/...) - install.sh: NO_EXECUTE check ПЕРЕД check_prereqs, чтобы --no-execute работал без установленных зависимостей. - install/lib-args.sh: новый флаг --skip-prereqs (SKIP_PREREQS) — для CI и dry-run сценариев. - marketplace.json + plugin.json: новые манифесты (version=0.38.0 из git tag) для Claude Code /plugin marketplace add + install. На keigit.com (45.77.41.204, публичный) залиты публичные репо keisei/KeiSeiKit-1.0 + keisei/kei-registries. Anonymous git clone работает. GitHub mirror (KeiSeiLab/*) остаётся приватным как backup.	2026-05-18 11:47:13 +08:00
Parfii-bot	5b8e066888	refactor(install): production-ready финальный круг ... 1. lib-onboarding.sh раскидан на 3 куба (Constructor Pattern <200 LOC): - lib-onboarding-registry.sh (79 LOC) — парсеры providers/models.toml + onboarding_fallback_providers (14 провайдеров) + onboarding_auth_env_for_provider helper (был inline в collect_auth) - lib-onboarding-ui.sh (189 LOC) — pick_language/transport/provider/model + collect_auth (whiptail/bash select) - lib-onboarding-state.sh (57 LOC) — write_secrets + write_config + user-model-override.toml для kei-model-router - lib-onboarding.sh (95 LOC) — тонкий оркестратор: should_run + run Сам lib-onboarding.sh source'ит 3 подкуба автоматически. Глобалы (ONBOARDING_*, REGISTRY_*, ONBOARDED_FLAG, etc.) объявлены в оркестраторе, подкубы их используют через имена. 2. lib-menu.sh локализован: - whiptail title + radiolist prompt через ${STR_MENU_TITLE} + ${STR_MENU_SUBSTRATE} + ${STR_MENU_PROFILE_PROMPT}. - Plain heading тоже использует словарь. - 12 коротких имён профилей (minimal/core/dev/...) — оставлены EN как стабильные id (не переводятся). 3. _blocks/build-index.sh — детерминированная регенерация INDEX.md. Группировка по 14 категорийным префиксам + "Прочие" для остальных. Безопасно перезапускать. INDEX.md обновлён через этот скрипт (минимальный diff — добавлена ссылка на build-index.sh в шапке). Проверено: bash -n чисто, unit тесты onboarding_list_providers/ transports/models OK, non-TTY smoke ./install.sh --profile=minimal --no-execute проходит.	2026-05-17 23:57:23 +08:00
Parfii-bot	5327befef6	docs(_blocks): INDEX.md — реестр 84 блоков для assembler ... Авто-сгенерирован из _blocks/*.md по категориям префикса: API / AUTH / CI / DB / DEPLOY / DOCS / DOMAIN / MODE / OBS / PATH / RULE / SCRAPER / SECURITY / STACK / TEST + прочие. Каждая запись: `name` — первая H1-строка файла. Использование в _manifests/<agent>.toml: blocks = ["baseline", "rule-pre-dev-gate", "api-anthropic", ...] Assembler читает блоки из _blocks/, склеивает в финальный _generated/<agent>.md. Новый блок = просто .md в _blocks/. Регенерация INDEX.md — TODO build-index.sh скрипт (сейчас сгенерирован вручную bash циклом).	2026-05-17 20:39:06 +08:00
Parfii-bot	33f1376ee1	feat(i18n): расширил язык-набор с 2 до 16 ... Новые словари: uk Українська de Deutsch fr Français es Español pt Português it Italiano tr Türkçe ar العربية hi हिन्दी zh 简体中文 ja 日本語 ko 한국어 id Bahasa Indonesia vi Tiếng Việt Каждый файл — 17 STR_* ключей (тот же контракт что en.sh + ru.sh). lib-i18n.sh::i18n_available_languages — единый список (en + 15) для меню выбора в мастере. i18n_load_lang упрощён: всегда грузит английский как fallback, потом поверх — словарь языка (отсутствующий ключ остаётся английским). onboarding_pick_language теперь генерирует whiptail/bash select из i18n_available_languages динамически — добавление нового языка = один файл `install/i18n/<код>.sh` + одна строка в available_languages, дальше всё подхватится автоматически. Перевод формальный, без излишеств. Welcome баннер всегда EN (юзер ещё не выбрал на момент показа). Проверено: bash -n всех 16 словарей чисто, roundtrip всех языков работает (i18n_load_lang en/ru/uk/de/fr/es/pt/it/tr/ar/hi/zh/ja/ko/id/vi выдают локализованные STR_DONE_TITLE + STR_TR_DIRECT_API), non-TTY smoke install --no-execute проходит.	2026-05-17 16:51:44 +08:00
