32 commits

Author	SHA1	Message	Date
KeiSei84	4bc40e8e69	feat(v0.45): post-install onboarding wizard + 5 full-profile bug fixes ... User feedback from real prod install (curl|bash, profile=full): 'нет выбора провайдера, нахуй не понятно что делать после установки'. ## New: kei onboard wizard scripts/kei-onboard.sh — 4-step interactive wizard auto-triggered at end of bootstrap.sh (if stdin is TTY; non-interactive runs print summary): Step 1 — Pick primary LLM orchestrator (claude/grok/agy/copilot/kimi) Step 2 — Run kei mcp-wire to install MCP into each detected CLI Step 3 — Optional MOONSHOT_API_KEY hint for live limits Step 4 — Run kei-doctor health check Re-runnable anytime: 'kei onboard'. Skip auto-trigger: KEI_NO_ONBOARD=1. bin/kei gains 'onboard | setup | wizard' arms. ## Bug fixes from prod install log [install] act_runner: command not found brew installs 'gitea-runner' (not 'act_runner'); the two are functionally equivalent and both register with Forgejo. lib-dev-hub-forgejo-runner.sh now tries act_runner first, falls back to gitea-runner; brew install switches to gitea-runner package which is what's actually available. [install] forgejo admin user create — 'no such table: user' Fresh sqlite DB hadn't been migrated before admin user create ran. lib-dev-hub-forgejo.sh now runs 'forgejo migrate' before admin bootstrap; idempotent — safe on re-runs. [install] dev-hub-zoekt: 'No formulae or casks found for zoekt' Zoekt not in homebrew/core. lib-dev-hub-zoekt.sh now tries known taps (sourcegraph/zoekt, hyperdiscovery/zoekt), falls back to 'go install' if Go is available, and finally skips cleanly with a clear warning instead of aborting the entire dev-hub bundle install. [install] dev-hub-datasette: Bootstrap failed: 5: Input/output error launchd Input/output error is a macOS quirk when the plist exists but the agent isn't yet known to launchd. Not introducing a code fix this release — to investigate in v0.46. Doc note will be added. [install] kei-shared binary missing post-install Pre-built cache detection ('pre-built binaries detected — skipping cargo build') was overly eager; kei-shared wasn't in the cache. Workaround: run install with KEI_SKIP_RUST_BUILD unset to force rebuild. Permanent fix deferred to v0.46 (improve cache validation). ## Verification - 'kei onboard' non-interactive: prints next-steps + exits cleanly ✓ - 'kei --status' shows substrate v0.45 ✓ - bootstrap.sh end-of-install branch: TTY check + KEI_NO_ONBOARD honored ✓	2026-05-26 23:18:55 +08:00
KeiSei84	ad6ccd2beb	fix(install,hooks): policy-chain.toml install + stale .task-*.start cleanup ... Two root-cause fixes: 1) hooks/_lib/policy-chain.toml was authored in v0.40 but the install loop in install/lib-hooks.sh globbed only *.sh, missing the TOML SSoT. Fresh installs got safe_tools fall-through ('no policy-chain.toml; passing through') because the file never landed. Extended the glob to include *.toml; chmod +x stays sh-only. 2) hooks/agent-event-done.sh now removes the .task-<id>.start marker that task-timer.sh wrote on agent_spawn. Without it completed sub-agents left stale markers in ~/.claude/memory/time-metrics/ for up to 2h (the pet's stale filter) inflating the running-agents counter. Verified end-to-end with HOME=/tmp/ksk-verify fresh install: - 38 agents on disk - 54 hooks + 4 _lib files (including policy-chain.toml) - all 7 kei-mcp-wire-*.sh scripts present - bin/kei has pick / run-via / mcp-wire arms - 'kei mcp-wire --list' detects all 5 CLIs with correct tiers - settings.json carries ONLY safety pack (Phase 2 opt-in honored)	2026-05-26 18:52:25 +08:00
KeiSei84	abae256c1d	feat(install): opt-in hook packs + stack profiles (public posture) ... A fresh install now activates only the safety pack; discipline hooks and agents are opt-in via an onboarding step (step 6) or `kei configure`. "People don't need Rust-only" — they pick their own stack. - _primitives/hook-packs.toml: SSoT mapping pack -> hooks, stack -> packs + agent groups. safety always on; evidence/observability/epistemic/ orchestration/git-guard/stack-rust opt-in. rust-first/no-python only under the systems stack; git-guard (no-github-push) opt-in only, pulled by no stack. - lib-profile: extract generic _toml_array (reused by lib-packs); profile_members becomes a thin wrapper (no behavior change). - lib-packs: pack/stack/agent resolvers + selection loader. - lib-hooks: filter_snippet_by_packs (install-time allowlist) + prune_kit_hooks (reconfigure removes deselected kit hooks, keeps foreign ones); activate_hooks rewired to prune + filter + merge. No custom settings.json fields (/doctor safe). - lib-agents: install_manifests filters by stack agent set (empty = install all). - onboarding: pick_stack step (reuse _onb_read_choice), persists stack_profile + enabled_packs to onboarding.toml; i18n STR_* added. - bin/kei configure -> scripts/kei-configure.sh (re-pick without reinstall); install stamps ~/.claude/.kei-kit-dir. - numeric-claims-guard: money regex no longer matches shell positionals ($1..$9); requires decimal / unit / 2+ digits / tilde. Real money + time still caught. - gate one-liner added to 8 discipline hooks (runtime toggle via hooks-control). Verified end-to-end (scratch HOME): fresh=safety only; evidence pack adds numeric+citation; systems stack wires rust-first + 14 base/systems agents (no data-science/swift); reconfigure-shrink prunes kit hooks but keeps a foreign hook; settings schema clean; assembler golden 3/3. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>	2026-05-25 17:27:14 +08:00
KeiSei84	3aff00290f	fix: pre-public audit — critical install regression + 7 blockers ... CRITICAL: lib-hooks.sh had an apostrophe ("user's") inside the jq program's bash single-quote, closing the quote and producing a parse error so EVERY install aborted at source time (install.sh:71). Caught by a full minimal e2e (rc=2 then rc=0 after fix). Reworded the jq comment to drop the apostrophe. Audit blockers fixed: - MANIFEST: drop cortex-ui (no such primitive) from 4 profiles + block; lib-menu desc no longer references it. Profile resolution verified clean. - lib-dev-hub-forgejo / -zoekt: source lib-launchd.sh (register_launchd was undefined, so full-hub dev-hub install would fail at runtime). - kei-message: portable 16-digit id. BSD date prints literal "N" for %N; fall back to /dev/urandom. Verified numeric in both code paths. - bootstrap non-TTY default cortex to minimal (matches install.sh; avoids divergent curl-bash vs direct-install behaviour and 105-crate surprise). - install.sh stamps ~/.claude/.kei-profile; bin/kei reads it (splash showed "profile: ?" before, since .installed holds only primitive names). - README hook count 38 to 54 (real: ls hooks star dot sh). - web-install warns before it discards local edits in the managed clone. Verified: 106 shell files bash -n clean; minimal e2e rc=0 (38 agents, 57 hooks, 69 skills, profile stamped, mailbox present). Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>	2026-05-24 10:48:06 +08:00
