openadapt-desktop 0.2.0__tar.gz

openadapt_desktop-0.2.0/.github/workflows/build.yml

@@ -0,0 +1,106 @@
+# CI build + sign + release pipeline
+#
+# This workflow builds the Tauri application with bundled Python sidecar
+# for all supported platforms. On tag push, it creates a GitHub Release
+# with signed installers.
+#
+# See design doc Section 11 for the full CI/CD design.
+#
+# Build matrix:
+#   macOS Intel (x86_64)     -> DMG + .app bundle
+#   macOS Apple Silicon      -> DMG + .app bundle
+#   Windows x64              -> NSIS installer (.exe)
+#   Linux x64                -> AppImage + .deb
+#
+# TODO: This is a placeholder. Actual implementation requires:
+#   - Apple Developer certificate for macOS code signing + notarization
+#   - Windows Authenticode certificate for code signing
+#   - Tauri signing private key (Ed25519) for update verification
+#   - PyInstaller build step for the Python sidecar
+
+name: Build & Release
+
+on:
+  push:
+    tags: ["v*"]
+  pull_request:
+    branches: [main]
+
+jobs:
+  build-python-sidecar:
+    name: Build Python Sidecar
+    strategy:
+      matrix:
+        include:
+          - os: macos-14
+            target: x86_64-apple-darwin
+          - os: macos-14
+            target: aarch64-apple-darwin
+          - os: windows-latest
+            target: x86_64-pc-windows-msvc
+          - os: ubuntu-22.04
+            target: x86_64-unknown-linux-gnu
+    runs-on: ${{ matrix.os }}
+
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Install uv
+        uses: astral-sh/setup-uv@v4
+
+      - name: Set up Python 3.12
+        run: uv python install 3.12
+
+      - name: Install dependencies
+        run: uv sync --extra full
+
+      # TODO: Build Python sidecar with PyInstaller
+      # - name: Build sidecar
+      #   run: |
+      #     uv run pip install pyinstaller
+      #     uv run pyinstaller --onefile --name openadapt-engine engine/main.py
+
+      # - uses: actions/upload-artifact@v4
+      #   with:
+      #     name: sidecar-${{ matrix.target }}
+      #     path: dist/openadapt-engine*
+
+  # TODO: Uncomment when Tauri shell is implemented
+  # build-tauri:
+  #   name: Build Tauri App
+  #   needs: build-python-sidecar
+  #   strategy:
+  #     matrix:
+  #       include:
+  #         - os: macos-13
+  #           target: x86_64-apple-darwin
+  #         - os: macos-14
+  #           target: aarch64-apple-darwin
+  #         - os: windows-latest
+  #           target: x86_64-pc-windows-msvc
+  #         - os: ubuntu-22.04
+  #           target: x86_64-unknown-linux-gnu
+  #   runs-on: ${{ matrix.os }}
+  #
+  #   steps:
+  #     - uses: actions/checkout@v4
+  #     - uses: actions/download-artifact@v4
+  #       with:
+  #         name: sidecar-${{ matrix.target }}
+  #         path: src-tauri/binaries/
+  #     - uses: tauri-apps/tauri-action@v0
+  #       env:
+  #         GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+  #         TAURI_SIGNING_PRIVATE_KEY: ${{ secrets.TAURI_SIGNING_PRIVATE_KEY }}
+  #         # macOS signing
+  #         APPLE_CERTIFICATE: ${{ secrets.APPLE_CERTIFICATE }}
+  #         APPLE_CERTIFICATE_PASSWORD: ${{ secrets.APPLE_CERTIFICATE_PASSWORD }}
+  #         APPLE_SIGNING_IDENTITY: ${{ secrets.APPLE_SIGNING_IDENTITY }}
+  #         APPLE_ID: ${{ secrets.APPLE_ID }}
+  #         APPLE_PASSWORD: ${{ secrets.APPLE_PASSWORD }}
+  #         APPLE_TEAM_ID: ${{ secrets.APPLE_TEAM_ID }}
+  #       with:
+  #         tagName: v__VERSION__
+  #         releaseName: "OpenAdapt Desktop v__VERSION__"
+  #         releaseBody: "See the changelog for details."
+  #         releaseDraft: true

