137 commits

This branch

This branch

All branches

Author	SHA1	Message	Date
KeiSei84	3be9a8bf71	feat(multi-cli): kei run-via <backend> — agents over external LLM CLIs ... Adds a uniform launcher that lets any KeiSeiKit agent run on whichever LLM CLI you have a subscription to. Pick by familiarity, pricing, or to get a second opinion on the same prompt. Backends (locally installed, by subscription): claude Claude Code (claude -p) grok xAI Grok (grok --print; native --agent supported) agy Antigravity (agy --print) alias: antigravity copilot GitHub Copilot (copilot --prompt) kimi Moonshot Kimi (stdin, TUI primary) codex OpenAI Codex (codex -p) register-only Files: _primitives/cli-backends.toml SSoT backend table scripts/kei-agent-cli.sh launcher; loads ~/.claude/agents/<n>.md, strips frontmatter, composes with task, execs backend non-interactive bin/kei new arm: run-via | via | run | agent-via docs/encyclopedia/multi-cli-agents.md user-facing docs + usage Auto-installed via lib-scaffold.sh:77 glob (no install code change needed). Test plan: kei run-via list # status + agents kei run-via grok critic "review src/auth.rs" # via Grok kei run-via agy critic "review src/auth.rs" # via Antigravity kei run-via copilot critic "review src/auth.rs" # via Copilot KEI_NATIVE_AGENT=1 kei run-via grok critic "..." # native --agent	2026-05-26 15:05:02 +08:00
KeiSei84	518d95df80	chore(public-prep): repoint public install + marketplace off private keigit ... Public installs/clones must not hit the author's private Forgejo (keigit.com, direct Vultr, no Cloudflare, fail2ban) — that server times out under load and is the root of the 443 connect failures. - web-install.sh: default KEISEI_REPO keigit -> github.com/KeiSeiLab/KeiSeiKit-1.0 - plugin.json: homepage -> https://keisei.app; repository -> github - .gitmodules: kei-registries submodule -> github.com/KeiSeiLab/kei-registries (so a public --recursive clone resolves; repo still private until launch) - README.md: manual `git clone` line -> github Left intentionally on keigit: the @keisei/mcp-server npm registry (docs state it's an author-operated mirror, not a community service). Repos stay PRIVATE on github until launch. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>	2026-05-25 21:15:32 +08:00
KeiSei84	abae256c1d	feat(install): opt-in hook packs + stack profiles (public posture) ... A fresh install now activates only the safety pack; discipline hooks and agents are opt-in via an onboarding step (step 6) or `kei configure`. "People don't need Rust-only" — they pick their own stack. - _primitives/hook-packs.toml: SSoT mapping pack -> hooks, stack -> packs + agent groups. safety always on; evidence/observability/epistemic/ orchestration/git-guard/stack-rust opt-in. rust-first/no-python only under the systems stack; git-guard (no-github-push) opt-in only, pulled by no stack. - lib-profile: extract generic _toml_array (reused by lib-packs); profile_members becomes a thin wrapper (no behavior change). - lib-packs: pack/stack/agent resolvers + selection loader. - lib-hooks: filter_snippet_by_packs (install-time allowlist) + prune_kit_hooks (reconfigure removes deselected kit hooks, keeps foreign ones); activate_hooks rewired to prune + filter + merge. No custom settings.json fields (/doctor safe). - lib-agents: install_manifests filters by stack agent set (empty = install all). - onboarding: pick_stack step (reuse _onb_read_choice), persists stack_profile + enabled_packs to onboarding.toml; i18n STR_* added. - bin/kei configure -> scripts/kei-configure.sh (re-pick without reinstall); install stamps ~/.claude/.kei-kit-dir. - numeric-claims-guard: money regex no longer matches shell positionals ($1..$9); requires decimal / unit / 2+ digits / tilde. Real money + time still caught. - gate one-liner added to 8 discipline hooks (runtime toggle via hooks-control). Verified end-to-end (scratch HOME): fresh=safety only; evidence pack adds numeric+citation; systems stack wires rust-first + 14 base/systems agents (no data-science/swift); reconfigure-shrink prunes kit hooks but keeps a foreign hook; settings schema clean; assembler golden 3/3. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>	2026-05-25 17:27:14 +08:00
KeiSei84	2ffb3a8b1e	chore(public-prep): scrub author identity + private-IP references ... Pre-public Phase 1. Remove personal/IP traces that should not ship in a general-purpose kit; keep only intended author attribution. - no-github-push.sh + hooks-and-blocks.md + ci-scaffold: drop "KeiTech unfiled patent IP / trade secrets / priority date" wording; reword as a generic opt-in guard for keeping code on a private remote. - check-error-patterns.sh: remove author-local absolute path from the tombstone comment. - graph-export-watcher.sh: default viz dir to ~/.local/share/kei/graph-viz (was a personal project path). - agent manifests (cost-guardian, modal-runner, infra/ml/code-implementer) + ci.yml: strip private memory references and dated personal incidents; keep the generic cost/ops lessons. Snapshots regenerated; golden 3/3. Kept intentionally: author attribution (NOTICE / README / Cargo / plugin). Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>	2026-05-25 15:00:07 +08:00