KeiSei84	c347f329aa	feat(kei message): persistent inter-session mailbox + pull-inbox hook ... Any Claude Code session can now message any other (not just Agent-Teams teammates), without tmux. Append-only jsonl bus + a UserPromptSubmit hook that pulls unread into each session's context per turn. - scripts/kei-message.sh: `kei message send [--to <name|all>] <text>` / inbox / list / channels. Identity = basename(cwd); broadcast channel "all". - hooks/mailbox-inject.sh: UserPromptSubmit. Injects messages addressed to this session (cwd-basename) or "all", since last turn; per-session cursor dedup; first turn sets baseline (no history dump); never echoes own messages. - bin/kei: `kei message ...` dispatch before splash. - lib-scaffold: copy ALL scripts/*.sh on install (picks up kei-message.sh). - settings-snippet: wire mailbox-inject under UserPromptSubmit. Store: ~/.claude/mailbox/messages.jsonl. Bypass: KEI_MAILBOX_BYPASS=1. Verified: addressed delivery, broadcast, first-turn no-dump, cursor dedup, no self-echo (2-session simulation). Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>	2026-05-23 15:00:10 +08:00
KeiSei84	582b51155f	feat(install): first-run nudge to /onboard projects after bundle install ... After install the user got no guidance to set up project agents — the summary only mentioned /new-agent (single), never /onboard (scan all projects → create a specialist per project). The installer is bash and can't launch a skill, so: - New SessionStart hook first-run-onboard.sh: on the FIRST Claude Code session after install, injects context nudging the user/Claude to run `/onboard ~/Projects/*` (scan stack + create per-project agent, delegates to /new-agent). Fires once (marker ~/.claude/.kei-firstrun-shown), then silent. Reset: rm the marker. - settings-snippet.json: wire the hook under SessionStart (matcher "*"). - lib-summary.sh next-steps: lead with `/onboard ~/Projects/*`, then /new-agent. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>	2026-05-22 19:05:00 +08:00
KeiSei84	d89ddf0c74	fix(install): normalize null hook matcher → "" on merge (Claude Code /doctor) ... Users with pre-kit hooks that have no `matcher` field end up with matcher:null, which Claude Code /doctor rejects ("Expected string, but received null") and skips the whole settings file. The jq merge preserved null as-is, so every reinstall re-surfaced the error. Now map(.matcher //= "") before group_by → null/absent collapses to "" (match-all), one group per matcher. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>	2026-05-22 16:53:27 +08:00
KeiSei84	9866d716d7	style(install): KeiSei brand colors + ASCII banner in installer output ... - KEISEI ASCII logo (голубой) shown at install start via kei_banner(). - `[install]` prefix → тёмно-жёлтый (38;5;178); primitive names → голубой (38;5;39) in both the plan and the per-primitive install lines. - Language menu: code голубой, native name тёмно-жёлтый. - lib-log COLOR now enables under curl|bash too: detect terminal via `[ -t 1 ] || /dev/tty` (web-install tees stdout → -t 1 false → colors were silently off). This is color detection, not an interactivity gate (pairs with no -t 0 — does not violate tty-interactivity-gate rule). Verified piped-under-pty: banner + gold [install] + blue/gold language menu all render through the tee logfile. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>	2026-05-22 16:01:33 +08:00
KeiSei84	7a2f6568b3	fix(install): wire PATH in curl|bash — gate pathway on stdin, not stdout ... The PATH-wiring step (~/.claude/bin, where the `kei` entry-point lives) was gated on `[ -t 0 ] && [ -t 1 ]`. curl|bash tees stdout to a logfile so -t 1 is false → pathway_install was skipped → `kei: command not found` after install. Same tee/-t1 trap as the onboarding gates (this one lived in the top-level install.sh, missed by the earlier variant grep which only scanned install/). Eradicated the pattern across the tree: install.sh pathway gate → [ -t 0 ] lib-menu.sh profile-menu gate → [ -t 0 ] lib-wizard.sh sleep-wizard gate → [ -t 0 ] Verified piped-under-pty with /dev/tty reattach: .zshrc gets the kei-substrate block (~/.claude/bin on PATH); non-interactive still skips. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>	2026-05-22 14:12:14 +08:00
KeiSei84	6d68a3f1ad	fix(onboarding): no crash on text input, Claude Code default, explanations ... Three issues a real curl|bash user hit: 1. CRASH: typing a word (e.g. "claude") at any menu → $((ans-1)) treats it as a variable in bash arithmetic → "unbound variable" under set -u → install dies. Added _onb_read_choice (numeric+range validation, re-prompt) for all 4 menus. 2. No Claude under subscription: the kit installs into Claude Code yet the wizard offered only OpenAI Codex under subscription. Added claude-code provider (bumped kei-registries submodule c559065→b904993) + made subscription the default transport and claude-code the default provider — Enter,Enter,Enter lands on Claude Code (no API key). 3. install died at line 178 for any no-key provider (claude-code/codex/local): onboarding_run ended on a `&&` that is false when there are no auth keys → returned 1 → set -e aborted. Added explicit `return 0`. Plus per-step explanations (en+ru) and auto-select when a step has one option. Verified piped-under-pty: Enter-defaults → Claude Code, junk input → re-prompt (0 crashes), full install completes. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>	2026-05-22 12:42:50 +08:00
KeiSei84	01d5aa510f	fix(install): run onboarding + profile wizard in curl|bash (gate on stdin, not stdout) ... web-install.sh tees stdout to a logfile (exec > >(tee) 2>&1), so -t 1 is false even in an interactive curl|bash. The /dev/tty fix reattached stdin but the wizard gates required BOTH -t 0 and -t 1, so onboarding (language select) and bootstrap's profile wizard were silently skipped on the primary install path. Prompts go to stderr and read from stdin — interactive stdin is the only real requirement (already the proven pattern in lib-plan.sh confirm screen). Gates now require interactive stdin only: bootstrap.sh profile wizard lib-onboarding.sh onboarding_should_run + preflight-continue prompt lib-preflight.sh CLI-install offer prompt lib-hooks.sh activate-hooks prompt Non-interactive (CI / </dev/null / no /dev/tty) still skips — verified. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>	2026-05-22 03:58:55 +08:00
