profclaw 0.0.1-beta.3 → 2.3.0

package/.env.example

@@ -197,13 +197,25 @@ POOL_QUEUE_TIMEOUT_MS=30000
 # SEARCH & EMBEDDINGS
 # ════════════════════════════════════════════════════════════════════════════════
 
-# Web search via SearXNG
-SEARXNG_URL=https://searx.tiekoetter.com
+# Web search via SearXNG (self-hosted only — public instances rate-limit heavily)
+# SEARXNG_URL=https://searx.tiekoetter.com  # disabled: 429 Too Many Requests
+
+# Preferred: set one of these instead (sign up for a free tier key)
+# BRAVE_API_KEY=        # https://api.search.brave.com  (2000 free/month)
+# SERPER_API_KEY=       # https://serper.dev            (2500 free)
+# TAVILY_API_KEY=       # https://tavily.com            (1000 free/month)
 
 # Embedding provider: local, openai, voyage
 EMBEDDING_PROVIDER=local
 # VOYAGE_API_KEY=xxx
 
+# ════════════════════════════════════════════════════════════════════════════════
+# CONTENT MODERATION (optional)
+# ════════════════════════════════════════════════════════════════════════════════
+
+# Content moderation (optional, uses glin-profanity)
+# CONTENT_FILTER=true
+
 # ════════════════════════════════════════════════════════════════════════════════
 # DOCKER / MONITORING (docker-compose only)
 # ════════════════════════════════════════════════════════════════════════════════

package/CHANGELOG.md

@@ -1,49 +1,69 @@
 # Changelog
 
-## [2.0.0](https://github.com/profclaw/profclaw/compare/v1.0.0...v2.0.0) (2026-03-11)
+All notable changes to this project will be documented in this file.
 
-### Breaking Changes
+## [2.3.0](https://github.com/profclaw/profclaw/compare/v2.2.0...v2.3.0) (2026-04-13)
 
-* Renamed from "GLINR Task Manager" to "profClaw" — all env vars, CLI commands, and API paths updated
-* `GLINR_REQUIRE_REDIS` renamed to `PROFCLAW_REQUIRE_REDIS`
-* `glinr.mjs` renamed to `profclaw.mjs`
-* All `glinr-*` skill names renamed to `profclaw-*`
 
 ### Features
 
-* **Deployment Modes**: Run as `pico`, `mini`, or `pro` via `PROFCLAW_MODE` env var
-* **In-Memory Queue**: BullMQ-compatible task queue without Redis for pico/mini modes
-* **Unified Queue Facade**: Auto-selects Redis or memory backend based on mode
-* **WebChat Provider**: Browser-based chat via SSE with session management
-* **Matrix Provider**: Matrix homeserver integration via Client-Server API
-* **Google Chat Provider**: Google Workspace integration via webhook or service account
-* **MS Teams Provider**: Microsoft Teams integration via Bot Framework
-* **Plugin SDK**: Third-party plugin system with `definePlugin()` helper, npm/local loader
-* **Onboarding CLI**: `npx profclaw onboard` wizard for zero-to-running setup
-* **Skills Expansion**: 15 built-in skills (code-review, code-generation, debug-helper, git-workflow, web-research, cron-manager, memory-manager, system-admin, file-manager, api-tester, docker-ops)
-* **Sandbox Hardening**: Security presets per deployment mode
-* **Static UI Serving**: Hono middleware serves `ui/dist/` with SPA fallback
-* **Pico Docker Image**: Minimal image without Chromium (`Dockerfile.pico`)
+* integrate glin-profanity content filter + thesvg brand icons ([#44](https://github.com/profclaw/profclaw/issues/44)) ([67b84d6](https://github.com/profclaw/profclaw/commit/67b84d6f20247f9933007fcbbd6b44ec911406c8))
 
-### Chat Channels (4 → 8)
 
-* Slack, Discord, Telegram, WhatsApp (existing)
-* WebChat, Matrix, Google Chat, Microsoft Teams (new)
+### Bug Fixes
 
-### Infrastructure
+* npm OIDC publish - upgrade to npm 11, unset NODE_AUTH_TOKEN ([a49ffdd](https://github.com/profclaw/profclaw/commit/a49ffddfc982a43245c23178d3d3d61eef5148db))
 
