refactor: split to arbitrium-core (public) removing GUI/benchmarks

Remove private components for public MIT-licensed package:
- GUI frontend (React/TypeScript) and backend (WebSocket server)
- Benchmarking framework (BBH, GPQA, ablation studies)
- Docker microservices (Dockerfile.backend/frontend, docker-compose)
- Authentication system (JWT, PostgreSQL, bcrypt)
- API schemas for WebSocket protocol

Retain core tournament engine, workflow system, and CLI.

Author: nikolay-e

.dockerignore

@@ -122,9 +122,6 @@ mutants/
 .claude/
 *.claude
 
-# Node modules (will be built in Docker)
-gui/node_modules/
-gui/dist/
 
 # SSH keys (prevent accidental exposure)
 *id_rsa*

.env.example

@@ -1,42 +1,6 @@
 # Environment
 ARBITRIUM_ENV=development
 
-# PostgreSQL Configuration (for Docker Compose)
-POSTGRES_DB=arbitrium
-POSTGRES_USER=arbitrium
-POSTGRES_PASSWORD=change_this_password
-
-# Database Configuration (for application)
-ARBITRIUM_DB_HOST=localhost
-ARBITRIUM_DB_PORT=5432
-ARBITRIUM_DB_NAME=arbitrium
-ARBITRIUM_DB_USER=arbitrium
-ARBITRIUM_DB_PASSWORD=your_password_here
-
-# Database Connection Pool
-ARBITRIUM_DB_POOL_MIN_SIZE=2
-ARBITRIUM_DB_POOL_MAX_SIZE=10
-
-# JWT Configuration (Generate with: openssl rand -base64 32)
-ARBITRIUM_JWT_SECRET=your_jwt_secret_here_change_in_production
-ARBITRIUM_JWT_ACCESS_TOKEN_EXPIRES_MINUTES=15
-ARBITRIUM_JWT_REFRESH_TOKEN_EXPIRES_DAYS=30
-
-# WebSocket Security
-ARBITRIUM_MAX_WEBSOCKET_CONNECTIONS=1000
-ARBITRIUM_MAX_CONNECTIONS_PER_IP=10
-ARBITRIUM_WEBSOCKET_MESSAGE_RATE_LIMIT_PER_SECOND=10
-ARBITRIUM_WEBSOCKET_MESSAGE_RATE_LIMIT_PER_MINUTE=100
-ARBITRIUM_ALLOWED_ORIGINS=http://localhost,http://localhost:8765,http://127.0.0.1,http://127.0.0.1:8765
-
-# Development/Testing Options
-SKIP_DB_INIT=false
-ARBITRIUM_SKIP_AUTH=false
-
-# Server Configuration (for Docker Compose)
-FRONTEND_PORT=80  # Nginx frontend (public access)
-GUI_PORT=8765     # Backend API (internal, not exposed in microservices mode)
-
 # LLM API Keys (for tournaments)
 # LiteLLM reads these environment variables automatically.
 # Only set the keys for providers you plan to use.
@@ -83,17 +47,4 @@ LITELLM_LOG=INFO
 
 # Ollama Configuration
 # REQUIRED when using Ollama models (llama3, phi3, gemma3, qwen3)
-# Application will raise RuntimeError if OLLAMA_BASE_URL is not set when accessing Ollama models
-OLLAMA_BASE_URL=http://host.docker.internal:11434
-
-# Alternative configurations:
-# - Docker Compose Ollama service: http://ollama:11434
-#   (requires: docker-compose --profile ollama up -d)
-# - Native/local development: http://localhost:11434
-# - Host machine from Docker container: http://host.docker.internal:11434 (default above)
-
-# Optional: Comma-separated list of models to preload on Ollama startup
-# (Only used when running Ollama via Docker Compose)
-# Examples: llama2, llama3, mistral, codellama, phi
-# Uncomment to enable automatic model preloading:
-# OLLAMA_MODELS=llama2,mistral
+OLLAMA_BASE_URL=http://localhost:11434

.github/workflows/ci.yml

@@ -27,19 +27,11 @@ jobs:
           path: ~/.cache/pre-commit
           key: pre-commit-${{ hashFiles('.pre-commit-config.yaml') }}
 
-      - name: Set up Node.js
-        uses: actions/setup-node@v6
-        with:
-          node-version: "22"
-
       - name: Install Python dependencies
         run: |
           python -m pip install --upgrade pip
           pip install pre-commit
           pip install -e .[dev]
 