denis	305787fae3	fix(install): make fresh install complete + ship tamagotchi (#1)	2026-05-20 18:50:09 +00:00
Denis Parfionovich	53ada048b2	fix(install): backup_file mv→cp -a, install --activate-hooks больше не падает ... gx10 fail при первой установке (фото юзера 2026-05-18): jq: error: Could not open file /home/keisei/.claude/settings.json [error] jq-merge produced invalid output; ... unchanged [error] install failed at line 126; rolled back Root cause: backup_file() (install/lib-backup.sh:56) делал `mv target backup`, затем activate_hooks() → _jq_merge_hooks() пыталась читать оригинал target'а через jq — но оригинал уже унесён mv'ом, открыть нечего. jq fail → rollback всей установки. Fix: cp -a вместо mv (как уже сделано в backup_path() для директорий). Атомарный безопасный бэкап; оригинал остаётся для jq, потом _jq_merge_hooks атомарно переписывает его mv tmp → target.	2026-05-18 14:33:22 +08:00
Denis Parfionovich	1d958b3587	fix(security): patent-leak + classical-safety audit fixes ... PATENT-LEAK (HIGH): - hooks/no-python-without-approval.sh: genesis-verify пример → my-project - docs/encyclopedia/rust-crates-H-N.md: убран термин «Genesis IP, ITAR» PATENT-LEAK (MEDIUM): - CHANGELOG: project-vortex → reduced scope - _blocks/registries (submodule bump): убраны имена приватных project-specialists из комментария agent-profiles.toml - docs/encyclopedia/skills-and-agents.md: ML/RL/CfC → ML/RL CLASSICAL-SAFETY (MEDIUM): - install/lib-preflight.sh: eval "$version_cmd" → bash -c "..." (защита от инъекции если providers.toml расширят) - _primitives/provision-{vultr,hetzner}.sh: /tmp/$$ → mktemp (устраняет symlink TOCTOU race) - web-install.sh: chmod 600 + umask 077 на ~/.keisei-install.log (Forgejo admin creds + токены в логе) - scripts/regen-counts.sh: eval "$1" → bash -c NOT FIXED (требуют действий юзера): - HIGH: @keisei scope не зарегистрирован на npmjs.org — typosquat возможен пока не задан NPM_TOKEN и не сделан publish - HIGH: install.keisei.app DNS не настроен — DNS-hijack возможен - LOW: parfionovich@keilab.io в SECURITY.md, plugin.json, ~40 Cargo файлах — intentional contact, оставлен Локальный git author установлен на parfionovich@keilab.io вместо parfionovichd@icloud.com (только для будущих коммитов в этом репо).	2026-05-18 12:05:25 +08:00
Parfii-bot	170c850ca0	fix(install): public install via keigit.com (Vultr) — no github needed ... Что меняется: - README.md: git clone instruction → https://keigit.com/keisei/KeiSeiKit-1.0.git (был приватный github, внешний clone падал 404) - .gitmodules: kei-registries submodule → keigit.com/keisei/kei-registries.git (был приватный github, --recurse-submodules падал) - web-install.sh: KEISEI_REPO default → https://keigit.com/keisei/... (был git@github.com:KeiSeiLab/...) - install.sh: NO_EXECUTE check ПЕРЕД check_prereqs, чтобы --no-execute работал без установленных зависимостей. - install/lib-args.sh: новый флаг --skip-prereqs (SKIP_PREREQS) — для CI и dry-run сценариев. - marketplace.json + plugin.json: новые манифесты (version=0.38.0 из git tag) для Claude Code /plugin marketplace add + install. На keigit.com (45.77.41.204, публичный) залиты публичные репо keisei/KeiSeiKit-1.0 + keisei/kei-registries. Anonymous git clone работает. GitHub mirror (KeiSeiLab/*) остаётся приватным как backup.	2026-05-18 11:47:13 +08:00
Parfii-bot	5b8e066888	refactor(install): production-ready финальный круг ... 1. lib-onboarding.sh раскидан на 3 куба (Constructor Pattern <200 LOC): - lib-onboarding-registry.sh (79 LOC) — парсеры providers/models.toml + onboarding_fallback_providers (14 провайдеров) + onboarding_auth_env_for_provider helper (был inline в collect_auth) - lib-onboarding-ui.sh (189 LOC) — pick_language/transport/provider/model + collect_auth (whiptail/bash select) - lib-onboarding-state.sh (57 LOC) — write_secrets + write_config + user-model-override.toml для kei-model-router - lib-onboarding.sh (95 LOC) — тонкий оркестратор: should_run + run Сам lib-onboarding.sh source'ит 3 подкуба автоматически. Глобалы (ONBOARDING_*, REGISTRY_*, ONBOARDED_FLAG, etc.) объявлены в оркестраторе, подкубы их используют через имена. 2. lib-menu.sh локализован: - whiptail title + radiolist prompt через ${STR_MENU_TITLE} + ${STR_MENU_SUBSTRATE} + ${STR_MENU_PROFILE_PROMPT}. - Plain heading тоже использует словарь. - 12 коротких имён профилей (minimal/core/dev/...) — оставлены EN как стабильные id (не переводятся). 3. _blocks/build-index.sh — детерминированная регенерация INDEX.md. Группировка по 14 категорийным префиксам + "Прочие" для остальных. Безопасно перезапускать. INDEX.md обновлён через этот скрипт (минимальный diff — добавлена ссылка на build-index.sh в шапке). Проверено: bash -n чисто, unit тесты onboarding_list_providers/ transports/models OK, non-TTY smoke ./install.sh --profile=minimal --no-execute проходит.	2026-05-17 23:57:23 +08:00
Parfii-bot	33f1376ee1	feat(i18n): расширил язык-набор с 2 до 16 ... Новые словари: uk Українська de Deutsch fr Français es Español pt Português it Italiano tr Türkçe ar العربية hi हिन्दी zh 简体中文 ja 日本語 ko 한국어 id Bahasa Indonesia vi Tiếng Việt Каждый файл — 17 STR_* ключей (тот же контракт что en.sh + ru.sh). lib-i18n.sh::i18n_available_languages — единый список (en + 15) для меню выбора в мастере. i18n_load_lang упрощён: всегда грузит английский как fallback, потом поверх — словарь языка (отсутствующий ключ остаётся английским). onboarding_pick_language теперь генерирует whiptail/bash select из i18n_available_languages динамически — добавление нового языка = один файл `install/i18n/<код>.sh` + одна строка в available_languages, дальше всё подхватится автоматически. Перевод формальный, без излишеств. Welcome баннер всегда EN (юзер ещё не выбрал на момент показа). Проверено: bash -n всех 16 словарей чисто, roundtrip всех языков работает (i18n_load_lang en/ru/uk/de/fr/es/pt/it/tr/ar/hi/zh/ja/ko/id/vi выдают локализованные STR_DONE_TITLE + STR_TR_DIRECT_API), non-TTY smoke install --no-execute проходит.	2026-05-17 16:51:44 +08:00
