coreci/coreci-chat
3
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 14 Wiki Activity

14 Releases 14 Tags

RSS Feed
  • v0.1.6 0c15d3d0b2
    Compare

    Stable

    coreci-bot released this 2026-08-25 06:14:25 +00:00 | 3 commits to main since this release

    CoreCI Chat v0.1 M2 — MCP Layer & Day 1 Adapters

    Milestone: v0.2 — MCP Layer & Day 1 Adapters
    Predecessor: v0.1 (M1 — Read-Only Diagnostic MVP, v0.0.1..v0.0.7)
    Milestone release: v0.1.6 (final-phase patch on the v0.1.x line)

    13 Requirements (all PASS)

    REQ-015 (MCP tool schema), REQ-016 (adapter routing), REQ-017 (SSE streaming), REQ-018 (read-only at broker), REQ-019 (rate limiting), REQ-020 (Proxmox adapter), REQ-021 (SSH/Linux adapter), REQ-022 (GitHub adapter), REQ-023 (Gitea adapter), REQ-024 (multi-target scope), REQ-025 (Proxmox auth), REQ-026 (SSH auth), REQ-027 (Git auth).

    Phases shipped

    • P0 pre-execution → v0.1.0
    • P1 Wave F — MCP gateway core → v0.1.1
    • P2 Wave G — Proxmox adapter → v0.1.2
    • P3 Wave H — SSH/Linux adapter → v0.1.3
    • P4 Wave I — Git adapters → v0.1.4
    • P5 Wave J — SSE + LLM smoke + UI + CI → v0.1.5
    • P6 Final — review + audit + ship → v0.1.6 (milestone release)

    Key deliverables

    • MCP capability broker (MCP 2025-06-18, 9-tool closed registry, INV-7 at broker)
    • 4 Day-1 adapters (Proxmox PVEAuditor, SSH via Relay Agent defense-in-depth, GitHub fine-grained PAT D-006, Gitea version-aware D-007)
    • SSE streaming (per-call, ULID correlation IDs)
    • Token-bucket rate limiting (60/min user, 300/min tenant)
    • Two-track LLM smoke (Track A mock-path P0 gate passes; Track B real-path optional)
    • CI pipeline (Gitea Actions, Postgres 16 + RLS verification)
    • Settings → Adapters UI + Test-Call UI

    Tests

    656 tests green (618 unit/integration + 38 conformance). Coverage: 92.3% mcp, 97% llm-mock, 98.2% db. M1 non-regression verified.

    Grill fixes applied

    All 12 binding fixes G-011..G-022 applied. 2 P0 blockers (CI pipeline + LLM smoke fallback) auto-resolved.

    Next milestone

    M3 — Chat, Orchestration, Hardening (REQ-028..037, REQ-041..044). M2→M3 contract frozen (5 endpoints, spec §9).

    Downloads
  • v0.1.5 986ac19863
    Compare

    Stable

    coreci-bot released this 2026-08-25 06:06:26 +00:00 | -3 commits to main since this release

    Wave J (Phase 5)

    REQs: REQ-017 (SSE to UI), M2 gate item 8 (LLM smoke — P0)

    • Two-track LLM smoke (G-018): Track A mock-path P0 gate passes; Track B real-path optional
    • llm-mock hardened (G-019 regex set, tolerates wording drift)
    • Settings→Adapters UI + Test-Call UI with SSE consumer + staleness
    • Closed-tool-set gap docs in UI help text (G-014)
    • CI pipeline: .gitea/workflows/ci.yml (G-011) + Postgres 16 service container (G-022)
    • Import guard (R-008)
    • Tests: 618 green + 38 conformance. Coverage: 97% llm-mock, 92.3% mpc
    Downloads
  • v0.1.4 04f0417f4a
    Compare

    Stable

    coreci-bot released this 2026-08-25 05:40:40 +00:00 | -2 commits to main since this release

    Wave I (Phase 4) — Git adapters

    REQs: REQ-022, REQ-023, REQ-027

    • GitHub: fine-grained PAT (D-006), 3 capabilities, rate-limit handling, scope-via-403 (R-004)
    • Gitea: version-aware scope validation (R-005), 2 capabilities, method blocklist backstop
    • 60s TTL inventory cache for list_repos (both)
    • Tests: 521 green. Coverage: 95% github, 93% gitea
    Downloads
  • v0.1.3 40066dfb0e
    Compare

    Stable

    coreci-bot released this 2026-08-25 05:20:03 +00:00 | -1 commits to main since this release

    Wave H (Phase 3) — SSH/Linux adapter

    Defense-in-depth: broker layer-1 (TS 6-command subset) + Relay Agent layer-2 (Go CheckCommand, G-004 unchanged) + no-shell exec.Command (third layer).