openadapt_desktop-0.2.0/.github/workflows/notify-docs.yml

@@ -0,0 +1,14 @@
+name: Notify docs
+on:
+  push:
+    branches: [main]
+jobs:
+  notify:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: peter-evans/repository-dispatch@v3
+        with:
+          token: ${{ secrets.DOCS_DISPATCH_TOKEN }}
+          repository: OpenAdaptAI/openadapt-maintenance
+          event-type: repo-updated
+          client-payload: '{"repo": "${{ github.repository }}", "sha": "${{ github.sha }}"}'

openadapt_desktop-0.2.0/.github/workflows/release.yml

@@ -0,0 +1,63 @@
+name: Release and PyPI Publish
+
+# Requires ADMIN_TOKEN secret (GitHub PAT with repo scope) to push release
+# commits to protected branches. Without it, the tag gets created but the
+# version bump commit is rejected by branch protection, orphaning the tag.
+
+on:
+  push:
+    branches:
+      - main
+
+jobs:
+  release:
+    runs-on: ubuntu-latest
+    concurrency: release
+    permissions:
+      id-token: write
+      contents: write
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+          token: ${{ secrets.ADMIN_TOKEN }}
+
+      - name: Check if should skip
+        id: check_skip
+        run: |
+          if [ "$(git log -1 --pretty=format:'%an')" = "semantic-release" ]; then
+            echo "skip=true" >> $GITHUB_OUTPUT
+          fi
+
+      - name: Set up Python
+        if: steps.check_skip.outputs.skip != 'true'
+        uses: actions/setup-python@v5
+        with:
+          python-version: '3.12'
+
+      - name: Install uv
+        if: steps.check_skip.outputs.skip != 'true'
+        uses: astral-sh/setup-uv@v4
+
+      - name: Python Semantic Release
+        if: steps.check_skip.outputs.skip != 'true'
+        id: release
+        uses: python-semantic-release/python-semantic-release@v9.15.2
+        with:
+          github_token: ${{ secrets.ADMIN_TOKEN }}
+
+      - name: Build package
+        if: steps.check_skip.outputs.skip != 'true' && steps.release.outputs.released == 'true'
+        run: uv build
+
+      - name: Publish to PyPI
+        if: steps.check_skip.outputs.skip != 'true' && steps.release.outputs.released == 'true'
+        uses: pypa/gh-action-pypi-publish@release/v1
+
+      - name: Publish to GitHub Releases
+        if: steps.check_skip.outputs.skip != 'true' && steps.release.outputs.released == 'true'
+        uses: python-semantic-release/publish-action@v9.15.2
+        with:
+          github_token: ${{ secrets.ADMIN_TOKEN }}

openadapt_desktop-0.2.0/.github/workflows/test.yml

@@ -0,0 +1,47 @@
+name: Test
+
+on:
+  push:
+    branches: [main]
+  pull_request:
+    branches: [main]
+
+jobs:
+  test-python:
+    name: Python Engine Tests
+    strategy:
+      matrix:
+        os: [macos-latest, windows-latest, ubuntu-latest]
+        python-version: ["3.11", "3.12"]
+    runs-on: ${{ matrix.os }}
+
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Install uv
+        uses: astral-sh/setup-uv@v4
+
+      - name: Set up Python ${{ matrix.python-version }}
+        run: uv python install ${{ matrix.python-version }}
+
+      - name: Install dependencies
+        run: uv sync --extra dev
+
+      - name: Lint
+        run: uv run ruff check engine/ tests/
+
+      - name: Run tests
+        run: uv run pytest tests/ -v
+
+  # TODO: Add Rust/Tauri tests when implemented
+  # test-tauri:
+  #   name: Tauri Build Check
+  #   strategy:
+  #     matrix:
+  #       os: [macos-latest, windows-latest, ubuntu-latest]
+  #   runs-on: ${{ matrix.os }}
+  #   steps:
+  #     - uses: actions/checkout@v4
+  #     - uses: dtolnay/rust-toolchain@stable
+  #     - name: Check Rust compilation
+  #       run: cd src-tauri && cargo check