Parfii-bot	305140f20b	fix(install): close MEDIUM/LOW from RULE 0.26 audit ... - preflight failure handling: вместо `|| true` (молчаливое продолжение при упавшем preflight) — явный prompt «продолжить? [y/N]» с return 1 при отказе. Без TTY печатает warning и продолжает. Это закрывает HIGH bug-9: «.onboarded флаг выставляется при нерабочей конфигурации». - lib-preflight.sh::preflight_check_cli — общий helper (command -v + offer-install + version echo). Убирает 6-file boilerplate (хотя сами per-provider файлы пока не переписаны под него — это отдельный шаг). - onboarding_fallback_providers: расширен с 3 до 14 провайдеров, покрывает все 7 транспортов. Был дрейф vs providers.toml (14 vs 3), юзер без submodule видел только anthropic+openai+ollama. - STR_PICK_PROVIDER plural mismatch: whiptail и plain ветки теперь используют один fallback "Provider within" (раньше plain имел "Providers within", whiptail — "Provider within"). - STR_DONE_NEXT удалён из en.sh + ru.sh (мёртвый ключ). - Новые ключи: STR_MENU_* (для lib-menu.sh) + STR_PREFLIGHT_FAILED + STR_PREFLIGHT_CONTINUE. lib-menu.sh начал использовать STR_MENU_TITLE / STR_MENU_SUBSTRATE (частичная локализация, остальное меню — отдельной задачей). Тесты: bash -n чисто, i18n round-trip EN/RU работает, non-TTY smoke install --no-execute проходит.	2026-05-17 16:37:28 +08:00
Parfii-bot	a3ffaed374	fix(install,router): close 5 HIGH audit findings ... 1. HIGH-1: onboarding ↔ kei-model-router связка До: onboarding мастер писал ~/.claude/config/onboarding.toml, но router его не читал — выбор провайдера декоративный. После: lib-onboarding.sh::onboarding_write_config доп. пишет ~/.claude/config/user-model-override.toml; registry.rs::Registry получил load_user_override() возвращающий UserModelOverride. Приоритет: --pinned > user-override > agent-profiles default_model_ref. 2 новых теста (round-trip TOML, optional transport). 2. HIGH-2: eval "$install_cmd" → bash -c "$install_cmd" До: lib-preflight.sh::preflight_offer_install делал eval. После: bash -c с явным subshell + печать команды юзеру до запуска. 3. HIGH-3: codex.sh regex false-pass До: grep -qiE "logged.in|active" пропускал "not logged in" как pass. После: сначала negative-pattern (not logged|signed out|please log in), потом positive (\blogged in\b|status: active|auth: yes). 4. HIGH-4: path traversal в source preflight До: lib-preflight.sh::preflight_run делал source без валидации provider id — `../../../evil` сработал бы. После: whitelist regex ^[a-z0-9][a-z0-9_-]{0,63}$ + realpath проверка что resolved путь не вышел за PREFLIGHT_DIR. 5. HIGH-5: curl|sh без verification ollama-local.sh + google-vertex.sh теперь печатают предупреждение что Linux-установка тянет shell-скрипт с внешнего сервера без проверки хэша/подписи, и предлагают альтернативу. MEDIUM попутно: - anthropic-bedrock.sh: один вызов aws sts get-caller-identity вместо двух (экономит 1-3с), различает cred-error от network по тексту stderr, маскирует account ID в ARN перед печатью. - mlx-local.sh: pip install --user mlx-lm вместо global pip install (не требует sudo, не загрязняет system Python). Тесты: cargo test --lib 80/80, bash -n всех изменённых файлов чисто.	2026-05-17 16:28:33 +08:00
Parfii-bot	0a8c93561f	feat(install): preflight модуль — проверка CLI по выбранному провайдеру ... Добавлен шаг между выбором модели и сбором ключей: для провайдеров требующих внешний CLI/daemon — проверка наличия, инструкция по установке, опциональный авто-install (TTY only). install/lib-preflight.sh — диспетчер: preflight_run <provider-id> - ищет install/preflight/<id>.sh, source'ит, вызывает preflight_check_<sanitized_id> - функция возвращает 0/1, печатает инструкцию в stderr - non-TTY: только печать, без вопросов preflight_offer_install <cli> <install-cmd>: - TTY: спрашивает [y/N/skip], выполняет install-cmd - non-TTY: печатает и пропускает install/preflight/ — 6 файлов (только для провайдеров с CLI): anthropic-bedrock.sh — aws CLI + sts get-caller-identity google-vertex.sh — gcloud CLI + project config codex.sh — codex CLI (npm) + login status ollama-local.sh — ollama binary + 127.0.0.1:11434 daemon mlx-local.sh — mlx_lm.server (arm64 only) + 127.0.0.1:8080 lmstudio-local.sh — порт 127.0.0.1:1234 (desktop app) Direct-api провайдеры (anthropic, openai, xai, deepseek, google) + proxy (litellm, openrouter) + openai-azure — preflight-файла нет, диспетчер тихо пропускает, ключ собирается обычно. Тесты: bash -n чисто на всех 8 файлах, unit dispatcher показывает silent-pass для anthropic, warn+exit-1 для bedrock без aws на PATH.	2026-05-17 15:57:54 +08:00
Parfii-bot	ab260f429e	feat(install): i18n модуль + welcome banner ... Структура локализации: install/i18n/en.sh — английский словарь (дефолт, fallback) install/i18n/ru.sh — русский словарь install/lib-i18n.sh — лоадер + welcome banner Поток: 1. install.sh source'ит lib-i18n.sh и зовёт i18n_load_default → все строки на английском. 2. Если onboarding нужен — печатается welcome banner ASCII-рамка на английском (язык ещё не выбран). 3. onboarding_pick_language — единственный двуязычный шаг ("Choose language / Выберите язык"). По выбору вызывает i18n_load_lang ru|en — перегружает словарь. 4. Все последующие шаги (transport / provider / model / auth / completion) идут на выбранном языке. Fallback: если ru-словарь не имеет ключа — используется английское значение (load_default вызывается до загрузки ru.sh, переменные перезаписываются поверх). lib-onboarding.sh переведён со смешанных hardcoded строк на ${STR_*} placeholders. Тесты: bash -n всех 5 файлов чисто, i18n loader unit-тест показывает EN/RU перегрузку, non-TTY smoke install --no-execute проходит.	2026-05-17 15:35:10 +08:00
Parfii-bot	9c6df65ae2	feat(install): onboarding wizard — transport→provider→model→keys ... Новый интерактивный мастер при первой установке: 1. Язык интерфейса (RU/EN) 2. Транспорт (direct-api / aws-bedrock / azure-openai / google-vertex / local / proxy / subscription) 3. Провайдер внутри транспорта (14 вариантов суммарно) 4. Модель из выбранного провайдера (3 моделей Anthropic, и т.д.) 5. Ключи/креды (silent read, пишет в ~/.claude/secrets/.env chmod 600) Skip-логика: - флаг ~/.claude/.onboarded - env KEISEI_SKIP_ONBOARD=1 - не-TTY запуск Запись: ~/.claude/config/onboarding.toml — выбор lang/transport/provider/model ~/.claude/secrets/.env — ключи провайдера ~/.claude/.onboarded — флаг прохождения Парсер toml — pure awk (без зависимостей). Реестры из submodule _blocks/registries. Submodule bumped до afe0c6f с новым полем transport. Fallback если submodule не подтянут: anthropic + sonnet.	2026-05-17 02:24:50 +08:00
