release: v0.8.0-alpha.1 — OpenBrain integration, fleet pipeline, AX-10, hardening

.claude-plugin/marketplace.json

@@ -1,6 +1,6 @@
 {
-  "name": "dappcore-agent",
-  "description": "Agentic systems to work on the Lethean Network's dAppCore project",
+  "name": "core-agent",
+  "description": "Agentic systems to work on the Lethean Network's core project",
   "owner": {
     "name": "Lethean Community",
     "email": "hello@lethean.io"

.codex/config.toml

@@ -2,7 +2,7 @@
 # Shared between CLI and IDE extension
 
 model = "gpt-5.4"
-model_reasoning_effort = "extra-high"
+model_reasoning_effort = "xhigh"
 approval_policy = "on-request"
 sandbox_mode = "workspace-write"
 personality = "pragmatic"
@@ -12,7 +12,7 @@ personality = "pragmatic"
 
 [profiles.review]
 model = "gpt-5.4"
-model_reasoning_effort = "extra-high"
+model_reasoning_effort = "xhigh"
 approval_policy = "never"
 sandbox_mode = "read-only"
 
@@ -47,14 +47,9 @@ FORGE_TOKEN = "${FORGE_TOKEN}"
 CORE_BRAIN_KEY = "${CORE_BRAIN_KEY}"
 MONITOR_INTERVAL = "15s"
 
-# Local model providers
-[model_providers.ollama]
-name = "Ollama"
-base_url = "http://127.0.0.1:11434/v1"
-
-[model_providers.lmstudio]
-name = "LM Studio"
-base_url = "http://127.0.0.1:1234/v1"
+# Model providers: codex CLI 0.122+ ships built-in `ollama` and `lmstudio`
+# providers pointing at the same default localhost ports, so project-level
+# overrides are both redundant and rejected ("reserved built-in provider IDs").
 
 # Agent configuration
 [agents]

.core/reference/cli.go

@@ -103,7 +103,18 @@ func (cl *Cli) Run(args ...string) Result {
 				opts.Set(key, true)
 			}
 		} else if !IsFlag(arg) {
-			opts.Set("_arg", arg)
+			if !opts.Has("_arg") {
+				opts.Set("_arg", arg)
+			}
+			argsResult := opts.Get("_args")
+			args := []string{}
+			if argsResult.OK {
+				if existing, ok := argsResult.Value.([]string); ok {
+					args = append(args, existing...)
+				}
+			}
+			args = append(args, arg)
+			opts.Set("_args", args)
 		}
 	}
 

.core/reference/error.go

@@ -375,6 +375,11 @@ func (h *ErrorPanic) appendReport(report CrashReport) {
 	var reports []CrashReport
 	if data, err := os.ReadFile(h.filePath); err == nil {
 		if err := json.Unmarshal(data, &reports); err != nil {
+			Default().Error(Concat("crash report file corrupted path=", h.filePath, " err=", err.Error(), " raw=", string(data)))
+			backupPath := Concat(h.filePath, ".corrupt")
+			if backupErr := os.WriteFile(backupPath, data, 0600); backupErr != nil {
+				Default().Error(Concat("crash report backup failed path=", h.filePath, " err=", backupErr.Error()))
+			}
 			reports = nil
 		}
 	}

.core/reference/fs.go

@@ -177,10 +177,20 @@ func (m *Fs) WriteMode(p, content string, mode os.FileMode) Result {
 //	dir := fs.TempDir("agent-workspace")
 //	defer fs.DeleteAll(dir)
 func (m *Fs) TempDir(prefix string) string {
-	dir, err := os.MkdirTemp("", prefix)
+	root := m.root
+	if root == "" || root == "/" {
+		root = os.TempDir()
+	} else if err := os.MkdirAll(root, 0755); err != nil {
+		return ""
+	}
+	dir, err := os.MkdirTemp(root, prefix)
 	if err != nil {
 		return ""
 	}
+	if vp := m.validatePath(dir); !vp.OK {
+		os.RemoveAll(dir)
+		return ""
+	}
 	return dir
 }
 