openadapt_desktop-0.2.0/.gitignore

@@ -0,0 +1,64 @@
+# Python
+__pycache__/
+*.py[cod]
+*$py.class
+*.so
+*.egg-info/
+*.egg
+dist/
+build/
+.eggs/
+*.whl
+.venv/
+venv/
+.uv/
+
+# Rust / Cargo
+src-tauri/target/
+**/*.rs.bk
+
+# Node.js
+node_modules/
+npm-debug.log*
+yarn-debug.log*
+yarn-error.log*
+
+# Tauri
+src-tauri/target/
+src-tauri/WixTools/
+src-tauri/icons/*.ico
+src-tauri/icons/*.icns
+
+# IDE
+.vscode/
+.idea/
+*.swp
+*.swo
+*~
+.DS_Store
+
+# Environment
+.env
+.env.local
+.env.*.local
+
+# Testing
+.pytest_cache/
+.coverage
+htmlcov/
+.mypy_cache/
+
+# PyInstaller
+*.spec
+
+# Captures (user data, never committed)
+captures/
+archive/
+tombstones/
+
+# Audit logs
+audit.jsonl
+
+# OS
+Thumbs.db
+Desktop.ini

openadapt_desktop-0.2.0/CHANGELOG.md

@@ -0,0 +1,166 @@
+# CHANGELOG
+
+
+## v0.2.0 (2026-03-04)
+
+### Features
+
+- Add `openadapt doctor` command and fix audit/wormhole bugs
+  ([#8](https://github.com/OpenAdaptAI/openadapt-desktop/pull/8),
+  [`f5cb841`](https://github.com/OpenAdaptAI/openadapt-desktop/commit/f5cb841acd70dbc3c57ba752e8bd3f6f8763adde))
+
+Add diagnostic command that checks all dependencies and configuration: - Python version, data
+  directory writability, database connectivity - Core deps: openadapt-capture, openadapt-privacy,
+  psutil - Optional deps: boto3, huggingface_hub, magic-wormhole - Backend credentials (S3 keys, HF
+  token) when configured - Shows actionable install instructions for missing dependencies
+
+Bug fixes: - audit.py: create parent directory before writing log entries - wormhole.py: use
+  subprocess.run() instead of Popen to await completion and capture exit code properly
+
+Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>
+
+
+## v0.1.1 (2026-03-04)
+
+### Bug Fixes
+
+- Replace deprecated macos-13 runner with macos-14
+  ([#7](https://github.com/OpenAdaptAI/openadapt-desktop/pull/7),
+  [`bac0856`](https://github.com/OpenAdaptAI/openadapt-desktop/commit/bac0856958dd2c6c472253f47d0a83be5453f8ba))
+
+* fix: replace deprecated macos-13 runner with macos-14 in build workflow
+
+macos-13 runners have been deprecated by GitHub Actions, causing the Build Python Sidecar job to
+  fail on every PR. Both macOS targets now use macos-14 (Apple Silicon), which supports x86_64
+  builds via Rosetta.
+
+Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
+
+* fix: flaky concurrent reads test and deprecated macos-13 runner
+
+- test_concurrent_reads: use separate IndexDB connections per thread (WAL concurrent reads require
+  separate connections, not a shared one) - build.yml: replace macos-13 with macos-14 (deprecated
+  runner)
+
+---------
+
+Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>
+
+### Continuous Integration
+
+- Add automated release workflow with python-semantic-release
+  ([#6](https://github.com/OpenAdaptAI/openadapt-desktop/pull/6),
+  [`1a3c4b8`](https://github.com/OpenAdaptAI/openadapt-desktop/commit/1a3c4b8c81c3a6ddad9e0f2ee1aca76c079a1c5e))
+
+Add release.yml workflow triggered on push to main that: - Runs python-semantic-release v9.15.2 to
+  determine version bumps from conventional commit messages (feat=minor, fix/perf=patch) - Builds
+  with uv and publishes to PyPI (trusted publishing) - Creates GitHub releases with changelogs -
+  Uses ADMIN_TOKEN to push through branch protection - Skips semantic-release's own commits to
+  prevent infinite loops
+
+Also adds semantic_release config to pyproject.toml with version_toml + version_variables for dual
+  version tracking (pyproject.toml + engine/__init__.py).
+
+Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>
+
+
+## v0.1.0 (2026-03-03)
+
+### Bug Fixes
+
+- Add hatch build config, fix lint errors and workflow ordering
+  ([#1](https://github.com/OpenAdaptAI/openadapt-desktop/pull/1),
+  [`e899e41`](https://github.com/OpenAdaptAI/openadapt-desktop/commit/e899e412cdd0fa4f6999a10e077496b95bab6822))
+
+- Add [tool.hatch.build.targets.wheel] packages = ["engine"] so hatchling can find the Python
+  package - Fix ruff import sorting in test_backends.py and test_scrubber.py - Remove unused
+  StorageBackend import from test_backends.py - Move Xvfb setup step before test run in CI workflow
+  - Add uv.lock for reproducible builds
+
+Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>
+
+- Remove premature screenshot generation and Playwright UI tests