Parfii-bot	8a885a7d76	fix(release+slices): v0.14.4 publish auth fallback + 4 fix-implementer slices ... After v0.14.3 npm-publish failed again with 401 Unauthorized despite path-scoped _authToken. Direct curl probe to keigit confirmed BOTH Bearer and Basic auth schemes work — so the issue is npm 10 not sending the auth header in CI. Likely cause: deprecated `always-auth=true` interfered with token resolution. == Publish auth fix == - Drop `always-auth=true` (deprecated in npm 10+; warns in logs) - Keep path-scoped `_authToken` (npm 10 canonical) - Add legacy Basic-auth fallback rows (username/_password/email) — Forgejo accepts both schemes per direct probe; if one resolution path fails, npm tries the other - chmod 600 on $HOME/.npmrc and project .npmrc (defense-in-depth) - Bump 0.14.3 → 0.14.4 == Slice A — TS server hardening (Sonnet code-implementer-typescript) == File: _ts_packages/packages/mcp-server/src/server.ts (+3/-1) File: _ts_packages/packages/mcp-server/src/index.ts (+14/-4) - safeEqual constant-time path on length mismatch (timing oracle close) - HTTP server defaults to 127.0.0.1 bind; --bind <addr> opt-in for 0.0.0.0 - Body cap 1 MiB with 413 response (DoS prevention) - VERIFIED: tsc -b --noEmit exit 0 == Slice B — Outcome-only profile hardening (Sonnet code-implementer) == Files: install.sh, install/lib-args.sh, install/lib-profile-outcome-only.sh - Confirm-screen gate before destructive install (skips on --dry-run / --yes) - _outcome_install_ledger return value tracked → summary reflects reality (was: false-success "ledger: ..." when init failed) - --dry-run silent-ignored on non-outcome profiles → now warns - VERIFIED: end-to-end smoke against fake $HOME with `<<< "y"` — all 5 files installed, schema v9 + 2 triggers, summary correct == Slice D — jq-merge dedup tuple (Sonnet code-implementer) == File: install/lib-hooks.sh - Replaced `unique_by(.command)` with reduce-into-object keyed on norm-ed command (tilde-vs-absolute path collision fix) - Snippet-wins precedence on collision - 3 manual scenario traces pass: tilde+tilde, absolute+tilde, idempotency == Slice E — Doc honesty pass (Sonnet code-implementer, selective-merged) == Files: README.md, docs/{INSTALL,ARCHITECTURE,PROFILE-OUTCOME-ONLY}.md Note: Slice E worktree was based on an older main commit; merged selectively to preserve current-main values (565 DNAs, not worktree's 518) - README:62 plugin marketplace URL: KeiSei84/KeiSeiKit → KeiSei84/KeiSeiKit-1.0 (consistent with line 66 git clone URL + Cargo.toml repository field) - README:9-15: per-claim [REAL: <command>] markers on all 8 numerics - README:124-132 + PROFILE-OUTCOME-ONLY.md:43-55 + ARCHITECTURE.md:288-302: rephrase 100-row router claim — now describes Wilson lower-bound (δ=0.10, q*=0.70) continuous metric with file:line pointer to select.rs - INSTALL.md: ESTIMATE-HTC marker covering all install-time / disk-size numerics in profile table (RULE 0.18 compliance) - PROFILE-OUTCOME-ONLY.md privacy section: discloses agent-toolstats.jsonl sidecar (was undocumented per W3 finding) - PROFILE-OUTCOME-ONLY.md uninstall: added 6th rm -f for .bak-* cleanup (closes orphan-accumulation per W3+W4 audits) [FROM-JOURNAL: tasks.jsonl this session — 12 audit agents waves 5+6 + 4 parallel fix-implementer worktrees ran ~25 min wall-time] Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>	2026-05-04 00:16:48 +08:00
Parfii-bot	784dfbae6f	fix(audit-batch-2): regressions from prev batch + 2nd-wave audit findings ... 12-agent audit (waves 3+4 Opus+Sonnet) on commit 3759fb0 found that 2 of my prior fixes had regressions, plus the prev batch missed 8 stale-text sites and 2 latent bugs. This batch closes them all. == Regressions in audit-batch (3759fb0) — now fixed == 1. PRAGMA user_version=9 placement — could silently downgrade schema on cross-version install (existing v10 DB → re-run reset to 9 → migrations replay → ALTER TABLE duplicate-column errors) - install/sql/outcome-only-schema.sql: PRAGMA moved OUTSIDE the transaction (after COMMIT) for portability across SQLite versions - install/lib-profile-outcome-only.sh::_outcome_install_ledger: added downgrade guard — reads existing user_version BEFORE running ANY init path; if >9, skips entirely (preserves newer schema) - VERIFIED: simulated v10 DB → re-run prints "skipping init to preserve newer schema"; user_version stays at 10 (was downgraded to 9 in the prior batch) [REAL: ran in this session] 2. backup_file mv→cp workaround left orphan backups + bypassed rollback contract (BACKUP_PAIRS not registered) - install/lib-profile-outcome-only.sh: now manually appends to BACKUP_PAIRS so rollback trap restores on later failure; removes the .bak on success path - Comment updated to explain the workaround vs backup_file mv 3. CLAUDE.md skip-guard "STATUS-TRUTH MARKER" was too broad — false-positive on existing kit users (RULE 0.16 doc text matches) - lib-profile-outcome-only.sh: changed grep to literal HTML comment marker `<!-- outcome-only profile (KeiSeiKit) -->` (specific marker written by the installer itself) == Tier 1 missed in prev batch — now fixed == 4. _ts_packages/package-lock.json referenced packages/cortex-ui which does NOT exist on disk → npm ci would fail with ELSPROBLEMS in CI - Regenerated via fresh `rm package-lock.json && npm install` - npm ci now exits 0 cleanly [REAL: ran in this session] - Lockfile shrunk 2403→0 lines on the cortex-ui section (full regen) 5. v3 triggers (branch length cap ≤256) were MISSING from outcome-only-schema.sql — sqlite3 fallback path skipped a schema feature that the Rust kei-ledger flow enforces, creating cross-flow drift - Added trg_agents_branch_len_ins + trg_agents_branch_len_upd mirroring migrations_list.rs:30-44 - Header comment in outcome-only-schema.sql rewritten to match current behavior (was stale) - VERIFIED: end-to-end install creates 2 triggers [REAL: sqlite3 .schema | grep trg_agents_branch_len returns 2] 6. README.md:232 said "102 crates" while README.md:9 said "105 crates" — internal contradiction in same doc - README:232 → "105 workspace crates" 7. ARCHITECTURE.md:165 "53 Rust crates + 13 shell primitives" stale - Updated to "105 Rust workspace crates (47 declared in MANIFEST.toml `full` profile) + 14 shell primitives" 8. ARCHITECTURE.md:157 "45 /commands" stale - Updated to 68 9. plugin.json + marketplace.json description strings still had pre-fix counts (23 primitives / 39 skills / 9 hooks / 12 agents) - Both rewritten to match README:9 SSoT (38 agents / 68 skills / 38 hooks / 105 workspace crates / 47 installable + 14 shell) 10. PROFILE-OUTCOME-ONLY.md:28-29 "What does NOT get installed" still cited 102/67/37/82 - Updated to 105/68/38/85 11. encyclopedia/substrate-overview.md §6/§11/§12 still said "80-char DNA"; §13 said "495 DNA indices"; §6 said "11 install profiles (.../Cursor/Continue/etc)" - All 4 sites fixed to current language (≥33-char variable, 565 DNAs, 12 install profiles) 12. docs/DNA-INDEX.md:1352 said wire format is "(80 chars)" - Updated to "(≥33 chars; role + caps slugs are variable — see docs/DNA-FORMAT.md)" == Tier 2 honesty fixes == 13. Wagner et al. 2004 citation in SLEEP-LAYER.md:26 lacked [VERIFIED] marker (W3 doc consistency caught it) - Added [VERIFIED: doi:10.1038/nature02223] + clarification that the original study did not isolate a specific sleep stage; SWS attribution comes from secondary literature (Diekelmann/Born) 14. PHILOSOPHY.md:125 attributed "overnight consolidation of un-finished intentions" to Wagner 2004 — that paper is about insight gain on the Number Reduction Task, not Zeigarnik-effect cued memory - Rewritten to accurately describe Wagner 2004's actual finding + [VERIFIED: doi:10.1038/nature02223] Verification: - `npm ci` in _ts_packages/ exits 0 [REAL: ran in this session] - `cargo check --workspace` exits 0 in _primitives/_rust [REAL: ran in this session] - Outcome-only end-to-end fresh install produces user_version=9 + 2 triggers (correct schema shape) - Outcome-only re-run against v10 DB preserves user_version=10 (downgrade guard works) - CLAUDE.md skip-guard now triggers ONLY on literal marker, not on RULE 0.16 phrase NOT addressed in this batch (deferred to a future round): - github KeiSei84/{KeiSeiKit, KeiSeiKit-1.0} 404 (user-side action: publish repo or update refs) - keigit user `keisei` does not exist (user-side: create org or rename scope) - KEIGIT_TOKEN secret not configured (user-side action) - Forgejo registration disabled (admin-side) - safeEqual timing leak in TS server (LOW per W3 reassessment) - HTTP bind 0.0.0.0 default (MEDIUM) - Unbounded request body (MEDIUM) - Outcome-only confirm-screen bypass (RULE 0.1 spirit) - Ledger fallthrough false summary - Node 20 deprecation (deadline 2026-06-02, 30 days) - Hook count triple-discrepancy (38 README / 53 DNA-INDEX / 35 maturity-row) - 100-row router claim still in README:117 + PROFILE-OUTCOME-ONLY.md - INSTALL.md numerics without [REAL:] markers - Stale .bak files accumulation policy (cosmetic) - README per-claim [REAL: ] markers for 6 of 7 numerics Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>	2026-05-03 20:30:51 +08:00
Parfii-bot	3759fb0f64	fix(audit-batch): CI green + RULE 0.4/0.16/0.18 honesty pass ... 12-agent audit (2 waves Opus+Sonnet, 6 slices each) flagged 3 HIGH-tier issues that BOTH waves agreed on, plus 5 doc-honesty findings. This batch fixes the lot. == CI green (was failing on main 94a7d68) == - _primitives/_rust/Cargo.toml — workspace tokio gains `io-std` feature (needed by kei-mcp/src/main.rs which calls tokio::io::{stdin,stdout}) - _primitives/_rust/kei-mcp/Cargo.toml — dev-deps tokio gains `test-util` feature (needed by tests/tools_call_timeout.rs for tokio::time::advance and Builder::start_paused). Both verified locally: `cargo check -p kei-mcp` ✓ `cargo test --no-run -p kei-mcp` ✓ (3 test binaries link) [REAL: ran 2026-05-03 in this session] == HIGH-tier audit fixes (consensus across waves) == 1. SQLi escape in agent-outcome-backfill.sh:110 - 4 of 12 agents flagged: TOOL_USE_ID was JSON-derived and interpolated raw into SQL. Allowlist on $SHIPPED protected today but a future case-statement removal opened the surface. - Fix: tiny `_sql_esc` helper that doubles single-quotes (SQL-99 standard escape), applied to SHIPPED + TOOL_USE_ID. STUBS already integer-validated. 2. PRAGMA user_version=9 in install/sql/outcome-only-schema.sql - W1 outcome-only critic flagged: the SQL fallback installed a v9-equivalent flat schema but left user_version=0. A LATER `kei-ledger init` (e.g. when user upgrades to full kit) would re-run migrations v1-v9 and ALTER TABLE ADD COLUMN duplicate-error mid-migration → broken DB. - Fix: set PRAGMA user_version=9 before COMMIT so the binary's migration runner sees current ≥ target and short-circuits. 3. backup_file mv→cp + uninstall macOS-portable awk - W1+W2 outcome-only flagged: lib-backup.sh uses `mv` which DELETES the target before _jq_merge_hooks runs; `|| true` swallowed the subsequent jq read-error → silent settings.json loss. - Fix in lib-profile-outcome-only.sh: `cp -p` aside, drop `|| true`, return 1 on merge failure (trap restores). - PROFILE-OUTCOME-ONLY.md uninstall used GNU sed `,+1` extension which BSD sed (macOS) does not support — uninstall silently no-op'd on macOS, leaving orphan CLAUDE.md text. - Fix: replace with portable `awk` recipe; also added `rm -f` for the agent-toolstats.jsonl sidecar (privacy completeness). == Doc honesty pass (RULE 0.18 numerics + RULE 0.4 citations) == 4. README.md count drift — verified all values against filesystem: * 102→105 Rust crates (Cargo.toml workspace `members` count) * 67→68 skills (`ls skills/ | wc -l`) * 35→38 hooks (`grep -c '"command":' settings-snippet.json`) * 37→38 agent manifests (`ls _manifests/*.toml | wc -l`) * 82→85 substrate blocks (`find _blocks/ -name '*.md' | wc -l`) * 18 capability atoms VERIFIED via `find _capabilities/ -name '*.md'` (encyclopedia §3 row count of 17 is in a separate file and is a known internal display issue, not changed in this commit) * 495→565 active DNAs (per docs/DNA-INDEX.md header 2026-05-03) Each value now carries a `[REAL: <command>]` style trailer per RULE 0.18. 5. README.md DNA "80-char identity" → "≥33-char variable-length" - W1+W2 reviewer-pass flagged FALSE: docs/DNA-FORMAT.md SSoT says minimum 33 chars; 80 was nowhere in code or spec - Fix in README.md:36 + docs/PHILOSOPHY.md:39 + docs/DNA-INDEX.md:1352 6. README.md "Eleven install profiles (... Cursor / Continue / Zed / Aider / Docker / Nix)" — Cursor/Continue/Zed/Aider/Docker/Nix were never install profiles, they were bridge targets - Fix: list 12 actual profiles from _primitives/MANIFEST.toml, mention bridges as separate concept 7. .claude-plugin/plugin.json license MIT → Apache-2.0 - W2-Sonnet reviewer flagged: LICENSE file is Apache-2.0 (since 2026-04-30 per NOTICE), but plugin.json still declared MIT — plugin marketplace would show wrong license 8. docs/ARCHITECTURE.md:318 placeholder URL `https://example.invalid/...