    • tool_call WebSocket message + reader goroutine restructure (G-021)
    • Cross-layer divergence matrix (G-013): all 4 cases pass
    • M1-relay-WS regression: register/ping/pong preserved
    • Tests: 396 TS + Go green. Coverage: 96.73% on ssh adapter
    Downloads
  • v0.1.2 bf975e7ab1
    Compare

    Stable

    coreci-bot released this 2026-08-25 04:57:18 +00:00 | 0 commits to main since this release

    Wave G (Phase 2) — Proxmox adapter

    REQs: REQ-020, REQ-025

    • Read-only Proxmox VE adapter (PVE API client, token auth, allowSelfSigned)
    • 3 capabilities: list_vms (inventory, 60s cache), get_vm_status (live), get_node_metrics (live)
    • PVEAuditor validation (R-002 introspection gap documented in help text)
    • Write-blocklist 403+audit wired end-to-end (P1 gap from Wave F closed)
    • Tests: 323 green. Coverage: 94.7% on packages/mcp/adapters/proxmox
    Downloads
  • v0.1.1 28b8aa36c6
    Compare

    Stable

    coreci-bot released this 2026-08-25 04:43:49 +00:00 | 1 commits to main since this release

    Wave F (Phase 1) — MCP Gateway core

    REQs covered: REQ-015, REQ-016, REQ-017, REQ-018, REQ-019, REQ-024

    Delivered

    • Closed 9-tool MCP registry (JSON Schema inputSchemas, MCP 2025-06-18)
    • Adapter router with multi-target disambiguation (REQ-024)
    • Write-method blocklist (INV-7 backstop, G-015/G-016 two enforcement models)
    • Token-bucket rate limiter (60/min user, 300/min tenant, in-memory)
    • SSE stream manager (ULID, per-call, 30s stream-not-opened timeout, Edge 8)
    • OpenAI↔MCP translator (tool_calls ↔ tools/call)
    • In-process custom transport + stdio transport (D-007)
    • mcp_adapters table with RLS + FORCE ROW LEVEL SECURITY
    • 5 API routes (/api/mcp/tools, /invoke, /stream/[id], /adapter, /adapter/[id])
    • 4 stub adapters + McpAdapter interface (G-020)
    • 7 MCP conformance tests + PROTOCOL.md (G-017 stdio-interop)
    • AuditEventType widening (G-012): adapter.configured, test_connection.*, capability_invoked, write_rejected

    Tests

    • 254 green (224 unit + 32 conformance)
    • Coverage: 88.7% on packages/mcp
    • M1 non-regression: all M1 tests pass

    Grill fixes applied

    G-012, G-015, G-016, G-017, G-020

    P1 note

    Write-blocklist 403+audit integration deferred to Wave G/H/I (real adapters construct HTTP methods). The closed 9-tool registry is the verified primary INV-7 boundary.

    Downloads
  • v0.1.0 22ef116b15
    Compare

    Stable

    coreci-bot released this 2026-08-25 03:52:04 +00:00 | 3 commits to main since this release

    M2 Phase 0 Complete

    Milestone: v0.2 — MCP Layer & Day 1 Adapters
    Predecessor: v0.1 (M1 — Read-Only Diagnostic MVP, shipped v0.0.1..v0.0.7)

    Pipeline stages

    • SPECIFY: M2 spec saved and locked (9 open questions resolved, D-006 + D-007 deviations)
    • CLARIFY: D-001..D-005 carried from M1; D-006 (GitHub fine-grained PAT scopes) + D-007 (MCP transport architecture) added
    • RESEARCH: 9 areas (R-001..R-009), confidence 0.72-0.90, 7 flagged risks mitigated
    • PLAN: 6 waves (F: MCP gateway core, G: Proxmox, H: SSH/Linux, I: Git adapters, J: SSE+LLM smoke+UI, final: review+ship) on the v0.1.x patch line; v0.1.6 = milestone release
    • GRILL: 9-axis adversarial review, 12 binding fixes G-011..G-022, 2 P0 blockers auto-resolved (CI pipeline + LLM smoke fallback)
    • MVP/UX: PASS (3 mandatory sections verified)

    M2 scope (13 REQs)

    REQ-015..027 — MCP capability broker gateway, 4 Day-1 adapters (Proxmox, SSH/Linux, GitHub, Gitea), SSE streaming, token-bucket rate limiting, multi-target scoping, read-only enforcement at broker (INV-7), LLM-driven tool-calling smoke.

    Key decisions

    • MCP spec version 2025-06-18 (conformance verified against modelcontextprotocol.io)
    • In-process custom MCP transport for TS adapters (D-007)
    • 9-tool closed starter set (additions require spec amendment v1.2+)
    • Defense-in-depth SSH (broker layer 1 + Relay Agent layer 2)
    • Two-track LLM smoke (mock-path P0 gate + real-path optional)
    • CI: Gitea Actions (.gitea/workflows/)

    Next

    Execution phases 1-5 (waves F/G/H/I/J) → final phase 6 (review + audit + ship v0.1.6 = milestone release).

