@cyanautomation/kaseki-agent 1.4.1

package/.dockerignore

@@ -0,0 +1,54 @@
+# Minimal secure Docker build context baseline
+
+# --- Allowlist only what Dockerfile copies ---
+**
+!Dockerfile
+!kaseki
+!kaseki-agent.sh
+!run-kaseki.sh
+!package.json
+!package-lock.json
+!tsconfig.json
+!jest.config.js
+!src/
+!src/**
+!.dockerignore
+!README.md
+!CLAUDE.md
+!CONTRIBUTING.md
+!STYLE.md
+!docs/
+!docs/**
+!ops/
+!ops/**
+!scripts/
+!scripts/**
+!test/
+!test/fixtures/
+!test/fixtures/**
+!docker/
+!docker/workspace-cache/
+!docker/workspace-cache/package.json
+!docker/workspace-cache/package-lock.json
+
+# --- Common exclusions (explicit for clarity) ---
+.git
+.gitignore
+node_modules
+*.log
+.env
+.env.*
+.DS_Store
+.vscode
+.idea
+*.swp
+*.swo
+
+# Test / coverage artifacts
+coverage
+.nyc_output
+*.lcov
+junit*.xml
+
+.github/
+dist/

package/.eslintignore

@@ -0,0 +1,11 @@
+node_modules/
+dist/
+.git/
+.github/
+docker/
+/kaseki-runs/
+/kaseki-results/
+/kaseki-cache/
+*.log
+.DS_Store
+.tmp

package/.eslintrc.json

@@ -0,0 +1,95 @@
+{
+  "env": {
+    "node": true,
+    "es2024": true
+  },
+  "parserOptions": {
+    "ecmaVersion": 2024,
+    "sourceType": "module"
+  },
+  "extends": [
+    "eslint:recommended"
+  ],
+  "overrides": [
+    {
+      "files": [
+        "src/**/*.ts",
+        "perf/**/*.ts"
+      ],
+      "parser": "@typescript-eslint/parser",
+      "parserOptions": {
+        "ecmaVersion": 2024,
+        "sourceType": "module"
+      },
+      "extends": [
+        "eslint:recommended",
+        "plugin:@typescript-eslint/recommended"
+      ],
+      "plugins": [
+        "@typescript-eslint"
+      ],
+      "rules": {
+        "no-unused-vars": "off",
+        "@typescript-eslint/no-unused-vars": [
+          "warn",
+          {
+            "argsIgnorePattern": "^_"
+          }
+        ],
+        "@typescript-eslint/no-explicit-any": "off"
+      }
+    }
+  ],
+  "rules": {
+    "indent": [
+      "warn",
+      2
+    ],
+    "linebreak-style": [
+      "error",
+      "unix"
+    ],
+    "quotes": [
+      "warn",
+      "single",
+      {
+        "avoidEscape": true
+      }
+    ],
+    "semi": [
+      "warn",
+      "always"
+    ],
+    "no-trailing-spaces": "warn",
+    "no-multiple-empty-lines": [
+      "warn",
+      {
+        "max": 1
+      }
+    ],
+    "no-console": "off",
+    "no-process-exit": "off",
+    "no-empty": [
+      "error",
+      {
+        "allowEmptyCatch": true
+      }
+    ],
+    "no-unused-vars": [
+      "warn",
+      {
+        "argsIgnorePattern": "^_"
+      }
+    ]
+  },
+  "ignorePatterns": [
+    "node_modules/",
+    ".git/",
+    "docker/",
+    "/kaseki-runs/",
+    "/kaseki-results/",
+    "/kaseki-cache/",
+    "dist/",
+    "**/*.log"
+  ]
+}

package/.github/ISSUE_TEMPLATE/bug_report.md

@@ -0,0 +1,53 @@
+---
+name: Bug Report
+about: Report a bug or unexpected behavior
+title: "[BUG] "
+labels: bug
+assignees: ""
+---
+
+## Description
+
+A clear and concise description of what the bug is.
+
+## Steps to Reproduce
+
+1. Run command: `...`
+2. Use environment: `...`
+3. Observe error in: `...`
+
+## Expected Behavior
+
+What should have happened?
+
+## Actual Behavior
+
+What actually happened instead?
+
+## Environment
+
+- **Kaseki-agent version**: (e.g., v0.1.0)
+- **Docker version**: `docker --version`
+- **Operating System**: (e.g., Ubuntu 24.04, macOS 13)
+- **Node.js version**: `node --version` (if running locally)
+- **Python version**: (if applicable)
+
+## Logs & Error Output
+
+```
+Paste full error message, stack trace, or logs here
+```
+
+If relevant, share artifacts from `/agents/kaseki-results/kaseki-N/`:
+- `stdout.log`
+- `stderr.log`
+- `quality.log`
+- `validation.log`
+
+## Additional Context
+
+Any other context or screenshots that might help diagnose the issue?
+
+## Possible Solution
+
+(Optional) Do you have any ideas about what's causing this or how to fix it?