-* CI/CD: GitHub Actions with build+test+lint, release-please, Docker multi-arch, npm publish
-* OSS files: CONTRIBUTING.md, SECURITY.md, CODE_OF_CONDUCT.md, LICENSE (AGPL-3.0)
 
-## [1.0.0](https://github.com/profclaw/profclaw/releases/tag/v1.0.0) (2026-03-10)
+### Performance Improvements
+
+* parallel multi-arch Docker builds + pico image in CI ([5fd0d5c](https://github.com/profclaw/profclaw/commit/5fd0d5c3b5b0da877a879ac4636e202bdedc36d7))
+
+## [2.2.0](https://github.com/profclaw/profclaw/compare/v2.1.0...v2.2.0) (2026-04-13)
+
+
+### Features
+
+* pico auth bypass, docs overhaul, issue templates, quickstart guide ([#32](https://github.com/profclaw/profclaw/issues/32)) ([d80b7ac](https://github.com/profclaw/profclaw/commit/d80b7ac6b63a72cf163791138c99c13baca8ab39))
+* token optimization, Qwen 3 support, tool routing ([#30](https://github.com/profclaw/profclaw/issues/30)) ([6a3d2bd](https://github.com/profclaw/profclaw/commit/6a3d2bd91fd5b72514e5170a29d5a30e0548f315))
+
+
+### Bug Fixes
+
+* add missing @tiptap/core and @tiptap/suggestion to ui deps ([557abe1](https://github.com/profclaw/profclaw/commit/557abe109fe1f6ff71c1444fa1e53f93a6d24820))
+
+## [2.1.0](https://github.com/profclaw/profclaw/compare/v2.0.0...v2.1.0) (2026-04-11)
+
+
+### Features
+
+* engine hardening, Ink TUI, launch-ready enhancements ([#21](https://github.com/profclaw/profclaw/issues/21)) ([7bb38cf](https://github.com/profclaw/profclaw/commit/7bb38cf4006a2c68ec3c7cda70e8808964654c48))
+
+## [2.0.0](https://github.com/profclaw/profclaw/releases/tag/v2.0.0) (2026-03-14)
+
+Initial public beta release.
 
 ### Features
 
-* Initial release as GLINR Task Manager v1.0.0
-* AI agent task orchestration with 51+ built-in tools
-* 15+ AI provider support (Anthropic, OpenAI, Google, Azure, Ollama, etc.)
-* 4 chat channels (Slack, Discord, Telegram, WhatsApp)
-* GitHub, Jira, Linear integrations
-* MCP server for Model Context Protocol
-* Redis-backed BullMQ task queue
-* React 19 dashboard UI
+* **35 AI providers** - Anthropic, OpenAI, Google, Groq, Ollama, DeepSeek, Bedrock, and more
+* **22 chat channels** - Slack, Discord, Telegram, WhatsApp, iMessage, Matrix, Teams, and 15 more
+* **72 built-in tools** - file ops, git, browser automation, cron, web search, canvas, voice
+* **50 skills** - coding agent, GitHub issues, Notion, Obsidian, image gen, and more
+* **3 deployment modes** - pico (~140MB), mini (~145MB), pro (full features)
+* **MCP server** - native Model Context Protocol support (stdio + SSE)
+* **Voice I/O** - STT (Whisper) + TTS (ElevenLabs/OpenAI/system) + Talk Mode
+* **Plugin SDK** - build and share third-party plugins via npm
+* **Mode-aware routing** - API endpoints, tools, and capabilities gated by deployment mode
+* **In-memory queue** - BullMQ-compatible task queue without Redis for pico/mini modes
+* **Cost tracking** - per-token budget management with alerts at 50/80/100%
+* **Project management** - tickets, Kanban, sprints, burndown charts, GitHub/Jira/Linear sync
+
+### Chat Channels
+
+Slack, Discord, Telegram, WhatsApp, WebChat, Matrix, Google Chat, Microsoft Teams, iMessage, Signal, IRC, LINE, Mattermost, DingTalk, WeCom, Feishu/Lark, QQ, Nostr, Twitch, Zalo, Nextcloud Talk, Synology Chat
+
+### Integrations
+
+* GitHub (webhooks, OAuth, issue sync, PR automation)
+* Jira (webhooks, OAuth, issue sync, transitions)
+* Linear (webhooks, OAuth, issue sync)

package/CONTRIBUTING.md

@@ -50,7 +50,7 @@ Open a discussion or issue describing:
 