@@ -358,15 +368,30 @@ func WriteAll(writer any, content string) Result {
 		return Result{E("core.WriteAll", "not a writer", nil), false}
 	}
 	_, err := wc.Write([]byte(content))
+	var closeErr error
 	if closer, ok := writer.(io.Closer); ok {
-		closer.Close()
+		closeErr = closer.Close()
 	}
 	if err != nil {
 		return Result{err, false}
 	}
+	if closeErr != nil {
+		return Result{closeErr, false}
+	}
 	return Result{OK: true}
 }
 
+func (m *Fs) isProtectedPath(full string) bool {
+	if full == "/" {
+		return true
+	}
+	home, err := os.UserHomeDir()
+	if err != nil || home == "" {
+		return false
+	}
+	return full == home
+}
+
 // CloseStream closes any value that implements io.Closer.
 //
 //	core.CloseStream(r.Value)
@@ -383,7 +408,7 @@ func (m *Fs) Delete(p string) Result {
 		return vp
 	}
 	full := vp.Value.(string)
-	if full == "/" || full == os.Getenv("HOME") {
+	if m.isProtectedPath(full) {
 		return Result{E("fs.Delete", Concat("refusing to delete protected path: ", full), nil), false}
 	}
 	if err := os.Remove(full); err != nil {
@@ -399,7 +424,7 @@ func (m *Fs) DeleteAll(p string) Result {
 		return vp
 	}
 	full := vp.Value.(string)
-	if full == "/" || full == os.Getenv("HOME") {
+	if m.isProtectedPath(full) {
 		return Result{E("fs.DeleteAll", Concat("refusing to delete protected path: ", full), nil), false}
 	}
 	if err := os.RemoveAll(full); err != nil {

.core/reference/runtime.go

@@ -153,8 +153,12 @@ func (r *Runtime) ServiceName() string { return "Core" }
 
 // ServiceStartup starts all services via the embedded Core.
 func (r *Runtime) ServiceStartup(ctx context.Context, options any) Result {
+	if r == nil || r.Core == nil {
+		return Result{OK: true}
+	}
 	return r.Core.ServiceStartup(ctx, options)
 }
+
 // ServiceShutdown stops all services via the embedded Core.
 func (r *Runtime) ServiceShutdown(ctx context.Context) Result {
 	if r.Core != nil {

.gitignore

@@ -10,3 +10,29 @@
 node_modules/
 bin/
 dist/
+.DS_Store
+Thumbs.db
+.Spotlight-V100
+.Trashes
+*.swp
+*.swo
+*~
+*.tmp
+.env
+.env.local
+.env.*.local
+__pycache__/
+*.pyc
+.venv/
+venv/
+build/
+*.exe
+*.dll
+*.so
+*.dylib
+*.a
+*.o
+*.class
+*.test
+coverage.out
+*.coverprofile

.gitleaksignore

@@ -0,0 +1,36 @@
+# gitleaks ignore — documented false positives
+#
+# Each line below is a gitleaks fingerprint for a finding that has been
+# manually reviewed and confirmed to be a documentation placeholder, test
+# constant, env-clearing call, or example-snippet — NOT a real secret.
+#
+# Filed: Mantis #325. Reviewer: argus + athena. 2026-04-25.
+#
+# Format per gitleaks: <commit_sha>:<file>:<rule>:<line>
+# The file is anchored to per-commit fingerprints so a future legitimate
+# leak in the same file/rule will still be caught.
+#
+# Why ignore:
+#   - php/docs/api-keys.md             — curl example with placeholder Bearer
+#   - php/View/Blade/admin/api-key-manager.blade.php — curl example
+#   - php/tests/Unit/ClaudeServiceTest.php — 'test-api-key' literal in tests
+#   - php/tests/Feature/AgentApiKeyTest.php — 'ak_test_key_*' test fixture
+#   - php/Services/AgentDetection.php — docblock example string
+#   - pkg/agentic/prep_test.go — t.Setenv("CORE_BRAIN_KEY", "") env-clear
+#   - pkg/orchestrator/security_test.go — MaskToken test fixture
+#   - src/php/* — older copies of the same files (pre-Burst migration)
+
+# pkg/agentic/prep_test.go (CORE_BRAIN_KEY env-clear)
+4fe1bf0aff66653a28625adde7df28f9b0b292ab:pkg/agentic/prep_test.go:generic-api-key:151
+726a384873dd17e1fb413fb8db9c8e63dd09b826:pkg/agentic/prep_test.go:generic-api-key:151
+da6d6cfa1a6e800364e576087524191e141b41d0:pkg/agentic/prep_test.go:generic-api-key:151
+
+# pkg/orchestrator/security_test.go (MaskToken test fixture)
+e90a84eaa01dccb9cbf5548bf057745eafa54243:pkg/orchestrator/security_test.go:generic-api-key:107
+
+# php/* + src/php/* fingerprints removed in release/v0.8.0-alpha.1:
+# the original pre-squash commit SHAs do not exist in the public github
+# mirror's history (CodeRabbit Mantis #929). Re-add fresh suppressions
+# with current-SHA fingerprints after the next gitleaks run on the
+# public clone confirms the same false-positives still surface in the
+# squash-shaped history.