KeiSei84	7b453aac1b	feat(msg): /msg skill — read/write cross-session mailbox by @id ... Thin skill wrapper over the existing kei-message jsonl mailbox so the user (and agents) can talk between Claude Code sessions with @id syntax: /msg read my inbox (to me or "all") /msg @frontend text send to a session (identity = its cwd basename) /msg all text broadcast /msg list | who whole bus / known recipients - kei-message.sh send now accepts a leading @name as the recipient (first token only; a later @x stays literal). --to still works. - skills/msg/SKILL.md documents the identity model (cwd-basename), pull delivery (recipient's next turn via mailbox-inject hook), and the first-contact discovery path (who / all). - README skills count 68 -> 69. Verified: @name/all/--to parsing (3 cases) + end-to-end send/inbox/who via the live script in a sandbox HOME. Skill registered + discoverable. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>	2026-05-24 14:43:04 +08:00
KeiSei84	3aff00290f	fix: pre-public audit — critical install regression + 7 blockers ... CRITICAL: lib-hooks.sh had an apostrophe ("user's") inside the jq program's bash single-quote, closing the quote and producing a parse error so EVERY install aborted at source time (install.sh:71). Caught by a full minimal e2e (rc=2 then rc=0 after fix). Reworded the jq comment to drop the apostrophe. Audit blockers fixed: - MANIFEST: drop cortex-ui (no such primitive) from 4 profiles + block; lib-menu desc no longer references it. Profile resolution verified clean. - lib-dev-hub-forgejo / -zoekt: source lib-launchd.sh (register_launchd was undefined, so full-hub dev-hub install would fail at runtime). - kei-message: portable 16-digit id. BSD date prints literal "N" for %N; fall back to /dev/urandom. Verified numeric in both code paths. - bootstrap non-TTY default cortex to minimal (matches install.sh; avoids divergent curl-bash vs direct-install behaviour and 105-crate surprise). - install.sh stamps ~/.claude/.kei-profile; bin/kei reads it (splash showed "profile: ?" before, since .installed holds only primitive names). - README hook count 38 to 54 (real: ls hooks star dot sh). - web-install warns before it discards local edits in the managed clone. Verified: 106 shell files bash -n clean; minimal e2e rc=0 (38 agents, 57 hooks, 69 skills, profile stamped, mailbox present). Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>	2026-05-24 10:48:06 +08:00
KeiSei84	c347f329aa	feat(kei message): persistent inter-session mailbox + pull-inbox hook ... Any Claude Code session can now message any other (not just Agent-Teams teammates), without tmux. Append-only jsonl bus + a UserPromptSubmit hook that pulls unread into each session's context per turn. - scripts/kei-message.sh: `kei message send [--to <name|all>] <text>` / inbox / list / channels. Identity = basename(cwd); broadcast channel "all". - hooks/mailbox-inject.sh: UserPromptSubmit. Injects messages addressed to this session (cwd-basename) or "all", since last turn; per-session cursor dedup; first turn sets baseline (no history dump); never echoes own messages. - bin/kei: `kei message ...` dispatch before splash. - lib-scaffold: copy ALL scripts/*.sh on install (picks up kei-message.sh). - settings-snippet: wire mailbox-inject under UserPromptSubmit. Store: ~/.claude/mailbox/messages.jsonl. Bypass: KEI_MAILBOX_BYPASS=1. Verified: addressed delivery, broadcast, first-turn no-dump, cursor dedup, no self-echo (2-session simulation). Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>	2026-05-23 15:00:10 +08:00
KeiSei84	d34a375da7	feat(install): first-run is a full guided onboarding (agents + sleep + cortex) ... Sleep/cortex setup were left as separate things the user had to discover. Make the SessionStart first-run hook a single ordered post-install checklist that Claude walks the user through: (1) /onboard projects → per-project agents, (2) /sleep-setup → nightly REM (recommend local-only, no remote git needed), (3) /cortex-setup (only if the cortex daemon primitive is installed). Confirm + run each, skippable. Fires once (marker), then silent. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>	2026-05-22 21:27:01 +08:00
KeiSei84	582b51155f	feat(install): first-run nudge to /onboard projects after bundle install ... After install the user got no guidance to set up project agents — the summary only mentioned /new-agent (single), never /onboard (scan all projects → create a specialist per project). The installer is bash and can't launch a skill, so: - New SessionStart hook first-run-onboard.sh: on the FIRST Claude Code session after install, injects context nudging the user/Claude to run `/onboard ~/Projects/*` (scan stack + create per-project agent, delegates to /new-agent). Fires once (marker ~/.claude/.kei-firstrun-shown), then silent. Reset: rm the marker. - settings-snippet.json: wire the hook under SessionStart (matcher "*"). - lib-summary.sh next-steps: lead with `/onboard ~/Projects/*`, then /new-agent. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>	2026-05-22 19:05:00 +08:00