+  ([#3](https://github.com/OpenAdaptAI/openadapt-desktop/pull/3),
+  [`2e6c874`](https://github.com/OpenAdaptAI/openadapt-desktop/commit/2e6c874aea15ccbd96a42ba42cf547b06185b218))
+
+Remove: - screenshots/ (fake screenshots of non-functional placeholder HTML) -
+  scripts/generate_screenshots.py (generates screenshots of stubs) - tests/test_e2e/test_ui.py
+  (Playwright tests against placeholder HTML) - tests/test_e2e/test_screenshots.py (tests for the
+  screenshot generator) - pytest-playwright dependency - Xvfb CI step
+
+Keep: - tests/test_e2e/test_ipc.py (tests real IPC protocol code) - All engine tests (test real
+  business logic) - README (without screenshot section) - CLAUDE.md
+
+Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>
+
+### Features
+
+- Add docs sync trigger ([#4](https://github.com/OpenAdaptAI/openadapt-desktop/pull/4),
+  [`62d3da2`](https://github.com/OpenAdaptAI/openadapt-desktop/commit/62d3da207e7cc2c1b16c2cf0851add5eb3532547))
+
+- Add README, screenshots, e2e tests, and automated screenshot generation
+  ([#2](https://github.com/OpenAdaptAI/openadapt-desktop/pull/2),
+  [`fa00a22`](https://github.com/OpenAdaptAI/openadapt-desktop/commit/fa00a22d95391dcc1f7ddaf337316e000ab28d22))
+
+* docs: add README and CLAUDE.md
+
+- Comprehensive README with architecture, state machine, storage backends, project structure,
+  configuration reference, and development guide - CLAUDE.md with project conventions and file map
+
+Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
+
+* feat: add screenshots, e2e tests, and automated screenshot generation
+
+- Add Playwright-based UI tests for all HTML pages (dashboard, review, settings) - Add IPC protocol
+  e2e tests (response format, error handling, event format) - Add automated screenshot generation
+  script with mock data injection - Generate 4 documentation screenshots (idle, recording, review,
+  settings) - Add screenshots to README with raw.githubusercontent.com URLs - Add pytest-playwright
+  to dev dependencies - Update CI to install Playwright browsers - Update ruff config to allow long
+  lines in scripts/ (inline HTML)
+
+52 tests passing (26 engine + 7 IPC + 5 screenshot + 11 UI + 3 viewport)
+
+---------
+
+Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>
+
+- Implement end-to-end engine with CLI
+  ([#5](https://github.com/OpenAdaptAI/openadapt-desktop/pull/5),
+  [`400df35`](https://github.com/OpenAdaptAI/openadapt-desktop/commit/400df3577008edc2b0fd21afe4ed98a8d8e31155))
+
+* feat: implement end-to-end engine with CLI
+
+Replace all NotImplementedError stubs with working implementations across the entire Python engine.
+  The full pipeline now works: record -> scrub -> review -> upload.
+
+New files: - engine/db.py: SQLite index database (WAL mode, captures + upload_jobs) - engine/cli.py:
+  13-command argparse CLI entry point - engine/__main__.py: python -m engine support -
+  tests/test_engine/test_db.py: 11 database tests - tests/test_engine/test_upload.py: 7 upload
+  manager tests - tests/test_engine/test_monitor.py: 5 health monitor tests -
+  tests/test_engine/test_cli.py: 8 CLI tests - tests/test_e2e/test_pipeline.py: 3 end-to-end
+  pipeline tests
+
+Implemented modules: - controller.py: recording lifecycle with openadapt-capture, crash recovery -
+  scrubber.py: regex PII scrubbing (email/CC/SSN/phone/IP), Presidio fallback - review.py:
+  DB-persisted egress gating with audit logging - storage_manager.py: hot/warm/cold tiers, tar.gz
+  archival, cleanup - upload_manager.py: persistent queue, egress checks, multi-backend dispatch -
+  monitor.py: memory + disk monitoring with daemon threads - backends/s3.py: boto3
+  upload/delete/list/verify - backends/huggingface.py: huggingface_hub upload/delete/list/verify -
+  backends/wormhole.py: subprocess-based wormhole send
+
+Test results: 106 passed, 0 skipped (up from 33 passed, 17 skipped)
+
+Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
+
+* fix: use uv run prefix in README Quick Start
+
+---------
+
+Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>
+
+- Initial repo scaffold
+  ([`b14c32e`](https://github.com/OpenAdaptAI/openadapt-desktop/commit/b14c32e4fe53e8fd41fa52848236a3b646e2af74))
+
+Tauri 2.x shell + Python sidecar architecture. See DESIGN.md for comprehensive design document.
+
+Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