    Downloads
  • v0.0.7 33207ab89a
    Compare

    v0.0.7 — CoreCI Chat v0.1 Milestone Release Stable

    coreci-bot released this 2026-08-25 02:25:29 +00:00 | 8 commits to main since this release

    CoreCI Chat v0.1 — Read-Only Diagnostic MVP (v0.0.7 = milestone release)

    One sentence: A browser-based chat interface where mid-market enterprise IT operators ask natural-language questions about their infrastructure (Proxmox, SSH/Linux servers, GitHub, Gitea) and receive evidence-backed diagnostic answers in under 5 minutes — with all LLM inference routed through customer-provided model endpoints (BYOM).

    M1 Acceptance Gate: PASSED (spec §2.3)

    Platform Lead can: sign up via SSO → configure a BYOM endpoint with green validation → deploy Relay Agent via install script on a target Linux host → register the target → see green status in the admin dashboard. Audit logging, RLS, and secret manager are operational.

    Requirements (17 M1 REQs — all PASS)

    Wave REQs Status
    A (Foundations) REQ-038, REQ-039, REQ-040 PASS
    B (Identity/RBAC) REQ-001..005 PASS
    C (BYOM) REQ-006..009 PASS
    D (Relay Agent) REQ-010..013, REQ-026 (partial) PASS
    E (Dashboard) REQ-014 PASS

    Test Summary

    • 189 tests green (148 TypeScript + 17 Go + 24 install script)
    • DB coverage: 98% (gate ≥80%)
    • All 10 grill fixes (G-001..G-010) applied

    Distribution Packages

    File Description
    coreci-relay-agent-0.0.7-linux-amd64 Static Go binary, x86-64, Ubuntu 24.04 LTS / Debian 12+
    coreci-relay-agent-0.0.7-linux-arm64 Static Go binary, ARM aarch64, Ubuntu 24.04 LTS / Debian 12+
    install.sh Modular install script (detect-os → install-binary → write-systemd-unit → register-target)
    ssh-whitelist.json Fixed SSH command whitelist (version 1)
    sha256sums.txt SHA256 checksums for all artifacts

    Install

    curl -fsSL https://git.cloudinit.dev/coreci/coreci-chat/releases/download/v0.0.7/install.sh | sh

    Known Limitations (M1-acceptable)

    1. PGlite 0.5.7 doesn't enforce RLS on SELECT — app-layer withTenant + explicit WHERE is primary; RLS is prod backstop.
    2. WorkOS has dev/mock mode; prod requires WORKOS_API_KEY.
    3. /api/byom/test-inference is a G-001 proxy (M3 deprecation).
    4. Audit concurrent-write serialization (G-006) — M3 mitigation documented.

    Next Milestones

    • M2 (Weeks 4-5): MCP Layer & Day 1 Adapters (REQ-015..027)
    • M3 (Weeks 6-8): Chat, Orchestration, Hardening (REQ-028..037, REQ-041..044)
    Downloads
  • v0.0.6 dfc6b8ff76
    Compare

    v0.0.6 — Phase 5: Wave E Dashboard Surfacing Stable

    coreci-bot released this 2026-08-25 02:22:30 +00:00 | 10 commits to main since this release

    Wave E — Dashboard Surfacing (v0.0.6)

    Agent health (green/yellow/red), target hostname, last 100 log lines, audit CSV export.

    What shipped:

    • Targets API: list, detail, logs (last 100 audit entries)
    • Status fan-out: SSE endpoint streams health updates every 5s
    • Health: green (last_seen < 60s), yellow (< 5min), red (> 5min or null)
    • Dashboard pages: /dashboard/targets (table + live SSE), /dashboard/targets/[id] (detail + logs), /dashboard/audit (CSV export)
    • Onboarding checklist: "Verify Green Status" turns green when ≥1 target is green
    • Defense-in-depth: explicit WHERE tenant_id filters + RLS backstop

    Requirements covered: REQ-014
    Tests: 16 new (dashboard integration)

    Downloads
  • v0.0.5 86f7dcc10b
    Compare

    v0.0.5 — Phase 4: Wave D Relay Agent Stable

    coreci-bot released this 2026-08-25 02:04:20 +00:00 | 16 commits to main since this release

    Wave D — Relay Agent (v0.0.5)

    Go binary + modular install script + WebSocket registration + heartbeat + SSH whitelist hook.

    What shipped:

    • Go Relay Agent: config, wsclient (gorilla/websocket), whitelist
      • WebSocket: outbound wss, Bearer auth, register, heartbeat (30s/60s), exponential backoff (max 5 → alert)
      • SSH whitelist: CheckCommand(cmd) error (G-004 M2 contract), fixed JSON whitelist, deny list, G-007 shadow exec.Cmd test
    • Modular install script: detect_os / install_binary / write_systemd_unit / register_target. Clean abort on unsupported OS (G-009: Fedora, Alpine, CentOS, Arch, wrong-version)
    • Control-plane WS server: verifies relay JWT, register inserts target + audit, ping updates last_seen

    Requirements covered: REQ-010, REQ-011, REQ-012, REQ-013, REQ-026 (partial — whitelist hook)
    Tests: 17 Go + 24 install script + 6 control-plane = 47 new

    Downloads