KeiSei84	d89ddf0c74	fix(install): normalize null hook matcher → "" on merge (Claude Code /doctor) ... Users with pre-kit hooks that have no `matcher` field end up with matcher:null, which Claude Code /doctor rejects ("Expected string, but received null") and skips the whole settings file. The jq merge preserved null as-is, so every reinstall re-surfaced the error. Now map(.matcher //= "") before group_by → null/absent collapses to "" (match-all), one group per matcher. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>	2026-05-22 16:53:27 +08:00
KeiSei84	9866d716d7	style(install): KeiSei brand colors + ASCII banner in installer output ... - KEISEI ASCII logo (голубой) shown at install start via kei_banner(). - `[install]` prefix → тёмно-жёлтый (38;5;178); primitive names → голубой (38;5;39) in both the plan and the per-primitive install lines. - Language menu: code голубой, native name тёмно-жёлтый. - lib-log COLOR now enables under curl|bash too: detect terminal via `[ -t 1 ] || /dev/tty` (web-install tees stdout → -t 1 false → colors were silently off). This is color detection, not an interactivity gate (pairs with no -t 0 — does not violate tty-interactivity-gate rule). Verified piped-under-pty: banner + gold [install] + blue/gold language menu all render through the tee logfile. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>	2026-05-22 16:01:33 +08:00
KeiSei84	7a2f6568b3	fix(install): wire PATH in curl|bash — gate pathway on stdin, not stdout ... The PATH-wiring step (~/.claude/bin, where the `kei` entry-point lives) was gated on `[ -t 0 ] && [ -t 1 ]`. curl|bash tees stdout to a logfile so -t 1 is false → pathway_install was skipped → `kei: command not found` after install. Same tee/-t1 trap as the onboarding gates (this one lived in the top-level install.sh, missed by the earlier variant grep which only scanned install/). Eradicated the pattern across the tree: install.sh pathway gate → [ -t 0 ] lib-menu.sh profile-menu gate → [ -t 0 ] lib-wizard.sh sleep-wizard gate → [ -t 0 ] Verified piped-under-pty with /dev/tty reattach: .zshrc gets the kei-substrate block (~/.claude/bin on PATH); non-interactive still skips. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>	2026-05-22 14:12:14 +08:00
KeiSei84	2873474486	style(kei): brand splash colors (голубой logo + жёлтый values), bump v0.16→v0.38 ... Splash was cyan; rebrand to the blue/yellow palette: sky-blue (38;5;39) logo + dim-blue separators, gold (38;5;220) brand line + field values. Version string was stale (v0.16 → v0.38). Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>	2026-05-22 13:49:44 +08:00
KeiSei84	6d68a3f1ad	fix(onboarding): no crash on text input, Claude Code default, explanations ... Three issues a real curl|bash user hit: 1. CRASH: typing a word (e.g. "claude") at any menu → $((ans-1)) treats it as a variable in bash arithmetic → "unbound variable" under set -u → install dies. Added _onb_read_choice (numeric+range validation, re-prompt) for all 4 menus. 2. No Claude under subscription: the kit installs into Claude Code yet the wizard offered only OpenAI Codex under subscription. Added claude-code provider (bumped kei-registries submodule c559065→b904993) + made subscription the default transport and claude-code the default provider — Enter,Enter,Enter lands on Claude Code (no API key). 3. install died at line 178 for any no-key provider (claude-code/codex/local): onboarding_run ended on a `&&` that is false when there are no auth keys → returned 1 → set -e aborted. Added explicit `return 0`. Plus per-step explanations (en+ru) and auto-select when a step has one option. Verified piped-under-pty: Enter-defaults → Claude Code, junk input → re-prompt (0 crashes), full install completes. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>	2026-05-22 12:42:50 +08:00
KeiSei84	15d50f1478	fix(web-install): don't hang after 'delegating' in interactive curl|bash ... curl|bash makes bash read THIS script byte-by-byte from the pipe. A bare `exec < /dev/tty` swapped stdin, then bash tried to read the NEXT line (the `exec ./bootstrap.sh`) from the keyboard → infinite hang after "delegating to bootstrap.sh", bootstrap never started, no profile/language menu. Fix: merge the redirect INTO the bootstrap exec (one command), so the process is replaced the instant stdin is swapped and bash never reads another script byte from the (now-wrong) stdin. Verified: piped-under-pty buggy=HANG, fixed=bootstrap starts with stdin=tty. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>	2026-05-22 10:58:44 +08:00