 1. Fork the repo and create a branch from `main`
 2. Follow the naming convention: `feat/description`, `fix/description`, `refactor/description`
-3. Write code following existing patterns (see `CLAUDE.md`)
+3. Write code following existing patterns (see `AGENTS.md` for conventions)
 4. Add tests for new features
 5. Ensure `pnpm build && pnpm test && pnpm lint` pass
 6. Submit a pull request
@@ -61,8 +61,6 @@ We use conventional commits:
 
 ```
 <type>: <description>
-
-Co-Authored-By: Your Name <your@email.com>
 ```
 
 Types: `feat`, `fix`, `perf`, `refactor`, `docs`, `test`
@@ -75,7 +73,7 @@ Types: `feat`, `fix`, `perf`, `refactor`, `docs`, `test`
 - Tailwind v4 for UI styling (no inline styles)
 - Lucide icons only
 - Zod validation at system boundaries
-- See `CLAUDE.md` for full conventions
+- See `AGENTS.md` for full conventions
 
 ## Architecture
 
@@ -86,7 +84,7 @@ src/
   core/          - Deployment modes, feature flags
   integrations/  - GitHub, Jira, Linear webhooks
   queue/         - BullMQ + in-memory task queue
-  providers/     - AI SDK providers (15+)
+  providers/     - AI SDK providers (35+)
   skills/        - Skill loader and registry
   types/         - Shared TypeScript types
 
@@ -114,6 +112,26 @@ skills/          - Built-in skill definitions
 2. Register in `src/chat/execution/tools/index.ts`
 3. Add tests
 
+## Release checklist
+
+For maintainers publishing a new version:
+
+1. Merge PRs to `main`
+2. Release-please auto-creates a release PR (bumps version, updates CHANGELOG)
+3. Merge the release PR. This creates a git tag and triggers npm publish via CI.
+4. Build and push Docker images locally:
+   ```bash
+   ./scripts/release-docker.sh
+   ```
+   The script builds both main and pico images, shows sizes, and asks before pushing to ghcr.io.
+5. Verify the release:
+   ```bash
+   npm info profclaw version        # npm
+   docker pull ghcr.io/profclaw/profclaw:latest  # Docker
+   ```
+
+Docker images are built locally (not in CI) to save GitHub Actions minutes. The script handles ghcr.io login via `gh auth`.
+
 ## License
 
 By contributing, you agree that your contributions will be licensed under the AGPL-3.0 license.

package/Dockerfile

@@ -1,7 +1,7 @@
 # ====================
 # Stage 1: Base
 # ====================
-FROM node:22-alpine AS base
+FROM node:22-slim AS base
 
 # Install pnpm
 RUN corepack enable && corepack prepare pnpm@latest --activate
@@ -19,60 +19,76 @@ RUN pnpm install --frozen-lockfile
 # Stage 3: Dependencies (UI)
 # ====================
 FROM base AS ui-deps
-WORKDIR /app/ui
-COPY ui/package.json ui/pnpm-lock.yaml* ./
-RUN pnpm install --frozen-lockfile
+WORKDIR /app
+# Workspace lockfile lives at root — copy both for pnpm resolution
+COPY pnpm-lock.yaml pnpm-workspace.yaml package.json ./
+COPY ui/package.json ./ui/
+RUN pnpm install --frozen-lockfile --filter ui
 
 # ====================
-# Stage 4: Build Backend (tsc only — UI is built in stage 5)
+# Stage 4: Build Backend (tsc only)
 # ====================
 FROM base AS build-backend
 COPY --from=deps /app/node_modules ./node_modules
 COPY . .
-RUN ./node_modules/.bin/tsc --project tsconfig.json
+RUN ./node_modules/.bin/tsc --project tsconfig.json --skipLibCheck
 
