Skip to content
This repository was archived by the owner on Feb 14, 2026. It is now read-only.
Open
Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
26 commits
Select commit Hold shift + click to select a range
4bbc87b
Remove default config files and refresh docs
ksamaschke Jan 9, 2026
69db466
Remove best-practices references
ksamaschke Jan 9, 2026
55dd736
Refresh sample configs for v9
ksamaschke Jan 9, 2026
555368f
Ignore and remove summaries directory
ksamaschke Jan 9, 2026
24368f7
Remove unused test fixtures
ksamaschke Jan 9, 2026
43e848a
Remove obsolete agent docs
ksamaschke Jan 9, 2026
72bb51d
Update agents README for v9
ksamaschke Jan 9, 2026
0065329
Remove notes from behavior files
ksamaschke Jan 9, 2026
2782ff8
Remove legacy error support from icc-init-system
ksamaschke Jan 9, 2026
ac7e158
Rewrite agent definitions for v9
ksamaschke Jan 9, 2026
be62eec
Add XML tags to behavior files
ksamaschke Jan 9, 2026
30e3d34
Inline init-system docs and drop extra commands
ksamaschke Jan 9, 2026
a37f08d
Remove planning directory
ksamaschke Jan 9, 2026
adda9d4
Drop config.md legacy support
ksamaschke Jan 9, 2026
de53442
Tidy tests config env and clarify sample configs
ksamaschke Jan 9, 2026
7c88257
Clarify main-scope bypass and add test config
ksamaschke Jan 9, 2026
95c59be
Align config schema and loader to v9
ksamaschke Jan 9, 2026
a3c9027
Make config filtering type-aware and drop config dir
ksamaschke Jan 9, 2026
fd4720e
Fix git privacy patterns and safe flag rewrites
ksamaschke Jan 9, 2026
104d512
Fix privacy enforcement and align docs
ksamaschke Jan 9, 2026
b9a670f
Fix ansible lint scope and config docs
ksamaschke Jan 9, 2026
e70b4c5
Fix workflow YAML formatting
ksamaschke Jan 9, 2026
5048a9b
Align git privacy keys and docs
ksamaschke Jan 9, 2026
d7dbb55
Remove legacy git_privacy mapping
ksamaschke Jan 9, 2026
f8aa77d
Restore legacy git_privacy and fix yaml examples
ksamaschke Jan 9, 2026
af25198
Clarify legacy config examples
ksamaschke Jan 10, 2026
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
3 changes: 3 additions & 0 deletions .ansible-lint
Original file line number Diff line number Diff line change
@@ -0,0 +1,3 @@
exclude_paths:
- .github/workflows/
- src/agenttask-templates/
198 changes: 99 additions & 99 deletions .github/workflows/memory-check.yml
Original file line number Diff line number Diff line change
Expand Up @@ -11,108 +11,108 @@ jobs:
check-memory-files:
runs-on: ubuntu-latest
name: "🔒 Memory Privacy Protection"

steps:
- name: Checkout code
uses: actions/checkout@v4
with:
# Fetch full history for comprehensive checking
fetch-depth: 0

- name: Check repository for memory files
run: |
echo "🔍 Scanning repository for memory files..."

# Check if any memory files are tracked in git
TRACKED_MEMORY=$(git ls-files | grep -E "^memory/|\.memory$|\.learning$" || true)

if [ ! -z "$TRACKED_MEMORY" ]; then
echo ""
echo "❌ CRITICAL: Memory files found in repository!"
echo ""
echo "📋 Tracked memory files:"
echo "$TRACKED_MEMORY" | sed 's/^/ - /'
echo ""
echo "🔒 These files contain private learning data and violate memory privacy!"
echo ""
echo "🛠️ Immediate action required:"
echo " git rm -r memory/ # Remove from tracking"
echo " git rm *.memory *.learning # Remove memory files"
echo " git commit -m 'Remove memory files from tracking'"
echo ""
echo "ℹ️ Memory files should remain local-only as configured in .gitignore"
exit 1
fi

echo "✅ Repository scan complete - no tracked memory files found"

- name: Check PR diff for memory files (PR only)
if: github.event_name == 'pull_request'
run: |
echo ""
echo "🔍 Checking PR changes for memory files..."

# Get the target branch (usually main)
TARGET_BRANCH="${{ github.base_ref }}"

# Check files changed in this PR
CHANGED_MEMORY=$(git diff --name-only origin/$TARGET_BRANCH...HEAD | grep -E "^memory/|\.memory$|\.learning$" || true)

if [ ! -z "$CHANGED_MEMORY" ]; then
- name: Checkout code
uses: actions/checkout@v4
with:
# Fetch full history for comprehensive checking
fetch-depth: 0

- name: Check repository for memory files
run: |
echo "🔍 Scanning repository for memory files..."

