12 commits

Author	SHA1	Message	Date
KeiSei84	6d68a3f1ad	fix(onboarding): no crash on text input, Claude Code default, explanations ... Three issues a real curl|bash user hit: 1. CRASH: typing a word (e.g. "claude") at any menu → $((ans-1)) treats it as a variable in bash arithmetic → "unbound variable" under set -u → install dies. Added _onb_read_choice (numeric+range validation, re-prompt) for all 4 menus. 2. No Claude under subscription: the kit installs into Claude Code yet the wizard offered only OpenAI Codex under subscription. Added claude-code provider (bumped kei-registries submodule c559065→b904993) + made subscription the default transport and claude-code the default provider — Enter,Enter,Enter lands on Claude Code (no API key). 3. install died at line 178 for any no-key provider (claude-code/codex/local): onboarding_run ended on a `&&` that is false when there are no auth keys → returned 1 → set -e aborted. Added explicit `return 0`. Plus per-step explanations (en+ru) and auto-select when a step has one option. Verified piped-under-pty: Enter-defaults → Claude Code, junk input → re-prompt (0 crashes), full install completes. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>	2026-05-22 12:42:50 +08:00
Denis Parfionovich	1d958b3587	fix(security): patent-leak + classical-safety audit fixes ... PATENT-LEAK (HIGH): - hooks/no-python-without-approval.sh: genesis-verify пример → my-project - docs/encyclopedia/rust-crates-H-N.md: убран термин «Genesis IP, ITAR» PATENT-LEAK (MEDIUM): - CHANGELOG: project-vortex → reduced scope - _blocks/registries (submodule bump): убраны имена приватных project-specialists из комментария agent-profiles.toml - docs/encyclopedia/skills-and-agents.md: ML/RL/CfC → ML/RL CLASSICAL-SAFETY (MEDIUM): - install/lib-preflight.sh: eval "$version_cmd" → bash -c "..." (защита от инъекции если providers.toml расширят) - _primitives/provision-{vultr,hetzner}.sh: /tmp/$$ → mktemp (устраняет symlink TOCTOU race) - web-install.sh: chmod 600 + umask 077 на ~/.keisei-install.log (Forgejo admin creds + токены в логе) - scripts/regen-counts.sh: eval "$1" → bash -c NOT FIXED (требуют действий юзера): - HIGH: @keisei scope не зарегистрирован на npmjs.org — typosquat возможен пока не задан NPM_TOKEN и не сделан publish - HIGH: install.keisei.app DNS не настроен — DNS-hijack возможен - LOW: parfionovich@keilab.io в SECURITY.md, plugin.json, ~40 Cargo файлах — intentional contact, оставлен Локальный git author установлен на parfionovich@keilab.io вместо parfionovichd@icloud.com (только для будущих коммитов в этом репо).	2026-05-18 12:05:25 +08:00
Parfii-bot	5b8e066888	refactor(install): production-ready финальный круг ... 1. lib-onboarding.sh раскидан на 3 куба (Constructor Pattern <200 LOC): - lib-onboarding-registry.sh (79 LOC) — парсеры providers/models.toml + onboarding_fallback_providers (14 провайдеров) + onboarding_auth_env_for_provider helper (был inline в collect_auth) - lib-onboarding-ui.sh (189 LOC) — pick_language/transport/provider/model + collect_auth (whiptail/bash select) - lib-onboarding-state.sh (57 LOC) — write_secrets + write_config + user-model-override.toml для kei-model-router - lib-onboarding.sh (95 LOC) — тонкий оркестратор: should_run + run Сам lib-onboarding.sh source'ит 3 подкуба автоматически. Глобалы (ONBOARDING_*, REGISTRY_*, ONBOARDED_FLAG, etc.) объявлены в оркестраторе, подкубы их используют через имена. 2. lib-menu.sh локализован: - whiptail title + radiolist prompt через ${STR_MENU_TITLE} + ${STR_MENU_SUBSTRATE} + ${STR_MENU_PROFILE_PROMPT}. - Plain heading тоже использует словарь. - 12 коротких имён профилей (minimal/core/dev/...) — оставлены EN как стабильные id (не переводятся). 3. _blocks/build-index.sh — детерминированная регенерация INDEX.md. Группировка по 14 категорийным префиксам + "Прочие" для остальных. Безопасно перезапускать. INDEX.md обновлён через этот скрипт (минимальный diff — добавлена ссылка на build-index.sh в шапке). Проверено: bash -n чисто, unit тесты onboarding_list_providers/ transports/models OK, non-TTY smoke ./install.sh --profile=minimal --no-execute проходит.	2026-05-17 23:57:23 +08:00