Parfii-bot	305140f20b	fix(install): close MEDIUM/LOW from RULE 0.26 audit ... - preflight failure handling: вместо `|| true` (молчаливое продолжение при упавшем preflight) — явный prompt «продолжить? [y/N]» с return 1 при отказе. Без TTY печатает warning и продолжает. Это закрывает HIGH bug-9: «.onboarded флаг выставляется при нерабочей конфигурации». - lib-preflight.sh::preflight_check_cli — общий helper (command -v + offer-install + version echo). Убирает 6-file boilerplate (хотя сами per-provider файлы пока не переписаны под него — это отдельный шаг). - onboarding_fallback_providers: расширен с 3 до 14 провайдеров, покрывает все 7 транспортов. Был дрейф vs providers.toml (14 vs 3), юзер без submodule видел только anthropic+openai+ollama. - STR_PICK_PROVIDER plural mismatch: whiptail и plain ветки теперь используют один fallback "Provider within" (раньше plain имел "Providers within", whiptail — "Provider within"). - STR_DONE_NEXT удалён из en.sh + ru.sh (мёртвый ключ). - Новые ключи: STR_MENU_* (для lib-menu.sh) + STR_PREFLIGHT_FAILED + STR_PREFLIGHT_CONTINUE. lib-menu.sh начал использовать STR_MENU_TITLE / STR_MENU_SUBSTRATE (частичная локализация, остальное меню — отдельной задачей). Тесты: bash -n чисто, i18n round-trip EN/RU работает, non-TTY smoke install --no-execute проходит.	2026-05-17 16:37:28 +08:00
Parfii-bot	a3ffaed374	fix(install,router): close 5 HIGH audit findings ... 1. HIGH-1: onboarding ↔ kei-model-router связка До: onboarding мастер писал ~/.claude/config/onboarding.toml, но router его не читал — выбор провайдера декоративный. После: lib-onboarding.sh::onboarding_write_config доп. пишет ~/.claude/config/user-model-override.toml; registry.rs::Registry получил load_user_override() возвращающий UserModelOverride. Приоритет: --pinned > user-override > agent-profiles default_model_ref. 2 новых теста (round-trip TOML, optional transport). 2. HIGH-2: eval "$install_cmd" → bash -c "$install_cmd" До: lib-preflight.sh::preflight_offer_install делал eval. После: bash -c с явным subshell + печать команды юзеру до запуска. 3. HIGH-3: codex.sh regex false-pass До: grep -qiE "logged.in|active" пропускал "not logged in" как pass. После: сначала negative-pattern (not logged|signed out|please log in), потом positive (\blogged in\b|status: active|auth: yes). 4. HIGH-4: path traversal в source preflight До: lib-preflight.sh::preflight_run делал source без валидации provider id — `../../../evil` сработал бы. После: whitelist regex ^[a-z0-9][a-z0-9_-]{0,63}$ + realpath проверка что resolved путь не вышел за PREFLIGHT_DIR. 5. HIGH-5: curl|sh без verification ollama-local.sh + google-vertex.sh теперь печатают предупреждение что Linux-установка тянет shell-скрипт с внешнего сервера без проверки хэша/подписи, и предлагают альтернативу. MEDIUM попутно: - anthropic-bedrock.sh: один вызов aws sts get-caller-identity вместо двух (экономит 1-3с), различает cred-error от network по тексту stderr, маскирует account ID в ARN перед печатью. - mlx-local.sh: pip install --user mlx-lm вместо global pip install (не требует sudo, не загрязняет system Python). Тесты: cargo test --lib 80/80, bash -n всех изменённых файлов чисто.	2026-05-17 16:28:33 +08:00
Parfii-bot	0a8c93561f	feat(install): preflight модуль — проверка CLI по выбранному провайдеру ... Добавлен шаг между выбором модели и сбором ключей: для провайдеров требующих внешний CLI/daemon — проверка наличия, инструкция по установке, опциональный авто-install (TTY only). install/lib-preflight.sh — диспетчер: preflight_run <provider-id> - ищет install/preflight/<id>.sh, source'ит, вызывает preflight_check_<sanitized_id> - функция возвращает 0/1, печатает инструкцию в stderr - non-TTY: только печать, без вопросов preflight_offer_install <cli> <install-cmd>: - TTY: спрашивает [y/N/skip], выполняет install-cmd - non-TTY: печатает и пропускает install/preflight/ — 6 файлов (только для