openadapt_desktop-0.2.0/CLAUDE.md

@@ -0,0 +1,79 @@
+# Claude Code Instructions for openadapt-desktop
+
+## MANDATORY: Branches and Pull Requests
+
+**NEVER push directly to main. ALWAYS use feature branches and pull requests.**
+
+1. Create a feature branch: `git checkout -b feat/description` or `fix/description`
+2. Make commits on the branch
+3. Push the branch: `git push -u origin branch-name`
+4. Create a PR: `gh pr create --title "..." --body "..."`
+5. Only merge via PR (never `git push origin main`)
+
+### PR Titles MUST Use Conventional Commit Format
+
+```
+fix: short description          -> patch bump (0.0.x)
+feat: short description         -> minor bump (0.x.0)
+fix(scope): short description   -> patch bump with scope
+feat!: breaking change          -> major bump (x.0.0)
+```
+
+**Types**: feat, fix, docs, style, refactor, perf, test, chore, ci
+
+---
+
+## Overview
+
+Cross-platform desktop app for continuous screen recording and AI training data collection. Built with Tauri 2.x (Rust shell) + Python sidecar (recording engine).
+
+## Quick Start
+
+```bash
+uv sync --extra dev
+uv run pytest tests/ -v
+uv run ruff check engine/ tests/
+```
+
+## Architecture
+
+Two-process model:
+- **Tauri shell** (Rust + WebView): system tray, native window, IPC dispatch
+- **Python engine** (sidecar): recording, scrubbing, storage, upload
+
+Communication via JSON-over-stdin/stdout IPC protocol (see DESIGN.md Appendix B).
+
+## Key Design Decisions
+
+1. **Raw-then-review scrubbing**: Recordings saved raw to disk. Scrubbing is a separate user-reviewed step. `check_egress_allowed()` gates ALL outbound paths.
+2. **Build-time trust**: Tauri Cargo.toml feature flags physically exclude upload code. Enterprise binary verifiable with `strings`.
+3. **Multiple storage backends**: StorageBackend protocol in `engine/backends/protocol.py`. All backends conform to the same interface.
+4. **Network audit logging**: Every outbound request logged to `audit.jsonl` (JSONL format).
+
+## File Map
+
+| File | Purpose |
+|------|---------|
+| `engine/controller.py` | Recording lifecycle (start/stop/pause) |
+| `engine/review.py` | Upload review state machine (the egress gate) |
+| `engine/scrubber.py` | PII scrubbing orchestration |
+| `engine/config.py` | Settings (pydantic-settings, OPENADAPT_ prefix) |
+| `engine/audit.py` | Network audit logger |
+| `engine/backends/protocol.py` | StorageBackend protocol definition |
+| `engine/backends/s3.py` | S3/R2/MinIO backend |
+| `src-tauri/src/commands.rs` | IPC commands (13 endpoints) |
+| `src-tauri/src/main.rs` | Tauri entry point |
+| `DESIGN.md` | Comprehensive design document (v2.0, 1800 lines) |
+
+## Running Tests
+
+```bash
+uv run pytest tests/ -v              # all tests
+uv run ruff check engine/ tests/     # lint
+```
+
+## Dependencies
+
+- Python: `openadapt-capture` (recording), `openadapt-privacy` (scrubbing), `pydantic-settings`
+- Rust: `tauri`, `tauri-plugin-shell`, `tauri-plugin-notification`, `tauri-plugin-updater`
+- Optional: `boto3` (S3), `huggingface_hub`, `flwr` + `torch` (federated)