Parfii-bot	5327befef6	docs(_blocks): INDEX.md — реестр 84 блоков для assembler ... Авто-сгенерирован из _blocks/*.md по категориям префикса: API / AUTH / CI / DB / DEPLOY / DOCS / DOMAIN / MODE / OBS / PATH / RULE / SCRAPER / SECURITY / STACK / TEST + прочие. Каждая запись: `name` — первая H1-строка файла. Использование в _manifests/<agent>.toml: blocks = ["baseline", "rule-pre-dev-gate", "api-anthropic", ...] Assembler читает блоки из _blocks/, склеивает в финальный _generated/<agent>.md. Новый блок = просто .md в _blocks/. Регенерация INDEX.md — TODO build-index.sh скрипт (сейчас сгенерирован вручную bash циклом).	2026-05-17 20:39:06 +08:00
Parfii-bot	9c6df65ae2	feat(install): onboarding wizard — transport→provider→model→keys ... Новый интерактивный мастер при первой установке: 1. Язык интерфейса (RU/EN) 2. Транспорт (direct-api / aws-bedrock / azure-openai / google-vertex / local / proxy / subscription) 3. Провайдер внутри транспорта (14 вариантов суммарно) 4. Модель из выбранного провайдера (3 моделей Anthropic, и т.д.) 5. Ключи/креды (silent read, пишет в ~/.claude/secrets/.env chmod 600) Skip-логика: - флаг ~/.claude/.onboarded - env KEISEI_SKIP_ONBOARD=1 - не-TTY запуск Запись: ~/.claude/config/onboarding.toml — выбор lang/transport/provider/model ~/.claude/secrets/.env — ключи провайдера ~/.claude/.onboarded — флаг прохождения Парсер toml — pure awk (без зависимостей). Реестры из submodule _blocks/registries. Submodule bumped до afe0c6f с новым полем transport. Fallback если submodule не подтянут: anthropic + sonnet.	2026-05-17 02:24:50 +08:00
Parfii-bot	40a5c2e55f	fix(audit-r2): HIGH+MEDIUM closures from second round audit ... HIGH-1: submodule URL ssh → https + shallow (DNS spoofing surface, both repos) HIGH-3: docs/DNA-MIGRATION.md — two-format coexistence policy (4-seg legacy task-class vs 5-seg agent-shell marketplace) HIGH-5: agent_shell_dna doc — explicit consumer = marketplace, planned ledger integration; module-doc clarification MEDIUM: Haiku model id pinned to claude-haiku-4-5-20251001 across pricing.rs::from_slug + ::name + escalate.rs tests + select_posterior fixture + kei-registries submodule (pushed c39e528→7aaa6a7)	2026-05-14 13:18:14 +08:00
Parfii-bot	d01649b355	chore: registries → submodule from KeiSeiLab/kei-registries ... Closes audit HIGH-1 (SSoT drift between KSK and marketplace). _blocks/registries/ now tracks the single canonical kei-registries repo; marketplace consumes the same submodule.	2026-05-14 01:59:36 +08:00
Parfii-bot	7281e7ecea	fix(registries+router): MEDIUM/LOW audit batch ... closes MEDIUM/LOW from feat/agent-dna-three-layer audit: - models.toml: cache_write_1h_per_mtok_micro added to all 11 entries (Anthropic: 200M/600M/1000M micro = $2/$6/$10 per MTok per pricing page; other providers: 0 placeholder) - main.rs (kei-model-router): WAL pragma + busy_timeout errors now logged to stderr instead of silently dropped (previously .ok() swallowed both) - models.toml: Haiku id pin TODO documented (router still hardcodes alias)	2026-05-14 00:04:18 +08:00