провайдеров с CLI): anthropic-bedrock.sh — aws CLI + sts get-caller-identity google-vertex.sh — gcloud CLI + project config codex.sh — codex CLI (npm) + login status ollama-local.sh — ollama binary + 127.0.0.1:11434 daemon mlx-local.sh — mlx_lm.server (arm64 only) + 127.0.0.1:8080 lmstudio-local.sh — порт 127.0.0.1:1234 (desktop app) Direct-api провайдеры (anthropic, openai, xai, deepseek, google) + proxy (litellm, openrouter) + openai-azure — preflight-файла нет, диспетчер тихо пропускает, ключ собирается обычно. Тесты: bash -n чисто на всех 8 файлах, unit dispatcher показывает silent-pass для anthropic, warn+exit-1 для bedrock без aws на PATH.	2026-05-17 15:57:54 +08:00
Parfii-bot	ab260f429e	feat(install): i18n модуль + welcome banner ... Структура локализации: install/i18n/en.sh — английский словарь (дефолт, fallback) install/i18n/ru.sh — русский словарь install/lib-i18n.sh — лоадер + welcome banner Поток: 1. install.sh source'ит lib-i18n.sh и зовёт i18n_load_default → все строки на английском. 2. Если onboarding нужен — печатается welcome banner ASCII-рамка на английском (язык ещё не выбран). 3. onboarding_pick_language — единственный двуязычный шаг ("Choose language / Выберите язык"). По выбору вызывает i18n_load_lang ru|en — перегружает словарь. 4. Все последующие шаги (transport / provider / model / auth / completion) идут на выбранном языке. Fallback: если ru-словарь не имеет ключа — используется английское значение (load_default вызывается до загрузки ru.sh, переменные перезаписываются поверх). lib-onboarding.sh переведён со смешанных hardcoded строк на ${STR_*} placeholders. Тесты: bash -n всех 5 файлов чисто, i18n loader unit-тест показывает EN/RU перегрузку, non-TTY smoke install --no-execute проходит.	2026-05-17 15:35:10 +08:00
Parfii-bot	c844524f68	fix(kei-buddy): close 3 HIGH audit findings from session multi-critic swarm ... 1. OID-check в parse_x25519_pkcs8_pem До: брался последний 32-байтный slice любого PKCS#8 DER, OID не проверялся. RSA/EC/Ed25519 ключ молча давал 32 неправильных байта → decrypt падал с generic "wrong key" без объяснения. После: строгая проверка длины (48 байт) + OID 1.3.101.110 (X25519, byte slice 9..12 = 0x2b,0x65,0x6e). Внешний openssl ключ другого алгоритма теперь даёт явную ошибку с указанием реального OID. Константы X25519_OID + X25519_PKCS8_DER_LEN. RFC 8410 §3 + §7 ссылка в doc-комментарии. 2. x25519-dalek feature `zeroize` До: features=["static_secrets"] — StaticSecret хранил priv-ключ в куче без затирания при Drop. Локальный priv_raw.zeroize() стирал только стек-копию, оригинал в куче оставался до GC. После: features=["static_secrets","zeroize"] — StaticSecret сам реализует ZeroizeOnDrop, ключ затирается при выходе из scope. 3. Два новых теста: - parse_rejects_wrong_length_der — 32-байтный DER (вместо 48) отклоняется с сообщением про "48 bytes" - parse_rejects_wrong_oid — DER с OID Ed25519 (0x2b,0x65,0x70) отклоняется с сообщением про "X25519" 8/8 тестов модуля проходят, cargo check workspace чисто. Старая 0.14.5 mcp-server (с source maps содержавшими /Users/ denisparfionovich/...) удалена с keigit.com отдельной операцией через Forgejo DELETE API.	2026-05-17 13:41:18 +08:00
Parfii-bot	9c6df65ae2	feat(install): onboarding wizard — transport→provider→model→keys ... Новый интерактивный мастер при первой установке: 1. Язык интерфейса (RU/EN) 2. Транспорт (direct-api / aws-bedrock / azure-openai / google-vertex / local / proxy / subscription) 3. Провайдер внутри транспорта (14 вариантов суммарно) 4. Модель из выбранного провайдера (3 моделей Anthropic, и т.д.) 5. Ключи/креды (silent read, пишет в ~/.claude/secrets/.env chmod 600) Skip-логика: - флаг ~/.claude/.onboarded - env KEISEI_SKIP_ONBOARD=1 - не-TTY запуск Запись: ~/.claude/config/onboarding.toml — выбор lang/transport/provider/model ~/.claude/secrets/.env — ключи провайдера ~/.claude/.onboarded — флаг прохождения Парсер toml — pure awk (без зависимостей). Реестры из submodule _blocks/registries. Submodule bumped до afe0c6f с новым полем transport. Fallback если submodule не подтянут: anthropic + sonnet.	2026-05-17 02:24:50 +08:00
