Dev/v0.2

.env.example

@@ -6,7 +6,13 @@ ANTHROPIC_API_KEY=your_anthropic_api_key_here
 # Optional: Server Configuration
 HOST=0.0.0.0
 PORT=8000
-LOG_LEVEL=INFO
+
+# Optional: Logging Configuration (centralized)
+LOGGING__LEVEL=INFO
+LOGGING__FORMAT=auto
+LOGGING__FILE=/tmp/ccproxy/ccproxy.log
+LOGGING__VERBOSE_API=false
+LOGGING__PLUGIN_LOG_BASE_DIR=/tmp/ccproxy
 
 # Optional: Security Configuration
 CLAUDE_USER=claude
@@ -27,5 +33,6 @@ RATE_LIMIT_WINDOW=60
 # Optional: Request Timeout
 REQUEST_TIMEOUT=300
 
-# Optional: CORS Origins (comma-separated)
-CORS_ORIGINS=*
+# Optional: CORS Origins (comma-separated, avoid using '*' for security)
+# Examples: http://localhost:3000,https://app.example.com
+CORS_ORIGINS=http://localhost:3000,http://localhost:8080,http://127.0.0.1:3000,http://127.0.0.1:8080

.github/workflows/backend.yml

@@ -8,7 +8,7 @@ on:
       - "tests/**"
       - "pyproject.toml"
       - "uv.lock"
-      - "Makefile"
+      - "Taskfile"
       - ".github/workflows/backend.yml"
   pull_request:
     branches: [main, dev]
@@ -17,7 +17,7 @@ on:
       - "tests/**"
       - "pyproject.toml"
       - "uv.lock"
-      - "Makefile"
+      - "Taskfile"
       - ".github/workflows/backend.yml"
   workflow_dispatch:
 
@@ -39,7 +39,7 @@ jobs:
         run: uv python install
 
       - name: Install dependencies
-        run: make dev-install
+        run: ./Taskfile dev-install
 
       - name: Cache mypy
         uses: actions/cache@v4
@@ -50,7 +50,7 @@ jobs:
             mypy-${{ runner.os }}-
 
       - name: Run quality checks
-        run: make check
+        run: ./Taskfile check
 
   tests:
     runs-on: ubuntu-latest
@@ -74,10 +74,10 @@ jobs:
         run: uv python install ${{ matrix.python-version }}
 
       - name: Install dependencies
-        run: make dev-install
+        run: ./Taskfile dev-install
 
       - name: Run unit tests
-        run: make test-unit
+        run: ./Taskfile test-unit
 
       - name: Upload coverage reports
         if: matrix.python-version == '3.11'
@@ -106,10 +106,10 @@ jobs:
         run: uv python install
 
       - name: Install dependencies
-        run: make dev-install
+        run: ./Taskfile dev-install
 
       - name: Test package build
-        run: make build-backend
+        run: ./Taskfile build-backend
 
       - name: Verify CLI installation
         run: |

.github/workflows/ci.yml

@@ -2,43 +2,53 @@ name: CI
 
 on:
   push:
-    branches: [main, develop]
+    branches: [main, dev]
   pull_request:
-    branches: [main, develop]
+    branches: [main, dev]
 
