Gitea rejects secret names starting with GITEA_ (reserved for built-in
secrets). Rename to REGISTRY_TOKEN in both the workflow and the README
setup instructions, and add a comment noting the constraint.
Co-Authored-By: Claude Opus 4 <noreply@anthropic.com>
Add .gitea/workflows/build-and-push.yml that builds and pushes the Docker
image to git.hty1024.com/hty1024/ai-app-ops-tools on three triggers: push
to main, push of a v*.*.* tag, and manual workflow_dispatch with an
optional custom tag. Uses docker/metadata-action to derive sensible tags
(branch name, semver, short sha, latest on default branch) and registry-
backed Buildx cache to speed up repeated builds.
README gains a CI/CD section covering trigger rules, one-time setup
(runner registration + GITEA_TOKEN secret with write:package scope), and
how to pull / consume the published image.
Co-Authored-By: Claude Opus 4 <noreply@anthropic.com>
Add a single-service docker-compose setup with bind-mounted config /
templates / apps / playbooks / data so users can iterate on inventory and
intents without rebuilding the image. Dockerfile uses python:3.12-slim
with tini for clean signal handling, and ships openssh-client for in-
container troubleshooting. Health check hits the /health endpoint.
README documents project background, the L1-L5 architecture, both local
and Docker deployment paths, configuration keys, intent template
extension, and the safety model.
Co-Authored-By: Claude Opus 4 <noreply@anthropic.com>
Scaffold an MVP of the natural-language ops terminal: inventory + intent
template registry, SSH/WinRM/local connectors, risk-gated executor with
SQLite audit log, Claude-driven agent layer using Function Calling, plus a
Typer CLI and FastAPI surface.
Includes 10 cross-OS intents (disk/system/service) and example inventory.
Verified end-to-end on the local Windows host: hosts/intents listing,
check_disk_usage execution, and WRITE-class confirmation gating.
Co-Authored-By: Claude Opus 4 <noreply@anthropic.com>