Parfii-bot	35136a9840	feat(npm-publish): keigit as primary registry, npmjs reserved for future ... - _ts_packages/tsconfig.base.json: sourceMap=false, declarationMap=false (source maps leaked absolute dev paths in published tarballs). - All 6 @keisei/* packages: publishConfig.registry = keigit.com. mcp-server bumped 0.14.5 -> 0.14.6 (republished without maps). - .github/workflows/release.yml split into two jobs: npm-publish-keigit: primary. Activates on KEIGIT_NPM_TOKEN + KEIGIT_NPM_USER secrets. Publishes via direct curl PUT (Forgejo requires Basic auth; npm CLI sends Bearer). npm-publish-npmjs: reserved for future. Activates on NPM_TOKEN secret. Currently no token -> job skipped gracefully. End-to-end verified: clean dir + scope @keisei -> keigit + npm install pulls 145 deps, no leaked paths, no .map files in any of 6 packages.	2026-05-17 00:18:44 +08:00
Denis Parfionovich	3c06e98092	feat(web-install): curl-pipeable bootstrapper at install.keisei.app ... Thin wrapper (88 LOC) that lets a fresh machine install KeiSeiKit with one line, no prior clone: curl -fsSL https://install.keisei.app | bash curl -fsSL https://install.keisei.app | bash -s -- --profile=dev --yes ## Why a third install entry point Existing install path required `git clone` + `cd` + `./bootstrap.sh` — three commands the user has to type, plus they must already have the repo URL handy. For private repos with SSH auth this is real friction. `web-install.sh` is meant to be served as a static file (Cloudflare Pages / nginx) at install.keisei.app. It does ONE thing: prereq → clone → delegate to ./bootstrap.sh. Single source of truth — no duplicated install logic. ## What it does 1. Splash + log to ~/.keisei-install.log 2. Hard prereq: git (the one thing bootstrap.sh cannot self-install) 3. SSH auth probe for git@github.com — clear error message if key missing 4. Clone/pull KeiSeiLab/KeiSeiKit-1.0 to $KEISEI_ROOT (default ~/.local/share/keisei) 5. git submodule update --init (pulls kei-registries) 6. exec ./bootstrap.sh "$@" — pass-through all flags ## Env overrides - KEISEI_ROOT — install location - KEISEI_REPO — git URL - KEISEI_REF — branch/tag/sha ## Hosting Push this file to install.keisei.app (Cloudflare Pages, S3+CF, nginx static — anything that serves a single .sh over HTTPS). ## README updated Quick start section now shows the curl one-liner as the recommended path. Repo URL corrected from KeiSei84 → KeiSeiLab org. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>	2026-05-16 16:44:26 +08:00
Parfii-bot	86834b82af	feat(kei-buddy): provision_decrypt — VPS-side blob decryption ... Mirrors keisei-marketplace/src/lib/crypto-box.ts::sealBoxToVps. Two new subcommands on kei-buddy bin: - genkeys --key <path> → writes PKCS#8 PEM x25519 priv, prints standard-base64 pub (44 char) - decrypt-and-export --vps-key <pem> --blob <json> --env-out <env> → ECDH(vps_priv, ephPub) → HKDF-SHA256 info=keibuddy-token-v1 → XChaCha20-Poly1305 decrypt → append BOT_TOKEN/TELEGRAM_BOT_TOKEN to env file (replaces stale, keeps other lines) Cloud-init in hetzner.ts already calls these. Without this commit the VPS could decode its own pubkey but had no way to recover the sealed bot-token blob — the bot would never log into Telegram. Crypto stack (mirror of @noble in TS): - x25519-dalek 2 (static_secrets feature) - chacha20poly1305 0.10 (XChaCha20Poly1305) - hkdf 0.12, sha2 0.10 - base64 0.22 (accepts URL_SAFE_NO_PAD + STANDARD) - zeroize 1 for priv-key wipe Tests (6/6 pass): - roundtrip_seal_then_decrypt — re-implement marketplace sealing in Rust, verify our decryption recovers plaintext - decrypt_and_export_writes_env_file — full e2e through CLI surface - decrypt_and_export_replaces_existing_token — stale BOT_TOKEN replaced, other env lines preserved - decrypt_rejects_wrong_key — XChaCha20 AEAD tag fails on wrong key - pem_roundtrip — write_pkcs8 + parse_pkcs8 round-trip - b64decode_accepts_urlsafe_and_standard — handles both encodings Cross-verified end-to-end: $ node marketplace_seal.mjs <pub> <token> → /tmp/blob.json $ kei-buddy decrypt-and-export --vps-key ... → BOT_TOKEN matches input Constructor Pattern: 1 file (provision_decrypt.rs, 344 LOC), 1 module, 1 responsibility (token-blob decryption + key generation). === STATUS-TRUTH MARKER === shipped: functional stubs: 0 cargo-check: PASS behaviour-verified: yes (e2e marketplace-seal → kei-buddy-decrypt round-trip) follow-up-required: - none	2026-05-15 17:49:59 +08:00
Parfii-bot	e9b0debec3	merge: feat/agent-dna-three-layer — agent_shell_dna cube + registry submodule + audit closures	2026-05-14 15:16:26 +08:00
Parfii-bot	40a5c2e55f	fix(audit-r2): HIGH+MEDIUM closures from second round audit ... HIGH-1: submodule URL ssh → https + shallow (DNS spoofing surface, both repos) HIGH-3: docs/DNA-MIGRATION.md — two-format coexistence policy (4-seg legacy task-class vs 5-seg agent-shell marketplace) HIGH-5: agent_shell_dna doc — explicit consumer = marketplace, planned ledger integration; module-doc clarification MEDIUM: Haiku model id pinned to claude-haiku-4-5-20251001 across pricing.rs::from_slug + ::name + escalate.rs tests + select_posterior fixture + kei-registries submodule (pushed c39e528→7aaa6a7)	2026-05-14 13:18:14 +08:00
Parfii-bot	d01649b355	chore: registries → submodule from KeiSeiLab/kei-registries ... Closes audit HIGH-1 (SSoT drift between KSK and marketplace). _blocks/registries/ now tracks the single canonical kei-registries repo; marketplace consumes the same submodule.	2026-05-14 01:59:36 +08:00
Parfii-bot	7281e7ecea	fix(registries+router): MEDIUM/LOW audit batch ... closes MEDIUM/LOW from feat/agent-dna-three-layer audit: - models.toml: cache_write_1h_per_mtok_micro added to all 11 entries (Anthropic: 200M/600M/1000M micro = $2/$6/$10 per MTok per pricing page; other providers: 0 placeholder) - main.rs (kei-model-router): WAL pragma + busy_timeout errors now logged to stderr instead of silently dropped (previously .ok() swallowed both) - models.toml: Haiku id pin TODO documented (router still hardcodes alias)	2026-05-14 00:04:18 +08:00
Parfii-bot	7cd74071a1	feat(kei-model-router): agent_shell_dna parser for 5-segment marketplace DNA ... Adds `agent_shell_dna` cube parsing the new agent-shell::<p>:<m>:<c>::<scope>::<body>-<nonce> format emitted by keisei-marketplace/src/lib/cryptoid.ts::agentDna. Companion to legacy 4-segment `dna_class` (untouched per RULE Don't-Rewrite). Accepts both 8-hex (legacy) and 16-hex (current) lengths for forward-compat. - new file: src/agent_shell_dna.rs (235 LOC, 13 tests all pass) - lib.rs: pub mod agent_shell_dna + module doc Closes HIGH-2 (dna-three-layer audit).	2026-05-13 23:54:35 +08:00
Parfii-bot	766504d345	fix(kei-model-router): close 2 HIGH regressions from re-audit ... Re-audit (codex + critic-bug) on commit 18766171 confirmed all 10 original findings closed, but flagged 2 HIGH regressions the fix itself introduced. NEW-1 fix — non-Claude profile no longer falls back to Opus - main.rs::build_select_input: when Model::from_slug returns None (any non-Anthropic provider — codex/xai/deepseek/google/local), cmd_select bypasses posterior+kernel entirely and prints (provider, model_id) directly with reason="profile_default_non_claude". - Posterior machinery stays Claude-only by design — RULE 0.20 escalation ladder operates on Anthropic family. Cross-provider routing is registry-driven, not enum-driven. - Test non_claude_profile_triggers_provider_bypass: pick("codex-reviewer") = ("codex","gpt-5-codex"); Model::from_slug("gpt-5-codex") = None — assertion locks behaviour. NEW-2 fix — no-ledger