Commit Graph
10 Commits
Author SHA1 Message Date
Rohit Prasad 161e058083 Merge pull request #217 from CyberDefenseOperations/contrib/bump-mcp-security
deps: raise mcp floor to >=1.28.1 (PYSEC-2026-3481/3482/3483)
2026-08-23 11:52:51 -07:00
Rohit C Prasad 5604676333 pytest: put the repo root on sys.path
The reviewer-eval tests import from scripts/; the pytest console script (CI) does not add the root the way python -m pytest does.
2026-08-23 01:13:48 -07:00
Rohit C Prasad 36aa1da728 ocw CLI + team-board MCP server on stdio
ocw board/journal verbs with server auto-discovery (remote-first; direct SQLite only headless).
ocw board mcp serves the role-scoped toolset to external harnesses; 21 tests incl. both dialects over the real app.
2026-08-16 17:48:30 -07:00
Rohit C Prasad b5b000eb76 personas: ship security coworker bundles (OPE-61 phase C)
Security, Cloud Posture, and Dependency Audit coworkers as self-contained bundle dirs (manifest + skills) driving OSS scanners; registry loads bundle subdirs; packaging includes them.
2026-08-11 06:20:19 -07:00
coderdailyoneandClaude Fable 5 abb7eef863 fix: import tomllib's tomli fallback on Python 3.10
requires-python declares >=3.10 and the README says "Python 3.10+", but
coworker/config.py imports tomllib at module top and tomllib only landed in
the 3.11 stdlib — on 3.10 the package cannot even be imported (every test
module fails collection through the coworker.config import chain), so the
advertised floor is broken in practice.

Fall back to the tomli package (the pre-stdlib implementation of the same API)
and declare it as a dependency only for python_version < '3.11', so 3.11+
installs are unchanged.

Verified on 3.10: importing coworker.config and load_config() parsing a
workspace config.toml both work through the fallback; the config suite still
passes on 3.12.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
2026-07-31 10:28:28 +01:00
Rocky DeStefano 8a0412479c deps: raise mcp floor to >=1.28.1 (PYSEC-2026-3481/3482/3483) 2026-07-30 22:37:39 -06:00
Rohit C Prasad 8674e301a8 Pin mcp<2 — 2.0.0 removed streamablehttp_client
CI installs latest mcp; today's 2.0.0 release breaks every MCP-client import.
2026-07-28 11:58:31 -07:00
Rohit C Prasad 50463bba00 Package boto3 for Bedrock and pin google-auth
New [bedrock] extra; desktop builds and CI install it; PyInstaller collects
boto3/botocore so the lazy import works in the bundled sidecar.
2026-07-25 16:23:56 -07:00
Rohit C Prasad cffec6bc4b rename artifact names to openworker: desktop/server binaries, console scripts, npm package
The Python import namespace (coworker) and the live auth config strings are
intentionally unchanged.
2026-07-21 11:35:29 -07:00
Rohit C PrasadandDevika 2b45018ffa OpenWorker: initial import
Imported from andrewyng/aisuite@1b4bbf303e
(contents of its platform/ directory, hoisted to the repo root).
Development history prior to this commit lives in that repository.

Co-authored-by: Devika <devikaverma11@gmail.com>
2026-07-21 11:09:41 -07:00