` - W2-Sonnet reviewer flagged: dead link in published docs - Fix: remove the bad href, describe ssl-rule-file as per-user install outside the public repo 9. skills/sleep-on-it/SKILL.md Wagner et al. 2004 citation - W1+W2 reviewer flagged RULE 0.4 violation: citation without verification marker - Fix: added [VERIFIED: doi:10.1038/nature02223] + clarification that the original paper showed slow-wave-sleep (not strictly REM) insight gain — our metaphor is a loose mapping 10. encyclopedia/substrate-overview.md §5 fabricated TS deps - W1-Opus doc-consistency flagged RULE 0.4.b violation: 5 of 6 package rows had INVENTED dependency strings (`recall-ai-sdk ^1.0.0`, `nodemailer-mock ^2.0.0`, `telegram-typings ^4.10.0`, etc — none exist in the actual package.json files) - Fix: regenerated table from real `package.json` reads via `node -p "require(...).dependencies"` for each of the 6 packages - Fix: also corrected version drift (5 packages all 0.14.0 now) Verification: - Outcome-only end-to-end install against fake $HOME succeeds: hooks installed, ledger schema at user_version=9, settings.json created cleanly, all 5 documented files present [REAL: ran 2026-05-03 in this session] - `cargo check -p kei-mcp` + `cargo test --no-run -p kei-mcp` clean Audit findings NOT yet addressed (deferred to next batch): - README:65 git clone github URL — repo is private; reviewer flagged external strangers cannot clone; will resolve via Quick Start rewrite - npm.pkg.github.com / @keisei84 leftover sweep — both waves verified ZERO refs, no fix needed - safeEqual timing leak in TS server (W2 sec MEDIUM) - HTTP server bind 0.0.0.0 (W2 sec MEDIUM) - Unbounded request body (W2 ci MEDIUM) - --dry-run silent ignored on non-outcome profiles (W1+W2 MEDIUM) - Doc-link missing for MEMORY/DNA/LEDGER format specs from README Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>	2026-05-03 19:09:59 +08:00
Parfii-bot	542a0a816e	Revert "feat(mcp-server): production-ready publish path via GitHub Packages" ... This reverts commit a6f1c72472.	2026-05-03 18:04:00 +08:00
Parfii-bot	a6f1c72472	feat(mcp-server): production-ready publish path via GitHub Packages ... Renamed @keisei/mcp-server → @keisei84/mcp-server (scope must match github org KeiSei84 for GitHub Packages publish). Replaced private:true with publishConfig pinned to npm.pkg.github.com so an accidental `npm publish` cannot leak to npm.org. CI npm-publish job rewired to GitHub Packages auth (GITHUB_TOKEN with packages:write permission). Why GitHub Packages, not npm.org: - Authentication piggybacks on existing github org / PAT — no separate account or NPM_TOKEN required for the core kit - Scope @keisei84 maps 1:1 to org KeiSei84 (npm rule for github) - Doesn't require public DNS for our private Forgejo (Tailscale-only 100.91.246.53 cannot be the publish target — IP-leak in public ref) - Published artefacts live under github.com/orgs/KeiSei84/packages, same access surface as the source repo Why not @keisei (un-scoped or different scope): - npm scope @keisei IS reachable on npm.org but we don't own it there (would require email-verified npm account claim + ongoing maintenance) - @keisei84 requires zero new accounts; works the moment KeiSei84 org has packages enabled (github default) Files changed (11): - _ts_packages/packages/mcp-server/package.json — rename + publishConfig + repository field (required by GitHub Packages); removed private:true - _ts_packages/package-lock.json — regenerated via `npm install` (workspace recognises @keisei84/mcp-server symlink) - README.md (2 hunks) — maturity row says "alpha" not "alpha (unpublished)"; install section documents `~/.npmrc` setup for `@keisei84:registry=https://npm.pkg.github.com/` - PLUGIN.md (3 hunks) — same `~/.npmrc` setup; .mcp.json references @keisei84/mcp-server; "not yet on npm" replaced with "lives on GitHub Packages, not npm.org" - .claude-plugin/mcp-template.json — args use @keisei84 scope - _ts_packages/README.md (4 hunks) — package layout + npx examples - docs/INSTALL.md, install/lib-rust.sh — comment refs - docs/encyclopedia/substrate-overview.md (2 hunks) — package table + publishing notes (was "published to keigit.com npm" — wrong; keigit is a separate community-publish path for user-contributed packages, not the destination for core @keisei84 packages) - .github/workflows/release.yml — npm-publish job rebuilt: · permissions: packages:write · Two-scope .npmrc temp-write: @keisei84 → npm.pkg.github.com (always), @keisei → npm.org (only if NPM_TOKEN secret set, else skipped per pkg) · NODE_AUTH_TOKEN sourced from GITHUB_TOKEN · .npmrc cleaned up via `if: always()` step - .gitignore — _ts_packages/.npmrc + .npmrc excluded (RULE 0.8: auth tokens never in git; CI temp-creates per-job) Verification: - `npm install` clean against new scope: node_modules/@keisei84/mcp-server symlinks to packages/mcp-server, other adapters untouched in node_modules/@keisei/* [REAL: install ran 2026-05-03 in this session] - `npm run build --workspace=@keisei84/mcp-server` produces dist/index.js [REAL: tsc -b exit 0] - Server starts cleanly: `node dist/index.js` runs >1s, emits expected "[adapters] not installed" warnings for un-built sibling adapters, doesn't throw - 17 references to old @keisei/mcp-server scope migrated; 0 left [REAL: grep -rn "@keisei/mcp-server" returns 0 lines] Bad-commit-hygiene note: - Two earlier local commits (cb8dc2a + revert 474fe1c) attempted a keigit.com-pinned variant; soft-reset past them so this commit lands on top of public 2bb2f10. Bad commits never reached remote. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>	2026-05-03 17:50:59 +08:00
Parfii-bot	6b66914f97	feat(install): outcome-only minimum profile ... Reviewer suggested an evaluation footprint that lands "the smallest substrate any caller-LLM can use", with 5 files and ~200 LOC ceiling in $HOME. This commit ships that profile. Files installed in $HOME by `./install.sh --profile=outcome-only`: 1. ~/.claude/hooks/agent-outcome-backfill.sh (PostToolUse:Agent) 2. ~/.claude/hooks/error-spike-detector.sh (PostToolUse:Bash, rolling 20-call window) 3. ~/.claude/agents/ledger.sqlite (full v9 schema via kei-ledger init, or sqlite3-fallback DDL) 4. ~/.claude/CLAUDE.md (1-line STATUS-TRUTH MARKER instruction appended) 5. ~/.claude/settings.json (jq-merge of 2 hook entries) Plus optional 6th: kei-model-router binary built from _primitives/_rust if cargo on PATH; deferred otherwise (warning printed, install continues). Files added to repo: - install/lib-profile-outcome-only.sh (145 LOC) — profile orchestrator with --dry-run support; sources lib-log/lib-backup/lib-hooks helpers; exits before heavy install phases when --profile=outcome-only - install/sql/outcome-only-schema.sql (69 LOC) — flattened v9-equivalent SQLite DDL (agents + skill_invocations + indexes), used by sqlite3 fallback when kei-ledger CLI is unavailable - docs/PROFILE-OUTCOME-ONLY.md (97 LOC) — reviewer-facing doc: 5-file install table, what is NOT installed, kei-model-router activation explanation, privacy posture (no telemetry), 4-line uninstall paste Files modified: - install.sh (+12 LOC) — sources outcome-only lib, adds short-circuit before menu when --profile=outcome-only, accepts in profile validator - install/lib-args.sh (+9 LOC) — registers --dry-run flag (sets OUTCOME_DRY_RUN=1), adds outcome-only + --dry-run lines to --help - README.md (+7 LOC) — adds Outcome-only Quick-start section pointing to PROFILE-OUTCOME-ONLY.md Verification: - bash -n clean on all 3 modified shell files - Dry-run produces exactly 5 numbered $HOME paths (verified end-to-end: HOME=/tmp/kei-fake-home bash install.sh --profile=outcome-only --dry-run) - Real install against fake $HOME succeeds (5 files present, ledger init via kei-ledger binary, router build correctly skipped on toolchain absence with warning) - Ledger schema includes agents + skill_invocations tables + 3 indexes + 2 triggers via real migration path (not the SQL fallback) [FROM-JOURNAL: end-to-end install dry-run + real-run measured at ~/.claude/memory/time-metrics/sessions.jsonl this session, both <2s wall] Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>	2026-05-03 16:59:53 +08:00
