Commit Graph
17 Commits
Author SHA1 Message Date
Devika Verma 4181039ac4 OpenShell provider: one sandbox per agent, with a registry and network profiles
Folders are bind-mounted at their real paths; the runner is a read-only mount and the main command.
The policy is rendered from the session's roots, with the owner's uid and Landlock as a hard requirement.
The runner's pipe is the gateway's gRPC exec stream; the registry caps and cleans up sandboxes.
2026-09-19 16:53:35 -07:00
Rohit C Prasad a5ed9c8937 CLI: openworker machine commands, real help and version; package publishes as openworker
aisuite comes from PyPI (0.2.0), so the package has no git-URL dependency.
Older top-level spellings (openworker join, up, status) keep working, unlisted.
2026-09-18 16:40:07 -07:00
Rohit C Prasad 274c9a582b Remote machines: identity, reverse channel, acceptor, sealed key wallet
A machine joins with its own identity and holds a reverse channel to the controller.
Provider keys and connector accounts deploy sealed to the machine's pinned key.
2026-09-05 08:00:16 -07:00
Rohit C Prasad 1724d322b0 Merge main into fix/add-coverage-measurement-288 2026-09-18 11:26:41 -07:00
Devika Verma 2d5e52ad5e Merge pull request #183 from Aadhithya-arulvanan/fix/httpx2-deprecation-warning
fix: add httpx2 dev dependency to silence Starlette TestClient deprec…
2026-09-18 23:21:51 +05:30
Shakti Prasad Mohapatra f54d62724f fix: add coverage measurement and reporting to CI
The test suite is broad (79 files) but has no coverage measurement or
threshold, so regressions in under-tested paths go unnoticed.

Add pytest-cov to dev dependencies, configure coverage in pyproject.toml
(branch coverage, source=coworker, show_missing), and update CI to run
pytest with --cov and upload the coverage.xml artifact.

The fail_under floor is set to 0 initially so CI passes without changes
to existing coverage. Once a baseline is established, the floor can be
ratcheted up over time.

Fixes #288
2026-09-12 22:50:20 +05:30
Rohit Prasad 161e058083 Merge pull request #217 from CyberDefenseOperations/contrib/bump-mcp-security
deps: raise mcp floor to >=1.28.1 (PYSEC-2026-3481/3482/3483)
2026-08-23 11:52:51 -07:00
Rohit C Prasad 5604676333 pytest: put the repo root on sys.path
The reviewer-eval tests import from scripts/; the pytest console script (CI) does not add the root the way python -m pytest does.
2026-08-23 01:13:48 -07:00
Rohit C Prasad 36aa1da728 ocw CLI + team-board MCP server on stdio
ocw board/journal verbs with server auto-discovery (remote-first; direct SQLite only headless).
ocw board mcp serves the role-scoped toolset to external harnesses; 21 tests incl. both dialects over the real app.
2026-08-16 17:48:30 -07:00
Rohit C Prasad b5b000eb76 personas: ship security coworker bundles (OPE-61 phase C)
Security, Cloud Posture, and Dependency Audit coworkers as self-contained bundle dirs (manifest + skills) driving OSS scanners; registry loads bundle subdirs; packaging includes them.
2026-08-11 06:20:19 -07:00
coderdailyoneandClaude Fable 5 abb7eef863 fix: import tomllib's tomli fallback on Python 3.10
requires-python declares >=3.10 and the README says "Python 3.10+", but
coworker/config.py imports tomllib at module top and tomllib only landed in
the 3.11 stdlib — on 3.10 the package cannot even be imported (every test
module fails collection through the coworker.config import chain), so the
advertised floor is broken in practice.

Fall back to the tomli package (the pre-stdlib implementation of the same API)
and declare it as a dependency only for python_version < '3.11', so 3.11+
installs are unchanged.

Verified on 3.10: importing coworker.config and load_config() parsing a
workspace config.toml both work through the fallback; the config suite still
passes on 3.12.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
2026-07-31 10:28:28 +01:00
Rocky DeStefano 8a0412479c deps: raise mcp floor to >=1.28.1 (PYSEC-2026-3481/3482/3483) 2026-07-30 22:37:39 -06:00
Rohit C Prasad 8674e301a8 Pin mcp<2 — 2.0.0 removed streamablehttp_client
CI installs latest mcp; today's 2.0.0 release breaks every MCP-client import.
2026-07-28 11:58:31 -07:00
Aadhithya Arulvanan d89622f8a8 fix: add httpx2 dev dependency to silence Starlette TestClient deprecation warning 2026-07-26 08:13:24 +00:00
Rohit C Prasad 50463bba00 Package boto3 for Bedrock and pin google-auth
New [bedrock] extra; desktop builds and CI install it; PyInstaller collects
boto3/botocore so the lazy import works in the bundled sidecar.
2026-07-25 16:23:56 -07:00
Rohit C Prasad cffec6bc4b rename artifact names to openworker: desktop/server binaries, console scripts, npm package
The Python import namespace (coworker) and the live auth config strings are
intentionally unchanged.
2026-07-21 11:35:29 -07:00
Rohit C PrasadandDevika 2b45018ffa OpenWorker: initial import
Imported from andrewyng/aisuite@1b4bbf303e
(contents of its platform/ directory, hoisted to the repo root).
Development history prior to this commit lives in that repository.

Co-authored-by: Devika <devikaverma11@gmail.com>
2026-07-21 11:09:41 -07:00