KeiSei84	01d5aa510f	fix(install): run onboarding + profile wizard in curl|bash (gate on stdin, not stdout) ... web-install.sh tees stdout to a logfile (exec > >(tee) 2>&1), so -t 1 is false even in an interactive curl|bash. The /dev/tty fix reattached stdin but the wizard gates required BOTH -t 0 and -t 1, so onboarding (language select) and bootstrap's profile wizard were silently skipped on the primary install path. Prompts go to stderr and read from stdin — interactive stdin is the only real requirement (already the proven pattern in lib-plan.sh confirm screen). Gates now require interactive stdin only: bootstrap.sh profile wizard lib-onboarding.sh onboarding_should_run + preflight-continue prompt lib-preflight.sh CLI-install offer prompt lib-hooks.sh activate-hooks prompt Non-interactive (CI / </dev/null / no /dev/tty) still skips — verified. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>	2026-05-22 03:58:55 +08:00
denis	2fa348f467	feat(pet): comprehensive language map (60+)	2026-05-21 18:31:05 +00:00
denis	4e62e921e9	feat(pet): comprehensive reflection (60+ langs, all agents, errors)	2026-05-21 18:30:01 +00:00
denis	e8df152549	feat(pet): show session tokens + context% from statusLine stdin	2026-05-21 17:50:47 +00:00
denis	6d8f07ab90	refactor(pet): read kit agent tracking (SSoT), drop duplicate	2026-05-21 17:15:07 +00:00
denis	752654f049	refactor(pet): read kit agent tracking (SSoT), drop duplicate	2026-05-21 17:14:55 +00:00
denis	13e536ec1c	refactor(pet): read kit agent tracking (SSoT), drop duplicate	2026-05-21 17:14:17 +00:00
denis	a965ad3b7c	fix(pet): token extraction via jq totalTokens + persist token total	2026-05-21 17:05:48 +00:00
denis	ac1f0ebaec	fix(pet): token extraction via jq totalTokens + persist token total	2026-05-21 17:04:38 +00:00
denis	3c67914788	feat(pet): agent emojis + multi-agent display + plan emoji + language icons	2026-05-21 12:21:00 +00:00
denis	ac6a020612	feat(pet): agent emojis + multi-agent display + plan emoji + language icons	2026-05-21 12:20:47 +00:00
denis	e129745319	feat(pet): agent emojis + multi-agent display + plan emoji + language icons	2026-05-21 12:20:45 +00:00
denis	cb694cc96a	fix(web-install): tolerate missing /dev/tty in non-interactive curl|bash	2026-05-21 10:53:21 +00:00
denis	305787fae3	fix(install): make fresh install complete + ship tamagotchi (#1)	2026-05-20 18:50:09 +00:00
Denis Parfionovich	53ada048b2	fix(install): backup_file mv→cp -a, install --activate-hooks больше не падает ... gx10 fail при первой установке (фото юзера 2026-05-18): jq: error: Could not open file /home/keisei/.claude/settings.json [error] jq-merge produced invalid output; ... unchanged [error] install failed at line 126; rolled back Root cause: backup_file() (install/lib-backup.sh:56) делал `mv target backup`, затем activate_hooks() → _jq_merge_hooks() пыталась читать оригинал target'а через jq — но оригинал уже унесён mv'ом, открыть нечего. jq fail → rollback всей установки. Fix: cp -a вместо mv (как уже сделано в backup_path() для директорий). Атомарный безопасный бэкап; оригинал остаётся для jq, потом _jq_merge_hooks атомарно переписывает его mv tmp → target.	2026-05-18 14:33:22 +08:00
Denis Parfionovich	fc0758d2bb	chore: версия 0.38.0 единая + warning-fixes + mold для release-job ... 1. Версии npm-пакетов приведены к 0.38.0 (был зоопарк 0.14.0/0.14.6): _ts_packages/{,packages/{gmail,grok,mcp-server,recall,telegram,youtube}-adapter} 2. Rust warnings (cargo check workspace): - kei-cortex: deprecated validate_path → validate_path_lexical, удалён orphan-wrapper в read.rs, struct Input → pub(crate) - frustration-matrix: #[allow(dead_code)] на confusion_* поля EvalReport + train_from_dir (будущий CLI) 3. CI release.yml job 'release' падал на Build kei-changelog: clang invalid linker '-fuse-ld=mold' — в .cargo/config.toml жёстко прописан mold для linux. Добавлен Install mold шаг (как уже сделано в build-release matrix).	2026-05-18 13:41:37 +08:00
Denis Parfionovich	d1cbdd8892	fix(ci): vendored openssl-sys для cross-compile x86_64-apple-darwin ... CI run 26014515768 — `x86_64-apple-darwin` упал на webauthn-attestation-ca → openssl-sys 0.9.115: pkg-config не настроен для cross-compile (macos-latest = arm64, target = x86_64). Фикс: добавлен прямой dep `openssl-sys = { version = "0.9", features = ["vendored"] }` в kei-auth-webauthn — компилит openssl из исходников, не требует системного. Транзитивно достаточно одного объявления feature во всём workspace (Cargo unifies features).	2026-05-18 13:08:40 +08:00
Denis Parfionovich	5f6b4f2620	fix(ci): regenerate bun.lock — sync с package.json для CI release ... CI v0.38.0 mcp-server билды все 5 упали на `bun install --frozen-lockfile` с «lockfile had changes, but lockfile is frozen». В lockfile отставали: - @keisei/mcp-server 0.14.0 → 0.14.6 - ajv 8.18.0 → 8.20.0 - express-rate-limit 8.3.2 → 8.4.1 - hono 4.12.14 → 4.12.16 Пересоздан `rm bun.lock && bun install` под bun 1.3.14 (тот же что в CI).	2026-05-18 13:01:36 +08:00
