No description
  • Go 95%
  • Shell 3%
  • Makefile 2%
Find a file
Kai Siren f5f49127b3
Some checks are pending
ci / test (push) Waiting to run
ci / lint (push) Waiting to run
ci / govulncheck (push) Waiting to run
ci / docs (push) Waiting to run
codeql / analyze (go) (push) Waiting to run
pages / build (push) Waiting to run
pages / deploy (push) Blocked by required conditions
chore(ci): remove codex-review-gate + undraft-and-poke-codex workflows
closes #49
2026-05-16 15:42:18 -07:00
.agent-guard rename: update cross-repo refs after coilyco-ai to agentic-os-kai 2026-05-15 02:28:21 -07:00
.github chore(ci): remove codex-review-gate + undraft-and-poke-codex workflows 2026-05-16 15:42:18 -07:00
deploy Add deploy/Caddyfile.example + Caddy-in-front rationale 2026-05-13 05:01:59 -07:00
docs chore: complete trifecta + re-enable catalog-doc-size + catalog-trifecta 2026-05-15 23:43:50 -07:00
examples/serve Fix strict lint findings 2026-05-13 06:04:58 -07:00
scripts chore: adopt coilysiren/agentic-os v0.2.1 upstream-ref pre-commit suite 2026-05-15 23:33:57 -07:00
webops Add godoc Example_* functions; remove UPSTREAM-CANDIDATES.md 2026-05-13 06:17:48 -07:00
.gitignore Repository hygiene sweep: tier-A + CONTRIBUTING + godoc-current + auto-merge 2026-05-13 05:48:24 -07:00
.golangci.yaml Adopt coily's strict .golangci.yaml + pre-commit 2026-05-13 05:59:45 -07:00
.pre-commit-config.yaml chore: complete trifecta + re-enable catalog-doc-size + catalog-trifecta 2026-05-15 23:43:50 -07:00
AGENTS.md chore: complete trifecta + re-enable catalog-doc-size + catalog-trifecta 2026-05-15 23:43:50 -07:00
CODE_OF_CONDUCT.md Adopt Contributor Covenant 2.1 as Code of Conduct 2026-05-13 05:31:37 -07:00
CONTRIBUTING.md Move .coily/coily.yaml to .agent-guard/agent-guard.yaml 2026-05-14 06:53:52 -07:00
go.mod Bump github.com/yuin/goldmark in the go-deps group across 1 directory (#30) 2026-05-13 17:30:39 +00:00
go.sum Bump github.com/yuin/goldmark in the go-deps group across 1 directory (#30) 2026-05-13 17:30:39 +00:00
godoc-current.txt Repository hygiene sweep: tier-A + CONTRIBUTING + godoc-current + auto-merge 2026-05-13 05:48:24 -07:00
LICENSE Scaffold cli-web-ops: mobile-first web executor over Tailscale 2026-05-13 04:35:24 -07:00
Makefile Repository hygiene sweep: tier-A + CONTRIBUTING + godoc-current + auto-merge 2026-05-13 05:48:24 -07:00
mkdocs-requirements.txt Add mkdocs (urfave palette) + docs CI verification 2026-05-13 05:28:46 -07:00
mkdocs.yml Repository hygiene sweep: tier-A + CONTRIBUTING + godoc-current + auto-merge 2026-05-13 05:48:24 -07:00
README.md chore: complete trifecta + re-enable catalog-doc-size + catalog-trifecta 2026-05-15 23:43:50 -07:00
SECURITY.md Add SECURITY.md (urfave shape) + nav and Support links 2026-05-13 05:36:35 -07:00
staticcheck.conf Adopt urfave-shaped README + trifecta + staticcheck.conf 2026-05-13 05:23:21 -07:00

cli-web-ops

Go Reference Go Report Card Tests status

⚠️ A CLI-to-RCE bridge by construction. Read docs/FEATURES.md before deploying. Default scaffolding refuses to bind any non-Tailscale interface.

cli-web-ops is a mobile-first MCP-client web executor for Model Context Protocol servers (typically cli-mcp projecting a urfave/cli v3 command tree), featuring:

  • never invokes a CLI directly; every action routes through the MCP server (trust boundary)
  • annotation-driven mobile favorites via tool.Meta["webops.*"] stamped by cli-mcp
  • one-page experience: description (Markdown via goldmark) + form (from JSON Schema) + SSE output stream
  • /docs route renders the full reference; shell shared with cli-web-docs
  • Tailscale binding gate refuses public listeners by default
  • Dangerously*-prefixed safety opt-outs so call sites read as the alarm they are
  • pluggable Auth interface; production path is Caddy-in-front (see deploy/Caddyfile.example)

Documentation

See docs/FEATURES.md for a feature inventory and the full threat model, examples/serve/ for a runnable dev-local demo, and deploy/Caddyfile.example for the recommended production posture. Local dev verbs live in .agent-guard/agent-guard.yaml; agent-guard lint validates that against the Makefile.

Support

If you found a bug or have a feature request, create a new issue. Participation in this community is governed by the Code of Conduct. Security disclosures go through SECURITY.md.

Sibling repos in the cli-* family: cli-guard, cli-mcp, cli-web-docs.

License

See LICENSE.

See also

Cross-reference convention from coilysiren/agentic-os#59.