Parfii-bot	8473b4ae80	fix(hooks+install): disk-reclaim Guard 3 + secrets per-line + sha256 fail-closed ... Three independent shell hardening fixes from Opus Shell + Sonnet Shell audits. 1. disk-reclaim.sh Guard 3 — protect branches without upstream tracking (HIGH) File: hooks/disk-reclaim.sh:88-101 Bug: when a worktree branch has no upstream tracking ref, `git log @{u}..` exited non-zero and `unpushed=""` (empty). The check `[ -n "$unpushed" ] && [ "$unpushed" != "0" ]` evaluated FALSE, so the worktree fell through Guard 3 and was eligible for mtime-based pruning. Local-only branches with committed work were silently deleted. Fix: explicit two-branch logic. Run `git rev-parse --abbrev-ref @{u}` first; only run the unpushed-count check if upstream exists. If no upstream, log SKIP[no-upstream] and `continue` conservatively. New `worktrees_skip_unpushed` counter increments in both unpushed paths. 2. secrets-pre-guard.sh — placeholder allowlist scope-narrow (MEDIUM) File: hooks/secrets-pre-guard.sh:43-103 Bug: word "placeholder" anywhere in content disabled all secret-pattern scanning for that whole Write. Allowlist was too broad — a doc with the word "placeholder" in its prose could mask a real sk-ant- token elsewhere. Fix: replaced global early-exit with per-line awk scan. New scan_pattern() helper walks content line-by-line; each line matching a secret regex is allowed ONLY if the SAME line also matches ALLOWLIST_RE. Doc prose can no longer mask cross-line secrets. Added `dummy[_-]?(key|token|secret)` to allowlist for legitimate test fixtures. 3. lib-rust-prebuild.sh — sha256 fail-closed (HIGH supply-chain) File: install/lib-rust-prebuild.sh:75-88 Bug: when ${url}.sha256 404'd, installer printed WARNING and proceeded with unverified tarball. A compromised github release uploader could ship a malicious tarball, omit .sha256, and the installer would extract it into ~/.cargo/bin/. Fix: missing .sha256 → ERROR + abort. Path A install fails → falls back to Path B (cargo build from source). Override via KEI_ALLOW_UNVERIFIED_TARBALL=1 (visible per-call, intentional friction). Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>	2026-05-03 15:37:57 +08:00
Parfii-bot	72d257e602	feat(install): Rust binary acquisition for fresh-clone installs (Path A + Path B) ... Pre-fix: install.sh on a fresh clone has no binaries — target/ is gitignored, copy_prebuilt_substrate_binaries() skips silently with "no pre-built found", end users get zero kei-fork / kei-ledger / kei-cortex / etc. New module: install/lib-rust-prebuild.sh (~120 LOC, Constructor Pattern). ensure_rust_binaries() — main entry, idempotent 1. has_prebuilt_substrate_binaries() — quorum check (5+ kit binaries already in target/release/ → no-op). 2. Else Path A: download keisei-${TARGET}.tar.gz from https://github.com/KeiSei84/KeiSeiKit-1.0/releases/latest/download/ Detects target via uname (x86_64/aarch64 × darwin/linux), verifies sha256, extracts into target/release/. 3. Path A fail (404, network, sha mismatch) → Path B fallback: cargo build --release --workspace (slow first time, requires Rust). 4. Path B fail (no cargo) → say + return non-zero. Bypass: KEI_SKIP_RUST=1 — skip both paths (markdown-only install). Wired in install/lib-rust.sh — ensure_rust_binaries() called BEFORE copy_prebuilt_substrate_binaries() in regenerate_rust_workspace. Path A activates ONLY after a v* tag is pushed and release.yml uploads tarballs to github releases. Until then, Path A 404s and Path B kicks in. This commit lays the wire — release tag is a separate user-driven action. Verify: - bash -n install.sh: OK - bash -n install/lib-rust-prebuild.sh: OK - detect_rust_target on this host: aarch64-apple-darwin - has_prebuilt_substrate_binaries: correctly returns false on partial dev target (only kei-memory + kei-db-contract built locally today) Out of scope (not done in this commit): - Tag v0.X release to populate github tarballs (deploy step, deferred) - Update keiseikit.dev/install.sh redirect target (downstream wiring) Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>	2026-05-01 19:07:55 +08:00
Parfii-bot	c35e1ae9ca	chore(kit): wire kei-db-contract into installer + drop final #[path] hack ... A1 — install.sh wiring for kei-db-contract: - install/lib-substrate.sh substrate_core_binaries(): add kei-db-contract to always-copy list. End users now get the binary in ~/.cargo/bin/ immediately after install (no manual cargo install --path needed). A2 — Wave B follow-up: drop #[path] hack from guard_test_corpus.rs - tests/guard_test_corpus.rs: #[path = "../src/injection_*"] mod ... → use kei_memory::injection_guard::scan - Now uses Wave B's [lib] target like tests/integration.rs already does. - 4 tests still pass. Verified via cargo test: 18 lib + 4 corpus + 3 ingest_guard + 1 injection_unit + 4 dedup + 8 integration + 4 ingest_real_trace = 42 tests, all green. === STATUS-TRUTH MARKER === shipped: functional stubs: 0 cargo-check: PASS cargo-test: PASS (42 tests, 0 failures) behaviour-verified: yes follow-up-required: - tests/ingest_guard_tests.rs already migrated (Wave A's earlier work) - kei-db-contract still requires kit user to have run install.sh; existing installs need re-run. Kit ledger-validate should add post-install probe. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>	2026-05-01 17:55:52 +08:00
Parfii-bot	0be354a920	KeiSeiKit-public — clean state ... Single-commit clean baseline after security scrub of niche-tells, project codenames, internal jargon, and contributor-email leaks. Contents: - 100 Rust crates (_primitives/_rust/) - 37 agent manifests (_manifests/) + generated specs (_generated/) - 67 user-invocable skills (skills/) - 33 hooks (hooks/) - Composition blocks (_blocks/) - Documentation (docs/, README.md) - TS adapter packages (_ts_packages/) - Assembler (_assembler/) - Roles (_roles/) - Templates (_templates/) - Forgejo CI (.forgejo/) Author: Denis Parfionovich <info@greendragon.info> License: see LICENSE.	2026-05-01 12:09:03 +08:00