path preserves profile-resolved fallback - print_decision_no_ledger signature changed from (dna, prompt) to (input: &DecisionInput, dna). Uses input.fallback.slug() so the Sonnet/Haiku selected by profile resolution survives instead of being overwritten with constructor-default Opus. - Test decision_input_preserves_set_fallback verifies the round-trip. Verification (orchestrator-side): - cargo check → clean - cargo test --release → 65 passed / 0 failed (was 63 → +2 regression tests) - Constructor Pattern → all files ≤ 200 LOC (main.rs 197 at limit) DNA-INDEX.md regenerated by kei-registry hook (cosmetic). === STATUS-TRUTH MARKER === shipped: functional stubs: 0 cargo-check: PASS behaviour-verified: yes follow-up-required: - CLI stdout for non-Claude profiles gains a "reason: profile_default_non_claude" line; downstream parsers must handle the new variant.	2026-05-13 22:44:00 +08:00
Parfii-bot	187661714f	fix(kei-model-router): close 10 audit-blocker findings ... Codex CRITICAL + 4 HIGH + 5 MEDIUM/LOW from RULE 0.23 dual-review and RULE 0.25 multi-critic swarm — all closed. CRITICAL fix - Model::slug() ledger compatibility: posterior.rs + select_kernel.rs query `WHERE model = ?2 OR model = ?3`, binding canonical + legacy slug pair via new `Model::legacy_slug()`. Production ledger rows written under "haiku"/"sonnet"/"opus" remain visible to posterior aggregation. Regression test ledger_legacy_slug_counted. HIGH fixes - cmd_select(): no longer early-returns on profile match. Profile's default_model_ref now becomes DecisionInput.fallback; select() always runs, posterior/kernel evidence wins if present. RULE 0.20 cost optimisation restored for all 18 registered agents. - Registry pricing SSoT: DecisionInput now carries Option<Arc<Registry>>. estimated_cost() tries registry first; hardcoded match is documented fallback only. select_posterior.rs no longer duplicates models.toml constants. - registry.rs portability: include_str!() embeds the three TOMLs at compile time. load_embedded() new; disk path tried first via KEI_REGISTRIES_DIR, embedded as fallback. `cargo install`d binaries now find registries unconditionally. embedded_registry_matches_disk test ensures embedded ≡ disk source. - next_model() ambiguity: replaced Option<&Model> with EscalationResult enum (Next(&Model) / AtTop / NotFound). Callers can distinguish typo from ceiling. 5 new tests. MEDIUM fixes - posterior.rs u32 overflow: `(n_plus + n_minus) as u32` → `u32::try_from(n_plus.saturating_add(n_minus)).unwrap_or(u32::MAX)`. overflow_guard_on_huge_n test with i64::MAX. - pick() unknown-model: now returns None when default_model_ref's model is absent from registry. Inverted the deprecation guard. - HOME unset: disk_registries_dir() returns None on empty HOME and falls through to embedded registries. open_ledger() logs warning and returns None instead of opening at malformed path. - SQLite WAL + busy_timeout: applied to ledger connection in open_ledger() — concurrent CLI invocations no longer SQLITE_BUSY. LOW fixes - impl Model consolidation: next_tier() moved to pricing.rs. escalate.rs uses current.next_tier() instead of duplicating logic. - complexity.rs: removed duplicate "ml-implementer" in HEAVY_ROLES. - dna_class.rs: role("") now returns None instead of Some(""). Verification (orchestrator-side, RULE 0.13 §Verify-before-commit): - cargo check → clean - cargo test --release → 63 passed / 0 failed (was 58 → +5 new tests cover legacy-slug, EscalationResult, overflow, unknown-model, embedded) - Constructor Pattern → all files ≤ 200 LOC (max registry.rs 196) - Largest fn from_ledger 28 LOC / limit 30 DNA-INDEX.md regenerated by kei-registry hook (cosmetic). === STATUS-TRUTH MARKER === shipped: functional stubs: 0 cargo-check: PASS behaviour-verified: yes follow-up-required: - (none from this commit; next audit pass before merge to main)	2026-05-13 22:09:19 +08:00