Denis Parfionovich	a8101b8f60	fix: install audit 2026-05-18 — cortex profile + TTY in web-install ... audit-2026-05-18 (соседняя сессия на gx10, 3 бага из 5 подтверждены): #1 [HIGH] cortex profile сломан — kei-cortex depends on kei-router path-dep'ом, а kei-router → kei-model. kei-model не было в profile list, cargo build падал с «failed to read kei-model/ Cargo.toml». Добавил kei-model в cortex profile. #3 [HIGH] cortex-ui отсутствует в репо — был в profile list, но исходника нет ни в _primitives/_rust/, ни в _ts_packages/. Удалил из profile. #4 [MEDIUM] web-install.sh теряет /dev/tty — exec | tee + curl|bash делают stdin pipe, wizard'у read нечего читать, onboarding падает на первом prompt. Переподключаю stdin к /dev/tty перед exec bootstrap.sh, если /dev/tty доступен. #2 (linux-arm64 prebuild) — tag v0.38.0 не запушен на github, CI release.yml не сработал. Требует RULE 0.1 triple-confirm. #5 (non-TTY default = minimal) — уже корректно, install.sh:141 `PROFILE="${PROFILE:-minimal}"` + lib-menu.sh skip on non-TTY.	2026-05-18 12:38:35 +08:00
Denis Parfionovich	1d958b3587	fix(security): patent-leak + classical-safety audit fixes ... PATENT-LEAK (HIGH): - hooks/no-python-without-approval.sh: genesis-verify пример → my-project - docs/encyclopedia/rust-crates-H-N.md: убран термин «Genesis IP, ITAR» PATENT-LEAK (MEDIUM): - CHANGELOG: project-vortex → reduced scope - _blocks/registries (submodule bump): убраны имена приватных project-specialists из комментария agent-profiles.toml - docs/encyclopedia/skills-and-agents.md: ML/RL/CfC → ML/RL CLASSICAL-SAFETY (MEDIUM): - install/lib-preflight.sh: eval "$version_cmd" → bash -c "..." (защита от инъекции если providers.toml расширят) - _primitives/provision-{vultr,hetzner}.sh: /tmp/$$ → mktemp (устраняет symlink TOCTOU race) - web-install.sh: chmod 600 + umask 077 на ~/.keisei-install.log (Forgejo admin creds + токены в логе) - scripts/regen-counts.sh: eval "$1" → bash -c NOT FIXED (требуют действий юзера): - HIGH: @keisei scope не зарегистрирован на npmjs.org — typosquat возможен пока не задан NPM_TOKEN и не сделан publish - HIGH: install.keisei.app DNS не настроен — DNS-hijack возможен - LOW: parfionovich@keilab.io в SECURITY.md, plugin.json, ~40 Cargo файлах — intentional contact, оставлен Локальный git author установлен на parfionovich@keilab.io вместо parfionovichd@icloud.com (только для будущих коммитов в этом репо).	2026-05-18 12:05:25 +08:00
Parfii-bot	170c850ca0	fix(install): public install via keigit.com (Vultr) — no github needed ... Что меняется: - README.md: git clone instruction → https://keigit.com/keisei/KeiSeiKit-1.0.git (был приватный github, внешний clone падал 404) - .gitmodules: kei-registries submodule → keigit.com/keisei/kei-registries.git (был приватный github, --recurse-submodules падал) - web-install.sh: KEISEI_REPO default → https://keigit.com/keisei/... (был git@github.com:KeiSeiLab/...) - install.sh: NO_EXECUTE check ПЕРЕД check_prereqs, чтобы --no-execute работал без установленных зависимостей. - install/lib-args.sh: новый флаг --skip-prereqs (SKIP_PREREQS) — для CI и dry-run сценариев. - marketplace.json + plugin.json: новые манифесты (version=0.38.0 из git tag) для Claude Code /plugin marketplace add + install. На keigit.com (45.77.41.204, публичный) залиты публичные репо keisei/KeiSeiKit-1.0 + keisei/kei-registries. Anonymous git clone работает. GitHub mirror (KeiSeiLab/*) остаётся приватным как backup.	2026-05-18 11:47:13 +08:00
Parfii-bot	5b8e066888	refactor(install): production-ready финальный круг ... 1. lib-onboarding.sh раскидан на 3 куба (Constructor Pattern <200 LOC): - lib-onboarding-registry.sh (79 LOC) — парсеры providers/models.toml + onboarding_fallback_providers (14 провайдеров) + onboarding_auth_env_for_provider helper (был inline в collect_auth) - lib-onboarding-ui.sh (189 LOC) — pick_language/transport/provider/model + collect_auth (whiptail/bash select) - lib-onboarding-state.sh (57 LOC) — write_secrets + write_config + user-model-override.toml для kei-model-router - lib-onboarding.sh (95 LOC) — тонкий оркестратор: should_run + run Сам lib-onboarding.sh source'ит 3 подкуба автоматически. Глобалы (ONBOARDING_*, REGISTRY_*, ONBOARDED_FLAG, etc.) объявлены в оркестраторе, подкубы их используют через имена. 2. lib-menu.sh локализован: - whiptail title + radiolist prompt через ${STR_MENU_TITLE} + ${STR_MENU_SUBSTRATE} + ${STR_MENU_PROFILE_PROMPT}. - Plain heading тоже использует словарь. - 12 коротких имён профилей (minimal/core/dev/...) — оставлены EN как стабильные id (не переводятся). 3. _blocks/build-index.sh — детерминированная регенерация INDEX.md. Группировка по 14 категорийным префиксам + "Прочие" для остальных. Безопасно перезапускать. INDEX.md обновлён через этот скрипт (минимальный diff — добавлена ссылка на build-index.sh в шапке). Проверено: bash -n чисто, unit тесты onboarding_list_providers/ transports/models OK, non-TTY smoke ./install.sh --profile=minimal --no-execute проходит.	2026-05-17 23:57:23 +08:00