package/.github/ISSUE_TEMPLATE/feature_request.md

@@ -0,0 +1,53 @@
+---
+name: Feature Request
+about: Suggest an enhancement or new feature
+title: "[FEATURE] "
+labels: feature
+assignees: ""
+---
+
+## Description
+
+A clear and concise description of the feature you'd like to see.
+
+## Problem Statement
+
+What problem does this feature solve? What is the use case?
+
+## Proposed Solution
+
+How would you like this feature to work?
+
+## Example Usage
+
+Show an example of how the feature would be used:
+
+```bash
+./run-kaseki.sh --new-flag
+```
+
+Or a code example:
+
+```typescript
+// How would this look?
+```
+
+## Alternative Solutions
+
+Have you considered any alternative approaches?
+
+## Additional Context
+
+Any other information, mock-ups, or design documents?
+
+## Is this a breaking change?
+
+- [ ] Yes, this would break existing usage
+- [ ] No, this is backward compatible
+
+## Priority
+
+- [ ] Critical (blocks important workflows)
+- [ ] High (nice to have, frequently requested)
+- [ ] Medium (useful enhancement)
+- [ ] Low (polish or niche use case)

package/.github/ISSUE_TEMPLATE/security.md

@@ -0,0 +1,51 @@
+---
+name: Security Vulnerability
+about: Report a security issue (CONFIDENTIAL)
+title: "[SECURITY] "
+labels: security
+---
+
+**IMPORTANT:** Please do NOT disclose security vulnerabilities publicly. Instead, report them privately via GitHub's security advisory feature.
+
+## Vulnerability Description
+
+Describe the security issue clearly and concisely.
+
+## Affected Component
+
+Which part of kaseki-agent is affected?
+- [ ] API key/credential handling
+- [ ] Docker container security
+- [ ] Dependency vulnerability
+- [ ] CI/CD workflow security
+- [ ] Other: ___________
+
+## Severity
+
+- [ ] Critical (immediate threat; remote exploitation; affects production)
+- [ ] High (elevated risk; no immediate exposure)
+- [ ] Medium (potential risk; requires specific conditions)
+- [ ] Low (informational; defense-in-depth)
+
+## Steps to Reproduce
+
+(Optional, if safe to include)
+
+## Impact
+
+What is the potential impact if this vulnerability is exploited?
+
+## Suggested Fix
+
+(Optional) Do you have a suggested remediation?
+
+## Timeline
+
+When did you discover this? When can we expect public disclosure (if any)?
+
+---
+
+**To report privately:**
+1. Go to **Settings** → **Security** → **Report a vulnerability**
+2. Or email security@cyanautomation.com (if available)
+3. Do not open a public issue

package/.github/PULL_REQUEST_TEMPLATE/default.md

@@ -0,0 +1,71 @@
+## What does this PR do?
+
+Brief summary of the changes:
+
+## Related Issue(s)
+
+Closes #123 (reference issue number, if any)
+
+## Type of Change
+
+- [ ] Bug fix (non-breaking change that fixes an issue)
+- [ ] New feature (non-breaking change that adds functionality)
+- [ ] Breaking change (fix or feature that would cause existing functionality to change)
+- [ ] Documentation update
+- [ ] Performance improvement
+- [ ] CI/CD enhancement
+- [ ] Dependencies/security update
+
+## Testing
+
+- [ ] Unit tests added or updated
+- [ ] Integration tests added or updated
+- [ ] Manual testing completed (describe below)
+- [ ] N/A (documentation-only or trivial changes)
+
+### Test Details
+
+What did you test? How can reviewers verify this works?
+
+```bash
+# Example test command
+npm test
+./run-kaseki.sh --some-flag
+```
+
+## Documentation
+
+- [ ] README.md updated (if needed)
+- [ ] CLAUDE.md updated (if needed)
+- [ ] CONTRIBUTING.md updated (if needed)
+- [ ] Inline code comments added (if needed)
+- [ ] N/A (no documentation needed)
+
+## Pre-Submission Checklist
+
+- [ ] Code follows the style guidelines (TypeScript strict mode, Bash conventions)
+- [ ] No hardcoded secrets, API keys, or credentials
+- [ ] No sensitive information in logs or comments
+- [ ] No unrelated changes included
+- [ ] Commit messages are clear and descriptive
+- [ ] All tests pass locally (`npm test`, shell integration tests)
+- [ ] Git history is clean (no fixup commits if possible)
+
+## Breaking Changes
+
+Does this PR introduce any breaking changes?
+
+- [ ] Yes (describe below)
+- [ ] No
+
+### Breaking Change Details
+
+If yes, what breaks and why is it necessary?
+
+## Reviewers
+
+Who should review this? cc @CyanAutomation/maintainers
+
+## Additional Notes
+
+Any other context or considerations for reviewers?

package/.github/dependabot.yml

@@ -0,0 +1,38 @@
+version: 2
+updates:
+  # npm dependency updates
+  - package-ecosystem: "npm"
+    directory: "/"
+    schedule:
+      # Check for updates weekly (Monday mornings)
+      interval: "weekly"
+      day: "monday"
+      time: "03:00"
+    # Only update direct dependencies (not transitive)
+    allow:
+      - dependency-type: "direct"
+    # Create pull requests
+    pull-requests:
+      # Increase if you want more concurrent PRs
+      open-pull-requests-limit: 5
+    # Reviewers and assignees
+    reviewers:
+      - "CyanAutomation/maintainers"
+    assignees:
+      - "CyanAutomation/maintainers"
+    # Add labels for easy filtering
+    labels:
+      - "infrastructure"
+      - "dependencies"
+    # Commit message style
+    commit-message:
+      prefix: "chore(deps)"
+      prefix-development: "chore(deps-dev)"
+    # Group updates
+    groups:
+      development-dependencies:
+        dependency-types:
+          - "dev"
+      production-dependencies:
+        dependency-types:
+          - "prod"