.mcp.json

@@ -2,8 +2,8 @@
   "mcpServers": {
     "core": {
       "type": "stdio",
-      "command": "core-agent",
-      "args": ["mcp"]
+      "command": "core",
+      "args": ["mcp", "serve"]
     }
   }
 }

claude/camofox_mcp/README.md

@@ -0,0 +1,39 @@
+<!-- SPDX-License-Identifier: EUPL-1.2 -->
+
+# camofox-mcp
+
+`camofox-mcp` is a stdio MCP server that wraps the Camofox browser HTTP API for Claude Code.
+
+## Install
+
+Local editable install:
+
+```bash
+cd claude/camofox_mcp
+pip install -e .
+```
+
+Direct git install:
+
+```bash
+pip install "git+https://forge.lthn.ai/core/agent.git#subdirectory=claude/camofox_mcp"
+```
+
+## Claude Code
+
+```bash
+claude mcp add camofox -- camofox-mcp --camofox-url=http://localhost:8099 --api-key=$CAMOFOX_API_KEY
+```
+
+If `--api-key` is omitted, the server will read `CAMOFOX_API_KEY` from the environment.
+
+## Tools
+
+- `navigate(url)` opens a new tab and returns `{tab_id, status}`
+- `read_page(tab_id)` returns `{text, url, title}`
+- `screenshot(tab_id)` returns `{image_b64}`
+- `click(tab_id, selector)` returns `{ok}`
+- `fill(tab_id, selector, value)` returns `{ok}`
+- `close_tab(tab_id)` returns `{ok}`
+
+The server prefers the official Python `mcp` SDK when it is importable. If that package is unavailable at runtime, it falls back to a small stdio JSON-RPC MCP implementation that supports `initialize`, `tools/list`, and `tools/call`.

claude/camofox_mcp/__init__.py

@@ -0,0 +1,7 @@
+# SPDX-License-Identifier: EUPL-1.2
+
+"""Camofox MCP server package."""
+
+__all__ = ["__version__"]
+
+__version__ = "0.1.0"

claude/camofox_mcp/pyproject.toml

@@ -0,0 +1,26 @@
+# SPDX-License-Identifier: EUPL-1.2
+
+[build-system]
+requires = ["setuptools>=69", "wheel"]
+build-backend = "setuptools.build_meta"
+
+[project]
+name = "camofox-mcp"
+version = "0.1.0"
+description = "MCP stdio server exposing the Camofox browser HTTP API"
+readme = "README.md"
+requires-python = ">=3.11"
+dependencies = [
+    "mcp>=1.0.0",
+    "httpx>=0.28.0",
+    "pydantic>=2.0.0",
+]
+
+[project.scripts]
+camofox-mcp = "camofox_mcp.server:main"
+
+[tool.setuptools]
+packages = ["camofox_mcp"]
+
+[tool.setuptools.package-dir]
+camofox_mcp = "."