Parfii-bot	3aef8678c0	feat: three-layer agent registries (providers/models/profiles) ... Splits agent definition into stable provider + swappable model + role-bound profile. Adding a new LLM API is one row in providers.toml; new model is one row in models.toml; agent invocation picks any (provider, model) pair through agent-profiles.toml default_model_ref. - providers.toml: 10 providers — anthropic, openai, codex (OAuth), xai, deepseek, google, ollama-local, mlx-local, lmstudio-local, litellm-proxy - models.toml: 11 models with cost_*_per_mtok_micro + context_window + verified_at + deprecated_at - agent-profiles.toml: 18 representative profiles; manifest_path points to the canonical .md in ~/.claude/agents/ Three-layer DNA per the new architecture: agent-shell::<provider>:<model>:<caps>::<scope8>::<body8>-<nonce8> This commit only adds registries — kei-model-router still hardcodes the Claude-only Model enum. Wave 4 will rewire it to read TOML.	2026-05-13 20:51:04 +08:00
Parfii-bot	be1a864629	feat(outcome-hook): PostToolUse:Agent backfills outcome + stubs in ledger ... Phase 4 follow-up: the outcome-backfill hook the kei-model-router needs to learn from. Without an outcome signal the Beta posterior sees 205 NULL rows and can never converge → router falls back to top-tier on every spawn. This hook closes that loop. Spawned by orchestrator as a code-implementer agent (Sonnet 4.6 by default after the manifest refactor in cb1fdde — first dogfood proof that the tier system works end-to-end). Agent returned cleanly with STATUS-TRUTH MARKER `shipped: functional, stubs: 0`. Files (3): - `~/.claude/hooks/agent-outcome-backfill.sh` (73 LOC, /bin/sh) — reads PostToolUse:Agent stdin JSON, parses STATUS-TRUTH MARKER from `tool_response`, runs `UPDATE agents SET outcome = ?, stubs_count = ? WHERE id = ?` via sqlite3 CLI. Defensive on every step (never blocks, exits 0 on missing jq / sqlite3 / DB / marker). Bypass: `OUTCOME_BACKFILL_BYPASS=1`. Lives outside the kit (system-level). - `tests/hook-outcome-backfill-test.sh` (79 LOC, /bin/sh) — 8 assertions cover: 4 valid outcomes, idempotent re-run, missing marker, bypass env, missing sqlite3 (PATH stripped). Run via `sh tests/hook-outcome-backfill-test.sh` → "Passed: 8 Failed: 0". - `_blocks/path-user-hooks.md` — third path-atom following user-memory / user-rules convention. Resolves to `~/.claude/hooks/`. Lets future manifests reference hook files via `path:user-hooks/<file>.sh` opaquely. Registered in registry as `atom::md::331b9a34::023e5a08`. Wiring: - `~/.claude/settings.json` PostToolUse:Agent matcher chain — appended the hook idempotently (jq update preserves existing `agent-stub-scan.sh`, `task-timer.sh`, `agent-fork-done.sh`). - DNA-INDEX regenerated; new path-atom appears in `## Atom (120)` section. Effect: every Agent tool call from now on writes outcome + stubs to ledger. After ~10-20 invocations the Beta posterior has a usable prior; after ~50 the router stops defaulting Sonnet to Opus on unfamiliar tasks. The advisor hook (`model-router-advisor.sh`) already prints stderr when current model > recommended — orchestrator needs to actually pass `model:` parameter on next spawn (behavioural, not a code change). === STATUS-TRUTH MARKER === shipped: functional stubs: 0 cargo-check: NOT-RUN behaviour-verified: yes follow-up-required: - PR feat/substrate-path-atoms-2026-05-01 → main when ready Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>	2026-05-01 23:24:02 +08:00
Parfii-bot	3422bdc8c3	feat(path-atoms): atomize ~/.claude memory + rules path references ... Phase 1 of substrate-unified-registry: move all references to user home memory/rules out of plain strings and into content-addressable path atoms. Public artefacts now contain opaque `{path::NAME}/file.md` references; the actual home prefix lives only in the path-atom file's frontmatter, registered in the local kei-registry. NEW path atoms (`_blocks/path-*.md`): - `path-user-memory.md` → template `~/.claude/memory` - `path-user-rules.md` → template `~/.claude/rules` Both