 jobs:
-  test:
+  lint:
+    name: Lint (ruff)
     runs-on: ubuntu-latest
-    strategy:
-      matrix:
-        python-version: ["3.11", "3.12", "3.13"]
-
     steps:
       - uses: actions/checkout@v4
-
-      - uses: oven-sh/setup-bun@v2
-
-      - name: Install uv
-        uses: astral-sh/setup-uv@v3
+      - uses: astral-sh/setup-uv@v4
         with:
           enable-cache: true
-
-      - name: Set up Python ${{ matrix.python-version }}
-        run: uv python install ${{ matrix.python-version }}
-
-      - name: Install dependencies
-        run: make dev-install
-
-      - name: Run CI pipeline
-        run: make ci
-
-      - name: Build documentation
-        run: make docs-build
-
-      - name: Upload coverage reports
-        uses: codecov/codecov-action@v4
+      - name: Set up Python
+        run: uv python install
+      - name: Install deps
+        run: ./Taskfile dev-install
+      - name: Ruff check
+        run: ./Taskfile lint
+
+  typecheck:
+    name: Typecheck (mypy)
+    runs-on: ubuntu-latest
+    continue-on-error: true
+    steps:
+      - uses: actions/checkout@v4
+      - uses: astral-sh/setup-uv@v4
+        with:
+          enable-cache: true
+      - name: Set up Python
+        run: uv python install
+      - name: Install deps
+        run: ./Taskfile dev-install
+      - name: mypy
+        run: ./Taskfile typecheck
+
+  tests:
+    name: Unit Tests
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: astral-sh/setup-uv@v4
         with:
-          file: ./coverage.xml
-          flags: unittests
-          name: codecov-umbrella
-          fail_ci_if_error: false
+          enable-cache: true
+      - name: Set up Python
+        run: uv python install
+      - name: Install deps
+        run: ./Taskfile dev-install
+      - name: Run unit tests (no network)
+        run: ./Taskfile test-unit

.github/workflows/packages.yml

@@ -0,0 +1,68 @@
+name: Build Distribution Packages
+
+on:
+  # Trigger after Python CI workflow completes successfully and releases are created
+  workflow_run:
+    workflows: ["Python CI"]
+    types:
+      - completed
+    branches:
+      - main
+
+  # Allow manual triggering
+  workflow_dispatch:
+    inputs:
+      version:
+        description: 'Version to build (without v prefix, e.g., 0.1.4)'
+        required: true
+        type: string
+
+permissions:
+  contents: write
+
+jobs:
+  # Build Alpine Linux packages (.apk for x86_64 and aarch64)
+  alpine:
+    # Only run if CI completed successfully and was triggered by a tag push
+    if: |
+      github.event_name == 'workflow_dispatch' ||
+      (github.event.workflow_run.conclusion == 'success' &&
+       startsWith(github.event.workflow_run.head_branch, 'v'))
+    uses: CaddyGlow/homebrew-packages/.github/workflows/package-alpine.yml@main
+    permissions:
+      contents: write
+    with:
+      tool: ccproxy
+      version: ${{ github.event.inputs.version || github.event.workflow_run.head_branch }}
+      repository: ${{ github.repository }}
+      release_tag: ${{ github.event.inputs.version && format('v{0}', github.event.inputs.version) || github.event.workflow_run.head_branch }}
+
+  # Build Debian/Ubuntu packages (.deb for amd64 and arm64)
+  debian:
+    if: |
+      github.event_name == 'workflow_dispatch' ||
+      (github.event.workflow_run.conclusion == 'success' &&
+       startsWith(github.event.workflow_run.head_branch, 'v'))
+    uses: CaddyGlow/homebrew-packages/.github/workflows/package-debian.yml@main
+    permissions:
+      contents: write
+    with:
+      tool: ccproxy
+      version: ${{ github.event.inputs.version || github.event.workflow_run.head_branch }}
+      repository: ${{ github.repository }}
+      release_tag: ${{ github.event.inputs.version && format('v{0}', github.event.inputs.version) || github.event.workflow_run.head_branch }}
+
+  # Build Termux/Android packages (.deb for android-aarch64)
+  termux:
+    if: |
+      github.event_name == 'workflow_dispatch' ||
+      (github.event.workflow_run.conclusion == 'success' &&
+       startsWith(github.event.workflow_run.head_branch, 'v'))
+    uses: CaddyGlow/homebrew-packages/.github/workflows/package-termux.yml@main
+    permissions:
+      contents: write
+    with:
+      tool: ccproxy
+      version: ${{ github.event.inputs.version || github.event.workflow_run.head_branch }}
+      repository: ${{ github.repository }}
+      release_tag: ${{ github.event.inputs.version && format('v{0}', github.event.inputs.version) || github.event.workflow_run.head_branch }}