Parfii-bot	5327befef6	docs(_blocks): INDEX.md — реестр 84 блоков для assembler ... Авто-сгенерирован из _blocks/*.md по категориям префикса: API / AUTH / CI / DB / DEPLOY / DOCS / DOMAIN / MODE / OBS / PATH / RULE / SCRAPER / SECURITY / STACK / TEST + прочие. Каждая запись: `name` — первая H1-строка файла. Использование в _manifests/<agent>.toml: blocks = ["baseline", "rule-pre-dev-gate", "api-anthropic", ...] Assembler читает блоки из _blocks/, склеивает в финальный _generated/<agent>.md. Новый блок = просто .md в _blocks/. Регенерация INDEX.md — TODO build-index.sh скрипт (сейчас сгенерирован вручную bash циклом).	2026-05-17 20:39:06 +08:00
Parfii-bot	33f1376ee1	feat(i18n): расширил язык-набор с 2 до 16 ... Новые словари: uk Українська de Deutsch fr Français es Español pt Português it Italiano tr Türkçe ar العربية hi हिन्दी zh 简体中文 ja 日本語 ko 한국어 id Bahasa Indonesia vi Tiếng Việt Каждый файл — 17 STR_* ключей (тот же контракт что en.sh + ru.sh). lib-i18n.sh::i18n_available_languages — единый список (en + 15) для меню выбора в мастере. i18n_load_lang упрощён: всегда грузит английский как fallback, потом поверх — словарь языка (отсутствующий ключ остаётся английским). onboarding_pick_language теперь генерирует whiptail/bash select из i18n_available_languages динамически — добавление нового языка = один файл `install/i18n/<код>.sh` + одна строка в available_languages, дальше всё подхватится автоматически. Перевод формальный, без излишеств. Welcome баннер всегда EN (юзер ещё не выбрал на момент показа). Проверено: bash -n всех 16 словарей чисто, roundtrip всех языков работает (i18n_load_lang en/ru/uk/de/fr/es/pt/it/tr/ar/hi/zh/ja/ko/id/vi выдают локализованные STR_DONE_TITLE + STR_TR_DIRECT_API), non-TTY smoke install --no-execute проходит.	2026-05-17 16:51:44 +08:00
Parfii-bot	305140f20b	fix(install): close MEDIUM/LOW from RULE 0.26 audit ... - preflight failure handling: вместо `|| true` (молчаливое продолжение при упавшем preflight) — явный prompt «продолжить? [y/N]» с return 1 при отказе. Без TTY печатает warning и продолжает. Это закрывает HIGH bug-9: «.onboarded флаг выставляется при нерабочей конфигурации». - lib-preflight.sh::preflight_check_cli — общий helper (command -v + offer-install + version echo). Убирает 6-file boilerplate (хотя сами per-provider файлы пока не переписаны под него — это отдельный шаг). - onboarding_fallback_providers: расширен с 3 до 14 провайдеров, покрывает все 7 транспортов. Был дрейф vs providers.toml (14 vs 3), юзер без submodule видел только anthropic+openai+ollama. - STR_PICK_PROVIDER plural mismatch: whiptail и plain ветки теперь используют один fallback "Provider within" (раньше plain имел "Providers within", whiptail — "Provider within"). - STR_DONE_NEXT удалён из en.sh + ru.sh (мёртвый ключ). - Новые ключи: STR_MENU_* (для lib-menu.sh) + STR_PREFLIGHT_FAILED + STR_PREFLIGHT_CONTINUE. lib-menu.sh начал использовать STR_MENU_TITLE / STR_MENU_SUBSTRATE (частичная локализация, остальное меню — отдельной задачей). Тесты: bash -n чисто, i18n round-trip EN/RU работает, non-TTY smoke install --no-execute проходит.	2026-05-17 16:37:28 +08:00
Parfii-bot	a3ffaed374	fix(install,router): close 5 HIGH audit findings ... 1. HIGH-1: onboarding ↔ kei-model-router связка До: onboarding мастер писал ~/.claude/config/onboarding.toml, но router его не читал — выбор провайдера декоративный. После: lib-onboarding.sh::onboarding_write_config доп. пишет ~/.claude/config/user-model-override.toml; registry.rs::Registry получил load_user_override() возвращающий UserModelOverride. Приоритет: --pinned > user-override > agent-profiles default_model_ref. 2 новых теста (round-trip TOML, optional transport). 2. HIGH-2: eval "$install_cmd" → bash -c "$install_cmd" До: lib-preflight.sh::preflight_offer_install делал eval. После: bash -c с явным subshell + печать команды юзеру до запуска. 3. HIGH-3: codex.sh regex false-pass До: grep -qiE "logged.in|active" пропускал "not logged in" как pass. После: сначала negative-pattern (not logged|signed out|please log in), потом positive (\blogged in\b|status: active|auth: yes). 4. HIGH-4: path traversal в source preflight До: lib-preflight.sh::preflight_run делал source без валидации provider id — `../../../evil` сработал бы. После: whitelist regex ^[a-z0-9][a-z0-9_-]{0,63}$ + realpath проверка что resolved путь не вышел за PREFLIGHT_DIR. 5. HIGH-5: curl|sh без verification ollama-local.sh + google-vertex.sh теперь печатают предупреждение что Linux-установка тянет shell-скрипт с внешнего сервера без проверки хэша/подписи, и предлагают альтернативу. MEDIUM попутно: - anthropic-bedrock.sh: один вызов aws sts get-caller-identity вместо двух (экономит 1-3с), различает cred-error от network по тексту stderr, маскирует account ID в ARN перед печатью. - mlx-local.sh: pip install --user mlx-lm вместо global pip install (не требует sudo, не загрязняет system Python). Тесты: cargo test --lib 80/80, bash -n всех изменённых файлов чисто.	2026-05-17 16:28:33 +08:00