files use frontmatter `type: atom, kind: path, template: ..., expand_at: render`. BlockMdScanner auto-registers them; DNA index shows them under their unprefixed names (`user-memory`, `user-rules`) for human lookup, while the body sha8 makes them content-addressable. Resolver (`_assembler/src/registry_client.rs`): - `is_path_atom(conn, name)` — checks DB by name + filename convention (`_blocks/path-<name>.md`) + frontmatter `kind: path`. Defensive: filename + frontmatter must BOTH agree. - `frontmatter_has_kind_path(body)` — minimal YAML parser. Tolerates CRLF, quoted values, rejects substring matches (`pathological` ≠ `path`). - 5 unit tests cover positive + 4 negative cases. Resolver wire-up (`_assembler/src/assembler.rs:147 write_references`): - For each `references.extra` entry starting with `path:NAME/...`: - Lookup `NAME` via `is_path_atom`. - On success: emit `{path::NAME}/<suffix>` — opaque, kit-resolvable. - On miss: stderr warn + passthrough. Never fatal. - Non-`path:` refs pass through unchanged. Backward compatible. - 2 unit tests cover passthrough paths. Manifest migration (38 manifests touched): - `~/.claude/rules/<file>` → `path:user-rules/<file>` - `~/.claude/memory/<file>` → `path:user-memory/<file>` - 96 references migrated; 1 prose-style reference in security-auditor left as plain text (lives inside a domain_in description, not in references.extra — out of scope for this resolver). Regenerated 38 `_generated/*.md` + 1 new `frontend-validator.md`. Regenerated `docs/DNA-INDEX.md` (now includes 2 path-atoms by name). Verification (cited): - `git ls-files | grep denisparfionovich` → 0 hits outside allowlist (NOTICE/README byline + `.github/workflows/leak-check.yml` detection rule). - `_generated/` contains 99 occurrences of `{path::user-...}/`. - assembler tests: 29 passed (5 new). kei-registry tests: 10 passed (8 short_path from earlier commit + 2 unrelated). - assembler resolver verified end-to-end: ml-implementer.md line 479-485 shows `{path::user-rules}/ml-protocol.md` etc. What this does NOT do (deferred): - No registry-DB schema change. Path atoms ride existing Atom block- type via convention, not via new `BlockType::PathAtom` variant. - No git-branch tracking (Phase 2 of plan). - No `kei-registry status` cross-cutting CLI (Phase 3 of plan). - No path-atom orphan detection CLI (Phase 4). The path:user-memory and path:user-rules cover 100% of the username- leak surface from the current manifest set; future categories (kit-root, registry-db, sync-repo, secrets-env, project-root) can land additively without architectural changes. === STATUS-TRUTH MARKER === shipped: functional stubs: 0 cargo-check: PASS behaviour-verified: yes follow-up-required: - Phase 2 (git-branch tracker hook) - Phase 3 (kei-registry status subcommand) - Phase 4 (orphan detection CLI) - Sync user-side install: ~/.claude/agents/_manifests/ still has pre-migration absolute paths; will pick up new format on next `install.sh --add` (out of scope for this commit). Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>	2026-05-01 22:29:50 +08:00
Parfii-bot	0be354a920	KeiSeiKit-public — clean state ... Single-commit clean baseline after security scrub of niche-tells, project codenames, internal jargon, and contributor-email leaks. Contents: - 100 Rust crates (_primitives/_rust/) - 37 agent manifests (_manifests/) + generated specs (_generated/) - 67 user-invocable skills (skills/) - 33 hooks (hooks/) - Composition blocks (_blocks/) - Documentation (docs/, README.md) - TS adapter packages (_ts_packages/) - Assembler (_assembler/) - Roles (_roles/) - Templates (_templates/) - Forgejo CI (.forgejo/) Author: Denis Parfionovich <info@greendragon.info> License: see LICENSE.	2026-05-01 12:09:03 +08:00