# Check if any memory files are tracked in git
TRACKED_MEMORY=$(git ls-files | grep -E "^memory/|\.memory$|\.learning$" || true)

if [ ! -z "$TRACKED_MEMORY" ]; then
echo ""
echo "❌ CRITICAL: Memory files found in repository!"
echo ""
echo "📋 Tracked memory files:"
echo "$TRACKED_MEMORY" | sed 's/^/ - /'
echo ""
echo "🔒 These files contain private learning data and violate memory privacy!"
echo ""
echo "🛠️ Immediate action required:"
echo " git rm -r memory/ # Remove from tracking"
echo " git rm *.memory *.learning # Remove memory files"
echo " git commit -m 'Remove memory files from tracking'"
echo ""
echo "ℹ️ Memory files should remain local-only as configured in .gitignore"
exit 1
fi

echo "✅ Repository scan complete - no tracked memory files found"

- name: Check PR diff for memory files (PR only)
if: github.event_name == 'pull_request'
run: |
echo ""
echo "❌ PR BLOCKED: Memory files in pull request!"
echo "🔍 Checking PR changes for memory files..."

# Get the target branch (usually main)
TARGET_BRANCH="${{ github.base_ref }}"

# Check files changed in this PR
CHANGED_MEMORY=$(git diff --name-only origin/$TARGET_BRANCH...HEAD | grep -E "^memory/|\.memory$|\.learning$" || true)

if [ ! -z "$CHANGED_MEMORY" ]; then
echo ""
echo "❌ PR BLOCKED: Memory files in pull request!"
echo ""
echo "📋 Memory files in PR changes:"
echo "$CHANGED_MEMORY" | sed 's/^/ - /'
echo ""
echo "🔒 Memory files must never be included in pull requests."
echo ""
echo "🛠️ To fix this PR:"
echo " git rm --cached memory/ # Remove from staging"
echo " git rm --cached *.memory # Remove memory files"
echo " git rm --cached *.learning # Remove learning files"
echo " git commit -m 'Remove memory files from PR'"
echo " git push # Update PR"
echo ""
exit 1
fi

echo "✅ PR diff clean - no memory files in changes"

- name: Verify .gitignore protection
run: |
echo ""
echo "📋 Memory files in PR changes:"
echo "$CHANGED_MEMORY" | sed 's/^/ - /'
echo "🔍 Verifying .gitignore protection for memory files..."

# Check if memory patterns are properly ignored
if ! grep -q "^memory/" .gitignore; then
echo "⚠️ WARNING: memory/ not found in .gitignore"
fi

if ! grep -q "\*.memory" .gitignore; then
echo "⚠️ WARNING: *.memory pattern not found in .gitignore"
fi

if ! grep -q "\*.learning" .gitignore; then
echo "⚠️ WARNING: *.learning pattern not found in .gitignore"
fi

echo "✅ .gitignore verification complete"

- name: Security scan summary
run: |
echo ""
echo "🔒 Memory files must never be included in pull requests."
echo "🔒 MEMORY PROTECTION SUMMARY"
echo "=============================="
echo "✅ Repository scan: PASSED"
if [ "${{ github.event_name }}" = "pull_request" ]; then
echo "✅ PR diff scan: PASSED"
fi
echo "✅ .gitignore check: COMPLETED"
echo ""
echo "🛠️ To fix this PR:"
echo " git rm --cached memory/ # Remove from staging"
echo " git rm --cached *.memory # Remove memory files"
echo " git rm --cached *.learning # Remove learning files"
echo " git commit -m 'Remove memory files from PR'"
echo " git push # Update PR"
echo "🛡️ Multi-layer protection active:"
echo " - .gitignore: Prevents accidental staging"
echo " - Pre-commit hook: Local protection (.githooks/pre-commit)"
echo " - GitHub workflow: CI/CD protection (this check)"
echo ""
exit 1
fi

echo "✅ PR diff clean - no memory files in changes"

- name: Verify .gitignore protection
run: |
echo ""
echo "🔍 Verifying .gitignore protection for memory files..."

# Check if memory patterns are properly ignored
if ! grep -q "^memory/" .gitignore; then
echo "⚠️ WARNING: memory/ not found in .gitignore"
fi

if ! grep -q "\*.memory" .gitignore; then
echo "⚠️ WARNING: *.memory pattern not found in .gitignore"
fi

if ! grep -q "\*.learning" .gitignore; then
echo "⚠️ WARNING: *.learning pattern not found in .gitignore"
fi

echo "✅ .gitignore verification complete"

- name: Security scan summary
run: |
echo ""
echo "🔒 MEMORY PROTECTION SUMMARY"
echo "=============================="
echo "✅ Repository scan: PASSED"
if [ "${{ github.event_name }}" = "pull_request" ]; then
echo "✅ PR diff scan: PASSED"
fi
echo "✅ .gitignore check: COMPLETED"
echo ""
echo "🛡️ Multi-layer protection active:"
echo " - .gitignore: Prevents accidental staging"
echo " - Pre-commit hook: Local protection (.githooks/pre-commit)"
echo " - GitHub workflow: CI/CD protection (this check)"
echo ""
echo "✅ Memory privacy maintained!"
echo "✅ Memory privacy maintained!"
3 changes: 3 additions & 0 deletions .gitignore
Original file line number Diff line number Diff line change
Expand Up @@ -97,3 +97,6 @@ credentials/
secrets/memory/
stories/
bugs/

# Local summaries and reports
summaries/
Loading