 # ====================
-# Stage 5: Build UI
+# Stage 5: Build UI (vite build)
 # ====================
 FROM base AS build-ui
 WORKDIR /app/ui
+COPY --from=ui-deps /app/node_modules ../node_modules
 COPY --from=ui-deps /app/ui/node_modules ./node_modules
 COPY ui/ ./
 RUN pnpm build
 
 # ====================
-# Stage 6: Production
+# Stage 6: Production dependencies (pruned)
+# ====================
+FROM base AS prod-deps
+COPY package.json pnpm-lock.yaml* ./
+RUN pnpm install --frozen-lockfile --prod && \
+    # Remove unnecessary files from node_modules to reduce image size
+    find node_modules -name "*.d.ts" -delete 2>/dev/null || true && \
+    find node_modules -name "*.map" -delete 2>/dev/null || true && \
+    find node_modules -name "README*" -delete 2>/dev/null || true && \
+    find node_modules -name "CHANGELOG*" -delete 2>/dev/null || true && \
+    find node_modules -name "LICENSE*" -delete 2>/dev/null || true && \
+    find node_modules -name ".npmignore" -delete 2>/dev/null || true && \
+    find node_modules -type d -name "test" -prune -exec rm -rf {} + 2>/dev/null || true && \
+    find node_modules -type d -name "tests" -prune -exec rm -rf {} + 2>/dev/null || true && \
+    find node_modules -type d -name "__tests__" -prune -exec rm -rf {} + 2>/dev/null || true
+
+# ====================
+# Stage 7: Production (pro mode - full features)
 # ====================
-FROM node:22-alpine AS production
+FROM node:22-slim AS production
 
-# Install Chromium for Playwright, git for agent sandbox, dev tools
-RUN apk add --no-cache \
+# Install runtime dependencies: Chromium for Playwright, git for agent sandbox
+RUN apt-get update && apt-get install -y --no-install-recommends \
     chromium \
-    nss \
-    freetype \
-    harfbuzz \
     ca-certificates \
-    ttf-freefont \
     curl \
     git \
-    && rm -rf /var/cache/apk/*
+    && rm -rf /var/lib/apt/lists/*
 
 # Enable pnpm via corepack (for agent sandbox: clone, build, lint)
 RUN corepack enable && corepack prepare pnpm@latest --activate
 
 # Set Playwright to use system Chromium
 ENV PLAYWRIGHT_SKIP_BROWSER_DOWNLOAD=1
-ENV PLAYWRIGHT_CHROMIUM_EXECUTABLE_PATH=/usr/bin/chromium-browser
+ENV PLAYWRIGHT_CHROMIUM_EXECUTABLE_PATH=/usr/bin/chromium
 
 # Create non-root user for security
-RUN addgroup -g 1001 -S profclaw && \
-    adduser -S profclaw -u 1001 -G profclaw
+RUN groupadd -g 1001 profclaw && \
+    useradd -u 1001 -g profclaw -s /bin/bash -m profclaw
 
 WORKDIR /app
 
-# Copy backend artifacts
+# Copy pruned production deps (smaller than full node_modules)
+COPY --from=prod-deps /app/node_modules ./node_modules
 COPY --from=build-backend /app/dist ./dist
-COPY --from=build-backend /app/node_modules ./node_modules
 COPY --from=build-backend /app/package.json ./
 
 # Copy runtime config (settings.yml for storage tier, queue, etc.)
@@ -90,13 +106,13 @@ RUN mkdir -p /app/data && \
     chmod +x /app/dist/cli/index.js 2>/dev/null || true && \
     chown -R profclaw:profclaw /app
 
-# Production environment
+# Production environment defaults (override via env_file or environment)
 ENV NODE_ENV=production
 ENV PORT=3000
 ENV PROFCLAW_MODE=pro
 
 # Health check
-HEALTHCHECK --interval=30s --timeout=10s --start-period=5s --retries=3 \
+HEALTHCHECK --interval=30s --timeout=10s --start-period=10s --retries=3 \
     CMD curl -f http://localhost:${PORT}/health || exit 1
 
 # Switch to non-root user