.github/workflows/python-ci.yml

@@ -0,0 +1,67 @@
+name: Python CI
+
+on:
+  push:
+    branches: [ "main", "dev", "dev/**" ]
+    tags: [ "v*" ]
+  pull_request:
+  workflow_dispatch:
+    inputs:
+      ref:
+        description: 'Git ref (branch, tag, or SHA) to build'
+        required: false
+        type: string
+        default: ''
+      target_preset:
+        description: 'Target preset to build'
+        required: false
+        type: choice
+        options:
+          - all
+          - windows
+          - linux
+          - macos
+        default: 'all'
+      skip_tests:
+        description: 'Skip tests'
+        required: false
+        type: boolean
+        default: false
+
+permissions:
+  contents: write
+
+jobs:
+  test:
+    if: ${{ !inputs.skip_tests && github.event_name != 'push' || github.ref_type != 'tag' }}
+    uses: CaddyGlow/homebrew-packages/.github/workflows/python-test.yml@main
+    with:
+      ref: ${{ inputs.ref || '' }}
+      python_version: '3.11'
+
+  build:
+    needs: [test]
+    if: |
+      always() &&
+      !cancelled() &&
+      (needs.test.result == 'success' || needs.test.result == 'skipped') &&
+      (startsWith(github.ref, 'refs/tags/') || github.event_name == 'workflow_dispatch')
+    uses: CaddyGlow/homebrew-packages/.github/workflows/python-build.yml@main
+    with:
+      ref: ${{ inputs.ref || '' }}
+      binary_name: ccproxy
+      entry_point: 'ccproxy.cli.main:main'
+      assets: '["README.md", "LICENSE"]'
+      target_preset: ${{ inputs.target_preset || 'all' }}
+      python_version: '3.11'
+
+  release:
+    needs: [build]
+    if: |
+      always() &&
+      !cancelled() &&
+      needs.build.result == 'success' &&
+      (startsWith(github.ref, 'refs/tags/') || (github.event_name == 'workflow_dispatch' && startsWith(inputs.ref, 'v')))
+    uses: CaddyGlow/homebrew-packages/.github/workflows/python-release.yml@main
+    with:
+      ref: ${{ inputs.ref || '' }}

.github/workflows/release-from-run.yml

@@ -0,0 +1,59 @@
+name: Create Release from Workflow Run
+
+on:
+  workflow_dispatch:
+    inputs:
+      run_id:
+        description: 'Workflow run ID to get artifacts from (check Actions tab)'
+        required: true
+        type: string
+      tag:
+        description: 'Tag name for the release (e.g., v0.1.3)'
+        required: true
+        type: string
+      draft:
+        description: 'Create as draft release'
+        required: false
+        type: boolean
+        default: false
+      prerelease:
+        description: 'Mark as pre-release'
+        required: false
+        type: boolean
+        default: false
+
+permissions:
+  contents: write
+
+jobs:
+  release:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Download artifacts from run
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        run: |
+          echo "Downloading artifacts from run ${{ inputs.run_id }}..."
+          gh run download ${{ inputs.run_id }} --repo ${{ github.repository }} --dir artifacts
+
+          echo "Downloaded artifacts:"
+          ls -R artifacts/
+
+      - name: Create GitHub release
+        uses: softprops/action-gh-release@v2
+        with:
+          tag_name: ${{ inputs.tag }}
+          files: artifacts/**/*
+          draft: ${{ inputs.draft }}
+          prerelease: ${{ inputs.prerelease }}
+          generate_release_notes: true
+          make_latest: true
+          fail_on_unmatched_files: false
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Summary
+        run: |
+          echo "Release created/updated for tag: ${{ inputs.tag }}"
+          echo "Artifacts from run: ${{ inputs.run_id }}"
+          echo "View release: https://github.com/${{ github.repository }}/releases/tag/${{ inputs.tag }}"

.github/workflows/release.yml

@@ -30,7 +30,7 @@ jobs:
         run: uv python install 3.12
 
       - name: Install dependencies
-        run: make dev-install
+        run: make dev_install
 
       - name: Run tests
         run: make ci

.gitignore

@@ -163,3 +163,8 @@ ccproxy/static/dashboard/
 
 *.wal
 *.duckdb
+.lazy.lua
+.ccproxy.toml
+
+make
+run