- Go 95%
- Shell 3%
- Makefile 2%
|
Some checks are pending
ci / test (push) Waiting to run
ci / lint (push) Waiting to run
ci / govulncheck (push) Waiting to run
ci / docs (push) Waiting to run
codeql / analyze (go) (push) Waiting to run
pages / build (push) Waiting to run
pages / deploy (push) Blocked by required conditions
closes #49 |
||
|---|---|---|
| .agent-guard | ||
| .github | ||
| deploy | ||
| docs | ||
| examples/serve | ||
| scripts | ||
| webops | ||
| .gitignore | ||
| .golangci.yaml | ||
| .pre-commit-config.yaml | ||
| AGENTS.md | ||
| CODE_OF_CONDUCT.md | ||
| CONTRIBUTING.md | ||
| go.mod | ||
| go.sum | ||
| godoc-current.txt | ||
| LICENSE | ||
| Makefile | ||
| mkdocs-requirements.txt | ||
| mkdocs.yml | ||
| README.md | ||
| SECURITY.md | ||
| staticcheck.conf | ||
cli-web-ops
⚠️ A CLI-to-RCE bridge by construction. Read
docs/FEATURES.mdbefore deploying. Default scaffolding refuses to bind any non-Tailscale interface.
cli-web-ops is a mobile-first MCP-client web executor for Model Context Protocol servers (typically cli-mcp projecting a urfave/cli v3 command tree), featuring:
- never invokes a CLI directly; every action routes through the MCP server (trust boundary)
- annotation-driven mobile favorites via
tool.Meta["webops.*"]stamped by cli-mcp - one-page experience: description (Markdown via goldmark) + form (from JSON Schema) + SSE output stream
/docsroute renders the full reference; shell shared with cli-web-docs- Tailscale binding gate refuses public listeners by default
Dangerously*-prefixed safety opt-outs so call sites read as the alarm they are- pluggable
Authinterface; production path is Caddy-in-front (seedeploy/Caddyfile.example)
Documentation
See docs/FEATURES.md for a feature inventory and the full threat model, examples/serve/ for a runnable dev-local demo, and deploy/Caddyfile.example for the recommended production posture. Local dev verbs live in .agent-guard/agent-guard.yaml; agent-guard lint validates that against the Makefile.
Support
If you found a bug or have a feature request, create a new issue. Participation in this community is governed by the Code of Conduct. Security disclosures go through SECURITY.md.
Sibling repos in the cli-* family: cli-guard, cli-mcp, cli-web-docs.
License
See LICENSE.
See also
- AGENTS.md - agent-facing operating rules.
- docs/FEATURES.md - inventory of what ships today.
- .agent-guard/agent-guard.yaml - allowlisted commands.
Cross-reference convention from coilysiren/agentic-os#59.