Parfii-bot	0a8c93561f	feat(install): preflight модуль — проверка CLI по выбранному провайдеру ... Добавлен шаг между выбором модели и сбором ключей: для провайдеров требующих внешний CLI/daemon — проверка наличия, инструкция по установке, опциональный авто-install (TTY only). install/lib-preflight.sh — диспетчер: preflight_run <provider-id> - ищет install/preflight/<id>.sh, source'ит, вызывает preflight_check_<sanitized_id> - функция возвращает 0/1, печатает инструкцию в stderr - non-TTY: только печать, без вопросов preflight_offer_install <cli> <install-cmd>: - TTY: спрашивает [y/N/skip], выполняет install-cmd - non-TTY: печатает и пропускает install/preflight/ — 6 файлов (только для провайдеров с CLI): anthropic-bedrock.sh — aws CLI + sts get-caller-identity google-vertex.sh — gcloud CLI + project config codex.sh — codex CLI (npm) + login status ollama-local.sh — ollama binary + 127.0.0.1:11434 daemon mlx-local.sh — mlx_lm.server (arm64 only) + 127.0.0.1:8080 lmstudio-local.sh — порт 127.0.0.1:1234 (desktop app) Direct-api провайдеры (anthropic, openai, xai, deepseek, google) + proxy (litellm, openrouter) + openai-azure — preflight-файла нет, диспетчер тихо пропускает, ключ собирается обычно. Тесты: bash -n чисто на всех 8 файлах, unit dispatcher показывает silent-pass для anthropic, warn+exit-1 для bedrock без aws на PATH.	2026-05-17 15:57:54 +08:00
Parfii-bot	ab260f429e	feat(install): i18n модуль + welcome banner ... Структура локализации: install/i18n/en.sh — английский словарь (дефолт, fallback) install/i18n/ru.sh — русский словарь install/lib-i18n.sh — лоадер + welcome banner Поток: 1. install.sh source'ит lib-i18n.sh и зовёт i18n_load_default → все строки на английском. 2. Если onboarding нужен — печатается welcome banner ASCII-рамка на английском (язык ещё не выбран). 3. onboarding_pick_language — единственный двуязычный шаг ("Choose language / Выберите язык"). По выбору вызывает i18n_load_lang ru|en — перегружает словарь. 4. Все последующие шаги (transport / provider / model / auth / completion) идут на выбранном языке. Fallback: если ru-словарь не имеет ключа — используется английское значение (load_default вызывается до загрузки ru.sh, переменные перезаписываются поверх). lib-onboarding.sh переведён со смешанных hardcoded строк на ${STR_*} placeholders. Тесты: bash -n всех 5 файлов чисто, i18n loader unit-тест показывает EN/RU перегрузку, non-TTY smoke install --no-execute проходит.	2026-05-17 15:35:10 +08:00
Parfii-bot	c844524f68	fix(kei-buddy): close 3 HIGH audit findings from session multi-critic swarm ... 1. OID-check в parse_x25519_pkcs8_pem До: брался последний 32-байтный slice любого PKCS#8 DER, OID не проверялся. RSA/EC/Ed25519 ключ молча давал 32 неправильных байта → decrypt падал с generic "wrong key" без объяснения. После: строгая проверка длины (48 байт) + OID 1.3.101.110 (X25519, byte slice 9..12 = 0x2b,0x65,0x6e). Внешний openssl ключ другого алгоритма теперь даёт явную ошибку с указанием реального OID. Константы X25519_OID + X25519_PKCS8_DER_LEN. RFC 8410 §3 + §7 ссылка в doc-комментарии. 2. x25519-dalek feature `zeroize` До: features=["static_secrets"] — StaticSecret хранил priv-ключ в куче без затирания при Drop. Локальный priv_raw.zeroize() стирал только стек-копию, оригинал в куче оставался до GC. После: features=["static_secrets","zeroize"] — StaticSecret сам реализует ZeroizeOnDrop, ключ затирается при выходе из scope. 3. Два новых теста: - parse_rejects_wrong_length_der — 32-байтный DER (вместо 48) отклоняется с сообщением про "48 bytes" - parse_rejects_wrong_oid — DER с OID Ed25519 (0x2b,0x65,0x70) отклоняется с сообщением про "X25519" 8/8 тестов модуля проходят, cargo check workspace чисто. Старая 0.14.5 mcp-server (с source maps содержавшими /Users/ denisparfionovich/...) удалена с keigit.com отдельной операцией через Forgejo DELETE API.	2026-05-17 13:41:18 +08:00
Parfii-bot	9c6df65ae2	feat(install): onboarding wizard — transport→provider→model→keys ... Новый интерактивный мастер при первой установке: 1. Язык интерфейса (RU/EN) 2. Транспорт (direct-api / aws-bedrock / azure-openai / google-vertex / local / proxy / subscription) 3. Провайдер внутри транспорта (14 вариантов суммарно) 4. Модель из выбранного провайдера (3 моделей Anthropic, и т.д.) 5. Ключи/креды (silent read, пишет в ~/.claude/secrets/.env chmod 600) Skip-логика: - флаг ~/.claude/.onboarded - env KEISEI_SKIP_ONBOARD=1 - не-TTY запуск Запись: ~/.claude/config/onboarding.toml — выбор lang/transport/provider/model ~/.claude/secrets/.env — ключи провайдера ~/.claude/.onboarded — флаг прохождения Парсер toml — pure awk (без зависимостей). Реестры из submodule _blocks/registries. Submodule bumped до afe0c6f с новым полем transport. Fallback если submodule не подтянут: anthropic + sonnet.	2026-05-17 02:24:50 +08:00