-      - name: Install frontend dependencies
-        run: cd gui && npm ci
-
       - name: Run pre-commit
         run: pre-commit run --all-files

.pre-commit-config.yaml

@@ -21,7 +21,6 @@ repos:
       - id: check-merge-conflict
       - id: check-toml
       - id: check-json
-        exclude: ^gui/tsconfig.*\.json$
       - id: mixed-line-ending
         args: ["--fix=lf"]
       - id: check-case-conflict
@@ -66,19 +65,6 @@ repos:
         args: ['--py313-plus']
         files: ^src/.*\.py$
 
-  # ============================================================================
-  # FRONTEND FORMATTING & LINTING (TypeScript, React, CSS)
-  # ============================================================================
-  - repo: https://github.com/pre-commit/mirrors-prettier
-    rev: v4.0.0-alpha.8
-    hooks:
-      - id: prettier
-        name: prettier (frontend formatting)
-        types_or: [javascript, jsx, ts, tsx, css, json, yaml, markdown]
-        args: [--write, --ignore-unknown]
-        exclude: ^(package-lock\.json|pnpm-lock\.yaml|yarn\.lock|gui/tsconfig.*\.json)$
-        files: ^gui/
-
   # ============================================================================
   # TESTING - MOVED TO CI
   # pytest runs in CI for faster commits (was slowing down pre-commit)
@@ -244,77 +230,3 @@ repos:
     hooks:
       - id: commitizen
         stages: [commit-msg]
-
-  # ============================================================================
-  # LOCAL HOOKS (Project-Specific - Frontend & Security)
-  # ============================================================================
-  - repo: local
-    hooks:
-      - id: sort-package-json
-        name: 'Sort package.json files'
-        entry: bash -c 'cd gui && npx sort-package-json package.json'
-        language: system
-        files: ^gui/package\.json$
-        pass_filenames: false
-
-      - id: tsc-gui
-        name: 'TypeScript type check (gui)'
-        entry: bash -c 'cd gui && npm run type-check'
-        language: system
-        pass_filenames: false
-        files: ^gui/.*\.(ts|tsx)$
-
-      - id: eslint-gui
-        name: 'ESLint (gui quality & security)'
-        entry: bash -c 'cd gui && npx eslint --max-warnings 0'
-        language: system
-        files: ^gui/.*\.(ts|tsx)$
-        pass_filenames: false
-
-      - id: jscpd-gui
-        name: 'Copy-paste detection (jscpd)'
-        entry: >
-          bash -c 'cd gui && npx jscpd --min-lines 6 --min-tokens 50
-          --threshold 3 --ignore "**/node_modules/**,**/dist/**" src/'
-        language: system
-        files: ^gui/.*\.(ts|tsx)$
-        pass_filenames: false
-
-      - id: knip-gui
-        name: 'Dead code detection (knip)'
-        entry: bash -c 'cd gui && npx knip --no-progress --no-config-hints'
-        language: system
-        files: ^gui/.*\.(ts|tsx)$
-        pass_filenames: false
-
-      - id: type-coverage-gui
-        name: 'Type coverage check (>=85%)'
-        entry: bash -c 'cd gui && npx type-coverage --at-least 85 --ignore-catch'
-        language: system
-        files: ^gui/.*\.(ts|tsx)$
-        pass_filenames: false
-
-      - id: npm-audit-gui
-        name: 'npm audit (frontend security)'
-        entry: bash -c 'cd gui && npm audit --audit-level=high --omit=dev'
-        language: system
-        files: ^gui/package(-lock)?\.json$
-        pass_filenames: false
-
-      - id: docker-compose-check
-        name: 'Docker Compose config validation'
-        entry: >
-          bash -c 'for f in docker-compose*.yml docker-compose*.yaml; do
-          [ -f "$f" ] && docker compose -f "$f" config -q || true; done'
-        language: system
-        files: ^docker-compose.*\.(yml|yaml)$
-        pass_filenames: false
-
-      - id: docker-build-check
-        name: 'Docker build validation'
-        entry: >
-          bash -c 'docker compose build --quiet backend frontend
-          || { echo "Docker build failed!"; exit 1; }'
-        language: system
-        files: ^(Dockerfile.*|docker-compose\.yml|src/.*\.py|gui/.*\.(ts|tsx|json))$
-        pass_filenames: false

.semgrepignore

@@ -34,6 +34,3 @@ docs/
 # Outputs/Reports
 outputs/
 reports/
-
-# GUI Frontend (scanned separately)
-gui/