Parfii-bot	35136a9840	feat(npm-publish): keigit as primary registry, npmjs reserved for future ... - _ts_packages/tsconfig.base.json: sourceMap=false, declarationMap=false (source maps leaked absolute dev paths in published tarballs). - All 6 @keisei/* packages: publishConfig.registry = keigit.com. mcp-server bumped 0.14.5 -> 0.14.6 (republished without maps). - .github/workflows/release.yml split into two jobs: npm-publish-keigit: primary. Activates on KEIGIT_NPM_TOKEN + KEIGIT_NPM_USER secrets. Publishes via direct curl PUT (Forgejo requires Basic auth; npm CLI sends Bearer). npm-publish-npmjs: reserved for future. Activates on NPM_TOKEN secret. Currently no token -> job skipped gracefully. End-to-end verified: clean dir + scope @keisei -> keigit + npm install pulls 145 deps, no leaked paths, no .map files in any of 6 packages.	2026-05-17 00:18:44 +08:00
Denis Parfionovich	3c06e98092	feat(web-install): curl-pipeable bootstrapper at install.keisei.app ... Thin wrapper (88 LOC) that lets a fresh machine install KeiSeiKit with one line, no prior clone: curl -fsSL https://install.keisei.app | bash curl -fsSL https://install.keisei.app | bash -s -- --profile=dev --yes ## Why a third install entry point Existing install path required `git clone` + `cd` + `./bootstrap.sh` — three commands the user has to type, plus they must already have the repo URL handy. For private repos with SSH auth this is real friction. `web-install.sh` is meant to be served as a static file (Cloudflare Pages / nginx) at install.keisei.app. It does ONE thing: prereq → clone → delegate to ./bootstrap.sh. Single source of truth — no duplicated install logic. ## What it does 1. Splash + log to ~/.keisei-install.log 2. Hard prereq: git (the one thing bootstrap.sh cannot self-install) 3. SSH auth probe for git@github.com — clear error message if key missing 4. Clone/pull KeiSeiLab/KeiSeiKit-1.0 to $KEISEI_ROOT (default ~/.local/share/keisei) 5. git submodule update --init (pulls kei-registries) 6. exec ./bootstrap.sh "$@" — pass-through all flags ## Env overrides - KEISEI_ROOT — install location - KEISEI_REPO — git URL - KEISEI_REF — branch/tag/sha ## Hosting Push this file to install.keisei.app (Cloudflare Pages, S3+CF, nginx static — anything that serves a single .sh over HTTPS). ## README updated Quick start section now shows the curl one-liner as the recommended path. Repo URL corrected from KeiSei84 → KeiSeiLab org. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>	2026-05-16 16:44:26 +08:00
Parfii-bot	86834b82af	feat(kei-buddy): provision_decrypt — VPS-side blob decryption ... Mirrors keisei-marketplace/src/lib/crypto-box.ts::sealBoxToVps. Two new subcommands on kei-buddy bin: - genkeys --key <path> → writes PKCS#8 PEM x25519 priv, prints standard-base64 pub (44 char) - decrypt-and-export --vps-key <pem> --blob <json> --env-out <env> → ECDH(vps_priv, ephPub) → HKDF-SHA256 info=keibuddy-token-v1 → XChaCha20-Poly1305 decrypt → append BOT_TOKEN/TELEGRAM_BOT_TOKEN to env file (replaces stale, keeps other lines) Cloud-init in hetzner.ts already calls these. Without this commit the VPS could decode its own pubkey but had no way to recover the sealed bot-token blob — the bot would never log into Telegram. Crypto stack (mirror of @noble in TS): - x25519-dalek 2 (static_secrets feature) - chacha20poly1305 0.10 (XChaCha20Poly1305) - hkdf 0.12, sha2 0.10 - base64 0.22 (accepts URL_SAFE_NO_PAD + STANDARD) - zeroize 1 for priv-key wipe Tests (6/6 pass): - roundtrip_seal_then_decrypt — re-implement marketplace sealing in Rust, verify our decryption recovers plaintext - decrypt_and_export_writes_env_file — full e2e through CLI surface - decrypt_and_export_replaces_existing_token — stale BOT_TOKEN replaced, other env lines preserved - decrypt_rejects_wrong_key — XChaCha20 AEAD tag fails on wrong key - pem_roundtrip — write_pkcs8 + parse_pkcs8 round-trip - b64decode_accepts_urlsafe_and_standard — handles both encodings Cross-verified end-to-end: $ node marketplace_seal.mjs <pub> <token> → /tmp/blob.json $ kei-buddy decrypt-and-export --vps-key ... → BOT_TOKEN matches input Constructor Pattern: 1 file (provision_decrypt.rs, 344 LOC), 1 module, 1 responsibility (token-blob decryption + key generation). === STATUS-TRUTH MARKER === shipped: functional stubs: 0 cargo-check: PASS behaviour-verified: yes (e2e marketplace-seal → kei-buddy-decrypt round-trip) follow-up-required: - none	2026-05-15 17:49:59 +08:00
Parfii-bot	e9b0debec3	merge: feat/agent-dna-three-layer — agent_shell_dna cube + registry submodule + audit closures	2026-05-14 15:16:26 +08:00
Parfii-bot	40a5c2e55f	fix(audit-r2): HIGH+MEDIUM closures from second round audit ... HIGH-1: submodule URL ssh → https + shallow (DNS spoofing surface, both repos) HIGH-3: docs/DNA-MIGRATION.md — two-format coexistence policy (4-seg legacy task-class vs 5-seg agent-shell marketplace) HIGH-5: agent_shell_dna doc — explicit consumer = marketplace, planned ledger integration; module-doc clarification MEDIUM: Haiku model id pinned to claude-haiku-4-5-20251001 across pricing.rs::from_slug + ::name + escalate.rs tests + select_posterior fixture + kei-registries submodule (pushed c39e528→7aaa6a7)	2026-05-14 13:18:14 +08:00